last executing test programs:

2m38.445595889s ago: executing program 1 (id=4933):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0)
r1 = epoll_create1(0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x9, &(0x7f0000000380)=0x102)
mremap(&(0x7f00004d6000/0x4000)=nil, 0x4000, 0x4000, 0x2, &(0x7f00001e2000/0x4000)=nil)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0xa}, 0x16)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil)
syz_emit_ethernet(0x95, 0x0, &(0x7f0000000100)={0x80000001, 0x8000001, [0x997, 0x8bf, 0xe4b, 0xc70]})
munlockall()
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r2, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8)
dup(r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2e, 0x100008, 0x0, 0x8, 0xf, 0x3, 0x3, 0xfc, 0x0, 0x1, 0x0, 0x4000000, 0x0, 0xff, 0x0, 0xfffffeff}})
socket$inet(0x10, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0xffffffffffffffb0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002b0009ef"], 0x14}}, 0x84)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000260000002300000000000000", @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10)
sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000210001000000000000000000020000000000000000000000050019"], 0x24}}, 0x0)

2m36.534507694s ago: executing program 1 (id=4939):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000)
write$char_usb(r0, 0x0, 0x0)

2m33.279145172s ago: executing program 1 (id=4952):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)={0x44, r1, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0xffffffff}]}, 0x44}}, 0x0)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, r1, 0x700, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x60}, {0xc, 0x90, 0x2}}]}, 0x54}, 0x1, 0x0, 0x0, 0x84}, 0x800)
pipe(&(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
tee(r2, r3, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x20000000}, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x8, 0x800000, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x0, 0x2000006, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast, @multicast1}}}})
ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000100)={0x0, 0x3ffc, 0x0, 0x1, 0x35, "ffff00"})
r7 = syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r4, @ANYRES16=r7, @ANYRES32, @ANYRES16], 0x174}}, 0x20084001)
io_setup(0x7, &(0x7f0000000000))
syz_open_dev$ttys(0xc, 0x2, 0x0)
open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x80, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x0, 0x488, &(0x7f0000000180)={{0x21, @empty, 0x4e23, 0x1, 'rr\x00', 0x4, 0xfffffffe, 0x41}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x4e22, 0x1, 0x4, 0x10000005, 0x8}}, 0x44)
r9 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r9, 0x707, &(0x7f0000000200)={&(0x7f0000000140)=[{0x63, 0x200, 0x0, 0x0}], 0x1})
ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x8001, 0x4})

2m32.330936093s ago: executing program 1 (id=4958):
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240)="23591363adf94c4a3525c373b8be3e8d2672", 0x0, 0x12})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x7, 0x8, 0x0, 0x2, 0x3, 0x0, 0x8, 0x6}, {0xffff1000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x2000, 0x8080000, 0xc, 0xd2, 0x7, 0xc4, 0x0, 0x0, 0x8, 0x3}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x0, 0x9, 0x0, 0x8, 0x0, 0x4}, {0x80a0000, 0xeeee8000, 0xe, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x3c}, {0xdddd1000, 0x0, 0x0, 0x78, 0x5, 0x1, 0x2, 0x0, 0x0, 0xff, 0x1, 0xa1}, {0x0, 0xeeee0000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x2, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0xa, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000}, 0xddf9ffdb, 0x0, 0x0, 0x110, 0x0, 0xf801, 0x0, [0x80000001, 0x0, 0x7fffffffffffffff, 0x1]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2m32.093191242s ago: executing program 1 (id=4961):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882)
r5 = syz_io_uring_setup(0x1205, &(0x7f0000000780)={0x0, 0x3, 0x10100, 0x3, 0xffffffff}, &(0x7f0000000400)=<r6=>0x0, &(0x7f00000003c0)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1})
io_uring_enter(r5, 0x567, 0x0, 0x8, 0x0, 0x0)
r8 = timerfd_create(0x5, 0x40800)
clock_gettime(0x0, &(0x7f00000001c0)={<r9=>0x0, <r10=>0x0})
timerfd_settime(r8, 0x0, &(0x7f0000000000)={{r9, r10+60000000}}, &(0x7f0000000180))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480))
r11 = socket(0x15, 0x5, 0x0)
getsockopt(r11, 0x200000000114, 0x2710, &(0x7f0000001e00)=""/102400, &(0x7f0000000040)=0x19000)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
r12 = dup2(r0, r0)
readv(r12, &(0x7f0000000600)=[{&(0x7f0000000280)=""/139, 0x8b}], 0x1)
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000380)=0x1)

2m30.578787589s ago: executing program 1 (id=4965):
syz_open_dev$ndb(&(0x7f00000002c0), 0x0, 0x0) (async)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x8, 0x0, &(0x7f00000023c0))
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
r4 = getpid() (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) (async)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r7}, 0x10) (async)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in=@multicast1}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x1}, 0x0, 0x0, 0xa}}, [@mark={0xc, 0x15, {0x35075b, 0xfffffffa}}]}, 0x104}}, 0x0)
sendmsg$nl_xfrm(r8, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) (async)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000003c0)={0x7, {{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00', 0x6}}, {{0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1c000000}}}, 0x108) (async)
ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f0000000080)) (async)
mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)=ANY=[]) (async)
recvmsg(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000100)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/84, 0x54}, {&(0x7f0000000180)=""/88, 0x58}, {&(0x7f00000018c0)=""/4096, 0x1000}], 0x4, &(0x7f0000000300)=""/212, 0xd4}, 0x2000)

2m15.487912635s ago: executing program 32 (id=4965):
syz_open_dev$ndb(&(0x7f00000002c0), 0x0, 0x0) (async)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x8, 0x0, &(0x7f00000023c0))
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
r4 = getpid() (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) (async)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r7}, 0x10) (async)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in=@multicast1}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x1}, 0x0, 0x0, 0xa}}, [@mark={0xc, 0x15, {0x35075b, 0xfffffffa}}]}, 0x104}}, 0x0)
sendmsg$nl_xfrm(r8, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) (async)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000003c0)={0x7, {{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00', 0x6}}, {{0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1c000000}}}, 0x108) (async)
ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f0000000080)) (async)
mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)=ANY=[]) (async)
recvmsg(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000100)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/84, 0x54}, {&(0x7f0000000180)=""/88, 0x58}, {&(0x7f00000018c0)=""/4096, 0x1000}], 0x4, &(0x7f0000000300)=""/212, 0xd4}, 0x2000)

49.514479478s ago: executing program 4 (id=5236):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
sendmsg$can_j1939(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x44000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = socket$inet(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000004880)='lo\x00', 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'})
setsockopt$inet_mreqn(r6, 0x0, 0x20, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f00000001c0), 0x0)
r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000000c0)={'das16m1\x00', [0x4f2a, 0x1, 0x10000, 0x4, 0x1000, 0xcc7, 0x8, 0x7, 0xa, 0x6, 0x2, 0x0, 0x1, 0x1, 0x6, 0x101, 0x4, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa3, 0x0, 0x20001e58, 0xb, 0xe69, 0x3d, 0x8, 0x4088, 0x0, 0xfffffff8]})
ioctl$COMEDI_DEVINFO(r7, 0x80b06401, &(0x7f0000000040))
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000300)={0x5, 0x800a, 0x7fff, 0xfffffffd}, 0x10)
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4)

48.308965289s ago: executing program 4 (id=5239):
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0x14, &(0x7f0000003480)={0x4, 0x0, 0x4, &(0x7f00000001c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x0}, 0x2)
io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, &(0x7f0000000000), 0x1)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[], 0x0, 0x34}, 0x28)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {<r1=>r0}}, './file0\x00'})
sendmsg$IPCTNL_MSG_EXP_DELETE(r1, 0x0, 0x4004815)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
accept4(r2, 0x0, 0x0, 0x80800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/shm\x00', 0x0, 0x0)
unshare(0x40400)
pselect6(0x40, &(0x7f0000000180)={0x1f, 0x0, 0x3ff, 0x0, 0x9, 0x10000000000000}, 0x0, 0x0, 0x0, 0x0)
read$FUSE(r4, &(0x7f0000002480)={0x2020}, 0x2020)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a11800150006001400000000120800030043000040a8002b000a00034006000dc3036010fab94dcf5c046109d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196f66112c88a2ddddbbb219c6c09136dd481c417898516277ce06bbace80177ccbec4c2ee5a7cef4260027836b0d17a58af5d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f7a5025ccc89e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5", 0xd7}], 0x1}, 0x20040080)
r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000002140)='/proc/asound/card1/oss_mixer\x00', 0x600000, 0x0)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FD_FRAMES(r7, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'lo\x00'})
bind$802154_dgram(r6, &(0x7f00000001c0)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0202}}}, 0x14)

46.911079706s ago: executing program 4 (id=5243):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffa}, @ldst={0x3, 0x1, 0x4, 0x9, 0x5, 0xfffffffffffffff0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x3}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x4}, @map_fd, @call={0x85, 0x0, 0x0, 0x66}, @ringbuf_query, @alu={0x4, 0x0, 0x4, 0x0, 0xb, 0xffffffffffffffb4, 0x4}], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xd9, &(0x7f00000000c0)=""/217, 0x41100, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x1, 0x3, 0x1ff, 0x5}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000200)=[{0x5, 0x5, 0x0, 0xb}, {0x3, 0x5, 0x10, 0xce92423179f19246}, {0x2, 0x2, 0xa, 0x2}, {0x2, 0x2, 0x4}, {0x3, 0x2, 0x7, 0xa}], 0x10, 0x5}, 0x94) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@fallback=<r1=>0xffffffffffffffff, 0x9, 0x1, 0x80000001, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0], <r2=>0x0}, 0x40) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wg1\x00', <r3=>0x0})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000500)=0xffffffffffffffff, 0x4)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000480)={@ifindex=r3, 0xffffffffffffffff, 0x22, 0x2000, r0, @value=r4, @void, @void, @void, r2}, 0x20)
sendmsg$unix(r1, &(0x7f0000001940)={&(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000018c0)=[{&(0x7f00000005c0)="1fda287c934a48e50f6573352dfdfaa91d5864f1c882ce2d19d08e0e6dac4251cc7511cc9a0d762f38e4940d05c829f59f4de010a067615f6d5d5b83ddb51dfafa265338d04e290f191b98f98987cfa87b280df2db1aeb4e9b6c53738e333710d5ed856bff76c66a572b78f8b14e00976bc00347ab73da8e702aeda51c162dade91bda6a91b169e40b386aac015e1f08f1d9119190cbcd157879cfc850a93189c8b9e6", 0xa3}, {&(0x7f0000000680)="e75247c6ab8f", 0x6}, {&(0x7f00000006c0)="e671301fdf98f7ff457694c838b5f343599a9bf68ddadc57afe31d07b506dae1bc13b90b32863a98ac17a2f791d9f8ca034a2fe9cb80a84639", 0x39}, {&(0x7f0000000700)="c26039e26cb9e9b566e1eb51b8ab4ec930846897458b2de5fd1cc1e1f8732c888b768bce4c0e36e5025ea32799574666f46a7f5cc01b7ed7ccedbeca5ae42194ca58e88bf3144722ab3ede7072eb8ddee5b462ee2c3fea282729ec723b79b5c1ff534d7ac5eef9245691b54997911ff7c40d06f7cc028c5356ade69b9a74f09c4b96c81e75076edd61a4ee8d61d5887bcd", 0x91}, {&(0x7f00000007c0)="ddcb0981410f72b7e684742887993573143e5f604a3f5f2fff33383d4f75b6fc72fbda716d218b4b2d00ca9be2c185df609962d2177ddc641d2b5bc06730574ca680325dfa5eeeb6fe2b901bada85bac01dcbdb750d8d39ac21c2938ba379e54230e5612a14c9fdc0769ad5ae30faff92b1d99162d4e6ced0e1b30aeabcf5910e58dd815463927554077120d8f46521494784b41c7b25d2396fcfebfc643ee02080d15d2db86895b42339e63a20a2f295ca5485afcdb861a5e65d1b829d0e51ced76da3aa589a0a4d98ac3788ba24dea8cf7e7f47cb0e28fef47be9262e801f099a01675b8a0d99b58fd055524c107af1525677d1c", 0xf5}, {&(0x7f00000008c0)="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", 0x1000}], 0x6, 0x0, 0x0, 0x4000}, 0x4080) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001bc0)={0x6, 0x9, &(0x7f0000001980)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x48}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}], &(0x7f0000001a00)='syzkaller\x00', 0x101, 0xeb, &(0x7f0000001a40)=""/235, 0x41000, 0x8e02aca1356fb5e3, '\x00', r3, 0x25, r1, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x0, 0xb, 0x4, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @value=r1}, 0x94) (async, rerun: 64)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'gre0\x00', &(0x7f0000001c80)={'tunl0\x00', <r5=>r3, 0x80, 0x7847, 0xf203, 0xf755f957, {{0x7, 0x4, 0x2, 0x4, 0x1c, 0x64, 0x0, 0x1, 0x4, 0x0, @multicast2, @multicast2, {[@generic={0x86, 0x4, "6eab"}, @end]}}}}}) (async, rerun: 64)
r6 = creat(&(0x7f0000001d00)='./file0\x00', 0x1)
syz_kvm_setup_cpu$x86(r6, r1, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000001dc0)=[@text64={0x40, &(0x7f0000001d40)="66baf80cb874258285ef66bafc0cb800200000efb9640b0000b8ffffffffbaffffffff0f30660f38307b00660fc7735966b878008ed0c4c3054c33020f01d164440f78aa86aec161b95f0a0000b8cf464a7dba6736fe060f30f247ab", 0x5c}], 0x1, 0x3e, &(0x7f0000001e00)=[@efer={0x2, 0x8000}], 0x1) (async)
openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000001e40), 0x2, 0x0) (async, rerun: 32)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001ec0), r6) (rerun: 32)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000001f80)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x30, r7, 0xa01, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x28040040) (async)
r8 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000001fc0)={{0x33, @rand_addr=0x64010102, 0x4e20, 0x3, 'lblc\x00', 0x0, 0x3, 0x6f}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x2000, 0xa8, 0x944, 0x7}}, 0x44) (async)
ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000002040)={0xfffffffffffffff2, 0x1, 0x3, 0x6, 0x2, 0x0, [{0x6, 0x1, 0x6, '\x00', 0x2}, {0x5, 0xdb9, 0x4, '\x00', 0x2182}]})
read$FUSE(r1, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}, 0x2020)
prctl$PR_SCHED_CORE(0x3e, 0x0, r9, 0x2, &(0x7f0000004140)) (async)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000004180)={<r11=>0x0, 0x98, "c02dafeb8f1780467363935b36e024acd2ac13af8a2fcac3d167d04d08348d27dccb5b842996e7621e04d2f19888be9acbcc2e7162486f5ddb934e60b1d9df9f7d36469706eca08bc9446bf426542a54d987ea368b0719506c42be260542f1f297fe34f1edc6ceceee34ab2b535555e3e43b3ae4e4373037a29b3a90026f3bd194ae633c58da5d72983adf3f889a5898f34248c870b91d59"}, &(0x7f0000004240)=0xa0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x1f, &(0x7f0000004280)={r11, @in={{0x2, 0x80, @remote}}, 0x400, 0xa}, 0x90) (async)
sched_setscheduler(r9, 0x68e2669404ed5fbe, &(0x7f0000004340)=0x5) (async, rerun: 64)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r10, 0xd000943e, &(0x7f0000004380)={<r12=>0x0, 0x0, "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", "d6bc9b7399757ebf9a0bf51045197e97d4a444c5f343223e617b2bdabcb4337b6e45088661ae6b31a71c9ae0f9053d14e8f71c7e06d25657e5b1dfe46115eca2c89d33ce64f4e79d79d6f89492ddd2f792e86ab7f6084e281c743f25d78f0cf12d67154a3c7878c8cfeb363221bab54175db0f988e1fd727187537f5180247dd63ffdc2977f38c446f834888e1ddd46ae88696cba8d766c4c120bf847d5bf679219578c1feebc074e28fa9d58ab94d35ec894ed3b884bce2660a62b09995fd16dfd496845b156b1907747cca49318af4321618e612105c5c336ddbed977be48383b90a04af5c9ab76a39d4c8ba01bc9668107fd51071a07f5d8753c6de7c88614aca32107554727338cf06a2104263033ecbdf4bb21182ec09ce770ae10a12377c11820775e912dfca1c4d356efe5fe1a02bf549b6ed2ccd83540b9c96ccecc26a74ebf25d05efe5fabcc1e3c2cd64fd6df8ad97f4ebf0f4aa79177b8456efbbaa640834a2e85d6fb91ae269a6ca756ef133da562e29aa9bb264516a72345839400f4921c2361af9ef7b90d97e276fae300db7ff6402bdd80d395354f20822b5a01255c24e756fb06dff952f8d9c98c507ae37256e99494962a55288f77dce786ba578f07399042b2cbb979bb30b04d69fdef7b089b54e63597505ed5cf5f30b480bcc584ea3e08f55ea1d48af657126a6efd51089e95a45290e8beb7ab55c437500f76fe48e9b5208b0ad508a151cd55c758c533946927636e4bf6e55a3386e19cce83c57848beadaf86f0aa077cbc0d761d0d15c2ce6c3fdd38f8a45bde8f369ae3d12aa986dec472b116691ce9222ce8be995f41721cd205c96e1cb3d743bb9086b460d73ab8bff9f895d9502eec360ef2afc77c426bfebe5f49f1dd946e3b4fab93c05995a51b84c454b70af4840315d8d50f4198dffaace5ff1ee6ac9384c63db1bf34c9f37af05cee532c4ffb49d0ac94bcb9d9d8c24ac256cbe998dc62d1cf9739ee662193498d77442acbf43537b3d06104ac11ca163b0af9dfae867d57c076fa416f9bde6a1fee6cb315fdc92ded67530b468a1b0146e9aa4a5df93bb1eb1d3fc495d3dd5d3e315a5c8ea48cdc4d3b0f3a070025c6b6146e5872bfca9f2fae869a45f9aebb2af09a0e0976b8531b3fb4db4e0bf58b5e5068684fa4f7ae166802ef6e351fdd29b498b01545003e9844e844b18ca739bf1efe31a2fdcec009b5ee9668b599d27fea6242e41b30699531d588f5fb45a77aa6b68a7396ad4e2f69fe589a3f1db391a639d7dbbe70fa9436f293167dea6c3e9db175c72b3b51d4feb56e3fe88bc6bb221bf53683630f9fbd007e4404ab0c781523b217fa919a63f6c33280d56a60716cb3733087ff90773279c4882147e86034aa89ae6ff529d9c003c2b43b197313d2ed70da818748c7b6c7162ef06f639f5f0eeede6ffefe7a125ea9f65d6a14543fb363c6be641f2431f6d4692c0e2275bdb93734056ed45b5464af7cc9dbdf4061451ea5ecbdaa1a3849db707b910f0a00bfe94ebe077518a019f2d4435a975fd956cf8aba03e4ff2ef6a893b0d6089be16fee845ca50fb5868dc1f9d207a20eb7b04ffef8c527954d4a47cdcc13e5c95544a5d9d5a7fefd5aba1e3793aacc9824ae2346710cba5b453cbcc4da1c46ac35f21867025954dbbed08961daf09b72a7aaaaa7f403e9eb2440277b11fe4524d7e5f348e213f9c400843b2703fea3924165429e5e09943a2b6305ae7f83b9ba634a57e17bd79b24378c1f79a3a61c3d273faf0db185ce0ed9019ca2aee7ff6232c99a145f57c50a86fb811999e0cc51f27b5eea2840ab9336cc3872c8a83c6b20195c40298033a66e206cf5fc758ba9c9e8753b794d12b4cc6910b146d016da4a40e3a513347e210479a9674ee5b0ed76b3d5d717ebe4ec6bbb607cff4491810a23b4c8b67bef023ee39c8c611e0449f63dee931128e23ac4c084d22fa8cdb67d10330fb987e4d61bd790416c873ed653634e1c8228c32eb235f82a3d2ef92d008cfdc83e1f13125e249ae1d4a735fb34f6175d6740e199b3f392061914afba60d94d9866b41d9fd9baa8ed04e47e3f972aca0e795bb93ba9898a267cab694a58dbd8e94b9c290e28840d44bc23156fe43b161652666bc226da928d540fd4a9fe9d06ca39135accb43731852e7593217e37f01d876ef7720b054f95b49658e185b493597bb2a49256694d0ddd2919992e9359e43fba07661022b88e4de4d5c0544396e5309326e2c89f1d5bdab9f3e9c7bb1b752c6c0c34e82a98a9d6b2750ffc659235d60665f74b15b1cdd703a8c1447dea633cc5a020f9034cb88a9383c1f33d61f3f1f58446af644d4ebdfef93efb8bb61fbd53922d1ff7580be26b914f864ca20c2407417348a50a4b74c47ed273d007b7cc231e4218f6c85bb7dd33176b237a63f27706781785fd641dbb23677ab0c8465d9e595aea218874f0eabdd3743cf49fb6685913e5b7c12dd139439df87c1259e5f5e77e3ad548e750f2df4b61fc92286fa7422aa2b04c7d7dff828c54a934fade230e7f0cebb24383739a7b077170e2317122f7f6462c53845838aa46c852e1531fecd0056c07cc9196d38cd37674c5bbcaee4ef22fac5c346a21fcfff341586b0ea20fe46531cc33da1c36a361cf7accf16683207934329aa304778b4b4fba7681a99cc373887a76036ec8ea90be03f3606c0e416609492e164d5dba6868eb3114aa40afc025842ec4d9337fef30d9542b84a696c95e96e1935907f36c23b9e808e3bd2ea9120980164578f628a8be23bb254d25a5732969cc17394549c68b8cd4b1cb389c681d1ceb719087adb071de426475327a72e4fc3fb10136b25986c889970b49ede1fe4cca66541af634507909184592d5c72d9e86fe1441795a09695130f62e34b655921db9f355a231abbefbc2d839b5c8b737f1b33195c17fea4deaaccc81807c98fefd9281861fb19e8d8c1e055412a0c3ffa6f6c7b7f99cc73c279d152994ad006c1914209a06cd8a6bb5db563725ea5031d6fb9a6ea37f46d9b4637188700ef8d8f3848a3c2e94cb7d2b140006008165939fac8d5c4484edbdfad67c3109e4472e03d69191415da98e67f772dfcd1bf03e12be90fe9b546d3550506cc13f63354966a3457d95a1f9c04e002ec2d076f90d38e799e6e09bd583c3dc2e50726e0dccfd8e1a66b74db871112b612f85eb161c061a7d2c3dcd6dd5707f746c8a8655508d7f475de8be7d8e09fcdfa0542966c2bbacda3422ae0073874b213c5b317efad1ae5937bbdd4c706fc9588c1ba8d410b58524a42de89f3a0856bcf9b22ab9a1e5c5276e8a613652970e928442ae4dd2428b9b0da879979474fa48ea9cfa01b6cef268c45a11fc7e7e424fc566021b0ffe9568c9def1abbd6a34e831f9697dd3dc41f31bdf85b0c80cbc69b7b4c39341119ddb528f0ff7db69fb296c1ddd12fc771c8003d10a40b8ac49c8abdd6618b14000c684e299b8b82067ebd811895fca5a496202ce06215e9bd380e60571fde85dee3e90cd50188b79eac3a24b4aed0c7bf1d23aa4e48f45efc22d8459bb8c140a4b3882df928edd2b51cb21550a09dae5398a5c5d0711995a17063dcb2177e8b99572a371a2a68671c72b78c25db97d1834a302dcd0c1bb98c470d6bf84ab3b120ae3a2fe475a21322b01e4e438c5bf82460cd264afc6e1ae8d89376ca726e952f70be9c81139bfe99248806640eb0838a6a68141f8e2a0acba8d1ea1ba8898b4d343d21e538b5daf7460747bbb9438b9e1fb1b0b7ab0a770327eae0aa0a17f870dd7c48bc9d3ab74c93dea245dc290e3a323fb042d8d73e96f4f3c1cd1ccc9f34ed48990a8466855b1636d48ddc221c5609add526cf57e9376af01c271cb26c5f4a8057214efe5b21d6bf0e4fe4ae17ce81a5d3588cd43af79e0d423a0ee7cb9095e16bf82a27a2c6c032768a0e99fea9bec89d07910e6d4ae31984d55482c99863815b0ba3c61f9c6e845a1007ade9bff0308457b72f4969089fbffbb6ae254a22b83aeb2548597b714e334bd41a8c92c61aae0b6c87b4c935a87dffa54cbc9ff624a9fd285375112ea13bdb1f7b468aa44e4a8359f33acb932aca9cd13a6b512dac92f426c69ebddf6e85020b55a370e1b0faf6ad3eb16f8008c2d5fcc59bdee8619039ab4c8fe2d3c20c8b4528734be7c6235b22c6aaa175d80986230052c7ea0cc64abb1f26e3259dc262e889bcc5c032e9b9d16c4aa9576c97f63ddb0c73e2a79cf0e2a5fb37bb8987b30459778c900879b32dcec922bc520c4783f5c8f484a995d2d64273ec8d5feb146ad6599390d2f20f04b4eb3f507d08d81522990b120cf139931414eb07653119d1fa265fb88f62bd218d8457aacedb79ee8c8bcca9fc0586df6ecdf6a42d546dcb7e6e426dcc0782e084457b53b6eaec0c14bf3f1bf314d6f93f3cd17c4bf91e9d53a05545bcf51b16bdf4e6750b53525aaa149db5db6875ecc10fac831f50a634a3beb6825b7a9e0fe053e6ca4a67cfb5bd7552ab10947099c161618ece4c4f30f5e9fcab0fab8ca8c5346775498c7ffadb57e40a834736f6205fcf297c3d1737a68bbc2ffe2b5474c6ebcfb50fb96beb74d6f003e218216eab6491b19f28513ac9792b24935f47fa5aa922219b3491cafdca5408d9c516ede51b5d015f98e870922ffa3335ec6eaa15d968e04f2c07e10a0a46db2add767689100275250be5fb3179a3b8e733c1917c4b7edb238c4ecb3e5a71df10b0b0bc7dae5b17b81dc028055b0c717c55925b19656b03e7686355960e0323d9c531aa824b05aeca41f9850bbe7d07b8fba6e4668920ea00204ea066ec03d7a0c899e1355a626bcf1b5aff436a05ce3a321fa4352b184c421b075559eee16ebc47a0e7695bc434fe963ce942503b6c591c01f74d8a970a0ccef19ced94e020550cd3df1dd76308b125acfa4065fb325506a12a31ecf3f9f4190e52a3f8b969c2f2521b1384ca3e3a11c4c08fe4b7a0fdd9c5601f1be49974742516d5a7628cb4cc0a93893c7ce42e2779b93e48b11b2c35e7dd978691350ae6bbe9c35a1906f97fa78ed0f8fe06a3b115909ecfcb78c5e3aee2c033676e0c1c48c107a55c4b55d815678cb4070862d791a743caeb7a59c3dd7f859f6bad2300a1b5f0fadfb6074e2cd4ce06f3cbeefcd239ae2a9fd615e9cae696c19b83b7a2561c1f17d089f9f18ebaf95191851c19f248c7c5a593395de926668d043147480ae78b101302d3c1128e712bcf45a1b0e785c39c5cad763e27252de5af7b1feaa250a8826b2f81301540341f06e2042a6b453c42d99c15702291d3044c6e5c0380570ede1bd79bcaf2633ade6f134a9a4db111597a14e46102326ef94e15a60ac78236e18fc8356e7287c281"}) (async, rerun: 64)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000005380)={{<r13=>0x0, 0x0, 0xfffffffffffffff0, 0x7f, 0x7, 0x0, 0x6, 0xc0, 0x8, 0x3, 0x80, 0x2, 0xb5, 0xb2, 0x8}})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000006380)={r12, r13, "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", "877cac0e6dcbad626f20875e0643ded75ea62df20e2590d2210fbf0e808f8ca31128fa8eb3fe79206a9f05416fc8bef1bd610a224e89de843beb31e7a81eb3803db4a9329ed61f3d8e7e6b0cb74a1c13358fc5dfb08315b9e10ecc5bdb2520f49a9197d6d353d84dd5b8e6f068b665949d8fd4d61780171b49e0535d98cc6316d6b343fca03e7683a976513dae4e374e339c8c3da1cf19fa779bdf183d90e0ec1c9cd6897d0817a09df497f49956686c76b741d5e3f0732e68c73c6443aa3e7333861bd543cdad0eb7d700405985f3e706050efee7663ff9dd0bf320ddd11b21d773fe0b0ff7c03185f94c5f5405b3ed0abe032a581762272f89aff8398aced0636ab41817247589b87f6ae8bbfc979196ee0c7fbcfeb3ffbcb5726b659ea134e999d8f7e1b8c2624232bd96b1bd832e3184c0cd53f36e2ae30582a60cb5d32f25a34c3837f1ffd7c5e922182aa015915d81a9affc52627e918417a2cd45e7bb9bca5395986d3e98c4e886f910ed9005253eca3c8c163ef2b4ab798aaeb7bed6a4e02756666fe633473dbe831445d16894697b033113e65f2c1aaae4b76b67a7fc42c31661cbf72e7542f0e91f40e2abbd4ddcf003e1b769f9892b0711230d6b3038cbee2becabe256f61a671772fb2d1ad378e40c9f52f67a450a2f8e0567e6f0d8775ce7cc9da5b9ef6580d65ea87bb58653f1b38d04e0c52d2446c340245b51c5ca58d3931cf08524b90f9c600b4392bd989d6423a9df91aac349d1da8066be050d3c504354fb7132e15dc4e15b1461a23798769d6df3beeec0519b7c73310e08a774cc4e1bbb732d319a52bfb6c963b3a23e5fcc3b05a1ff965fa11fad9c0d0a90167ba9b4d19f18e31ee5ab1c4561c9bd62ba283f5fa784f607899c91a22e1fcc7e3b0637a891baece9526ca87c37ae0276df45f3211f792467a1c7c60f1d3d9c19d9505175dd9726612fd47e9c37c22173997685d83d429dcc0f3f357d3c5524b043db2f8c21df7a93be76b8aafb040fe36f4208f4c3a954b2347a88d1e15ecf18238222fc6ccb83b97dc5539a837d15182c01c615409807a210b64ac4178b10d1f9cb2ea2d55c22be9d2bac9a13939aad4946c284b7c188fdbadad33fc9ad92db6b113161b692eb1dcec4c1876bcc03f5a38f3d32066552be2ee00232885fae479037cff3ec0b4d14574f6a7def1233ff8b2f754a4522256b24208f1a3318cbba63d555f3840be8515c39b1448b1a894c152ea97187118448bc87e006de3ac09e1a7d8b8192651ba7c40dcac226efec2071a9311bad1361f99f269bcd1f84e73968df1cb90b42914f07b6592390c6ec996b3bcfe3faf43af4a6178f19678a57bae0d70e49c1c33caeb99f455abb0791b0c781cde3379b6a284b7c4c5c8a225a755255765032822d69f805e31d3b5c61012c09e14f1616b03b24e46c50dc469377e423303c57318227e2f3620811f47b13b3b035282b006433e2aa97dcd3df81c69af529187ad229a070b507ee1242919f7abd07aba7c1c1792336abb25fe229ebc14035f6216be6281dd75bb8b9dc5061d494189420115211547babbb43ba6b0693a71ffa6fff32c1cb306421d7cbb52fdd0db4e69d4854ba2cdda06f4a9857da9069291ba3686f4829179c41a816d2373c8870497052b7b624373fd9cbcd63b86e8c65a448dfadb3b856efff81c1c34605a3e4bdb9a1a1336eb552672d20dd6843200d6ffcdd12209fc35df0e324ec12e21f37b6ceb7cbc64a4a4173798885cdb6ff2a5e9e2485bd95f4f9840b8d993aba467796c956e9ce31be15005ad8753b517e7fbfe63c78e00fa380a412feb92ced69fc6d7ef4fd916617709f5e36a5bfeee23d5608a69422a99a5592e1e2c2f009a3eaecc2cf845e1af887e94de15ab4229db974772a7b3e3e76d02f2f75fb56ed8755768f290ef7df689b7243c9ad4a2c0336edf143d0ef3d0015be4edd67b44c552bd7bcf7fcec9b9f6f2dce6aa721400f6e6b788866237fee640b3c4d8efa69cd9c3080f5279e282c4a24a1565d636f0b7c5d55be660e068eb52eecfecdeee8e4d7aac66e4ad2d4477023184c7c261c5b9768c9a1f3fe6c20fadd81b76df296ec9195808025cfa780ca3b2ba3c2078f6ea1ca1be95f8fd3150d676265a8f776e71bd772ff1d24e331c21808f2c6011ad7ff82d85aa6f0848ae2a5c74771e177216179b421301ef79fbce72e69b89a04fcb3bd31bba3b730ac722ca6efe66c41bbc675f273cfe09ff5f6e0b53c5714467ff31c6eef387c63fd15c245aee387be03ecd08b28669f22abc6ad76c3ece07a1dc4aca81151f1ea4171ad67bfdd60fb612c62ee5576b29ad4dde99dd0a402aa766ea6a9e6976da2a38e826f600921de48bb152d390189592ba1c3ee66394f3b9fc4be9c661e447583e40400f1b832f787a09c6fa7d0bb89b14af8e95704619607de46aaf9301502386948efcd7b5a33d04235b11d5c1fdb0c8f4476d891fd5cc00735fdf0c84ee743c17252fddbfe9000b8121dd2a083c613efd835c61e1684dc8c64b61fb2d57ad33143d9cb39cca5fe95b824798e14a6d7f110c6a5afb40284915e56c741d0e254909f0c1b7c9bba3cb28275fc81ed02721febb42cbd9d6c6b1a6499773064d49879026d4f76125abe15bc7357bd693b79fe709bbbea34053dc3d20c03087543a24fd8ac2fefda49768b42a1a6a2b8095be0cfe30c7fcb4338b834098378204cef67becb5fc1ada5946230752e44b265298cdb64ca152bbe98bd3240a87840ff295ad139eabc26d7901653e8ab5efead10f628ceae3ce5352e7491e03f960dbb9f6f99d6510b51b7c2df9b3ea7e5cbb4726638b296efbc69a13bbbbd1740db0d4018cc9204d3fbcaf8f1882b258ef17b316762c9af614a0a0c5d0dd184e0a6127c42dbd703b406fa5b8753d301f2871debf7498f56f255273c675e5a1778fa34a0b572c7349746a1941a12de7c96e850ac90bb43cf230b095b06ce6bd48c55030fd982505c23348588438c63b69c149696b182f4345090e95a41ed17194842f31d1fc5b70c9d615667b778f33d220015ff8a7e4264c9f4d7fd34bdfe445dd3647b8787bfca79c0870aadaba7d863181643cf1dfb2374082d99b0d11fadaaa8af7becd28a4752d32faa68485aa6489aecc6d7d09426ca37439b3dbe65399c48401ebd5de8ab0f3746629163e757f130e299880d697a53b5c725688881d614876f42f5d698bcb8cd0524b769f5bfa09a06af040632cb540e9b8eb78def496904755f35685482e158d2aaa9cdb4a13f6a585d742b32dc644b0ed9a2314c0316f4bf8633e6170bb026256971187bb6375306c4e52c4b5931f407a9c91702a7cb7d2b121fe3b91fcdb30bc16e23a00c585268f3e80f486f73a71012ecfaac168c17e7c7da8a4e2e00f58f7e126667a52eef1ae52de56a67c19fe6e7c50d3f350d0455a59f979abe008330897fa9b97f32604584663cb47c68e52ba26f4723d83d37b190453d6c7135cfc643562329dd17e521adec878e747c5811f37d754b631c8b3d3c9e8300840014aecfdede6408f1a6a320eda16967775270ff979ae660773e204958546c2b28f94a2a55deb7c5887ab1fc1e59a1ade87666c257f7116d00a0c361803df1eff12b9eb1e29f384d4716146b88041791671787463c890c4aaefb0ac7f64b7c3e2d1b0ded74e1d832cfcb6726bfe57c06c81ac761252f30bc9245941f9177301e55fcedf832f43c919846af9375e9921a6ad8bf69ce3fa881b36acfaacec012fd766e039765bffb9e9daa02de106ae140832832f6dc6d7ee0a0638fcf57f51902ad633300faa48ad61d5eb0e661e366bdca09df3757eb7e46d536701f06b798d7b0ed6d6f2fd3fdbfecd3ce62123a71bc021f2908316d3d72200a034073a3942bd6d3bfc86b71b26e63318bc8bae1e8ca78d711e28cdc23c2db55212ba8ac6be227ff5d1eab3e7249798e81f0665378e0335592fafc758b616d38f59dcea8a1f3811821cf0bb19d5a07ec669b311463bb2735c7dc7048d8d5968734d2c970af26c8ae7a18aa23e0fe7b909493d460c5cff4f5407676f6b7ecb93e0e5cfc57a234d4ce3f7fcb1aefd15699f49826c342842df08ba486213da6950ea6e5fcca6b74733c82693782e0e7eb0bc743d5019c77488448a5c8b2c312935d3135c528759166a992a30f5824b534a72774fca34f4bf7b50cfd18fc4b55544971d0c91a033471d6cb4e5bf8f7d6983d29582e4e270c7fc0005a69dbea8ad6d49aa9ed616871b2929e3c6e99136b613aef3026dd0b55cbbdbb84d6aba6c072b8d72b5f55a0e84ea961918c465c562221d988685c28d3c853a1cd65ce16af812a1ec72dd2c5aeb0fa98e81e2553a3478ee6e1245d1c1d4b920b9f445714bae54528051e319964cfd505a5bbd550c97b3aa8227433d7267939ae11b29084583c9bdaede7418bedc83e2096542dbb40666b3b2cb69d058aab3a919676dc87ef711afa75d517b334b0cba26e43bf6f85bdaa792ee9135bd28cfb83bef243cd8fe2f5d3bd8e5240c9935572bd86a1e492defb83f01b412e3eac2e0bb7d34015b6fbc8c6b8ec2cc2a447e4ad3ef1558de49b03dce6b95c356e0c313f998d0379ab4068e8f818414c9d7b8358651a647a8735d8b3ab13cea1eb9ae4897ba9ec79b4cef00a472640e0b9b8ffbdb5296081c41f239f380ec5136af12de0b97c0a8c318c9240e0400034d8c136c2d0a0638d0383508d31019e8fc8cdd902c9565c9774ad4acf5985b988f2f10b5a7711f7c578eb700de3e606fc113ce1b79182de972b1f9d6651cedf15fe25d757594f25dafde6be8b41405f22be435b391c0ce08f28795c0809d5589186a3cd099c4814368fdbd7b52b8a39d2da6a77a713b61c94050df27c439f983a248106132ee2d34249207788a81e542134bfd3cce9b33e8d9ed0ec588048bd75020cebadd6d1c2116b4ff060ec7c2eb1ef95d38934602ffb23f242e9d9b024d0a9ab8f9a761c6eea65b608abbdfab5b89422c3292117dd760ee5660e78d3896008952c8898d3cea1ad5bf66507ea758bd76ec5fcd6b174b5d50d90f3685312f98440bd7c3bb174e0256eb6eb6e2e670db499c1902bac8aed64d71df97b926910415a6c16706269c7f8ae9d7bf537900f54b0ac903122b8b73831c39b6d3887ee4aba9e7244d8de35ba4df825ceadf6b3de52c7a4bc2766d55c280485b913060ed2b9dc4358415f83d7b75f3e2d67f176dd19ae6d4ef35dce1cd504ddd45d239ea2af6f1d63e806e60f40b614f17676bfb35d2f17c6be672b7fe5fa6470e9a942ea73df6a20166e7ff4090b190f1e4e48213c9d8124b359b1828649653604306362bb3841cdf3cfb5b9cd6c70d2ec0bf75ca42e4e8dbaeafdcd5b8ac63a0f3a"})
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000074c0)={&(0x7f0000007380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000007480)={&(0x7f00000073c0)={0x9c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x73}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x7}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40000}, 0x200000c0)
r14 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000007500), 0x0, 0x0)
ioctl$VIDIOC_G_ENC_INDEX(r14, 0x8818564c, &(0x7f0000007540)) (async)
openat$incfs(r6, &(0x7f0000007d80)='.log\x00', 0x345400, 0x78)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000007ec0)={&(0x7f0000007dc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000007e80)={&(0x7f0000007e40)={0x40, 0x0, 0xb08, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c811}, 0x24000000)

46.80366032s ago: executing program 4 (id=5244):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000140))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882)
r6 = syz_io_uring_setup(0x1205, 0x0, &(0x7f0000000400)=<r7=>0x0, &(0x7f00000003c0)=<r8=>0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1})
io_uring_enter(r6, 0x567, 0x0, 0x8, 0x0, 0x0)
r9 = timerfd_create(0x5, 0x40800)
clock_gettime(0x0, &(0x7f0000000100))
clock_gettime(0x0, &(0x7f00000001c0)={<r10=>0x0, <r11=>0x0})
timerfd_settime(r9, 0x0, &(0x7f0000000000)={{r10, r11+60000000}}, &(0x7f0000000180))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480))
r12 = socket(0x15, 0x5, 0x0)
getsockopt(r12, 0x200000000114, 0x2710, &(0x7f0000001e00)=""/102400, &(0x7f0000000040)=0x19000)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000)
r13 = dup2(r1, r1)
readv(r13, &(0x7f0000000600)=[{&(0x7f0000000280)=""/139, 0x8b}], 0x1)
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000380)=0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

37.6250519s ago: executing program 4 (id=5253):
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0x14, &(0x7f0000003480)={0x4, 0x0, 0x4, &(0x7f00000001c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x0}, 0x2)
io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, &(0x7f0000000000), 0x1)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[], 0x0, 0x34}, 0x28)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {<r1=>r0}}, './file0\x00'})
sendmsg$IPCTNL_MSG_EXP_DELETE(r1, 0x0, 0x4004815)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
accept4(r2, 0x0, 0x0, 0x80800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/shm\x00', 0x0, 0x0)
unshare(0x40400)
pselect6(0x40, &(0x7f0000000180)={0x1f, 0x0, 0x3ff, 0x0, 0x9, 0x10000000000000}, 0x0, 0x0, 0x0, 0x0)
read$FUSE(r4, &(0x7f0000002480)={0x2020}, 0x2020)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a11800150006001400000000120800030043000040a8002b000a00034006000dc3036010fab94dcf5c046109d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196f66112c88a2ddddbbb219c6c09136dd481c417898516277ce06bbace80177ccbec4c2ee5a7cef4260027836b0d17a58af5d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f7a5025ccc89e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5", 0xd7}], 0x1}, 0x20040080)
r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000002140)='/proc/asound/card1/oss_mixer\x00', 0x600000, 0x0)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FD_FRAMES(r7, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'lo\x00'})
bind$802154_dgram(r6, &(0x7f00000001c0)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0202}}}, 0x14)

35.475066721s ago: executing program 4 (id=5253):
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0x14, &(0x7f0000003480)={0x4, 0x0, 0x4, &(0x7f00000001c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x0}, 0x2)
io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, &(0x7f0000000000), 0x1)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[], 0x0, 0x34}, 0x28)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {<r1=>r0}}, './file0\x00'})
sendmsg$IPCTNL_MSG_EXP_DELETE(r1, 0x0, 0x4004815)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
accept4(r2, 0x0, 0x0, 0x80800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/shm\x00', 0x0, 0x0)
unshare(0x40400)
pselect6(0x40, &(0x7f0000000180)={0x1f, 0x0, 0x3ff, 0x0, 0x9, 0x10000000000000}, 0x0, 0x0, 0x0, 0x0)
read$FUSE(r4, &(0x7f0000002480)={0x2020}, 0x2020)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a11800150006001400000000120800030043000040a8002b000a00034006000dc3036010fab94dcf5c046109d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196f66112c88a2ddddbbb219c6c09136dd481c417898516277ce06bbace80177ccbec4c2ee5a7cef4260027836b0d17a58af5d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f7a5025ccc89e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5", 0xd7}], 0x1}, 0x20040080)
r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000002140)='/proc/asound/card1/oss_mixer\x00', 0x600000, 0x0)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FD_FRAMES(r7, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'lo\x00'})
bind$802154_dgram(r6, &(0x7f00000001c0)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0202}}}, 0x14)

19.318342314s ago: executing program 5 (id=5012):
socket$inet6_udplite(0xa, 0x2, 0x88)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000000300000000000000070000000500"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10)
ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={<r3=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
ioctl$int_in(r3, 0x5452, &(0x7f0000000940)=0x707987cd)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e04000f08"], 0x7)

17.284653506s ago: executing program 5 (id=5012):
socket$inet6_udplite(0xa, 0x2, 0x88)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000000300000000000000070000000500"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10)
ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={<r3=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
ioctl$int_in(r3, 0x5452, &(0x7f0000000940)=0x707987cd)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e04000f08"], 0x7)

14.610653813s ago: executing program 3 (id=5308):
syz_usb_connect(0x6, 0x7e5, &(0x7f00000006c0)={{0x12, 0x1, 0x201, 0x24, 0xae, 0x77, 0x10, 0x12d1, 0x1422, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d3, 0x2, 0x8, 0x6, 0x20, 0xcc, [{{0x9, 0x4, 0x3b, 0x17, 0xf, 0x8a, 0xe6, 0x93, 0x80, [], [{{0x9, 0x5, 0x4, 0x0, 0x200, 0x0, 0x6, 0xf0, [@generic={0xb6, 0x11, "9c493083be90ca9f5f49a39d378d9b4dfd9b6278465ddffe434d41fd88a9987c46f9e5ed709f4942d581a9c239a586d5b45c7f20e4712f9dc67f4162008d48bb9c0ecb0a273ee27afaa5aef7ba245aec4d1c08f6f091a7499646554d668e582f5faa5a2bf8ecb77417c6a717eaf1789711d0660c4075f0a4953ab420986fb679a2071a28dbbd3da65e0b38c5ac5facd5f5cf68acda254b0263c824755d76affbe48463305c29609a85853298a055a6c9f7a8dd0d"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0xb, 0x82, 0xfc}}, {{0x9, 0x5, 0xa, 0x8, 0x3ff, 0xeb, 0x9, 0x7e}}, {{0x9, 0x5, 0xe, 0xc, 0x8, 0xc0, 0x9, 0x0, [@generic={0x81, 0x2, "adb678c1f72b1fc8ff092b4177946e7fd7d158a9a49ff8b2cd5188c65dfe3665b555bc3d0dae5dc38ccfefb7e521bdd67a5444564c2fadecbf878e605f1da1df27e6b03faa0c34ca5ee0e6372e9e8ababa75d12310f8a54b21b1160477c251efbc8ef4374168e459eac451c4d5f5f705edbf98863f324ab50c358cc889c959"}]}}, {{0x9, 0x5, 0x1d, 0x0, 0x3ff, 0x8, 0xb, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x3}]}}, {{0x9, 0x5, 0xd, 0x10, 0x0, 0xf7, 0x8, 0xa0, [@generic={0x29, 0x3, "de003d27008cb84db6d65c9003967e8872c577dac1647a3377c1e0153d2343c31935bac31afeba"}]}}, {{0x9, 0x5, 0x80, 0x1, 0x40, 0x56, 0x6, 0x5}}, {{0x9, 0x5, 0xa, 0x38, 0x40, 0x32, 0x0, 0x9b, [@generic={0x41, 0x31, "735826da14f7b1449327d5823fc18acd649067712c2f07db3bc043edb379aff2376af4fa2d3193b4538ca508d23a43d55cb674ddc00ba11fcea715ed71d274"}, @generic={0x6, 0x30, "29dce933"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0x8, 0x6, 0x9}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x9, 0xc, 0x2, [@generic={0x82, 0x22, "6c13b9da828af70b354fa651e877b5a5f8ecab25c2dd2a3a7fac078a40acebbcf6109f51c2562c7926570a5da0345070d441a746078a2842320f41491b9d67670cd1294c1bbcf6c7f3c526c419ca363127dc69a623ac200b7ee0b095e045d43158f3a4e6783ed7ba6a1cf4e3a5bca2361ef48fab13560934644116bd8fbefd16"}, @generic={0x9e, 0x22, "66e3e7692ab4e4acfd9305e019943e5331b3be683b586123159a29ef9d449ebf580d17cae2f1175fc3480b67e6545bbfff7121a59790f905aa00c6ac8ddcccea970832a4ffd1e0382125a41d8d60a9300bf07281fa9ebf77f9bbc0bd3b010237d192ac551d563bca2f89c99023bcb3af16e4b99208d3f302ee4f08b0f85287798f7d59601e048cb808b327ef79c30837669beb478f20af71fa611d7b"}]}}, {{0x9, 0x5, 0xc, 0x1, 0x20, 0xef, 0xff, 0x4}}, {{0x9, 0x5, 0xb, 0x10, 0x0, 0x5, 0xd, 0xb2, [@generic={0x25, 0xa, "ca94970fa8207fd25b6310d323c86e1934f6e4ece615b562d904f0cfc03db475b0f62e"}]}}, {{0x9, 0x5, 0x2, 0x3, 0x400, 0x1, 0x5e, 0x0, [@generic={0x38, 0xb, "d3039f4f391b3ca78fafb188fa3b3fff9a393a96c5b7c27867ec4a4df5a4e16c48f8d1ca1beb3a04b4b6e0e1484dc5ccd5541ff9abf3"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x9}]}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0x5, 0x10, 0x9, [@generic={0x82, 0x7, "5b6fa7354a5138f3c49f00564ef5c1c31d1f0cbfae7ab794024499b6f8e745db8404744115ac61b97ee4c044c527b40db7f85bd2654b62357c247c9a0484d8d0a7908dacad73c6880393accb8e058b6c78e5068eb3b7e205e6f582590aea5de6779c2250550b3bc96c0362967af5e73f8c01428d1b6626361aac37d74a66f6a8"}, @generic={0x37, 0xf, "d529b0eb156aa51d4bf412ccfa54606e1cfebb5427da30d3978ee565373a045b93f420947a7e4919ce7ddee0fba1d0582e2570ca18"}]}}, {{0x9, 0x5, 0x3, 0x1, 0x400, 0x55, 0x9, 0x2}}]}}, {{0x9, 0x4, 0xfa, 0x8, 0xd, 0xff, 0x1, 0x1, 0x18, [@uac_as={[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x1, 0x2, 0x8, 0x1, "659b0e2958647395"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x0, 0x10, 0x2, "5e6ef1b1"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0xdb5f, 0x6a7, 0x3, "caf171"}]}], [{{0x9, 0x5, 0x4, 0x0, 0x400, 0x1, 0x0, 0x0, [@generic={0x16, 0x21, "ae6228dd6704701bcbc0c04a7cdbf00f66b0c319"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x10, 0x9, 0x3, 0x3, [@generic={0x46, 0x8, "bd6b4c94e4d2f1301409074eabcbb32b7b768ea4c46aa63706e40a96676b6718e90293b340feba64f4965d7ad549fee6ad7f8e31927fab53a521b36d5e7acea53ec38640"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0x3, 0x0, 0x5}}, {{0x9, 0x5, 0xe, 0x4, 0x200, 0x1, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3}, @generic={0x2f, 0x9, "877bb42f3b53f75f7b03a36ebc7b9bed9282f5fac38167be22b320016efdeb5658d7f5373bfee92df06e3c81d1"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x7, 0x3, 0x31, [@generic={0x5e, 0xf, "d5185bd311c6b2659a86357f02445d84803fd9b737b4314cc29fe9bcc2f6b80cc9d87fe3cbeb0d35a04d0d3565d3751c618cf68c1220d3026acefd92dfead33f4240487f5abc93958180d530137636f2caf7e6dfff76d343882ab9bb"}]}}, {{0x9, 0x5, 0xa, 0xc, 0x3ff, 0x3, 0x7f, 0x80}}, {{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x2, 0x24, 0xd, [@generic={0xa0, 0x8, "98cd91feaffd8391181055ca8c57a45b894588a58aeffcf349f9f1f4076907aade2035761ab58cdee9e85ed235d26fe08f13f6a5d324bec14a5ad370812ae6ec9d3f668843465a2bca39c9411d0febb21a8149021747ef24d5726421280a74a881b5563258ad8a74872b5c703cfb44607c012c5f1737ea6ffa220b00acac8672ec8af163836d7845c67853ffe8bf70f66e2e46f4c874391168d8f6261ef1"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x48, 0xfd, 0xd, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x40, 0x0, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0x4}]}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0x5, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0xb}]}}, {{0x9, 0x5, 0x3, 0x4, 0x0, 0x9, 0x7, 0x6, [@generic={0x3, 0x6bdbaea25726cd20, "c3"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x3, 0x3, 0x4}}, {{0x9, 0x5, 0x80, 0x5, 0x40, 0x7f, 0x5, 0x38, [@generic={0xf2, 0x22, "84a1bdaeea741e53f1a9fa17e2c9ae5af9d394d27e943e1fea74f47a6be9936a6de115575724a7183959126bd72c9acd9ea823821773afa8cb24657d00841b74e729f88af388b89568654b71ab1bc04a164ffe755e3708a95448ce760581a5e087bcd578537924b4b29f3b4fc3ab38b1a74549d87cadace0ea4c34f419cdb0f8a730093ae757e5e529cd8b9b39625d994816c30a8348bd90293a199ef7abc830a519dafc5843b3a2fb5fd524f249ebb161843d82a836cec90c5a9c4b04e108c480071c8ddfb54cfdcdacacc6a1a39621e3efe3075d174aaf8fda6bdeeb184eee6b591a6f1e05f51ae1668fa441cf2df9"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x9, 0x4}]}}, {{0x9, 0x5, 0x3, 0x8, 0x200, 0x1, 0xd9, 0xe7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9a, 0x1}]}}]}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x6d, 0x5, 0x5, 0x10, 0xc}, 0x14, &(0x7f0000000080)={0x5, 0xf, 0x14, 0x2, [@ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x7fff, 0x0, 0x9}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x80a}}, {0xc4, &(0x7f0000000480)=@string={0xc4, 0x3, "ddc230fdab46deb5afa376afd418daa81005f6fbb8526ad9c7cebbd1f80f9159324d0a8b85e0b843968a64aeefb3bba62e9af39f9b29d061f4c50abe41e8dbeffda08157efcfad3ca67fae8b2fa2fa4e2296e02c62908cb1b4e1e3092e5320967ebdea5b5a32349ab389ab3b84dc76263f10827aca2f9a6bd131db4dc0799f4af37614369786d461cbafca2ef0d7793c5898c67e01b67bb3c2f577eae44f70424d8146661fcbba5f248c6f35b55c83fb39786339d8a69bdde406104a27865022228d"}}]})
io_setup(0x6, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x2000000008b}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x820040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mkdir(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)=""/151, 0x97}], 0x1}, 0x7f}], 0x1, 0x140, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, 0x0, 0x0)
r4 = mq_open(0x0, 0x6e93ebbbcc0884f2, 0x2, 0x0)
mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x1, 0x0)
set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))

14.50919371s ago: executing program 5 (id=5012):
socket$inet6_udplite(0xa, 0x2, 0x88)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000000300000000000000070000000500"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10)
ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={<r3=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
ioctl$int_in(r3, 0x5452, &(0x7f0000000940)=0x707987cd)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e04000f08"], 0x7)

12.029349904s ago: executing program 0 (id=5311):
r0 = socket(0x1, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
openat$rfkill(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r0, &(0x7f00000009c0)={0x0, 0x2d, 0x0}, 0x4044010)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x0, 0x0, 0x0, 0x0, 0x800, 0x6, 0x1000000008, 0x10000, 0xd7b2}, 0x0)
ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, 0x0)
add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
add_key$user(&(0x7f00000003c0), &(0x7f0000000280), &(0x7f0000000500)="78e56f648c3fe5df5d0a41e4d50090c434d8aaa93e95e3fec9e142d5e568ee20ef97fe1e4029509f12f4", 0x2a, 0xfffffffffffffffd)
preadv2(r3, &(0x7f00000006c0)=[{&(0x7f0000000480)=""/74, 0x4a}, {&(0x7f0000000540)=""/183, 0xb7}, {&(0x7f0000003540)=""/4096, 0x1000}, {&(0x7f0000005740)=""/4096, 0x1000}, {&(0x7f0000000600)=""/136, 0x88}, {&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000006740)=""/4096, 0x1000}, {&(0x7f0000000800)=""/196, 0xc4}], 0x8, 0x1, 0x1, 0x10)
keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x304, 0x0, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_stats})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001d40)=ANY=[@ANYBLOB="101300002d00090036bd70000100000004000000cb011180c708605d8a0c9549f671af21be3edd7313f3b3ce"], 0x1310}, 0x1, 0x0, 0x0, 0x20000004}, 0x84)
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c20000000e577ca5a84f0800451000300080000000019078ac1e0001ac1414aa030090781206183f25fc00000067001c0007000064010101e000000292e380499d657807b1f372392d9e524f371a570efdf6bc"], 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r5 = socket$kcm(0x10, 0x400000002, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0)
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000980)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x20, r6, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xf, 0x46}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40)
write$cgroup_subtree(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004700)=""/4097, 0x1001}, {&(0x7f0000007740)=""/4071, 0xfe7}, {&(0x7f0000002500)=""/4133, 0x1025}, {&(0x7f0000000200)=""/115, 0x73}, {0x0}, {&(0x7f0000000a00)=""/178, 0xb2}], 0x6}, 0x0)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x25, 0x0, 0x0)

11.162210531s ago: executing program 3 (id=5313):
r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00)
r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x141800, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x5, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0)
ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000100)={0x9})
syz_usb_disconnect(r0)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000080)=0x8, 0x4)
r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x2da8}, 0x18, 0x0)
landlock_restrict_self(r5, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff)
setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000480), 0x0)
close(r4)
r6 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1)
close_range(r6, 0xffffffffffffffff, 0x0)

10.390084544s ago: executing program 5 (id=5012):
socket$inet6_udplite(0xa, 0x2, 0x88)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000000300000000000000070000000500"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10)
ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={<r3=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
ioctl$int_in(r3, 0x5452, &(0x7f0000000940)=0x707987cd)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e04000f08"], 0x7)

8.460126486s ago: executing program 0 (id=5316):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0)
r1 = gettid()
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0)
read$msr(r2, &(0x7f0000048040)=""/102392, 0x18ff8)
syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10)
tkill(r1, 0xb)
futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
getgroups(0xfffffffffffffdb2, 0xfffffffffffffffe)
r3 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0)
execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
timer_create(0x9, &(0x7f0000000300)={0x0, 0x4000000, 0x1}, &(0x7f0000000500))
timer_create(0x2, &(0x7f00000006c0)={0x0, 0x6, 0x4, @thr={&(0x7f0000000100), &(0x7f00000001c0)="cfcb16b3ba70e9676cea3b0fb4ca3059786b29247394c62d9faebc6b5b470eebf5f7f6"}}, &(0x7f00000000c0)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r5, 0x8)
syz_emit_ethernet(0x4a, &(0x7f00000005c0)=ANY=[@ANYRES64=r4, @ANYRES32=<r6=>0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50d40b000078fffc829c95b7d04908db9dd2dbb179294352f1f0f76b4e0a46f76185b5ed4edad0a6c798e38906bc246dae6000e22d9eb488011f976d29083733b6ca6692052760efaf2dbca1a6edd4b51962130b2af3c25446346bc268ece168423fe59bf66d53561a08df8e3762173a9c376f49fc1e32258275aa5cd97aa6233c9b7e9d2a773f01ab1dbc613fd8bea443b105f437c07c98da83bc720273f6b3b7ceff5515d910336458bf3e7202061206500ab1fbd3158bdf2797282af6ab9ced1e4405c029c5553eef5ec921c7bf7d9cb468a2f9d9c79b919397029d0424a9645bea28"], 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000880)=ANY=[@ANYRES32=r1, @ANYBLOB="eaf924970bb772216c6d2a96a31f26f41a7bcd94b1ceff6bbbb9783845bc799c23f2be93dc6890e62fadbbd5718470ace8dc52751497e411058a4a98cf32c093e07ddc3950304dcb486c1409a72bebce7b854a953629b61b5c91dca99b7794ed0cb14091968ea9dfa94bcc87177b2e64cc559011100683f05deb2f48775e455cfdd9196b078466bf596a54eefa375a1aa00af40d71832757efc8ddb4ede7206de251153c18e435bfac9e37cd25b65fcbbba7c265d1fad5411d22d4dbd23e1eafba7cad62eacb0e835e792f02b70d60fe44"], 0x0)
r7 = syz_usb_connect$uac1(0x1, 0xb8, &(0x7f0000000380)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101"], 0x0)
syz_usb_control_io(r7, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000b00)=ANY=[@ANYRES8=r3, @ANYBLOB="fa5992100d214cdf8b9f074149118537ade7fac81f72893bde40f53524b8a30ad2ae15306dcd6c507e454ac734fe1cc416ba3003d17d38f1f2cf67e9c5a0cec8e8d7ebcf8ab0dc208b7fea953f3aa8c5ed32edf1c0de635055dbcaf19eae0027246d8f4d6bb48a11af95c4c17fc69ab575d634b400bf98f58e833e5a6429a618d23259c7521edffdaf11876b26829fecd2fa54e31c267f04cc5047c216c944c06295744c0a642ee3830e08b3b93d73022f502a08866d5ce0c4c6ad686f47c6f14a205849353e41f9d9b8097dca8fdbad312f10e50f071124103dc42ba8b57e26dcd2795d4e49f067aa998b49cd75892f55def069fdc08794e53edd5da045645df8c53c925daf0090e1359a781918ee9e5f55b66e552e0426dbea0c25875bbfac342ff59234fecab668435b617e7b97398a017713f245582f24a3c8ac6c7fb20e126b3be4d5afe9dcaaeeb477457d72f7166ac1cb8a3a17f5cbe7a55cf4c7cf1c4e5fc57a25f0116d72bcc85050a5118089282460a8a7a2c22a2cf4c780d512a25895c7535cfced159c2e7cab74b43bf222d7ff331761a2f4a611b811c079b0cb8b192cceb200b7ffd03610e11c076ca542c36a9a77435587e97aa6bd75eb53ec6838bc593c36bcd5c43905ab4345220dabc388938bbf29a864d16c56d73f3b325b57bbf27f0f220ae571983c6ddb743bd6e09c4efdcc02da7dcf70430c5033507092b6271627abdfe87b459d9ad6827f1d8055800e2cdad2bf7f8cc5a29851f3d61af9e650fb64eec40c608e82f2b588578a7408cc561c53b7fa02ba194c7f667431b59d257dfbb63c5b1d1b85d1f0e7f3173942fb220c5ba482a13dcea40a3a9c515c77df7ad897b7df536d0019c228ae5f6de7c7057cb174b406dad68753f97b514897e9e486e3b86050ad6b8ba7c1b8890295bfac7a335f64627bc839cbf52325a87d6b0953715b8fd659df896187b75aa4dcaad28b37e966764b89e1f59f93338449fdc7993052da1955be9c0fc07cb6a471e44de6519985b9cc45f9bbf8425fc4482c804eade7be3696fdf0126e8b22aad9d27cbe349250981bdc5aad6e90b9fdc3cd019853213fe63a88cdb2c8c5bd9d1a55faabbae79c3583119c05d2aa2506c3ddeef0a07f27efd48b94e2714c1f50372849d51cf742d6f06a3024e4983d9a7b19f0675918e2a3b7383f2852e0d180fe8d8d289441852992a5b526ced75c14faca8f074b390223e6a22c43698f52c0b2a6e4a1b482c405dac9bfc6f658a4f2a1e592bbe5f5d01584566dc1ddfbf2643bdd4214ab86810cbd2d1d99ba2df36dd845a989242114dca7f83a31e15fe5f133b783fe1f5900ecca21afa5b0e77cd5c9cdbc40fdf3b2b6c7f19b627ec8b8932df1a08ac45d47a19a2ad13e68554309006dd162837f16312d8080ecddcf4192dcaace74f5bea0cff60fadbb9e88b7f05dd98a7c8f6ba332b5224800f032fb547507228981cec7fd5b25dbb91b018116d95112cf6ff3ed4778c933aab09632b9918307975472eb7ec713c7c73ec90712cf474b54bb8e8f7f44cbde6bfbc5348b97471ccae4298926af076b9099e596f89726396c10108723c3682734434e2ddd2326a461c7cac5c8c57ff3201a84883910ad0ad265c0e35387cd7e471d81ccadbef801e673dff78a2ed1d5d4350eb08f8ab8d8f85007a39c928e1d058dd2663669fa52042da7c251ab4c0375cd33bc5dd0ad901ab6ffac6eece3e3d8540f54649dce496eb5b1fa8d8c4e4594ddd0114f7d1178844224adf40d25d193f6f258d9c9ade705c2e7e291fa674c75100378bffee5fe40cf8495faaf7f713572f82c949b3065c166f5e1efbb9718e79324b744523ca153dc5be81cbbf8359c35d1a5f2fa27386469f5acb98c72842cec0f5b7be611d1b57f13a8827bb72635526074e1e44c057fe70c26ab5b9f794dfcb4c3f85898e06fec2410c3af7cb934555683b14e91d1f354ad450a35606dfade6955f0bb111745e1efba99535a62656c3ad5c0625a8326c9a897d3beb7f163df5a1b48c6ae605bfe5682afc36efa28b5068faf1c18e06d3ad630354247b4ecdce9e66101f9029d3d30caa9f4d78f6c0420f36e03b44e449d7b048738aba9da30f801f6492f8a2e6386c70b1e0f29374422f64c2cc025240ac3306a212bbf8cc0ea60301f72360c26d6c3898a35992ed5f5f4ab7681e31d9acf715f1b5e25211cefcef561587062b518aca8e156f996b04bb7e436f3c665b023fd82478d379df179dba660cc8abbe47f26da3a0d5e61fc2ea23725b586c67320e29f912973c4bd0a51d1bb6fc894ea8b3edbcda39f6980f70938ff7a22613eb4216be88a36d435d76d5c02616041e741f4bdd3680a1e901123e773c2a96bb7cc6d81ad1a21a02f744ca508aeae3eb45927dc9f9d23ec2814e6b290e3794484877c32b62eff940d4cff26d55685f17dc1faf49e697cf83b0ac70987a55bc96803f89028e7f7aaf18d5a041c0e86b40580ce8c54b6f3c75bfda5c0ef4b15fd0e5b11f651b9ce4531405ebf0404b9762bad6b60c3f83f304c5e2721c92b717664b3e9286ed58daa67619153c559069c991c473e5d43ff36793171536bc4abc62614b0a638f726ebd667c19b35f6ae7709895e170aa818202e904953a45347d14ca3c611204286826e6574eda01c23f5554b091a921f035ee6bde99fed0120302f8acc7af972e68b338d373c5b74a0cefebd26d1dd641d276ca63d7f68843ac5c93794fb81305894f72deb8d0af94577287e604ee938d44f7400a35531f20d2e964adb04827b19eb1fa1eb0c3e4b70536569944b2baf706354eb90fd4eb7a74ad99ec2cc2f540c635b6290fa821b9eeb3cb8229d4cea8b4d64e4c74ebd5e9f35505d9d548d44451ad32277466c6e4fa61454900ad4644be1844bc0ef7bd8e572f34c5ce3a20bad2b0d36458822c32d0eb4957e921c4665faae8855ff5679a84b391521ce7609ecd9677133679d9a4fda2aacdb2f893307497ba59c0dc7f51bd281ccbac8393667a5e018f07a72168a54f823674f9b56dcb458645a20642100418f25bd6836f044257ad68bdf01457283e64836755c506b7d3c7f451c724e3b067e21bba9186a9bbb18e681802a350ef6a9495d6f358e8eba9025d023b2bf7f0ceb4961ffe012ac990d7f527411a0baa2192188b7d2261b826b16aa240cb96dd2911a8b0033b6e645982c59ed00af18e9311b93809f985f2af46d86776e45c50aa30926a34b660b2b7cd9306c566b0ddeeaa98579f32a673242e70829d64fe8942b9cd0c3c10363e0efd04be7c5d25dd7efb44750820c87a66617fd4f10c71ef776b81c65005d50bae4ad222dfdb4356517f356e9b04de886bdd18043014c7abc045c12ccae92fe2f2d7ec17866b4030839baa5e38def08e14bd52529004416e9b71f7a6abd9a5ed7641bab3527bd56ec2af6a3ac0c999796ee6f6c823c42e4fd1a7b1221c5448fdc39c651318bca4b623925d472065b996f5a7eb1bc11fd1f0513703fd6b5d558f464f31fe4709256f61e3f7631d1ea2ce59c822ab8b24e10a3530698ad876c90b7eb686450dd52ec73f6c1713a74e220c51615b0f72c5658e0fa90702c1f2f625e6499a329c6ad07f50c1587d32ef4477547a24efdc0e7fc723266b8cb7fcd999f6d1c3676b28076a48e70e208f711806aafb35ab09856d9f84651a3f3b38b9fb8bb9a50baee0e71f16847d0d6acab8361a690c5a179919236cc2585983bac8034f83ea1df5a13d0896fa473ea48915c7dd2f142848674681c8a24afcc6ce90e9922b6f7af7fa5da25980f8e2f8953c791f386374573c677a273ccb8e7800be25700d1f61e9806eefcb8d66be23bddab3c5fc7fe7e00bff6d48e716a61792677913f1745fa155d9ae46309eb69e1d52085e9b4b732635af8d39635eecd56c0c554d4b3068d4c6003d3000bf6396df321f680301e2b7e344ca43fb1bd7c2803ad4fefbfa837eb03382188b9c3ff7e9440031906b2c5b17d7f2e108f819d7e530000e31a346888c01bb25877fee5246ccd48b7574d520a33200e03b964508e6e7fc530b95663d63ca1400472ce7c2420e10bc69a85f93f67029c599b8a37ded582d34a3abb62713c52959aad1456e323715291cf2e5626ab95dc10150a8be898a1239cca68fa12942f6c5a9911ebafc60573997f06b1932dc807224c44f3467caab142406fbe034546bba4c04774ecdd1dae1fc0f3773ec867eb636cda741cf6828fca4ecfe0cad6e420d5d288531998a0e24fd9761c5e3009d00b215fd793d879cd92824c4e20d2c77b0fd81aece8d2d2e71a1943e2c712b2345eca57587293c893fddbca8e86fde609b63cd1c39098438305c5179d9bde221c921b0fba1ebe0a71d40433986134a738e05fa025f184ebad884fabeb53f1256c90ab6371dce6de08bd9a7713681fe3183b5a12454a1edf33821e4359bbe519c1f7849eedab867f46a469c34ba7475d0fb2e06eb9ab254bc97598387b4a6eaf84fb537893237dc2df6fc845e0d79d50244cf31d029c680350d7f67a0150ec8d75befd8dc5764f7ec10eea3af5c0041f314ff222f09fcade504107e1e84f957c13e02a5982206c1115edc1a04e8a0f51d68fd7572305787355800cd2565432f26e45849ef43d2731c2984688f5c13955a1df9a51e92a5b696c53c9c8c01498743b47c8c09af7ca4300dc612a8d873a0f6b0bcaad93351ecf275afc5acb4d7dd2747a209e4ae9072a829b4ac02cfa36c386257d84f1903e43f4268c3696f259073d6dcf2cf7e5b7d8c0608eddf74c56c4267887e4d165fddc5f39dcc6f648b5c422caf9d73a48f76ecff22a552e5df407a27bbb831d82ec8a994c572e75c926756d9e347eec0cac262ee4a900c03c652107fcfa389d00f1c67a36bd1a4f13f8ac54deb143ac701c2e330a2d5a503ef22d91e88c7ab2e5585a445b94e4795cc3a078ccd9aa01c6219d298bfc6a5325a22a17c0f4803da692bfa3e51c18c6f920eb62eb9a623fbba69c101fe907e5ea849f4d08566f4eba439bcb429ff81c22894178ed248e9866d50cacacc388cb055b5418fb8e3cac77157962c1cfd86956ee2672d8e53eca89b8ad9a752adc24a1319da7460274b7e38aea7a5c11661f5d0306cea7855418ca090bd57672db5768b9d5171687bb14c9b89ef3d9a371a409ff8b23f0cfdf57652e91da3b036a4cf32ebe7a5f9bbd67d38b7b73940ac8f10d7f1199bd8b75a1dc8c5d5e9d80ef90a9705e56cc3f596f71f859af7d8f9553b161d1b1b2606c1583dff98414add0836ff710e8aef0f68eca4f4fb0514d87163657b42415867a2638659ffeae1edf8bc1b9d252593a93562711ea13c1c378b5c1d427266a3988a4ba68712f6b2afcef6449453756099cffa7bef7740699ea58d178fa5d4b961be69d3904aab57c94b92042ba906b10152d6245264db48eabd760826e344254115d19892a6623611d6378a8c5b6492f084343fd0d2ea64880315794a0e22be5f7b1de154c82c0e5072858b3a5e669f96e7f7334765f9f3e33eff0ddf51cdfd622b2df0cb97b540431f9df186a96ed9e6215753455ecd695cfb8c9c5a3399afde6a66efe0e17be5437c327d0063717427c05df1f8084ebd416e2eab1aecc26f9363f2649b8b93e5b86e2aa76884a389732d112603f3360daa41938331adbe1852b3e86391f42dba77be40b3df92fdf98a4fc12c2ffec56dd93a9b137277186d7279f024e3fcfbdc184b41be2db2321a3d6899580e2a8ec857a10e7109d23e89ab5", @ANYRES32=r0, @ANYRESDEC=r5, @ANYRESDEC=r6, @ANYRESHEX=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r8 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x0, 0x8, 0x120052, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, 0x0, 0x0, 0x0)

8.456443221s ago: executing program 3 (id=5318):
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000080), &(0x7f00000000c0), 0x0)
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
close(r1)
execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100), &(0x7f0000000140), 0x0)
r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0)
write(r2, &(0x7f0000000180)="01010101", 0x4)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000400)='/dev/comedi2\x00', 0x101200, 0x0)
close(r2)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480)={0x10000, 0xa1, 0x2}, 0x18)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0)
r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0)
ioctl$I2C_TIMEOUT(r3, 0x705, 0xffffffffffff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000280), &(0x7f00000002c0), 0x0)
fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff)
execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000340), &(0x7f0000000380), 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)={0x30, r5, 0xb97534d5fe9704cf, 0x709d2c, 0x25dfdbfe, {{0x12}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x4]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x0)

7.767608913s ago: executing program 2 (id=5320):
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000002200), 0x80002, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000440)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x78, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xd5cf, r2, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
shmget$private(0x0, 0x3000, 0x40, &(0x7f0000ff8000/0x3000)=nil)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
r6 = socket$inet6(0xa, 0x5, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0)
get_robust_list(0x0, &(0x7f0000000300)=0x0, &(0x7f0000000340))
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x7d, &(0x7f0000000000)=[@in={0x2, 0x4e23, @rand_addr=0x64010102}], 0x10)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = syz_init_net_socket$ax25(0x3, 0x2, 0x7)
ioctl$sock_ax25_SIOCADDRT(r7, 0x890b, &(0x7f0000000240)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, [@default, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})

6.683644278s ago: executing program 2 (id=5321):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='contention_end\x00', r0}, 0x18)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount(&(0x7f0000000100)=@nullb, &(0x7f0000000000)='./bus\x00', &(0x7f0000000140)='btrfs\x00', 0x1800082, &(0x7f00000001c0)='discard')

6.543769415s ago: executing program 5 (id=5012):
socket$inet6_udplite(0xa, 0x2, 0x88)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000000300000000000000070000000500"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10)
ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={<r3=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
ioctl$int_in(r3, 0x5452, &(0x7f0000000940)=0x707987cd)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e04000f08"], 0x7)

4.411685515s ago: executing program 0 (id=5322):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
pipe2$9p(&(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
fcntl$setpipe(r4, 0x11, 0x7efffeff00000000)
ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000000)={0x1})
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xbbb71000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000cc0)=[{{&(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="d7fa83f36b56e2728102a8037fef3fa079eff000c279701c4a68e61406321822192f19370d3f29d8b4b2d702c8184a5ac4120507330c0376575241447f5a1fad4cd4b0402acea3029b9348348c4d6523f43105efacdd830d97538a78a096c8b09c8a629284e2f53f534676ca7b7586d0159856d03cdc53330917c60efff77433f39d01ad21dc0b7b188735d7e0fb1c89f863176d53b8a4e81018cb0ac9ac4e740a86"}], 0x0, &(0x7f0000000500)=[@rights={{0x0, 0x1, 0x1, [r4, r0, r2]}}, @cred={{0x0, 0x1, 0x2, {r1}}}, @rights={{0x0, 0x1, 0x1, [r5, r2, r5]}}], 0x0, 0x24085}}, {{&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="806c6addb36bd717df0cab9e5064184d4addbd7c598f0c42187dae8eb219f9eda1a22774a92fd278c2e2aa637ae0f1d767fac188aa17ae98efb83ef3c9232cc9eb3d1360d20be88ddec92702bc5525eaf07c16c60ebbe52ae3158f"}, {&(0x7f0000000680)="441b74255f49079f6e"}, {&(0x7f00000006c0)="9ade5fdc61ded3a2307b8fc1"}, {&(0x7f0000000700)}, {&(0x7f0000001480)="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"}, {&(0x7f0000000740)="3137d241105b3dd7d81c95"}, {&(0x7f00000007c0)="b5565aad6564cc670d1b48561c775ff5edff161facdcbd2407bb616cd19cdf20da4af061489e160429f5216b4a1e5afbefd780af7c1cf1ec0e87ed858332588fa4cc9933d26951b8e71f5640a2ca540fe9bd70fcc21dfa4b0b0a7a372355c99eea3cf2b544d40ca70dad7c3be16c3ca0cc25babbbf107172dc0f815fb62fcbd087810ae341de706ce47c345bfd63179b31abff33c296e99fdfbd0f4228c4c1a725f124143018faec59df78e0c7bb37b0f2f0f02d055f826564e9cb4d5c2616a9360592784f4e53c00ab593327151a1c6cc0c387f18e2560642e67601353920eedd29c80e"}, {&(0x7f00000008c0)="99267cb7d892a3aff27544f2eb914d8963604f9ad227cf38767cc504ee60fae663f3d283a9d4b71aef6709452ab0a8306d8a14fcf1c290beae8f502210ac9d3580defde3c0ff5e21fe1154231df25a9af71920a65f3e439c276a0f5048a5294c068eb59b5369f2ee60ae704e84b33886f7"}, {&(0x7f0000000940)="b33dafe4"}], 0x0, &(0x7f0000000b80)=[@cred, @cred, @rights={{0x0, 0x1, 0x1, [r5, r5, r4, 0xffffffffffffffff]}}, @cred={{0x0, 0x1, 0x2, {r1}}}, @cred, @rights={{0x0, 0x1, 0x1, [r2]}}, @cred, @rights={{0x0, 0x1, 0x1, [r6, 0xffffffffffffffff, r3]}}, @rights={{0x0, 0x1, 0x1, [r0, 0xffffffffffffffff, r2, r5, r6]}}], 0x0, 0x48000}}], 0x1, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x400, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c633774262eb5ab2c7b9c5cff6ce78185d8c4dc064744e042", <r9=>0xffffffffffffffff})
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000001c0)={0x100, <r10=>r8, 0x80000})
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000002c0)={'ip6_vti0\x00'})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", <r11=>0xffffffffffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020e000010000000000000000004830008001200000001000000ff000000400000001ea0abff7f00000000000000d41f9ab9000100700000ebdf000008000000c4fc0000100000000000e2ffff1c004f030006000020080002000080f5008e24ce6e4ae300a5000003000500001e001e02"], 0x80}}, 0x4814)
r12 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r12, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0)
ioctl$SYNC_IOC_MERGE(r9, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r11})
close_range(r0, r8, 0x0)

4.396328595s ago: executing program 2 (id=5323):
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000080), &(0x7f00000000c0), 0x0)
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
close(r1)
execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100), &(0x7f0000000140), 0x0)
r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0)
write(r2, &(0x7f0000000180)="01010101", 0x4)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000400)='/dev/comedi2\x00', 0x101200, 0x0)
close(r2)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480)={0x10000, 0xa1, 0x2}, 0x18)
r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0)
ioctl$I2C_TIMEOUT(r3, 0x705, 0xffffffffffff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000280), &(0x7f00000002c0), 0x0)
fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff)
execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000340), &(0x7f0000000380), 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)={0x30, r6, 0xb97534d5fe9704cf, 0x709d2c, 0x25dfdbfe, {{0x12}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x4]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x0)

4.392950914s ago: executing program 3 (id=5324):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
socket$inet_tcp(0x2, 0x1, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x2020)
sched_setaffinity(r3, 0x8, &(0x7f00000000c0)=0xef)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x20010, 0xffffffffffffffff, 0x200000)
openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0)
r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
r5 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000180)={{}, [@default, @null, @default, @bcast, @netrom, @netrom, @rose, @rose]}, &(0x7f0000000100)=0x48, 0x80000)
getsockopt$netrom_NETROM_T1(r5, 0x103, 0x1, &(0x7f0000000200), &(0x7f0000002380)=0x4)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x5)
r6 = dup(r4)
bind$tipc(r6, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10)
listen(0xffffffffffffffff, 0x0)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0)
r7 = accept4(r0, &(0x7f00000002c0)=@xdp, &(0x7f0000000140)=0x80, 0x80800)
connect$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x9}, 0xa)
connect$bt_rfcomm(r7, 0x0, 0x0)

4.119477351s ago: executing program 0 (id=5325):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', <r0=>0x0, 0x20, 0x20, 0xf88d, 0x95, {{0xd, 0x4, 0x3, 0xd, 0x34, 0x65, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x16}, {[@timestamp={0x44, 0x14, 0x86, 0x0, 0x8, [0x1, 0x5, 0xfffffffd, 0x4]}, @cipso={0x86, 0xb, 0x3, [{0x6, 0x3, '\r'}, {0x6, 0x2}]}]}}}}})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x2}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r1}, 0x10)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000004c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r4, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
getpid()
ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc0000102, 0x0, 0x1}]})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40848c0}, 0x0)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0000}, 0x4)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r9 = socket(0x400000000010, 0x3, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r11 = socket(0x400000000010, 0x3, 0x0)
r12 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
r14 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r4, 0x0, <r15=>0xffffffffffffffff})
ioctl$AUTOFS_IOC_CATATONIC(r2, 0x9362, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_RW(r3, 0x3ba0, &(0x7f0000000300)={0x48, 0x8, r15, 0x0, 0x2fff, 0x1, &(0x7f0000000380)="9b", 0x5})

3.704075404s ago: executing program 2 (id=5326):
socket$packet(0x11, 0x2, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0xff59}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r0, 0x4b72, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x1c9282, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000900)={r2, 0x58, &(0x7f00000003c0)}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0xfffdffff, [{0x0, 0x2, 0x4}]}]}}, 0x0, 0x32}, 0x28)
write$cgroup_int(r2, &(0x7f0000000040)=0x1c9, 0x12)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, 0xffffffffffffffff, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x1)
ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000100)={{0x0, 0x100}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r3, 0x5501)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f0000000580)={0x2020}, 0x2020)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff5", 0x3, 0x1)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a800160008001e4003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x400c0c1)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r5}, './cgroup\x00'})
socket$inet6_sctp(0xa, 0x5, 0x84)

3.219506268s ago: executing program 2 (id=5327):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0)
r1 = epoll_create1(0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x9, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
mremap(&(0x7f00004d6000/0x4000)=nil, 0x4000, 0x4000, 0x2, &(0x7f00001e2000/0x4000)=nil)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0xa}, 0x16)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil)
syz_emit_ethernet(0x95, 0x0, &(0x7f0000000100)={0x80000001, 0x8000001, [0x997, 0x8bf, 0xe4b, 0xc70]})
munlockall()
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r4, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8)
dup(r1)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2e, 0x100008, 0x0, 0x8, 0xf, 0x3, 0x3, 0xfc, 0x0, 0x1, 0x0, 0x4000000, 0x0, 0xff, 0x0, 0xfffffeff}})
socket$inet(0x10, 0x3, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0xffffffffffffffb0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002b0009ef"], 0x14}}, 0x84)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000260000002300000000000000", @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r10}, 0x10)
sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000210001000000000000000000020000000000000000000000050019"], 0x24}}, 0x0)

3.079379592s ago: executing program 0 (id=5328):
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
pipe(0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0)
syz_pidfd_open(0x0, 0x0)
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl726\x00', [0x4f29, 0x0, 0x400c139, 0x4, 0x2d93, 0xafa4, 0x0, 0x4, 0x54c6cff3, 0x200000fd, 0x2, 0x1, 0x1, 0x9, 0x206, 0x101, 0xfffffffe, 0xffff, 0x3, 0x40000003, 0x89, 0xcaa3, 0x1000, 0x20001e5b, 0x8000003, 0xe69, 0x3, 0x0, 0x4086, 0x0, 0xfffffffd]})
prlimit64(0x0, 0xc, &(0x7f0000000140)={0x40000000000000, 0x88}, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = signalfd(0xffffffffffffffff, 0x0, 0x0)
setpgid(r1, 0x0)
setpgid(0x0, r1)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={0x0, 0x0, 0x8}, 0x18)
r3 = socket(0x10, 0x3, 0x0)
recvmmsg$unix(r2, &(0x7f0000000340)=[{{&(0x7f00000002c0)=@abs, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000440)=""/229, 0xe5}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}}], 0x1, 0x2, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000723f7bb243d62ae43b2af16af34c3137009fb3000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="0800010001000000"], 0x20}}, 0x0)
mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0)
r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x800000000000001)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ac054402000000002d7b0902240001000000000904000000030002"], 0x0)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

2.447278504s ago: executing program 5 (id=5012):
socket$inet6_udplite(0xa, 0x2, 0x88)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000000300000000000000070000000500"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10)
ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={<r3=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
ioctl$int_in(r3, 0x5452, &(0x7f0000000940)=0x707987cd)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e04000f08"], 0x7)

2.444575887s ago: executing program 3 (id=5329):
r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x400, 0x8, 0x19}, 0x18)
r1 = openat(r0, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x64)
creat(&(0x7f00000002c0)='./file0\x00', 0x109)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)=[0x10000], 0x0, 0x0, 0x1}}, 0x40)
r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = fsopen(&(0x7f00000001c0)='ocfs2_dlmfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r7, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$802154_dgram(r8, &(0x7f0000000080)={&(0x7f0000000040)={0x24, @none={0x0, 0x1}}, 0x14, &(0x7f0000000100)={0x0, 0x70}, 0x7, 0x0, 0x0, 0x4}, 0x0)
accept4$unix(r6, 0x0, 0x0, 0x0)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r9, 0xffffffffffffffff, 0x0)
r10 = fsmount(r5, 0x0, 0x80)
setsockopt$inet6_int(r1, 0x29, 0x34, &(0x7f0000000080)=0x9, 0x4)
fchdir(r10)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)

4.421428ms ago: executing program 0 (id=5330):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000140))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882)
r6 = syz_io_uring_setup(0x1205, &(0x7f0000000780)={0x0, 0x3, 0x10100, 0x3, 0xffffffff}, &(0x7f0000000400)=<r7=>0x0, 0x0)
syz_io_uring_submit(r7, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1})
io_uring_enter(r6, 0x567, 0x0, 0x8, 0x0, 0x0)
r8 = timerfd_create(0x5, 0x40800)
clock_gettime(0x0, &(0x7f0000000100))
clock_gettime(0x0, &(0x7f00000001c0)={<r9=>0x0, <r10=>0x0})
timerfd_settime(r8, 0x0, &(0x7f0000000000)={{r9, r10+60000000}}, &(0x7f0000000180))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480))
r11 = socket(0x15, 0x5, 0x0)
getsockopt(r11, 0x200000000114, 0x2710, &(0x7f0000001e00)=""/102400, &(0x7f0000000040)=0x19000)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000)
r12 = dup2(r1, r1)
readv(r12, &(0x7f0000000600)=[{&(0x7f0000000280)=""/139, 0x8b}], 0x1)
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000380)=0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

1.424546ms ago: executing program 2 (id=5331):
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902247251000000"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x88, &(0x7f0000000440)={{0x12, 0x1, 0x300, 0x41, 0xd1, 0xe0, 0x70, 0x403, 0xb810, 0x5a2e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc1, 0xc3, 0x5, 0x53, 0x7e, 0xbc, 0x10, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x67}, {0xd, 0x24, 0xf, 0x1, 0xbbc355f, 0x7fff, 0xfff, 0x2}}], [{{0x9, 0x5, 0x2, 0x0, 0x8, 0xf0, 0x9, 0x6}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0xe3, 0x92, 0x3}}, {{0x9, 0x5, 0xe, 0x4, 0x8, 0x4, 0x8c, 0x2}}, {{0x9, 0x5, 0xf, 0x2, 0x20, 0x40, 0x7, 0x5}}, {{0x9, 0x5, 0xc, 0x2, 0x200, 0x7, 0x0, 0x5, [@generic={0x20, 0x21, "c17daa2a0f318ac80b108900af66241f7f6fcf947f2b74549469543bc979"}]}}]}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x44, &(0x7f00000001c0)=ANY=[])
syz_usb_disconnect(r1)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x62403)
syz_usb_disconnect(r1)
syz_usb_connect(0x0, 0x4fa, &(0x7f0000000380)=ANY=[@ANYRES16=r2], 0x0)

0s ago: executing program 3 (id=5332):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0)
r1 = gettid()
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0)
read$msr(r2, &(0x7f0000048040)=""/102392, 0x18ff8)
syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10)
tkill(r1, 0xb)
futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
getgroups(0xfffffffffffffdb2, 0xfffffffffffffffe)
r3 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0)
execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
timer_create(0x9, &(0x7f0000000300)={0x0, 0x4000000, 0x1}, &(0x7f0000000500))
timer_create(0x2, &(0x7f00000006c0)={0x0, 0x6, 0x4, @thr={&(0x7f0000000100)="8b427c", &(0x7f00000001c0)="cfcb16b3ba70e9676cea3b0fb4ca3059786b29247394c62d9faebc6b5b470eebf5f7f6"}}, &(0x7f00000000c0)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r5, 0x8)
syz_emit_ethernet(0x4a, &(0x7f00000005c0)=ANY=[@ANYRES64=r4, @ANYRES32=<r6=>0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50d40b000078fffc829c95b7d04908db9dd2dbb179294352f1f0f76b4e0a46f76185b5ed4edad0a6c798e38906bc246dae6000e22d9eb488011f976d29083733b6ca6692052760efaf2dbca1a6edd4b51962130b2af3c25446346bc268ece168423fe59bf66d53561a08df8e3762173a9c376f49fc1e32258275aa5cd97aa6233c9b7e9d2a773f01ab1dbc613fd8bea443b105f437c07c98da83bc720273f6b3b7ceff5515d910336458bf3e7202061206500ab1fbd3158bdf2797282af6ab9ced1e4405c029c5553eef5ec921c7bf7d9cb468a2f9d9c79b919397029d0424a9645bea28"], 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000880)=ANY=[@ANYRES32=r1, @ANYBLOB="eaf924970bb772216c6d2a96a31f26f41a7bcd94b1ceff6bbbb9783845bc799c23f2be93dc6890e62fadbbd5718470ace8dc52751497e411058a4a98cf32c093e07ddc3950304dcb486c1409a72bebce7b854a953629b61b5c91dca99b7794ed0cb14091968ea9dfa94bcc87177b2e64cc559011100683f05deb2f48775e455cfdd9196b078466bf596a54eefa375a1aa00af40d71832757efc8ddb4ede7206de251153c18e435bfac9e37cd25b65fcbbba7c265d1fad5411d22d4dbd23e1eafba7cad62eacb0e835e792f02b70d60fe44"], 0x0)
r7 = syz_usb_connect$uac1(0x1, 0xb8, &(0x7f0000000380)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101"], 0x0)
syz_usb_control_io(r7, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000b00)=ANY=[@ANYRES8=r3, @ANYBLOB="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", @ANYRES32=r0, @ANYRESDEC=r5, @ANYRESDEC=r6, @ANYRESHEX=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r8 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x0, 0x8, 0x120052, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

int descriptors, different from the interface descriptor's value: 3
[ 1601.085941][T26275] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1601.101746][T26275] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1601.178792][ T8256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1601.301899][ T8256] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1601.470802][T26275] usb 1-1: usb_control_msg returned -32
[ 1601.475489][ T8323] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16242 sclass=netlink_route_socket pid=8323 comm=syz.2.5050
[ 1601.476450][T26275] usbtmc 1-1:16.0: can't read capabilities
[ 1601.703732][ T8262] netdevsim netdevsim5 netdevsim0: renamed from eth1
[ 1601.720155][ T8262] netdevsim netdevsim5 netdevsim1: renamed from eth2
[ 1601.735250][ T8262] netdevsim netdevsim5 netdevsim2: renamed from eth3
[ 1601.750021][ T8262] netdevsim netdevsim5 netdevsim3: renamed from eth4
[ 1601.751812][ T8256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1601.773297][ T8256] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1601.791508][ T5950] usblp 4-1:0.0: usblp1: USB Bidirectional printer dev 35 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 1601.809626][ T5924] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[ 1601.811851][ T5950] usb 4-1: USB disconnect, device number 35
[ 1601.834294][ T5950] usblp1: removed
[ 1601.989882][ T5924] usb 3-1: Using ep0 maxpacket: 16
[ 1601.999779][ T5924] usb 3-1: too many configurations: 123, using maximum allowed: 8
[ 1602.013835][ T5924] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1602.038780][ T5924] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1602.053568][ T5924] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1602.071660][ T5924] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1602.085968][ T5924] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1602.100759][ T5924] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1602.113503][ T5924] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1602.125925][ T5924] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1602.140733][ T5924] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[ 1602.152624][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45
[ 1602.163405][ T5924] usb 3-1: SerialNumber: syz
[ 1602.174589][ T5924] usb 3-1: config 0 descriptor??
[ 1602.209794][ T5924] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input55
[ 1602.275735][ T8379] usbtmc 1-1:16.0: usb_control_msg returned -32
[ 1602.364559][ T8262] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[ 1602.391776][ T8262] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[ 1602.409963][T25675] Bluetooth: hci2: command tx timeout
[ 1602.431348][ T8262] wireguard: wg0: Could not create IPv4 socket
[ 1602.442592][ T8262] wireguard: wg1: Could not create IPv4 socket
[ 1602.453703][ T8262] wireguard: wg2: Could not create IPv4 socket
[ 1602.528189][ T8386] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1602.879157][T26275] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[ 1603.040638][T26275] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1603.053539][T26275] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1603.065290][T26275] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[ 1603.076231][T26275] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1603.090588][T26275] usb 4-1: config 0 descriptor??
[ 1603.523535][T20150] usb 1-1: USB disconnect, device number 12
[ 1603.582414][ T8421] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5056'.
[ 1603.705746][T26275] usbhid 4-1:0.0: can't add hid device: -71
[ 1603.714332][T26275] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1603.730536][T26275] usb 4-1: USB disconnect, device number 36
[ 1604.385920][ T5168] bcm5974 3-1:0.0: could not read from device
[ 1604.413792][ T5168] bcm5974 3-1:0.0: could not read from device
[ 1604.419444][ T5924] usb 3-1: USB disconnect, device number 47
[ 1604.432635][ T5168] bcm5974 3-1:0.0: could not read from device
[ 1604.498788][T25675] Bluetooth: hci2: command 0x041b tx timeout
[ 1606.660985][T26275] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[ 1606.831770][T26275] usb 4-1: Using ep0 maxpacket: 32
[ 1606.939122][T26275] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1606.951437][T26275] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1606.973944][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[ 1607.075658][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[ 1607.086646][ T5881] libceph: mon0 (1)[c::]:6789 connect error
[ 1607.142912][ T8501] ceph: No mds server is up or the cluster is laggy
[ 1607.262219][T26275] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1607.372037][T26275] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1607.462780][T26275] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1607.476051][T26275] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1607.540274][T26275] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1607.551251][T26275] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1607.581094][T26275] usb 4-1: config 0 descriptor??
[ 1607.960636][ T5881] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[ 1608.151704][ T8487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1608.223829][ T8487] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1608.299021][ T5881] usb 1-1: Using ep0 maxpacket: 32
[ 1608.316983][ T5881] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[ 1608.353245][ T5881] usb 1-1: config 0 has no interface number 0
[ 1608.519682][ T5881] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[ 1608.532316][ T5881] usb 1-1: config 0 interface 1 has no altsetting 0
[ 1608.545077][ T5881] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[ 1608.556208][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1608.566668][ T5881] usb 1-1: Product: syz
[ 1608.571006][ T5881] usb 1-1: Manufacturer: syz
[ 1608.575593][ T5881] usb 1-1: SerialNumber: syz
[ 1608.595197][ T5881] usb 1-1: config 0 descriptor??
[ 1608.800491][ T8487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1608.835305][ T5881] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[ 1608.838563][ T8487] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1608.865315][ T5881] cx231xx 1-1:0.1: Failed to read PCB config
[ 1608.890724][T26275] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 37 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 1608.903814][ T5881] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71
[ 1608.912293][T26275] usb 4-1: USB disconnect, device number 37
[ 1608.918607][T26275] usblp0: removed
[ 1608.951264][ T5881] usb 1-1: USB disconnect, device number 13
[ 1609.086028][T13113] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1609.098880][T13113] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1609.108426][T13113] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1609.116911][T13113] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1609.124552][T13113] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1609.265600][ T8557] Failed to initialize the IGMP autojoin socket (err -2)
[ 1609.408237][ T5881] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[ 1609.520497][ T8577] FAULT_INJECTION: forcing a failure.
[ 1609.520497][ T8577] name failslab, interval 1, probability 0, space 0, times 0
[ 1609.546387][ T8577] CPU: 0 UID: 0 PID: 8577 Comm: syz.3.5071 Not tainted syzkaller #0 PREEMPT(full) 
[ 1609.546413][ T8577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1609.546423][ T8577] Call Trace:
[ 1609.546429][ T8577]  <TASK>
[ 1609.546435][ T8577]  dump_stack_lvl+0x16c/0x1f0
[ 1609.546467][ T8577]  should_fail_ex+0x512/0x640
[ 1609.546492][ T8577]  ? kmem_cache_alloc_node_noprof+0x65/0x770
[ 1609.546521][ T8577]  should_failslab+0xc2/0x120
[ 1609.546539][ T8577]  kmem_cache_alloc_node_noprof+0x78/0x770
[ 1609.546564][ T8577]  ? __alloc_skb+0x2b2/0x380
[ 1609.546592][ T8577]  ? __alloc_skb+0x2b2/0x380
[ 1609.546612][ T8577]  ? __pfx_netlink_insert+0x10/0x10
[ 1609.546637][ T8577]  __alloc_skb+0x2b2/0x380
[ 1609.546661][ T8577]  ? __pfx___alloc_skb+0x10/0x10
[ 1609.546689][ T8577]  ? netlink_autobind.isra.0+0x158/0x370
[ 1609.546719][ T8577]  netlink_alloc_large_skb+0x69/0x140
[ 1609.546748][ T8577]  netlink_sendmsg+0x698/0xdd0
[ 1609.546774][ T8577]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1609.546799][ T8577]  ____sys_sendmsg+0xa98/0xc70
[ 1609.546819][ T8577]  ? copy_msghdr_from_user+0x10a/0x160
[ 1609.546843][ T8577]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1609.546874][ T8577]  ___sys_sendmsg+0x134/0x1d0
[ 1609.546900][ T8577]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1609.546955][ T8577]  __sys_sendmsg+0x16d/0x220
[ 1609.546980][ T8577]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1609.547021][ T8577]  do_syscall_64+0xcd/0xfa0
[ 1609.547049][ T8577]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1609.547067][ T8577] RIP: 0033:0x7fc84ad8eec9
[ 1609.547081][ T8577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1609.547099][ T8577] RSP: 002b:00007fc84bcf7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1609.547116][ T8577] RAX: ffffffffffffffda RBX: 00007fc84afe5fa0 RCX: 00007fc84ad8eec9
[ 1609.547128][ T8577] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003
[ 1609.547139][ T8577] RBP: 00007fc84bcf7090 R08: 0000000000000000 R09: 0000000000000000
[ 1609.547149][ T8577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1609.547160][ T8577] R13: 00007fc84afe6038 R14: 00007fc84afe5fa0 R15: 00007ffee8fdf808
[ 1609.547187][ T8577]  </TASK>
[ 1609.815827][ T5881] usb 1-1: Using ep0 maxpacket: 32
[ 1609.850153][ T5881] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[ 1609.859612][ T5881] usb 1-1: config 0 has no interface number 0
[ 1609.865683][ T5881] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[ 1609.879888][ T5881] usb 1-1: config 0 interface 1 has no altsetting 0
[ 1609.901274][ T5881] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[ 1609.912019][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1609.921113][ T5881] usb 1-1: Product: syz
[ 1609.925255][ T5881] usb 1-1: Manufacturer: syz
[ 1609.930881][ T5881] usb 1-1: SerialNumber: syz
[ 1609.937472][ T5881] usb 1-1: config 0 descriptor??
[ 1610.159762][ T5881] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[ 1610.181439][ T5881] cx231xx 1-1:0.1: Failed to read PCB config
[ 1610.192868][ T5881] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -32
[ 1610.205946][ T5881] usb 1-1: USB disconnect, device number 14
[ 1611.206105][ T8557] netdevsim netdevsim5 netdevsim0: renamed from eth1
[ 1611.215689][T25675] Bluetooth: hci2: command tx timeout
[ 1611.242788][ T8557] netdevsim netdevsim5 netdevsim1: renamed from eth2
[ 1611.266545][ T8557] netdevsim netdevsim5 netdevsim2: renamed from eth3
[ 1611.293252][ T8557] netdevsim netdevsim5 netdevsim3: renamed from eth4
[ 1611.589251][ T8289] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[ 1611.749317][ T8289] usb 3-1: Using ep0 maxpacket: 32
[ 1611.756432][ T8289] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1611.783846][ T8289] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1611.802940][ T8289] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1611.833814][ T8289] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1611.905473][ T8289] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1611.938871][ T8289] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1611.969889][ T8289] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1611.989755][ T8289] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1612.010045][ T8289] usb 3-1: config 0 descriptor??
[ 1612.233791][ T8668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1612.329622][ T8668] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1612.873810][ T8668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1613.108998][   T30] audit: type=1400 audit(1759956250.848:1156): avc:  denied  { listen } for  pid=8705 comm="syz.4.5084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[ 1613.131964][ T8668] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1613.193555][ T8289] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 48 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 1613.259304][ T8557] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[ 1613.288900][T25675] Bluetooth: hci2: command 0x041b tx timeout
[ 1613.369679][ T8289] usb 3-1: USB disconnect, device number 48
[ 1613.733044][ T8557] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[ 1613.760394][ T8289] usblp0: removed
[ 1613.921097][ T8557] wireguard: wg0: Could not create IPv4 socket
[ 1614.083476][ T8557] wireguard: wg1: Could not create IPv4 socket
[ 1614.094102][ T8557] wireguard: wg2: Could not create IPv4 socket
[ 1614.800276][ T8806] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16242 sclass=netlink_route_socket pid=8806 comm=syz.4.5088
[ 1615.884292][   T30] audit: type=1400 audit(1759956254.028:1157): avc:  denied  { read write } for  pid=8832 comm="syz.2.5093" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[ 1616.559057][   T30] audit: type=1400 audit(1759956254.028:1158): avc:  denied  { open } for  pid=8832 comm="syz.2.5093" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[ 1616.872967][   T30] audit: type=1400 audit(1759956254.058:1159): avc:  denied  { ioctl } for  pid=8832 comm="syz.2.5093" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[ 1618.772262][   T30] audit: type=1400 audit(1759956256.918:1160): avc:  denied  { accept } for  pid=8857 comm="syz.4.5100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[ 1619.086404][   T30] audit: type=1400 audit(1759956257.098:1161): avc:  denied  { bind } for  pid=8857 comm="syz.4.5100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[ 1621.258672][ T5924] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[ 1621.449730][ T5924] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1621.485138][ T5924] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1621.525855][ T5924] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1621.540336][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1621.650848][ T5924] usb 3-1: Product: syz
[ 1621.655816][ T5924] usb 3-1: Manufacturer: syz
[ 1621.662180][ T5924] usb 3-1: SerialNumber: syz
[ 1621.675087][ T5924] usb 3-1: config 0 descriptor??
[ 1621.698443][ T5924] usb 3-1: selecting invalid altsetting 0
[ 1621.745756][ T8925] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5106'.
[ 1622.125369][ T5924] usb 3-1: USB disconnect, device number 49
[ 1622.510021][ T8960] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16242 sclass=netlink_route_socket pid=8960 comm=syz.3.5107
[ 1622.732273][T25675] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1622.744102][T25675] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1622.754191][T25675] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1622.763359][T25675] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1622.772495][T25675] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1622.818784][ T5924] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[ 1622.901573][ T8971] Failed to initialize the IGMP autojoin socket (err -2)
[ 1622.978802][ T5924] usb 4-1: Using ep0 maxpacket: 16
[ 1622.986366][ T5924] usb 4-1: too many configurations: 123, using maximum allowed: 8
[ 1622.999590][ T5924] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1623.012588][ T5924] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1623.026267][ T5924] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1623.040041][ T5924] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1623.080464][ T5924] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1623.093969][ T5924] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1623.107946][ T5924] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1623.121478][ T5924] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1623.149199][ T5924] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[ 1623.161345][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45
[ 1623.178385][ T5924] usb 4-1: SerialNumber: syz
[ 1623.185954][ T5924] usb 4-1: config 0 descriptor??
[ 1623.202984][ T5924] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input56
[ 1623.917021][   T30] audit: type=1326 audit(1759956262.058:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9015 comm="syz.0.5110" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f573b18eec9 code=0x0
[ 1624.460330][ T8971] netdevsim netdevsim5 netdevsim0: renamed from eth1
[ 1624.478902][ T8971] netdevsim netdevsim5 netdevsim1: renamed from eth2
[ 1624.495683][ T8971] netdevsim netdevsim5 netdevsim2: renamed from eth3
[ 1624.599494][ T8971] netdevsim netdevsim5 netdevsim3: renamed from eth4
[ 1624.808833][T25675] Bluetooth: hci2: command tx timeout
[ 1625.542666][ T5168] bcm5974 4-1:0.0: could not read from device
[ 1625.570329][ T5168] bcm5974 4-1:0.0: could not read from device
[ 1625.590285][ T5168] bcm5974 4-1:0.0: could not read from device
[ 1625.592656][ T5924] usb 4-1: USB disconnect, device number 38
[ 1625.675889][ T5168] bcm5974 4-1:0.0: could not read from device
[ 1625.712205][ T7482] bcm5974 4-1:0.0: could not read from device
[ 1625.982577][ T9080] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5115'.
[ 1626.108841][ T5881] usb 3-1: new full-speed USB device number 50 using dummy_hcd
[ 1626.248732][ T5881] usb 3-1: device descriptor read/64, error -71
[ 1626.489029][ T5881] usb 3-1: new full-speed USB device number 51 using dummy_hcd
[ 1626.698689][ T5881] usb 3-1: device descriptor read/64, error -71
[ 1626.811135][ T5881] usb usb3-port1: attempt power cycle
[ 1626.897752][T25675] Bluetooth: hci2: command tx timeout
[ 1627.168772][ T5881] usb 3-1: new full-speed USB device number 52 using dummy_hcd
[ 1627.219223][ T5881] usb 3-1: device descriptor read/8, error -71
[ 1628.090861][ T5881] usb 3-1: new full-speed USB device number 53 using dummy_hcd
[ 1628.119554][ T5881] usb 3-1: device descriptor read/8, error -71
[ 1628.243223][ T5881] usb usb3-port1: unable to enumerate USB device
[ 1628.254385][ T8971] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[ 1628.303592][ T8971] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[ 1628.335426][ T8971] wireguard: wg0: Could not create IPv4 socket
[ 1628.350810][ T8971] wireguard: wg1: Could not create IPv4 socket
[ 1628.361360][ T8971] wireguard: wg2: Could not create IPv4 socket
[ 1629.193589][T20407] block nbd1: Possible stuck request ffff8880262f0000: control (read@0,1024B). Runtime 330 seconds
[ 1629.233595][T20407] block nbd1: Possible stuck request ffff8880262f01c0: control (read@1024,1024B). Runtime 330 seconds
[ 1629.270967][T20407] block nbd1: Possible stuck request ffff8880262f0380: control (read@2048,1024B). Runtime 330 seconds
[ 1629.284298][T20407] block nbd1: Possible stuck request ffff8880262f0540: control (read@3072,1024B). Runtime 330 seconds
[ 1629.768348][T26275] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[ 1629.819804][ T9232] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16242 sclass=netlink_route_socket pid=9232 comm=syz.2.5123
[ 1630.000449][T26275] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1630.050540][T26275] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1630.061622][T26275] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1630.081397][T26275] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1630.095067][T26275] usb 1-1: Product: syz
[ 1630.102586][T26275] usb 1-1: Manufacturer: syz
[ 1630.111322][T26275] usb 1-1: SerialNumber: syz
[ 1630.120106][T26275] usb 1-1: config 0 descriptor??
[ 1630.134414][T26275] usb 1-1: selecting invalid altsetting 0
[ 1630.148858][ T5881] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[ 1630.308728][ T5881] usb 3-1: Using ep0 maxpacket: 16
[ 1630.315263][ T5881] usb 3-1: too many configurations: 123, using maximum allowed: 8
[ 1630.326914][ T5881] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1630.341862][ T5881] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1630.364201][ T5881] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1630.390295][ T5881] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1630.402907][ T5881] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1630.450342][ T9265] mkiss: ax0: crc mode is auto.
[ 1630.482456][ T5881] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1630.495800][ T5881] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1630.520473][ T5881] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1630.553202][ T5881] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[ 1630.564021][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45
[ 1630.574732][ T5881] usb 3-1: SerialNumber: syz
[ 1630.582807][ T5881] usb 3-1: config 0 descriptor??
[ 1630.833682][T11789] usb 1-1: USB disconnect, device number 15
[ 1630.915017][ T5881] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input57
[ 1632.695229][ T5168] bcm5974 3-1:0.0: could not read from device
[ 1632.705093][ T5168] bcm5974 3-1:0.0: could not read from device
[ 1632.730470][ T5168] bcm5974 3-1:0.0: could not read from device
[ 1632.740214][ T5881] usb 3-1: USB disconnect, device number 54
[ 1632.754625][ T5168] bcm5974 3-1:0.0: could not read from device
[ 1633.140405][T26275] libceph: mon0 (1)[c::]:6789 connect error
[ 1633.521817][ T9324] ceph: No mds server is up or the cluster is laggy
[ 1633.591037][T26275] libceph: mon0 (1)[c::]:6789 connect error
[ 1633.828671][ T5924] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[ 1633.868965][T26275] usb 1-1: new low-speed USB device number 16 using dummy_hcd
[ 1634.019452][ T5924] usb 4-1: Using ep0 maxpacket: 16
[ 1634.029683][T26275] usb 1-1: Invalid ep0 maxpacket: 16
[ 1634.095397][   T30] audit: type=1400 audit(1759956272.178:1163): avc:  denied  { getopt } for  pid=9352 comm="syz.2.5134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[ 1634.209091][T26275] usb 1-1: new low-speed USB device number 17 using dummy_hcd
[ 1634.320213][ T5924] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30
[ 1634.354838][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 29, changing to 8
[ 1634.423692][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1634.469006][ T5924] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196
[ 1634.478683][T26275] usb 1-1: Invalid ep0 maxpacket: 16
[ 1634.506745][ T5924] usb 4-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00
[ 1634.549868][T26275] usb usb1-port1: attempt power cycle
[ 1634.583286][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1634.613489][ T5924] usb 4-1: config 0 descriptor??
[ 1634.675067][ T9367] FAULT_INJECTION: forcing a failure.
[ 1634.675067][ T9367] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1634.691357][ T9367] CPU: 0 UID: 0 PID: 9367 Comm: syz.2.5135 Not tainted syzkaller #0 PREEMPT(full) 
[ 1634.691381][ T9367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1634.691391][ T9367] Call Trace:
[ 1634.691401][ T9367]  <TASK>
[ 1634.691408][ T9367]  dump_stack_lvl+0x16c/0x1f0
[ 1634.691438][ T9367]  should_fail_ex+0x512/0x640
[ 1634.691468][ T9367]  _copy_from_user+0x2e/0xd0
[ 1634.691497][ T9367]  io_sync_cancel+0x16d/0x6c0
[ 1634.691527][ T9367]  ? __pfx_io_sync_cancel+0x10/0x10
[ 1634.691560][ T9367]  ? __lock_acquire+0xb97/0x1ce0
[ 1634.691588][ T9367]  ? __pfx_autoremove_wake_function+0x10/0x10
[ 1634.691615][ T9367]  ? get_pid_task+0x106/0x250
[ 1634.691639][ T9367]  ? __pfx___mutex_trylock_common+0x10/0x10
[ 1634.691661][ T9367]  __io_uring_register+0x16cb/0x2460
[ 1634.691688][ T9367]  ? trace_contention_end+0xdd/0x130
[ 1634.691706][ T9367]  ? __pfx___io_uring_register+0x10/0x10
[ 1634.691739][ T9367]  ? __pfx___mutex_lock+0x10/0x10
[ 1634.691772][ T9367]  ? __fget_files+0x20e/0x3c0
[ 1634.691798][ T9367]  __x64_sys_io_uring_register+0x169/0x280
[ 1634.691830][ T9367]  do_syscall_64+0xcd/0xfa0
[ 1634.691857][ T9367]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1634.691874][ T9367] RIP: 0033:0x7fc03838eec9
[ 1634.691889][ T9367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1634.691906][ T9367] RSP: 002b:00007fc039187038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab
[ 1634.691929][ T9367] RAX: ffffffffffffffda RBX: 00007fc0385e6180 RCX: 00007fc03838eec9
[ 1634.691941][ T9367] RDX: 0000200000000000 RSI: 0000000000000018 RDI: 0000000000000006
[ 1634.691952][ T9367] RBP: 00007fc039187090 R08: 0000000000000000 R09: 0000000000000000
[ 1634.691963][ T9367] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001
[ 1634.691974][ T9367] R13: 00007fc0385e6218 R14: 00007fc0385e6180 R15: 00007fff8990b5a8
[ 1634.692000][ T9367]  </TASK>
[ 1634.692794][T13113] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1634.922342][T13113] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1634.936392][T13113] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1634.949783][T13113] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1634.959728][T13113] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1634.982667][ T9363] Failed to initialize the IGMP autojoin socket (err -2)
[ 1635.404146][ T5924] usbhid 4-1:0.0: can't add hid device: -71
[ 1635.419350][ T5924] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1635.439838][ T5924] usb 4-1: USB disconnect, device number 39
[ 1635.458913][T11789] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[ 1635.628982][T11789] usb 3-1: Using ep0 maxpacket: 32
[ 1635.644822][T11789] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[ 1635.655563][T11789] usb 3-1: config 0 has no interface number 0
[ 1635.663209][T11789] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[ 1635.676256][T11789] usb 3-1: config 0 interface 1 has no altsetting 0
[ 1635.685957][T11789] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[ 1635.699066][T11789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1635.709061][T11789] usb 3-1: Product: syz
[ 1635.713229][T11789] usb 3-1: Manufacturer: syz
[ 1635.720430][T11789] usb 3-1: SerialNumber: syz
[ 1635.729343][T11789] usb 3-1: config 0 descriptor??
[ 1635.762084][ T9363] netdevsim netdevsim5 netdevsim0: renamed from eth1
[ 1635.774903][ T9363] netdevsim netdevsim5 netdevsim1: renamed from eth2
[ 1635.790993][ T9363] netdevsim netdevsim5 netdevsim2: renamed from eth3
[ 1635.802476][ T9363] netdevsim netdevsim5 netdevsim3: renamed from eth4
[ 1635.965631][T11789] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[ 1636.021826][T11789] cx231xx 3-1:0.1: Failed to read PCB config
[ 1636.043178][T11789] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -71
[ 1636.078987][T11789] usb 3-1: USB disconnect, device number 55
[ 1636.925838][   T30] audit: type=1400 audit(1759956274.628:1164): avc:  denied  { setopt } for  pid=9467 comm="syz.3.5140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1636.948725][T11789] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[ 1636.961928][   T30] audit: type=1400 audit(1759956274.628:1165): avc:  denied  { write } for  pid=9467 comm="syz.3.5140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1637.106643][T25675] Bluetooth: hci2: command tx timeout
[ 1637.128499][T11789] usb 3-1: Using ep0 maxpacket: 32
[ 1637.139201][T11789] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[ 1637.149141][T11789] usb 3-1: config 0 has no interface number 0
[ 1637.158983][T11789] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[ 1637.188779][T11789] usb 3-1: config 0 interface 1 has no altsetting 0
[ 1637.224393][T11789] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[ 1637.354794][T11789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1637.440454][ T9523] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16242 sclass=netlink_route_socket pid=9523 comm=syz.0.5142
[ 1637.470833][T11789] usb 3-1: Product: syz
[ 1637.475035][T11789] usb 3-1: Manufacturer: syz
[ 1637.558187][T11789] usb 3-1: SerialNumber: syz
[ 1637.587727][T11789] usb 3-1: config 0 descriptor??
[ 1637.661438][ T9363] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[ 1637.693528][ T9363] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[ 1637.715522][ T9363] wireguard: wg0: Could not create IPv4 socket
[ 1637.725764][ T9363] wireguard: wg1: Could not create IPv4 socket
[ 1637.734661][ T9363] wireguard: wg2: Could not create IPv4 socket
[ 1637.805028][T11789] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[ 1637.816814][T11789] cx231xx 3-1:0.1: bad scenario!!!!!
[ 1637.816814][T11789] config_info=0
[ 1637.825419][T11789] cx231xx 3-1:0.1: Failed to read PCB config
[ 1637.901032][ T8289] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[ 1638.023545][T11789] usb 3-1: USB disconnect, device number 56
[ 1638.089014][ T8289] usb 1-1: Using ep0 maxpacket: 16
[ 1638.096493][ T8289] usb 1-1: too many configurations: 123, using maximum allowed: 8
[ 1638.110168][ T8289] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1638.123655][ T8289] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1638.136262][ T8289] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1638.153221][ T8289] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1638.190763][ T8289] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1638.209821][ T8289] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1638.230124][ T8289] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1638.250672][ T8289] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1638.264306][ T8289] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[ 1638.276200][ T8289] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45
[ 1638.289754][ T8289] usb 1-1: SerialNumber: syz
[ 1638.299968][ T8289] usb 1-1: config 0 descriptor??
[ 1638.319834][ T8289] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input58
[ 1639.034470][ T9649] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5148'.
[ 1639.262560][ T9654] FAULT_INJECTION: forcing a failure.
[ 1639.262560][ T9654] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1639.278365][ T9654] CPU: 0 UID: 0 PID: 9654 Comm: syz.2.5150 Not tainted syzkaller #0 PREEMPT(full) 
[ 1639.278391][ T9654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1639.278401][ T9654] Call Trace:
[ 1639.278408][ T9654]  <TASK>
[ 1639.278415][ T9654]  dump_stack_lvl+0x16c/0x1f0
[ 1639.278448][ T9654]  should_fail_ex+0x512/0x640
[ 1639.278478][ T9654]  strncpy_from_user+0x3b/0x2e0
[ 1639.278504][ T9654]  getname_flags.part.0+0x8f/0x550
[ 1639.278531][ T9654]  getname_flags+0x93/0xf0
[ 1639.278558][ T9654]  do_sys_openat2+0xb8/0x1d0
[ 1639.278580][ T9654]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1639.278603][ T9654]  ? __fget_files+0x20e/0x3c0
[ 1639.278625][ T9654]  __x64_sys_openat+0x174/0x210
[ 1639.278646][ T9654]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1639.278666][ T9654]  ? ksys_write+0x1ac/0x250
[ 1639.278691][ T9654]  do_syscall_64+0xcd/0xfa0
[ 1639.278718][ T9654]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1639.278735][ T9654] RIP: 0033:0x7fc03838d710
[ 1639.278749][ T9654] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44
[ 1639.278767][ T9654] RSP: 002b:00007fc0392d1b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[ 1639.278784][ T9654] RAX: ffffffffffffffda RBX: 0000000000189800 RCX: 00007fc03838d710
[ 1639.278796][ T9654] RDX: 0000000000189800 RSI: 00007fc0392d1c10 RDI: 00000000ffffff9c
[ 1639.278806][ T9654] RBP: 00007fc0392d1c10 R08: 0000000000000000 R09: 0000000000000000
[ 1639.278817][ T9654] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd
[ 1639.278827][ T9654] R13: 00007fc0385e6038 R14: 00007fc0385e5fa0 R15: 00007fff8990b5a8
[ 1639.278853][ T9654]  </TASK>
[ 1639.768700][ T5881] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[ 1639.929039][ T5881] usb 3-1: Using ep0 maxpacket: 8
[ 1639.935684][ T5881] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[ 1639.946206][ T5881] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1639.958674][ T5881] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1639.970428][ T5881] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1639.982119][ T5881] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1639.999322][ T5881] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1640.010786][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1640.039698][ T5168] bcm5974 1-1:0.0: could not read from device
[ 1640.058987][ T5168] bcm5974 1-1:0.0: could not read from device
[ 1640.061277][ T8289] usb 1-1: USB disconnect, device number 19
[ 1640.075998][ T5168] bcm5974 1-1:0.0: could not read from device
[ 1640.103198][ T5168] bcm5974 1-1:0.0: could not read from device
[ 1640.270529][ T5881] usb 3-1: usb_control_msg returned -32
[ 1640.276140][ T5881] usbtmc 3-1:16.0: can't read capabilities
[ 1641.254467][ T5881] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[ 1642.120567][ T5881] usb 1-1: config 1 interface 0 has no altsetting 0
[ 1642.133526][ T5881] usb 1-1: New USB device found, idVendor=0b05, idProduct=183d, bcdDevice= 0.40
[ 1642.144302][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1642.156226][ T5881] usb 1-1: Product: ၑ湀ᦇ깷ᮓ酡ﰅ翔酰쁢傕⹩䧋돍Œ퐧⁏豩㣣雲诖蔦㮍፸೪㣠䖠徲䋪簟쁔征疭∧蝸盀㟸筡붸⋇ր䈠➞붫쎞䷌䚸峓㭋ಂ琔焱ඕ繯긃䚀ණ稾槂ਬ悲쏈ဟ貑몌启О蜚＞椂詻璨鵠⾡짬쒐
[ 1642.228405][ T5881] usb 1-1: Manufacturer: Ѝ
[ 1642.304793][ T5881] usb 1-1: SerialNumber: 偝풢쩶龊֎ꆇヘ％擁ߜ䈏ዽ塿ﻛﮩ곭⯸㉙䖚犝┷❥ი騺才틓∭닣㭴⵵鎘ᴰ뤿㹒머猋괖遶儋乶㻍༛캂ffi嫁乂<⥺ﴈ鷊싱⫬녛䏳랯먀⿙䗜퀚繋
[ 1642.553941][ T5924] usb 3-1: USB disconnect, device number 57
[ 1643.850449][ T5881] usbhid 1-1:1.0: can't add hid device: -71
[ 1644.255601][ T5881] usbhid 1-1:1.0: probe with driver usbhid failed with error -71
[ 1644.363777][ T5881] usb 1-1: USB disconnect, device number 20
[ 1644.449804][T13113] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1644.455314][ T9745] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5161'.
[ 1644.494238][T13113] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1644.505643][T13113] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1644.521931][T13113] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1644.655633][T13113] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1645.463201][ T9738] Failed to initialize the IGMP autojoin socket (err -2)
[ 1645.904833][ T9765] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16242 sclass=netlink_route_socket pid=9765 comm=syz.3.5164
[ 1646.248994][ T5881] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[ 1646.533853][ T9803] FAULT_INJECTION: forcing a failure.
[ 1646.533853][ T9803] name failslab, interval 1, probability 0, space 0, times 0
[ 1646.548812][ T5881] usb 4-1: Using ep0 maxpacket: 16
[ 1646.549311][ T5881] usb 4-1: too many configurations: 123, using maximum allowed: 8
[ 1646.567889][ T5881] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1646.588287][ T9803] CPU: 1 UID: 0 PID: 9803 Comm: syz.2.5166 Not tainted syzkaller #0 PREEMPT(full) 
[ 1646.588304][ T9803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1646.588311][ T9803] Call Trace:
[ 1646.588315][ T9803]  <TASK>
[ 1646.588320][ T9803]  dump_stack_lvl+0x16c/0x1f0
[ 1646.588340][ T9803]  should_fail_ex+0x512/0x640
[ 1646.588357][ T9803]  ? __kvmalloc_node_noprof+0x12e/0x9c0
[ 1646.588370][ T9803]  should_failslab+0xc2/0x120
[ 1646.588383][ T9803]  __kvmalloc_node_noprof+0x141/0x9c0
[ 1646.588393][ T9803]  ? ipc_rcu_getref+0x140/0x1c0
[ 1646.588406][ T9803]  ? __do_semtimedop+0x259f/0x4cd0
[ 1646.588425][ T9803]  ? __do_semtimedop+0x259f/0x4cd0
[ 1646.588441][ T9803]  __do_semtimedop+0x259f/0x4cd0
[ 1646.588463][ T9803]  ? __pfx___do_semtimedop+0x10/0x10
[ 1646.588491][ T9803]  ? do_semtimedop+0x1b4/0x2e0
[ 1646.588506][ T9803]  do_semtimedop+0x1b4/0x2e0
[ 1646.588524][ T9803]  ? __pfx_do_semtimedop+0x10/0x10
[ 1646.588555][ T9803]  ? __pfx_ksys_write+0x10/0x10
[ 1646.588569][ T9803]  do_syscall_64+0xcd/0xfa0
[ 1646.588586][ T9803]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1646.588598][ T9803] RIP: 0033:0x7fc03838eec9
[ 1646.588607][ T9803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1646.588618][ T9803] RSP: 002b:00007fc0392b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000041
[ 1646.588629][ T9803] RAX: ffffffffffffffda RBX: 00007fc0385e6090 RCX: 00007fc03838eec9
[ 1646.588636][ T9803] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000000
[ 1646.588643][ T9803] RBP: 00007fc0392b1090 R08: 0000000000000000 R09: 0000000000000000
[ 1646.588649][ T9803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1646.588655][ T9803] R13: 00007fc0385e6128 R14: 00007fc0385e6090 R15: 00007fff8990b5a8
[ 1646.588673][ T9803]  </TASK>
[ 1646.796026][ T5881] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1646.809134][ T5881] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1646.829636][ T5881] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1646.853021][ T5881] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1646.866469][ T5881] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1646.882927][ T5881] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1646.903678][ T5881] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1647.050981][ T5881] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[ 1647.080403][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45
[ 1647.112268][ T5881] usb 4-1: SerialNumber: syz
[ 1647.129826][ T5881] usb 4-1: config 0 descriptor??
[ 1647.146281][ T9816] mkiss: ax0: crc mode is auto.
[ 1647.285394][ T5881] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input59
[ 1647.325199][T25675] Bluetooth: hci2: command tx timeout
[ 1647.360585][   T30] audit: type=1400 audit(1759956285.508:1166): avc:  denied  { append } for  pid=9830 comm="syz.0.5168" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[ 1647.591233][ T9738] netdevsim netdevsim5 netdevsim0: renamed from eth1
[ 1647.602967][ T9738] netdevsim netdevsim5 netdevsim1: renamed from eth2
[ 1647.619441][ T9738] netdevsim netdevsim5 netdevsim2: renamed from eth3
[ 1647.632111][ T9738] netdevsim netdevsim5 netdevsim3: renamed from eth4
[ 1647.640173][T11789] usb 1-1: new full-speed USB device number 21 using dummy_hcd
[ 1647.802746][T11789] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1647.815690][T11789] usb 1-1: not running at top speed; connect to a high speed hub
[ 1647.828002][T11789] usb 1-1: config 8 has an invalid interface number: 11 but max is 0
[ 1647.836285][T11789] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[ 1647.850966][T11789] usb 1-1: config 8 has no interface number 0
[ 1647.859619][T11789] usb 1-1: config 8 interface 11 has no altsetting 0
[ 1647.868584][T11789] usb 1-1: New USB device found, idVendor=08e9, idProduct=bdb3, bcdDevice=7c.ff
[ 1647.879669][T11789] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1647.890085][T11789] usb 1-1: Product: syz
[ 1647.894373][T11789] usb 1-1: Manufacturer: syz
[ 1647.902418][T11789] usb 1-1: SerialNumber: syz
[ 1648.059233][ T8289] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[ 1648.125745][T11789] cdc_wdm 1-1:8.11: probe with driver cdc_wdm failed with error -22
[ 1648.139199][T11789] usb 1-1: USB disconnect, device number 21
[ 1648.161706][ T9738] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[ 1648.181929][ T9738] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[ 1648.201717][ T9738] wireguard: wg0: Could not create IPv4 socket
[ 1648.211445][ T9738] wireguard: wg1: Could not create IPv4 socket
[ 1648.218395][ T8289] usb 3-1: Using ep0 maxpacket: 8
[ 1648.219961][ T8289] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1648.227449][ T9738] wireguard: wg2: Could not create IPv4 socket
[ 1648.261990][ T8289] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[ 1648.273141][ T8289] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1648.286061][ T8289] usb 3-1: Product: syz
[ 1648.292936][ T8289] usb 3-1: Manufacturer: syz
[ 1648.300230][ T8289] usb 3-1: SerialNumber: syz
[ 1648.313219][ T8289] usb 3-1: config 0 descriptor??
[ 1648.502209][ T5881] bcm5974 4-1:0.0: could not read from device
[ 1648.513476][ T5168] bcm5974 4-1:0.0: could not read from device
[ 1648.532830][ T5881] input: failed to attach handler mousedev to device input59, error: -5
[ 1648.562132][ T5168] bcm5974 4-1:0.0: could not read from device
[ 1648.577158][ T5881] usb 4-1: USB disconnect, device number 40
[ 1649.370975][T25675] Bluetooth: hci2: command 0x041b tx timeout
[ 1649.762518][   T30] audit: type=1400 audit(1759956287.908:1167): avc:  denied  { getopt } for  pid=9857 comm="syz.2.5169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[ 1650.918681][T20150] usb 3-1: USB disconnect, device number 58
[ 1652.399169][T10049] mkiss: ax0: crc mode is auto.
[ 1652.570142][T10060] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16242 sclass=netlink_route_socket pid=10060 comm=syz.3.5180
[ 1652.958851][ T5881] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[ 1653.178763][ T5881] usb 4-1: Using ep0 maxpacket: 16
[ 1653.185973][ T5881] usb 4-1: too many configurations: 123, using maximum allowed: 8
[ 1653.198837][ T5881] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1653.251392][ T5881] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1653.267943][T20150] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[ 1653.506249][ T5881] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1653.530020][ T5881] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1653.582001][T20150] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1653.604568][T20150] usb 1-1: config 0 has no interfaces?
[ 1653.614672][ T5881] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1653.625934][T20150] usb 1-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36
[ 1653.636715][T20150] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1653.645435][ T5881] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1653.659891][ T5881] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1653.671961][ T5881] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1653.684270][ T5881] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[ 1653.695235][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45
[ 1653.718733][T20150] usb 1-1: config 0 descriptor??
[ 1653.736950][ T5881] usb 4-1: SerialNumber: syz
[ 1653.758003][ T5881] usb 4-1: config 0 descriptor??
[ 1653.771084][ T5881] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input60
[ 1654.282307][T10088] could not allocate digest TFM handle crc32
[ 1654.668482][ T8289] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[ 1654.831212][ T8289] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1654.842915][ T8289] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1654.853254][ T8289] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1654.864166][ T8289] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1654.874158][ T8289] usb 3-1: Product: syz
[ 1654.880106][ T8289] usb 3-1: Manufacturer: syz
[ 1654.884694][ T8289] usb 3-1: SerialNumber: syz
[ 1654.893803][ T8289] usb 3-1: config 0 descriptor??
[ 1654.904294][ T8289] usb 3-1: selecting invalid altsetting 0
[ 1655.305897][ T8289] usb 3-1: USB disconnect, device number 59
[ 1655.324556][ T5168] bcm5974 4-1:0.0: could not read from device
[ 1655.393955][ T5168] bcm5974 4-1:0.0: could not read from device
[ 1655.436483][ T5881] usb 4-1: USB disconnect, device number 41
[ 1655.436619][ T5168] bcm5974 4-1:0.0: could not read from device
[ 1655.470634][ T5168] bcm5974 4-1:0.0: could not read from device
[ 1655.842099][T20150] usb 1-1: USB disconnect, device number 22
[ 1656.105038][T13113] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1656.152183][T13113] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1656.161978][T13113] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1656.171853][T13113] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1656.186996][T13113] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1656.211721][T10154] Failed to initialize the IGMP autojoin socket (err -2)
[ 1657.758683][T20150] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[ 1657.959042][T10212] FAULT_INJECTION: forcing a failure.
[ 1657.959042][T10212] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1657.978556][T10212] CPU: 0 UID: 0 PID: 10212 Comm: syz.4.5191 Not tainted syzkaller #0 PREEMPT(full) 
[ 1657.978582][T10212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1657.978594][T10212] Call Trace:
[ 1657.978600][T10212]  <TASK>
[ 1657.978608][T10212]  dump_stack_lvl+0x16c/0x1f0
[ 1657.978638][T10212]  should_fail_ex+0x512/0x640
[ 1657.978673][T10212]  _copy_from_iter+0x29f/0x1720
[ 1657.978707][T10212]  ? __pfx__copy_from_iter+0x10/0x10
[ 1657.978733][T10212]  ? rcu_is_watching+0x12/0xc0
[ 1657.978756][T10212]  ? trace_kmalloc+0x2b/0xd0
[ 1657.978773][T10212]  ? __kmalloc_noprof+0x34f/0x880
[ 1657.978796][T10212]  ? kernfs_fop_write_iter+0x237/0x570
[ 1657.978819][T10212]  kernfs_fop_write_iter+0x19a/0x570
[ 1657.978839][T10212]  vfs_write+0x7d0/0x11d0
[ 1657.978855][T10212]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[ 1657.978873][T10212]  ? __pfx___mutex_lock+0x10/0x10
[ 1657.978899][T10212]  ? __pfx_vfs_write+0x10/0x10
[ 1657.978945][T10212]  ksys_write+0x12a/0x250
[ 1657.978960][T10212]  ? __pfx_ksys_write+0x10/0x10
[ 1657.978984][T10212]  do_syscall_64+0xcd/0xfa0
[ 1657.979013][T10212]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1657.979030][T10212] RIP: 0033:0x7fc135d8eec9
[ 1657.979045][T10212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1657.979062][T10212] RSP: 002b:00007fc136b5d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1657.979079][T10212] RAX: ffffffffffffffda RBX: 00007fc135fe6090 RCX: 00007fc135d8eec9
[ 1657.979091][T10212] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000006
[ 1657.979102][T10212] RBP: 00007fc136b5d090 R08: 0000000000000000 R09: 0000000000000000
[ 1657.979113][T10212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1657.979124][T10212] R13: 00007fc135fe6128 R14: 00007fc135fe6090 R15: 00007ffd401cfe28
[ 1657.979150][T10212]  </TASK>
[ 1658.258821][T20150] usb 1-1: device descriptor read/64, error -71
[ 1658.280013][T13113] Bluetooth: hci2: command tx timeout
[ 1658.526317][T10210] ceph: No mds server is up or the cluster is laggy
[ 1658.534973][T26275] libceph: mon0 (1)[c::]:6789 connect error
[ 1658.639030][T20150] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[ 1658.779185][T20150] usb 1-1: device descriptor read/64, error -71
[ 1658.779313][ T8289] usb 4-1: new low-speed USB device number 42 using dummy_hcd
[ 1658.906081][T20150] usb usb1-port1: attempt power cycle
[ 1659.038902][ T8289] usb 4-1: Invalid ep0 maxpacket: 16
[ 1659.298897][T20150] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[ 1659.299113][ T8289] usb 4-1: new low-speed USB device number 43 using dummy_hcd
[ 1659.308250][T10154] netdevsim netdevsim5 netdevsim0: renamed from eth1
[ 1659.326830][T20150] usb 1-1: device descriptor read/8, error -71
[ 1659.345354][T10154] netdevsim netdevsim5 netdevsim1: renamed from eth2
[ 1659.376148][T10154] netdevsim netdevsim5 netdevsim2: renamed from eth3
[ 1659.468453][ T8289] usb 4-1: Invalid ep0 maxpacket: 16
[ 1659.474210][ T8289] usb usb4-port1: attempt power cycle
[ 1659.481467][T20407] block nbd1: Possible stuck request ffff8880262f0000: control (read@0,1024B). Runtime 360 seconds
[ 1659.494588][T20407] block nbd1: Possible stuck request ffff8880262f01c0: control (read@1024,1024B). Runtime 360 seconds
[ 1659.508905][T20407] block nbd1: Possible stuck request ffff8880262f0380: control (read@2048,1024B). Runtime 360 seconds
[ 1659.522206][T20407] block nbd1: Possible stuck request ffff8880262f0540: control (read@3072,1024B). Runtime 360 seconds
[ 1659.569720][T10154] netdevsim netdevsim5 netdevsim3: renamed from eth4
[ 1659.698742][T20150] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[ 1659.729171][T20150] usb 1-1: device descriptor read/8, error -71
[ 1659.838458][T20150] usb usb1-port1: unable to enumerate USB device
[ 1659.880907][ T8289] usb 4-1: new low-speed USB device number 44 using dummy_hcd
[ 1659.909688][ T8289] usb 4-1: Invalid ep0 maxpacket: 16
[ 1660.266037][ T8289] usb 4-1: new low-speed USB device number 45 using dummy_hcd
[ 1660.334620][T13113] Bluetooth: hci2: command tx timeout
[ 1660.381418][ T8289] usb 4-1: Invalid ep0 maxpacket: 16
[ 1660.450970][ T8289] usb usb4-port1: unable to enumerate USB device
[ 1660.751074][T10281] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5197'.
[ 1662.409336][T13113] Bluetooth: hci2: command tx timeout
[ 1662.542361][T10306] input: syz0 as /devices/virtual/input/input61
[ 1662.599184][ T8289] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[ 1662.781492][ T8289] usb 4-1: Using ep0 maxpacket: 16
[ 1662.955683][ T8289] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[ 1663.004162][ T8289] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1663.668842][ T8289] usb 4-1: Product: syz
[ 1663.674135][ T8289] usb 4-1: Manufacturer: syz
[ 1663.830223][ T8289] usb 4-1: SerialNumber: syz
[ 1663.871505][ T8289] usb 4-1: config 0 descriptor??
[ 1663.883811][ T8289] ums-onetouch 4-1:0.0: USB Mass Storage device detected
[ 1664.010013][T10154] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[ 1664.032137][T10154] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[ 1664.048469][T26275] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[ 1664.069759][T10154] wireguard: wg0: Could not create IPv4 socket
[ 1664.080792][T10154] wireguard: wg1: Could not create IPv4 socket
[ 1664.093707][T11789] usb 4-1: USB disconnect, device number 46
[ 1664.113426][T10154] wireguard: wg2: Could not create IPv4 socket
[ 1664.199230][T26275] usb 3-1: Using ep0 maxpacket: 32
[ 1664.243612][T26275] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1664.262840][T26275] usb 3-1: unable to read config index 0 descriptor/start: -71
[ 1664.273584][T26275] usb 3-1: can't read configurations, error -71
[ 1664.308486][ T8289] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[ 1664.469295][ T8289] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1664.480651][ T8289] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1664.491772][ T8289] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1664.502358][ T8289] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1664.512001][ T8289] usb 1-1: Product: syz
[ 1664.516179][ T8289] usb 1-1: Manufacturer: syz
[ 1664.522353][ T8289] usb 1-1: SerialNumber: syz
[ 1664.531682][ T8289] usb 1-1: config 0 descriptor??
[ 1664.541275][ T8289] usb 1-1: selecting invalid altsetting 0
[ 1665.018677][ T8289] usb 1-1: USB disconnect, device number 27
[ 1665.030466][T10465] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16242 sclass=netlink_route_socket pid=10465 comm=syz.2.5210
[ 1665.569124][T26275] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[ 1665.729268][T26275] usb 3-1: Using ep0 maxpacket: 16
[ 1665.739524][T26275] usb 3-1: too many configurations: 123, using maximum allowed: 8
[ 1665.754864][T26275] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1665.775075][T26275] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1665.891973][T26275] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1665.980619][T26275] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1665.992933][T26275] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1666.005046][T26275] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1666.019597][T26275] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1666.032327][T26275] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1666.045040][T26275] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[ 1666.056048][T26275] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45
[ 1666.065614][T26275] usb 3-1: SerialNumber: syz
[ 1666.073085][T26275] usb 3-1: config 0 descriptor??
[ 1666.108905][T26275] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input62
[ 1667.448936][ T5924] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[ 1667.620075][ T5924] usb 1-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config
[ 1667.640944][ T5924] usb 1-1: config 220 has 1 interface, different from the descriptor's value: 3
[ 1667.675260][ T5924] usb 1-1: config 220 interface 0 has no altsetting 0
[ 1667.713452][ T5924] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1667.737900][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1667.775645][ T5924] usb 1-1: Product: syz
[ 1667.785759][ T5924] usb 1-1: Manufacturer: syz
[ 1667.792532][ T5924] usb 1-1: SerialNumber: syz
[ 1667.825438][ T5168] bcm5974 3-1:0.0: could not read from device
[ 1667.862871][ T5168] bcm5974 3-1:0.0: could not read from device
[ 1667.872817][T26275] usb 3-1: USB disconnect, device number 62
[ 1667.891516][ T5168] bcm5974 3-1:0.0: could not read from device
[ 1668.036366][ T5924] uvcvideo 1-1:220.0: Found UVC 0.00 device syz (8086:0b07)
[ 1668.049130][ T5924] uvcvideo 1-1:220.0: No valid video chain found.
[ 1668.059394][ T5924] usb 1-1: USB disconnect, device number 28
[ 1668.412122][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[ 1668.420253][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[ 1668.550992][   T30] audit: type=1400 audit(1759956306.698:1168): avc:  denied  { write } for  pid=10536 comm="syz.2.5216" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[ 1668.757666][T10539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5216'.
[ 1669.179218][   T30] audit: type=1400 audit(1759956307.298:1169): avc:  denied  { create } for  pid=10533 comm="syz.4.5218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[ 1669.205948][   T30] audit: type=1400 audit(1759956307.298:1170): avc:  denied  { getopt } for  pid=10533 comm="syz.4.5218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[ 1669.420549][   T30] audit: type=1400 audit(1759956307.568:1171): avc:  denied  { write } for  pid=10546 comm="syz.2.5220" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[ 1669.500741][T10594] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5220'.
[ 1669.822161][T25675] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1669.844578][T25675] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1669.898768][T25675] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1669.914867][T25675] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1669.923435][T25675] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1669.955799][T10597] Failed to initialize the IGMP autojoin socket (err -2)
[ 1670.859868][ T5924] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[ 1671.492924][ T5924] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1671.517656][ T5924] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 3
[ 1671.537944][ T5924] usb 4-1: config 220 interface 0 has no altsetting 0
[ 1671.583095][ T5924] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1671.594211][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1671.638811][ T5924] usb 4-1: Product: syz
[ 1671.653738][ T5924] usb 4-1: Manufacturer: syz
[ 1671.669862][ T5924] usb 4-1: SerialNumber: syz
[ 1671.684045][T10597] netdevsim netdevsim5 netdevsim0: renamed from eth1
[ 1671.745524][T10597] netdevsim netdevsim5 netdevsim1: renamed from eth2
[ 1671.761001][T10597] netdevsim netdevsim5 netdevsim2: renamed from eth3
[ 1671.775024][T10597] netdevsim netdevsim5 netdevsim3: renamed from eth4
[ 1671.792280][T10689] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16242 sclass=netlink_route_socket pid=10689 comm=syz.2.5226
[ 1671.915999][ T5924] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[ 1671.926334][ T5924] uvcvideo 4-1:220.0: No valid video chain found.
[ 1671.941908][ T5924] usb 4-1: USB disconnect, device number 47
[ 1672.010791][T13113] Bluetooth: hci2: command tx timeout
[ 1672.129824][T26275] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[ 1672.289142][T26275] usb 3-1: Using ep0 maxpacket: 16
[ 1672.295119][T26275] usb 3-1: too many configurations: 123, using maximum allowed: 8
[ 1672.306455][T26275] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1672.340196][T26275] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1672.379665][T26275] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1672.409804][T26275] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1672.422401][T26275] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1672.459449][T26275] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1672.474379][T10597] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[ 1672.481243][T26275] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1672.512883][T26275] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1672.529061][T26275] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[ 1672.541728][T26275] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45
[ 1672.569451][T10597] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[ 1672.595353][T26275] usb 3-1: SerialNumber: syz
[ 1672.623247][T26275] usb 3-1: config 0 descriptor??
[ 1672.671842][T10597] wireguard: wg0: Could not create IPv4 socket
[ 1672.686610][T26275] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input63
[ 1672.700020][T10597] wireguard: wg1: Could not create IPv4 socket
[ 1672.715061][T10597] wireguard: wg2: Could not create IPv4 socket
[ 1672.793170][T10764] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5229'.
[ 1673.994750][   T30] audit: type=1400 audit(1759956312.138:1172): avc:  denied  { unmount } for  pid=18396 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[ 1674.111528][   T30] audit: type=1400 audit(1759956312.258:1173): avc:  denied  { connect } for  pid=10793 comm="syz.0.5233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[ 1674.461187][T10809] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5237'.
[ 1675.632066][ T5168] bcm5974 3-1:0.0: could not read from device
[ 1675.682310][T26275] usb 3-1: USB disconnect, device number 63
[ 1675.973586][T10842] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5240'.
[ 1676.283996][T11789] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[ 1676.941306][T11789] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[ 1676.953470][T11789] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[ 1676.966572][T11789] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1677.118869][T11789] usb 4-1: config 220 has no interface number 2
[ 1677.125188][T11789] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[ 1677.143462][T11789] usb 4-1: config 220 interface 0 has no altsetting 0
[ 1677.153694][T11789] usb 4-1: config 220 interface 76 has no altsetting 0
[ 1677.168522][T11789] usb 4-1: config 220 interface 1 has no altsetting 0
[ 1677.539946][T11789] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1677.654401][T11789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1677.664436][T11789] usb 4-1: Product: syz
[ 1677.670420][T11789] usb 4-1: Manufacturer: syz
[ 1677.681953][T10870] FAULT_INJECTION: forcing a failure.
[ 1677.681953][T10870] name failslab, interval 1, probability 0, space 0, times 0
[ 1677.688052][   T30] audit: type=1400 audit(1759956315.828:1174): avc:  denied  { read } for  pid=10868 comm="syz.0.5247" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[ 1677.718622][T11789] usb 4-1: SerialNumber: syz
[ 1677.726434][T10870] CPU: 1 UID: 0 PID: 10870 Comm: syz.0.5247 Not tainted syzkaller #0 PREEMPT(full) 
[ 1677.726452][T10870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1677.726458][T10870] Call Trace:
[ 1677.726463][T10870]  <TASK>
[ 1677.726467][T10870]  dump_stack_lvl+0x16c/0x1f0
[ 1677.726486][T10870]  should_fail_ex+0x512/0x640
[ 1677.726503][T10870]  ? fs_reclaim_acquire+0xae/0x150
[ 1677.726518][T10870]  should_failslab+0xc2/0x120
[ 1677.726531][T10870]  __kmalloc_noprof+0xdd/0x880
[ 1677.726545][T10870]  ? tomoyo_encode2+0x100/0x3e0
[ 1677.726565][T10870]  ? tomoyo_encode2+0x100/0x3e0
[ 1677.726575][T10870]  tomoyo_encode2+0x100/0x3e0
[ 1677.726588][T10870]  tomoyo_encode+0x29/0x50
[ 1677.726598][T10870]  tomoyo_realpath_from_path+0x18f/0x6e0
[ 1677.726614][T10870]  tomoyo_path_number_perm+0x245/0x580
[ 1677.726629][T10870]  ? tomoyo_path_number_perm+0x237/0x580
[ 1677.726656][T10870]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1677.726684][T10870]  ? find_held_lock+0x2b/0x80
[ 1677.726714][T10870]  ? find_held_lock+0x2b/0x80
[ 1677.726727][T10870]  ? hook_file_ioctl_common+0x145/0x410
[ 1677.726744][T10870]  ? __fget_files+0x20e/0x3c0
[ 1677.726758][T10870]  security_file_ioctl+0x9b/0x240
[ 1677.726770][T10870]  __x64_sys_ioctl+0xb7/0x210
[ 1677.726786][T10870]  do_syscall_64+0xcd/0xfa0
[ 1677.726803][T10870]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1677.726815][T10870] RIP: 0033:0x7f573b18eec9
[ 1677.726824][T10870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1677.726835][T10870] RSP: 002b:00007f573c0d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1677.726845][T10870] RAX: ffffffffffffffda RBX: 00007f573b3e5fa0 RCX: 00007f573b18eec9
[ 1677.726852][T10870] RDX: 0000200000000040 RSI: 00000000401070cd RDI: 0000000000000004
[ 1677.726859][T10870] RBP: 00007f573c0d9090 R08: 0000000000000000 R09: 0000000000000000
[ 1677.726865][T10870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1677.726871][T10870] R13: 00007f573b3e6038 R14: 00007f573b3e5fa0 R15: 00007ffd917e5fe8
[ 1677.726886][T10870]  </TASK>
[ 1677.766690][   T30] audit: type=1400 audit(1759956315.828:1175): avc:  denied  { open } for  pid=10868 comm="syz.0.5247" path="/420/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[ 1677.894793][T10870] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1677.989615][   T30] audit: type=1400 audit(1759956316.038:1176): avc:  denied  { ioctl } for  pid=10868 comm="syz.0.5247" path="/420/file0/file0" dev="fuse" ino=0 ioctlcmd=0x70cd scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[ 1678.289587][T11789] usb 4-1: selecting invalid altsetting 0
[ 1678.295653][T11789] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[ 1678.315792][T11789] uvcvideo 4-1:220.0: No valid video chain found.
[ 1678.331426][T10891] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1678.899940][T11789] usb 4-1: selecting invalid altsetting 0
[ 1678.904393][   T30] audit: type=1400 audit(1759956317.048:1177): avc:  denied  { mounton } for  pid=10885 comm="syz.0.5250" path="/newroot/422/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[ 1678.912796][T11789] usbtest 4-1:220.1: probe with driver usbtest failed with error -22
[ 1678.946227][T11789] usb 4-1: USB disconnect, device number 48
[ 1678.959536][   T30] audit: type=1400 audit(1759956317.048:1178): avc:  denied  { mount } for  pid=10885 comm="syz.0.5250" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[ 1679.201583][T10905] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16242 sclass=netlink_route_socket pid=10905 comm=syz.2.5251
[ 1679.589238][ T5888] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[ 1679.630648][T25675] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1679.641921][T25675] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1679.651193][T25675] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1679.660303][T25675] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1679.670782][T25675] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1679.719826][T10916] Failed to initialize the IGMP autojoin socket (err -2)
[ 1679.749270][ T5888] usb 3-1: Using ep0 maxpacket: 16
[ 1679.754830][ T5888] usb 3-1: too many configurations: 123, using maximum allowed: 8
[ 1679.765143][ T5888] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1679.779677][ T5888] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1679.794198][ T5888] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1679.815635][ T5888] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1679.830613][ T5888] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1679.844411][ T5888] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1679.860714][ T5888] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1679.873792][ T5888] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1679.889760][ T5888] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[ 1679.900290][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45
[ 1679.911022][ T5888] usb 3-1: SerialNumber: syz
[ 1679.920782][ T5888] usb 3-1: config 0 descriptor??
[ 1679.938666][ T5888] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input64
[ 1679.953427][T10916] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1680.040102][T10916] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1680.113854][T10916] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1680.186090][T10916] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode
[ 1680.225622][T10916] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1680.491724][   T30] audit: type=1400 audit(1759956318.628:1179): avc:  denied  { ioctl } for  pid=10982 comm="syz.0.5254" path="socket:[109816]" dev="sockfs" ino=109816 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[ 1680.701791][T11789] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[ 1680.811740][ T5881] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[ 1680.835093][T13113] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1680.851170][T13113] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1680.861988][T11789] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1680.874001][T13113] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1680.883539][T13113] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1680.893970][T13113] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1680.914935][T11789] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1680.923197][T11000] Failed to initialize the IGMP autojoin socket (err -2)
[ 1680.934762][T11789] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1680.944518][T11789] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1680.954594][T11789] usb 4-1: Product: syz
[ 1680.960776][T11789] usb 4-1: Manufacturer: syz
[ 1680.965457][T11789] usb 4-1: SerialNumber: syz
[ 1680.973891][ T5881] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1680.986144][   T30] audit: type=1400 audit(1759956319.128:1180): avc:  denied  { relabelfrom } for  pid=11000 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[ 1681.009213][ T5881] usb 1-1: config 220 has 1 interface, different from the descriptor's value: 3
[ 1681.021157][T11789] usb 4-1: config 0 descriptor??
[ 1681.026353][ T5881] usb 1-1: config 220 interface 0 has no altsetting 0
[ 1681.035104][   T30] audit: type=1400 audit(1759956319.128:1181): avc:  denied  { relabelto } for  pid=11000 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[ 1681.061377][T11789] usb 4-1: selecting invalid altsetting 0
[ 1681.084832][ T5881] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1681.095892][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1681.105535][ T5881] usb 1-1: Product: syz
[ 1681.109824][ T5881] usb 1-1: Manufacturer: syz
[ 1681.114418][ T5881] usb 1-1: SerialNumber: syz
[ 1681.184952][T10916] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[ 1681.213586][T10916] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[ 1681.234597][T10916] wireguard: wg0: Could not create IPv4 socket
[ 1681.246241][T10916] wireguard: wg1: Could not create IPv4 socket
[ 1681.261755][T10916] wireguard: wg2: Could not create IPv4 socket
[ 1681.334710][ T5881] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[ 1681.344679][ T5881] uvcvideo 1-1:220.0: No valid video chain found.
[ 1681.355975][ T5881] usb 1-1: USB disconnect, device number 29
[ 1681.531538][T11789] usb 4-1: USB disconnect, device number 49
[ 1682.078928][ T5168] bcm5974 3-1:0.0: could not read from device
[ 1682.094819][ T5168] bcm5974 3-1:0.0: could not read from device
[ 1682.105562][ T5888] usb 3-1: USB disconnect, device number 64
[ 1682.501524][T13113] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1682.512779][T13113] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1682.522859][T13113] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1682.532510][T13113] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1682.542114][T13113] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1682.550841][ T5881] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[ 1682.582573][T11093] Failed to initialize the IGMP autojoin socket (err -2)
[ 1682.740265][ T5881] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1682.758894][ T5881] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1682.772035][ T5881] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1682.792729][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1682.827054][ T5881] usb 1-1: Product: syz
[ 1682.835546][ T5881] usb 1-1: Manufacturer: syz
[ 1682.861170][ T5881] usb 1-1: SerialNumber: syz
[ 1682.887249][ T5881] usb 1-1: config 0 descriptor??
[ 1682.904484][ T5881] usb 1-1: selecting invalid altsetting 0
[ 1683.298664][T11789] usb 1-1: USB disconnect, device number 30
[ 1683.408073][ T5881] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[ 1683.658743][ T5881] usb 4-1: Using ep0 maxpacket: 32
[ 1683.665152][ T5881] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[ 1683.674581][ T5881] usb 4-1: config 0 has no interface number 0
[ 1683.682775][ T5881] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[ 1683.695763][ T5881] usb 4-1: config 0 interface 1 has no altsetting 0
[ 1684.178574][ T5881] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[ 1684.188957][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1684.199450][ T5881] usb 4-1: Product: syz
[ 1684.203837][ T5881] usb 4-1: Manufacturer: syz
[ 1684.211686][ T5881] usb 4-1: SerialNumber: syz
[ 1684.230231][ T5881] usb 4-1: config 0 descriptor??
[ 1684.450157][ T5881] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[ 1684.463788][ T5881] cx231xx 4-1:0.1: Failed to read PCB config
[ 1684.471054][ T5881] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71
[ 1684.481558][ T5881] usb 4-1: USB disconnect, device number 50
[ 1684.570220][T13113] Bluetooth: hci2: command tx timeout
[ 1685.158689][T11789] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[ 1685.449756][T11789] usb 4-1: Using ep0 maxpacket: 32
[ 1685.510749][T11789] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[ 1685.569204][T11789] usb 4-1: config 0 has no interface number 0
[ 1685.589736][T11789] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[ 1685.613117][T11789] usb 4-1: config 0 interface 1 has no altsetting 0
[ 1685.639117][T11789] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[ 1685.656367][T11789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1685.676595][T11789] usb 4-1: Product: syz
[ 1685.690151][T11789] usb 4-1: Manufacturer: syz
[ 1685.699198][T11789] usb 4-1: SerialNumber: syz
[ 1685.706300][T11789] usb 4-1: config 0 descriptor??
[ 1685.940273][T11789] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[ 1685.967145][T11789] cx231xx 4-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4)
[ 1686.069223][ T8289] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[ 1686.088969][T11789] cx231xx 4-1:0.1: cx231xx_send_gpio_cmd: failed with status --110
[ 1686.099385][T11789] cx231xx 4-1:0.1: cx231xx_send_gpio_cmd: failed with status --32
[ 1686.209694][T11789] cx231xx 4-1:0.1: cx231xx_send_gpio_cmd: failed with status --71
[ 1686.248995][ T8289] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[ 1686.261018][ T8289] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1686.284574][T11789] cx231xx 4-1:0.1: cx231xx_send_gpio_cmd: failed with status --71
[ 1686.300387][ T8289] usb 3-1: config 220 has 2 interfaces, different from the descriptor's value: 3
[ 1686.308396][T11789] cx231xx 4-1:0.1: cx231xx_send_gpio_cmd: failed with status --71
[ 1686.318623][ T8289] usb 3-1: config 220 has no interface number 1
[ 1686.318662][ T8289] usb 3-1: config 220 interface 0 has no altsetting 0
[ 1686.318679][ T8289] usb 3-1: config 220 interface 76 has no altsetting 0
[ 1686.320439][ T8289] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1686.359203][ T8289] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1686.378655][T11789] cx231xx 4-1:0.1: Failed to set devmode to analog: error: -71
[ 1686.381578][ T8289] usb 3-1: Product: syz
[ 1686.440546][ T8289] usb 3-1: Manufacturer: syz
[ 1686.441891][T11789] i2c i2c-2: Added multiplexed i2c bus 4
[ 1686.445179][ T8289] usb 3-1: SerialNumber: syz
[ 1686.457562][T11789] i2c i2c-2: Added multiplexed i2c bus 5
[ 1686.495037][T11789] cx231xx 4-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]!
[ 1686.506099][T11789] cx231xx 4-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]!
[ 1686.599965][T11789] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71
[ 1686.669507][T13113] Bluetooth: hci2: command tx timeout
[ 1686.755706][T11789] usb 4-1: USB disconnect, device number 51
[ 1686.761309][ T8289] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[ 1686.781052][ T8289] uvcvideo 3-1:220.0: No valid video chain found.
[ 1686.831485][ T8289] usb 3-1: USB disconnect, device number 65
[ 1687.046443][T11093] netdevsim netdevsim5 netdevsim0: renamed from eth5
[ 1687.072581][T11093] netdevsim netdevsim5 netdevsim1: renamed from eth6
[ 1687.082753][T11268] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16242 sclass=netlink_route_socket pid=11268 comm=syz.3.5267
[ 1687.109870][T11093] netdevsim netdevsim5 netdevsim2: renamed from eth7
[ 1687.132136][T11093] netdevsim netdevsim5 netdevsim3: renamed from eth8
[ 1687.438639][T11789] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[ 1687.609499][T25675] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1687.618729][T11789] usb 4-1: Using ep0 maxpacket: 16
[ 1687.626890][T11789] usb 4-1: too many configurations: 123, using maximum allowed: 8
[ 1687.693686][T11789] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1687.715824][T11281] mkiss: ax0: crc mode is auto.
[ 1687.748860][T25675] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1687.775128][ T6040] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1687.795292][T11789] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1687.795543][ T9828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1687.816231][ T9828] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1687.845324][T11789] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1687.961529][T11282] Failed to initialize the IGMP autojoin socket (err -2)
[ 1688.031142][T11789] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1688.043990][T11789] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1688.069267][T11789] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1688.082134][T11789] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1688.104692][T11789] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1688.161157][T11789] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[ 1688.172259][T11789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45
[ 1688.319208][T11789] usb 4-1: SerialNumber: syz
[ 1688.331945][T11789] usb 4-1: config 0 descriptor??
[ 1688.353763][T11789] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input65
[ 1688.540447][ T8417] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[ 1688.713954][ T8417] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[ 1688.725600][ T8417] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[ 1688.728190][ T9828] Bluetooth: hci2: command tx timeout
[ 1688.744745][ T8417] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1688.774048][ T8417] usb 1-1: config 220 has no interface number 2
[ 1688.960032][ T8417] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[ 1688.974398][ T8417] usb 1-1: config 220 interface 0 has no altsetting 0
[ 1688.982842][ T8417] usb 1-1: config 220 interface 76 has no altsetting 0
[ 1688.991366][ T8417] usb 1-1: config 220 interface 1 has no altsetting 0
[ 1689.001597][ T8417] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1689.012842][ T8417] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1689.022872][ T8417] usb 1-1: Product: syz
[ 1689.029505][ T8417] usb 1-1: Manufacturer: syz
[ 1689.034202][ T8417] usb 1-1: SerialNumber: syz
[ 1689.073435][T11324] FAULT_INJECTION: forcing a failure.
[ 1689.073435][T11324] name failslab, interval 1, probability 0, space 0, times 0
[ 1689.087981][T11324] CPU: 0 UID: 0 PID: 11324 Comm: syz.2.5271 Not tainted syzkaller #0 PREEMPT(full) 
[ 1689.088006][T11324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1689.088017][T11324] Call Trace:
[ 1689.088023][T11324]  <TASK>
[ 1689.088030][T11324]  dump_stack_lvl+0x16c/0x1f0
[ 1689.088061][T11324]  should_fail_ex+0x512/0x640
[ 1689.088090][T11324]  ? __kmalloc_cache_node_noprof+0x62/0x7a0
[ 1689.088111][T11324]  should_failslab+0xc2/0x120
[ 1689.088131][T11324]  __kmalloc_cache_node_noprof+0x75/0x7a0
[ 1689.088147][T11324]  ? __get_vm_area_node+0x101/0x330
[ 1689.088173][T11324]  ? __get_vm_area_node+0x101/0x330
[ 1689.088191][T11324]  __get_vm_area_node+0x101/0x330
[ 1689.088210][T11324]  ? rcu_is_watching+0x12/0xc0
[ 1689.088236][T11324]  __vmalloc_node_range_noprof+0x271/0x1480
[ 1689.088259][T11324]  ? bpf_prog_alloc_no_stats+0x58/0x610
[ 1689.088288][T11324]  ? bpf_prog_alloc_no_stats+0x58/0x610
[ 1689.088316][T11324]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1689.088339][T11324]  ? __pfx_cred_has_capability.isra.0+0x10/0x10
[ 1689.088359][T11324]  ? finish_task_switch.isra.0+0x221/0xc10
[ 1689.088387][T11324]  ? bpf_prog_alloc_no_stats+0x58/0x610
[ 1689.088406][T11324]  __vmalloc_node_noprof+0xad/0xf0
[ 1689.088427][T11324]  ? bpf_prog_alloc_no_stats+0x58/0x610
[ 1689.088451][T11324]  bpf_prog_alloc_no_stats+0x58/0x610
[ 1689.088469][T11324]  ? security_capable+0x7e/0x260
[ 1689.088496][T11324]  bpf_prog_alloc+0x3b/0x230
[ 1689.088514][T11324]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1689.088539][T11324]  bpf_prog_load+0x1c28/0x2850
[ 1689.088582][T11324]  ? __pfx_bpf_prog_load+0x10/0x10
[ 1689.088611][T11324]  ? avc_has_perm_noaudit+0x149/0x3b0
[ 1689.088639][T11324]  ? irqentry_exit+0x3b/0x90
[ 1689.088674][T11324]  ? __sys_bpf+0x288/0x4980
[ 1689.088700][T11324]  ? __sanitizer_cov_trace_switch+0x87/0x90
[ 1689.088727][T11324]  __sys_bpf+0x3e72/0x4980
[ 1689.088758][T11324]  ? __pfx___sys_bpf+0x10/0x10
[ 1689.088781][T11324]  ? preempt_schedule_common+0x44/0xc0
[ 1689.088807][T11324]  ? preempt_schedule_thunk+0x16/0x30
[ 1689.088832][T11324]  ? vfs_write+0x454/0x11d0
[ 1689.088847][T11324]  ? find_held_lock+0x2b/0x80
[ 1689.088878][T11324]  ? __mutex_unlock_slowpath+0x161/0x7b0
[ 1689.088923][T11324]  ? fput+0x9b/0xd0
[ 1689.088944][T11324]  ? ksys_write+0x1ac/0x250
[ 1689.088959][T11324]  ? __pfx_ksys_write+0x10/0x10
[ 1689.088981][T11324]  __x64_sys_bpf+0x78/0xc0
[ 1689.089007][T11324]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1689.089032][T11324]  do_syscall_64+0xcd/0xfa0
[ 1689.089059][T11324]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1689.089077][T11324] RIP: 0033:0x7fc03838eec9
[ 1689.089091][T11324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1689.089109][T11324] RSP: 002b:00007fc039290038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1689.089127][T11324] RAX: ffffffffffffffda RBX: 00007fc0385e6180 RCX: 00007fc03838eec9
[ 1689.089138][T11324] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005
[ 1689.089149][T11324] RBP: 00007fc039290090 R08: 0000000000000000 R09: 0000000000000000
[ 1689.089159][T11324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1689.089169][T11324] R13: 00007fc0385e6218 R14: 00007fc0385e6180 R15: 00007fff8990b5a8
[ 1689.089193][T11324]  </TASK>
[ 1689.089220][T11324] syz.2.5271: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz2,mems_allowed=0-1
[ 1689.464951][T11093] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[ 1689.481273][T11324] CPU: 0 UID: 0 PID: 11324 Comm: syz.2.5271 Not tainted syzkaller #0 PREEMPT(full) 
[ 1689.481294][T11324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1689.481304][T11324] Call Trace:
[ 1689.481310][T11324]  <TASK>
[ 1689.481317][T11324]  dump_stack_lvl+0x16c/0x1f0
[ 1689.481345][T11324]  warn_alloc+0x248/0x3a0
[ 1689.481373][T11324]  ? __pfx_warn_alloc+0x10/0x10
[ 1689.481396][T11324]  ? rcu_is_watching+0x12/0xc0
[ 1689.481419][T11324]  ? trace_kmalloc+0x2b/0xd0
[ 1689.481437][T11324]  ? __get_vm_area_node+0x101/0x330
[ 1689.481461][T11324]  ? __kasan_kmalloc+0x8a/0xb0
[ 1689.481479][T11324]  ? __get_vm_area_node+0x208/0x330
[ 1689.481503][T11324]  __vmalloc_node_range_noprof+0xaf5/0x1480
[ 1689.481534][T11324]  ? bpf_prog_alloc_no_stats+0x58/0x610
[ 1689.481562][T11324]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1689.481590][T11324]  ? __pfx_cred_has_capability.isra.0+0x10/0x10
[ 1689.481611][T11324]  ? finish_task_switch.isra.0+0x221/0xc10
[ 1689.481638][T11324]  ? bpf_prog_alloc_no_stats+0x58/0x610
[ 1689.481658][T11324]  __vmalloc_node_noprof+0xad/0xf0
[ 1689.481678][T11324]  ? bpf_prog_alloc_no_stats+0x58/0x610
[ 1689.481701][T11324]  bpf_prog_alloc_no_stats+0x58/0x610
[ 1689.481720][T11324]  ? security_capable+0x7e/0x260
[ 1689.481747][T11324]  bpf_prog_alloc+0x3b/0x230
[ 1689.481765][T11324]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1689.481789][T11324]  bpf_prog_load+0x1c28/0x2850
[ 1689.481820][T11324]  ? __pfx_bpf_prog_load+0x10/0x10
[ 1689.481847][T11324]  ? avc_has_perm_noaudit+0x149/0x3b0
[ 1689.481875][T11324]  ? irqentry_exit+0x3b/0x90
[ 1689.481910][T11324]  ? __sys_bpf+0x288/0x4980
[ 1689.481935][T11324]  ? __sanitizer_cov_trace_switch+0x87/0x90
[ 1689.481961][T11324]  __sys_bpf+0x3e72/0x4980
[ 1689.481990][T11324]  ? __pfx___sys_bpf+0x10/0x10
[ 1689.482013][T11324]  ? preempt_schedule_common+0x44/0xc0
[ 1689.482040][T11324]  ? preempt_schedule_thunk+0x16/0x30
[ 1689.482064][T11324]  ? vfs_write+0x454/0x11d0
[ 1689.482079][T11324]  ? find_held_lock+0x2b/0x80
[ 1689.482108][T11324]  ? __mutex_unlock_slowpath+0x161/0x7b0
[ 1689.482149][T11324]  ? fput+0x9b/0xd0
[ 1689.482169][T11324]  ? ksys_write+0x1ac/0x250
[ 1689.482185][T11324]  ? __pfx_ksys_write+0x10/0x10
[ 1689.482205][T11324]  __x64_sys_bpf+0x78/0xc0
[ 1689.482231][T11324]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1689.482255][T11324]  do_syscall_64+0xcd/0xfa0
[ 1689.482282][T11324]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1689.482299][T11324] RIP: 0033:0x7fc03838eec9
[ 1689.482314][T11324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1689.482331][T11324] RSP: 002b:00007fc039290038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1689.482347][T11324] RAX: ffffffffffffffda RBX: 00007fc0385e6180 RCX: 00007fc03838eec9
[ 1689.482359][T11324] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005
[ 1689.482369][T11324] RBP: 00007fc039290090 R08: 0000000000000000 R09: 0000000000000000
[ 1689.482380][T11324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1689.482389][T11324] R13: 00007fc0385e6218 R14: 00007fc0385e6180 R15: 00007fff8990b5a8
[ 1689.482414][T11324]  </TASK>
[ 1689.482420][T11324] Mem-Info:
[ 1689.482430][T11324] active_anon:8695 inactive_anon:0 isolated_anon:0
[ 1689.482430][T11324]  active_file:21617 inactive_file:41280 isolated_file:0
[ 1689.482430][T11324]  unevictable:768 dirty:518 writeback:0
[ 1689.482430][T11324]  slab_reclaimable:14170 slab_unreclaimable:120793
[ 1689.482430][T11324]  mapped:37787 shmem:4354 pagetables:1026
[ 1689.482430][T11324]  sec_pagetables:0 bounce:0
[ 1689.482430][T11324]  kernel_misc_reclaimable:0
[ 1689.482430][T11324]  free:1238588 free_pcp:20120 free_cma:0
[ 1689.482474][T11324] Node 0 active_anon:34780kB inactive_anon:0kB active_file:86264kB inactive_file:164920kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:150996kB dirty:2072kB writeback:0kB shmem:15880kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13864kB pagetables:3964kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[ 1689.482517][T11324] Node 1 active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:152kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[ 1689.482558][T11324] Node 0 DMA free:15296kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1689.482612][T11324] lowmem_reserve[]: 0 2481 2483 2483 2483
[ 1689.482646][T11324] Node 0 DMA32 free:1044620kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34780kB inactive_anon:0kB active_file:86264kB inactive_file:164920kB unevictable:1536kB writepending:2072kB zspages:0kB present:3129332kB managed:2541400kB mlocked:0kB bounce:0kB free_pcp:60052kB local_pcp:40780kB free_cma:0kB
[ 1689.482698][T11324] lowmem_reserve[]: 0 0 1 1 1
[ 1689.482731][T11324] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1689.482778][T11324] lowmem_reserve[]: 0 0 0 0 0
[ 1689.482811][T11324] Node 1 Normal free:3894436kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20428kB local_pcp:12044kB free_cma:0kB
[ 1689.482861][T11324] lowmem_reserve[]: 0 0 0 0 0
[ 1689.482893][T11324] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15296kB
[ 1689.483018][T11324] Node 0 DMA32: 606*4kB (ME) 764*8kB (ME) 255*16kB (ME) 126*32kB (ME) 58*64kB (UME) 30*128kB (M) 108*256kB (UM) 73*512kB (UM) 53*1024kB (UME) 4*2048kB (UME) 218*4096kB (M) = 1044616kB
[ 1689.483165][T11324] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1689.483254][T11324] Node 1 Normal: 18*4kB (UME) 42*8kB (UME) 46*16kB (UME) 259*32kB (UME) 112*64kB (UME) 46*128kB (UME) 17*256kB (UM) 4*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 942*4096kB (M) = 3894488kB
[ 1689.483399][T11324] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1689.483429][T11324] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[ 1689.483443][T11324] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1689.483457][T11324] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1689.483471][T11324] 67248 total pagecache pages
[ 1689.483478][T11324] 0 pages in swap cache
[ 1689.483484][T11324] Free swap  = 124996kB
[ 1689.483492][T11324] Total swap = 124996kB
[ 1689.483499][T11324] 2097051 pages RAM
[ 1689.483505][T11324] 0 pages HighMem/MovableOnly
[ 1689.483512][T11324] 429675 pages reserved
[ 1689.483519][T11324] 0 pages cma reserved
[ 1689.488515][ T8417] usb 1-1: selecting invalid altsetting 0
[ 1689.631962][T13113] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1689.663537][ T8417] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[ 1689.764586][T20407] block nbd1: Possible stuck request ffff8880262f0000: control (read@0,1024B). Runtime 390 seconds
[ 1689.779076][T11093] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[ 1689.781255][T20407] block nbd1: Possible stuck request ffff8880262f01c0: control (read@1024,1024B). Runtime 390 seconds
[ 1689.812989][T11093] wireguard: wg0: Could not create IPv4 socket
[ 1689.824208][T20407] block nbd1: Possible stuck request ffff8880262f0380: control (read@2048,1024B). Runtime 390 seconds
[ 1689.855855][T11093] wireguard: wg1: Could not create IPv4 socket
[ 1689.871273][T20407] block nbd1: Possible stuck request ffff8880262f0540: control (read@3072,1024B). Runtime 390 seconds
[ 1689.986488][T11093] wireguard: wg2: Could not create IPv4 socket
[ 1690.038743][T13113] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1690.095843][ T8417] uvcvideo 1-1:220.0: No valid video chain found.
[ 1690.153751][ T8417] usb 1-1: selecting invalid altsetting 0
[ 1690.199886][T11789] usb 4-1: USB disconnect, device number 52
[ 1690.214918][T13113] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1690.239029][ T5168] bcm5974 4-1:0.0: could not read from device
[ 1690.341352][T13113] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1690.388886][ T8417] usbtest 1-1:220.1: probe with driver usbtest failed with error -22
[ 1690.640253][ T8417] usb 1-1: USB disconnect, device number 31
[ 1690.957056][T13113] Bluetooth: hci2: command 0x0419 tx timeout
[ 1690.998625][T25675] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1691.122800][T11330] Failed to initialize the IGMP autojoin socket (err -2)
[ 1691.249047][   T30] audit: type=1400 audit(1759956329.388:1182): avc:  denied  { sqpoll } for  pid=11379 comm="syz.0.5276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[ 1691.478560][T11403] input: syz0 as /devices/virtual/input/input66
[ 1691.998680][T11789] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[ 1692.079084][ T8417] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[ 1692.164861][T11789] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[ 1692.175036][T11789] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[ 1692.188387][T11789] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1692.200881][T11789] usb 4-1: config 220 has no interface number 2
[ 1692.209345][T11789] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[ 1692.225864][T11789] usb 4-1: config 220 interface 0 has no altsetting 0
[ 1692.235517][T11789] usb 4-1: config 220 interface 76 has no altsetting 0
[ 1692.246262][T11789] usb 4-1: config 220 interface 1 has no altsetting 0
[ 1692.256046][ T8417] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[ 1692.266107][ T8417] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[ 1692.283493][ T8417] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1692.295776][ T8417] usb 3-1: config 220 has no interface number 2
[ 1692.519150][T11789] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1692.533459][ T8417] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[ 1692.611118][T11789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1692.624141][T11789] usb 4-1: Product: syz
[ 1692.682939][ T8417] usb 3-1: config 220 interface 0 has no altsetting 0
[ 1692.693128][T11789] usb 4-1: Manufacturer: syz
[ 1692.709213][ T8417] usb 3-1: config 220 interface 76 has no altsetting 0
[ 1692.716137][T11789] usb 4-1: SerialNumber: syz
[ 1692.734174][ T8417] usb 3-1: config 220 interface 1 has no altsetting 0
[ 1692.761888][ T8417] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1692.773128][ T8417] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1692.782728][ T8417] usb 3-1: Product: syz
[ 1692.802851][ T8417] usb 3-1: Manufacturer: syz
[ 1692.871566][ T8417] usb 3-1: SerialNumber: syz
[ 1693.069090][T11789] usb 4-1: selecting invalid altsetting 0
[ 1693.075335][T11789] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[ 1693.084899][T11789] uvcvideo 4-1:220.0: No valid video chain found.
[ 1693.112712][T11789] usb 4-1: selecting invalid altsetting 0
[ 1693.127004][T11789] usbtest 4-1:220.1: probe with driver usbtest failed with error -22
[ 1693.138843][T25675] Bluetooth: hci4: command tx timeout
[ 1693.162238][ T8417] usb 3-1: selecting invalid altsetting 0
[ 1693.180520][T11789] usb 4-1: USB disconnect, device number 53
[ 1693.189291][ T8417] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[ 1693.219205][ T8417] uvcvideo 3-1:220.0: No valid video chain found.
[ 1693.251622][ T8417] usb 3-1: selecting invalid altsetting 0
[ 1693.273254][ T8417] usbtest 3-1:220.1: probe with driver usbtest failed with error -22
[ 1693.288937][ T8417] usb 3-1: USB disconnect, device number 66
[ 1693.382843][T11330] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[ 1693.410470][T11330] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[ 1693.433339][T11330] wireguard: wg0: Could not create IPv4 socket
[ 1693.444413][T11330] wireguard: wg1: Could not create IPv4 socket
[ 1693.453783][T11330] wireguard: wg2: Could not create IPv4 socket
[ 1693.563820][T11547] mkiss: ax0: crc mode is auto.
[ 1693.839873][T11602] input: syz0 as /devices/virtual/input/input67
[ 1694.558087][T11614] input: syz0 as /devices/virtual/input/input68
[ 1695.429055][ T9828] Bluetooth: hci4: command tx timeout
[ 1695.753691][T11630] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16242 sclass=netlink_route_socket pid=11630 comm=syz.2.5284
[ 1695.972422][ T5888] libceph: mon0 (1)[c::]:6789 connect error
[ 1696.693985][ T5888] libceph: mon0 (1)[c::]:6789 connect error
[ 1696.703084][T11640] ceph: No mds server is up or the cluster is laggy
[ 1696.749039][T26275] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[ 1696.911277][T26275] usb 3-1: Using ep0 maxpacket: 16
[ 1696.921979][T26275] usb 3-1: too many configurations: 123, using maximum allowed: 8
[ 1696.934053][T26275] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1696.953379][T26275] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1696.972789][T26275] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1696.992791][T26275] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1697.008652][T26275] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1697.008729][T20150] usb 1-1: new low-speed USB device number 32 using dummy_hcd
[ 1697.022036][T26275] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1697.045996][T26275] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1697.063038][T26275] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1697.079607][T26275] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[ 1697.090574][T26275] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45
[ 1697.099871][T26275] usb 3-1: SerialNumber: syz
[ 1697.126227][T26275] usb 3-1: config 0 descriptor??
[ 1697.185676][T26275] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input69
[ 1697.198764][T20150] usb 1-1: Invalid ep0 maxpacket: 16
[ 1697.348648][T20150] usb 1-1: new low-speed USB device number 33 using dummy_hcd
[ 1697.518622][T20150] usb 1-1: Invalid ep0 maxpacket: 16
[ 1697.524229][T20150] usb usb1-port1: attempt power cycle
[ 1697.878670][T20150] usb 1-1: new low-speed USB device number 34 using dummy_hcd
[ 1697.910084][T20150] usb 1-1: Invalid ep0 maxpacket: 16
[ 1698.038806][T20150] usb 1-1: new low-speed USB device number 35 using dummy_hcd
[ 1698.069661][T20150] usb 1-1: Invalid ep0 maxpacket: 16
[ 1698.075264][T20150] usb usb1-port1: unable to enumerate USB device
[ 1698.158607][T13113] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1698.166595][T13113] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1698.180084][T13113] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1698.189286][T13113] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1698.199704][T13113] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1698.219183][ T9880] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[ 1698.220230][T11662] Failed to initialize the IGMP autojoin socket (err -2)
[ 1698.382913][ T9880] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 1698.394684][ T9880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1698.405593][ T9880] usb 4-1: Product: syz
[ 1698.412664][ T9880] usb 4-1: Manufacturer: syz
[ 1698.420028][ T9880] usb 4-1: SerialNumber: syz
[ 1698.430467][ T9880] usb 4-1: config 0 descriptor??
[ 1698.655436][ T5168] bcm5974 3-1:0.0: could not read from device
[ 1698.663913][ T5168] bcm5974 3-1:0.0: could not read from device
[ 1698.673392][ T5168] bcm5974 3-1:0.0: could not read from device
[ 1698.675596][T26275] usb 3-1: USB disconnect, device number 67
[ 1698.843264][ T9880] usb 4-1: Firmware: major: 213, minor: 124, hardware type: UNKNOWN (48)
[ 1699.044526][ T9880] usb 4-1: no permanent extended address found, random address set
[ 1699.054292][ T9880] usb 4-1: atusb_probe: initialization failed, error = -524
[ 1699.063709][ T9880] atusb 4-1:0.0: probe with driver atusb failed with error -524
[ 1699.257252][T20150] usb 4-1: USB disconnect, device number 54
[ 1699.762655][ T9828] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1699.774743][ T9828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1699.784806][ T9828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1699.800024][ T9828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1699.810875][ T9828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1699.838944][T20150] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[ 1699.855976][T11714] Failed to initialize the IGMP autojoin socket (err -2)
[ 1699.992558][ T9880] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[ 1700.020528][T20150] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[ 1700.040280][T20150] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1700.066665][T20150] usb 3-1: config 220 has 2 interfaces, different from the descriptor's value: 3
[ 1700.079347][T20150] usb 3-1: config 220 has no interface number 1
[ 1700.085794][T20150] usb 3-1: config 220 interface 0 has no altsetting 0
[ 1700.099017][T20150] usb 3-1: config 220 interface 76 has no altsetting 0
[ 1700.120602][T20150] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1700.135333][T20150] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1700.148334][T20150] usb 3-1: Product: syz
[ 1700.152604][T20150] usb 3-1: Manufacturer: syz
[ 1700.160040][T20150] usb 3-1: SerialNumber: syz
[ 1700.200496][ T9880] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[ 1700.211418][ T9880] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1700.224368][ T9880] usb 1-1: config 220 has 2 interfaces, different from the descriptor's value: 3
[ 1700.241021][ T9880] usb 1-1: config 220 has no interface number 1
[ 1700.251586][ T9880] usb 1-1: config 220 interface 0 has no altsetting 0
[ 1700.262288][ T9880] usb 1-1: config 220 interface 76 has no altsetting 0
[ 1700.285512][ T9880] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1700.296538][ T9880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1700.310646][ T9880] usb 1-1: Product: syz
[ 1700.314837][ T9880] usb 1-1: Manufacturer: syz
[ 1700.321382][ T9880] usb 1-1: SerialNumber: syz
[ 1700.393841][T20150] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[ 1700.405606][T20150] uvcvideo 3-1:220.0: No valid video chain found.
[ 1700.424984][T20150] usb 3-1: USB disconnect, device number 68
[ 1700.560535][ T9880] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[ 1700.569915][ T9880] uvcvideo 1-1:220.0: No valid video chain found.
[ 1700.583497][ T9880] usb 1-1: USB disconnect, device number 36
[ 1701.641107][T11756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5296'.
[ 1701.724736][T11766] netlink: 'syz.0.5298': attribute type 6 has an invalid length.
[ 1702.856190][T11771] netlink: 'syz.0.5299': attribute type 6 has an invalid length.
[ 1703.024586][T11775] FAULT_INJECTION: forcing a failure.
[ 1703.024586][T11775] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1703.044008][T11775] CPU: 1 UID: 0 PID: 11775 Comm: syz.0.5299 Not tainted syzkaller #0 PREEMPT(full) 
[ 1703.044031][T11775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1703.044043][T11775] Call Trace:
[ 1703.044049][T11775]  <TASK>
[ 1703.044057][T11775]  dump_stack_lvl+0x16c/0x1f0
[ 1703.044089][T11775]  should_fail_ex+0x512/0x640
[ 1703.044120][T11775]  _copy_from_user+0x2e/0xd0
[ 1703.044150][T11775]  io_sync_cancel+0x16d/0x6c0
[ 1703.044181][T11775]  ? __pfx_io_sync_cancel+0x10/0x10
[ 1703.044206][T11775]  ? __pfx___schedule+0x10/0x10
[ 1703.044236][T11775]  ? __lock_acquire+0xb97/0x1ce0
[ 1703.044266][T11775]  ? __pfx_autoremove_wake_function+0x10/0x10
[ 1703.044303][T11775]  ? __pfx___mutex_trylock_common+0x10/0x10
[ 1703.044325][T11775]  __io_uring_register+0x16cb/0x2460
[ 1703.044353][T11775]  ? trace_contention_end+0xdd/0x130
[ 1703.044371][T11775]  ? __pfx___io_uring_register+0x10/0x10
[ 1703.044405][T11775]  ? __pfx___mutex_lock+0x10/0x10
[ 1703.044440][T11775]  ? __fget_files+0x20e/0x3c0
[ 1703.044466][T11775]  __x64_sys_io_uring_register+0x169/0x280
[ 1703.044498][T11775]  do_syscall_64+0xcd/0xfa0
[ 1703.044526][T11775]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1703.044544][T11775] RIP: 0033:0x7f573b18eec9
[ 1703.044560][T11775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1703.044577][T11775] RSP: 002b:00007f573bf8e038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab
[ 1703.044595][T11775] RAX: ffffffffffffffda RBX: 00007f573b3e6180 RCX: 00007f573b18eec9
[ 1703.044607][T11775] RDX: 0000200000000000 RSI: 0000000000000018 RDI: 0000000000000005
[ 1703.044618][T11775] RBP: 00007f573bf8e090 R08: 0000000000000000 R09: 0000000000000000
[ 1703.044629][T11775] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001
[ 1703.044639][T11775] R13: 00007f573b3e6218 R14: 00007f573b3e6180 R15: 00007ffd917e5fe8
[ 1703.044666][T11775]  </TASK>
[ 1703.850008][ T9828] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1703.909147][ T9828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1703.910894][ T8417] libceph: mon0 (1)[c::]:6789 connect error
[ 1703.923751][ T9828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1703.939576][ T9828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1703.950341][ T9828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1704.099332][T11776] Failed to initialize the IGMP autojoin socket (err -2)
[ 1704.165362][T11781] ceph: No mds server is up or the cluster is laggy
[ 1704.199004][T20150] libceph: mon0 (1)[c::]:6789 connect error
[ 1704.598791][T20150] usb 3-1: new low-speed USB device number 69 using dummy_hcd
[ 1704.769559][T20150] usb 3-1: Invalid ep0 maxpacket: 16
[ 1704.898089][T20150] usb 3-1: new low-speed USB device number 70 using dummy_hcd
[ 1705.058616][T20150] usb 3-1: Invalid ep0 maxpacket: 16
[ 1705.064200][T20150] usb usb3-port1: attempt power cycle
[ 1705.408594][T20150] usb 3-1: new low-speed USB device number 71 using dummy_hcd
[ 1705.428544][T20150] usb 3-1: Invalid ep0 maxpacket: 16
[ 1705.558651][T20150] usb 3-1: new low-speed USB device number 72 using dummy_hcd
[ 1705.578413][T20150] usb 3-1: Invalid ep0 maxpacket: 16
[ 1705.583853][T20150] usb usb3-port1: unable to enumerate USB device
[ 1706.129288][T11805] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16242 sclass=netlink_route_socket pid=11805 comm=syz.0.5303
[ 1706.324635][T13113] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1706.336421][T13113] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1706.346150][T13113] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1706.359765][T13113] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1706.369297][T13113] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1706.402589][T11811] Failed to initialize the IGMP autojoin socket (err -2)
[ 1706.410973][T20150] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[ 1706.578920][T20150] usb 1-1: Using ep0 maxpacket: 16
[ 1706.584862][T20150] usb 1-1: too many configurations: 123, using maximum allowed: 8
[ 1706.599678][T20150] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1706.629646][T20150] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1706.659549][T20150] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1706.668558][ T9880] usb 4-1: new low-speed USB device number 55 using dummy_hcd
[ 1706.677539][T20150] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1706.678761][T20150] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1706.679550][T20150] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1706.748966][T20150] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1706.761240][T20150] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1706.774197][T20150] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[ 1706.785031][T20150] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45
[ 1706.805118][T20150] usb 1-1: SerialNumber: syz
[ 1706.832977][T20150] usb 1-1: config 0 descriptor??
[ 1706.843802][T20150] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input70
[ 1706.848290][ T9880] usb 4-1: device descriptor read/64, error -71
[ 1707.054912][ T5168] bcm5974 1-1:0.0: could not read from device
[ 1707.063296][ T8289] usb 1-1: USB disconnect, device number 37
[ 1707.099015][ T9880] usb 4-1: new low-speed USB device number 56 using dummy_hcd
[ 1707.241663][ T9880] usb 4-1: device descriptor read/64, error -71
[ 1707.358643][ T9880] usb usb4-port1: attempt power cycle
[ 1707.699179][ T9880] usb 4-1: new low-speed USB device number 57 using dummy_hcd
[ 1707.729017][ T9880] usb 4-1: device descriptor read/8, error -71
[ 1707.969096][ T9880] usb 4-1: new low-speed USB device number 58 using dummy_hcd
[ 1707.999628][ T9880] usb 4-1: device descriptor read/8, error -71
[ 1708.109204][ T9880] usb usb4-port1: unable to enumerate USB device
[ 1709.051280][T13113] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1709.063655][T13113] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1709.073418][T13113] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1709.082912][T13113] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1709.092971][T13113] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1709.221843][T11858] Failed to initialize the IGMP autojoin socket (err -2)
[ 1709.348612][ T5924] usb 3-1: new high-speed USB device number 73 using dummy_hcd
[ 1710.169719][ T5924] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[ 1710.179971][ T5924] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1710.235777][ T5924] usb 3-1: config 220 has 2 interfaces, different from the descriptor's value: 3
[ 1710.246308][ T5924] usb 3-1: config 220 has no interface number 1
[ 1710.254128][ T5924] usb 3-1: config 220 interface 0 has no altsetting 0
[ 1710.262189][ T5924] usb 3-1: config 220 interface 76 has no altsetting 0
[ 1710.347402][ T5924] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1710.356560][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1710.365705][ T5924] usb 3-1: Product: syz
[ 1710.372341][ T5924] usb 3-1: Manufacturer: syz
[ 1710.379104][ T5924] usb 3-1: SerialNumber: syz
[ 1710.595122][ T5924] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[ 1710.605220][ T5924] uvcvideo 3-1:220.0: No valid video chain found.
[ 1710.616204][ T5924] usb 3-1: USB disconnect, device number 73
[ 1712.019694][T11903] netlink: 4400 bytes leftover after parsing attributes in process `syz.0.5311'.
[ 1712.873995][T11919] netlink: 212 bytes leftover after parsing attributes in process `syz.2.5314'.
[ 1713.073099][T20150] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[ 1713.183737][ T9828] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1713.195685][ T9828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1713.205447][ T9828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1713.215607][ T9828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1713.231670][ T9828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1713.262288][T11920] Failed to initialize the IGMP autojoin socket (err -2)
[ 1713.273701][T11903] binder: 11898:11903 ioctl c0306201 0 returned -14
[ 1713.354876][T11927] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16242 sclass=netlink_route_socket pid=11927 comm=syz.2.5315
[ 1713.373489][T20150] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1713.384416][T20150] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1713.409624][T20150] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1713.419959][T20150] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1713.542639][T20150] usb 4-1: Product: syz
[ 1713.580097][T20150] usb 4-1: Manufacturer: syz
[ 1713.584723][T20150] usb 4-1: SerialNumber: syz
[ 1713.630745][T20150] usb 4-1: config 0 descriptor??
[ 1713.650346][T20150] usb 4-1: selecting invalid altsetting 0
[ 1713.668661][ T5924] usb 3-1: new high-speed USB device number 74 using dummy_hcd
[ 1713.828659][ T5924] usb 3-1: Using ep0 maxpacket: 16
[ 1713.834227][ T5924] usb 3-1: too many configurations: 123, using maximum allowed: 8
[ 1713.848105][ T5924] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1713.861285][ T5924] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1713.875915][ T5924] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1713.888668][ T5924] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1713.900684][ T5924] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1713.912738][ T5924] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1713.926880][ T5924] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1713.939734][ T5924] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1713.952855][ T5924] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[ 1713.963890][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45
[ 1713.973814][ T5924] usb 3-1: SerialNumber: syz
[ 1713.985597][ T5924] usb 3-1: config 0 descriptor??
[ 1713.996295][ T5924] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input71
[ 1714.075559][T20150] usb 4-1: USB disconnect, device number 59
[ 1714.199554][ T5168] bcm5974 3-1:0.0: could not read from device
[ 1714.206200][ T5168] bcm5974 3-1:0.0: could not read from device
[ 1714.219591][ T5924] usb 3-1: USB disconnect, device number 74
[ 1715.434170][ T8289] libceph: mon0 (1)[c::]:6789 connect error
[ 1715.568839][T11984] ceph: No mds server is up or the cluster is laggy
[ 1715.844494][ T8289] libceph: mon0 (1)[c::]:6789 connect error
[ 1716.072201][ T9828] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1716.085702][ T9828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1716.088142][ T5924] usb 1-1: new low-speed USB device number 38 using dummy_hcd
[ 1716.102714][ T9828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1716.216579][ T9828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1716.225326][ T9828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1716.253204][T12003] Failed to initialize the IGMP autojoin socket (err -2)
[ 1716.298151][ T5924] usb 1-1: Invalid ep0 maxpacket: 16
[ 1717.232529][ T5924] usb 1-1: new low-speed USB device number 39 using dummy_hcd
[ 1717.398116][ T5924] usb 1-1: Invalid ep0 maxpacket: 16
[ 1717.403747][ T5924] usb usb1-port1: attempt power cycle
[ 1717.798703][ T5924] usb 1-1: new low-speed USB device number 40 using dummy_hcd
[ 1717.820717][ T5924] usb 1-1: Invalid ep0 maxpacket: 16
[ 1717.948029][ T5924] usb 1-1: new low-speed USB device number 41 using dummy_hcd
[ 1717.969062][ T5924] usb 1-1: Invalid ep0 maxpacket: 16
[ 1717.974615][ T5924] usb usb1-port1: unable to enumerate USB device
[ 1720.111120][T12033] mkiss: ax0: crc mode is auto.
[ 1720.258542][T12043] input: syz0 as /devices/virtual/input/input72
[ 1720.280634][T20407] block nbd1: Possible stuck request ffff8880262f0000: control (read@0,1024B). Runtime 420 seconds
[ 1720.294549][T20407] block nbd1: Possible stuck request ffff8880262f01c0: control (read@1024,1024B). Runtime 420 seconds
[ 1720.309174][T20407] block nbd1: Possible stuck request ffff8880262f0380: control (read@2048,1024B). Runtime 420 seconds
[ 1720.321713][T20407] block nbd1: Possible stuck request ffff8880262f0540: control (read@3072,1024B). Runtime 420 seconds
[ 1720.786067][T13113] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1720.809411][T13113] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1720.829143][T13113] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1720.848853][T13113] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1720.856310][T13113] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1720.910028][T12059] Failed to initialize the IGMP autojoin socket (err -2)
[ 1720.929884][T12063] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16242 sclass=netlink_route_socket pid=12063 comm=syz.0.5328
[ 1721.378867][ T5924] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[ 1721.628544][ T5924] usb 1-1: Using ep0 maxpacket: 16
[ 1721.634484][ T5924] usb 1-1: too many configurations: 123, using maximum allowed: 8
[ 1721.648685][ T5924] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1721.661630][ T5924] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1721.675798][ T5924] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1721.689631][ T5924] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1721.701662][ T5924] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1721.714141][ T5924] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1721.728328][ T5924] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1721.743144][ T5924] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1721.755284][ T5924] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[ 1721.765620][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45
[ 1721.839061][ T5924] usb 1-1: SerialNumber: syz
[ 1721.892822][ T5924] usb 1-1: config 0 descriptor??
[ 1721.903704][ T5924] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input73
[ 1722.117378][ T5168] bcm5974 1-1:0.0: could not read from device
[ 1722.125526][ T5168] bcm5974 1-1:0.0: could not read from device
[ 1722.128803][ T5924] usb 1-1: USB disconnect, device number 42
[ 1723.874537][T20150] libceph: mon0 (1)[c::]:6789 connect error
[ 1723.988915][T12145] ceph: No mds server is up or the cluster is laggy
[ 1724.115842][ T9880] usb 3-1: new high-speed USB device number 75 using dummy_hcd
[ 1724.118421][   T31] INFO: task syz.1.4965:7136 blocked for more than 143 seconds.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1724.253139][ T5924] libceph: mon0 (1)[c::]:6789 connect error
[ 1724.281834][   T30] audit: type=1400 audit(1759956362.328:1183): avc:  denied  { write } for  pid=5796 comm="syz-executor" path="pipe:[5178]" dev="pipefs" ino=5178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[ 1724.313426][   T31]       Not tainted syzkaller #0
[ 1724.319624][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1724.331193][   T31] task:syz.1.4965      state:D stack:27704 pid:7136  tgid:7135  ppid:27498  task_flags:0x400040 flags:0x00080002
[ 1724.438648][ T5924] usb 4-1: new low-speed USB device number 60 using dummy_hcd
[ 1724.446292][   T31] Call Trace:
[ 1724.456642][   T31]  <TASK>
[ 1724.459629][   T31]  __schedule+0x1190/0x5de0
[ 1724.464169][   T31]  ? __lock_acquire+0x62e/0x1ce0
[ 1724.515965][   T31]  ? __pfx___schedule+0x10/0x10
[ 1724.539242][   T31]  ? find_held_lock+0x2b/0x80
[ 1724.543951][   T31]  ? schedule+0x2d7/0x3a0
[ 1724.579138][ T9880] usb 3-1: Using ep0 maxpacket: 32
[ 1724.588948][   T31]  ? bdev_open+0x41a/0xe40
[ 1724.593418][   T31]  schedule+0xe7/0x3a0
[ 1724.639374][   T31]  schedule_preempt_disabled+0x13/0x30
[ 1724.644887][   T31]  __mutex_lock+0x818/0x1060
[ 1724.668524][   T31]  ? bdev_open+0x41a/0xe40
[ 1724.688034][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 1724.693127][   T31]  ? bdev_open+0x41a/0xe40
[ 1724.719081][   T31]  bdev_open+0x41a/0xe40
[ 1724.723394][   T31]  ? iput+0x35/0x40
[ 1724.730827][   T31]  blkdev_open+0x34e/0x4f0
[ 1724.735293][   T31]  do_dentry_open+0x97f/0x1530
[ 1724.778612][   T31]  ? __pfx_blkdev_open+0x10/0x10
[ 1724.783638][   T31]  vfs_open+0x82/0x3f0
[ 1724.799374][   T31]  path_openat+0x1de4/0x2cb0
[ 1724.804026][   T31]  ? __pfx_path_openat+0x10/0x10
[ 1724.811383][   T31]  do_filp_open+0x20b/0x470
[ 1724.815922][   T31]  ? __pfx_do_filp_open+0x10/0x10
[ 1724.829126][T20150] libceph: mon0 (1)[c::]:6789 connect error
[ 1724.868748][   T31]  ? alloc_fd+0x471/0x7d0
[ 1724.873145][   T31]  do_sys_openat2+0x11b/0x1d0
[ 1724.880751][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1724.885985][   T31]  ? find_held_lock+0x2b/0x80
[ 1724.959194][   T31]  ? handle_mm_fault+0x2ab/0xd10
[ 1724.964215][   T31]  __x64_sys_openat+0x174/0x210
[ 1724.979098][   T31]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1724.984528][   T31]  ? do_user_addr_fault+0x843/0x1370
[ 1724.999064][   T31]  do_syscall_64+0xcd/0xfa0
[ 1725.003640][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1725.028640][   T31] RIP: 0033:0x7f203958d710
[ 1725.033111][   T31] RSP: 002b:00007f203a48ab70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[ 1725.144355][   T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f203958d710
[ 1725.154378][   T31] RDX: 0000000000000000 RSI: 00007f203a48ac10 RDI: 00000000ffffff9c
[ 1725.164480][   T31] RBP: 00007f203a48ac10 R08: 0000000000000000 R09: 002364626e2f7665
[ 1725.175170][   T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd
[ 1725.186096][   T31] R13: 00007f20397e6038 R14: 00007f20397e5fa0 R15: 00007fff54a95d78
[ 1725.196567][   T31]  </TASK>
[ 1725.202219][   T31] 
[ 1725.202219][   T31] Showing all locks held in the system:
[ 1725.279055][   T31] 1 lock held by pool_workqueue_/3:
[ 1725.284315][   T31]  #0: ffffffff8e3cfa38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0
[ 1725.348654][   T31] 1 lock held by khungtaskd/31:
[ 1725.353569][   T31]  #0: ffffffff8e3c44a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0
[ 1725.365602][   T31] 2 locks held by getty/5566:
[ 1725.372917][   T31]  #0: ffff88814d2dd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[ 1725.385288][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0
[ 1725.398925][   T31] 5 locks held by kworker/0:7/5924:
[ 1725.404148][   T31]  #0: ffff888144ad3148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[ 1725.419139][   T31]  #1: ffffc9000450fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[ 1725.432995][   T31]  #2: ffff888144ffc198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fe0
[ 1725.444371][   T31]  #3: ffff888144fff518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2981/0x4fe0
[ 1725.456436][   T31]  #4: ffff888144f95b68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x29aa/0x4fe0
[ 1725.469445][   T31] 1 lock held by udevd/19370:
[ 1725.474156][   T31]  #0: ffff8880261f3358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40
[ 1725.485542][   T31] 3 locks held by kworker/u9:2/25675:
[ 1725.492682][   T31]  #0: ffff888033a07148 ((wq_completion)hci4){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[ 1725.504736][   T31]  #1: ffffc90004d17d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[ 1725.518483][   T31]  #2: ffff888033a60dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x175/0x430
[ 1725.533299][   T31] 1 lock held by syz.1.4965/7136:
[ 1725.540191][   T31]  #0: ffff8880261f3358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40
[ 1725.551719][   T31] 3 locks held by kworker/u8:4/9498:
[ 1725.559311][   T31]  #0: ffff88813ff69948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[ 1725.572383][   T31]  #1: ffffc9000ca47d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[ 1725.584730][   T31]  #2: ffffffff900fa888 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0
[ 1725.595558][   T31] 5 locks held by kworker/1:3/9880:
[ 1725.602508][   T31]  #0: ffff888144ad3148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[ 1725.616043][   T31]  #1: ffffc90004bdfd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[ 1725.629122][   T31]  #2: ffff888144fe4198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fe0
[ 1725.640407][   T31]  #3: ffff888144fe7518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2981/0x4fe0
[ 1725.652076][   T31]  #4: ffff888144f8f268 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x29aa/0x4fe0
[ 1725.663560][   T31] 1 lock held by syz.3.5332/12145:
[ 1725.670408][   T31]  #0: ffffffff8e3cfa38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0
[ 1725.682162][   T31] 1 lock held by syz.2.5331/12144:
[ 1725.689139][   T31]  #0: ffffffff900fa888 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230
[ 1725.699432][   T31] 1 lock held by syz.0.5330/12157:
[ 1725.704532][   T31]  #0: ffffffff900fa888 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230
[ 1725.715561][   T31] 
[ 1725.742623][   T31] =============================================
[ 1725.742623][   T31] 
[ 1725.788915][   T31] NMI backtrace for cpu 1
[ 1725.788937][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[ 1725.788959][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1725.788969][   T31] Call Trace:
[ 1725.788975][   T31]  <TASK>
[ 1725.788983][   T31]  dump_stack_lvl+0x116/0x1f0
[ 1725.789012][   T31]  nmi_cpu_backtrace+0x27b/0x390
[ 1725.789030][   T31]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1725.789055][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1725.789080][   T31]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[ 1725.789103][   T31]  watchdog+0xf3f/0x1170
[ 1725.789128][   T31]  ? rcu_is_watching+0x12/0xc0
[ 1725.789151][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1725.789169][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1725.789192][   T31]  ? __kthread_parkme+0x19e/0x250
[ 1725.789214][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1725.789232][   T31]  kthread+0x3c2/0x780
[ 1725.789246][   T31]  ? __pfx_kthread+0x10/0x10
[ 1725.789262][   T31]  ? rcu_is_watching+0x12/0xc0
[ 1725.789281][   T31]  ? __pfx_kthread+0x10/0x10
[ 1725.789295][   T31]  ret_from_fork+0x672/0x7d0
[ 1725.789307][   T31]  ? __pfx_kthread+0x10/0x10
[ 1725.789321][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1725.789346][   T31]  </TASK>
[ 1725.789371][   T31] Sending NMI from CPU 1 to CPUs 0:
[ 1725.940844][    C0] NMI backtrace for cpu 0
[ 1725.940858][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[ 1725.940874][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1725.940886][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[ 1725.940909][    C0] Code: e7 75 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 f6 24 00 fb f4 <e9> 0c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
[ 1725.940922][    C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c2
[ 1725.940934][    C0] RAX: 0000000007e8811d RBX: 0000000000000000 RCX: ffffffff8b6522d9
[ 1725.940944][    C0] RDX: 0000000000000000 RSI: ffffffff8db0265e RDI: ffffffff8bf1cfc0
[ 1725.940954][    C0] RBP: fffffbfff1c12f40 R08: 0000000000000001 R09: ffffed1017086655
[ 1725.940964][    C0] R10: ffff8880b84332ab R11: 0000000000000000 R12: 0000000000000000
[ 1725.940972][    C0] R13: ffffffff8e097a00 R14: ffffffff908323d0 R15: 0000000000000000
[ 1725.940980][    C0] FS:  0000000000000000(0000) GS:ffff8881249df000(0000) knlGS:0000000000000000
[ 1725.940995][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1725.941004][    C0] CR2: 00005595e4a2ead0 CR3: 000000000e182000 CR4: 00000000003526f0
[ 1725.941012][    C0] Call Trace:
[ 1725.941018][    C0]  <TASK>
[ 1725.941023][    C0]  default_idle+0x13/0x20
[ 1725.941036][    C0]  default_idle_call+0x6c/0xb0
[ 1725.941049][    C0]  do_idle+0x38d/0x500
[ 1725.941067][    C0]  ? __pfx_do_idle+0x10/0x10
[ 1725.941084][    C0]  ? trace_sched_exit_tp+0x2f/0x120
[ 1725.941102][    C0]  cpu_startup_entry+0x4f/0x60
[ 1725.941119][    C0]  rest_init+0x16b/0x2b0
[ 1725.941132][    C0]  ? acpi_subsystem_init+0x133/0x180
[ 1725.941150][    C0]  ? __pfx_x86_late_time_init+0x10/0x10
[ 1725.941169][    C0]  start_kernel+0x3f3/0x4e0
[ 1725.941187][    C0]  x86_64_start_reservations+0x18/0x30
[ 1725.941205][    C0]  x86_64_start_kernel+0x130/0x190
[ 1725.941224][    C0]  common_startup_64+0x13e/0x148
[ 1725.941245][    C0]  </TASK>
[ 1726.218168][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[ 1726.225064][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[ 1726.234178][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1726.244220][   T31] Call Trace:
[ 1726.247485][   T31]  <TASK>
[ 1726.250408][   T31]  dump_stack_lvl+0x3d/0x1f0
[ 1726.254985][   T31]  vpanic+0x640/0x6f0
[ 1726.258965][   T31]  panic+0xca/0xd0
[ 1726.262684][   T31]  ? __pfx_panic+0x10/0x10
[ 1726.267094][   T31]  ? preempt_schedule_thunk+0x16/0x30
[ 1726.272457][   T31]  ? nmi_trigger_cpumask_backtrace+0x1b1/0x300
[ 1726.278611][   T31]  ? watchdog+0xe48/0x1170
[ 1726.283015][   T31]  ? watchdog+0xe3b/0x1170
[ 1726.287422][   T31]  watchdog+0xe59/0x1170
[ 1726.291666][   T31]  ? rcu_is_watching+0x12/0xc0
[ 1726.296413][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1726.301070][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1726.306252][   T31]  ? __kthread_parkme+0x19e/0x250
[ 1726.311271][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1726.315938][   T31]  kthread+0x3c2/0x780
[ 1726.319998][   T31]  ? __pfx_kthread+0x10/0x10
[ 1726.324573][   T31]  ? rcu_is_watching+0x12/0xc0
[ 1726.329319][   T31]  ? __pfx_kthread+0x10/0x10
[ 1726.333900][   T31]  ret_from_fork+0x672/0x7d0
[ 1726.338510][   T31]  ? __pfx_kthread+0x10/0x10
[ 1726.343087][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1726.347840][   T31]  </TASK>
[ 1726.351054][   T31] Kernel Offset: disabled
[ 1726.355357][   T31] Rebooting in 86400 seconds..