last executing test programs:

6m25.59725893s ago: executing program 0 (id=700):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
r0 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, &(0x7f00000000c0), 0x10)
socket$packet(0x11, 0x3, 0x300)
sendmsg$can_bcm(r2, &(0x7f00000002c0)={&(0x7f0000000000), 0x10, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x24004001)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = socket(0x28, 0x1, 0x0)
r5 = socket$igmp(0x2, 0x3, 0x2)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014002000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0)
setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000000000), 0x4)
setsockopt$MRT_ADD_MFC(r5, 0x0, 0xcc, &(0x7f0000000100)={@empty, @multicast2, 0x0, "128cfb1a8440a9878abcbe5402d1aee00a150cfdd7d7c575a5fe3d306119e411", 0x2, 0x2, 0x7, 0x4}, 0x3c)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r8 = dup(r7)
write$6lowpan_enable(r8, 0x0, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
r9 = syz_io_uring_setup(0x110, &(0x7f0000000200)={0x0, 0x7ec0, 0x8, 0x5, 0x3d4}, &(0x7f0000000180)=<r10=>0x0, &(0x7f0000000140))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000002c0)={0x100042, 0xf7, 0x1}, 0x10)
io_uring_enter(r9, 0x1724, 0x5b53, 0xd, 0x0, 0x0)

6m21.060403405s ago: executing program 0 (id=706):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="736129bf513eb5490000", @ANYBLOB='\x00'/19, @ANYRES32, @ANYRES32=0x0], 0x50)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x40)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x100000)
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x14)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94)
mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000000200)='qnx6\x00', 0x8000, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10)
socket$qrtr(0x2a, 0x2, 0x0)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_debug_messages', 0x101842, 0x23)
write(r5, &(0x7f0000000140)="1e1508", 0x3)

6m19.088016079s ago: executing program 0 (id=709):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x1, 0x0, 0x2, 0x1, 0x9, 0x6}]}, &(0x7f00000001c0)='syzkaller\x00'}, 0x94) (async)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x40) (async)
fcntl$lock(0xffffffffffffffff, 0x26, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r3=>r1, {0x4}}, './file0\x00'})
io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000100)=[r1], 0x1)
fcntl$lock(0xffffffffffffffff, 0x7, 0x0) (async)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]})
close_range(r4, 0xffffffffffffffff, 0x0)

6m18.757281118s ago: executing program 0 (id=710):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18)
syz_open_dev$cec(&(0x7f00000002c0), 0x0, 0x183082)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0xff)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x1)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x6, 'dvmrp1\x00'})
openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0)
r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r0}, 0x8)
dup(r4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x98}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa}, 0x94)

6m17.636786616s ago: executing program 0 (id=712):
pipe2(&(0x7f0000000400)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
close(r1)
socket$nl_netfilter(0x10, 0x3, 0xc)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000280)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x12)
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000001c0))
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x44)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188)

6m11.096090109s ago: executing program 0 (id=726):
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (async)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x810}, 0x4084)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
ioctl$SOUND_MIXER_INFO(r3, 0x805c4d65, &(0x7f0000000180)) (async)
ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f0000000200)) (async)
syz_emit_ethernet(0xfdef, &(0x7f0000000880)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x20, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2, 0x1, "36dad83aea8d"}]}}}}}}, 0x0) (async)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0)

5m55.816778271s ago: executing program 32 (id=726):
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (async)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x810}, 0x4084)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
ioctl$SOUND_MIXER_INFO(r3, 0x805c4d65, &(0x7f0000000180)) (async)
ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f0000000200)) (async)
syz_emit_ethernet(0xfdef, &(0x7f0000000880)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x20, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2, 0x1, "36dad83aea8d"}]}}}}}}, 0x0) (async)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0)

1m15.53814902s ago: executing program 5 (id=1442):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0)
r0 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0xfa, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", &(0x7f00000001c0)=""/4103, 0x0, 0x0, 0x0, 0x0})
r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r4}, 0x94)
io_uring_enter(0xffffffffffffffff, 0xeb6, 0x26f7, 0x1c, &(0x7f0000000100)={[0x1]}, 0x8)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00')
mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r5, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0)
getdents64(r6, &(0x7f0000001f00)=""/4093, 0xffd)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0)
r7 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_dev$evdev(&(0x7f0000001500), 0x0, 0x0)

1m11.686581603s ago: executing program 5 (id=1449):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='\v\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fcdbcf2554000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40010)
ioperm(0x1, 0x1, 0x7)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r2)
r3 = socket(0x28, 0x5, 0x0)
r4 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r4, 0x4)
connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20)
recvfrom$inet_nvme(r3, 0x0, 0x0, 0x40000002, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001d00), 0xffffffffffffffff)
socket$inet6(0x10, 0x3, 0x0)
pselect6(0xfe41, &(0x7f0000000040)={0xd, 0x0, 0x0, 0x8000000}, 0x0, 0x0, 0x0, 0x0)
close(r0)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r0)
sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r6, 0x200, 0x70bd28, 0x27dfdbff, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x43}}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x80)

1m11.448227537s ago: executing program 5 (id=1451):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r2 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
recvmmsg(r4, &(0x7f0000000180), 0x0, 0x2062, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
r5 = socket(0x10, 0x3, 0x6)
r6 = socket(0x10, 0x3, 0x0)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x70400, 0x89)
r8 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(r8, 0x4c06, r8)
openat$cgroup_ro(r7, &(0x7f0000000140)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x20, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x1], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}}}}]}, 0x88}}, 0x20000000)
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000080)='./cgroup\x00', 0x0, 0x208000, 0x0)

1m8.338942083s ago: executing program 5 (id=1459):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
r2 = syz_open_dev$vim2m(&(0x7f00000002c0), 0xf, 0x2)
r3 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', <r4=>0x0})
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x94, 0x24, 0xc09, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {0x0, 0xf}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xb, 0x2], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0x20, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x9ad}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x2, 0x4})
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x13, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @ldst={0x3, 0x3, 0x2, 0x5, 0x7, 0x40, 0xfffffffffffffffc}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0x7, 0x3a, &(0x7f0000000480)=""/58, 0x1f00, 0x20, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0xe, 0x5, 0x7}, 0x10, 0x0, r3, 0xa, &(0x7f0000000940)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000980)=[{0x4, 0x2, 0x4, 0x4}, {0x4, 0x4, 0x9, 0x3}, {0x5, 0x4, 0xc}, {0x3, 0x5, 0xa, 0x8}, {0x5, 0x3, 0x10, 0xc}, {0x4, 0x5, 0x5, 0x8}, {0x5, 0x4, 0x10, 0x5}, {0x0, 0x2, 0x3, 0x9}, {0x3, 0x4, 0xf}, {0x2, 0x4, 0xf, 0x4}], 0x10, 0x7fffffff}, 0x94)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r6, 0x560f, &(0x7f0000000100)={0x1, 0x1, 0x19, 0x1f, 0xbb, 0x0})
ptrace$peeksig(0x4209, r5, &(0x7f0000000180)={0x9d, 0x1}, &(0x7f00000003c0))
r7 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83)
dup(r0)
getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@broadcast, @in=@remote}}, {{@in6=@empty}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8)
mount$9p_unix(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2a05004, 0x0)

1m4.980742992s ago: executing program 5 (id=1465):
socket$can_bcm(0x1d, 0x2, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22)
rmdir(&(0x7f0000000080)='./cgroup/../file0\x00')
getrlimit(0xd, &(0x7f0000000040))
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_ACTIVATE(r3, 0x5601, 0xfffffffffffffffc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="6a0ac4ff000000007110a90000000000950000000000000045d2683ae1bbfbb7e56077368ec312f3ab390165988ebac12568280703fc7525a55be85207f38200d569eb9c1f03210e2f50623a4c1dc2298ee28a9e7eeaf3d7d5951c"], &(0x7f0000000480)='GPL\x00'}, 0x90)
r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
keyctl$dh_compute(0x17, &(0x7f0000000700), &(0x7f0000000780), 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={'blake2s-128-generic\x00'}, &(0x7f0000000800)="16488a99a96b2b2862ca51fd34fbe6bb6cc4828fa5258d60c7c0b7ed804474b8237f458e0547090878c78ee564f9019c8cc77517486bffae55160b769cd9b44d061db1177f05ae87948702105448de8e102c34bfa82c4a81126a13dff8f69c5c01d9e59e499f410de14a1bcb18ee20796bbdf082da634deead0ea8c67eed3dfff019a4d215cee97358493d241ee782c7c201a48b8091362c8d0133000fac8085397c9b907565836d465e001298ca4515ee01fae816", 0xb5})
fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0xc)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, 0x0, 0x4000)
r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
mount_setattr(0xffffffffffffffff, 0x0, 0x8100, 0x0, 0x37)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @remote, @local}, &(0x7f0000000240)=0xc)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0}, 0x44005)
write$cgroup_subtree(r6, &(0x7f0000000980)={[{0x2d, 'pids'}]}, 0x1f)

1m4.732540892s ago: executing program 5 (id=1466):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8)
r1 = syz_open_procfs(0xffffffffffffffff, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, 0x0, 0x0)
fchmod(0xffffffffffffffff, 0x32)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback, 0x2}, 0x1c)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000000c0)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x1c)
r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0x2, 0xfffffffffffffff1, 0x59c})
ioctl$SG_BLKTRACETEARDOWN(r5, 0x1276, 0x20000000)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x42, 0xce)
close(r6)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)
r7 = creat(&(0x7f0000000300)='./file0\x00', 0xecf86c37d53049cc)
close(r7)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x42400, 0x0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, 0x0)

1m4.458626892s ago: executing program 33 (id=1466):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8)
r1 = syz_open_procfs(0xffffffffffffffff, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, 0x0, 0x0)
fchmod(0xffffffffffffffff, 0x32)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback, 0x2}, 0x1c)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000000c0)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x1c)
r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0x2, 0xfffffffffffffff1, 0x59c})
ioctl$SG_BLKTRACETEARDOWN(r5, 0x1276, 0x20000000)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x42, 0xce)
close(r6)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)
r7 = creat(&(0x7f0000000300)='./file0\x00', 0xecf86c37d53049cc)
close(r7)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x42400, 0x0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, 0x0)

12.942487691s ago: executing program 3 (id=1570):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
creat(&(0x7f00000002c0)='./file0\x00', 0x51)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r2 = dup(r1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000001040108000000000000000001000004300002002c00018014000300fe8800000000000000000000000000011400040100010000000000000000000000000001"], 0x44}, 0x1, 0x0, 0x0, 0x10000000}, 0x8)
syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_readahead}], [{@euid_lt}], 0x6b}})
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r6, 0x800448d7, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
fsopen(&(0x7f00000000c0)='nfsd\x00', 0x1)
truncate(&(0x7f0000000240)='./file0\x00', 0x206b12)
epoll_create(0x400)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa2f00, 0xa3)

12.853394191s ago: executing program 1 (id=1571):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc", 0x13}], 0x1}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a)
write(r2, &(0x7f0000000000)="240000001a005f0400f9f407000904018000200000000000000000000800020040000000", 0x24)
r3 = syz_open_dev$loop(&(0x7f0000000140), 0x9, 0x40000)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd00000080190000000000000800", [0x0, 0x2000000000001]}})
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r5, &(0x7f0000000040), 0xe)
setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, 0x0, 0x0)
r6 = gettid()
ptrace$ARCH_GET_UNTAG_MASK(0x1e, r6, &(0x7f0000000080), 0x4001)
syz_open_dev$sg(&(0x7f0000000100), 0x5cb917f1, 0x420000)
setsockopt$packet_int(r4, 0x107, 0xf, 0x0, 0x0)
sendto$packet(r4, &(0x7f0000000040), 0x0, 0x1, 0x0, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r8 = accept4(r7, 0x0, 0x0, 0x80000)
sendmsg$TIPC_NL_LINK_SET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[], 0xb90}, 0x1, 0x0, 0x0, 0x400c010}, 0x20004000)
recvmsg(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001680)=""/4084, 0xff4}], 0x1}, 0x12041)

9.437006585s ago: executing program 2 (id=1573):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000000c0), 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000b91000/0xf000)=nil, 0xf000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x13, r1, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x101fd, 0x0, 0x2, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x7, 0x0, 0xfffffffffffffffe]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000002c0)={"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"})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r6 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_genetlink_get_family_id$tipc2(0x0, r5)
sched_setscheduler(r6, 0x6, &(0x7f0000000040)=0x10001)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e)
accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, 0x0, 0x800)
bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e23, 0x8003, @loopback, 0x90}, 0x1c)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

9.303759844s ago: executing program 3 (id=1575):
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0xfffffffffffffe44, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x2, 0x3}, 0x18, 0x1)
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x80800)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd00000080190000000000000000000000c9ff00", [0x0, 0x2000000000001]}})

9.303234384s ago: executing program 1 (id=1576):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
ioctl$CEC_DQEVENT(r0, 0xc0506107, &(0x7f0000000180))
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000c0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
write$vga_arbiter(r4, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc)
write$vga_arbiter(r4, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6, 0x0, 0x0, 0x0, <r7=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r5, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r7, r6, <r8=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$IOMMU_HWPT_ALLOC$TEST(r5, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r7, r8, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)})

9.02637912s ago: executing program 4 (id=1577):
r0 = syz_usb_connect(0x0, 0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003353c920ca2e01c105740102030109025400010000100009047d0002ff62780010240202020007000601385e0130a8f9072401042001100f2402017f040202468d3c4891230e0a24020107040906c645090502100002020000090582020002000000"], 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x5, 0x0)
dup2(r1, r1)
socket$inet6(0xa, 0x2, 0x40)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='gpio_value\x00', 0xffffffffffffffff, 0x0, 0xb53}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
r2 = getpid()
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(r2, 0x0, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
socket$unix(0x1, 0x9578712ef41b126, 0x0)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r5)
socket$inet6_mptcp(0xa, 0x1, 0x106)
setresuid(0x0, 0xee01, 0x0)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/4\x00')

8.815015932s ago: executing program 3 (id=1578):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
r0 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
socket$packet(0x11, 0x3, 0x300)
sendmsg$can_bcm(r2, &(0x7f00000002c0)={&(0x7f0000000000), 0x10, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x24004001)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = socket(0x28, 0x1, 0x0)
r5 = socket$igmp(0x2, 0x3, 0x2)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014002000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0)
setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000000000), 0x4)
setsockopt$MRT_ADD_MFC(r5, 0x0, 0xcc, &(0x7f0000000100)={@empty, @multicast2, 0x0, "128cfb1a8440a9878abcbe5402d1aee00a150cfdd7d7c575a5fe3d306119e411", 0x2, 0x2, 0x7, 0x4}, 0x3c)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r8 = dup(r7)
write$6lowpan_enable(r8, 0x0, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
r9 = syz_io_uring_setup(0x110, &(0x7f0000000200)={0x0, 0x7ec0, 0x8, 0x5, 0x3d4}, &(0x7f0000000180)=<r10=>0x0, &(0x7f0000000140)=<r11=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000002c0)={0x100042, 0xf7, 0x1}, 0x10)
syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r9, 0x1724, 0x5b53, 0xd, 0x0, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0)

8.095236953s ago: executing program 1 (id=1579):
r0 = socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, <r1=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32, @ANYBLOB='\x00\x00', @ANYRES32=0x0, @ANYBLOB='\x00'/12], 0x50)
openat$ppp(0xffffffffffffff9c, 0x0, 0x80900, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x1f, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf14}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000440)='syzkaller\x00', 0x2db1, 0x6c, &(0x7f0000000540)=""/108, 0x41000, 0x0, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000a00)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000a40)={0x1, 0xd, 0x8, 0x5}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x0, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x5}, {0x0, [0x88e46d092475e75b, 0x0, 0x5f]}}, 0x0, 0x1d}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)

7.652014559s ago: executing program 2 (id=1580):
syz_usb_connect(0x2, 0x24, &(0x7f0000000880)={{0x12, 0x1, 0x300, 0xe1, 0x5d, 0x84, 0x10, 0x644, 0x800f, 0xd2f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x81, 0x9, 0x30, 0x0, [{{0x9, 0x4, 0x91, 0xfa, 0x0, 0xc7, 0xc7, 0xcd, 0x2}}]}}]}}, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0}) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) (async)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) (async)
epoll_pwait2(r0, 0x0, 0x0, &(0x7f0000000300)={0x77359400}, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async)
write$P9_RWSTAT(r0, &(0x7f0000000200)={0x7, 0x7f, 0x2}, 0x7)
syz_usb_connect$cdc_ncm(0x2, 0x84, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x2, 0x1, 0x5, 0x60, 0xe, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "1f3dede7"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x5b, 0x0, 0x2, 0x2}, {0x6, 0x24, 0x1a, 0x71, 0x1}, [@mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x0, 0x3}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x5}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x8956780945809854, 0x4, 0x9, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x6, 0x1, 0xc}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x0, 0x8, 0x1}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x0, 0x6, 0x5, 0xff, 0x49}, 0x3e, &(0x7f0000000100)={0x5, 0xf, 0x3e, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x8, 0xb, 0x9}, @ssp_cap={0x18, 0x10, 0xa, 0xa, 0x3, 0x3, 0xf, 0x3, [0xffc000, 0x3f00, 0x0]}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "a6e3b53043dd3d9b2018abd6f877475a"}]}, 0x6, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x445}}, {0xa0, &(0x7f00000001c0)=@string={0xa0, 0x3, "5a909b22b0fe59d22d08beab84b5d206ba366d3e82a1d03e8eb182998eadcb2a7fac5a77529692294fed34c4319cca9c126a71e015f923db7d951d5c2a0e5e02e91fd0655d4d2830e8dda982b7bcc35c9dc1a56d45419f299c2b591e84fb85adc6475be4cfa7b3dd577e9eb0de7e10876fc5b7fb786ba1e2e16adb350ef44afa0fce9db6db99c063c2243dfd85dcb8457b4e82baa30fb5464abefe5189ec"}}, {0xe6, &(0x7f0000000280)=@string={0xe6, 0x3, "07b417f701a7da33ad9675f024dab329b4abf5ffda3b75098abbc0e1ef3e54ec1895f757db57aae13bfb85f5de077300850d3f4a2caa8a92bf145535bf5e406acf68dcbd7bbd9dc9f7ae44cfa7854542aa612a5ddb43e2a702b745a8df2ccfbcd6171026e772a4808aecac365340833405167e3a8bd83dd86edd56fba8c8f0914d5dc08fb7488a18d5f5b0eb548c225dcce715274e992e94717938b356546f647c224d2f54eee49c6d48ec4edecf190c8564badae4620ec201821c3b296fdc6e6c9f0691fe31e81c5bc19b9f79a30dd4643eecb0591806ff571b7e65269412abd3fee5ae"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x412}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x3c01}}]})

7.271297922s ago: executing program 3 (id=1581):
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000006180), 0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
syz_emit_ethernet(0x52, &(0x7f0000000800)=ANY=[@ANYBLOB="0180c2000000ca007d05008686dd60ff38f5001c0600fe80000000000000000000000000000bfe8000000000000000000000000000aa730000000000000000004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500400000000"], 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
sendmsg$key(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001b00)=ANY=[@ANYBLOB="021070091c00000028bd7000fddbdf2502001000000004d6000004d4005700000005001a00ac1414aa000000000000000000000000e00000010000000000000000000000001800101002001000000004d2000004d4000000001100180010ac7d00f0a98eaac80517f1a57f72b1240b82a10d875aa2195b90abd17fa1cdfe1f588b99fff796db7b227151389b328015862bb9dae18cf15e4c8afd3067df0ab12338ae0f3f4ee324289876e8f63fccf459281d80df4d6594dfc799962003c31a71a13caad2c7ee34bfbd2481149797e5fdbfea41ff11f96a86038092b1ede9000000"], 0xe0}}, 0x44040800)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000040), 0x4)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000400)={0x8, &(0x7f0000000440)=[{0x5, 0xd0}, {0x0, 0x8fb3}, {0x5, 0x2}, {0x3, 0x9}, {0xfffd, 0x6}, {0x80, 0x1}, {0xc2, 0x9}, {0x2, 0x100}]})
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r6)
sendmsg$NFC_CMD_GET_TARGET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r7, 0x315, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc8c1}, 0x4000094)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4})
r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[<r9=>0x0], 0x0, 0x0, 0xfffffd52, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000280)={0x3, r9, 0x1, 0xffff, 0xa, 0x1ff, 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000001a80)=[0x0, r9, 0x0, 0x0, 0x0, 0x0], 0x6, 0x800, 0x0, <r10=>0xffffffffffffffff})
recvmsg$can_raw(r10, &(0x7f0000000480)={&(0x7f0000000140)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000300)=""/1, 0x1}, {&(0x7f0000000500)=""/222, 0xde}], 0x2, &(0x7f0000000340)=""/53, 0x35}, 0x60)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

7.2139857s ago: executing program 1 (id=1582):
openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)="d212662320d68d482adc999d8a933b0690aff5dab933bc7f602e7587e3cc8f499b2a72a844b7d924656064b77e7635e3c880bbe9501a428d078bc8b5e9dbccf3af26e2c53285df2d2193446d1acd4fdc70f80fc254ab092b05a42b76f680a8db8ca01d43b91e1ae2cf0b8ef39598da2598ce0a5abf1e5f182bb28755ee22885b4628354a13baf8d2b1e7ca2398b58c38744ab611aa6d4a9f17928499ac4b", 0x9e, 0xfffffffffffffffe)
add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x9, @remote, 0x2}, 0x1c)
socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000600)=[{&(0x7f0000000400)="845e806832f8aeae7ae4fc1421da56df00886f39921f4436ec423588d62b00aebb3c22e0aaf97a578062805d0eb41e47cb385eb794c1a5450307928925480570db7516c54200838af0b51a29a7088ca627f3110dee9fb3fac7366e3a33febcd42917e8baf642baabdbdc706d1cc8692c292eceaff9b3580a6b7fd19bec646ff749474ba5ee720695b3174d7e61a63651088fc9337028a86f998824d5ba0f3a8312d8e09383045dacb00388729bf5b1d74ff3402735dbcbf9f0fef0eb2e5fc225e19a579547058b8b9dd42af042ac273655d742c048cb7909d09f89bcbd86eded883e16214f6cadf09b9b5971", 0xec}, {&(0x7f00000002c0)="4c52a53170db104498594050c3c195f8dcd002f3a328a1a59b88a1f8d3c52575d68622e813a439885da3559d30d1a13b8455876b3bc9dcbb6fa89587ec61fb90601372ba99168dc1fb126ab29ba09bbcaa1081213a848870cb27c9391868526a98b44990e3141f707c99b20ac632d30e30d19eea91b6ca2b53180af08c5515cec7631cac81941cdb88b6369b8ecd35f41bb37f1df03755f9813fb5928c94bf1657c26de0003127e7514cc4c1bbc901bdc9d6a23b146c6b1c53bad973bc", 0xbd}, {&(0x7f0000000500)="53206718d94cb115dd69fba5aa0eb2afcf468fde646b3d55fbe0bd56b725c942b15defe6cbab2e00e5c4ba70a8f8de223d0aa79d2c5a7d1a43c21ffa4e49016aa1bcc8a6bc952f26abd36fc2041056521d67ad5d667ee10d571a99bf5f7aaf6e0a8fb36112764a15b9e2effedbe1aa6dfbc721102987758df6a6843c18a1537e175992cb523d989fe00503b2bbbc41a5656053f88d73d0490005d7d7467f81921f85c699", 0xa4}], 0x3)
socket(0x1, 0xa, 0x2000000c)
open(0x0, 0x60840, 0x0)
socket$packet(0x11, 0x2, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2)
readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r3 = dup(0xffffffffffffffff)
write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
write$FUSE_INIT(r3, &(0x7f0000000600)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x2b, 0x3, 0x4502400, 0xf800, 0xfff9, 0xa, 0x800, 0x0, 0x0, 0x8, 0x8}}, 0x50)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c6359431c95c18bf938d14f39302bcdd3da0d5402eda895d53e616368653d667343616368652c00"])

7.190462691s ago: executing program 2 (id=1583):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0)
mmap$dsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb, 0x4010, r2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x100000004, 0xffffffffffffffff, 0x3, 0x0)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x2)
ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f00000000c0))
mmap$dsp(&(0x7f000056a000/0x4000)=nil, 0x4000, 0x2000009, 0x80010, r3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00', @ANYRES32=0x0, @ANYBLOB="03000000010000001800128008000100677265000c000280080006000a"], 0x38}}, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = fsopen(&(0x7f0000000140)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x1, 0x8)
fchdir(r5)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0)
r7 = getpid()
r8 = syz_pidfd_open(r7, 0x0)
fsetxattr$trusted_overlay_redirect(r8, &(0x7f00000002c0), 0x0, 0x0, 0x0)
r9 = getpid()
r10 = syz_pidfd_open(r9, 0x0)
fsetxattr$trusted_overlay_redirect(r10, &(0x7f00000002c0), 0x0, 0x0, 0x0)
ioctl$SIOCRSSL2CALL(r6, 0x89e2, &(0x7f0000000040)=@null)
write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0)
ioctl$DRM_IOCTL_MODE_GETPROPERTY(r6, 0xc04064aa, &(0x7f0000000180)={0x0, &(0x7f0000000380)})
preadv(r6, &(0x7f0000000100)=[{&(0x7f0000000080)=""/119, 0x77}], 0x1, 0x0, 0x0)

7.018648183s ago: executing program 6 (id=1584):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[], 0x50)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x40)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x100000)
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x14)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94)
mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000000200)='qnx6\x00', 0x8000, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10)
socket$qrtr(0x2a, 0x2, 0x0)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_debug_messages', 0x101842, 0x23)
write(r5, &(0x7f0000000140)="1e1508", 0x3)

5.786797716s ago: executing program 4 (id=1585):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
creat(&(0x7f00000002c0)='./file0\x00', 0x51)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r2 = dup(r1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000001040108000000000000000001000004300002002c00018014000300fe8800000000000000000000000000011400040100010000000000000000000000000001"], 0x44}, 0x1, 0x0, 0x0, 0x10000000}, 0x8)
syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_readahead}], [{@euid_lt}], 0x6b}})
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r6, 0x800448d7, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
fsopen(&(0x7f00000000c0)='nfsd\x00', 0x1)
truncate(&(0x7f0000000240)='./file0\x00', 0x206b12)
epoll_create(0x400)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa2f00, 0xa3)

5.762748708s ago: executing program 1 (id=1586):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mincore(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xfffffffffffffffe) (async)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async)
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x14) (async)
lremovexattr(0x0, &(0x7f00000001c0)=@known='system.posix_acl_default\x00') (async)
r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_BT_POWER(r7, 0x112, 0x9, 0x0, &(0x7f0000000180)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) (async)
io_uring_enter(r4, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) (async)
syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) (async)
io_uring_enter(r4, 0x4e14, 0x912a, 0x41, 0x0, 0x0) (async)
write$FUSE_STATX(r3, &(0x7f0000000540)={0x130, 0x0, 0x0, {0x3, 0x6, 0x0, '\x00', {0x2000, 0x5, 0x7, 0xc07, 0x0, 0x0, 0xc000, '\x00', 0x1, 0x3ff, 0x0, 0x3, {0x0, 0x1}, {0x4, 0x800}, {0x961, 0x6a5ad1fb}, {0xfffffffffffffffe}, 0x80000000, 0xdc, 0x7e, 0xa}}}, 0x130)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0)
nanosleep(0x0, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)

4.936606508s ago: executing program 2 (id=1587):
prlimit64(0x0, 0x2, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r0, &(0x7f0000000280)=ANY=[], 0x15)
r1 = dup(r0)
write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'virt_wifi0\x00'})
syz_open_procfs$namespace(0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x7d)
socket$inet6(0xa, 0x2, 0x40)
connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r2, 0x4)
r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r3, 0x0, 0x4000)
fsopen(0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r4 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r4, 0x0, 0x0)
connect$inet6(r4, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x6, 0x80100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8)
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0)

4.854876897s ago: executing program 6 (id=1588):
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0xfffffffffffffe44, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x2, 0x3}, 0x18, 0x1)
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x80800)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd00000080190000000000000000000000eeff00", [0x0, 0x2000000000001]}})

4.816872242s ago: executing program 3 (id=1589):
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = getpgid(0x0)
timer_create(0x1, &(0x7f0000000000)={0x0, 0x18, 0x0, @tid=r3}, &(0x7f00000000c0))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000dc0)=[{{&(0x7f0000000380)=@abs={0x27d0ecca49f31c92, 0x0, 0x4e24}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000440)="caf15f73be8e03702f90db958c1b29b8712a93971e64c35cc81759e506d215ac6c9d7f", 0x23}, {&(0x7f0000001480)="61d9581e8bedceb3a863a15e37dfaf271e7b462eaa69d35ebe31d474f74fbcfa759002a4fb75de1888b5f61d869f68034f8fddc83687e8963535dc2bf5ce4f399448592f7b4806553e26d0c035b92d8eddbcd62935424a782a9782c97f4824efac1d59b46570d13fd167c9e03a59480728a648f5c2ae08a230bf1ac6aa7beeb4c515339717d51af6bbee0ece2750028bc3aa84f243705e0765b6f687488f7071bb3060e2adb33822a609e199146ff4342a9924fae23fc6b6e064bb196aa403c1315375a7f7605940c7e05188685f3becf73249e440e965fadecd38d7ffadbdd5f83d5aac3ece1a28eb0388c910e1bbfc0f0cf73730c95836bd20791f4b9aaea253b82048762fceebf3db7992f686ae30465ec21f55abef32252ea46a63205f3a357eacb635a7663c60de496f56844b1632df86fc872c41baf7a593edfcb6bd35c612131d6fc613db9172554f5cecf0c5b69e10809528146f07b982acd0dc876671ceeb3d3081be8ae1673d0165b61e6672a046c88065bfff52ebf6be5e1eb0a82b30503264712aef06e8757b6ac51c15509b7801fdf4d6e3488726556e54b056e2395e47b3959d810d59f87802d45b90b8d9f66991e0b4198b78b39d127c8eb625a76ccc236b112b6754b36b7c73fdc62ed55747ef3c10a4333c2649bdf178531f0e08ebb77095581551ae8165f2b74a15551bfa0d9241c19cbea868287e4da18cb9e4739a5fe6eba40930aa2482f605ca50143d725a2990475a16c06e9be9a3dbfe0c49939c80b955ea668bdc6291681e6110d0812707d9faefe2ba9ee660e0a24d093e6db2c0d8d95c69efb51310a33b9828bf8a0c469aa261d42fa87a77de9369467421f35ff31f2ed8fef2fe87f03ad08c1c11a5780e46dcddcd040ab193448b29fbbfa42f5e68553a869c26543791c265850eb801258381136b49b9feb15ea9cbf34a0349150918475c0e9ce28d13b862938afe0dc718902278c026c308ad128e5bd9631f86815559edf75a83b65c6d9d2f7b2c0d41ea811b5ee66b28c2db616d6e1c0932cb93420a4d9ac07c3cfea4004b5c1577fb0f0bd9f710d563727a7537c9ae45b4e8cb7e58bcd81db3773ab0b3c6b36016c75060239a4f2744275940f80b9dcb9af07199e37e20a987e0d525e24c33f8975e878ec266389a388aa5790d4f9e9b4ff2dd83b9f29b5ae370ec9a853908c6e87df9527cb48a64b6645b5ce09eef59f839751bf4cab556aabe3c55899b2011258522c4993c1e5239bd6fe686c2c478e2d9ec904b33525021e473ca87b028015e2704fb43363c595c1b4aa5e0d44c22939297d9d06f573a7fb54f6f2a601b5e7351ce8cc418399602545cfff693154988ee2f5592882fde8c35a8f4db0ec1986372717714b70ca703afe6ada001a0a61b132960fc85230380785e53636a62f3ec7a52ba9779a24a175e755cecb4e1f99785540784dccb6b661c4c71dec9aa635f40617e1c6a3966d4d81fa77dd731c48c7d1c04cb9f0e4cee72fcb087e747ad70ce2c97e2a16f98fca7efde119abdc851acaf35102758f0e54ddfc1741be1e05decb185ebe271e9fb6f2ad10e1f99eeb28d8629fda137806981b56f9952f919ea40948bdc62659ef986bc489f1d38a0cb7b70884f669eb0ba571f7fb607e9cb51dcc9cf4aea1ab231c4327d08f562e8da37846eebf94a4dfd97b472656be192bd36f46b0879eacf18121f95e44b547a51937fa78ab716c0863c24e81b08398d58ceca0c239692e172d1c0d1f09ab3f0f7cbc7acfdb0de61df94724b33afbaa2cb9f943dcb463f22b5df212947ad6eac08f6939a17a61585d82b17d8f077b2eec1b016768044028e74142edacdb72ccaeae196ba6c13c5bd1c3146bdd6f8033f0577ff3762b20a360fc9d4691fa4f07979041036e57d61ebd5fa4bf0296daf35c460b8892c21fcbc625fc2178a226195c9286a0942c3ff2460361fdd98c180afb602eeaac44cc97ba8c2c1ad7b371e94095bd9780afc0bed7fcfab9f94d215cffe520a32ef8710d63b5fd02cce55a239bd2f6082c2e644fd231e5eb7b611bc4b65d3890022755d01b159f4941154c4dacc3251e836bed0958d5468a831045d7900745718e3a90a507ef623ababdf801b66455e164075e7b4c6e69b4782189b1117fcc60be33a0a3a7c2939532080d24e34627965ac2380bed8044e4b89630be2fdd78258b2503c17d9342a0d6b05c13addf005a8ffaf238fc31c0809e98e50903c5c58aa7178bac86d03dee7bf779e1e522fd7fbbc86b68bae6d1d37d48297ddf4ccbea8af87c7794a4a5738a40a6647ba18683c65f88c62d9afd1a0e03585c1d62aa786747c29d3fd80dd9db4c9850c2dd207b949d399b7eea5724895c2e58e6236f3bc197a9508946fadbc39529b677cae881b594878f5231b214548af36ff256eb54b6433cf406c4def6cd750ff6ed9ecfd86a15af6c68366c98ee70a6eaf1a61be2d4a9c5dca1b499c08c569a428f570fca78f8259c5a89d75dab294abd2f82f14a9005a281878f863a43de40176489b6ab1042d8707d2309c9ebe01128f8429ce82de97f299d1f79a3297ddde5d767d7e0d10c911c354fe1d4515a4931909a8fd293f9290966084eef8a49c7f475b0408565a4fda995cdf4f1296791969bee76ca342fca96b6ad09664e4432e9fd38766d64ec50da0a4622248af57f928f7d08fe88168860176078a9e580cff70a26ce414993a394605443db395b7098b832c09696c5409a881c20f91ec863c5e92736dd9397b656a02df5fd729e98760c73538b53c5604db55e632ac67a945ff288f78f70e64582f768c2b872e57ffb671c796c2d36bd59f89441444c5069f770bf4d9c92a5689dc99c6e831dbdb39a27a00a2eb2e9f59942579ca443055cd690158b2d68f45574b37d6b01ab6f92f674ad29c8d27612f3860c6c5adf383dbdfc2d6110540af2c7fed39a0cb36f457ded1ce9661b61a1a8fb978aac82596bffa5e68be3d9e2646567dfccc701040ad9644220feb90648a56c396326f9268c84ecc374c19c6c3ba8170b81b20c7ef262b7656df19268bdce7d4ce6f8e4e7192d719fd798e97a5f74a1d7e11732da89c3cccfb16558d5402a64ae32bfc2b34d65bba5b27c6ef22dfb8159ef9e3138463302a511c1d6001f4b0b45a1804e2903042782f729dadc9b8de8a268612e1ed6b1b29cf16ed74383856b05429df51b3642c887881e0966c22c444fc8daa07aa9402aefeb0f343bf5e1d4c478322847742b651021bfc34a7957daf46be12f46655f2d7b6a3170a5e85c4992743876bb567085348593ee71e28b29f2954adb86132f64080045ca19d7948c98a426535db1c4d4ece7525e40fe0c22c2e525d5cd069b8297211bf98c63fbe4fe1a1095412b6f632aed41319176c5c875f34f071a5f84d779bba2bb0b85c8b780aebb3fda64d9da9f563f0e3384e31e5f1148532e18a9b7f1626b821283b58cf0c76b510acf0f840d45171a567ee5f8699f5c176449e954227fe6ac2998e4a88ab03de27422337b891276be26da19912d7a2c85bdcb927130818f30633ca2fe614c5df1fe15d0d870de4b027ad7f3d9aed08be975a3ee85892e2cd349f15a386538d7a30430827751bd7e96ea92961fdab1fad0b0bd70aec89b757523982ea63e1f225bc39657e8250aeb27b638efc50c4ae71df6b6cd9d0ea0a2da9bdbdb1f6b36d1ab357d93dea1a492eb22b7a130eb2bc1e416f7d974df1baa4c43da4053bf77382b32a396a10dc49a104f012779500fc5703847900c9cf3bfb744850cd234d0d28744c84ba2489a1fadadd3849c518d622a855841e6b3f57190afdc808a990b93a1cf2dbe8043e54c4df677fb8549b7c87f6be43341a4fc0e1d630beb1f6b908882a3f926bcd8f41c52d7c1afe03a4cbcbce4e6e9a8d98ab4ef6bf5475688265f039edb3d2248c97af98fe7ee7aef788f387bb1d2a099e6371042a54c921c5ea33f36eb6f9438059d11014572a428037a1fe94743379913838ea6359debb15af013d3b4d503a5e2664200b170c11eaf4d31327548f4e983d22ebb3b93e5079a300254397f45251caa199cc8101ad845d75c44859873c9a0d8dee1149c65a92d440958426ce9969edee4b5aba544bf90967e8081c1121b4f354008ab4ab9ed988670d6a8dcc48220d23199cfaeff678fbc589a642c53b28e54298542502d4077e0cfdc4a2d3ece0643b29eac0f437fced150b85aa055b16feed8b1f26ce99f6a5d199acb476e3ee63d9f9428c45112baa7a2d228c0a0687baf17e8a089308ee57c9711beb178ff0888e8645f03a667c0898d2c38933e94a45b8d8d3564df425ad989f78b45eff5a0f09d8f28adb62168761779103f82142eb1b6b9e5ee0d5455f5fe422cc2cc4a1fc1aa68cfc6cb55ede0bddf763605852512d98ea3afd21d7c913b57135dc9c324964d06af0542c58383b5b632bf086343eff40ae7008543bfe8eb8cd70cfa214847b3618724672793fe04b6d8e135751c03f27cd441e363d1fc5a04e879f62d0666eb78f86056f4d4a67d279445db7534fb7e0d74ef1a36492af1c63e42ddf8457986e136733b49025bf7c7b5cf0c4a7852978cdf0fbebaa7ea03f44f0bbe1a5b702dd9e97bbcf964da85513ac7d451fead822490faf8d1e531ec6b1ddb093a78295ceb6d4cdacdf11ff1ff5395656e709938c4e4d9acb20b7258aaeac8e723d0f2520578cabe870aca356e2accfaebf3ce53996a480946b9fb1a00afcd18762071998859c6284a1112dad52bc59c470f0f3d9fb0164ef1b4f17f991c987edf002e92b17d2e8f5a9ca50cfd29b3e7a00a34d8f25341119168b2ba9115d6e71df064f1498d9b3888cddfd222c01ea61db4d6fde90f62d5c227b7d1c99bdc8717eb6e14a3eda56082a1132edf5ddd5389ff3522271ced67e134d6faa6a6d96ae81f4e98461d8fb7500d957f876ea21c7ec1246a9b7dac1c689d0bb43a349f559b195d08333223bf4f51167a95c56116fd5fab88c924a359557fd5a13e2dff4a0534204751c3806288ee3ddc5097718d979ea1ae9f3b9a8d42beb0ec4c2c82637bb22337e4c438496b836c2aa35b308a4702a9b45462626a18e42464f0b5990bd11993528c6dcb5ab3ee5ccd42d140358425485a3a119a550dc6b8248986a4c4a4cfe7738ca3668e1f8b321db82c4b2d232a8dabd8264c60da24169c983309a988a0a7c4019009728a07703bdad097fb15dfb71ed7378aff9e7ebc11fee59c58c5df5f3fbdbfcac8b3b2d58747ffa161bc3ac4ecc853cfb2dd13dc7a322d27a078104c3bd13c5fa2fb74ea9d3d65bf4caed813598f56a2d36748f922468458d354b68485e1bfe4c3b05691c28d2b6a1471af0bc9ec851587914bbb2b530fbb8e2d643b2471397ba83e0becfd357409648ef0b22dbc30ddc6bba3d004059f8c3903112592e50276e38faea678920b28ccdbce59b006e472f2e145875079af195ae5c730839dc02f5bcef36975afc889eafa8e9bb7e38766fd3fe5cac7eb1dda8aadad7233c776ec68462db8a7882efc03354e08bc686640188981d3ecf881037f0e258c9314a2d4d37ba45984c7552de5ad5704312e4999403c852180db97e91e1b87694f68ad5fd500a159813dc481d367c51cfeefd3fecc7da5226e93d07e7061dacd7659e6d31a5f8220d993f614c7aabce93e8f125df11bbe3f8ba3145ccd4d03c95cd71a8f2b91371b2bf2553a66882bb47d854495b6eb68285b6e59b2720fdfc3bfb781f59828b46a8a792053358d5286624", 0xffb}, {&(0x7f0000000480)="cdd150693941edee183cd88f84b3be83dd451135762b", 0x16}, {&(0x7f00000004c0)="af77bb100812edf709b52e0ad3160c3e638c68ce22aa3c25407b02d25dac606aa815009a8412974cb949497a39f129f2f1ac5ed8b73e9efeb7db21b6f5c9b72295f5c1", 0x43}, {&(0x7f0000000540)="43f16f70a04c41a9267c56875ed70a0afab9be5ac7748391b5a71b7d9d0f58", 0x1f}, {&(0x7f0000000580)="790195a3a50610f0f30a9909ef9a44d2e995274522bcd7d3363d1935102f26d9bc8c5e317d29926a34f48a99256521e47bfc2ea9aef0da1aaff76a59ca657bd3e662eb90cad9fad784270face9894e8089bea1a5c4b1f629d04129084620a1daa4d491a018ebe0045e76b622d501d4969c0ff605b0fcb6eacc4cc8c037734c2bc052eacb790d0db55c99e679e91019ce1c7a243f9436b8db9a717085eee1f4f76cd7369ebcb8004aacf7d6d70f554ef36126de00c0755e272f202a31207b2350e0f23132ce168e37ae5b5c13323e95770b891da0bad03918fd1487", 0xfffffffffffffed9}, {&(0x7f0000000680)="aa583bb71ccbed4c66e934ee23123f63583edcd7fac1ffce77e361f188cc1f3a390f1234616265183f121b23b77a124d2ebe11115b912c44b5b9d9af89d1805f6d432f9513d823cb67b1ab597a90a4d6b488b54605e0203e5ce74ac0ba10fd26eeb902b9cbb6bae5e0bc727829b587179c35197eae61e3a934cf47c83af4457d8c16d2a1cc5b245692aea06538b3de4471abef", 0x93}], 0x7, &(0x7f00000008c0), 0x68, 0x81}}, {{&(0x7f0000000940)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000840)=[{&(0x7f00000009c0)="0d5c8d881e5570015e59d643a0b5263d321ab90fa19709a73b68a640783255519ac644271836e154d7d2ff290ab57187b56b0774afbe959a9c0a48b4ba664d4ea9cf42a2688a6c70bc553700febd64601b063de7b55f39c343f176de1db07403f34540735ee7fc00a49fbfbe9fbc24027b30171e41aa0009ab2a5dff6697c0f72d302f755a2e5313b93d4707e8601bb7f170348443f7d9b70e7d6180428ab187da46ce8220a863fec1b9bf32c7bdb1aa46a087205aa34caba773168c20c3ffbff9b9d464cf1b6adc", 0xc8}, {&(0x7f00000007c0)="9dd6b3d2dea9208d3455133e0ac4136ec45977aacc7e9c9984781dab98b251ff3491ae5181c912627a3fb18caa6ae5b5d4cabb6488eabc8c47d39ecb7cf568f6e53a0f"}], 0x1, 0x0, 0x0, 0x40cc000}}, {{0x0, 0xfffffffffffffecb, &(0x7f0000000c80)=[{&(0x7f0000002480)="f205f4b27b2b4b9418fa5d15e6adfc9adc4eec3012689bf5429024f877622dd2d9ab9ebc262b0f045fd709a8cd3dbcd1913e98b2239608f9efb5fca5ac14a00cf1b33e553fc324fcfa92eddde3f6b8beefd68fa2fb495a00d086067c5a4035b540d0f81f7d1989b04d80a74976f73f61e452f65c06693fd09872f8c7334f9d40e886818c759af3279995a047d96a723203b2aa75a8973d9bb009a49fc9d706e08db33fd51aa8dccf86f6b3a072e46355571715550e580b7fbf6c641d46fcbda6a3d5f8b77d96fcfb7ea229406afddb43ededbef987cc072e214c670d95ad3292e8d61ff19e36fc4ad14fe646dd4f727c48ce6df66313f88daee63615b5e7bba3c939ccf3e80c874a748a85680e6486f10a58b8da256e88e3621bac63e6eab96fc50addfe331ce689ff7818519460c38aae73ca0d52d20be1a39ea2f01008860e6e488fe845caa77b9df1972aad8109525e1a0bee3681b0e62edb7ba2a3de90024182cc4593334e4159434e7600f7af3530d4b2595302819b328d6e50118353cde903a8675d64c2151438281e04656a574f8a1e8b33b003996811c7f6987431b7591be98bca7f6a3dc5babf16267f420d543c72d570b6b22583415c00ee1bb4a6f7c0a281c5caae427fbd2ac97d6203fb8d5934317bc18773da9b529e445e421cb64cd5bbf92b6cc6ecc0098c1010de4ab1298020fb4a61594a38e7a63e0b7fa2f2a3fcc00a1d504094974651cda658f0280d31a6aaf689e9cbb71536f0e8ab54742b001bd8e72848152ad85e0d2c8b40901fad2aaadb90fd161f3c18108e1997ee7d8e35ea15c0903bed60ac060a245f0de5f2df345af69a960776762c4c71fc5853cc86198215c9e08bf0614f9f786c512db2dfae2e2990d17d3bc6d82dc988e1ce91d9846306e1723b363c8ecd55e40b82b5cbfd655eb2cb10ded532a5725c0a8ddf5e4f57adfe2b55eeabec5132218de9bee4d524803ac3cc371a565c3483dd4c5bf0eff966ffa62b8ad3f72e7d98f9ed1ca8ea059b46b577855d191aa2eb810fe5aacc6ee820087be22c09b79045cf60c17e5237c71cd09160d26316f06bfdf1fe9ac8d819e74ffdd8598ba260d7b907f80b19169c10adf9b48d4e8b4dfbc521c4ae3da7f1078bf4f88033cc2c9941322487e8df1549947d386e0b3fbf7316b0114c60a625624dfc661a67830b62665c74f248e3a36f7771031693c2aeed98dad8dbecbca46b251b7084dbb23e7b54102df2f5a16578e48deed74b090f3e762e2ce6fc94b72809eaced0269cb878fbacdce4ac9044a97f152c464415dbc42d9a6afb96a4e1fca3623b8b563cf8d076167c16dfff3edbd9a6f8928a7c5373a35a2e51182365d97e124237110592655890a6aff27195998d157c9b564bfb679ca154790dad1bb07edd968ac28371f275a09a185acf085132d0717ba03a6eea61b8ec8bfdbc748dd78fa88752a62445a770c66f517bfd9d28acfec6753f4857975b89bdd5c7581bcdd7c231f05186da54f952406fc51acca3dd933cde76e8e2e517ed1db354a6010a9e09487ee989719c97d10c96c1006f9a34a2a425e725fd05631d7e1099233706bdc3d0bdecb2d6fac98183d176a570233a52616d8606b3a6552c06d91ee97aa2bdebfc04d64aa05d2458d6c18c91ce484502df5e4034a6f68ae1c6fa6c218097e0c132516974e9aa207a9f558c3f77031ad967d7c7395023439d9598f5c91f67ca08483202e9a4a15639dc8041b43757b9d81b65db8e7433ea692b13f95207d4c3510a69ac3006e9516d51df6c60e6c05db2c93035df7c8055ffe97007cd33a6217c5eccd25cfcd3209cc1af7df638590ea9fee4872902920360b569b87aa4c8b27ff5f5f2d84145b30374c3710e0e935334db4c933c08ea3aa31fae58e62347860a9cf46fbcb743a79540557a7176936a716d5f6f5587629b3199e4b0a9506d728d2d4785bede05fe6e3695aca9d130bb4b115c0ae877f8bf78bf2ac37e30651bba862d991f48e6cbdc14e6ee687ef8da2bf63bc34a61506e71b97de7eedecaaf5f696269a29a036a7d2aa99ddb98f29af755f4ff560dc382fb665bfaf86593749eb41916438e6051359237fd6dadac56a25451424060d3cd3c3670386abd212589ffb81d538a200fce15bb58a3d21d000a952044705da1534c03f6c1680449fce8090528055693fc6bdee9aee3a7da9fb406db2045ff570171b4e51557744a9c45bb0476ec829238b35326fe5108b9444ed640f05974e3992d1021de218deb29def75ebe85b2a88452feeeb6a919f3b902aad762591e70303293fcca0748063bf2c31384b5fdf7290a8215e24dd1fd6b39026d8fdd553a8fbc44feeec877a8f2ec3b63e2e53d714affe884448f210ef85899fc167c055fd4e990698df0721c0223aae0c535e6f8217b077a7e5789126d5484508767a8fe20e98dc3cdd4e256b56bb541a7d651d74505cddc016a1b9fe6d50c3b1fc9eae38c580eb121780f6b9852a62a9be29e852ba4fec20206b3022305e840ecc4491402d6c882dcd83ab3de335cff942d1b7e1bf3a29036386c1e2263c0d03f792999309103d4b2ce4b72e3e7e608c5c4e65690ddf1f6994cae2e23b8aa9693ea206cfc63c74c790525cc0a4fb78370f742c650eb0d7d82c4e2ea9ef20e2c3e3b0508a76ec306bcea503a7018cf7c335f2c3e0cf2e211f3026156af3ad64a3d86470158de733b908616847d612ef545d122093d037fb60cfc5bcaddce39cea0ead0771469ae416b68d7a818944c08b9cdbfacf5143e0ada0384dd8d6f8319354d978129bb5fb824cec4fca09a9b0a0f666da66c567e396d9e059da1c7c7bf291ece114f0430905a32cf37596d03a55a68b0b5c0a13efd199f71ea968e8e6a75fc320df6e521e5b1e1d062628d6752e286c7b4922c80665e74cad4aa34285b56a2f19d7a814f9c889bcce0bdd67dd614cdd97bcec3c90141607aa114373928492697b492c74e2960566ed4b82370c7e91d0b303a121e1fef4b2326d6a06ffbf4ce98961353e2cee5860dded2a7f8373294ce0273865871e964c5efef76f3efc233b62eafc1d7f768674dfe9c6a3f4d36bf187fb4ab05718c983f5bd253a21f4ebab4bc364e255dd79ae885a9d42cf754529354ca135864ea845c90aac36baf62d73eefde881008122209bfcf518207ce3344c08cacd04106f5cb3035a2082be764a0fc62b1556c02e447f88add2aa9a5678f1811388974207c40c78ff269192260c7849f500accee8bbc730d406f549f5bf45488fe60a03c3af33db6e7deefba8b84e79e1ff04d3b40ca80406076cf31a77937a3475e5007a43bb3b6c9119da0ffb066d3dd74ea7951cc12f4ba62d40be8abc35891895030135992d9a1635c8c33320d060394faf72aff025a339f04290f4cb48ab6e4190751a42f42927837b05c2efe94775a0b3f35d6a8d7d67fb9b3a889470ca1b77044179670b64601d238562c14e37cf87e77b2644aaa8ad71316918105a844cba722b9848678b7016b32595b3ac38d19144f3bbfcca87a3f9f0f8f154be1c19a030b7479b9f9a69bc08d16349d9fffe760c81c7a499264974dfd0a6ede00e26762695daf24c6c3abcb9375dea482bf79f4ddf724595cdcfb23e7e10cbc98dd5be4cf72694ae3905aa5a137dd1e0fe8b6846e013694d852f1ed562832f13e1c595eec40de6c48071fa0eeffb9c83cd3d7b882d7db9420b96f6c0550b5710812da8d8aea3b63a18325d7d13df5a1a87a763b310076bb1f41f346e353e8c43a866af36fc2ffaa36828ef5a61badc635d9526cb5d3326106bf698d058ad7fcc15d799c6cbad6eadf10fec9df4b5c1c0e5acb18c7b2eb4f94270eeaf043866726019be7ca9ad93beb1a86cbe2af2895598a12b12d3098562e71ee3300015ccec11bff0279142bae439c6901d2c5bdc50cb9b8026b5873152439f3d27fa595e949a57174f907784d9d3583e608b2c7a52d25403ffc51e359f9f3bbff1d26caa9b7db2464793987cf1cc88c5dfa25d1eb45a9e66e07d932399b669729d8e6f869cae02abd7a3a326c36e07dd952f62595a393895b433338684973b1c5077e18ca01c548f735c39f6b878ad291cccdd454c212dec919465e49a411d7c432c6917ea0081ab375253e2ca2fd31aed1683a86e42bd4a5333a433f0aac52bf9d1f52500e932a5a11f087e82b175d098cb6f0abd93547f2ed38cdcba541e509b18a0eb4ad98abfb2b2044c5f0f7839a1e22518d6bbbfc9212ca9d336e8b1eafda2f63b24b3da41902d160dae9a6a99e8f2efff0461c273f374fbd0284c2561daa5c0dc966c429fc1902c9295c250b2c29abba78654123e8265d5223d774489a778ab76fe9f8cd62f980d75b10fa5eee5979618e36d1f0739f380530495c689bec0f70b3acdfacf1e380922bdf3626253f0d839769b241f2d9f483c5d1ce2e7ae4c0d425770af5f2b9f357ff2bf53e443be6229b897aba25ef591dfb4782adb973d9896d321df7ae3b829041dafeb678fb10e4a167568d89b5acb9177f94ea87d6035a78a23d89c1e512a68c462a4c40bf57e88f24e54cac31ec85a7a29a84625a4227f9bdb4c2d1dd289b6f4eca18b647a72cb72f24d3ddfca1dc6406e43d67ed06e78c14d5ae6c551174d4b6fc81c5cb87f6988b9ea959ed3533669a5234ae28672bc14dbfb893fa0e3a9c13838b356806781c2432dcf1af05515d506a10fb6fb013e17a0029ee8300993d3d5e3f2a499f1f10fafbaafa9391d706ccff2e5fefb54723a935d46988cae749cdb35d3b61aad47d6c65e2184a5696b764d308a6cbd5f6cc3cda273afa524221fa55b4372cab65014bb74af1439c4c51f2e7f45c6b058fda76aedf335f772939c4d3e0a7df44c4cf16188cfe886dbb2ba871288f5ef479af81911307c3e819f0f7fc6d3d7dfb98fd0b2c99ccf41e7af0fff7ef54bed721e9546ddd8170d0580d31742c502f2f96e90b9c7ddc183c713f80258f4b7cd925ccc049d849023bce7e6137920fcf288ccbb8e97ae2a699507f8008bc1ee51ed8042cb5f8bb49741e5e7ef75bc064191204f695b2a5ccc7dadfddf88d3dc076bb26b4d02d0711f3ca4155d4052f1ec13d7e9c77933bb8213307c85c0e1a59ac516a4d9e15acccf36cc0ac759ebe8defa58e3fd1750cb845cd6b0b23d008976f743b419661fc1a1480f2dc70ff3152854e5c0d60c34e984d75199542ef2cc1e41a4efa181a43711bf75c4b51d54ed5cd94c5ac66217f6c65a773962c6fccb64ff871aec3096f7f1b999b62ce97689ce28be362c284edfc47adeabe267752fd52211008011f52bf4c1da6e53e3c2b3ae172ab640f92ccdb8dcc9f8fde2e9f29b99cc807034bb95ea87e4b3e379e8b5b617a8d234dd28ef5bc524d124cbf69132aa02f0941aa60f44d2596a9cd487b76cdadfdea79622aa7cf1bc0f8025ab6028c12d0b9b96690ce683728aaf6aed5e4ec2dea4a87ad2aa9ed58d125923cf335054e52534be4e94c2df5e9044a22d9a24f45dd08f7f702e2ff5a0612e024c726b8b0f34df8646f1af2e2e0ef9759380e108b986d1d8710016b72d15ced6c6fe16567c85c374f464e318ab277d56d38cbe0f4144aa413add54921c45c7ab0c5041df13dfb80d0aa4953ae7526f467d0768bcc64d691dc54c615d2fe6e6b74623d93afc8bd89fc7e3f3e68a840735da3fd63546cc752f262ee0c9d108dda9ba831c9bbe9594443f24305c7907370850de4ee89b3e19402d3271ad426bd67c7fd7fd510fb1e365496760fad4a4a80893c64ac27", 0x1000}, {&(0x7f0000000b00)="0e9f7f6f3e258e9921065397b7026ac7fad3faffdc4d3524538ae599761e6d37957fcd3fa7b74e3a422bae0ab8ee3322d1b065786cb909b8a20b1bc2d1063bce2e8a829cac75f2c16907f77b54729301b34177005ed8fe6ea188e138bda688009d3036f5d2c0d87cd519afca363f699b259804ccadc7a5621c8a311fe30340f07208688239530f86f0c7e51d4b42b35f51e0a14109ce3afa393eb4aaab300f708c89", 0xa2}, {&(0x7f0000000e80)="ba99f7fcfe3feac60efa388df6684607af6e6e9dc6e78befbd2880d795cbb558feeb2f9f1f8717b24f85e296647ee668e96263297176c58f67507bc3af57eb785dbde33d3c5ddc5f3777eb0481eec0b537f554cf63e00ab873bea32450de24fa6b71c1d3878f85bc2fad7bf4ceec9d152364cbc45be8c6431c11fc94d661c79f6c2b63c47c4382627e22b8f0f3274b8be6efedc59e8c2897db3b06b0c66db8c57f06c821b535bbf1da48e62e23d8a83355433a3ddfd4a5783eebf62b5b1092", 0xbf}], 0x3, &(0x7f0000000d00)=[@rights={{0x18}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r4, 0xffffffffffffffff, r5, r6, r5, r1, r0]}}, @cred={{0x1c}}], 0x88, 0x4000}}], 0x3, 0x400c080)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave'])
chdir(&(0x7f0000000240)='./file0\x00')
r7 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0)
ftruncate(r7, 0x2007ffc)
sendfile(r7, r7, 0x0, 0x800000009)
r8 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r2, &(0x7f0000000040)={0x20002000})
epoll_pwait2(r8, 0x0, 0x0, 0x0, 0x0, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010400000000000000000a0000eb0900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d65b0000140000001100010000000000000000000b00000a"], 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40)
close(0x3)
epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r2, &(0x7f0000000240)={0xe})
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000010009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r10}, 0x10)

4.443652443s ago: executing program 6 (id=1590):
openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)="d212662320d68d482adc999d8a933b0690aff5dab933bc7f602e7587e3cc8f499b2a72a844b7d924656064b77e7635e3c880bbe9501a428d078bc8b5e9dbccf3af26e2c53285df2d2193446d1acd4fdc70f80fc254ab092b05a42b76f680a8db8ca01d43b91e1ae2cf0b8ef39598da2598ce0a5abf1e5f182bb28755ee22885b4628354a13baf8d2b1e7ca2398b58c38744ab611aa6d4a9f17928499ac4b", 0x9e, 0xfffffffffffffffe)
add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x9, @remote, 0x2}, 0x1c)
socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000600)=[{&(0x7f0000000400)="845e806832f8aeae7ae4fc1421da56df00886f39921f4436ec423588d62b00aebb3c22e0aaf97a578062805d0eb41e47cb385eb794c1a5450307928925480570db7516c54200838af0b51a29a7088ca627f3110dee9fb3fac7366e3a33febcd42917e8baf642baabdbdc706d1cc8692c292eceaff9b3580a6b7fd19bec646ff749474ba5ee720695b3174d7e61a63651088fc9337028a86f998824d5ba0f3a8312d8e09383045dacb00388729bf5b1d74ff3402735dbcbf9f0fef0eb2e5fc225e19a579547058b8b9dd42af042ac273655d742c048cb7909d09f89bcbd86eded883e16214f6cadf09b9b5971", 0xec}, {&(0x7f00000002c0)="4c52a53170db104498594050c3c195f8dcd002f3a328a1a59b88a1f8d3c52575d68622e813a439885da3559d30d1a13b8455876b3bc9dcbb6fa89587ec61fb90601372ba99168dc1fb126ab29ba09bbcaa1081213a848870cb27c9391868526a98b44990e3141f707c99b20ac632d30e30d19eea91b6ca2b53180af08c5515cec7631cac81941cdb88b6369b8ecd35f41bb37f1df03755f9813fb5928c94bf1657c26de0003127e7514cc4c1bbc901bdc9d6a23b146c6b1c53bad973bc", 0xbd}, {&(0x7f0000000500)="53206718d94cb115dd69fba5aa0eb2afcf468fde646b3d55fbe0bd56b725c942b15defe6cbab2e00e5c4ba70a8f8de223d0aa79d2c5a7d1a43c21ffa4e49016aa1bcc8a6bc952f26abd36fc2041056521d67ad5d667ee10d571a99bf5f7aaf6e0a8fb36112764a15b9e2effedbe1aa6dfbc721102987758df6a6843c18a1537e175992cb523d989fe00503b2bbbc41a5656053f88d73d0490005d7d7467f81921f85c699", 0xa4}], 0x3)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000140)={0x2, 0x2, 0x0, 0x7}, 0x10)
open(0x0, 0x60840, 0x0)
socket$packet(0x11, 0x2, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2)
readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r3 = dup(0xffffffffffffffff)
write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
write$FUSE_INIT(r3, &(0x7f0000000600)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x2b, 0x3, 0x4502400, 0xf800, 0xfff9, 0xa, 0x800, 0x0, 0x0, 0x8, 0x8}}, 0x50)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c6359431c95c18bf938d14f39302bcdd3da0d5402eda895d53e616368653d667343616368652c00"])

4.443254889s ago: executing program 2 (id=1591):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x82002, 0x0)
r1 = accept4$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @dev, @default, 0x0, [@netrom, @null, @default, @remote, @bcast, @default]}, &(0x7f0000000040)=0x40, 0x800)
getsockopt$rose(r1, 0x104, 0x6, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0xffffffffffffffff)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x1ff, 0x1, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000014d564b0000000001"])
syz_clone(0x900a000, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

2.899152462s ago: executing program 1 (id=1592):
r0 = syz_usb_connect$cdc_ncm(0x2, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote}, &(0x7f0000000080)=0x12, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0))
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0xffe0}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0x8}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r6, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f040000000000000000008500000005000000850000007d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r7}, 0x18)
r8 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x1c, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x6, 0x18, 0x0, 0x0, @binary="08ac"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r8, 0x1, &(0x7f0000000340)={0x2001, r10}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={<r11=>0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0xfffffffb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}]}, &(0x7f0000000240)=0x10)
r12 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r12, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10)
sendmsg$nl_generic(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x7}}, 0x14}}, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000080)={r11, 0x80}, 0x8)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x80, 0x1c, {0x80, 0x6, 0xfffff671, 0x1, 0xfffc, 0x7, 0x8, 0xfffffffa, 0x7f, 0xfff6, 0x8000, 0x1ff}}, 0x0, 0x0, 0x0, 0x0})

2.897243711s ago: executing program 4 (id=1593):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0xb8}}, 0x240000c0) (async)
syz_emit_ethernet(0x4e, &(0x7f0000000800)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x18, 0x11, 0x0, @private0, @mcast2, {[], {0x0, 0x4e22, 0x18, 0x0, @wg=@data={0x3, 0x800}}}}}}}, 0x0)

2.833205309s ago: executing program 6 (id=1594):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getresgid(&(0x7f0000000480), 0x0, &(0x7f0000002540)=<r2=>0x0)
r3 = dup(r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000440)=ANY=[@ANYRESDEC=r3, @ANYRES16=r2], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0)
recvmmsg(r5, 0x0, 0x0, 0x2, 0x0)
socket$packet(0x11, 0x7a6f938d2aadffed, 0x300)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='hugetlbfs\x00', 0x800001, 0x0)
socket$kcm(0x10, 0x2, 0x0)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000008, 0x12, 0xffffffffffffffff, 0xabb35000)
r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='kmem_cache_free\x00'}, 0x18)
sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000000c0)={'ni_at_a2150\x00', [0x4f27, 0x5, 0x10000, 0x2f, 0x66, 0xcc7, 0x5, 0x80007, 0xa, 0x100, 0x9, 0x1, 0x1db, 0x5, 0x0, 0x80000101, 0x5, 0x1a449, 0x3, 0x40020003, 0x208d, 0x2, 0xd27, 0xae, 0x7fff, 0x8, 0x3c, 0x1, 0x6, 0x0, 0x1000000]})

2.788275169s ago: executing program 3 (id=1595):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000300)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
pipe(0x0)
kexec_load(0x7, 0x1, &(0x7f0000003200)=[{0x0, 0x0, 0x8000, 0x8000}], 0x3e0000)
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x24b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x58}}, 0x0)
syz_usb_control_io$hid(r5, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)

2.786763195s ago: executing program 2 (id=1596):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000300)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
pipe(0x0)
kexec_load(0x7, 0x1, &(0x7f0000003200)=[{0x0, 0x0, 0x8000, 0x8000}], 0x3e0000)
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x24b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x58}}, 0x0)
syz_usb_control_io$hid(r5, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)

2.765235773s ago: executing program 4 (id=1597):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fcntl$getownex(r2, 0x10, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="28000000010401010000000000"], 0x28}, 0x1, 0x2000000, 0x0, 0x4040000}, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1c9, 0x12)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x7}, 0x50)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYRES16=r2, @ANYRES32=0x0, @ANYBLOB="00000000000000000000001e2909e9fa9320eb49c56966be00000000000000", @ANYRES32=r3, @ANYRES32=r0, @ANYRES32], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x18}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x8, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.414258751s ago: executing program 4 (id=1598):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x0, 0x0, 0x9, "00629a7d82090100000000000000f7fffffb00"})
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
get_robust_list(r2, &(0x7f0000000380)=0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480312d"], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0x4000080)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
setns(r1, 0x2000000)
ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)

992.664068ms ago: executing program 6 (id=1599):
r0 = landlock_create_ruleset(&(0x7f0000000040)={0x556, 0x2, 0x3}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
openat$audio(0xffffff9c, 0x0, 0x402, 0x0) (async)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) (async)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) (async, rerun: 64)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (rerun: 64)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) (async)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async)
migrate_pages(0x0, 0x8, &(0x7f0000000280)=0x9, &(0x7f00000003c0)=0x3) (async)
sendmmsg$inet(r4, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)}, {&(0x7f0000000d40)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b64e706d94864d785dcc6b24fff7858b2a4e", 0xe1}, {&(0x7f0000000b80)}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0xc0) (async)
sendto$inet(r4, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)

444.167636ms ago: executing program 4 (id=1600):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
ioctl$CEC_DQEVENT(r0, 0xc0506107, &(0x7f0000000180))
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000c0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
write$vga_arbiter(r4, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc)
write$vga_arbiter(r4, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6, 0x0, 0x0, 0x0, <r7=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r5, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r7, r6, <r8=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$IOMMU_HWPT_ALLOC$TEST(r5, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r7, r8, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)})

0s ago: executing program 6 (id=1601):
openat$nullb(0xffffffffffffff9c, 0x0, 0x42000, 0x0)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6(0xa, 0x3, 0xff)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000003720e9ff2cbd7000fedbdf2502808003fd04fd030014000008000b0404000000"], 0x24}, 0x1, 0x0, 0x0, 0x4c091}, 0x40010)
recvmmsg(r4, &(0x7f00000000c0), 0x3ffffffffffffce, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi3\x00', 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f0000000180)={'c6xdigio\x00', [0x804f29, 0x7, 0x100003, 0x2, 0x5, 0xcc9, 0x1, 0x7, 0x5, 0x0, 0xefb, 0x40, 0x0, 0x1, 0x4, 0x101, 0x1000, 0xf, 0x81, 0x40000007, 0x99, 0xcaa7, 0x0, 0x7b71, 0x8, 0xe65, 0x3c, 0x8, 0x5, 0x0, 0xfffffff8]})
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000004040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000004140)={0x0, 0x0, &(0x7f0000004100)={&(0x7f0000004080)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r8, @ANYBLOB="04002bbd7000ffdbdf25010000000000000007410000004c0018fffffffe73797a3100"/98], 0x68}, 0x1, 0x0, 0x0, 0xc0000}, 0x43)
quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0xee01, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

kernel console output (not intermixed with test programs):

om ttyUSB1
[  546.992989][ T2148] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[  547.028249][T10789] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1092'.
[  547.078498][ T5932] usb 6-1: Using ep0 maxpacket: 16
[  547.122410][T10793] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1092'.
[  547.134438][ T2148] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[  547.217797][ T2148] keyspan 4-1:0.107: device disconnected
[  547.765816][   T30] audit: type=1400 audit(1756792634.496:533): avc:  denied  { node_bind } for  pid=10785 comm="syz.4.1094" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  548.022302][ T5932] usb 6-1: device descriptor read/all, error -71
[  549.180146][T10813] CUSE: unknown device info ""
[  549.185037][T10813] CUSE: unknown device info "õ"
[  549.189950][T10813] CUSE: DEVNAME unspecified
[  549.439417][T10808] No source specified
[  549.466983][T10808] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1097'.
[  550.916165][ T5932] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  551.107629][ T5932] usb 6-1: Using ep0 maxpacket: 16
[  551.451503][ T5932] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  551.470226][ T5932] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  551.500199][ T5932] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  551.611049][T10829] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1102'.
[  551.626182][ T5932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  551.644231][ T5932] usb 6-1: config 0 descriptor??
[  552.265265][T10838] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1106'.
[  552.301246][T10838] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1106'.
[  552.344106][   T30] audit: type=1400 audit(1756792639.056:534): avc:  denied  { connect } for  pid=10839 comm="syz.2.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  552.376796][ T5859] Bluetooth: hci2: unexpected event for opcode 0x200c
[  552.385303][   T30] audit: type=1400 audit(1756792639.056:535): avc:  denied  { write } for  pid=10839 comm="syz.2.1105" laddr=fe80::11 lport=1 faddr=fe80::aa fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  552.387191][ T3584] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  552.419383][   T30] audit: type=1400 audit(1756792639.156:536): avc:  denied  { execute } for  pid=10837 comm="syz.4.1106" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=27805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  553.072402][T10850] netlink: 25 bytes leftover after parsing attributes in process `syz.4.1108'.
[  553.366834][ T3584] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  553.386185][ T5932] usbhid 6-1:0.0: can't add hid device: -71
[  553.401598][ T3584] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  553.409389][ T5932] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  553.445133][ T3584] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  553.463119][ T5932] usb 6-1: USB disconnect, device number 9
[  553.745536][T10860] loop2: detected capacity change from 0 to 7
[  553.758013][T10860] Dev loop2: unable to read RDB block 7
[  553.770803][T10860]  loop2: unable to read partition table
[  553.782457][T10860] loop2: partition table beyond EOD, truncated
[  553.796869][T10860] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  553.984598][T10863] serio: Serial port ptm0
[  555.517224][ T5982] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  556.097357][ T5982] usb 2-1: Using ep0 maxpacket: 8
[  556.240357][ T5982] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  556.383192][ T5982] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  556.426957][ T5982] pvrusb2: Hardware description: Terratec Grabster AV400
[  556.443230][ T5982] pvrusb2: **********
[  556.472642][ T5982] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  556.545319][ T5982] pvrusb2: Important functionality might not be entirely working.
[  556.608159][ T5982] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  556.715429][ T5982] pvrusb2: **********
[  556.763611][ T2341] pvrusb2: Invalid write control endpoint
[  557.002824][T10904] CUSE: unknown device info ""
[  557.008494][T10904] CUSE: zero length info key specified
[  557.394849][T10869] pvrusb2: Killing an I2C write to 1 that is too large (desired=8192 limit=61)
[  557.410805][ T9839] usb 2-1: USB disconnect, device number 31
[  557.557536][ T2341] pvrusb2: Invalid write control endpoint
[  557.625481][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  557.638814][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  557.646406][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  557.676798][ T2341] pvrusb2: Device being rendered inoperable
[  557.699458][ T2341] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  557.717284][ T2341] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d)
[  557.745120][ T2341] pvrusb2: Attached sub-driver cx25840
[  558.033196][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  558.064125][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  559.130968][   T30] audit: type=1400 audit(1756792645.536:537): avc:  denied  { read } for  pid=10913 comm="syz.1.1124" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  559.251790][   T30] audit: type=1400 audit(1756792645.536:538): avc:  denied  { open } for  pid=10913 comm="syz.1.1124" path="/241/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  559.281278][   T30] audit: type=1400 audit(1756792645.556:539): avc:  denied  { ioctl } for  pid=10913 comm="syz.1.1124" path="/241/file0/file0" dev="fuse" ino=0 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  559.428161][T10932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1128'.
[  559.519500][T10932] Scaler: =================  START STATUS  =================
[  559.521488][T10935] netlink: 432 bytes leftover after parsing attributes in process `syz.2.1131'.
[  559.532208][T10932] Scaler: ==================  END STATUS  ==================
[  559.767552][ T5982] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  559.969129][T10938] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1133'.
[  559.997591][   T30] audit: type=1400 audit(1756792646.726:540): avc:  denied  { create } for  pid=10945 comm="syz.1.1135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1
[  560.337177][ T5982] usb 5-1: Using ep0 maxpacket: 8
[  560.361130][ T5982] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  560.447095][   T30] audit: type=1400 audit(1756792647.176:541): avc:  denied  { map } for  pid=10940 comm="syz.5.1130" path="socket:[28129]" dev="sockfs" ino=28129 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  560.447343][ T5982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  560.499823][T10949] mkiss: ax0: crc mode is auto.
[  560.534617][   T30] audit: type=1400 audit(1756792647.176:542): avc:  denied  { read } for  pid=10940 comm="syz.5.1130" path="socket:[28129]" dev="sockfs" ino=28129 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  560.636106][ T5982] pvrusb2: Hardware description: Terratec Grabster AV400
[  560.664026][   T30] audit: type=1400 audit(1756792647.246:543): avc:  denied  { listen } for  pid=10940 comm="syz.5.1130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  560.739134][ T5982] pvrusb2: **********
[  560.743261][ T5982] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  560.756862][ T5982] pvrusb2: Important functionality might not be entirely working.
[  560.813052][ T5982] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  560.843671][ T5982] pvrusb2: **********
[  560.851267][ T2341] pvrusb2: Invalid write control endpoint
[  560.957410][ T9839] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  560.981637][ T2341] pvrusb2: Invalid write control endpoint
[  560.992044][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  561.026793][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  561.037017][T10968] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  561.041584][T10966] IPVS: stopping backup sync thread 10968 ...
[  561.053440][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  561.066387][ T2341] pvrusb2: Device being rendered inoperable
[  561.073486][ T2341] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  561.094297][ T2341] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e)
[  561.109862][ T2341] pvrusb2: Attached sub-driver cx25840
[  561.115451][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  561.130001][   T30] audit: type=1400 audit(1756792647.846:544): avc:  denied  { mount } for  pid=10967 comm="syz.2.1141" name="/" dev="configfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  561.157983][ T9839] usb 2-1: config 0 interface 0 altsetting 26 endpoint 0x81 has an invalid bInterval 64, changing to 10
[  561.169405][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  561.179886][T10936] pvrusb2: Killing an I2C write to 1 that is too large (desired=8192 limit=61)
[  561.187880][ T9839] usb 2-1: config 0 interface 0 altsetting 26 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  561.208566][   T30] audit: type=1400 audit(1756792647.846:545): avc:  denied  { search } for  pid=10967 comm="syz.2.1141" name="/" dev="configfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  561.219145][ T5982] usb 5-1: USB disconnect, device number 48
[  561.256483][ T9839] usb 2-1: config 0 interface 0 has no altsetting 0
[  561.278995][ T9839] usb 2-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00
[  561.314620][   T30] audit: type=1400 audit(1756792647.846:546): avc:  denied  { setattr } for  pid=10967 comm="syz.2.1141" name="/" dev="configfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  561.337438][ T9839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  561.339835][T10974] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  561.447229][ T5859] Bluetooth: hci5: unexpected Set CIG Parameters response data
[  561.456090][ T5859] Bluetooth: hci5: unexpected event for opcode 0x2062
[  561.559233][ T9839] usb 2-1: config 0 descriptor??
[  562.790219][ T9839] a4tech 0003:09DA:001A.0010: unknown main item tag 0x0
[  562.813679][ T9839] a4tech 0003:09DA:001A.0010: unknown main item tag 0x0
[  562.827731][ T9839] a4tech 0003:09DA:001A.0010: item fetching failed at offset 2/5
[  562.828884][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  562.836042][ T9839] a4tech 0003:09DA:001A.0010: parse failed
[  562.850174][ T9839] a4tech 0003:09DA:001A.0010: probe with driver a4tech failed with error -22
[  562.866506][ T9839] usb 2-1: USB disconnect, device number 32
[  562.871896][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  564.328081][   T30] kauditd_printk_skb: 3 callbacks suppressed
[  564.328096][   T30] audit: type=1326 audit(1756792651.066:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11015 comm="syz.5.1152" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f38ba38ebe9 code=0x0
[  565.646351][ T5859] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[  565.655749][ T5859] Bluetooth: hci5: Injecting HCI hardware error event
[  565.666125][ T5859] Bluetooth: hci5: hardware error 0x00
[  565.679190][   T30] audit: type=1400 audit(1756792651.416:551): avc:  denied  { execmem } for  pid=11024 comm="syz.3.1155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  567.634017][ T5995] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  568.687359][    C0] sched: DL replenish lagged too much
[  570.425679][T11045] batman_adv: batadv0: Adding interface: ipvlan2
[  571.306626][T11053] No source specified
[  571.388781][T11052] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1162'.
[  571.410141][ T5859] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  571.629988][T11045] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  571.667506][T11045] batman_adv: batadv0: Interface activated: ipvlan2
[  571.684560][   T30] audit: type=1400 audit(1756792658.386:552): avc:  denied  { create } for  pid=11042 comm="syz.1.1161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[  571.921286][ T5859] Bluetooth: hci2: unexpected event for opcode 0x0c12
[  572.633885][   T30] audit: type=1400 audit(1756792659.366:553): avc:  denied  { watch watch_reads } for  pid=11042 comm="syz.1.1161" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  572.727946][ T5932] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  572.878969][T11080] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1168'.
[  572.928889][ T5932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  572.965938][ T5932] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  573.161491][T11086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  573.207149][   T30] audit: type=1400 audit(1756792659.886:554): avc:  denied  { create } for  pid=11075 comm="syz.3.1169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[  573.259704][ T5932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  573.263148][   T30] audit: type=1400 audit(1756792659.986:555): avc:  denied  { append } for  pid=11076 comm="syz.2.1170" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  573.350564][   T30] audit: type=1400 audit(1756792660.036:556): avc:  denied  { connect } for  pid=11076 comm="syz.2.1170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  573.464395][ T5932] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  574.779541][T11095] netlink: 'syz.1.1173': attribute type 2 has an invalid length.
[  574.787372][T11095] netlink: 'syz.1.1173': attribute type 1 has an invalid length.
[  575.446225][ T5995] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  575.499866][T11075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  575.574892][   T30] audit: type=1400 audit(1756792662.306:557): avc:  denied  { read } for  pid=11076 comm="syz.2.1170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  575.807732][ T5995] usb 2-1: device descriptor read/64, error -71
[  575.890736][ T5932] usb 5-1: string descriptor 0 read error: -71
[  575.896996][ T5932] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  576.026489][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  576.036022][ T5859] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  576.038318][ T5932] usb 5-1: config 0 descriptor??
[  576.045893][ T5859] Bluetooth: hci2: Injecting HCI hardware error event
[  576.050123][ T5932] usb 5-1: can't set config #0, error -71
[  576.059282][T10604] Bluetooth: hci2: hardware error 0x00
[  576.065513][ T5932] usb 5-1: USB disconnect, device number 50
[  576.527115][T11100] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1174'.
[  576.609972][T11101] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1174'.
[  577.025710][ T5995] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  577.431298][T11110] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7)
[  577.437833][T11110] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  577.445343][T11110] vhci_hcd vhci_hcd.0: Device attached
[  577.697634][ T6032] vhci_hcd: vhci_device speed not set
[  577.752010][T11119] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1178'.
[  577.771009][ T6032] usb 43-1: new full-speed USB device number 2 using vhci_hcd
[  577.779323][ T5932] usb 6-1: new low-speed USB device number 10 using dummy_hcd
[  578.119292][ T5932] usb 6-1: config 0 has no interfaces?
[  578.133104][ T5932] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  578.242487][ T5932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  578.368037][ T5932] usb 6-1: config 0 descriptor??
[  579.132600][T10604] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  579.152766][T11111] vhci_hcd: unknown pdu 2
[  579.172085][T11129] 8021q: adding VLAN 0 to HW filter on device bond1
[  579.182220][   T30] audit: type=1800 audit(1756792665.516:558): pid=11130 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1176" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  579.237933][ T6032] vhci_hcd: vhci_device speed not set
[  579.246852][   T49] vhci_hcd: stop threads
[  579.409401][   T49] vhci_hcd: release socket
[  579.417876][T11124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1180'.
[  579.446134][   T49] vhci_hcd: disconnect device
[  579.727693][ T6032] usb 43-1: device descriptor read/64, error -71
[  579.954087][ T6032] vhci_hcd: vhci_device speed not set
[  581.134887][ T5932] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  581.204517][ T5995] usb 6-1: USB disconnect, device number 10
[  581.378867][ T5932] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  581.411495][ T5932] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  581.446363][ T5932] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  581.457461][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  581.561571][   T10] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  581.578526][ T5932] usb 5-1: SerialNumber: syz
[  581.696128][T11161] CUSE: unknown device info ""
[  581.701151][T11161] CUSE: zero length info key specified
[  582.184137][ T5932] usb 5-1: 0:2 : does not exist
[  582.223374][ T5932] usb 5-1: USB disconnect, device number 51
[  582.241849][   T10] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  582.254208][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  582.276489][   T10] usb 2-1: Product: syz
[  582.281602][   T10] usb 2-1: Manufacturer: syz
[  582.287798][   T10] usb 2-1: SerialNumber: syz
[  582.295773][   T10] usb 2-1: config 0 descriptor??
[  582.533150][   T10] cx82310_eth 2-1:0.0: probe with driver cx82310_eth failed with error -22
[  582.565208][   T10] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19!
[  582.572229][   T30] audit: type=1326 audit(1756792669.296:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11166 comm="syz.5.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ba38ebe9 code=0x7ffc0000
[  582.622148][   T10] usb 2-1: USB disconnect, device number 35
[  582.761406][   T30] audit: type=1326 audit(1756792669.336:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11166 comm="syz.5.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f38ba38ebe9 code=0x7ffc0000
[  582.817435][   T30] audit: type=1326 audit(1756792669.336:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11166 comm="syz.5.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ba38ebe9 code=0x7ffc0000
[  583.035934][   T30] audit: type=1326 audit(1756792669.336:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11166 comm="syz.5.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ba38ebe9 code=0x7ffc0000
[  583.081358][   T30] audit: type=1326 audit(1756792669.336:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11166 comm="syz.5.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f38ba38ebe9 code=0x7ffc0000
[  583.123729][   T30] audit: type=1326 audit(1756792669.336:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11166 comm="syz.5.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ba38ebe9 code=0x7ffc0000
[  584.466750][   T30] audit: type=1326 audit(1756792669.336:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11166 comm="syz.5.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ba38ebe9 code=0x7ffc0000
[  584.491114][   T30] audit: type=1326 audit(1756792669.336:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11166 comm="syz.5.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f38ba38ebe9 code=0x7ffc0000
[  584.535207][   T30] audit: type=1326 audit(1756792669.336:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11166 comm="syz.5.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ba38ebe9 code=0x7ffc0000
[  584.566667][   T30] audit: type=1326 audit(1756792669.336:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11166 comm="syz.5.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ba38ebe9 code=0x7ffc0000
[  584.590392][   T30] audit: type=1326 audit(1756792669.336:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11166 comm="syz.5.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f38ba38ebe9 code=0x7ffc0000
[  584.617537][   T30] audit: type=1326 audit(1756792669.336:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11166 comm="syz.5.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ba38ebe9 code=0x7ffc0000
[  584.646495][T11180] pim6reg: entered allmulticast mode
[  584.838280][   T30] audit: type=1326 audit(1756792669.356:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11166 comm="syz.5.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f38ba38ebe9 code=0x7ffc0000
[  584.891180][   T30] audit: type=1326 audit(1756792669.356:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11166 comm="syz.5.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ba38ebe9 code=0x7ffc0000
[  584.912849][T11166] pim6reg: left allmulticast mode
[  584.977238][T11187] No source specified
[  585.495993][   T30] audit: type=1326 audit(1756792669.356:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11166 comm="syz.5.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ba38ebe9 code=0x7ffc0000
[  585.620668][   T30] audit: type=1326 audit(1756792669.356:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11166 comm="syz.5.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f38ba38ebe9 code=0x7ffc0000
[  593.007133][ T5982] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  593.184491][ T5982] usb 3-1: Using ep0 maxpacket: 8
[  593.205551][ T5982] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  593.256466][ T5982] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  593.289190][ T5982] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  593.316119][ T5982] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  593.328613][ T5982] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  593.350395][ T5982] usb 3-1: Product: syz
[  593.364405][ T5982] usb 3-1: Manufacturer: syz
[  593.381842][ T5982] usb 3-1: SerialNumber: syz
[  593.992742][ T5982] usb 3-1: 0:2 : does not exist
[  594.003482][ T5982] usb 3-1: USB disconnect, device number 33
[  594.367276][ T2148] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  594.547165][ T2148] usb 2-1: Using ep0 maxpacket: 32
[  594.627170][ T5982] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  594.827840][ T2148] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  594.835901][ T2148] usb 2-1: config 0 has no interface number 0
[  594.851373][ T2148] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  594.862868][ T2148] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  594.873504][ T2148] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  594.937609][ T6032] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  595.000008][ T5982] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  595.022908][ T2148] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  595.058841][ T5982] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  595.079778][ T2148] usb 2-1: config 0 descriptor??
[  595.104342][ T5982] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00
[  595.164291][ T6032] usb 6-1: Using ep0 maxpacket: 8
[  595.193696][ T5982] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  595.217153][ T6032] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E
[  595.219311][ T5982] usb 4-1: config 0 descriptor??
[  595.244213][ T6032] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  595.345785][ T6032] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  595.493930][   T30] kauditd_printk_skb: 28 callbacks suppressed
[  595.493947][   T30] audit: type=1326 audit(1756792682.196:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11295 comm="syz.2.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbacd8ebe9 code=0x7ffc0000
[  595.610295][ T6032] usb 6-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad
[  595.626642][ T6032] usb 6-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3
[  595.645353][ T6032] usb 6-1: Product: syz
[  595.655480][ T6032] usb 6-1: Manufacturer: syz
[  595.660827][   T30] audit: type=1326 audit(1756792682.196:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11295 comm="syz.2.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fbbacd8ebe9 code=0x7ffc0000
[  595.687084][ T6032] usb 6-1: SerialNumber: syz
[  595.688728][ T5982] sony 0003:054C:024B.0011: unknown main item tag 0x0
[  595.732121][ T5982] sony 0003:054C:024B.0011: unknown main item tag 0x0
[  595.876541][ T5982] sony 0003:054C:024B.0011: unknown main item tag 0x0
[  595.884181][ T5982] sony 0003:054C:024B.0011: unknown main item tag 0x0
[  595.907755][ T5982] sony 0003:054C:024B.0011: unknown main item tag 0x0
[  595.912114][ T6032] usb 6-1: config 0 descriptor??
[  595.923435][ T5982] sony 0003:054C:024B.0011: unknown main item tag 0x0
[  596.469697][ T5982] sony 0003:054C:024B.0011: unknown main item tag 0x0
[  596.477905][ T5982] sony 0003:054C:024B.0011: unknown main item tag 0x0
[  596.485726][ T5982] sony 0003:054C:024B.0011: unknown main item tag 0x0
[  596.494010][ T5982] sony 0003:054C:024B.0011: unknown main item tag 0x0
[  596.505297][   T30] audit: type=1326 audit(1756792682.196:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11295 comm="syz.2.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbacd8ebe9 code=0x7ffc0000
[  596.511777][ T5982] sony 0003:054C:024B.0011: unexpected long global item
[  596.589209][   T30] audit: type=1326 audit(1756792682.196:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11295 comm="syz.2.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fbbacd8ebe9 code=0x7ffc0000
[  596.607004][ T5982] sony 0003:054C:024B.0011: parse failed
[  596.613369][   T30] audit: type=1326 audit(1756792682.196:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11295 comm="syz.2.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbacd8ebe9 code=0x7ffc0000
[  596.731740][T11290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  596.741427][T11290] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  596.843987][   T30] audit: type=1326 audit(1756792682.196:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11295 comm="syz.2.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fbbacd8ebe9 code=0x7ffc0000
[  596.876445][   T30] audit: type=1326 audit(1756792682.196:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11295 comm="syz.2.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbacd8ebe9 code=0x7ffc0000
[  596.908258][   T30] audit: type=1326 audit(1756792682.196:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11295 comm="syz.2.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fbbacd8ebe9 code=0x7ffc0000
[  596.927355][ T5982] sony 0003:054C:024B.0011: probe with driver sony failed with error -22
[  596.940741][   T30] audit: type=1326 audit(1756792682.636:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11295 comm="syz.2.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbacd8ebe9 code=0x7ffc0000
[  596.967964][ T2148] uclogic 0003:28BD:0094.0012: pen parameters not found
[  596.975209][ T2148] uclogic 0003:28BD:0094.0012: interface is invalid, ignoring
[  596.977640][   T30] audit: type=1326 audit(1756792682.636:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11295 comm="syz.2.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbacd8ebe9 code=0x7ffc0000
[  597.503237][ T5982] usb 4-1: USB disconnect, device number 33
[  597.536540][ T6032] usb 6-1: can't set config #0, error -71
[  597.559955][ T6032] usb 6-1: USB disconnect, device number 11
[  598.298897][   T10] usb 2-1: USB disconnect, device number 36
[  598.458613][T11324] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1228'.
[  598.852452][T11337] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1229'.
[  600.091290][T11347] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1232'.
[  600.558554][T11345] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1231'.
[  600.723680][T11354] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1233'.
[  601.777305][   T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  602.662254][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  603.067142][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  603.076939][   T10] usb 6-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00
[  603.086569][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  603.108402][   T10] usb 6-1: config 0 descriptor??
[  603.397843][T11377] netlink: 360 bytes leftover after parsing attributes in process `syz.2.1238'.
[  603.521249][   T10] hid_parser_main: 136 callbacks suppressed
[  603.521264][   T10] sony 0003:054C:024B.0013: unknown main item tag 0x0
[  603.798034][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  603.798053][   T30] audit: type=1326 audit(1756792690.306:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11368 comm="syz.4.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f34b8ebe9 code=0x7ffc0000
[  603.852951][   T10] sony 0003:054C:024B.0013: unknown main item tag 0x0
[  603.862261][   T10] sony 0003:054C:024B.0013: unknown main item tag 0x0
[  603.869220][   T10] sony 0003:054C:024B.0013: unknown main item tag 0x0
[  603.876103][   T10] sony 0003:054C:024B.0013: unknown main item tag 0x0
[  603.885034][   T30] audit: type=1326 audit(1756792690.316:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11368 comm="syz.4.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f2f34b8ebe9 code=0x7ffc0000
[  603.912677][   T10] sony 0003:054C:024B.0013: unknown main item tag 0x0
[  603.920858][   T10] sony 0003:054C:024B.0013: unknown main item tag 0x0
[  603.927923][   T10] sony 0003:054C:024B.0013: unknown main item tag 0x0
[  603.934979][   T10] sony 0003:054C:024B.0013: unknown main item tag 0x0
[  603.955891][   T30] audit: type=1326 audit(1756792690.316:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11368 comm="syz.4.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f34b8ebe9 code=0x7ffc0000
[  603.995747][   T10] sony 0003:054C:024B.0013: unknown main item tag 0x0
[  604.015788][   T10] sony 0003:054C:024B.0013: unexpected long global item
[  604.042322][   T10] sony 0003:054C:024B.0013: parse failed
[  604.071683][   T30] audit: type=1326 audit(1756792690.346:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11368 comm="syz.4.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f2f34b8ebe9 code=0x7ffc0000
[  604.154553][   T10] sony 0003:054C:024B.0013: probe with driver sony failed with error -22
[  604.221924][   T30] audit: type=1326 audit(1756792690.346:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11368 comm="syz.4.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f34b8ebe9 code=0x7ffc0000
[  604.554985][   T30] audit: type=1326 audit(1756792690.346:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11368 comm="syz.4.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2f34b8ebe9 code=0x7ffc0000
[  604.579913][   T30] audit: type=1326 audit(1756792690.356:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11368 comm="syz.4.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f34b8ebe9 code=0x7ffc0000
[  605.119488][ T2148] usb 6-1: USB disconnect, device number 12
[  605.128832][   T30] audit: type=1326 audit(1756792690.366:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11368 comm="syz.4.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2f34b8ebe9 code=0x7ffc0000
[  605.213671][   T30] audit: type=1326 audit(1756792690.376:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11368 comm="syz.4.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f34b8ebe9 code=0x7ffc0000
[  605.240969][   T30] audit: type=1326 audit(1756792690.376:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11368 comm="syz.4.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f2f34b8ebe9 code=0x7ffc0000
[  608.996709][T11410] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1246'.
[  610.395999][T11433] block nbd5: Attempted send on invalid socket
[  610.420948][T11433] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  610.451538][T11433] block nbd5: Attempted send on invalid socket
[  610.466189][T11433] I/O error, dev nbd5, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  610.482451][T11433] Mount JFS Failure: -5
[  610.557266][ T5982] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  610.698184][T11437] qnx6: unable to read the first superblock
[  610.939341][ T5982] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  611.040823][ T5982] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  611.080084][ T5982] usb 3-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00
[  611.125936][ T5982] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  611.228428][   T36] Bluetooth: Error in BCSP hdr checksum
[  611.255998][ T5982] usb 3-1: config 0 descriptor??
[  611.480370][   T36] Bluetooth: Error in BCSP hdr checksum
[  611.487567][ T6032] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  611.653404][ T6032] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  611.665827][ T6032] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  611.679113][ T6032] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  611.737966][   T49] Bluetooth: Error in BCSP hdr checksum
[  611.781865][ T5982] hid_parser_main: 136 callbacks suppressed
[  611.781886][ T5982] sony 0003:054C:024B.0014: unknown main item tag 0x0
[  611.785913][ T6032] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  611.788053][ T5982] sony 0003:054C:024B.0014: unknown main item tag 0x0
[  611.856844][T11451] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  611.881351][ T5982] sony 0003:054C:024B.0014: unknown main item tag 0x0
[  611.915919][ T5982] sony 0003:054C:024B.0014: unknown main item tag 0x0
[  611.937373][ T6032] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  611.952059][ T5982] sony 0003:054C:024B.0014: unknown main item tag 0x0
[  611.973135][ T5982] sony 0003:054C:024B.0014: unknown main item tag 0x0
[  611.990250][ T5982] sony 0003:054C:024B.0014: unknown main item tag 0x0
[  612.002301][   T49] Bluetooth: Error in BCSP hdr checksum
[  612.013457][ T5982] sony 0003:054C:024B.0014: unknown main item tag 0x0
[  612.035085][ T5982] sony 0003:054C:024B.0014: unknown main item tag 0x0
[  612.054714][ T5982] sony 0003:054C:024B.0014: unknown main item tag 0x0
[  612.175320][ T5982] sony 0003:054C:024B.0014: unexpected long global item
[  612.221352][ T5982] sony 0003:054C:024B.0014: parse failed
[  612.235316][ T5982] sony 0003:054C:024B.0014: probe with driver sony failed with error -22
[  612.959235][ T5995] usb 3-1: USB disconnect, device number 34
[  612.970146][T10604] Bluetooth: hci6: command 0x1003 tx timeout
[  612.977792][ T5859] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  613.311759][   T30] kauditd_printk_skb: 17 callbacks suppressed
[  613.311801][   T30] audit: type=1400 audit(1756792700.046:642): avc:  denied  { mounton } for  pid=11464 comm="syz.4.1262" path="/258/file0" dev="tmpfs" ino=1402 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  613.776597][   T30] audit: type=1400 audit(1756792700.076:643): avc:  denied  { mounton } for  pid=11464 comm="syz.4.1262" path="/258/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1
[  614.252437][T11474] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  614.284851][T11474] CIFS mount error: No usable UNC path provided in device string!
[  614.284851][T11474] 
[  614.295645][T11474] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  614.854706][T11486] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1266'.
[  614.984029][ T5932] usb 6-1: USB disconnect, device number 13
[  615.005692][T11486] sctp: [Deprecated]: syz.1.1266 (pid 11486) Use of struct sctp_assoc_value in delayed_ack socket option.
[  615.005692][T11486] Use struct sctp_sack_info instead
[  615.090196][T11491] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1267'.
[  615.099826][T11491] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1267'.
[  615.109017][T11491] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1267'.
[  615.119948][T11491] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1267'.
[  615.137449][T11491] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1267'.
[  615.155527][T11491] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1267'.
[  615.210755][   T30] audit: type=1400 audit(1756792701.946:644): avc:  denied  { setopt } for  pid=11497 comm="syz.2.1269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  615.231136][    C1] vkms_vblank_simulate: vblank timer overrun
[  616.179082][   T30] audit: type=1400 audit(1756792702.906:645): avc:  denied  { ioctl } for  pid=11497 comm="syz.2.1269" path="socket:[30806]" dev="sockfs" ino=30806 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  616.241470][ T5982] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  616.255968][T11517] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  616.501522][ T5995] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  616.561645][ T5982] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  616.601016][ T5982] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  616.748813][ T5995] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  616.769089][ T5982] usb 6-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00
[  616.793640][ T5995] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  616.817255][ T5982] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  616.837270][ T5995] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  616.886224][ T5982] usb 6-1: config 0 descriptor??
[  616.896027][   T30] audit: type=1400 audit(1756792703.626:646): avc:  denied  { create } for  pid=11497 comm="syz.2.1269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  616.896209][ T5995] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  616.915421][    C1] vkms_vblank_simulate: vblank timer overrun
[  616.947446][   T30] audit: type=1400 audit(1756792703.676:647): avc:  denied  { write } for  pid=11497 comm="syz.2.1269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  616.973574][T11526] netlink: 'syz.4.1275': attribute type 41 has an invalid length.
[  617.126347][T11511] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  617.138712][   T30] audit: type=1400 audit(1756792703.716:648): avc:  denied  { write } for  pid=11522 comm="syz.4.1275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  617.158726][   T30] audit: type=1400 audit(1756792703.726:649): avc:  denied  { getopt } for  pid=11522 comm="syz.4.1275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  617.219282][ T5995] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  617.317118][ T2148] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  617.360429][ T5982] hid_parser_main: 136 callbacks suppressed
[  617.360444][ T5982] sony 0003:054C:024B.0015: unknown main item tag 0x0
[  617.381263][ T5995] usb 2-1: USB disconnect, device number 37
[  617.389004][ T5982] sony 0003:054C:024B.0015: unknown main item tag 0x0
[  617.469460][ T5982] sony 0003:054C:024B.0015: unknown main item tag 0x0
[  617.482570][ T5982] sony 0003:054C:024B.0015: unknown main item tag 0x0
[  617.496181][ T2148] usb 3-1: Using ep0 maxpacket: 32
[  617.547903][ T5982] sony 0003:054C:024B.0015: unknown main item tag 0x0
[  617.562640][ T5982] sony 0003:054C:024B.0015: unknown main item tag 0x0
[  617.573500][ T2148] usb 3-1: config 0 has an invalid interface number: 12 but max is 0
[  617.598978][ T5982] sony 0003:054C:024B.0015: unknown main item tag 0x0
[  617.608616][ T2148] usb 3-1: config 0 has no interface number 0
[  617.616518][ T5982] sony 0003:054C:024B.0015: unknown main item tag 0x0
[  617.667115][ T2148] usb 3-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  617.685790][ T5982] sony 0003:054C:024B.0015: unknown main item tag 0x0
[  617.695130][ T2148] usb 3-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  617.736582][ T5982] sony 0003:054C:024B.0015: unknown main item tag 0x0
[  617.767776][ T2148] usb 3-1: config 0 interface 12 has no altsetting 0
[  617.778090][ T5982] sony 0003:054C:024B.0015: unexpected long global item
[  617.787956][ T5982] sony 0003:054C:024B.0015: parse failed
[  617.797434][ T5982] sony 0003:054C:024B.0015: probe with driver sony failed with error -22
[  617.848866][ T2148] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40
[  617.858141][ T2148] usb 3-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3
[  617.866457][ T2148] usb 3-1: Product: syz
[  617.873389][ T2148] usb 3-1: Manufacturer: syz
[  617.892904][ T2148] usb 3-1: SerialNumber: syz
[  617.931789][ T2148] usb 3-1: config 0 descriptor??
[  617.962026][ T2148] f81534 3-1:0.12: unsupported endpoint max packet size
[  618.446321][T11541] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1280'.
[  618.619258][ T2148] usb 6-1: USB disconnect, device number 14
[  620.614324][   T10] usb 3-1: USB disconnect, device number 35
[  621.054543][   T30] audit: type=1400 audit(1756792707.786:650): avc:  denied  { ioctl } for  pid=11555 comm="syz.3.1283" path="socket:[30899]" dev="sockfs" ino=30899 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  621.578828][   T30] audit: type=1400 audit(1756792708.286:651): avc:  denied  { ioctl } for  pid=11576 comm="syz.5.1288" path="socket:[30442]" dev="sockfs" ino=30442 ioctlcmd=0x9434 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  621.603451][    C0] vkms_vblank_simulate: vblank timer overrun
[  621.944600][T11587] block nbd0: Attempted send on invalid socket
[  621.950875][T11587] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  622.410037][T11592] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  622.724157][   T30] audit: type=1400 audit(1756792709.456:652): avc:  denied  { write } for  pid=11581 comm="syz.4.1289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  622.772453][   T30] audit: type=1400 audit(1756792709.456:653): avc:  denied  { nlmsg_write } for  pid=11581 comm="syz.4.1289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  623.577167][   T43] kernel read not supported for file /dsp1 (pid: 43 comm: kworker/1:1)
[  624.251082][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  624.258018][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  625.308027][T11611] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  628.002645][T11642] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1302'.
[  628.772259][   T30] audit: type=1400 audit(1756792715.446:654): avc:  denied  { mount } for  pid=11635 comm="syz.5.1301" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1
[  628.972355][T11647] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1303'.
[  629.293200][T11648] geneve2: entered promiscuous mode
[  630.007221][   T10] kernel read not supported for file /dsp1 (pid: 10 comm: kworker/0:1)
[  630.866311][T11656] No source specified
[  631.391990][   T30] audit: type=1326 audit(1756792718.126:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11657 comm="syz.1.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc179d8ebe9 code=0x7ffc0000
[  631.471028][T11658] debugfs: '!' already exists in 'ieee80211'
[  631.492396][   T30] audit: type=1326 audit(1756792718.126:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11657 comm="syz.1.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc179d8ebe9 code=0x7ffc0000
[  631.611027][T11670] fuse: Bad value for 'fd'
[  631.740333][   T30] audit: type=1326 audit(1756792718.156:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11657 comm="syz.1.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fc179d8ebe9 code=0x7ffc0000
[  632.248375][   T30] audit: type=1326 audit(1756792718.156:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11657 comm="syz.1.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc179d8ebe9 code=0x7ffc0000
[  632.451670][   T30] audit: type=1326 audit(1756792718.176:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11657 comm="syz.1.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc179d8ebe9 code=0x7ffc0000
[  632.506261][   T30] audit: type=1400 audit(1756792718.206:660): avc:  denied  { map } for  pid=11657 comm="syz.1.1307" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  632.530415][   T30] audit: type=1400 audit(1756792718.206:661): avc:  denied  { execute } for  pid=11657 comm="syz.1.1307" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  632.559156][ T5932] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  632.592859][T11681] loop2: detected capacity change from 0 to 7
[  632.623286][T11678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  632.632196][T11678] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  632.655293][T11681] Dev loop2: unable to read RDB block 7
[  632.662803][T11681]  loop2: unable to read partition table
[  632.670237][T11681] loop2: partition table beyond EOD, truncated
[  632.676662][T11681] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  632.751288][ T5932] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.17
[  632.777122][ T5932] usb 2-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3
[  632.799955][ T5932] usb 2-1: Product: syz
[  632.887308][   T43] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  632.907523][ T5932] usb 2-1: Manufacturer: syz
[  633.098043][ T5932] usb 2-1: SerialNumber: syz
[  633.116464][ T5932] usb 2-1: config 0 descriptor??
[  633.140352][ T5932] ch341 2-1:0.0: ch341-uart converter detected
[  633.267204][   T43] usb 6-1: Using ep0 maxpacket: 16
[  633.294747][   T43] usb 6-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 1023
[  633.339132][   T43] usb 6-1: config 1 interface 0 altsetting 7 endpoint 0x3 has invalid maxpacket 1088, setting to 1024
[  633.344625][ T5932] usb 2-1: failed to receive control message: -121
[  633.366366][   T43] usb 6-1: config 1 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 1024
[  633.376570][ T5932] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121
[  633.518857][   T43] usb 6-1: config 1 interface 0 has no altsetting 0
[  633.529219][   T43] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  633.538600][   T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  633.549736][   T43] usb 6-1: Product: syz
[  633.554383][   T43] usb 6-1: Manufacturer: syz
[  633.559305][   T43] usb 6-1: SerialNumber: syz
[  633.623128][T11694] qnx6: unable to read the first superblock
[  633.954333][T11697] comedi comedi0: ni_at_a2150: I/O port conflict (0xee,28)
[  634.025325][T11679] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  634.034201][T11679] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  634.259384][T11678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  634.289967][T11678] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  634.351646][   T43] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71
[  634.365893][   T43] usb 6-1: USB disconnect, device number 15
[  635.401775][ T5995] usb 2-1: USB disconnect, device number 38
[  635.509204][ T5995] ch341 2-1:0.0: device disconnected
[  635.917951][T11733] netlink: 'syz.4.1319': attribute type 2 has an invalid length.
[  635.918000][T11733] netlink: 'syz.4.1319': attribute type 1 has an invalid length.
[  636.667803][ T2148] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  636.798336][ T2148] usb 5-1: device descriptor read/64, error -71
[  637.037247][ T2148] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  637.167562][ T2148] usb 5-1: device descriptor read/64, error -71
[  637.278648][ T2148] usb usb5-port1: attempt power cycle
[  637.579597][   T30] audit: type=1400 audit(1756792724.316:662): avc:  denied  { ioctl } for  pid=11737 comm="syz.5.1326" path="socket:[31907]" dev="sockfs" ino=31907 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  637.623883][ T2148] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  637.691331][ T2148] usb 5-1: device descriptor read/8, error -71
[  637.771974][T11744] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  637.779567][T11744] IPv6: NLM_F_CREATE should be set when creating new route
[  637.786877][T11744] IPv6: NLM_F_CREATE should be set when creating new route
[  637.794097][T11744] IPv6: NLM_F_CREATE should be set when creating new route
[  637.946305][ T2148] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  637.987182][   T43] usb 6-1: new full-speed USB device number 16 using dummy_hcd
[  638.005616][ T2148] usb 5-1: device descriptor read/8, error -71
[  638.087407][T11749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1330'.
[  638.119583][ T2148] usb usb5-port1: unable to enumerate USB device
[  638.123486][T11749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1330'.
[  638.137259][   T43] usb 6-1: device descriptor read/64, error -71
[  638.151139][T11749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1330'.
[  638.190143][T11749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1330'.
[  638.218192][T11749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1330'.
[  638.323662][T11756] random: crng reseeded on system resumption
[  638.365925][   T30] audit: type=1400 audit(1756792725.056:663): avc:  denied  { append } for  pid=11738 comm="syz.3.1328" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  638.377206][   T43] usb 6-1: new full-speed USB device number 17 using dummy_hcd
[  638.517971][   T30] audit: type=1400 audit(1756792725.056:664): avc:  denied  { open } for  pid=11738 comm="syz.3.1328" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  638.541396][    C1] vkms_vblank_simulate: vblank timer overrun
[  638.557201][   T43] usb 6-1: device descriptor read/64, error -71
[  638.667507][   T43] usb usb6-port1: attempt power cycle
[  639.007463][   T43] usb 6-1: new full-speed USB device number 18 using dummy_hcd
[  639.039099][   T43] usb 6-1: device descriptor read/8, error -71
[  639.755651][   T43] usb 6-1: new full-speed USB device number 19 using dummy_hcd
[  640.161119][   T43] usb 6-1: device descriptor read/8, error -71
[  640.181167][ T5932] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  640.278820][   T43] usb usb6-port1: unable to enumerate USB device
[  640.345039][T10604] Bluetooth: hci1: command 0x0406 tx timeout
[  640.395333][   T30] audit: type=1400 audit(1756792727.106:665): avc:  denied  { setopt } for  pid=11771 comm="syz.1.1338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  640.549081][T11779] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1336'.
[  640.957483][ T5932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  640.993536][ T5932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  641.026266][ T5932] usb 3-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00
[  641.041719][T11783] loop8: detected capacity change from 0 to 16384
[  641.095926][ T5932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  641.158264][T11785] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  641.170335][ T5932] usb 3-1: config 0 descriptor??
[  641.448642][   T43] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  641.757435][T11790] serio: Serial port ptm0
[  641.811389][ T5932] hid_parser_main: 136 callbacks suppressed
[  641.811412][ T5932] sony 0003:054C:024B.0016: unknown main item tag 0x0
[  641.817166][   T43] usb 2-1: Using ep0 maxpacket: 16
[  641.889005][ T5932] sony 0003:054C:024B.0016: unknown main item tag 0x0
[  641.912387][ T5932] sony 0003:054C:024B.0016: unknown main item tag 0x0
[  641.955630][   T30] audit: type=1400 audit(1756792728.686:666): avc:  denied  { ioctl } for  pid=11771 comm="syz.1.1338" path="/dev/ptyq7" dev="devtmpfs" ino=126 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  641.992192][ T5932] sony 0003:054C:024B.0016: unknown main item tag 0x0
[  642.005814][ T5932] sony 0003:054C:024B.0016: unknown main item tag 0x0
[  642.016457][ T5932] sony 0003:054C:024B.0016: unknown main item tag 0x0
[  642.027297][T11783] loop8: detected capacity change from 16384 to 0
[  642.064076][ T5932] sony 0003:054C:024B.0016: unknown main item tag 0x0
[  642.094720][ T5932] sony 0003:054C:024B.0016: unknown main item tag 0x0
[  642.119238][ T5932] sony 0003:054C:024B.0016: unknown main item tag 0x0
[  642.146628][ T5932] sony 0003:054C:024B.0016: unknown main item tag 0x0
[  642.203423][ T5932] sony 0003:054C:024B.0016: unexpected long global item
[  642.226279][T11795] serio: Serial port ptm0
[  642.262533][ T5932] sony 0003:054C:024B.0016: parse failed
[  642.268542][ T5932] sony 0003:054C:024B.0016: probe with driver sony failed with error -22
[  642.486932][   T30] audit: type=1400 audit(1756792729.216:667): avc:  denied  { read } for  pid=11797 comm="syz.5.1343" name="file0" dev="tmpfs" ino=573 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  642.823984][T11804] evm: overlay not supported
[  642.898295][ T5932] usb 3-1: USB disconnect, device number 36
[  643.043961][   T30] audit: type=1400 audit(1756792729.776:668): avc:  denied  { map } for  pid=11802 comm="syz.3.1345" path="socket:[31243]" dev="sockfs" ino=31243 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  643.520700][   T30] audit: type=1400 audit(1756792730.256:669): avc:  denied  { getopt } for  pid=11811 comm="syz.5.1348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  643.931970][T11817] random: crng reseeded on system resumption
[  644.276974][   T43] usb 2-1: unable to get BOS descriptor or descriptor too short
[  644.333631][   T43] usb 2-1: unable to read config index 0 descriptor/start: -71
[  644.365957][   T43] usb 2-1: can't read configurations, error -71
[  647.457734][   T30] audit: type=1400 audit(1756792734.186:670): avc:  denied  { write } for  pid=11818 comm="syz.1.1349" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  649.323688][T11865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1359'.
[  649.499063][   T30] audit: type=1400 audit(1756792736.226:671): avc:  denied  { ioctl } for  pid=11868 comm="syz.4.1360" path="socket:[32304]" dev="sockfs" ino=32304 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  649.597256][   T43] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  649.772187][   T43] usb 2-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64
[  649.782168][   T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  649.861252][   T43] usb 2-1: Product: syz
[  649.870126][   T43] usb 2-1: Manufacturer: syz
[  649.876552][   T43] usb 2-1: SerialNumber: syz
[  650.471695][   T43] usb 2-1: config 0 descriptor??
[  650.493751][   T43] hub 2-1:0.0: bad descriptor, ignoring hub
[  650.510298][   T43] hub 2-1:0.0: probe with driver hub failed with error -5
[  650.527007][   T43] f81232 2-1:0.0: f81534a converter detected
[  650.577493][ T5932] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  650.707129][   T43] usb 2-1: f81534a converter now attached to ttyUSB0
[  650.727487][ T5932] usb 6-1: Using ep0 maxpacket: 8
[  650.734128][ T5932] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  650.744662][ T5932] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  650.789230][ T5932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  650.800941][ T5932] usb 6-1: config 0 descriptor??
[  650.832769][ T5932] gspca_main: vc032x-2.14.0 probing 046d:0892
[  650.912728][T11880] loop2: detected capacity change from 0 to 7
[  650.923623][T11880] Dev loop2: unable to read RDB block 7
[  650.929901][T11880]  loop2: unable to read partition table
[  650.936131][T11880] loop2: partition table beyond EOD, truncated
[  650.943643][T11880] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  651.017512][   T43] usb 2-1: USB disconnect, device number 41
[  651.030276][   T43] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0
[  651.036071][ T6032] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  651.038900][   T43] f81232 2-1:0.0: device disconnected
[  651.936587][ T5932] gspca_vc032x: reg_w err -110
[  651.956609][ T5932] vc032x 6-1:0.0: probe with driver vc032x failed with error -110
[  651.967153][ T6032] usb 3-1: Using ep0 maxpacket: 32
[  652.100299][ T6032] usb 3-1: unable to get BOS descriptor or descriptor too short
[  652.118884][ T6032] usb 3-1: unable to read config index 0 descriptor/start: -71
[  652.207363][ T6032] usb 3-1: can't read configurations, error -71
[  652.508856][T11903] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  652.729854][ T5932] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  652.803668][T11906] random: crng reseeded on system resumption
[  652.905202][T11911] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1372'.
[  653.152734][ T5932] usb 5-1: Using ep0 maxpacket: 16
[  653.161868][ T5932] usb 5-1: too many configurations: 97, using maximum allowed: 8
[  653.448778][T11926] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1374'.
[  653.893350][ T5932] usb 5-1: string descriptor 0 read error: -71
[  653.910079][ T5932] usb 5-1: New USB device found, idVendor=2304, idProduct=023b, bcdDevice=7b.5c
[  653.936001][ T5932] usb 5-1: New USB device strings: Mfr=249, Product=204, SerialNumber=224
[  653.982411][ T5932] usb 5-1: rejected 8 configurations due to insufficient available bus power
[  654.093566][ T5932] usb 5-1: no configuration chosen from 8 choices
[  654.115418][ T5932] usb 5-1: USB disconnect, device number 56
[  654.199713][T11932] netlink: 'syz.1.1376': attribute type 21 has an invalid length.
[  654.208016][T11932] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1376'.
[  654.467761][T11934] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4)
[  654.474308][T11934] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  654.576710][T11934] vhci_hcd vhci_hcd.0: Device attached
[  654.642605][T11934] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  654.720495][ T5917] kernel read not supported for file /dsp1 (pid: 5917 comm: kworker/1:5)
[  654.772302][T11935] vhci_hcd: connection closed
[  654.777517][ T3584] vhci_hcd: stop threads
[  654.795675][ T3584] vhci_hcd: release socket
[  654.807175][ T6032] usb 41-1: new high-speed USB device number 2 using vhci_hcd
[  655.077344][ T3584] vhci_hcd: disconnect device
[  655.188134][ T9839] usb 6-1: USB disconnect, device number 20
[  655.350173][T11950] fuse: Unknown parameter 'ÿNê'
[  655.606721][T11956] JFS: discard option not supported on device
[  656.003229][T11956] Mount JFS Failure: -22
[  656.007548][T11956] jfs_mount failed w/return code = -22
[  658.197151][ T5917] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  658.917372][ T5917] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  659.306626][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  659.321050][ T5917] usb 3-1: config 0 descriptor??
[  659.352757][T11975] serio: Serial port ptm0
[  659.529202][T11979] netlink: 'syz.1.1386': attribute type 21 has an invalid length.
[  659.537890][T11979] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1386'.
[  659.962616][ T5917] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  660.449627][ T9839] kernel read not supported for file /dsp1 (pid: 9839 comm: kworker/0:3)
[  660.823506][ T6032] vhci_hcd: vhci_device speed not set
[  661.600668][   T30] audit: type=1400 audit(1756792748.316:672): avc:  denied  { name_bind } for  pid=11986 comm="syz.5.1389" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  662.030385][ T5917] [drm:udl_init] *ERROR* Selecting channel failed
[  662.150682][T12005] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1391'.
[  662.653750][ T5917] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2
[  663.054467][ T5917] [drm] Initialized udl on minor 2
[  663.121293][ T5917] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  663.960068][ T5917] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  663.979164][   T30] audit: type=1400 audit(1756792750.706:673): avc:  denied  { getopt } for  pid=12010 comm="syz.2.1394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  664.028613][   T43] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  664.053430][ T5917] usb 3-1: USB disconnect, device number 39
[  664.060920][   T43] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  664.316904][T12026] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1398'.
[  664.661168][ T5995] usb 5-1: new full-speed USB device number 57 using dummy_hcd
[  664.740390][T12023] serio: Serial port ptm0
[  664.856646][ T5995] usb 5-1: config 0 has an invalid interface number: 52 but max is 0
[  664.877261][ T5995] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  664.957082][ T5995] usb 5-1: config 0 has no interface number 0
[  664.963248][ T5995] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10
[  665.035337][ T5995] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  665.195151][ T5995] usb 5-1: config 0 interface 52 has no altsetting 0
[  665.273821][ T5995] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00
[  665.303503][ T5995] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=35
[  665.377794][ T5995] usb 5-1: SerialNumber: syz
[  665.547763][ T5995] usb 5-1: config 0 descriptor??
[  665.774514][T12041] random: crng reseeded on system resumption
[  665.900716][ T5995] input: USB Synaptics Device 06cb:0003 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.52/input/input37
[  666.054776][T12017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  666.077716][T12017] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  666.126480][ T5995] usb 5-1: USB disconnect, device number 57
[  666.132484][    C1] synaptics_usb 5-1:0.52: synusb_irq - usb_submit_urb failed with result: -19
[  666.230358][   T30] audit: type=1400 audit(1756792752.946:674): avc:  denied  { write } for  pid=12043 comm="syz.1.1404" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  666.351453][   T30] audit: type=1400 audit(1756792752.966:675): avc:  denied  { append } for  pid=12043 comm="syz.1.1404" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  666.637286][ T5932] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  666.807922][ T6032] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  666.837825][ T5932] usb 2-1: Using ep0 maxpacket: 16
[  666.904502][ T5932] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  666.967240][ T6032] usb 3-1: Using ep0 maxpacket: 16
[  667.024433][ T6032] usb 3-1: config 0 has an invalid interface number: 105 but max is 0
[  667.055220][ T5932] usb 2-1: config 0 interface 0 has no altsetting 0
[  667.082837][ T6032] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  667.094526][ T5932] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  667.122543][ T6032] usb 3-1: config 0 has no interface number 0
[  667.130804][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  667.154879][ T5932] usb 2-1: config 0 descriptor??
[  667.160805][ T6032] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice=81.28
[  667.173340][ T6032] usb 3-1: New USB device strings: Mfr=0, Product=27, SerialNumber=3
[  667.186632][ T6032] usb 3-1: Product: syz
[  667.191653][ T6032] usb 3-1: SerialNumber: syz
[  668.656919][ T6032] usb 3-1: config 0 descriptor??
[  668.670788][ T6032] usb 3-1: Found UVC 0.00 device syz (046d:08f3)
[  668.705763][ T6032] usb 3-1: No valid video chain found.
[  668.838429][ T5932] hid_parser_main: 136 callbacks suppressed
[  668.838444][ T5932] arvo 0003:1E7D:30D4.0017: unknown main item tag 0x0
[  668.874160][ T5932] arvo 0003:1E7D:30D4.0017: unknown main item tag 0x0
[  668.884076][ T5932] arvo 0003:1E7D:30D4.0017: unknown main item tag 0x0
[  668.891158][ T5932] arvo 0003:1E7D:30D4.0017: unknown main item tag 0x0
[  668.901998][ T5932] arvo 0003:1E7D:30D4.0017: unknown main item tag 0x0
[  668.954513][T12065] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1410'.
[  669.136792][   T30] audit: type=1400 audit(1756792755.846:676): avc:  denied  { bind } for  pid=12047 comm="syz.2.1406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  669.260317][   T30] audit: type=1400 audit(1756792755.866:677): avc:  denied  { listen } for  pid=12047 comm="syz.2.1406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  669.291038][ T5932] arvo 0003:1E7D:30D4.0017: hidraw0: USB HID v0.05 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0
[  669.339839][   T30] audit: type=1400 audit(1756792755.866:678): avc:  denied  { accept } for  pid=12047 comm="syz.2.1406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  669.374887][ T5932] usb 2-1: USB disconnect, device number 42
[  669.555989][T12072] serio: Serial port ptm0
[  670.166463][T12080] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1413'.
[  671.014459][ T5995] usb 3-1: USB disconnect, device number 40
[  671.087099][ T5917] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  671.480818][ T5917] usb 2-1: Using ep0 maxpacket: 8
[  671.489946][ T5917] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  671.498996][ T5917] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  671.508908][ T5917] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  671.518769][ T5917] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  671.528893][ T5917] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  671.543950][ T5917] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  671.553172][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  671.769693][ T5917] usb 2-1: GET_CAPABILITIES returned 0
[  671.777130][ T5917] usbtmc 2-1:16.0: can't read capabilities
[  672.049160][ T5917] usb 2-1: USB disconnect, device number 43
[  672.085641][   T30] audit: type=1400 audit(1756792758.816:679): avc:  denied  { getopt } for  pid=12106 comm="syz.4.1420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  672.105046][    C1] vkms_vblank_simulate: vblank timer overrun
[  672.185942][   T30] audit: type=1400 audit(1756792758.906:680): avc:  denied  { write } for  pid=12106 comm="syz.4.1420" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  672.220560][    C1] vkms_vblank_simulate: vblank timer overrun
[  672.451528][   T30] audit: type=1400 audit(1756792759.066:681): avc:  denied  { unmount } for  pid=5846 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  672.471729][    C1] vkms_vblank_simulate: vblank timer overrun
[  672.641322][T12123] netlink: 'syz.4.1423': attribute type 21 has an invalid length.
[  672.649522][T12123] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1423'.
[  673.067123][ T2148] kernel read not supported for file /dsp1 (pid: 2148 comm: kworker/1:2)
[  674.430045][T12142] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1429'.
[  674.727419][ T5917] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  674.735047][ T2148] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  674.897167][ T5917] usb 2-1: Using ep0 maxpacket: 16
[  674.908237][ T5917] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[  674.919537][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  674.928290][ T5917] usb 2-1: Product: syz
[  674.932608][ T2148] usb 6-1: config index 0 descriptor too short (expected 7768, got 18)
[  674.942792][ T2148] usb 6-1: config 0 has an invalid interface number: 97 but max is 0
[  674.951036][ T5917] usb 2-1: Manufacturer: syz
[  675.045602][ T2148] usb 6-1: config 0 has no interface number 0
[  675.053663][ T5917] usb 2-1: SerialNumber: syz
[  675.058467][ T2148] usb 6-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d
[  675.071379][ T2148] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  675.080607][ T5917] usb 2-1: config 0 descriptor??
[  675.088326][ T5917] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[  675.096961][ T5917] usb 2-1: Detected FT232H
[  675.107967][ T2148] usb 6-1: config 0 descriptor??
[  675.134894][ T2148] ftdi_sio 6-1:0.97: FTDI USB Serial Device converter detected
[  675.144007][ T2148] ftdi_sio ttyUSB1: unknown device type: 0x524d
[  675.663395][ T5917] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  675.965056][ T5917] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71
[  676.036269][T12165] netlink: 'syz.3.1435': attribute type 21 has an invalid length.
[  676.044682][T12165] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1435'.
[  677.232922][ T5917] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  677.242953][ T5917] usb 2-1: USB disconnect, device number 44
[  677.253814][ T5917] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  677.264273][ T5917] ftdi_sio 2-1:0.0: device disconnected
[  677.405160][ T2148] usb 6-1: USB disconnect, device number 21
[  677.414792][ T2148] ftdi_sio 6-1:0.97: device disconnected
[  677.733751][T12176] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1436'.
[  678.541603][   T30] audit: type=1400 audit(1756792765.266:682): avc:  denied  { create } for  pid=12182 comm="syz.4.1441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  678.879981][   T30] audit: type=1400 audit(1756792765.276:683): avc:  denied  { ioctl } for  pid=12182 comm="syz.4.1441" path="socket:[33973]" dev="sockfs" ino=33973 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  679.213754][T12195] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1438'.
[  681.434061][   T30] audit: type=1400 audit(1756792768.116:684): avc:  denied  { map } for  pid=12197 comm="syz.5.1442" path="/proc/485/net/fib_trie" dev="proc" ino=4026533931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  681.563766][   T30] audit: type=1400 audit(1756792768.206:685): avc:  denied  { bind } for  pid=12211 comm="syz.4.1445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  681.577766][T12218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  681.592429][   T30] audit: type=1400 audit(1756792768.206:686): avc:  denied  { accept } for  pid=12211 comm="syz.4.1445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  681.622405][T12218] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  681.749169][ T6103] Bluetooth: Error in BCSP hdr checksum
[  681.892898][ T2148] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  682.101758][T12222] bridge0: entered promiscuous mode
[  682.108014][T12222] macvlan2: entered promiscuous mode
[  682.424832][ T3584] Bluetooth: Error in BCSP hdr checksum
[  682.497179][ T2148] usb 3-1: Using ep0 maxpacket: 32
[  682.550939][ T2148] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  682.593226][ T2148] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  682.680729][ T3584] Bluetooth: Error in BCSP hdr checksum
[  682.702146][ T2148] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  682.742461][ T2148] usb 3-1: Product: syz
[  682.763020][   T30] audit: type=1400 audit(1756792769.496:687): avc:  denied  { load_policy } for  pid=12223 comm="syz.1.1448" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  682.767352][ T2148] usb 3-1: Manufacturer: syz
[  682.785216][T12224] SELinux: failed to load policy
[  682.796881][ T2148] usb 3-1: SerialNumber: syz
[  682.843254][ T2148] imon:imon_find_endpoints: no valid input (IR) endpoint found
[  682.866747][   T30] audit: type=1400 audit(1756792769.596:688): avc:  denied  { listen } for  pid=12225 comm="syz.5.1449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  682.903951][ T2148] imon 3-1:155.0: unable to initialize intf0, err -19
[  682.925401][ T2148] imon:imon_probe: failed to initialize context!
[  682.953054][   T49] Bluetooth: Error in BCSP hdr checksum
[  682.962581][ T2148] imon 3-1:155.0: unable to register, err -19
[  682.969512][   T30] audit: type=1400 audit(1756792769.626:689): avc:  denied  { read } for  pid=12225 comm="syz.5.1449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  683.029695][ T2148] usb 3-1: USB disconnect, device number 41
[  683.303129][T12236] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1450'.
[  683.690215][T10604] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  683.696781][ T5859] Bluetooth: hci6: command 0x1003 tx timeout
[  683.950032][ T3584] Bluetooth: Error in BCSP hdr checksum
[  685.247325][   T10] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  685.317634][   T30] audit: type=1400 audit(1756792772.046:690): avc:  denied  { create } for  pid=12249 comm="syz.4.1455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  685.702293][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  685.737146][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  685.777111][   T10] usb 3-1: Using ep0 maxpacket: 16
[  685.791032][   T10] usb 3-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4
[  685.811560][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  686.093709][   T10] usb 3-1: Product: syz
[  686.120930][   T10] usb 3-1: Manufacturer: syz
[  686.815002][   T10] usb 3-1: SerialNumber: syz
[  686.821623][   T10] usb 3-1: config 0 descriptor??
[  686.828621][   T10] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state.
[  687.048701][   T10] gp8psk: usb in 128 operation failed.
[  687.065363][   T10] gp8psk: usb in 137 operation failed.
[  687.074246][   T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  687.098008][   T10] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver)
[  687.141470][   T10] usb 3-1: media controller created
[  687.537120][ T6032] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  687.616873][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  687.697904][   T10] gp8psk_fe: Frontend revision 1 attached
[  687.718754][   T10] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)...
[  687.739378][   T10] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered.
[  687.802516][ T6032] usb 2-1: Using ep0 maxpacket: 16
[  687.817591][ T6032] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 3
[  687.826331][ T6032] usb 2-1: can't read configurations, error -22
[  687.959351][ T6032] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  688.247841][ T6032] usb 2-1: Using ep0 maxpacket: 16
[  688.267510][ T6032] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 3
[  688.313633][ T6032] usb 2-1: can't read configurations, error -22
[  688.326418][   T10] gp8psk: usb in 138 operation failed.
[  688.334819][ T6032] usb usb2-port1: attempt power cycle
[  688.341774][   T10] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected.
[  688.381961][   T10] gp8psk: found Genpix USB device pID = 201 (hex)
[  688.399932][   T10] usb 3-1: USB disconnect, device number 42
[  688.521872][   T10] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected.
[  688.724649][ T6032] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  688.757927][ T6032] usb 2-1: Using ep0 maxpacket: 16
[  688.767704][ T6032] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 3
[  688.782547][ T6032] usb 2-1: can't read configurations, error -22
[  688.886185][   T10] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  688.957607][ T6032] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  689.049470][ T6032] usb 2-1: Using ep0 maxpacket: 16
[  689.067152][   T10] usb 3-1: Using ep0 maxpacket: 32
[  689.077632][   T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  689.112182][ T6032] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 3
[  689.150058][   T10] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  689.187135][ T6032] usb 2-1: can't read configurations, error -22
[  689.200850][   T10] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  689.217157][ T6032] usb usb2-port1: unable to enumerate USB device
[  689.227604][   T10] usb 3-1: Product: syz
[  689.237144][   T10] usb 3-1: Manufacturer: syz
[  689.241781][   T10] usb 3-1: SerialNumber: syz
[  689.273783][   T10] usb 3-1: config 0 descriptor??
[  689.290432][T12293] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  689.492325][ T9373] syz_tun (unregistering): left allmulticast mode
[  689.518251][T12293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  689.546840][T12293] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  689.562198][ T5932] usb 3-1: USB disconnect, device number 43
[  689.689968][   T49] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  689.853948][   T49] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  689.877394][   T10] usb 5-1: new full-speed USB device number 58 using dummy_hcd
[  690.024493][   T49] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  690.043925][   T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84
[  690.058762][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 47999, setting to 64
[  690.079979][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  690.094663][   T10] usb 5-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1
[  690.109360][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  690.139682][   T10] usb 5-1: Product: syz
[  690.144251][   T49] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  690.160188][   T10] usb 5-1: Manufacturer: syz
[  690.167849][   T10] usb 5-1: SerialNumber: syz
[  690.836171][   T10] usb 5-1: config 0 descriptor??
[  690.850448][T12300] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  690.866456][   T10] option 5-1:0.0: GSM modem (1-port) converter detected
[  691.070994][ T6032] usb 5-1: USB disconnect, device number 58
[  691.086929][ T6032] option 5-1:0.0: device disconnected
[  691.237410][   T49] bridge_slave_1: left allmulticast mode
[  691.662707][   T49] bridge_slave_1: left promiscuous mode
[  691.683110][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  691.782071][   T49] bridge_slave_0: left allmulticast mode
[  691.823468][   T49] bridge_slave_0: left promiscuous mode
[  691.872535][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  691.897691][ T5932] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  692.446688][T10604] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  692.460146][T10604] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  692.470740][T10604] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  692.487864][T10604] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  692.498255][T10604] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  692.538981][ T5932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  692.555697][ T5932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  692.566387][ T5932] usb 3-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00
[  692.575868][ T5932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  692.586343][ T5932] usb 3-1: config 0 descriptor??
[  693.276273][ T5932] sony 0003:054C:024B.0018: unknown main item tag 0x0
[  693.309057][ T5932] sony 0003:054C:024B.0018: unknown main item tag 0x0
[  693.319157][ T5932] sony 0003:054C:024B.0018: unknown main item tag 0x0
[  693.326111][ T5932] sony 0003:054C:024B.0018: unknown main item tag 0x0
[  693.336781][ T5932] sony 0003:054C:024B.0018: unknown main item tag 0x0
[  693.346230][ T5932] sony 0003:054C:024B.0018: unknown main item tag 0x0
[  693.355425][ T5932] sony 0003:054C:024B.0018: unknown main item tag 0x0
[  693.373165][ T5932] sony 0003:054C:024B.0018: unknown main item tag 0x0
[  693.381991][ T5932] sony 0003:054C:024B.0018: unknown main item tag 0x0
[  693.662415][ T5932] sony 0003:054C:024B.0018: unknown main item tag 0x0
[  693.694790][ T5932] sony 0003:054C:024B.0018: unexpected long global item
[  693.740362][ T5932] sony 0003:054C:024B.0018: parse failed
[  693.746394][ T5932] sony 0003:054C:024B.0018: probe with driver sony failed with error -22
[  693.797244][ T6032] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  694.032877][ T6032] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  694.045101][ T6032] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  694.089805][ T6032] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00
[  694.101074][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  694.123054][ T6032] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  694.134575][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  694.151696][   T49] bond0 (unregistering): Released all slaves
[  694.152107][ T6032] usb 4-1: config 0 descriptor??
[  694.570030][   T49] bond1 (unregistering): Released all slaves
[  694.571789][T10604] Bluetooth: hci5: command tx timeout
[  694.682906][ T6032] sony 0003:054C:024B.0019: unexpected long global item
[  694.690470][ T6032] sony 0003:054C:024B.0019: parse failed
[  694.696680][ T6032] sony 0003:054C:024B.0019: probe with driver sony failed with error -22
[  694.793654][   T49] bond2 (unregistering): Released all slaves
[  694.914439][ T6032] usb 3-1: USB disconnect, device number 44
[  696.073900][   T10] usb 4-1: USB disconnect, device number 34
[  696.185241][   T49] hsr_slave_0: left promiscuous mode
[  696.372147][   T49] hsr_slave_1: left promiscuous mode
[  696.388374][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  696.401312][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  696.423614][   T30] audit: type=1400 audit(1756792783.156:691): avc:  denied  { write } for  pid=12361 comm="syz.4.1480" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  696.458724][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  696.466127][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  696.600266][   T49] veth1_macvtap: left promiscuous mode
[  696.606230][   T49] veth0_macvtap: left promiscuous mode
[  696.717345][T10604] Bluetooth: hci5: command tx timeout
[  696.775608][   T49] veth1_vlan: left promiscuous mode
[  696.781815][   T49] veth0_vlan: left promiscuous mode
[  697.374648][T12375] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1482'.
[  697.391970][T12375] unsupported nlmsg_type 40
[  697.427195][   T43] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  697.773057][   T43] usb 4-1: config 0 has no interfaces?
[  697.799981][   T43] usb 4-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.00
[  698.029522][   T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  698.055606][   T43] usb 4-1: config 0 descriptor??
[  698.819439][T10604] Bluetooth: hci5: command tx timeout
[  700.477130][ T6032] usb 4-1: USB disconnect, device number 35
[  701.451760][T10604] Bluetooth: hci5: command tx timeout
[  701.510822][T12404] serio: Serial port ptm0
[  702.883338][   T49] team0 (unregistering): Port device team_slave_1 removed
[  702.949282][   T49] team0 (unregistering): Port device team_slave_0 removed
[  703.045463][   T30] audit: type=1400 audit(1756792789.766:692): avc:  denied  { bind } for  pid=12424 comm="syz.4.1494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  704.276735][T12381] netdevsim netdevsim1: Direct firmware load for .
[  704.276735][T12381]  failed with error -2
[  704.416383][T12381] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  704.416383][T12381] 
[  704.591300][T12435] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  704.603274][T12435] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  705.323891][T12320] chnl_net:caif_netlink_parms(): no params data found
[  705.388175][T12445] netlink: 'syz.2.1497': attribute type 10 has an invalid length.
[  706.395090][T12445] team0: Port device dummy0 added
[  706.625926][T12454] serio: Serial port ptm0
[  707.805798][T12320] bridge0: port 1(bridge_slave_0) entered blocking state
[  707.819938][T12320] bridge0: port 1(bridge_slave_0) entered disabled state
[  707.858322][T12320] bridge_slave_0: entered allmulticast mode
[  707.871759][T12320] bridge_slave_0: entered promiscuous mode
[  707.884342][T12320] bridge0: port 2(bridge_slave_1) entered blocking state
[  707.902267][T12320] bridge0: port 2(bridge_slave_1) entered disabled state
[  707.912461][T12320] bridge_slave_1: entered allmulticast mode
[  708.003917][T12320] bridge_slave_1: entered promiscuous mode
[  708.165952][ T6032] usb 2-1: new full-speed USB device number 49 using dummy_hcd
[  708.216828][T12320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  708.250281][T12320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  708.382298][ T6032] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  708.439548][ T6032] usb 2-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00
[  708.495064][ T6032] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  708.524494][ T6032] usb 2-1: config 0 descriptor??
[  708.536903][T12320] team0: Port device team_slave_0 added
[  708.544543][T12320] team0: Port device team_slave_1 added
[  708.591155][T12320] batman_adv: batadv0: Adding interface: batadv_slave_0
[  708.598433][T12320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  708.624380][    C0] vkms_vblank_simulate: vblank timer overrun
[  708.637394][ T2148] usb 5-1: new full-speed USB device number 59 using dummy_hcd
[  708.642045][T12320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  708.658953][T12320] batman_adv: batadv0: Adding interface: batadv_slave_1
[  708.665940][T12320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  708.692712][T12320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  708.845230][ T2148] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  708.870145][ T2148] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  708.900161][ T2148] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64
[  709.093312][T12482] No source specified
[  709.099007][T12482] trusted_key: encrypted_key: insufficient parameters specified
[  709.113299][ T2148] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  709.119019][ T6032] hid_parser_main: 286 callbacks suppressed
[  709.119042][ T6032] elecom 0003:056E:00E6.001A: unknown main item tag 0x0
[  709.135144][ T2148] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  709.146765][ T6032] elecom 0003:056E:00E6.001A: unknown main item tag 0x0
[  709.156149][ T6032] elecom 0003:056E:00E6.001A: unknown main item tag 0x0
[  709.168582][ T6032] elecom 0003:056E:00E6.001A: unknown main item tag 0x0
[  709.176821][ T6032] elecom 0003:056E:00E6.001A: unknown main item tag 0x0
[  709.184694][ T2148] usb 5-1: Product: syz
[  709.201290][ T2148] usb 5-1: Manufacturer: syz
[  709.201657][ T6032] elecom 0003:056E:00E6.001A: unknown main item tag 0x0
[  709.206144][ T2148] usb 5-1: SerialNumber: syz
[  709.221561][ T6032] elecom 0003:056E:00E6.001A: unknown main item tag 0x0
[  709.232355][ T6032] elecom 0003:056E:00E6.001A: unknown main item tag 0x0
[  709.244417][ T6032] elecom 0003:056E:00E6.001A: unknown main item tag 0x0
[  709.261538][T12320] hsr_slave_0: entered promiscuous mode
[  709.269178][T12320] hsr_slave_1: entered promiscuous mode
[  709.275948][T12320] debugfs: 'hsr0' already exists in 'hsr'
[  709.276288][ T2148] usb 5-1: config 0 descriptor??
[  709.322449][T12320] Cannot create hsr debugfs directory
[  709.334080][T12475] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  709.350350][ T6032] elecom 0003:056E:00E6.001A: unknown main item tag 0x0
[  709.364545][T12475] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  709.401484][ T6032] elecom 0003:056E:00E6.001A: hidraw0: USB HID v0.00 Device [HID 056e:00e6] on usb-dummy_hcd.1-1/input0
[  709.402424][ T2148] usb 5-1: ucan: probing device on interface #0
[  709.505237][ T6032] usb 2-1: USB disconnect, device number 49
[  709.882343][ T2148] usb 5-1: ucan: device reported invalid tx-fifo size
[  709.920717][T12320] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  709.947472][ T2148] usb 5-1: ucan: probe failed; try to update the device firmware
[  709.972377][T10604] Bluetooth: hci1: unexpected event for opcode 0x1003
[  710.004642][T12320] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  710.032593][T12320] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  710.067887][T12320] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  710.096945][ T2148] usb 5-1: USB disconnect, device number 59
[  710.412700][T12320] 8021q: adding VLAN 0 to HW filter on device bond0
[  710.479637][T12501] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem
[  710.521822][T12320] 8021q: adding VLAN 0 to HW filter on device team0
[  710.571718][T12501] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  710.652670][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  710.660960][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  710.680284][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  710.687445][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  710.882953][T12504] netlink: 'syz.4.1510': attribute type 1 has an invalid length.
[  711.009737][T12506] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1510'.
[  711.143631][T12505] 8021q: adding VLAN 0 to HW filter on device bond3
[  711.155015][T12505] bond2: (slave bond3): making interface the new active one
[  711.204324][T12505] bond2: (slave bond3): Enslaving as an active interface with an up link
[  711.357613][   T43] usb 4-1: new full-speed USB device number 36 using dummy_hcd
[  711.608056][   T43] usb 4-1: config 0 has an invalid interface number: 29 but max is 0
[  711.616181][   T43] usb 4-1: config 0 has no interface number 0
[  711.627545][   T43] usb 4-1: config 0 interface 29 has no altsetting 0
[  711.636325][   T43] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac
[  711.647270][   T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  711.655495][   T43] usb 4-1: Product: syz
[  711.784244][   T43] usb 4-1: Manufacturer: syz
[  711.799248][   T43] usb 4-1: SerialNumber: syz
[  711.814366][   T43] usb 4-1: config 0 descriptor??
[  712.922073][T12526] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1513'.
[  713.666330][T12535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  713.675078][T12535] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  713.816056][   T43] peak_usb 4-1:0.29: PEAK-System PCAN-USB X6 v217 fw v126.0.0 (2 channels)
[  713.867985][ T6032] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  713.959026][T12320] 8021q: adding VLAN 0 to HW filter on device batadv0
[  714.007298][T10604] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  714.017515][T10604] Bluetooth: hci1: Injecting HCI hardware error event
[  714.029938][ T5864] Bluetooth: hci1: hardware error 0x00
[  714.069015][ T6032] usb 3-1: too many configurations: 9, using maximum allowed: 8
[  714.093116][ T6032] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  714.123438][ T6032] usb 3-1: config 0 has no interfaces?
[  714.135591][ T6032] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  714.162781][ T6032] usb 3-1: config 0 has no interfaces?
[  714.179779][ T6032] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  714.198391][ T6032] usb 3-1: config 0 has no interfaces?
[  714.214338][ T6032] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  714.229802][ T6032] usb 3-1: config 0 has no interfaces?
[  714.243076][ T6032] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  714.266900][ T6032] usb 3-1: config 0 has no interfaces?
[  714.294186][ T6032] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  714.319532][ T6032] usb 3-1: config 0 has no interfaces?
[  714.333149][ T6032] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  714.364251][ T6032] usb 3-1: config 0 has no interfaces?
[  714.384597][ T6032] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  714.414563][ T6032] usb 3-1: config 0 has no interfaces?
[  714.432810][ T6032] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  714.455873][ T6032] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  714.479718][ T6032] usb 3-1: Product: syz
[  714.494732][ T6032] usb 3-1: Manufacturer: syz
[  714.505791][ T6032] usb 3-1: SerialNumber: syz
[  714.533549][ T6032] usb 3-1: config 0 descriptor??
[  714.771751][T12320] veth0_vlan: entered promiscuous mode
[  714.790187][T12320] veth1_vlan: entered promiscuous mode
[  714.907272][   T43] peak_usb 4-1:0.29 can0: unable to request usb[type=2 value=5] err=-71
[  714.916796][T12550] random: crng reseeded on system resumption
[  714.933484][T12320] veth0_macvtap: entered promiscuous mode
[  714.935675][   T30] audit: type=1400 audit(1756792801.666:693): avc:  denied  { firmware_load } for  pid=13 comm="kworker/u8:1" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[  714.952568][T12320] veth1_macvtap: entered promiscuous mode
[  715.054733][   T43] peak_usb 4-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71)
[  716.177592][ T5864] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  716.193108][T12560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  716.202456][T12560] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  716.294414][T12320] batman_adv: batadv0: Interface activated: batadv_slave_0
[  716.327968][   T43] peak_usb 4-1:0.29: probe with driver peak_usb failed with error -71
[  717.348903][T12320] batman_adv: batadv0: Interface activated: batadv_slave_1
[  717.369232][   T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  717.408755][   T43] usb 4-1: USB disconnect, device number 36
[  717.432848][   T36] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  717.458993][   T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  718.595770][T12574] random: crng reseeded on system resumption
[  718.664436][ T6103] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  718.813943][T12579] netlink: 'syz.1.1522': attribute type 21 has an invalid length.
[  719.702207][ T1007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  719.711023][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  719.719677][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  719.727075][ T1007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  719.809170][T12572] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem
[  719.831593][T12572] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  719.863324][T12579] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1522'.
[  719.983237][   T30] audit: type=1400 audit(1756792806.716:694): avc:  denied  { mounton } for  pid=12320 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  720.258573][ T5932] usb 3-1: USB disconnect, device number 45
[  722.144466][T12588] netlink: 'syz.6.1476': attribute type 2 has an invalid length.
[  722.152276][T12588] netlink: 'syz.6.1476': attribute type 1 has an invalid length.
[  722.575556][ T9839] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  722.717279][   T30] audit: type=1400 audit(1756792809.386:695): avc:  denied  { read write } for  pid=12600 comm="syz.3.1527" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  723.027117][ T9839] usb 7-1: device descriptor read/64, error -71
[  723.159374][T12605] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  723.165760][T12605] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  723.175965][T12605] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  723.182048][T12605] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  723.188791][T12605] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  723.194791][T12605] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  723.202607][T12605] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  723.208853][T12605] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  723.217805][T12605] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  723.238106][T12610] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1529'.
[  723.267167][ T9839] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  723.370880][   T30] audit: type=1400 audit(1756792810.076:696): avc:  denied  { mounton } for  pid=12609 comm="syz.4.1529" path="/syzcgroup/net/syz4/cgroup.procs" dev="cgroup" ino=229 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1
[  723.395493][    C1] vkms_vblank_simulate: vblank timer overrun
[  723.741129][T12618] dlm: no local IP address has been set
[  723.747164][T12618] dlm: cannot start dlm midcomms -107
[  725.047612][ T5864] Bluetooth: hci4: command 0x0406 tx timeout
[  725.214431][ T5864] Bluetooth: hci5: command 0x0c1a tx timeout
[  725.214564][T10604] Bluetooth: hci3: command 0x0406 tx timeout
[  725.221034][ T5864] Bluetooth: hci0: command 0x0406 tx timeout
[  726.252133][T12637] netlink: 'syz.3.1534': attribute type 21 has an invalid length.
[  726.261805][T12637] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1534'.
[  726.888606][ T9814] kernel read not supported for file /dsp1 (pid: 9814 comm: kworker/0:2)
[  727.129288][T12625] Bluetooth: hci4: command 0x0406 tx timeout
[  727.579505][T12625] Bluetooth: hci3: command 0x0406 tx timeout
[  727.585630][T12625] Bluetooth: hci5: command 0x0c1a tx timeout
[  727.591909][T12625] Bluetooth: hci0: command 0x0406 tx timeout
[  729.667629][ T5859] Bluetooth: hci5: command 0x0c1a tx timeout
[  730.088992][T12656] loop2: detected capacity change from 0 to 7
[  730.097358][T12656] Dev loop2: unable to read RDB block 7
[  730.104585][T12656]  loop2: unable to read partition table
[  730.121394][T12656] loop2: partition table beyond EOD, truncated
[  730.988221][T12656] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  732.068591][T12670] erofs (device nbd2): cannot find valid erofs superblock
[  732.090144][T12670] afs: Unknown parameter 'flo¹	'
[  732.264491][T12675] netlink: 'syz.3.1547': attribute type 21 has an invalid length.
[  732.274796][T12675] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1547'.
[  732.363312][   T10] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  732.488081][ T9839] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  732.586266][   T10] usb 2-1: config index 0 descriptor too short (expected 7768, got 18)
[  732.616413][   T10] usb 2-1: config 0 has an invalid interface number: 97 but max is 0
[  732.637118][ T2148] kernel read not supported for file /dsp1 (pid: 2148 comm: kworker/1:2)
[  732.645729][   T10] usb 2-1: config 0 has no interface number 0
[  732.684605][   T10] usb 2-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d
[  732.697435][ T9839] usb 3-1: device descriptor read/64, error -71
[  732.705628][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  732.773625][   T10] usb 2-1: config 0 descriptor??
[  732.887769][   T10] ftdi_sio 2-1:0.97: FTDI USB Serial Device converter detected
[  732.913657][   T10] ftdi_sio ttyUSB0: unknown device type: 0x524d
[  732.937276][ T9839] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  733.288725][ T9839] usb 3-1: device descriptor read/64, error -71
[  733.518670][ T9839] usb usb3-port1: attempt power cycle
[  734.631787][ T9839] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  734.668230][ T9839] usb 3-1: device descriptor read/8, error -71
[  735.820453][ T9814] usb 2-1: USB disconnect, device number 50
[  735.827244][ T9814] ftdi_sio 2-1:0.97: device disconnected
[  735.863956][T12705] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1552'.
[  735.905054][T12705] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1552'.
[  736.705590][   T30] audit: type=1400 audit(1756792823.396:697): avc:  denied  { mount } for  pid=12719 comm="syz.4.1555" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  737.602478][T12746] random: crng reseeded on system resumption
[  737.807991][T12751] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem
[  737.825735][T12751] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  738.130830][   T30] audit: type=1400 audit(1756792824.856:698): avc:  denied  { unmount } for  pid=5846 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  739.132912][ T9839] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  740.120345][ T9839] usb 2-1: config 0 has an invalid interface number: 117 but max is 0
[  740.128912][ T9839] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  740.144331][ T9839] usb 2-1: config 0 has no interface number 0
[  740.150846][ T9839] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  740.166232][ T9839] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  740.179575][   T10] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  740.187087][ T5982] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  740.209510][ T9839] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  740.235996][ T9839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  740.255030][ T9839] usb 2-1: Product: syz
[  740.419582][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  740.571493][T12776] pim6reg: entered allmulticast mode
[  740.643403][ T5982] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  740.645490][   T30] audit: type=1326 audit(1756792827.286:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12771 comm="syz.6.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ad5d8ebe9 code=0x7ffc0000
[  740.698906][ T9839] usb 2-1: Manufacturer: syz
[  740.734081][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  740.761074][ T9839] usb 2-1: SerialNumber: syz
[  741.257775][ T5982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  741.280270][   T30] audit: type=1326 audit(1756792827.286:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12771 comm="syz.6.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ad5d8ebe9 code=0x7ffc0000
[  741.295737][   T10] usb 3-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00
[  741.303943][   T30] audit: type=1326 audit(1756792827.286:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12771 comm="syz.6.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f7ad5d8ebe9 code=0x7ffc0000
[  741.303991][   T30] audit: type=1326 audit(1756792827.286:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12771 comm="syz.6.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ad5d8ebe9 code=0x7ffc0000
[  741.360461][ T5982] usb 5-1: config 0 descriptor??
[  741.365743][   T30] audit: type=1326 audit(1756792827.286:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12771 comm="syz.6.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f7ad5d8ebe9 code=0x7ffc0000
[  741.487549][ T9839] usb 2-1: config 0 descriptor??
[  741.504717][ T5982] cp210x 5-1:0.0: cp210x converter detected
[  741.506945][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  741.527176][ T9839] usb 2-1: can't set config #0, error -71
[  741.535385][   T10] usb 3-1: config 0 descriptor??
[  741.553493][   T30] audit: type=1326 audit(1756792827.286:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12771 comm="syz.6.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ad5d8ebe9 code=0x7ffc0000
[  741.554967][ T9839] usb 2-1: USB disconnect, device number 51
[  741.602934][   T30] audit: type=1326 audit(1756792827.286:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12771 comm="syz.6.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7ad5d8ebe9 code=0x7ffc0000
[  741.657176][   T30] audit: type=1326 audit(1756792827.296:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12771 comm="syz.6.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ad5d8ebe9 code=0x7ffc0000
[  742.779724][   T30] audit: type=1326 audit(1756792827.296:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12771 comm="syz.6.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7ad5d8ebe9 code=0x7ffc0000
[  742.807970][   T10] hid_parser_main: 59 callbacks suppressed
[  742.807995][   T10] sony 0003:054C:024B.001B: unknown main item tag 0x0
[  744.447667][   T10] sony 0003:054C:024B.001B: unknown main item tag 0x0
[  744.454621][   T30] audit: type=1326 audit(1756792827.296:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12771 comm="syz.6.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ad5d8ebe9 code=0x7ffc0000
[  744.478715][   T10] sony 0003:054C:024B.001B: unknown main item tag 0x0
[  744.485627][   T10] sony 0003:054C:024B.001B: unknown main item tag 0x0
[  744.494153][   T10] sony 0003:054C:024B.001B: unknown main item tag 0x0
[  744.501974][   T10] sony 0003:054C:024B.001B: unknown main item tag 0x0
[  744.509467][   T30] audit: type=1326 audit(1756792827.296:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12771 comm="syz.6.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f7ad5d8ebe9 code=0x7ffc0000
[  744.533203][   T10] sony 0003:054C:024B.001B: unknown main item tag 0x0
[  744.570785][ T5982] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -121
[  744.571776][T12793] loop9: detected capacity change from 0 to 7
[  744.628258][ T5982] cp210x 5-1:0.0: querying part number failed
[  744.728904][T12793] Dev loop9: unable to read RDB block 7
[  744.734909][T12793]  loop9: AHDI p1 p2 p3
[  744.739463][T12793] loop9: partition table partially beyond EOD, truncated
[  744.761294][T12793] loop9: p1 start 1601398130 is beyond EOD, truncated
[  744.768391][T12793] loop9: p2 start 1702059890 is beyond EOD, truncated
[  744.926776][   T10] sony 0003:054C:024B.001B: unknown main item tag 0x0
[  744.928344][ T5982] usb 5-1: cp210x converter now attached to ttyUSB0
[  745.002455][   T10] sony 0003:054C:024B.001B: unknown main item tag 0x0
[  745.022114][   T30] audit: type=1326 audit(1756792827.296:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12771 comm="syz.6.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ad5d8ebe9 code=0x7ffc0000
[  745.057335][   T10] sony 0003:054C:024B.001B: unknown main item tag 0x0
[  745.082326][ T5982] usb 5-1: USB disconnect, device number 60
[  745.094088][   T10] sony 0003:054C:024B.001B: unexpected long global item
[  745.126443][ T5982] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  745.127823][   T10] sony 0003:054C:024B.001B: parse failed
[  745.148583][ T5982] cp210x 5-1:0.0: device disconnected
[  745.157967][   T30] audit: type=1326 audit(1756792827.296:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12771 comm="syz.6.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f7ad5d8ebe9 code=0x7ffc0000
[  745.205122][   T10] sony 0003:054C:024B.001B: probe with driver sony failed with error -22
[  745.215565][T12808] loop2: detected capacity change from 0 to 7
[  745.336884][T12808] Dev loop2: unable to read RDB block 7
[  745.353104][   T10] usb 3-1: USB disconnect, device number 50
[  745.361749][   T30] audit: type=1326 audit(1756792827.316:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12771 comm="syz.6.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ad5d8ebe9 code=0x7ffc0000
[  745.394496][T12811] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem
[  745.412133][T12808]  loop2: unable to read partition table
[  745.418484][T12811] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  745.441551][   T30] audit: type=1326 audit(1756792827.316:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12771 comm="syz.6.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f7ad5d8ebe9 code=0x7ffc0000
[  745.445243][T12808] loop2: partition table beyond EOD, 
[  745.470609][   T30] audit: type=1326 audit(1756792827.316:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12771 comm="syz.6.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ad5d8ebe9 code=0x7ffc0000
[  745.513714][   T30] audit: type=1326 audit(1756792827.326:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12771 comm="syz.6.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ad5d8ebe9 code=0x7ffc0000
[  745.530385][T12808] truncated
[  745.543787][   T30] audit: type=1326 audit(1756792827.326:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12771 comm="syz.6.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f7ad5d8ebe9 code=0x7ffc0000
[  745.554800][T12808] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  745.737190][ T9814] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[  745.788256][T12818] netlink: 'syz.3.1578': attribute type 21 has an invalid length.
[  745.796380][T12818] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1578'.
[  746.207646][ T5982] kernel read not supported for file /dsp1 (pid: 5982 comm: kworker/1:6)
[  746.809135][ T9814] usb 5-1: Using ep0 maxpacket: 32
[  746.818210][ T9814] usb 5-1: config 0 has an invalid interface number: 125 but max is 0
[  746.870502][ T9814] usb 5-1: config 0 has no interface number 0
[  747.147876][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  747.154332][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  747.172202][ T9814] usb 5-1: config 0 interface 125 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  747.196685][ T9814] usb 5-1: config 0 interface 125 altsetting 0 has a duplicate endpoint with address 0x82, skipping
[  747.214690][ T9814] usb 5-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice=74.05
[  747.224341][ T9814] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  747.233238][ T9814] usb 5-1: Product: syz
[  747.237940][ T9814] usb 5-1: Manufacturer: syz
[  747.242916][ T9814] usb 5-1: SerialNumber: syz
[  747.259308][ T9814] usb 5-1: config 0 descriptor??
[  747.366151][T12834] serio: Serial port ptm0
[  748.623899][ T5982] usb 5-1: USB disconnect, device number 61
[  748.927649][T12847] qnx6: unable to read the first superblock
[  749.641383][T12856] loop2: detected capacity change from 0 to 7
[  749.656963][T12856] Dev loop2: unable to read RDB block 7
[  749.691284][T12856]  loop2: unable to read partition table
[  749.706166][T12856] loop2: partition table beyond EOD, truncated
[  749.727110][T12856] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  749.743349][T12853] mmap: syz.2.1587 (12853): VmData 37597184 exceed data ulimit 5. Update limits or use boot option ignore_rlimit_data.
[  750.309193][T12869] serio: Serial port ptm0
[  752.070606][   T10] usb 2-1: new full-speed USB device number 52 using dummy_hcd
[  753.099315][   T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  753.113906][   T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  753.125352][   T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  753.148119][   T10] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  753.161379][ T9814] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  753.176013][   T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  753.186401][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  753.204582][   T10] usb 2-1: Product: syz
[  753.209457][   T10] usb 2-1: Manufacturer: syz
[  753.214317][   T10] usb 2-1: SerialNumber: syz
[  753.226473][T12880] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  753.235970][   T10] cdc_mbim 2-1:1.0: skipping garbage
[  753.378382][ T2148] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  753.580422][ T2148] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  753.591903][ T2148] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  753.602374][ T2148] usb 3-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00
[  753.612529][ T2148] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  753.612672][ T9814] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  753.637455][ T9814] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  753.637824][ T2148] usb 3-1: config 0 descriptor??
[  753.647404][ T9814] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00
[  753.662788][ T9814] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  753.685730][ T9814] usb 4-1: config 0 descriptor??
[  754.109669][ T9814] hid_parser_main: 137 callbacks suppressed
[  754.109691][ T9814] sony 0003:054C:024B.001C: unknown main item tag 0x0
[  754.128626][ T2148] sony 0003:054C:024B.001D: unknown main item tag 0x0
[  754.129403][ T9814] sony 0003:054C:024B.001C: unknown main item tag 0x0
[  754.149931][T12910] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem
[  754.168569][T12910] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  754.177816][ T2148] sony 0003:054C:024B.001D: unknown main item tag 0x0
[  754.191004][ T2148] sony 0003:054C:024B.001D: unknown main item tag 0x0
[  754.191385][ T9814] sony 0003:054C:024B.001C: unknown main item tag 0x0
[  754.198306][ T2148] sony 0003:054C:024B.001D: unknown main item tag 0x0
[  754.198339][ T2148] sony 0003:054C:024B.001D: unknown main item tag 0x0
[  754.198367][ T2148] sony 0003:054C:024B.001D: unknown main item tag 0x0
[  754.198395][ T2148] sony 0003:054C:024B.001D: unknown main item tag 0x0
[  754.199867][ T2148] sony 0003:054C:024B.001D: unexpected long global item
[  754.222810][ T9814] sony 0003:054C:024B.001C: unexpected long global item
[  754.257629][ T9814] sony 0003:054C:024B.001C: parse failed
[  754.265603][ T9814] sony 0003:054C:024B.001C: probe with driver sony failed with error -22
[  754.276793][ T2148] sony 0003:054C:024B.001D: parse failed
[  754.297425][ T2148] sony 0003:054C:024B.001D: probe with driver sony failed with error -22
[  754.361315][   T10] cdc_mbim 2-1:1.0: SET_NTB_FORMAT failed
[  754.395608][   T10] cdc_mbim 2-1:1.0: bind() failure
[  754.405222][   T10] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[  754.416370][   T10] cdc_ncm 2-1:1.1: bind() failure
[  754.425912][   T10] usb 2-1: USB disconnect, device number 52
[  754.637761][T12914] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8247 sclass=netlink_route_socket pid=12914 comm=syz.6.1601
[  754.652631][T12914] comedi comedi3: c6xdigio: I/O port conflict (0x804f29,3)
[  754.660118][T12914] ==================================================================
[  754.668185][T12914] BUG: KASAN: slab-use-after-free in sysfs_remove_file_ns+0x63/0x70
[  754.676183][T12914] Read of size 8 at addr ffff888030618630 by task syz.6.1601/12914
[  754.684057][T12914] 
[  754.686369][T12914] CPU: 1 UID: 0 PID: 12914 Comm: syz.6.1601 Not tainted syzkaller #0 PREEMPT(full) 
[  754.686387][T12914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  754.686395][T12914] Call Trace:
[  754.686402][T12914]  <TASK>
[  754.686410][T12914]  dump_stack_lvl+0x116/0x1f0
[  754.686429][T12914]  print_report+0xcd/0x630
[  754.686451][T12914]  ? __virt_addr_valid+0x81/0x610
[  754.686483][T12914]  ? __phys_addr+0xe8/0x180
[  754.686510][T12914]  ? sysfs_remove_file_ns+0x63/0x70
[  754.686524][T12914]  kasan_report+0xe0/0x110
[  754.686538][T12914]  ? sysfs_remove_file_ns+0x63/0x70
[  754.686553][T12914]  sysfs_remove_file_ns+0x63/0x70
[  754.686566][T12914]  driver_remove_file+0x4a/0x60
[  754.686581][T12914]  bus_remove_driver+0x224/0x2c0
[  754.686593][T12914]  driver_unregister+0x76/0xb0
[  754.686606][T12914]  comedi_device_detach_locked+0x12f/0xa50
[  754.686623][T12914]  comedi_device_detach+0x67/0xb0
[  754.686635][T12914]  comedi_device_attach+0x43d/0x900
[  754.686649][T12914]  do_devconfig_ioctl+0x1b1/0x710
[  754.686665][T12914]  ? __mutex_lock+0x1c5/0x1060
[  754.686679][T12914]  ? __pfx_do_devconfig_ioctl+0x10/0x10
[  754.686699][T12914]  ? find_held_lock+0x2b/0x80
[  754.686715][T12914]  comedi_unlocked_ioctl+0x165d/0x2f00
[  754.686737][T12914]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  754.686756][T12914]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  754.686770][T12914]  ? do_vfs_ioctl+0x128/0x14f0
[  754.686786][T12914]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  754.686803][T12914]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  754.686823][T12914]  ? hook_file_ioctl_common+0x145/0x410
[  754.686837][T12914]  ? selinux_file_ioctl+0x180/0x270
[  754.686852][T12914]  ? selinux_file_ioctl+0xb4/0x270
[  754.686868][T12914]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  754.686886][T12914]  __x64_sys_ioctl+0x18b/0x210
[  754.686903][T12914]  do_syscall_64+0xcd/0x4c0
[  754.686917][T12914]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  754.686930][T12914] RIP: 0033:0x7f7ad5d8ebe9
[  754.686941][T12914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  754.686953][T12914] RSP: 002b:00007f7ad6c70038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  754.686965][T12914] RAX: ffffffffffffffda RBX: 00007f7ad5fc6180 RCX: 00007f7ad5d8ebe9
[  754.686973][T12914] RDX: 0000200000000180 RSI: 0000000040946400 RDI: 000000000000000a
[  754.686985][T12914] RBP: 00007f7ad5e11e19 R08: 0000000000000000 R09: 0000000000000000
[  754.686996][T12914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  754.687006][T12914] R13: 00007f7ad5fc6218 R14: 00007f7ad5fc6180 R15: 00007ffde147c548
[  754.687026][T12914]  </TASK>
[  754.687033][T12914] 
[  754.949025][T12914] Allocated by task 12623:
[  754.953437][T12914]  kasan_save_stack+0x33/0x60
[  754.958094][T12914]  kasan_save_track+0x14/0x30
[  754.962746][T12914]  __kasan_kmalloc+0xaa/0xb0
[  754.967316][T12914]  bus_add_driver+0x92/0x690
[  754.971897][T12914]  driver_register+0x15c/0x4b0
[  754.976645][T12914]  c6xdigio_attach+0xa3/0x4b0
[  754.981306][T12914]  comedi_device_attach+0x3b3/0x900
[  754.986491][T12914]  do_devconfig_ioctl+0x1b1/0x710
[  754.991498][T12914]  comedi_unlocked_ioctl+0x165d/0x2f00
[  754.996962][T12914]  __x64_sys_ioctl+0x18b/0x210
[  755.001722][T12914]  do_syscall_64+0xcd/0x4c0
[  755.006210][T12914]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  755.012088][T12914] 
[  755.014391][T12914] Freed by task 12674:
[  755.018437][T12914]  kasan_save_stack+0x33/0x60
[  755.023114][T12914]  kasan_save_track+0x14/0x30
[  755.027823][T12914]  kasan_save_free_info+0x3b/0x60
[  755.032826][T12914]  __kasan_slab_free+0x60/0x70
[  755.037565][T12914]  kfree+0x2b4/0x4d0
[  755.041444][T12914]  kobject_put+0x1e7/0x5a0
[  755.045870][T12914]  bus_remove_driver+0x16e/0x2c0
[  755.050878][T12914]  driver_unregister+0x76/0xb0
[  755.055636][T12914]  comedi_device_detach_locked+0x12f/0xa50
[  755.061463][T12914]  do_devconfig_ioctl+0x555/0x710
[  755.066548][T12914]  comedi_unlocked_ioctl+0x165d/0x2f00
[  755.072006][T12914]  __x64_sys_ioctl+0x18b/0x210
[  755.076779][T12914]  do_syscall_64+0xcd/0x4c0
[  755.081265][T12914]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  755.087154][T12914] 
[  755.089482][T12914] The buggy address belongs to the object at ffff888030618600
[  755.089482][T12914]  which belongs to the cache kmalloc-256 of size 256
[  755.103513][T12914] The buggy address is located 48 bytes inside of
[  755.103513][T12914]  freed 256-byte region [ffff888030618600, ffff888030618700)
[  755.117206][T12914] 
[  755.119523][T12914] The buggy address belongs to the physical page:
[  755.125953][T12914] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x30618
[  755.134694][T12914] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  755.143193][T12914] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  755.151063][T12914] page_type: f5(slab)
[  755.155032][T12914] raw: 00fff00000000040 ffff88801b841b40 ffffea0001e34c80 dead000000000007
[  755.163599][T12914] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  755.172176][T12914] head: 00fff00000000040 ffff88801b841b40 ffffea0001e34c80 dead000000000007
[  755.180856][T12914] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  755.189516][T12914] head: 00fff00000000001 ffffea0000c18601 00000000ffffffff 00000000ffffffff
[  755.198171][T12914] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[  755.206913][T12914] page dumped because: kasan: bad access detected
[  755.213315][T12914] page_owner tracks the page as allocated
[  755.219011][T12914] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 6061, tgid 6061 (udevd), ts 117922398609, free_ts 116668126763
[  755.238092][T12914]  post_alloc_hook+0x1c0/0x230
[  755.242851][T12914]  get_page_from_freelist+0x132b/0x38e0
[  755.248405][T12914]  __alloc_frozen_pages_noprof+0x261/0x23f0
[  755.254288][T12914]  new_slab+0x94/0x330
[  755.258374][T12914]  ___slab_alloc+0xcf2/0x1740
[  755.263069][T12914]  __slab_alloc.constprop.0+0x56/0xb0
[  755.268433][T12914]  __kmalloc_node_noprof+0x2ed/0x500
[  755.273704][T12914]  alloc_slab_obj_exts+0x41/0xa0
[  755.278637][T12914]  new_slab+0x27d/0x330
[  755.282870][T12914]  ___slab_alloc+0xcf2/0x1740
[  755.287540][T12914]  __slab_alloc.constprop.0+0x56/0xb0
[  755.292916][T12914]  __kvmalloc_node_noprof+0x3b1/0x620
[  755.298266][T12914]  simple_xattr_alloc+0x41/0xa0
[  755.303121][T12914]  shmem_initxattrs+0x127/0x5b0
[  755.307946][T12914]  security_inode_init_security+0x26e/0x390
[  755.313813][T12914]  shmem_mknod+0x22e/0x450
[  755.318211][T12914] page last free pid 6361 tgid 6361 stack trace:
[  755.324551][T12914]  __free_frozen_pages+0x7d5/0x10f0
[  755.329734][T12914]  rcu_core+0x799/0x1530
[  755.333982][T12914]  handle_softirqs+0x216/0x8e0
[  755.338720][T12914]  __irq_exit_rcu+0x109/0x170
[  755.343371][T12914]  irq_exit_rcu+0x9/0x30
[  755.347587][T12914]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  755.353200][T12914]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  755.359161][T12914] 
[  755.361465][T12914] Memory state around the buggy address:
[  755.367072][T12914]  ffff888030618500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  755.375118][T12914]  ffff888030618580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  755.383165][T12914] >ffff888030618600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  755.391219][T12914]                                      ^
[  755.396835][T12914]  ffff888030618680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  755.404869][T12914]  ffff888030618700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  755.412899][T12914] ==================================================================
[  755.421633][T12914] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  755.428876][T12914] CPU: 1 UID: 0 PID: 12914 Comm: syz.6.1601 Not tainted syzkaller #0 PREEMPT(full) 
[  755.438225][T12914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  755.448260][T12914] Call Trace:
[  755.451521][T12914]  <TASK>
[  755.454448][T12914]  dump_stack_lvl+0x3d/0x1f0
[  755.459035][T12914]  vpanic+0x6e8/0x7a0
[  755.463018][T12914]  ? __pfx_vpanic+0x10/0x10
[  755.467511][T12914]  ? sysfs_remove_file_ns+0x63/0x70
[  755.472711][T12914]  panic+0xca/0xd0
[  755.476431][T12914]  ? __pfx_panic+0x10/0x10
[  755.480836][T12914]  ? sysfs_remove_file_ns+0x63/0x70
[  755.486023][T12914]  ? preempt_schedule_common+0x44/0xc0
[  755.491475][T12914]  ? preempt_schedule_thunk+0x16/0x30
[  755.496834][T12914]  check_panic_on_warn+0xab/0xb0
[  755.501759][T12914]  end_report+0x107/0x170
[  755.506097][T12914]  kasan_report+0xee/0x110
[  755.510496][T12914]  ? sysfs_remove_file_ns+0x63/0x70
[  755.515681][T12914]  sysfs_remove_file_ns+0x63/0x70
[  755.520722][T12914]  driver_remove_file+0x4a/0x60
[  755.525562][T12914]  bus_remove_driver+0x224/0x2c0
[  755.530474][T12914]  driver_unregister+0x76/0xb0
[  755.535231][T12914]  comedi_device_detach_locked+0x12f/0xa50
[  755.541034][T12914]  comedi_device_detach+0x67/0xb0
[  755.546048][T12914]  comedi_device_attach+0x43d/0x900
[  755.551220][T12914]  do_devconfig_ioctl+0x1b1/0x710
[  755.556312][T12914]  ? __mutex_lock+0x1c5/0x1060
[  755.561139][T12914]  ? __pfx_do_devconfig_ioctl+0x10/0x10
[  755.566684][T12914]  ? find_held_lock+0x2b/0x80
[  755.571342][T12914]  comedi_unlocked_ioctl+0x165d/0x2f00
[  755.576799][T12914]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  755.582585][T12914]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  755.588469][T12914]  ? do_vfs_ioctl+0x128/0x14f0
[  755.593222][T12914]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  755.598229][T12914]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  755.605081][T12914]  ? hook_file_ioctl_common+0x145/0x410
[  755.610609][T12914]  ? selinux_file_ioctl+0x180/0x270
[  755.615788][T12914]  ? selinux_file_ioctl+0xb4/0x270
[  755.620985][T12914]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  755.626774][T12914]  __x64_sys_ioctl+0x18b/0x210
[  755.631533][T12914]  do_syscall_64+0xcd/0x4c0
[  755.636012][T12914]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  755.641879][T12914] RIP: 0033:0x7f7ad5d8ebe9
[  755.646267][T12914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  755.665867][T12914] RSP: 002b:00007f7ad6c70038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  755.674256][T12914] RAX: ffffffffffffffda RBX: 00007f7ad5fc6180 RCX: 00007f7ad5d8ebe9
[  755.682204][T12914] RDX: 0000200000000180 RSI: 0000000040946400 RDI: 000000000000000a
[  755.690152][T12914] RBP: 00007f7ad5e11e19 R08: 0000000000000000 R09: 0000000000000000
[  755.698098][T12914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  755.706059][T12914] R13: 00007f7ad5fc6218 R14: 00007f7ad5fc6180 R15: 00007ffde147c548
[  755.714016][T12914]  </TASK>
[  755.717277][T12914] Kernel Offset: disabled
[  755.721596][T12914] Rebooting in 86400 seconds..