last executing test programs:

40m23.723825695s ago: executing program 3 (id=789):
r0 = socket(0x10, 0x80002, 0xfffffffe)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x40000)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000100)={@my=0x0})
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, '|P3', 0x1}}}, 0xd)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
mmap(&(0x7f00005b9000/0x1000)=nil, 0x1000, 0x1000003, 0x11012, r5, 0x68255000)
socket$inet6_udp(0xa, 0x2, 0x0)

40m23.53386574s ago: executing program 3 (id=790):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)

40m23.232810931s ago: executing program 3 (id=792):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]})
memfd_create(0x0, 0x0)
r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
ioctl$VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000000)={0xa, @raw_data="3aee44a9c226a51c91d96d057945493d62731d82b7b243ac2b8c09e616fac25ae19d22dde9f23f852c3c3ccc3a9bd805898c9b2332eefd90a8a3ec23a13d253cf99691b813d8bfe75bfd83c66b56546b67a6d49ef1aa41cd5fb1faa24fd3f04c0551ed1ce90da7f3c55d1722a954283520a13b98bbbda5d490614b0b944b44d09086680a995a0ef055c7b45c50f7096e53c69a5af5d8af27a799d80635b87bb98d78c265cc91f11d80f3215cb8e27902ded8695717e1bc25acbcb5f28d2e5cddcd7b000000009cae"})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f00000003c0))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000180))

40m22.28461383s ago: executing program 3 (id=794):
r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r2 = signalfd4(r0, &(0x7f00000000c0)={[0x101]}, 0x8, 0x0)
write$P9_RGETLOCK(r2, &(0x7f0000000100)={0x33, 0x37, 0x1, {0x1, 0x3d, 0x3, r1, 0x15, '/dev/bus/usb/00#/00#\x00'}}, 0x33)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1)
munmap(&(0x7f000045e000/0x1000)=nil, 0x1000)
mremap(&(0x7f0000484000/0x6000)=nil, 0x6000, 0x1000, 0x0, &(0x7f0000bb3000/0x1000)=nil)
mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000)
mlock2(&(0x7f0000d92000/0x4000)=nil, 0x4000, 0x0)
madvise(&(0x7f0000586000/0x3000)=nil, 0x3000, 0x12)
mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect)
ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1)

40m21.253962676s ago: executing program 3 (id=796):
r0 = socket(0xa, 0x3, 0x3a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$KDGKBDIACR(r4, 0x4b4a, 0xffffffffffffffff)
r5 = syz_io_uring_setup(0x840, &(0x7f0000000380)={0x0, 0x263d, 0x20, 0x3, 0x8022af}, 0x0, &(0x7f0000000280)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, r6, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf)
connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r7, 0x0, 0x0)
sendto$inet6(r7, 0x0, 0x0, 0x20004000, &(0x7f00000001c0)={0xa, 0x4e22, 0x40000000, @empty, 0x1}, 0x1c)
r8 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r8, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0637bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c081000418e224e0004fcff", 0x58}], 0x1)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, 0x0, 0x0)

40m20.312804304s ago: executing program 3 (id=801):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x15}, 0xc814)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x7, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000037}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
capset(0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x474082, 0x5c, 0x8}, 0x18)
lsetxattr$security_evm(0x0, &(0x7f0000000180), 0x0, 0x0, 0x2)

40m4.148965636s ago: executing program 32 (id=801):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x15}, 0xc814)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x7, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000037}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
capset(0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x474082, 0x5c, 0x8}, 0x18)
lsetxattr$security_evm(0x0, &(0x7f0000000180), 0x0, 0x0, 0x2)

26.686286944s ago: executing program 5 (id=9473):
r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="401406"], 0x0, 0x0})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003600)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f0000003580)=[{{&(0x7f0000000ac0)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000000c00)=""/151, 0x97}], 0x1}, 0x7}, {{&(0x7f0000000b40)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000000e00)=""/208, 0xd0}, {&(0x7f0000000f00)=""/4096, 0x1000}, {&(0x7f0000002100)=""/4096, 0x1000}, {&(0x7f0000001f00)=""/184, 0xb8}, {&(0x7f0000003100)=""/201, 0xc9}, {&(0x7f0000003200)=""/131, 0x83}, {&(0x7f00000032c0)=""/236, 0xec}, {&(0x7f00000033c0)=""/158, 0x9e}], 0x8, &(0x7f0000003480)=""/228, 0xe4}, 0x6}], 0x2, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = socket(0x28, 0x1, 0x0)
r5 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0xc81d, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=<r6=>0x0, &(0x7f00000002c0)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000001c0)=@vsock={0x28, 0x0, 0xffffffff, @host}, 0x0, 0x0, 0x1})
io_uring_enter(r5, 0x47b2, 0x10f9, 0x82, 0x0, 0x48)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x8004, &(0x7f0000000cc0)=ANY=[@ANYRES8=r3, @ANYBLOB="43ab13bc558491f0ba6880a9c400618b6ff5353403956e25a0313ae85c19e10f0c9c5bba84827978ac648bb972d0ca4c0fc8c48569633d2d267b01d4e633551e42aa3277f24eb05d8f8fdf911a99c6dce2a1d48b04b010a4c40918aaa68e578a572d2eb57102f64186e028238386369cb4bd1927348fee610a1e109a85f74f5511dfd9a1cf3fd2154610e0f0710f6a4f0a0a51b6c0e3dab337aae7b8b8e200bfa1e63f1ba09158bd9f48477156ece865f49c0449ddfa7b5e5d78a2925781ce01c6f7e409d24f1b922f09814b5d7565a05557c900263082e4d49ed2ca283774c83ad754c1599714fc64a5bd5485533cf2453938fdaea6c972", @ANYRESDEC, @ANYRESDEC=r6, @ANYRES32, @ANYRES64=r4, @ANYRES16=r3, @ANYRES16=0x0, @ANYRES16, @ANYRES16=r7])
close(0x3)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, &(0x7f00000003c0)={0x14, 0x0, 0x0}, 0x0)

23.556004478s ago: executing program 5 (id=9483):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0], 0x48)
r4 = gettid()
rt_sigtimedwait(&(0x7f0000000000)={[0xe]}, 0x0, 0x0, 0x8)
tkill(r4, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
syz_socket_connect_nvme_tcp()
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001100)=""/26, 0x1a}], 0x1, 0x20010000, 0xd56a)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000044000000160a01040000000000000000010000000900010073797a30000000000900020073797a300000000018000380080001400000000008000240000000000400038048000000180a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c000380180003801400010067656e65766530000000000000000000140000001000010000000000000000020000000a"], 0xd4}}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

22.011903128s ago: executing program 5 (id=9487):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$isdn(0x22, 0x3, 0x22)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/108, 0x6c}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/117, 0x75}, {&(0x7f00000026c0)=""/4096, 0x1000}], 0x5, &(0x7f0000000380)=""/25, 0x19}, 0x2}, {{&(0x7f00000003c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f00000036c0), 0x0, &(0x7f0000003700)=""/159, 0x9f}, 0x40}], 0x2, 0x2, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0xc000, 0x19)

19.685045516s ago: executing program 5 (id=9493):
fanotify_init(0x200, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRESOCT=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r0}, 0x10)
syz_open_procfs(0x0, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000880))
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x8, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0xa, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c57, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x9, 0x4c74, 0x0, 0x7, 0x2, 0xe, 0x0, 0x400, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0xffff8001, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0x388000, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2b, 0xe, 0x312, 0x78, 0xea4, 0x0, 0xfff, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xf, 0xd86, 0x2, 0x4, 0x8, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x2, 0x200004, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x8, 0x8, 0x86, 0x3, 0x3038, 0xff, 0xb, 0x2, 0x2, 0x2, 0x7, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0xf, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x7, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x3, 0x5, 0x1b, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x80000000], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x1, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x3, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x10200016, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x3, 0x100, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x4, 0x6c1b, 0x8, 0x4, 0x5, 0x40b1e, 0xd7, 0x200, 0xffff3441, 0x4]}, 0x45c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @ptr={0x0, 0x0, 0x0, 0x10, 0x4}, @func={0x4, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x46}, 0x28)
r5 = socket$kcm(0x25, 0x1, 0x0)
recvmsg$kcm(r5, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x40010102)
syz_open_dev$vim2m(&(0x7f00000000c0), 0x5, 0x2)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x24, 0x0, 0x1, 0xffffffff, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x24}}, 0x0)

17.49963053s ago: executing program 5 (id=9496):
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000000000000200f4dc005655c3b8b3a76f6999d05c713cad38089c4f4647dbbaaf2fb7bace219fd0a35f40e299c0cd448cdb998dd82da18fcd2a01b85acdc510c693cd45f4fa589b47e13484a420d4814d252d40530000c62133d9d9da400579736aad2d1899f73c63bae148ffa7d1aa959b2cb037822ceaf085a1b2891e3b19afa93eb22411d709f6a5d79a90da5772dc6ae76e5d71f850", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r0 = socket(0x23, 0x80805, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x1)
mknod$loop(0x0, 0x0, 0x1)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_CAPBSET_READ(0x59616d61, 0xffffffff)
ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x8)
listen(r0, 0x0)
connect$phonet_pipe(r0, &(0x7f0000000080)={0x23, 0xed, 0x80, 0x3}, 0x10)
r5 = socket$inet6(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r6, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendto$inet6(r5, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
socket$pppl2tp(0x18, 0x1, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)

16.643408296s ago: executing program 5 (id=9499):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0xe, 0x33565348, 0x0, 0x0, 0x0, 0x3, 0xfeedcafe, 0x3, 0x0, 0x2, 0x2}})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94)
r2 = signalfd4(r1, &(0x7f00000002c0)={[0x7]}, 0x8, 0x80800)
ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
lseek(r6, 0x9, 0x0)
ptrace$ARCH_GET_FS(0x1e, r3, 0x0, 0x1003)
r7 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc2604110, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB], 0x16)
sync()

14.403405452s ago: executing program 1 (id=9506):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f00000000c0)={0x2, @tick=0x7ffe, 0x7, {0x3, 0xbb}, 0x3d, 0x2, 0x9})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
add_key$keyring(&(0x7f0000000240), 0x0, 0x0, 0x0, 0xffffffffffffffff)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f00000005c0)="0f0013c441fc5a9b31aacf330f3235001000000f3066ba2100ec66baf80cb8402a2484ef66bafc0c66edc4a1f5fbf1f3450f2a89040000006642f4c4e21dbf7939b805000000b97499008c0f01c148b804000000000000000f23c00f21f835020004000f23f8", 0xffffffffffffffd5}], 0x1, 0xe8, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000240)="e7736a", 0x3}], 0x1)
ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008801}, 0x41)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000340)="07000000010000", 0x7)

13.303175555s ago: executing program 1 (id=9510):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r4, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x20000006, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x7, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0xfffffffe, 0x400, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x35, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x200025, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0xffff, 0x6, 0x96, 0x9, 0x2, 0x0, 0x200, 0x401, 0xc, 0x2, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x5, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0x5, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x6, 0x5, 0x80, 0x9, 0x7ffe, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0xfffffffc, 0x8, 0x3, 0x3ff, 0x20000006, 0x9, 0x95e, 0xffffffff, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x10002, 0x3, 0x3, 0x88, 0x2, 0xffffff80, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xfffff734, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x82, 0x44, 0x409, 0x3, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x1f3, 0xfffffffd, 0xa, 0xe, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r4, 0x5501)

8.226357644s ago: executing program 2 (id=9526):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f00000000c0)={0x2, @tick=0x7ffe, 0x7, {0x3, 0xbb}, 0x3d, 0x2, 0x9})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
add_key$keyring(&(0x7f0000000240), 0x0, 0x0, 0x0, 0xffffffffffffffff)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f00000005c0)="0f0013c441fc5a9b31aacf330f3235001000000f3066ba2100ec66baf80cb8402a2484ef66bafc0c66edc4a1f5fbf1f3450f2a89040000006642f4c4e21dbf7939b805000000b97499008c0f01c148b804000000000000000f23c00f21f835020004000f23f8", 0xffffffffffffffd5}], 0x1, 0xe8, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000240)="e7736a", 0x3}], 0x1)
ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008801}, 0x41)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000340)="07000000010000", 0x7)

7.155396317s ago: executing program 1 (id=9514):
r0 = gettid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/56, 0x38}], 0x1, 0x8, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=@gettfilter={0x4c, 0x2e, 0x100, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xffff}, {0x6, 0xc}, {0xfff3, 0x4}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x8e6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x20008844)
r4 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x401, 0x181, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0x81, 0x7ffe, 0x3, 0x3ff, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x2, 0x3fd, 0x2, 0x200, 0xe2df, 0x9, 0x1, 0x4, 0x10000, 0x7, 0xf58, 0x6]})
ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x1, 0x80000000})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote})
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000060a010400000000000000000a0000010900010073797a31000000002800048010000180090001006d61737100000000140001800a0001007265646972000000040002800900020073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840)
close(0x3)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[], 0x20}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1b, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYRES8=r2], 0x7)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x404080, 0x0)

7.050763542s ago: executing program 2 (id=9529):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x7}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", '\x00\x00=*', "1202000000040030"}, 0x58)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00')
read$dsp(r1, &(0x7f0000000700)=""/228, 0xe4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
io_setup(0x60, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b702000000000080bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b70000000000000095000000000000008e17f199a68b061b93d83298a8cdda1ce784909b849d5550ad855dab54d8877a6db61d69f2ffcaa10350e11cb97ce8df1bc9a0c4eeceb9971e43405d621ffbc9b0d8ca56b50f0c010d631f6dbc8486bc5d5bf2ca8285056892db03cf1c62d57c08a90b189d190c341035de53a9a53608c10556e5734eb84049761451ce540c772e069f80cb201b2de17dfdb4b60939d5d6aed4062049b87e03e2cd18a77dda613e0c64497fcc059c062234d5595f6fbaa187b81d1106000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8000000000000000b91c61bd99dc89f12907af7dccd106cb937b450f859ce8292a79c3e40000b59b0fc46d6cec3c080a882add4e1179bd4a44f231a2d73148be4248cdc138408ba953df4aece69311687f4122073a236c3a32efa04137d46f0247d2638da3261c8162bb7c7824be6195a66d2e17e122040e11001131ce319045e5b3334e68475ac3f46aa2837f9004600daded9b19b35eebe52613c346e255421b23a278fd00004270b1cd5fc9aa2286ccca37db965d9dd366598f5ec993cb0cf127e2a46cfbdf63eea190d86a4d1b75ae98480100bd5828954a7d093a54f7e75b3753508ca3c41685d1e407315e59d626c23b3f89a926e9382966853774e7dd1f1a2177cdf2802237c177d543e8da47a01f05e113e53518270239b69c117e2637c31085f4d8a596b6edab26afaf6605b231199f38a6fc7eb83714387450ea18eafbace8eec18a4b2c442e7b88a7611c1283bec84e1715fb9f4fcaf52c08058fc4f21c0ad71adabdd850aed3eeec6eaab347bdf474e17b9aa345d1e6e3bb83f90230bdf53e7d0e5c3f914d905422b83f30936674ba8f0bffaf2305c0972df71fe5f4e01506471e897bced7798509e64df360d95f9a4099f86438ac2bbcbdbd1d9db21a1d5c065567fd70aae68096827fa5c2d9bd20292344c7dcf6241447cfbb05b5d0fdb4e08afbac5397b64aa369922ed7ed8918f97294b6854210d2b93aaf92159dbaa2f186d4a420c68d6baf1c31de4f0bf478bfd51bb1e96ea849a80ae5a89be7e38474c7aade344d68324f9e12a6b9770e6bd12ae69efffaee58040753701af84c2924c1b5aea1650f42c9ae9820a33095f062fb88313d035ea405515a61a4be64f9fa0985c5be592090cc48291004609fdac2ab6100000000000000a84570c7c00d647daf8af334050b61e9b2d3f0adad1d1ff47be19b8da2799e9ecef8efabe73f92dbd0760f8bbd9c590bd1371e2b5d9a2ea2190f5e4f5cd641cdfe5d89f84a368ef7e6ff1eacdc0ec9e97b8f9c9e314661ea0aa8a104008d188b66b3a4aedeed9df4238a08fc2fb1007233cc2c87fcaa0cccd8ec03444471c1dd660c87acc17bff740d199a7c0c52c63c0408b5158e0000000c275eedb02f141113cf2c55b2c08c2c68cc99d2bb5840fba332e1c82862ec9b90106248f81d32a47ac94ddee815dba8aeb5d3121cf247a81aef7805b020e9eec44cbe3055be69fe066824ba2292b9cdce41635fc00df96fb10a3a8cc60c4a76c65ebbb0640e0a29de94edf5cbefac1c5fa96e7080af804b22cabce10ea52f1018527f4aa39cdafa3eff63de2a7f50d042667820f6f86f276afb2b8134301e031351ee13013137e9d5cec0c84d7e3f82c6fd12eb98f9ea654bcb9ce59a2015183c6e65bb0537e611b830d74c30fb8207fca0990acdbb51e4e234026e00000000b3ebae3eb52c140953a350fcf0124b1a30b1afc29ea56f8413686d912eb8118d73ef9c6d3843ebcb555301c0205dd3bd9b1d742e334319c8979c322e92"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r4, 0x0, 0xe, 0xfffffffffffffead, &(0x7f0000000080)="3a173357f297c605804ab3828443", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

6.005381428s ago: executing program 0 (id=9532):
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={<r0=>0x0}, &(0x7f0000000040)=0xc)
prctl$PR_SCHED_CORE(0x3e, 0x3, r0, 0x3, &(0x7f0000000080))
r1 = syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x101, 0x22000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x410000, 0x0)
kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r1, &(0x7f0000000140)={r2, 0xffffffffffffffff, 0x4})
syz_usb_connect(0x5, 0x419, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x82, 0x1e, 0x71, 0x10, 0x46d, 0x8c1, 0xd1f9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x407, 0x2, 0x5, 0x1, 0x10, 0x81, [{{0x9, 0x4, 0xa4, 0xfb, 0x1, 0xff, 0x1, 0x0, 0x8, [@generic={0xdd, 0x2, "6b387913ee2b453dc4be485613e823992af89a98be9ed0bf46778335c686af652d1a44ac730f59a498601728f397dc43c3e85089adf7913ff7b0849f01bee2a560d0ed13301f605cef3c88f8fba8606ee37868c4dcd36aa0e68ae9efcdcfefd2e1e9c6c006e48e0fc5bdcd91cd24e4549887cffab9f776a7843b677bb2392aaf91c49489915ed45705d8dfcbb4b861a4fbe1e56a14d97394e050edcbad8d044d6a90cb386c784d4a509ee6dab0a648bd065e6844bdd6e12773d11d1acafed5b174f9476c0b1160d7a8fb8521d2995a285a7b29d8c01a7c1db72444"}, @hid_hid={0x9, 0x21, 0x4, 0x40, 0x1, {0x22, 0xc46}}], [{{0x9, 0x5, 0x1, 0x0, 0x20, 0x3, 0x1, 0x45}}]}}, {{0x9, 0x4, 0x79, 0x15, 0x6, 0x5b, 0x2c, 0xb6, 0x0, [@generic={0xf1, 0xc, "eeb0cc691923fa31ab704c4a0aa99707d8134e2b0ec7a2d4ee41bcb4777e586a430de7fed5426a18a35c7dd1521800922a203d7ba7d37ff2d08730baa77d59b84ab1237a81268a4308492656b50aebb74829733ccb54bd901880a1707700550c8084c75af7e228f72c68ffd610faa8767ba2670a078548104c35811575dacaf9fcd2d50567e2a0d88d93255eea6437e2b4920f20ee4b18238c0a50b2fe0691cc3d5da483c89e59181164cc749bc4dfc82315e53a598d3904404b3e9373a51f0942dc70787d418d9224dd7feb74e51fe79eadc0077ee96444999de65bf3bd2af224c8264eb4a6eb3a8260144c445aec"}, @cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "594b3ebf"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x3, 0x9, 0x6}, [@dmm={0x7, 0x24, 0x14, 0x4, 0x200}, @ncm={0x6, 0x24, 0x1a, 0x8, 0x38}, @ncm={0x6, 0x24, 0x1a, 0x8, 0x1}, @mdlm={0x15, 0x24, 0x12, 0x1d6}, @mdlm_detail={0xc0, 0x24, 0x13, 0x40, "f79afeb6ec11f36e76419b627efa10edc2d453f348546c5b4489c001ad4c9dc07c77df97e3e6dad1c8d0c3242bc7d6d891a393ff81f070bb18fa7d39b69d649cb85fee56b070c85f750f24aa6b1c70c358cced7f183d08e1a2d881f8c08943e4e2dfea43509343c1f6900925563e9d7a1bbd1a2441f166e4462078ddb9f97cd7bcc06648ee1b9671470fb7ac529835e9fd5eed59990b8c57a444c4377a00d34c3cf86cce71e90f33d40e94b166fe2f69efaede6c1059c3aac289f6c5"}]}], [{{0x9, 0x5, 0x2, 0x1, 0x3ff, 0x82, 0x8, 0x0, [@generic={0x6d, 0x5, "c0f134c253a248fd432720ce2b9280c80e35d416bc019785e94370f50ca9f72e8b9385043f8cacf7172aa9557311bef9e898823fb881ea3269560d5f19d09bf6c736952910bc08186bf15985bf52ba49af874358a31be8c4b755e81353397712f15178a075c077d7f2014f"}]}}, {{0x9, 0x5, 0x80, 0x3, 0x400, 0x7f, 0x4, 0x3}}, {{0x9, 0x5, 0x3, 0xc, 0x400, 0xa9, 0xc, 0x5, [@generic={0x58, 0xb, "7baebccf3174ee8e062a4409eba9067c2615dd09a24b5504b75e78d00496c5e7834edca770d2737a8a1314a4493b177151a4023d352f15cea62335d0cf937f09d31e3f1ba5486e161e1d59e5a107083dcd01265fdcf8"}]}}, {{0x9, 0x5, 0x0, 0x4, 0x20, 0x6, 0x9, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xa6, 0x1ff}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0xc, 0x6}]}}, {{0x9, 0x5, 0xb, 0x8, 0x20, 0x7, 0x9, 0xff}}, {{0x9, 0x5, 0x80, 0x20, 0x200, 0x5, 0x0, 0x3}}]}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x110, 0x9, 0x8, 0x49, 0x40, 0xe}, 0x2d, &(0x7f0000000600)={0x5, 0xf, 0x2d, 0x4, [@wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x2, 0x1, 0x3, 0x4}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xd, 0xe0, 0x5, 0x5}, @ssp_cap={0x10, 0x10, 0xa, 0x24, 0x1, 0x3, 0xff00, 0x1, [0xc000]}]}, 0x1, [{0x8f, &(0x7f0000000640)=@string={0x8f, 0x3, "f093968a33990e5196b67912d53ecd73f7df252ab6858472d6186938c0081dcf516e038f03f0f96e7fdc5fe758a4e9d3761be71debd32f7f0da6736a326084c8760745c4f2ff0cfbb675c217de79d07e58df0ed80b0cccdfb11a83f6ee17d1bbd85349df9f96a69dbe3c2a86777c28c0dd3c68212b3c6ef1defb1fe30b6185fdab1f2a1316cb45bf00584fe8b3"}}]})
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0)
syz_usb_connect$cdc_ncm(0x5, 0x82, &(0x7f0000000780)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x2, 0x1, 0x3, 0x0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "6cdb4cf7"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x1ff, 0xde50, 0xa0}, {0x6, 0x24, 0x1a, 0x6, 0x30}, [@acm={0x4}, @mbim={0xc, 0x24, 0x1b, 0x5, 0x7, 0x7f, 0x7f, 0x81, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0x1, 0x45}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x1, 0xb, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x7, 0xe}}}}}}}]}}, 0x0)
ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000840)={0x0, 0x80000000, 0x5, 0x0, 0x0, [{{r2}, 0x4000000000000}, {{r2}, 0x3}, {{r2}, 0x1c00000000000}, {{r1}, 0x1}, {{r3}, 0x3}]})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r2)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x30, r4, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x4}, @void, @val={0xc, 0x99, {0x3, 0x5b}}}}, [@NL80211_ATTR_PID={0x8, 0x52, r0}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x844)
ioctl$PPPIOCGNPMODE(r2, 0xc008744c, &(0x7f0000000a40)={0x8057, 0x2})
syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000a80)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0xfb, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x94, 0x3, 0x2, 0x6, 0x0, 0xc, {{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x8, 0x7b49, 0x81}}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x9, 0x2, 0x6}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x3, 0xb9, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x7f, 0xe9, 0x9}}}}}]}}]}}, &(0x7f0000000e80)={0xa, &(0x7f0000000b00)={0xa, 0x6, 0x300, 0xf9, 0x3, 0x1, 0x20, 0x4}, 0xc, &(0x7f0000000b40)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0xa, 0x7, 0x6}]}, 0x6, [{0x52, &(0x7f0000000b80)=@string={0x52, 0x3, "5f4e59f77dc8f5c3b74755eb97d137279324d926861458bd5304f89db74fecbd281c5d6c4915b160866825d44ca6ce817a6c79708cec5929a58978b36814bbc313cf8d36decbb835835933045e7bc1dc"}}, {0x76, &(0x7f0000000c00)=@string={0x76, 0x3, "4573ce1f3b7d93db5aaa504e8ca33e86b84ad333729f86c1564e400f8025c29c0fb407fe0abf2f182f6e278b068ccb9b3d1f39e0b665f17d96078c94592f6f1e79f7957b4a81d89c14f75eb41e1aed40e81ff6e2e14c8627ac288cd5666f450902d9556cb3f4acd81c250c4316a9622eec4205ca"}}, {0x92, &(0x7f0000000c80)=@string={0x92, 0x3, "566566cf806bbeb9916072a3c2369ba06f0517e94282cedacd323b372d43014f99901c616d755f53186e50e696258f95a3fda0c75abe879e9c1b65e1cfc53d3ce4e30e02f55dbb1f3ccf38ff9dc58c3f6e0701ba163976ad95457175dd66c7c0c390890788100e5387d57f83380730058990d9d9336eb55cb01284f6b398f238410e8beec3031780e0f35bb0c15c1d8b"}}, {0xb, &(0x7f0000000d40)=@string={0xb, 0x3, "b45dd25e7a7c5fde35"}}, {0x91, &(0x7f0000000d80)=@string={0x91, 0x3, "2ac4b28e0cc8eacf6090fd9ec9b98f0591f7964ac48e59a5df543cc1c47f506db201b1c5b26c472dee9d4c16692dc2026960735ed9f8d5c135fbe5a3c7d3530f5bf2bd382bb999ddbdbe5405f9af77b64c163fb7ff1710bf62c21d9eee7c6fd296a09c3a0cb44ce3055345a1a7d52183d6c611115b1438cf17cb91e31fed87f0b01e8052936856e918a5405624b66c"}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x2c09}}]})
io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000f00)=[r2], 0x1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f40)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000fc0), r2)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x14008}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x2c, r6, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40)
setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000010c0)='cdg', 0x3)
r7 = getpid()
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000001100)=0x19)
rt_tgsigqueueinfo(r7, r0, 0x37, &(0x7f0000001140)={0xf, 0x4, 0x2})
getpgid(0x0)

5.968636584s ago: executing program 2 (id=9533):
socket$inet(0x2, 0x4000000000000001, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000f2dcc6d0e5bfb6ecc27477a80d1fcf4b137d054bd61743b079bac97f2141d9f3fc65776a653c4ec621d3c20287f5605901decf24849b329a36c04e4b9ed84e68605ca797889c2552b819a920c3ea749c4760aa70f09c9c56b6a43f7c5b6d22e5b85ad8359b1ca3ce6562fb42785fa4a7fee635efcaa4ba6fab659971224383e4bf1cf7f3e03373a9750690557a2efd747ce8afce6d4cd5"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90)
unshare(0x2a020400)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x12, 0xa, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000080), &(0x7f0000000380)=r5}, 0x20)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'})
r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2)
ioctl$VIDIOC_G_AUDOUT(r7, 0x80345631, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f014, 0xfffffffe})
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r8 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000)
sendmmsg$alg(r8, &(0x7f0000000880)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000100)="22693a57f48509198c1731a62a3caf2a369613a5dd245397d1c06e17d2f1157ebfe9465076636961ea8955f8a2c24510a3e3a368aafb0b79b7b53219f2da6059a94d2ced2fb74b32d2f2d2542648eb5a56d3322082990d1fc352bad9d468a03f1c76317fdc942666ca64376ad43f4b47a9ee63d7baea4a808540e508627be371c42f2692d74b2e5ec5df9bff", 0x8c}, {&(0x7f0000000000)="51c615be6644f35b5b7629706d1af86175c6f44d1a1519b8c8b3c07581ff693083b8593a93008a81034aa08e502bcc4368c970f622de172865e279d49f95b7cc26bc9d424b9676693704ed0941d36496ec", 0x51}, {&(0x7f00000003c0)="c09adae902d2203f4831fca9f39a02d79ca117191e32ba26badd35402becbe9349f47c07899d15a635fed2ad9f66dd32210f1674e6ae35a8bd50588af223c206604f68e451200cbad618bba64b3e753b0fc9d4dbacf6a4a000ac92cd8ffbda2d0e4b78ee79f02ada635b3f4baec00c99499ab9b627ffb05ea0434987bc88018c2f93cd5a716dce3cbe3f2380488a50617a354658fdae441e69f1c94b0f329466bcd09d9cae1e0b0d7d02d882ac8049982a953792664e1e0309641f172879174ebdcad6a087736da4b4b7a318303afb038b2209def12a8a157e0630", 0xdb}, {&(0x7f00000001c0)="2c324f722d0aebc369887adf66b0940438d71f66b316084cdf3643c56dee67dac180d9547dad79d8", 0x28}, {&(0x7f00000002c0)="2ddf966f8bcffec8600ef9024a41cc44c242d864f90033cb4ac8c5b7585f34b4deb7631672bdf1b584aaae60c170688f4133733d358abf2ee0568fb388965ee254", 0x41}, {&(0x7f00000004c0)="5628b0eed7a25b67e1ba9bdd8a4345af296b3a0fa017d1ae3b4722d9547db59b79881b16194185e8d58c56c00189cb6d18fb648dcfa4d3423e305788dcf273be529ba76953e6642b31dbe50fb054a24032d0a0d7dd9fa84387043cc12b36d9eef2d5fc10b8dc1653645024005862322cf9ad37c8e1e069645921732a5150796dfcac37d157d7f664da2e47781c58e234a76b7ae01f486fa85661f4eabd51778a4f8c04ed39bdad8f2ca872eaf6c3d775c32bcaaf6a9411dbe7e7de7b1917beb57d9928c5ccb0d924a348a7f7398f555c64d8e914e219d6adc2bfc2ccaef2c690be349434", 0xe4}, {&(0x7f00000005c0)="1058e6af5f8121202c8769dfcfccac1090da9610fd470e5a30db78d655a5498e93a092d73147eb05bf0131e94ac9c0a52e882003cdda3336e0b10008db26ba3603686102ff0f94a9a15a0dd1109320cb23fe7cc15592af29314a4a1d74a4438a8177e6eea7e167e5968058fbf6d238378437ebb2fecb56a0e1b56de06aacb94c9fe72704e953f9c5d5c820e44889a756077d3fb4803fa311f23992f7d28197086914b7c1b773d90c026e88dbca9eb149633316ed869c9da06c8408e5b02778461ded74cae5b30861a91eb5", 0xcb}, {&(0x7f00000006c0)="d56bcc9b392674c2786f58bf5c555fe6fcfb60faebf1439a304038cccc57f29b6d374d9147fd5f9a51c08f5868640c1dc00a0137d83ec9fc8e54efbdf083076160b78f79e0608fc631b625655e894682e3b45c6f11d9d66b367534f25b512bd352c366ce7ed40511dd5b918e00fa4a59c2c2f06f5465c50fb29830e0e5cb52a4ec718e639c15e1b772aa", 0x8a}], 0x8, &(0x7f0000000800)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}], 0x48, 0x40}], 0x1, 0x80)
sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48)

5.917347203s ago: executing program 1 (id=9534):
socket$inet(0x2, 0x4000000000000001, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x40000000000004c, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000f2dcc6d0e5bfb6ecc27477a80d1fcf4b137d054bd61743b079bac97f2141d9f3fc65776a653c4ec621d3c20287f5605901decf24849b329a36c04e4b9ed84e68605ca797889c2552b819a920c3ea749c4760aa70f09c9c56b6a43f7c5b6d22e5b85ad8359b1ca3ce6562fb42785fa4a7fee635efcaa4ba6fab659971224383e4bf1cf7f3e03373a9750690557a2efd747ce8afce6d4cd5"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90)
unshare(0x2a020400)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1e, 0xa, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000080), &(0x7f0000000380)=r5}, 0x20)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'})
r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2)
ioctl$VIDIOC_G_AUDOUT(r7, 0x80345631, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f014, 0xfffffffe})
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r8 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000)
sendmmsg$alg(r8, &(0x7f0000000880)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000100)="22693a57f48509198c1731a62a3caf2a369613a5dd245397d1c06e17d2f1157ebfe9465076636961ea8955f8a2c24510a3e3a368aafb0b79b7b53219f2da6059a94d2ced2fb74b32d2f2d2542648eb5a56d3322082990d1fc352bad9d468a03f1c76317fdc942666ca64376ad43f4b47a9ee63d7baea4a808540e508627be371c42f2692d74b2e5ec5df9bff", 0x8c}, {&(0x7f0000000000)="51c615be6644f35b5b7629706d1af86175c6f44d1a1519b8c8b3c07581ff693083b8593a93008a81034aa08e502bcc4368c970f622de172865e279d49f95b7cc26bc9d424b9676693704ed0941d36496ec", 0x51}, {&(0x7f00000003c0)="c09adae902d2203f4831fca9f39a02d79ca117191e32ba26badd35402becbe9349f47c07899d15a635fed2ad9f66dd32210f1674e6ae35a8bd50588af223c206604f68e451200cbad618bba64b3e753b0fc9d4dbacf6a4a000ac92cd8ffbda2d0e4b78ee79f02ada635b3f4baec00c99499ab9b627ffb05ea0434987bc88018c2f93cd5a716dce3cbe3f2380488a50617a354658fdae441e69f1c94b0f329466bcd09d9cae1e0b0d7d02d882ac8049982a953792664e1e0309641f172879174ebdcad6a087736da4b4b7a318303afb038b2209def12a8a157e0630", 0xdb}, {&(0x7f00000001c0)="2c324f722d0aebc369887adf66b0940438d71f66b316084cdf3643c56dee67dac180d9547dad79d8", 0x28}, {&(0x7f00000002c0)="2ddf966f8bcffec8600ef9024a41cc44c242d864f90033cb4ac8c5b7585f34b4deb7631672bdf1b584aaae60c170688f4133733d358abf2ee0568fb388965ee254", 0x41}, {&(0x7f00000004c0)="5628b0eed7a25b67e1ba9bdd8a4345af296b3a0fa017d1ae3b4722d9547db59b79881b16194185e8d58c56c00189cb6d18fb648dcfa4d3423e305788dcf273be529ba76953e6642b31dbe50fb054a24032d0a0d7dd9fa84387043cc12b36d9eef2d5fc10b8dc1653645024005862322cf9ad37c8e1e069645921732a5150796dfcac37d157d7f664da2e47781c58e234a76b7ae01f486fa85661f4eabd51778a4f8c04ed39bdad8f2ca872eaf6c3d775c32bcaaf6a9411dbe7e7de7b1917beb57d9928c5ccb0d924a348a7f7398f555c64d8e914e219d6adc2bfc2ccaef2c690be349434", 0xe4}, {&(0x7f00000005c0)="1058e6af5f8121202c8769dfcfccac1090da9610fd470e5a30db78d655a5498e93a092d73147eb05bf0131e94ac9c0a52e882003cdda3336e0b10008db26ba3603686102ff0f94a9a15a0dd1109320cb23fe7cc15592af29314a4a1d74a4438a8177e6eea7e167e5968058fbf6d238378437ebb2fecb56a0e1b56de06aacb94c9fe72704e953f9c5d5c820e44889a756077d3fb4803fa311f23992f7d28197086914b7c1b773d90c026e88dbca9eb149633316ed869c9da06c8408e5b02778461ded74cae5b30861a91eb5", 0xcb}, {&(0x7f00000006c0)="d56bcc9b392674c2786f58bf5c555fe6fcfb60faebf1439a304038cccc57f29b6d374d9147fd5f9a51c08f5868640c1dc00a0137d83ec9fc8e54efbdf083076160b78f79e0608fc631b625655e894682e3b45c6f11d9d66b367534f25b512bd352c366ce7ed40511dd5b918e00fa4a59c2c2f06f5465c50fb29830e0e5cb52a4ec718e639c15e1b772aa", 0x8a}], 0x8, &(0x7f0000000800)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}], 0x48, 0x40}], 0x1, 0x80)
sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x15, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="b702000000000f00bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000deffffff6a0a00ff00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868ee30a0e8c1bf176db2a6b2f01806fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872971c5c77f0979b34e1ad837ff0d10b97163c1d6d0e196bf02f46c7953ab1abda45cbe8d0d26b5069f8a98f7dc8f772c06b74635fc9f9de9ca3c0ec0cb9bf4e418d076df4c7df0a70f2bdf4000000000000b0c2940dd8e263aa743f7555193161f45346b1004006000000e1ffff8816326d7d25c32aac1c7d5b5be399f6609876b5887437a172fbc02a74135b29194e533583f76e412dff048f0000000000000000b2728a0481e9f0da43bb6cfb851cd364ff19002cc93c1c13ca67fdc6c238342033070000004a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa2c6e94bd0339454c13ad3e328a100000000b515a1000000000000140eb2e9c15b6c8f6198282df27badac8500bc7d202e099009ca515007e5f009735200040000001896d46cdac0abb841d9f96e2e6a19b7bf661c01800000d77d6165f253683cd8dc926518c699a2b14fb2bb40425dee631368340711a8c47318d5d13085938c3ec5c39b540b34157b0330aa16bd0998607f0ecea84919712d36930abab426f58317cb"], &(0x7f0000000340)='GPL\x00'}, 0x94)

5.296190659s ago: executing program 4 (id=9535):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680))
brk(0x9d1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYRES32=0x0], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1d, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
mount(&(0x7f0000000240), &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000000000000001"], 0x14}}, 0x0)
read(r6, &(0x7f0000000080)=""/186, 0xba)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000000104010200000000000000000a00000105000100e80000"], 0x24}, 0x1, 0x0, 0x0, 0x24000844}, 0x4000)
r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0x2, 0x1, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50)
r10 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r8, r9, 0x26, 0x0, @val=@perf_event={0x7}}, 0x18)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001080)={r10, r8, 0x4, r8}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0)
r11 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'lo\x00'})

4.725371135s ago: executing program 1 (id=9536):
r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="401406"], 0x0, 0x0})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003600)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f0000003580)=[{{&(0x7f0000000ac0)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000000c00)=""/151, 0x97}], 0x1}, 0x7}, {{&(0x7f0000000b40)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000000e00)=""/208, 0xd0}, {&(0x7f0000000f00)=""/4096, 0x1000}, {&(0x7f0000002100)=""/4096, 0x1000}, {&(0x7f0000001f00)=""/184, 0xb8}, {&(0x7f0000003100)=""/201, 0xc9}, {&(0x7f0000003200)=""/131, 0x83}, {&(0x7f00000032c0)=""/236, 0xec}, {&(0x7f00000033c0)=""/158, 0x9e}], 0x8, &(0x7f0000003480)=""/228, 0xe4}, 0x6}], 0x2, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = socket(0x28, 0x1, 0x0)
r5 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0xc81d, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=<r6=>0x0, &(0x7f00000002c0)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000001c0)=@vsock={0x28, 0x0, 0xffffffff, @host}, 0x0, 0x0, 0x1})
io_uring_enter(r5, 0x47b2, 0x10f9, 0x82, 0x0, 0x48)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
close(0x3)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, &(0x7f00000003c0)={0x14, 0x0, 0x0}, 0x0)

4.715185253s ago: executing program 2 (id=9537):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r1, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/108, 0x6c}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/117, 0x75}, {&(0x7f00000026c0)=""/4096, 0x1000}], 0x5, &(0x7f0000000380)=""/25, 0x19}, 0x2}, {{&(0x7f00000003c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f00000036c0), 0x0, &(0x7f0000003700)=""/159, 0x9f}, 0x40}], 0x2, 0x2, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0xc000, 0x19)

4.392334146s ago: executing program 4 (id=9538):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680))
brk(0x9d1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000080000000000b708000000005918536bd48344dabfa200000000f6ff06020000f80000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYRES32=0x0], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1d, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
mount(&(0x7f0000000240), &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000000000000001"], 0x14}}, 0x0)
read(r6, &(0x7f0000000080)=""/186, 0xba)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000000104010200000000000000000a00000105"], 0x24}, 0x1, 0x0, 0x0, 0x24000844}, 0x4000)
r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0x2, 0x1, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94)
r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r8, 0xffffffffffffffff, 0x26, 0x0, @val=@perf_event={0x7}}, 0x18)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001080)={r9, r8, 0x4, r8}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00'})

3.814089582s ago: executing program 0 (id=9539):
r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x9c) (async, rerun: 32)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async, rerun: 32)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5000000002"], 0x50}}, 0x0) (async)
r2 = userfaultfd(0x801)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x7ffffffffffc, 0x5}) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
r3 = getpid()
sysfs$1(0x1, &(0x7f0000000040)='$\x00') (async)
sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}) (async)
io_setup(0xff, &(0x7f0000000380)) (async, rerun: 64)
madvise(&(0x7f0000ffd000/0x1000)=nil, 0x7fe4d2ddf000, 0x11) (rerun: 64)
syz_init_net_socket$rose(0xb, 0x5, 0x0) (async, rerun: 32)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x48) (rerun: 32)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20)
mount$binderfs(0x0, 0x0, 0x0, 0x0, 0x0) (async)
syz_open_procfs(0xffffffffffffffff, 0x0)
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async)
ptrace$getsig(0x4202, r3, 0x0, &(0x7f0000001500)) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async, rerun: 64)
sendmmsg$unix(r5, &(0x7f0000001600)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001580)=[{&(0x7f00000003c0)="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", 0x1000}, {&(0x7f0000000180)="a3c2f0f14e156e1c41763974c895ec45b9", 0x11}, {&(0x7f00000013c0)="3b39676cf2427c68edc2bf13eb489dbfca9f1c62e28328066a167912a4c6efe55542713ddcf4ecc64e57932df47692f10249fbaee0edcc0bbdc48df2c127ba6af0efb06cdb8d7a7c346c2c1e9028e0ee", 0x50}, {&(0x7f0000001440)="db3c859c0f0932d208452e512a59ff4f87c4310526850ac322ddaa398eaeb5b54bbd134e172065cd621619a373dc3783c218f586c33e57217a77ea37d36e7db5ff01ec22bfe2c968d0f10f1c68f087ccf585282fb96caf7c8fad1082c9574797e82fb48647", 0x65}, {&(0x7f00000001c0)="8b6d1a91796707c36b00c8d0a35268a72bfe45dd7e240dc253af6ea452802f9ec7eacc744d510f86f730933fe808dfa6147ad45a8762", 0x36}, {&(0x7f0000001640)="39eff0946dbc57dc3435e2a698a9917c5c45b78691b97b6de6b1ea9822bb69896e5deeebf9e067e3c79b909df36903d3e495f6868ef59c90278cef939f57e67e89c8faf916313ba58d0efc065d822b7bafec090000007624b00c28f79c7796f60d367c5c08cd772903b6fa1464e9f556e5d0656aa2097caa937c5bee4dcf45761990a6bdb6507700e25ebca079515a28be4d95bfa2715edcf7ac21e6ef4bdd90bd072d5a51e8bc73f970adda49ff64c79f000033cb0000000000", 0xba}], 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="22000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1], 0x20, 0x40014}}], 0x1, 0x40000) (async, rerun: 64)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0)
fsetxattr(r7, &(0x7f00000014c0)=ANY=[@ANYBLOB="73797374654e6a3e7bc783316e8d920c6d2e3a00"], &(0x7f0000000080)=':\x00', 0x2, 0x3)

3.768639538s ago: executing program 2 (id=9540):
fanotify_init(0x200, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRESOCT=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r0}, 0x10)
r1 = syz_open_procfs(0x0, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$FS_IOC_GETFSLABEL(r5, 0x81009431, &(0x7f0000000880))
read$eventfd(r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @ptr={0x0, 0x0, 0x0, 0x10, 0x4}, @func={0x4, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x46}, 0x28)
r6 = socket$kcm(0x25, 0x1, 0x0)
recvmsg$kcm(r6, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x40010102)
syz_open_dev$vim2m(&(0x7f00000000c0), 0x5, 0x2)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x24, 0x0, 0x1, 0xffffffff, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x24}}, 0x0)

3.405824229s ago: executing program 4 (id=9541):
fanotify_init(0x200, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRESOCT=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r0}, 0x10)
r1 = syz_open_procfs(0x0, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x8, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0xa, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c57, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x9, 0x4c74, 0x0, 0x7, 0x2, 0xe, 0x0, 0x400, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0xffff8001, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0x388000, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2b, 0xe, 0x312, 0x78, 0xea4, 0x0, 0xfff, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xf, 0xd86, 0x2, 0x4, 0x8, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x2, 0x200004, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x8, 0x8, 0x86, 0x3, 0x3038, 0xff, 0xb, 0x2, 0x2, 0x2, 0x7, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0xf, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x7, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x3, 0x5, 0x1b, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x80000000], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x1, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x3, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x10200016, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x3, 0x100, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x4, 0x6c1b, 0x8, 0x4, 0x5, 0x40b1e, 0xd7, 0x200, 0xffff3441, 0x4]}, 0x45c)
read$eventfd(r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @ptr={0x0, 0x0, 0x0, 0x10, 0x4}, @func={0x4, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x46}, 0x28)
r6 = socket$kcm(0x25, 0x1, 0x0)
recvmsg$kcm(r6, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x40010102)
syz_open_dev$vim2m(&(0x7f00000000c0), 0x5, 0x2)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x24, 0x0, 0x1, 0xffffffff, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x24}}, 0x0)

2.948064505s ago: executing program 0 (id=9542):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x80000001, 0x4, 0x32, 0x0, 0x2}, 0x9c)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
r2 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)={0x200002, 0x200003, 0x801, 0x0, 0x7, 0x204})
socket(0x29, 0x800, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r3, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="00000000dfc08a512eb59a2dc79c5669c91c800c77a8c2e318f1ca4e2ebea5958170b731a743597460695a06f644ea25e9221a88eb1b71bcf5e36463c0fc3653e3761f5fc53d", @ANYRES16=r4, @ANYBLOB="00022dbd7000fddbdf25870000002b002a00840fc00100080211000000e60000000900051401ea20c69b140d07da2327bdd68bbd81b0d77ba600"], 0x40}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000640), r3)
sendmmsg$inet6(r5, &(0x7f0000000f40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}], 0x1, 0x0)
connect$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa)
shutdown(r1, 0x1)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000ec0), 0x200)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r6, 0xc0a85352, &(0x7f0000000f00)={{}, 'port0\x00', 0x0, 0x1000, 0x91e, 0x5a, 0x0, 0x1000, 0x8, 0x0, 0x7, 0x8})
ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f00000000c0)=""/204)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
pipe(&(0x7f00000003c0))
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000001c0)={<r9=>0x0, @in6={{0xa, 0x4e20, 0xb75, @empty, 0x2aec}}, [0x9, 0xce, 0x77, 0x4, 0xfffffffffffffffb, 0x8000, 0x8000000000000001, 0x8, 0x10000, 0x2, 0x1, 0x5, 0x2, 0x2, 0x5]}, &(0x7f0000000000)=0x100)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f00000002c0)={r9, @in6={{0xa, 0x4e21, 0xc9, @mcast2, 0x7}}, 0xfff, 0x70}, &(0x7f0000000380)=0x90)
socket$nl_route(0x10, 0x3, 0x0)

2.496556968s ago: executing program 2 (id=9543):
r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="401406"], 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, &(0x7f0000000300)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, &(0x7f00000003c0)={0x14, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

2.209711919s ago: executing program 4 (id=9544):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x0) (fail_nth: 1)

1.992454146s ago: executing program 0 (id=9545):
socket$kcm(0x2, 0x3, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0xfa72, 0x100, 0x0, 0x215}, 0x0, 0x0)
socket$inet6(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r1)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}, 0x1, 0x0, 0x0, 0x24020000}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="180000", @ANYRES32=r2, @ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b1281457d791245, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000180)={0x28, 0x4, r5, 0x0, &(0x7f0000ae0000/0x2000)=nil, 0x2000, 0xffffffff80000001})
ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000200)={0x28, 0x5, r5, 0x0, &(0x7f0000000a40)="7f", 0x1, 0x4})

1.937374985s ago: executing program 4 (id=9546):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680))
brk(0x9d1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000080000000000b708000000005918536bd48344dabfa200000000f6ff06020000f80000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYRES32=0x0], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1d, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
mount(&(0x7f0000000240), &(0x7f0000000040)='.\x00', 0x0, 0x0, 0x0)

1.001654879s ago: executing program 33 (id=9499):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0xe, 0x33565348, 0x0, 0x0, 0x0, 0x3, 0xfeedcafe, 0x3, 0x0, 0x2, 0x2}})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94)
r2 = signalfd4(r1, &(0x7f00000002c0)={[0x7]}, 0x8, 0x80800)
ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
lseek(r6, 0x9, 0x0)
ptrace$ARCH_GET_FS(0x1e, r3, 0x0, 0x1003)
r7 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc2604110, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB], 0x16)
sync()

997.983066ms ago: executing program 0 (id=9548):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680))
brk(0x9d1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYRES32=0x0], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1d, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
mount(&(0x7f0000000240), &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000000000000001"], 0x14}}, 0x0)
read(r6, &(0x7f0000000080)=""/186, 0xba)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000000104010200000000000000000a00000105000100e80000"], 0x24}, 0x1, 0x0, 0x0, 0x24000844}, 0x4000)
r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0x2, 0x1, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50)
r10 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r8, r9, 0x26, 0x0, @val=@perf_event={0x7}}, 0x18)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001080)={r10, r8, 0x4, r8}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0)
r11 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'lo\x00'})

996.876248ms ago: executing program 4 (id=9549):
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0)
write$cgroup_int(r0, &(0x7f00000000c0)=0x3, 0x12)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x28, 0x0, 0x0, 0xfefff038}, {0x6}]}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
landlock_create_ruleset(&(0x7f0000000040)={0xc015}, 0x18, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0)
r4 = dup(r3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000280)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r6, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x0, 0x6}, [@IFLA_ADDRESS={0xa, 0x3, @random="08e7eebc872f"}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x44}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000)
ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000})

972.50942ms ago: executing program 1 (id=9550):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00'}, 0x94)
r0 = socket$pppoe(0x18, 0x1, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r6, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x20000006, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x7, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0xfffffffe, 0x400, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x35, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x200025, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0xffff, 0x6, 0x96, 0x9, 0x2, 0x0, 0x200, 0x401, 0xc, 0x2, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x5, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0x5, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x6, 0x5, 0x80, 0x9, 0x7ffe, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0xfffffffc, 0x8, 0x3, 0x3ff, 0x20000006, 0x9, 0x95e, 0xffffffff, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x10002, 0x3, 0x3, 0x88, 0x2, 0xffffff80, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xfffff734, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x82, 0x44, 0x409, 0x3, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x1f3, 0xfffffffd, 0xa, 0xe, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r6, 0x5501)
readv(r6, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1)
write$input_event(r6, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f)
syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58)
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r2, 0x0, 0x0, 0x200000000})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r2, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x11ca0a1}, 0xc, &(0x7f0000000180)={&(0x7f0000002d40)=ANY=[@ANYBLOB="902500001200020028bd7000fedbdf25260080204e234e200000010004000000ff070000080000000000000c060000000200000004000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x2590}, 0x1, 0x0, 0x0, 0xc814}, 0x0)
ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0)

0s ago: executing program 0 (id=9551):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680))
brk(0x9d1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000080000000000b708000000005918536bd48344dabfa200000000f6ff06020000f80000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYRES32=0x0], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1d, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
mount(&(0x7f0000000240), &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000000000000001"], 0x14}}, 0x0)
read(r6, &(0x7f0000000080)=""/186, 0xba)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000000104010200000000000000000a00000105000100"], 0x24}, 0x1, 0x0, 0x0, 0x24000844}, 0x4000)
r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0x2, 0x1, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94)
r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r8, 0xffffffffffffffff, 0x26, 0x0, @val=@perf_event={0x7}}, 0x18)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001080)={r9, r8, 0x4, r8}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00'})

kernel console output (not intermixed with test programs):

ed to resolve './file0': -2
[ 2614.998742][ T5527] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 2615.013474][ T5527] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 2615.026587][ T5527] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 2615.044966][ T5527] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 2615.096164][   T30] audit: type=1400 audit(1766163888.039:1052): avc:  denied  { lock } for  pid=5786 comm="syz.4.9006" path="socket:[142935]" dev="sockfs" ino=142935 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 2615.199405][ T5527] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2615.222285][ T5527] 8021q: adding VLAN 0 to HW filter on device team0
[ 2615.237668][ T4347] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2615.244812][ T4347] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2615.253701][T26361] usb 2-1: new low-speed USB device number 46 using dummy_hcd
[ 2615.269299][ T3759] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2615.276453][ T3759] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2615.435441][T26361] usb 2-1: Invalid ep0 maxpacket: 32
[ 2615.998966][T26361] usb 2-1: new low-speed USB device number 47 using dummy_hcd
[ 2616.039448][ T5527] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2616.073113][ T5527] veth0_vlan: entered promiscuous mode
[ 2616.087191][ T5527] veth1_vlan: entered promiscuous mode
[ 2616.150223][T26361] usb 2-1: Invalid ep0 maxpacket: 32
[ 2616.195073][T26361] usb usb2-port1: attempt power cycle
[ 2616.228854][ T5527] veth0_macvtap: entered promiscuous mode
[ 2616.245231][ T5527] veth1_macvtap: entered promiscuous mode
[ 2616.264148][ T5527] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2616.287101][ T5527] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2616.303589][ T1041] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2616.318230][ T1041] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2616.376236][ T1041] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2616.538435][ T5814] netlink: 196 bytes leftover after parsing attributes in process `syz.4.9012'.
[ 2616.566731][ T1041] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2616.649839][ T5816] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2616.657813][ T5816] F2FS-fs (loop11): Can't find valid F2FS filesystem in 1th superblock
[ 2616.666312][ T5816] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2616.674833][ T5816] F2FS-fs (loop11): Can't find valid F2FS filesystem in 2th superblock
[ 2616.686477][T14906] Bluetooth: hci5: SCO packet for unknown connection handle 201
[ 2616.759537][ T5817] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9013'.
[ 2617.070623][T26361] usb 2-1: new low-speed USB device number 48 using dummy_hcd
[ 2617.100871][T26361] usb 2-1: Invalid ep0 maxpacket: 32
[ 2617.136654][ T2636] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2617.147831][ T2636] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2617.185495][ T3267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2617.193724][ T3267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2617.286994][T26361] usb 2-1: new low-speed USB device number 49 using dummy_hcd
[ 2617.315157][T26361] usb 2-1: Invalid ep0 maxpacket: 32
[ 2617.330515][T26361] usb usb2-port1: unable to enumerate USB device
[ 2618.680483][ T5924] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[ 2618.833454][ T5840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9019'.
[ 2618.853595][ T5840] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9019'.
[ 2618.874193][ T5840] netlink: 'syz.4.9019': attribute type 12 has an invalid length.
[ 2618.898097][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2618.932482][ T5840] netlink: 'syz.4.9019': attribute type 11 has an invalid length.
[ 2618.945409][ T5924] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[ 2618.959838][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2619.041383][ T5924] usb 3-1: config 0 descriptor??
[ 2619.502208][ T5924] lg-g15 0003:046D:C222.0076: unbalanced delimiter at end of report description
[ 2619.529103][ T5924] lg-g15 0003:046D:C222.0076: probe with driver lg-g15 failed with error -22
[ 2619.552909][T14906] Bluetooth: hci5: Received unexpected HCI Event 0x00
[ 2619.631349][ T5866] fuse: Unknown parameter 'C«¼U„‘ðºh€©Ä'
[ 2619.866613][ T5823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2619.892267][ T5823] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2620.164666][ T6684] usb 3-1: USB disconnect, device number 42
[ 2620.587165][ T5877] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9027'.
[ 2620.742104][ T5881] FAULT_INJECTION: forcing a failure.
[ 2620.742104][ T5881] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2620.817284][ T5881] CPU: 1 UID: 0 PID: 5881 Comm: syz.4.9028 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2620.817311][ T5881] Tainted: [L]=SOFTLOCKUP
[ 2620.817317][ T5881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2620.817326][ T5881] Call Trace:
[ 2620.817332][ T5881]  <TASK>
[ 2620.817339][ T5881]  dump_stack_lvl+0x16c/0x1f0
[ 2620.817364][ T5881]  should_fail_ex+0x512/0x640
[ 2620.817392][ T5881]  _copy_from_user+0x2e/0xd0
[ 2620.817416][ T5881]  kstrtouint_from_user+0xd6/0x1d0
[ 2620.817434][ T5881]  ? __pfx_kstrtouint_from_user+0x10/0x10
[ 2620.817451][ T5881]  ? __lock_acquire+0x436/0x2890
[ 2620.817474][ T5881]  ? lock_acquire+0x179/0x330
[ 2620.817498][ T5881]  proc_fail_nth_write+0x83/0x220
[ 2620.817516][ T5881]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 2620.817547][ T5881]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 2620.817562][ T5881]  vfs_write+0x2a0/0x11d0
[ 2620.817584][ T5881]  ? __pfx___mutex_lock+0x10/0x10
[ 2620.817607][ T5881]  ? __pfx_vfs_write+0x10/0x10
[ 2620.817633][ T5881]  ? __fget_files+0x20e/0x3c0
[ 2620.817662][ T5881]  ksys_write+0x12a/0x250
[ 2620.817682][ T5881]  ? __pfx_ksys_write+0x10/0x10
[ 2620.817709][ T5881]  do_syscall_64+0xcd/0xf80
[ 2620.817731][ T5881]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2620.817748][ T5881] RIP: 0033:0x7efe5178e1ff
[ 2620.817762][ T5881] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 2620.817778][ T5881] RSP: 002b:00007efe4f9ee030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 2620.817793][ T5881] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007efe5178e1ff
[ 2620.817804][ T5881] RDX: 0000000000000001 RSI: 00007efe4f9ee0a0 RDI: 0000000000000004
[ 2620.817814][ T5881] RBP: 00007efe4f9ee090 R08: 0000000000000000 R09: 0000000000000000
[ 2620.817824][ T5881] R10: 0000000000010014 R11: 0000000000000293 R12: 0000000000000001
[ 2620.817834][ T5881] R13: 00007efe519e6038 R14: 00007efe519e5fa0 R15: 00007ffc21d2fea8
[ 2620.817859][ T5881]  </TASK>
[ 2621.123787][   T30] audit: type=1400 audit(1766163893.699:1053): avc:  denied  { ioctl } for  pid=5876 comm="syz.1.9027" path="socket:[143703]" dev="sockfs" ino=143703 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[ 2622.250233][ T5924] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[ 2622.529496][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2622.580209][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2622.664665][ T5924] usb 2-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00
[ 2622.831281][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2622.871630][ T5924] usb 2-1: config 0 descriptor??
[ 2622.893729][ T5919] cgroup: subsys name conflicts with all
[ 2623.111652][ T5927] netlink: 'syz.4.9036': attribute type 1 has an invalid length.
[ 2623.119529][ T5927] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9036'.
[ 2623.607919][ T5924] playstation 0003:054C:0BA0.0077: unknown main item tag 0x0
[ 2624.576121][ T5924] playstation 0003:054C:0BA0.0077: unknown main item tag 0x0
[ 2624.584642][ T5924] playstation 0003:054C:0BA0.0077: unknown main item tag 0x0
[ 2624.593250][ T5924] playstation 0003:054C:0BA0.0077: unknown main item tag 0x0
[ 2624.603895][ T5924] playstation 0003:054C:0BA0.0077: unknown main item tag 0x0
[ 2624.614061][ T5924] playstation 0003:054C:0BA0.0077: item fetching failed at offset 5/7
[ 2624.627700][ T5924] playstation 0003:054C:0BA0.0077: Parse failed
[ 2624.637979][ T5924] playstation 0003:054C:0BA0.0077: probe with driver playstation failed with error -22
[ 2624.992577][ T3768] Bluetooth: hci2: command 0x0405 tx timeout
[ 2625.074532][ T5924] usb 2-1: USB disconnect, device number 50
[ 2625.326979][   T24] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[ 2625.820317][   T24] usb 3-1: Using ep0 maxpacket: 16
[ 2625.827325][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2625.840021][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2626.366554][   T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00
[ 2626.377895][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2626.382115][ T5954] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2626.393075][ T5954] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2626.401626][ T5954] bridge0: entered allmulticast mode
[ 2626.497753][ T5958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9047'.
[ 2626.512528][   T24] usb 3-1: config 0 descriptor??
[ 2626.526035][ T5958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9047'.
[ 2626.623756][ T5958] netlink: 'syz.1.9047': attribute type 12 has an invalid length.
[ 2626.660341][ T5958] netlink: 'syz.1.9047': attribute type 11 has an invalid length.
[ 2626.679828][ T3768] Bluetooth: hci4: Received unexpected HCI Event 0x00
[ 2626.693379][ T5964] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9049'.
[ 2626.705695][ T5964] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9049'.
[ 2626.730506][ T5964] bond23: (slave wlan0): Releasing active interface
[ 2626.984124][   T24] apple 0003:05AC:0247.0078: unexpected long global item
[ 2627.014516][   T24] apple 0003:05AC:0247.0078: parse failed
[ 2627.048295][   T24] apple 0003:05AC:0247.0078: probe with driver apple failed with error -22
[ 2627.279923][   T24] usb 3-1: USB disconnect, device number 43
[ 2627.292419][ T5975] FAULT_INJECTION: forcing a failure.
[ 2627.292419][ T5975] name failslab, interval 1, probability 0, space 0, times 0
[ 2627.369425][ T5975] CPU: 1 UID: 0 PID: 5975 Comm: syz.1.9050 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2627.369451][ T5975] Tainted: [L]=SOFTLOCKUP
[ 2627.369455][ T5975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2627.369462][ T5975] Call Trace:
[ 2627.369466][ T5975]  <TASK>
[ 2627.369470][ T5975]  dump_stack_lvl+0x16c/0x1f0
[ 2627.369490][ T5975]  should_fail_ex+0x512/0x640
[ 2627.369506][ T5975]  ? fs_reclaim_acquire+0xae/0x150
[ 2627.369522][ T5975]  should_failslab+0xc2/0x120
[ 2627.369536][ T5975]  __kmalloc_noprof+0xeb/0x910
[ 2627.369553][ T5975]  ? tomoyo_encode2+0x100/0x3e0
[ 2627.369570][ T5975]  ? tomoyo_encode2+0x100/0x3e0
[ 2627.369584][ T5975]  tomoyo_encode2+0x100/0x3e0
[ 2627.369600][ T5975]  tomoyo_encode+0x29/0x50
[ 2627.369613][ T5975]  tomoyo_realpath_from_path+0x18f/0x6e0
[ 2627.369629][ T5975]  ? tomoyo_profile+0x47/0x60
[ 2627.369646][ T5975]  tomoyo_path_number_perm+0x245/0x580
[ 2627.369658][ T5975]  ? tomoyo_path_number_perm+0x237/0x580
[ 2627.369673][ T5975]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 2627.369685][ T5975]  ? find_held_lock+0x2b/0x80
[ 2627.369713][ T5975]  ? find_held_lock+0x2b/0x80
[ 2627.369728][ T5975]  ? hook_file_ioctl_common+0x144/0x410
[ 2627.369747][ T5975]  ? __fget_files+0x20e/0x3c0
[ 2627.369765][ T5975]  security_file_ioctl+0x9b/0x240
[ 2627.369780][ T5975]  __x64_sys_ioctl+0xb7/0x210
[ 2627.369794][ T5975]  do_syscall_64+0xcd/0xf80
[ 2627.369809][ T5975]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2627.369819][ T5975] RIP: 0033:0x7fbb53d8f749
[ 2627.369828][ T5975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2627.369838][ T5975] RSP: 002b:00007fbb54bb9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2627.369849][ T5975] RAX: ffffffffffffffda RBX: 00007fbb53fe6090 RCX: 00007fbb53d8f749
[ 2627.369855][ T5975] RDX: 0000200000000180 RSI: 00000000c018aa06 RDI: 0000000000000003
[ 2627.369862][ T5975] RBP: 00007fbb54bb9090 R08: 0000000000000000 R09: 0000000000000000
[ 2627.369867][ T5975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2627.369873][ T5975] R13: 00007fbb53fe6128 R14: 00007fbb53fe6090 R15: 00007ffe334b09a8
[ 2627.369887][ T5975]  </TASK>
[ 2627.369941][ T5975] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 2627.891708][ T5982] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2627.899494][ T5982] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[ 2627.908853][ T5982] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2627.916647][ T5982] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[ 2627.936482][ T5982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9053'.
[ 2628.377198][ T5997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9060'.
[ 2628.393223][ T5997] veth0_macvtap: left promiscuous mode
[ 2628.490264][ T5925] usb 2-1: new low-speed USB device number 51 using dummy_hcd
[ 2629.152918][ T5925] usb 2-1: config 7 has an invalid interface number: 252 but max is 0
[ 2629.166847][ T5925] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[ 2629.187048][ T5925] usb 2-1: config 7 has no interface number 0
[ 2629.244335][ T4329] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[ 2629.255455][ T5925] usb 2-1: config 7 interface 252 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2629.376827][ T5925] usb 2-1: config 7 interface 252 has no altsetting 0
[ 2629.386542][ T5925] usb 2-1: string descriptor 0 read error: -22
[ 2629.400285][ T5925] usb 2-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0
[ 2629.402284][ T4329] usb 3-1: device descriptor read/64, error -71
[ 2629.418788][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2630.107858][ T5985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2630.172308][ T5985] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2630.178005][ T4329] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[ 2630.250482][ T5924] usb 2-1: USB disconnect, device number 51
[ 2630.330370][ T4329] usb 3-1: device descriptor read/64, error -71
[ 2630.451584][ T4329] usb usb3-port1: attempt power cycle
[ 2630.560275][T31020] usb 5-1: new high-speed USB device number 82 using dummy_hcd
[ 2630.720335][T31020] usb 5-1: Using ep0 maxpacket: 16
[ 2630.732238][T31020] usb 5-1: config 0 has no interfaces?
[ 2630.741039][T31020] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2630.756630][T31020] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2630.770516][T31020] usb 5-1: Product: syz
[ 2630.774679][T31020] usb 5-1: Manufacturer: syz
[ 2630.785241][T31020] usb 5-1: SerialNumber: syz
[ 2630.790219][ T4329] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[ 2630.801915][T31020] usb 5-1: config 0 descriptor??
[ 2630.830964][ T4329] usb 3-1: device descriptor read/8, error -71
[ 2630.848462][ T3768] Bluetooth: hci1: SCO packet for unknown connection handle 0
[ 2631.131970][ T6037] input: syz1 as /devices/virtual/input/input118
[ 2631.262027][ T4329] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[ 2631.344007][ T4329] usb 3-1: device descriptor read/8, error -71
[ 2631.362554][ T6038] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9070'.
[ 2631.558906][ T4329] usb usb3-port1: unable to enumerate USB device
[ 2631.570601][ T6039] bond13: (slave wlan0): Releasing active interface
[ 2631.736727][ T5924] usb 5-1: USB disconnect, device number 82
[ 2633.710327][ T5894] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[ 2634.189366][ T5894] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 2634.217187][ T5894] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 2634.234876][ T5894] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 2634.250549][ T5894] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 2634.275707][ T5894] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 2634.309030][ T5894] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 2634.325771][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 2634.413898][ T5894] usb 2-1: Product: syz
[ 2634.444451][ T5894] usb 2-1: Manufacturer: syz
[ 2634.477599][ T5894] cdc_wdm 2-1:1.0: skipping garbage
[ 2634.484842][ T5894] cdc_wdm 2-1:1.0: skipping garbage
[ 2634.509794][ T5894] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[ 2634.535488][ T5894] cdc_wdm 2-1:1.0: Unknown control protocol
[ 2634.820188][ T5894] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[ 2635.305528][ T6089] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9082'.
[ 2635.407633][    C1] cdc_wdm 2-1:1.0: nonzero urb status received: -EPIPE
[ 2635.673355][ T5894] usb 3-1: Using ep0 maxpacket: 32
[ 2635.682765][ T6062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2635.795616][ T5894] usb 3-1: config 2 has an invalid interface number: 1 but max is 0
[ 2635.903119][ T6062] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2635.917708][ T5894] usb 3-1: config 2 has an invalid descriptor of length 237, skipping remainder of the config
[ 2636.043254][ T5894] usb 3-1: config 2 has no interface number 0
[ 2636.069866][ T5894] usb 3-1: too many endpoints for config 2 interface 1 altsetting 26: 58, using maximum allowed: 30
[ 2636.091078][T26361] usb 2-1: USB disconnect, device number 52
[ 2636.130287][ T5894] usb 3-1: config 2 interface 1 altsetting 26 has 0 endpoint descriptors, different from the interface descriptor's value: 58
[ 2636.156863][ T5894] usb 3-1: config 2 interface 1 has no altsetting 0
[ 2636.177144][ T5894] usb 3-1: New USB device found, idVendor=22b8, idProduct=2d97, bcdDevice=51.64
[ 2636.190238][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=9, SerialNumber=0
[ 2636.198355][ T5894] usb 3-1: Product: syz
[ 2636.202975][ T5894] usb 3-1: Manufacturer: syz
[ 2636.239440][ T6104] cgroup: subsys name conflicts with all
[ 2636.389793][ T6111] input: syz1 as /devices/virtual/input/input119
[ 2636.620979][ T6075] input: syz1 as /devices/virtual/input/input120
[ 2637.321377][ T6120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9090'.
[ 2637.330407][ T6120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9090'.
[ 2637.339301][ T6120] netlink: 'syz.1.9090': attribute type 12 has an invalid length.
[ 2637.347728][ T6120] netlink: 'syz.1.9090': attribute type 11 has an invalid length.
[ 2638.124124][ T5894] usb 3-1: USB disconnect, device number 48
[ 2638.686945][ T6152] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9098'.
[ 2638.696091][ T6152] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9098'.
[ 2638.705149][ T6152] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9098'.
[ 2638.714305][ T6152] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9098'.
[ 2639.632964][   T30] audit: type=1400 audit(1766163912.579:1054): avc:  denied  { unmount } for  pid=28368 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[ 2639.705631][ T6162] xt_ipcomp: unknown flags 1D
[ 2639.736491][ T6163] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9100'.
[ 2639.907040][ T6166] mac80211_hwsim hwsim46 wlan0: entered promiscuous mode
[ 2641.558702][ T6193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9109'.
[ 2643.200998][   T30] audit: type=1400 audit(1766163916.149:1055): avc:  denied  { unmount } for  pid=28368 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[ 2643.274487][ T6202] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9112'.
[ 2643.303018][ T6202] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9112'.
[ 2643.785983][ T6212] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 2643.792288][ T6212] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2643.798290][ T6212] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2643.804274][ T6212] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 2643.810316][ T6212] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 2643.816258][ T6212] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 2643.954051][ T6212] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 2644.360204][ T3880] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[ 2645.190243][ T3880] usb 2-1: Using ep0 maxpacket: 32
[ 2645.798177][ T6236] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2645.806099][ T6236] F2FS-fs (loop11): Can't find valid F2FS filesystem in 1th superblock
[ 2645.810500][ T6218] Bluetooth: hci3: command 0x0406 tx timeout
[ 2645.814735][ T6236] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2645.828168][ T6236] F2FS-fs (loop11): Can't find valid F2FS filesystem in 2th superblock
[ 2645.842511][ T6236] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9121'.
[ 2645.873118][ T6218] Bluetooth: hci1: command 0x2016 tx timeout
[ 2645.879196][ T6218] Bluetooth: hci4: command 0x0406 tx timeout
[ 2645.885288][ T6218] Bluetooth: hci2: command 0x0405 tx timeout
[ 2645.893284][ T2383] Bluetooth: hci5: command 0x2016 tx timeout
[ 2646.107550][ T6243] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9122'.
[ 2646.170015][ T3880] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[ 2647.950303][ T6218] Bluetooth: hci2: command 0x0405 tx timeout
[ 2648.743887][   T30] audit: type=1400 audit(1766163921.689:1056): avc:  denied  { audit_read } for  pid=6253 comm="syz.5.9125" capability=37  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 2648.965083][ T6258] netlink: 'syz.2.9126': attribute type 1 has an invalid length.
[ 2649.050505][ T6258] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9126'.
[ 2649.116088][ T3880] usb 2-1: string descriptor 0 read error: -71
[ 2649.206653][ T6260] mkiss: ax0: crc mode is auto.
[ 2649.501068][ T6267] netlink: 'syz.1.9128': attribute type 10 has an invalid length.
[ 2649.551839][ T6267] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9128'.
[ 2650.041816][ T3880] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[ 2650.101167][ T2383] Bluetooth: hci2: command 0x0405 tx timeout
[ 2650.309845][ T3880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2650.342556][ T3880] usb 2-1: config 0 descriptor??
[ 2650.349926][ T3880] usb 2-1: can't set config #0, error -71
[ 2650.358239][ T3880] usb 2-1: USB disconnect, device number 53
[ 2651.100018][ T6218] Bluetooth: hci5: Received unexpected HCI Event 0x00
[ 2651.148611][ T6271] binder: 6265:6271 ioctl c0306201 0 returned -14
[ 2651.378130][ T6288] cgroup: subsys name conflicts with all
[ 2651.403253][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[ 2651.760964][ T6297] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2651.768747][ T6297] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[ 2651.777692][ T6297] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2651.785454][ T6297] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[ 2651.805439][ T6297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9135'.
[ 2652.043618][ T6085] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[ 2652.190233][ T6218] Bluetooth: hci2: command 0x0405 tx timeout
[ 2652.616395][ T6085] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2652.631091][ T6085] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[ 2652.652172][ T6085] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2652.785454][ T6085] usb 3-1: config 0 descriptor??
[ 2653.628217][ T6085] lg-g15 0003:046D:C222.0079: unbalanced delimiter at end of report description
[ 2653.822194][ T6085] lg-g15 0003:046D:C222.0079: probe with driver lg-g15 failed with error -22
[ 2653.919851][ T6321] input: syz1 as /devices/virtual/input/input122
[ 2654.256984][ T6293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2654.280657][ T6293] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2655.801541][ T5924] usb 3-1: USB disconnect, device number 49
[ 2655.883024][ T3768] Bluetooth: hci2: command 0x0405 tx timeout
[ 2655.966492][ T6333] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6333 comm=syz.1.9144
[ 2656.088552][ T6684] usb 5-1: new full-speed USB device number 83 using dummy_hcd
[ 2656.330277][ T6684] usb 5-1: device descriptor read/64, error -71
[ 2656.570295][ T6684] usb 5-1: new full-speed USB device number 84 using dummy_hcd
[ 2656.790373][ T6684] usb 5-1: device descriptor read/64, error -71
[ 2657.011660][ T6684] usb usb5-port1: attempt power cycle
[ 2657.855386][ T6218] Bluetooth: hci2: ISO packet for unknown connection handle 0
[ 2657.897036][ T6684] usb 5-1: new full-speed USB device number 85 using dummy_hcd
[ 2657.937181][ T6351] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6351 comm=syz.2.9147
[ 2658.016041][    C0] hrtimer: interrupt took 29227 ns
[ 2658.076902][ T6684] usb 5-1: device descriptor read/8, error -71
[ 2658.300896][ T6356] netlink: 88 bytes leftover after parsing attributes in process `syz.5.9151'.
[ 2658.320445][ T5894] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 2658.400277][ T6684] usb 5-1: new full-speed USB device number 86 using dummy_hcd
[ 2658.444770][ T6684] usb 5-1: device descriptor read/8, error -71
[ 2658.500282][ T5894] usb 1-1: Using ep0 maxpacket: 16
[ 2658.526972][ T5894] usb 1-1: config 5 has an invalid interface number: 164 but max is 1
[ 2658.556291][ T5894] usb 1-1: config 5 contains an unexpected descriptor of type 0x2, skipping
[ 2658.558401][ T6364] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2658.836349][ T5894] usb 1-1: config 5 has an invalid interface number: 121 but max is 1
[ 2658.850608][ T5894] usb 1-1: config 5 has no interface number 0
[ 2658.861174][ T5894] usb 1-1: config 5 has no interface number 1
[ 2658.867276][ T5894] usb 1-1: config 5 interface 121 altsetting 21 endpoint 0x2 has an invalid bInterval 130, changing to 7
[ 2658.895084][ T5894] usb 1-1: config 5 interface 121 altsetting 21 has an invalid descriptor for endpoint zero, skipping
[ 2658.911272][ T5894] usb 1-1: config 5 interface 121 altsetting 21 has an invalid descriptor for endpoint zero, skipping
[ 2658.948282][ T5894] usb 1-1: config 5 interface 121 altsetting 21 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[ 2658.959744][ T6684] usb usb5-port1: unable to enumerate USB device
[ 2659.024782][ T5894] usb 1-1: config 5 interface 121 altsetting 21 has an invalid descriptor for endpoint zero, skipping
[ 2659.131937][ T5894] usb 1-1: config 5 interface 121 altsetting 21 has an invalid descriptor for endpoint zero, skipping
[ 2659.160875][ T5894] usb 1-1: config 5 interface 121 altsetting 21 has 7 endpoint descriptors, different from the interface descriptor's value: 6
[ 2659.179977][ T5894] usb 1-1: config 5 interface 164 has no altsetting 0
[ 2659.188365][ T5894] usb 1-1: config 5 interface 121 has no altsetting 0
[ 2659.197698][ T5894] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=d1.f9
[ 2659.207914][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2659.216422][ T5894] usb 1-1: Product: syz
[ 2659.220964][ T5894] usb 1-1: Manufacturer: syz
[ 2659.225826][ T5894] usb 1-1: SerialNumber: syz
[ 2659.471747][ T6380] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2659.479535][ T6380] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[ 2659.488301][ T6380] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2659.496090][ T6380] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[ 2659.889985][   T30] audit: type=1400 audit(1766163932.829:1057): avc:  denied  { accept } for  pid=6372 comm="syz.2.9157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[ 2659.985385][ T6684] usb 5-1: new high-speed USB device number 87 using dummy_hcd
[ 2660.000787][ T6346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2660.030774][   T30] audit: type=1400 audit(1766163932.899:1058): avc:  denied  { load_policy } for  pid=6372 comm="syz.2.9157" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[ 2660.122510][ T6346] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2660.232627][ T6684] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2660.261420][ T6684] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[ 2660.273875][ T6684] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2660.308046][ T6346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2660.338136][ T6346] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2660.346540][ T6684] usb 5-1: config 0 descriptor??
[ 2660.446528][ T6385] netlink: 'syz.1.9160': attribute type 1 has an invalid length.
[ 2660.514468][ T6387] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9160'.
[ 2660.555452][ T6385] 8021q: adding VLAN 0 to HW filter on device bond14
[ 2660.618257][ T6388] bond14: (slave wlan0): Enslaving as an active interface with a down link
[ 2660.869650][ T6684] lg-g15 0003:046D:C222.007A: unbalanced delimiter at end of report description
[ 2661.178245][ T6684] lg-g15 0003:046D:C222.007A: probe with driver lg-g15 failed with error -22
[ 2661.245086][ T5894] uvcvideo 1-1:5.164: Found UVC 0.00 device syz (046d:08c1)
[ 2661.407132][ T5894] uvcvideo 1-1:5.164: No valid video chain found.
[ 2661.424628][ T5894] usb 1-1: USB disconnect, device number 2
[ 2661.534153][ T6378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2661.798596][ T6398] netlink: 196 bytes leftover after parsing attributes in process `syz.5.9161'.
[ 2661.854736][ T6378] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2661.879834][ T6218] Bluetooth: hci1: SCO packet for unknown connection handle 201
[ 2661.908837][ T6804] usb 5-1: USB disconnect, device number 87
[ 2662.297522][ T6407] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2662.306050][ T6407] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[ 2662.316277][ T6407] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2662.324072][ T6407] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[ 2662.344110][ T6407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9164'.
[ 2663.005127][ T6412] input: syz1 as /devices/virtual/input/input123
[ 2664.150460][ T6427] cgroup: subsys name conflicts with all
[ 2664.395480][ T6439] overlay: Unknown parameter 'func'
[ 2664.402944][ T6430] netlink: 'syz.5.9171': attribute type 1 has an invalid length.
[ 2664.431151][ T6430] 8021q: adding VLAN 0 to HW filter on device bond24
[ 2664.489194][ T6430] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9171'.
[ 2664.505402][ T6430] bond24: (slave wlan0): Enslaving as an active interface with a down link
[ 2664.624600][ T6446] bond_slave_0: entered promiscuous mode
[ 2664.630357][ T6446] bond_slave_1: entered promiscuous mode
[ 2664.636662][ T6446] vlan2: entered promiscuous mode
[ 2664.642439][ T6446] bond0: entered promiscuous mode
[ 2664.653606][ T5894] usb 5-1: new high-speed USB device number 88 using dummy_hcd
[ 2664.750513][ T6085] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[ 2664.814886][ T5924] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[ 2664.823291][ T5894] usb 5-1: Using ep0 maxpacket: 16
[ 2664.841413][ T5894] usb 5-1: config 5 has an invalid interface number: 164 but max is 1
[ 2664.859263][ T5894] usb 5-1: config 5 contains an unexpected descriptor of type 0x2, skipping
[ 2664.883798][ T5894] usb 5-1: config 5 has an invalid interface number: 121 but max is 1
[ 2664.892761][ T5894] usb 5-1: config 5 has no interface number 0
[ 2664.902660][ T5894] usb 5-1: config 5 has no interface number 1
[ 2664.908783][ T5894] usb 5-1: config 5 interface 121 altsetting 21 endpoint 0x2 has an invalid bInterval 130, changing to 7
[ 2664.922504][ T6085] usb 1-1: Using ep0 maxpacket: 16
[ 2664.996104][ T6454] input: syz1 as /devices/virtual/input/input124
[ 2665.091462][ T6085] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2665.148935][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2665.221308][ T6085] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2665.244138][ T5894] usb 5-1: config 5 interface 121 altsetting 21 has an invalid descriptor for endpoint zero, skipping
[ 2665.293373][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2665.305970][ T6085] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[ 2665.317203][ T5894] usb 5-1: config 5 interface 121 altsetting 21 has an invalid descriptor for endpoint zero, skipping
[ 2665.328656][ T5924] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[ 2665.338226][ T6085] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2665.348056][ T5894] usb 5-1: config 5 interface 121 altsetting 21 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[ 2665.359122][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2665.368688][ T6085] usb 1-1: config 0 descriptor??
[ 2665.374556][ T5894] usb 5-1: config 5 interface 121 altsetting 21 has an invalid descriptor for endpoint zero, skipping
[ 2665.393716][ T5924] usb 2-1: config 0 descriptor??
[ 2665.409943][ T5894] usb 5-1: config 5 interface 121 altsetting 21 has an invalid descriptor for endpoint zero, skipping
[ 2665.422799][ T5894] usb 5-1: config 5 interface 121 altsetting 21 has 7 endpoint descriptors, different from the interface descriptor's value: 6
[ 2665.435974][ T5894] usb 5-1: config 5 interface 164 has no altsetting 0
[ 2665.443107][ T5894] usb 5-1: config 5 interface 121 has no altsetting 0
[ 2665.451684][ T5894] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=d1.f9
[ 2665.461200][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2665.469678][ T5894] usb 5-1: Product: syz
[ 2665.476019][ T5894] usb 5-1: Manufacturer: syz
[ 2665.481083][ T5894] usb 5-1: SerialNumber: syz
[ 2665.669154][ T6442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2665.684146][ T6442] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2665.701261][ T6438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2665.712899][ T6438] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2665.725233][ T6438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2665.758536][ T6438] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2665.788302][ T5894] uvcvideo 5-1:5.164: Found UVC 0.00 device syz (046d:08c1)
[ 2665.797463][ T5894] uvcvideo 5-1:5.164: No valid video chain found.
[ 2665.890648][ T6463] netlink: 'syz.2.9183': attribute type 1 has an invalid length.
[ 2665.952028][ T6465] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9183'.
[ 2665.967306][ T5894] usb 5-1: USB disconnect, device number 88
[ 2665.988373][ T5924] cp2112 0003:10C4:EA90.007B: unknown main item tag 0x0
[ 2666.107473][ T6463] 8021q: adding VLAN 0 to HW filter on device bond1
[ 2666.179073][ T6085] corsair 0003:1B1C:1B02.007C: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input0
[ 2666.251983][ T6468] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9175'.
[ 2666.395164][ T6466] bond1: (slave wlan0): Enslaving as an active interface with a down link
[ 2666.505543][ T5924] cp2112 0003:10C4:EA90.007B: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0
[ 2666.684357][ T5924] cp2112 0003:10C4:EA90.007B: Part Number: 0x82 Device Version: 0xFE
[ 2666.878964][ T6477] cgroup: subsys name conflicts with all
[ 2667.023667][ T6444] cp2112 0003:10C4:EA90.007B: Multi-message I2C transactions not supported
[ 2667.039581][ T5924] cp2112 0003:10C4:EA90.007B: error reading lock byte: -71
[ 2667.059634][ T5924] usb 2-1: USB disconnect, device number 54
[ 2667.114397][ T6085] usb 1-1: USB disconnect, device number 3
[ 2667.260325][ T5894] usb 5-1: new high-speed USB device number 89 using dummy_hcd
[ 2667.446375][ T5894] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2667.458051][ T5894] usb 5-1: New USB device found, idVendor=1235, idProduct=000e, bcdDevice=f0.ee
[ 2667.490035][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2667.516968][ T5894] usb 5-1: config 0 descriptor??
[ 2667.669950][ T6498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9191'.
[ 2667.830570][ T5894] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[ 2667.991695][ T5924] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[ 2668.011340][ T5894] usb 3-1: Using ep0 maxpacket: 32
[ 2668.017471][ T6503] can0: slcan on ttyS3.
[ 2668.037994][ T5894] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[ 2668.092569][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2668.188209][ T5924] usb 2-1: device descriptor read/64, error -71
[ 2668.207832][ T5894] gspca_main: nw80x-2.14.0 probing 055f:d001
[ 2668.680947][   T30] audit: type=1400 audit(1766163941.629:1059): avc:  denied  { write } for  pid=6490 comm="syz.2.9189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[ 2668.764940][ T5924] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[ 2668.809135][   T30] audit: type=1400 audit(1766163941.659:1060): avc:  denied  { read } for  pid=6490 comm="syz.2.9189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[ 2668.837688][ T6479] can0 (unregistered): slcan off ttyS3.
[ 2668.851451][ T9223] usb 5-1: USB disconnect, device number 89
[ 2668.901483][ T5924] usb 2-1: device descriptor read/64, error -71
[ 2668.995092][ T5894] gspca_nw80x: reg_r err -71
[ 2669.012414][ T5924] usb usb2-port1: attempt power cycle
[ 2669.026740][ T5894] nw80x 3-1:3.0: probe with driver nw80x failed with error -71
[ 2669.054714][ T5894] usb 3-1: USB disconnect, device number 50
[ 2669.084831][ T6523] cgroup: subsys name conflicts with all
[ 2669.381534][ T5924] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[ 2669.424981][ T5924] usb 2-1: device descriptor read/8, error -71
[ 2670.150217][ T5924] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[ 2670.192602][ T5924] usb 2-1: device descriptor read/8, error -71
[ 2670.310876][ T5924] usb usb2-port1: unable to enumerate USB device
[ 2670.510481][ T6560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9203'.
[ 2670.882463][ T9223] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[ 2671.048417][ T6563] overlayfs: failed to resolve './file0': -2
[ 2671.069571][ T6564] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9204'.
[ 2671.183707][ T9223] usb 1-1: config 0 has an invalid interface number: 41 but max is 0
[ 2671.203764][ T9223] usb 1-1: config 0 has no interface number 0
[ 2671.209113][ T6567] bond24: (slave wlan0): Releasing active interface
[ 2671.210076][ T9223] usb 1-1: config 0 interface 41 has no altsetting 0
[ 2671.267536][ T9223] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 2671.283299][ T6570] bridge0: port 3(dummy0) entered disabled state
[ 2671.286742][ T9223] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2671.289774][ T6570] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2671.298081][ T9223] usb 1-1: Product: syz
[ 2671.304883][ T6570] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2671.309116][ T9223] usb 1-1: Manufacturer: syz
[ 2671.320868][ T9223] usb 1-1: SerialNumber: syz
[ 2671.440000][ T9223] usb 1-1: config 0 descriptor??
[ 2672.369660][ T6570] bridge0: entered allmulticast mode
[ 2672.467509][ T6218] Bluetooth: hci3: Received unexpected HCI Event 0x00
[ 2672.611041][ T6588] overlayfs: failed to resolve './file0': -2
[ 2672.880871][ T6085] usb 5-1: new high-speed USB device number 90 using dummy_hcd
[ 2673.260223][ T6085] usb 5-1: Using ep0 maxpacket: 16
[ 2673.278081][ T6085] usb 5-1: config 5 has an invalid interface number: 164 but max is 1
[ 2673.305153][ T6085] usb 5-1: config 5 contains an unexpected descriptor of type 0x2, skipping
[ 2673.430578][ T6085] usb 5-1: config 5 has an invalid interface number: 121 but max is 1
[ 2673.439235][ T6085] usb 5-1: config 5 has no interface number 0
[ 2673.446900][ T6085] usb 5-1: config 5 has no interface number 1
[ 2673.456559][ T6085] usb 5-1: config 5 interface 121 altsetting 21 endpoint 0x2 has an invalid bInterval 130, changing to 7
[ 2673.469289][ T6085] usb 5-1: config 5 interface 121 altsetting 21 has an invalid descriptor for endpoint zero, skipping
[ 2674.066410][ T6085] usb 5-1: config 5 interface 121 altsetting 21 has an invalid descriptor for endpoint zero, skipping
[ 2674.077537][ T6085] usb 5-1: config 5 interface 121 altsetting 21 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[ 2674.088693][ T6085] usb 5-1: config 5 interface 121 altsetting 21 has an invalid descriptor for endpoint zero, skipping
[ 2674.099773][ T6085] usb 5-1: config 5 interface 121 altsetting 21 has an invalid descriptor for endpoint zero, skipping
[ 2674.111128][ T6085] usb 5-1: config 5 interface 121 altsetting 21 has 7 endpoint descriptors, different from the interface descriptor's value: 6
[ 2674.124372][ T6085] usb 5-1: config 5 interface 164 has no altsetting 0
[ 2674.203356][ T6085] usb 5-1: config 5 interface 121 has no altsetting 0
[ 2674.230382][ T6085] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=d1.f9
[ 2674.239480][ T6085] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2674.248618][ T6085] usb 5-1: Product: syz
[ 2674.253462][ T6085] usb 5-1: Manufacturer: syz
[ 2674.265207][ T6085] usb 5-1: SerialNumber: syz
[ 2674.568013][ T6585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2674.641421][ T5924] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[ 2674.860588][ T6585] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2674.894711][ T6585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2674.907665][ T6585] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2674.927609][ T6085] uvcvideo 5-1:5.164: Found UVC 0.00 device syz (046d:08c1)
[ 2674.956501][ T6085] uvcvideo 5-1:5.164: No valid video chain found.
[ 2674.988646][ T6085] usb 5-1: USB disconnect, device number 90
[ 2675.022779][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2675.111785][ T9223] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9
[ 2675.128075][ T9223] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9
[ 2675.139847][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2675.139995][ T5924] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[ 2675.140051][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2675.171130][ T9223] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71
[ 2675.182348][ T5924] usb 3-1: config 0 descriptor??
[ 2675.187880][ T9223] usb 1-1: USB disconnect, device number 4
[ 2675.928184][ T6612] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2675.936014][ T6612] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[ 2675.944289][ T6612] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2675.952224][ T6612] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[ 2675.963973][ T6612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9217'.
[ 2676.173765][ T6218] Bluetooth: hci1: SCO packet for unknown connection handle 201
[ 2676.296252][ T5924] cp2112 0003:10C4:EA90.007D: unknown main item tag 0x0
[ 2676.523015][ T5924] cp2112 0003:10C4:EA90.007D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0
[ 2677.121088][ T5924] cp2112 0003:10C4:EA90.007D: Part Number: 0x82 Device Version: 0xFE
[ 2677.903532][ T9223] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[ 2678.763311][ T9223] usb 1-1: Using ep0 maxpacket: 8
[ 2678.774768][ T9223] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13
[ 2678.784901][ T5924] cp2112 0003:10C4:EA90.007D: error reading lock byte: -71
[ 2678.789885][ T9223] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[ 2678.812842][ T9223] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2678.821206][ T9223] usb 1-1: Product: syz
[ 2678.825606][ T9223] usb 1-1: Manufacturer: syz
[ 2678.830859][ T9223] usb 1-1: SerialNumber: syz
[ 2678.838903][ T5924] usb 3-1: USB disconnect, device number 51
[ 2678.857534][ T9223] usb 1-1: config 0 descriptor??
[ 2678.869167][ T9223] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[ 2679.007476][ T6650] netlink: 'syz.4.9226': attribute type 1 has an invalid length.
[ 2679.072339][ T6652] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9226'.
[ 2679.144330][ T6650] 8021q: adding VLAN 0 to HW filter on device bond10
[ 2679.177054][ T9223] gspca_zc3xx: reg_w_i err -71
[ 2679.335827][ T6654] bond8: (slave wlan0): Releasing active interface
[ 2680.542288][ T6673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9229'.
[ 2680.983113][ T6218] Bluetooth: hci4: SCO packet for unknown connection handle 201
[ 2681.110185][ T9223] gspca_zc3xx: Unknown sensor - set to TAS5130C
[ 2681.117085][ T9223] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71
[ 2681.128624][ T9223] usb 1-1: USB disconnect, device number 5
[ 2681.898090][ T6218] Bluetooth: hci3: Received unexpected HCI Event 0x00
[ 2682.337380][ T6696] netlink: 'syz.4.9237': attribute type 1 has an invalid length.
[ 2682.549710][ T6696] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9237'.
[ 2684.881187][ T6715] input: syz1 as /devices/virtual/input/input125
[ 2685.246791][ T6712] fuse: Unknown parameter 'Ç
኉ٟ'
[ 2685.347320][ T6719] netlink: 'syz.0.9241': attribute type 2 has an invalid length.
[ 2686.980915][ T6736] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2686.999327][ T6736] F2FS-fs (loop11): Can't find valid F2FS filesystem in 1th superblock
[ 2687.009818][ T6736] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2687.017711][ T6736] F2FS-fs (loop11): Can't find valid F2FS filesystem in 2th superblock
[ 2687.030753][ T6736] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9245'.
[ 2687.556856][ T6719] : entered promiscuous mode
[ 2687.682959][ T6743] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9249'.
[ 2687.747784][ T6746] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9249'.
[ 2689.518246][ T6762] netlink: 'syz.1.9252': attribute type 1 has an invalid length.
[ 2689.582783][ T6764] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9252'.
[ 2689.701100][ T6762] 8021q: adding VLAN 0 to HW filter on device bond15
[ 2689.901058][ T6765] bond14: (slave wlan0): Releasing active interface
[ 2689.944226][ T6765] bond15: (slave wlan0): Enslaving as an active interface with a down link
[ 2690.421585][ T6773] netlink: 'syz.0.9253': attribute type 1 has an invalid length.
[ 2690.473410][ T6775] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9253'.
[ 2691.139561][ T6773] 8021q: adding VLAN 0 to HW filter on device bond11
[ 2691.174245][ T6776] bond11: (slave wlan0): Enslaving as an active interface with a down link
[ 2691.643862][ T6784] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6784 comm=syz.2.9254
[ 2692.251236][ T5894] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[ 2692.409100][ T5894] usb 2-1: too many configurations: 9, using maximum allowed: 8
[ 2692.415835][ T5894] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 2692.415981][ T5894] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 2692.416033][ T5894] usb 2-1: config 0 interface 0 has no altsetting 0
[ 2692.418986][ T5894] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 2692.419145][ T5894] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 2692.419198][ T5894] usb 2-1: config 0 interface 0 has no altsetting 0
[ 2692.425082][ T5894] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 2692.425217][ T5894] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 2692.425272][ T5894] usb 2-1: config 0 interface 0 has no altsetting 0
[ 2692.428143][ T5894] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 2692.428269][ T5894] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 2692.428324][ T5894] usb 2-1: config 0 interface 0 has no altsetting 0
[ 2692.434462][ T5894] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 2692.434602][ T5894] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 2692.434655][ T5894] usb 2-1: config 0 interface 0 has no altsetting 0
[ 2692.499847][ T5894] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 2692.499876][ T5894] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 2692.499891][ T5894] usb 2-1: config 0 interface 0 has no altsetting 0
[ 2692.500876][ T5894] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 2692.500902][ T5894] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 2692.500917][ T5894] usb 2-1: config 0 interface 0 has no altsetting 0
[ 2692.501674][ T5894] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 2692.501711][ T5894] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 2692.501734][ T5894] usb 2-1: config 0 interface 0 has no altsetting 0
[ 2692.503353][ T5894] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[ 2692.503374][ T5894] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[ 2692.503391][ T5894] usb 2-1: Product: syz
[ 2692.503404][ T5894] usb 2-1: Manufacturer: syz
[ 2692.503413][ T5894] usb 2-1: SerialNumber: syz
[ 2692.504985][ T5894] usb 2-1: config 0 descriptor??
[ 2692.550636][ T5894] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0
[ 2692.793547][ T6798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9258'.
[ 2693.499202][T31020] usb 2-1: USB disconnect, device number 59
[ 2693.502240][T31020] yurex 2-1:0.0: USB YUREX #0 now disconnected
[ 2693.657166][ T6810] vivid-007: disconnect
[ 2694.221568][ T6813] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9261'.
[ 2694.272934][ T6815] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9261'.
[ 2694.826807][ T6815] bond11: (slave wlan0): Releasing active interface
[ 2694.941827][ T6806] vivid-007: reconnect
[ 2695.454549][ T6829] input: syz1 as /devices/virtual/input/input126
[ 2696.310201][ T5894] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[ 2696.982078][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2697.045197][ T5894] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[ 2697.061634][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2697.082395][ T5894] usb 2-1: config 0 descriptor??
[ 2697.322453][ T6850] netlink: 'syz.0.9269': attribute type 1 has an invalid length.
[ 2697.410564][ T6850] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9269'.
[ 2697.535658][ T5894] lg-g15 0003:046D:C222.007E: unbalanced delimiter at end of report description
[ 2697.552335][ T5894] lg-g15 0003:046D:C222.007E: probe with driver lg-g15 failed with error -22
[ 2697.625043][ T2383] Bluetooth: hci5: SCO packet for unknown connection handle 201
[ 2697.770358][ T6085] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[ 2698.051656][ T6085] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2698.052978][ T6861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9273'.
[ 2698.078452][ T6861] veth0_macvtap: left promiscuous mode
[ 2698.083987][ T6085] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2698.098940][ T6832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2698.111419][ T6832] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2698.119512][ T6085] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 2698.140732][ T6085] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2698.156909][ T6085] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2698.166222][ T9030] usb 2-1: USB disconnect, device number 60
[ 2698.200683][ T6085] usb 3-1: config 0 descriptor??
[ 2698.380237][ T5894] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[ 2698.597457][ T6871] JFS: discard option not supported on device
[ 2698.604501][ T6871] Mount JFS Failure: -22
[ 2698.608821][ T6871] jfs_mount failed w/return code = -22
[ 2698.740796][ T6873] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2698.748648][ T6873] F2FS-fs (loop11): Can't find valid F2FS filesystem in 1th superblock
[ 2698.757281][ T6873] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2698.765185][ T6873] F2FS-fs (loop11): Can't find valid F2FS filesystem in 2th superblock
[ 2698.803540][ T5894] usb 1-1: device descriptor read/64, error -71
[ 2698.822077][ T6085] plantronics 0003:047F:FFFF.007F: unknown main item tag 0x0
[ 2698.858501][ T6085] plantronics 0003:047F:FFFF.007F: unknown main item tag 0x0
[ 2698.867632][ T6085] plantronics 0003:047F:FFFF.007F: unknown main item tag 0x0
[ 2698.905581][ T6085] plantronics 0003:047F:FFFF.007F: unknown main item tag 0x0
[ 2698.948954][ T6085] plantronics 0003:047F:FFFF.007F: unknown main item tag 0x0
[ 2699.103311][ T5894] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[ 2699.122081][ T6085] plantronics 0003:047F:FFFF.007F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[ 2699.167324][ T6085] usb 3-1: USB disconnect, device number 52
[ 2699.240252][ T2383] Bluetooth: hci2: command 0x0405 tx timeout
[ 2699.327342][ T6877] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9277'.
[ 2699.339259][ T5894] usb 1-1: device descriptor read/64, error -71
[ 2699.380551][ T6879] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9277'.
[ 2699.500085][ T5894] usb usb1-port1: attempt power cycle
[ 2699.591937][ T6879] bond15: (slave wlan0): Releasing active interface
[ 2699.671805][ T6874] fido_id[6874]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[ 2700.136682][ T6886] input: syz1 as /devices/virtual/input/input127
[ 2700.210289][ T5894] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[ 2700.260780][ T5894] usb 1-1: device descriptor read/8, error -71
[ 2700.879079][ T5894] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[ 2700.941389][ T5894] usb 1-1: device descriptor read/8, error -71
[ 2701.096631][ T6900] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9281'.
[ 2701.105418][ T5894] usb usb1-port1: unable to enumerate USB device
[ 2702.099027][ T6085] hid-generic 07FF:0004:0009.0080: unknown main item tag 0x0
[ 2702.278769][ T6915] netlink: 'syz.0.9285': attribute type 1 has an invalid length.
[ 2702.287661][ T6909] netlink: 'syz.2.9283': attribute type 1 has an invalid length.
[ 2702.314653][ T6909] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9283'.
[ 2702.347008][ T6916] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9285'.
[ 2702.615052][ T6085] hid-generic 07FF:0004:0009.0080: unknown main item tag 0x0
[ 2702.623324][ T6085] hid-generic 07FF:0004:0009.0080: unknown main item tag 0x0
[ 2702.632170][ T6085] hid-generic 07FF:0004:0009.0080: hidraw0: <UNKNOWN> HID v0.04 Device [syz1] on syz1
[ 2702.696627][ T6925] fido_id[6925]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 2702.759013][ T6915] 8021q: adding VLAN 0 to HW filter on device bond12
[ 2704.176282][ T6937] netlink: 'syz.2.9289': attribute type 1 has an invalid length.
[ 2704.231285][ T6939] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9289'.
[ 2704.358863][ T6937] 8021q: adding VLAN 0 to HW filter on device bond2
[ 2704.518525][ T6940] bond1: (slave wlan0): Releasing active interface
[ 2704.564578][ T6940] bond2: (slave wlan0): Enslaving as an active interface with a down link
[ 2706.053794][ T6947] input: syz1 as /devices/virtual/input/input128
[ 2707.364897][ T6953] FAULT_INJECTION: forcing a failure.
[ 2707.364897][ T6953] name failslab, interval 1, probability 0, space 0, times 0
[ 2707.378191][ T6953] CPU: 0 UID: 0 PID: 6953 Comm: syz.0.9294 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2707.378218][ T6953] Tainted: [L]=SOFTLOCKUP
[ 2707.378224][ T6953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2707.378234][ T6953] Call Trace:
[ 2707.378240][ T6953]  <TASK>
[ 2707.378247][ T6953]  dump_stack_lvl+0x16c/0x1f0
[ 2707.378273][ T6953]  should_fail_ex+0x512/0x640
[ 2707.378297][ T6953]  ? __kmalloc_cache_noprof+0x5f/0x800
[ 2707.378325][ T6953]  should_failslab+0xc2/0x120
[ 2707.378347][ T6953]  __kmalloc_cache_noprof+0x80/0x800
[ 2707.378373][ T6953]  ? nsim_bpf+0x5b6/0xf20
[ 2707.378398][ T6953]  ? nsim_bpf+0x5b6/0xf20
[ 2707.378417][ T6953]  nsim_bpf+0x5b6/0xf20
[ 2707.378442][ T6953]  bpf_map_offload_ndo+0x12c/0x1b0
[ 2707.378468][ T6953]  ? __pfx_bpf_map_offload_ndo+0x10/0x10
[ 2707.378501][ T6953]  bpf_map_offload_map_alloc+0x2a5/0x7d0
[ 2707.378520][ T6953]  ? __pfx_bpf_map_offload_map_mem_usage+0x10/0x10
[ 2707.378539][ T6953]  map_create+0x65c/0x2a10
[ 2707.378568][ T6953]  ? avc_has_perm+0x144/0x1f0
[ 2707.378596][ T6953]  ? __pfx_map_create+0x10/0x10
[ 2707.378614][ T6953]  ? __might_fault+0xe3/0x190
[ 2707.378629][ T6953]  ? __might_fault+0xe3/0x190
[ 2707.378642][ T6953]  ? __might_fault+0x13b/0x190
[ 2707.378662][ T6953]  ? selinux_bpf+0xdd/0x130
[ 2707.378691][ T6953]  __sys_bpf+0x3d9d/0x4980
[ 2707.378716][ T6953]  ? __pfx___sys_bpf+0x10/0x10
[ 2707.378739][ T6953]  ? find_held_lock+0x2b/0x80
[ 2707.378770][ T6953]  ? find_held_lock+0x2b/0x80
[ 2707.378799][ T6953]  ? __mutex_unlock_slowpath+0x161/0x790
[ 2707.378835][ T6953]  ? fput+0x70/0xf0
[ 2707.378849][ T6953]  ? ksys_write+0x1ac/0x250
[ 2707.378866][ T6953]  ? __pfx_ksys_write+0x10/0x10
[ 2707.378887][ T6953]  __x64_sys_bpf+0x78/0xc0
[ 2707.378909][ T6953]  ? lockdep_hardirqs_on+0x7c/0x110
[ 2707.378928][ T6953]  do_syscall_64+0xcd/0xf80
[ 2707.378950][ T6953]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2707.378967][ T6953] RIP: 0033:0x7fe82038f749
[ 2707.378980][ T6953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2707.378994][ T6953] RSP: 002b:00007fe8211c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 2707.379010][ T6953] RAX: ffffffffffffffda RBX: 00007fe8205e5fa0 RCX: 00007fe82038f749
[ 2707.379021][ T6953] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 0000000000000000
[ 2707.379031][ T6953] RBP: 00007fe8211c9090 R08: 0000000000000000 R09: 0000000000000000
[ 2707.379041][ T6953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2707.379051][ T6953] R13: 00007fe8205e6038 R14: 00007fe8205e5fa0 R15: 00007fff282f9428
[ 2707.379076][ T6953]  </TASK>
[ 2708.828416][ T6968] netlink: 88 bytes leftover after parsing attributes in process `syz.1.9296'.
[ 2708.947605][ T6970] netlink: 'syz.0.9297': attribute type 1 has an invalid length.
[ 2709.070364][ T6972] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9297'.
[ 2709.121218][ T6970] 8021q: adding VLAN 0 to HW filter on device bond13
[ 2709.272381][ T6970] bond13: (slave wlan0): Enslaving as an active interface with a down link
[ 2710.039581][ T9030] hid-generic 07FF:0004:0009.0081: unknown main item tag 0x0
[ 2710.173372][ T9030] hid-generic 07FF:0004:0009.0081: unknown main item tag 0x0
[ 2710.259489][ T9030] hid-generic 07FF:0004:0009.0081: unknown main item tag 0x0
[ 2710.306893][ T9030] hid-generic 07FF:0004:0009.0081: hidraw0: <UNKNOWN> HID v0.04 Device [syz1] on syz1
[ 2710.524538][   T30] audit: type=1400 audit(1766163983.469:1061): avc:  denied  { append } for  pid=6995 comm="syz.0.9304" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[ 2710.630192][ T9030] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[ 2710.789495][ T9030] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 2710.836584][ T9030] usb 3-1: config 0 has an invalid interface number: 144 but max is 1
[ 2710.844945][ T9030] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2710.866774][ T9030] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 2710.877815][ T9030] usb 3-1: config 0 has no interface number 0
[ 2710.888214][ T9030] usb 3-1: config 0 interface 144 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 13
[ 2710.903442][ T9030] usb 3-1: config 0 interface 144 has no altsetting 0
[ 2710.957600][ T9030] usb 3-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=d0.ae
[ 2710.968248][ T9030] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2710.978931][ T9030] usb 3-1: Product: syz
[ 2710.984282][ T9030] usb 3-1: Manufacturer: syz
[ 2710.989286][ T9030] usb 3-1: SerialNumber: syz
[ 2711.144964][ T9030] usb 3-1: config 0 descriptor??
[ 2711.173119][ T9030] ims_pcu 3-1:0.144: Zero length descriptor
[ 2711.179062][ T9030] ims_pcu 3-1:0.144: probe with driver ims_pcu failed with error -22
[ 2712.490920][ T7011] netlink: 'syz.4.9308': attribute type 1 has an invalid length.
[ 2712.571555][ T7011] 8021q: adding VLAN 0 to HW filter on device bond11
[ 2712.679771][ T7011] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9308'.
[ 2712.706466][ T3651] usb 3-1: USB disconnect, device number 53
[ 2712.941417][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[ 2715.223827][ T7035] netlink: 'syz.2.9313': attribute type 1 has an invalid length.
[ 2715.285950][ T7035] netlink: 96 bytes leftover after parsing attributes in process `syz.2.9313'.
[ 2715.309368][ T7035] netlink: 1 bytes leftover after parsing attributes in process `syz.2.9313'.
[ 2715.352390][ T7035] netlink: 658 bytes leftover after parsing attributes in process `syz.2.9313'.
[ 2715.670433][ T6804] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[ 2716.082155][ T6804] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2716.107208][ T6804] usb 1-1: config 0 interface 0 has no altsetting 0
[ 2716.139158][ T6804] usb 1-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00
[ 2716.158787][ T6804] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2716.243146][ T6804] usb 1-1: config 0 descriptor??
[ 2717.089720][ T7059] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7059 comm=syz.4.9322
[ 2717.388530][ T7062] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9314'.
[ 2717.452538][ T7065] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9314'.
[ 2717.976024][ T6804] usbhid 1-1:0.0: can't add hid device: -71
[ 2717.987132][ T6804] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 2717.997383][ T6804] usb 1-1: USB disconnect, device number 10
[ 2718.024822][   T30] audit: type=1400 audit(1766163990.969:1062): avc:  denied  { connect } for  pid=7070 comm="syz.4.9324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[ 2718.051869][ T7069] netlink: 'syz.5.9323': attribute type 1 has an invalid length.
[ 2718.116226][ T7069] 8021q: adding VLAN 0 to HW filter on device bond25
[ 2718.127139][ T7075] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9323'.
[ 2718.224837][ T7069] bond25: (slave wlan0): Enslaving as an active interface with a down link
[ 2718.495130][ T7089] JFS: discard option not supported on device
[ 2718.503096][ T7089] Mount JFS Failure: -22
[ 2718.507372][ T7089] jfs_mount failed w/return code = -22
[ 2718.945401][ T7091] netlink: 'syz.1.9328': attribute type 1 has an invalid length.
[ 2718.953243][ T7091] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9328'.
[ 2719.431662][ T7099] netlink: 'syz.4.9332': attribute type 2 has an invalid length.
[ 2720.180680][ T6804] usb 2-1: new full-speed USB device number 61 using dummy_hcd
[ 2720.188361][   T30] audit: type=1326 audit(1766163993.119:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7116 comm="syz.5.9339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763978f749 code=0x7ffc0000
[ 2720.225991][ T7120] input: syz1 as /devices/virtual/input/input129
[ 2720.252870][   T30] audit: type=1326 audit(1766163993.129:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7116 comm="syz.5.9339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763978f749 code=0x7ffc0000
[ 2720.343442][   T30] audit: type=1326 audit(1766163993.169:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7116 comm="syz.5.9339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f763978f749 code=0x7ffc0000
[ 2720.547000][   T30] audit: type=1326 audit(1766163993.169:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7116 comm="syz.5.9339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763978f749 code=0x7ffc0000
[ 2720.570704][   T30] audit: type=1326 audit(1766163993.169:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7116 comm="syz.5.9339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763978f749 code=0x7ffc0000
[ 2720.615971][ T6804] usb 2-1: config 0 has an invalid interface number: 41 but max is 0
[ 2720.625498][ T6804] usb 2-1: config 0 has no interface number 0
[ 2720.803926][ T7128] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2720.811851][ T7128] F2FS-fs (loop11): Can't find valid F2FS filesystem in 1th superblock
[ 2720.820215][ T7128] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2720.828018][ T7128] F2FS-fs (loop11): Can't find valid F2FS filesystem in 2th superblock
[ 2720.843664][ T7128] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9341'.
[ 2721.075753][ T7127] JFS: discard option not supported on device
[ 2721.082199][ T7127] Mount JFS Failure: -22
[ 2721.086466][ T7127] jfs_mount failed w/return code = -22
[ 2721.474234][   T30] audit: type=1326 audit(1766163993.169:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7116 comm="syz.5.9339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f763978f749 code=0x7ffc0000
[ 2721.498284][ T6804] usb 2-1: config 0 interface 41 has no altsetting 0
[ 2721.505345][   T30] audit: type=1326 audit(1766163993.169:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7116 comm="syz.5.9339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763978f749 code=0x7ffc0000
[ 2721.529019][   T30] audit: type=1326 audit(1766163993.169:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7116 comm="syz.5.9339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763978f749 code=0x7ffc0000
[ 2721.559511][   T30] audit: type=1326 audit(1766163993.169:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7116 comm="syz.5.9339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f763978f749 code=0x7ffc0000
[ 2721.591726][ T6804] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 2721.612334][ T6804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2721.637124][ T6804] usb 2-1: Product: syz
[ 2721.652521][ T6804] usb 2-1: Manufacturer: syz
[ 2721.669949][ T6804] usb 2-1: SerialNumber: syz
[ 2721.693619][ T6804] usb 2-1: config 0 descriptor??
[ 2722.047555][T26203] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[ 2722.128457][ T7155] overlayfs: failed to resolve './file0': -2
[ 2722.422655][T26203] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2722.438831][T26203] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2722.448945][T26203] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 2722.462084][T26203] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2722.471230][T26203] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2722.488946][T26203] usb 3-1: config 0 descriptor??
[ 2722.567078][ T7159] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7159 comm=syz.4.9353
[ 2722.660950][ T6804] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[ 2723.030063][ T7162] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9354'.
[ 2723.092697][ T7164] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9354'.
[ 2723.140995][T26203] plantronics 0003:047F:FFFF.0082: unknown main item tag 0x0
[ 2723.148486][T26203] plantronics 0003:047F:FFFF.0082: unknown main item tag 0x0
[ 2723.233640][ T7164] bond13: (slave wlan0): Releasing active interface
[ 2723.249133][T26203] plantronics 0003:047F:FFFF.0082: unknown main item tag 0x0
[ 2723.256658][T26203] plantronics 0003:047F:FFFF.0082: unknown main item tag 0x0
[ 2723.264976][T26203] plantronics 0003:047F:FFFF.0082: unknown main item tag 0x0
[ 2723.280846][T26203] plantronics 0003:047F:FFFF.0082: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[ 2723.497950][ T7171] input: syz1 as /devices/virtual/input/input130
[ 2723.986271][ T6804] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9
[ 2724.107894][ T3651] usb 3-1: USB disconnect, device number 54
[ 2724.410522][ T6804] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9
[ 2724.426832][ T6804] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71
[ 2724.441576][ T6804] usb 2-1: USB disconnect, device number 61
[ 2724.486895][ T7168] fido_id[7168]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[ 2724.850461][ T6218] Bluetooth: hci3: ISO packet for unknown connection handle 0
[ 2727.208574][ T7202] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7202 comm=syz.0.9361
[ 2727.698527][ T7206] overlayfs: failed to resolve './file0': -2
[ 2729.653736][ T7221] netlink: 'syz.1.9367': attribute type 1 has an invalid length.
[ 2729.668218][ T7221] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9367'.
[ 2730.331241][ T7228] FAULT_INJECTION: forcing a failure.
[ 2730.331241][ T7228] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2730.469766][ T7228] CPU: 1 UID: 0 PID: 7228 Comm: syz.4.9369 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2730.469795][ T7228] Tainted: [L]=SOFTLOCKUP
[ 2730.469801][ T7228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2730.469812][ T7228] Call Trace:
[ 2730.469818][ T7228]  <TASK>
[ 2730.469826][ T7228]  dump_stack_lvl+0x16c/0x1f0
[ 2730.469853][ T7228]  should_fail_ex+0x512/0x640
[ 2730.469884][ T7228]  strncpy_from_user+0x3b/0x2e0
[ 2730.469911][ T7228]  getname_flags.part.0+0x8f/0x550
[ 2730.469933][ T7228]  getname_flags+0x93/0xf0
[ 2730.469956][ T7228]  do_sys_openat2+0xb9/0x290
[ 2730.469973][ T7228]  ? __pfx_do_sys_openat2+0x10/0x10
[ 2730.469993][ T7228]  ? rep_movs_alternative+0x33/0x90
[ 2730.470024][ T7228]  __do_sys_openat2+0x1c0/0x2d0
[ 2730.470041][ T7228]  ? __pfx___do_sys_openat2+0x10/0x10
[ 2730.470073][ T7228]  do_syscall_64+0xcd/0xf80
[ 2730.470099][ T7228]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2730.470114][ T7228] RIP: 0033:0x7efe5178f749
[ 2730.470127][ T7228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2730.470142][ T7228] RSP: 002b:00007efe4f9cd038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b5
[ 2730.470159][ T7228] RAX: ffffffffffffffda RBX: 00007efe519e6090 RCX: 00007efe5178f749
[ 2730.470169][ T7228] RDX: 0000200000000140 RSI: 0000200000000000 RDI: ffffffffffffff9c
[ 2730.470180][ T7228] RBP: 00007efe4f9cd090 R08: 0000000000000000 R09: 0000000000000000
[ 2730.470190][ T7228] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001
[ 2730.470200][ T7228] R13: 00007efe519e6128 R14: 00007efe519e6090 R15: 00007ffc21d2fea8
[ 2730.470226][ T7228]  </TASK>
[ 2730.641752][ T7231] netlink: 'syz.2.9368': attribute type 1 has an invalid length.
[ 2730.650342][ T7231] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9368'.
[ 2732.539450][ T7231] bond2: (slave wlan0): Releasing active interface
[ 2733.311166][ T7252] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9376'.
[ 2733.500013][T26470] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[ 2733.510985][ T7246] input: syz1 as /devices/virtual/input/input131
[ 2733.732158][T26470] usb 2-1: Using ep0 maxpacket: 16
[ 2733.762061][T26470] usb 2-1: config 5 has an invalid interface number: 164 but max is 1
[ 2733.912411][ T7260] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7260 comm=syz.0.9365
[ 2733.985296][T26470] usb 2-1: config 5 contains an unexpected descriptor of type 0x2, skipping
[ 2733.994387][T26470] usb 2-1: config 5 has an invalid interface number: 121 but max is 1
[ 2734.007863][T26470] usb 2-1: config 5 has no interface number 0
[ 2734.046089][T26470] usb 2-1: config 5 has no interface number 1
[ 2734.060176][T26470] usb 2-1: config 5 interface 121 altsetting 21 endpoint 0x2 has an invalid bInterval 130, changing to 7
[ 2734.071887][T26470] usb 2-1: config 5 interface 121 altsetting 21 has an invalid descriptor for endpoint zero, skipping
[ 2734.083135][T26470] usb 2-1: config 5 interface 121 altsetting 21 has an invalid descriptor for endpoint zero, skipping
[ 2734.097066][T26470] usb 2-1: config 5 interface 121 altsetting 21 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[ 2734.108572][T26470] usb 2-1: config 5 interface 121 altsetting 21 has an invalid descriptor for endpoint zero, skipping
[ 2734.160894][ T7267] netlink: 'syz.4.9378': attribute type 1 has an invalid length.
[ 2734.169616][ T7267] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9378'.
[ 2734.249039][T26470] usb 2-1: config 5 interface 121 altsetting 21 has an invalid descriptor for endpoint zero, skipping
[ 2734.368883][T26470] usb 2-1: config 5 interface 121 altsetting 21 has 7 endpoint descriptors, different from the interface descriptor's value: 6
[ 2734.436918][T26470] usb 2-1: config 5 interface 164 has no altsetting 0
[ 2734.498030][T26470] usb 2-1: config 5 interface 121 has no altsetting 0
[ 2734.661713][T26470] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=d1.f9
[ 2734.755125][T26470] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2734.844963][T26470] usb 2-1: Product: syz
[ 2734.881953][T26470] usb 2-1: Manufacturer: syz
[ 2734.935234][ T6804] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[ 2734.953400][T26470] usb 2-1: SerialNumber: syz
[ 2735.300462][ T7241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2735.342459][ T7241] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2735.391855][ T7241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2735.414336][ T7241] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2735.436882][T26470] uvcvideo 2-1:5.164: Found UVC 0.00 device syz (046d:08c1)
[ 2735.464634][T26470] uvcvideo 2-1:5.164: No valid video chain found.
[ 2735.859791][ T6085] IPVS: starting estimator thread 0...
[ 2735.866074][ T7281] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20004
[ 2735.877394][T26470] usb 2-1: USB disconnect, device number 62
[ 2735.896897][ T7281] IPVS: sh: FWM 3 0x00000003 - no destination available
[ 2735.920668][    C0] IPVS: sh: FWM 3 0x00000003 - no destination available
[ 2735.984619][ T7283] IPVS: using max 50 ests per chain, 120000 per kthread
[ 2736.310200][   T30] kauditd_printk_skb: 5 callbacks suppressed
[ 2736.310237][   T30] audit: type=1400 audit(1766164009.229:1077): avc:  denied  { mount } for  pid=7288 comm="syz.1.9384" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[ 2736.611657][ T7297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9384'.
[ 2736.621128][ T7297] netlink: 'syz.1.9384': attribute type 5 has an invalid length.
[ 2736.628875][ T7297] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9384'.
[ 2736.674651][ T7297] geneve2: entered promiscuous mode
[ 2736.679961][ T7297] geneve2: entered allmulticast mode
[ 2736.711009][ T2268] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[ 2736.744338][   T30] audit: type=1400 audit(1766164009.539:1078): avc:  denied  { watch_sb } for  pid=7288 comm="syz.1.9384" path="/576/file0" dev="tmpfs" ino=3059 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[ 2736.775133][ T2268] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[ 2736.846921][ T7293] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7293 comm=syz.4.9385
[ 2737.102528][ T2268] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[ 2737.127515][ T2268] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[ 2737.913821][T25973] usb 5-1: new high-speed USB device number 91 using dummy_hcd
[ 2738.721817][T25973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2738.731891][T25973] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[ 2738.741283][T25973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2738.771863][T25973] usb 5-1: config 0 descriptor??
[ 2739.425019][ T7329] input: syz1 as /devices/virtual/input/input132
[ 2739.629484][T25973] lg-g15 0003:046D:C222.0083: unbalanced delimiter at end of report description
[ 2739.786062][T25973] lg-g15 0003:046D:C222.0083: probe with driver lg-g15 failed with error -22
[ 2739.861668][ T7316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2739.876966][ T7316] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2739.960818][ T9223] usb 5-1: USB disconnect, device number 91
[ 2741.090748][   T24] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[ 2741.205610][ T7365] netlink: 'syz.1.9405': attribute type 1 has an invalid length.
[ 2741.214457][ T7365] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9405'.
[ 2741.240202][   T24] usb 3-1: Using ep0 maxpacket: 8
[ 2741.246982][   T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13
[ 2741.258931][   T24] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[ 2741.268624][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2741.277696][   T24] usb 3-1: Product: syz
[ 2741.285895][   T24] usb 3-1: Manufacturer: syz
[ 2741.293813][   T24] usb 3-1: SerialNumber: syz
[ 2741.304967][   T24] usb 3-1: config 0 descriptor??
[ 2741.322786][   T24] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[ 2741.411651][T25973] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[ 2741.620230][T25973] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[ 2741.642478][T25973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2741.664820][T25973] usb 1-1: Product: syz
[ 2741.679717][T25973] usb 1-1: Manufacturer: syz
[ 2741.718377][T25973] usb 1-1: SerialNumber: syz
[ 2741.737484][T25973] usb 1-1: config 0 descriptor??
[ 2741.842090][   T24] gspca_zc3xx: reg_w_i err -110
[ 2741.983996][ T7364] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9406'.
[ 2741.995238][ T7364] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9406'.
[ 2742.011025][ T7364] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9406'.
[ 2742.060391][ T7364] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9406'.
[ 2742.077675][T25973] cx82310_eth 1-1:0.0: probe with driver cx82310_eth failed with error -22
[ 2742.101029][T25973] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19!
[ 2742.115688][T25973] usb 1-1: USB disconnect, device number 12
[ 2742.149079][ T7376] cgroup: subsys name conflicts with all
[ 2742.440151][   T24] gspca_zc3xx: Unknown sensor - set to TAS5130C
[ 2742.446596][   T24] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -110
[ 2742.531606][ T7382] input: syz1 as /devices/virtual/input/input133
[ 2742.541302][T25973] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[ 2742.826393][T25973] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2742.874294][T25973] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[ 2742.896131][T25973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2742.898839][ T9223] usb 3-1: USB disconnect, device number 55
[ 2742.935755][T25973] usb 2-1: config 0 descriptor??
[ 2743.048523][ T6218] Bluetooth: hci4: Received unexpected HCI Event 0x00
[ 2743.230687][ T6218] Bluetooth: hci2: command 0x0405 tx timeout
[ 2743.308919][ T7389] netlink: 27 bytes leftover after parsing attributes in process `syz.4.9414'.
[ 2743.378277][T25973] lg-g15 0003:046D:C222.0084: unbalanced delimiter at end of report description
[ 2743.399692][T25973] lg-g15 0003:046D:C222.0084: probe with driver lg-g15 failed with error -22
[ 2745.304594][ T7378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2746.156352][ T7378] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2746.247296][ T6804] usb 2-1: USB disconnect, device number 63
[ 2746.672870][ T7413] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7413 comm=syz.4.9419
[ 2748.025246][ T7433] input: syz1 as /devices/virtual/input/input134
[ 2748.054854][ T7434] netlink: 'syz.1.9425': attribute type 1 has an invalid length.
[ 2748.211486][ T7439] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9425'.
[ 2748.263583][ T7434] 8021q: adding VLAN 0 to HW filter on device bond16
[ 2748.525446][ T7445] JFS: discard option not supported on device
[ 2748.533567][ T7445] Mount JFS Failure: -22
[ 2748.537878][ T7445] jfs_mount failed w/return code = -22
[ 2748.936506][ T7429] bond16: (slave wlan0): Enslaving as an active interface with a down link
[ 2749.574565][ T7465] netlink: 'syz.4.9434': attribute type 1 has an invalid length.
[ 2749.644170][ T7467] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9434'.
[ 2749.711273][T26203] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[ 2749.869760][ T7465] 8021q: adding VLAN 0 to HW filter on device bond12
[ 2749.916468][T26203] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2750.025236][ T7468] bond12: (slave wlan0): Enslaving as an active interface with a down link
[ 2750.050499][T26203] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[ 2750.451709][T26203] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2750.462103][T26203] usb 1-1: config 0 descriptor??
[ 2750.681610][ T7476] netlink: 'syz.1.9435': attribute type 1 has an invalid length.
[ 2750.747220][ T7473] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9435'.
[ 2750.755866][ T7476] 8021q: adding VLAN 0 to HW filter on device bond17
[ 2750.826937][ T7473] bond16: (slave wlan0): Releasing active interface
[ 2750.841155][ T7481] input: syz1 as /devices/virtual/input/input135
[ 2750.873454][T26203] lg-g15 0003:046D:C222.0085: unbalanced delimiter at end of report description
[ 2751.007317][ T7473] bond17: (slave wlan0): Enslaving as an active interface with a down link
[ 2751.951343][T26203] lg-g15 0003:046D:C222.0085: probe with driver lg-g15 failed with error -22
[ 2752.103797][ T7488] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-ç/": -EINTR
[ 2752.384663][ T7462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2752.538151][T26203] usb 5-1: new full-speed USB device number 92 using dummy_hcd
[ 2752.857391][    C0] raw-gadget.1 gadget.4: ignoring, device is not running
[ 2752.871932][ T7462] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2752.911117][T25973] usb 1-1: USB disconnect, device number 13
[ 2752.992637][T26203] usb 5-1: device descriptor read/64, error -32
[ 2753.277296][T26203] usb 5-1: new full-speed USB device number 93 using dummy_hcd
[ 2753.840351][ T7504] nbd1: detected capacity change from 0 to 63
[ 2753.861668][T26203] usb 5-1: config 0 has an invalid interface number: 41 but max is 0
[ 2753.895885][T26203] usb 5-1: config 0 has no interface number 0
[ 2753.904696][T26203] usb 5-1: config 0 interface 41 has no altsetting 0
[ 2753.924228][T26203] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 2753.933426][T26203] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2753.941919][T26203] usb 5-1: Product: syz
[ 2753.946326][T26203] usb 5-1: Manufacturer: syz
[ 2753.956943][T26203] usb 5-1: SerialNumber: syz
[ 2753.974203][T26203] usb 5-1: config 0 descriptor??
[ 2754.058598][T25973] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[ 2754.065675][ T7514] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7514 comm=syz.0.9445
[ 2754.379719][ T2383] block nbd1: Receive control failed (result -104)
[ 2754.462526][T25973] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2754.472858][T25973] usb 3-1: config 0 interface 0 has no altsetting 0
[ 2754.479477][T25973] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00
[ 2754.488664][T25973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2754.618284][T25973] usb 3-1: config 0 descriptor??
[ 2755.061003][T26203] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[ 2755.116296][    C1] raw-gadget.0 gadget.2: ignoring, device is not running
[ 2755.123756][    C1] raw-gadget.0 gadget.2: ignoring, device is not running
[ 2755.131224][    C1] raw-gadget.0 gadget.2: ignoring, device is not running
[ 2755.138487][T25973] usbhid 3-1:0.0: can't add hid device: -32
[ 2755.158671][T25973] usbhid 3-1:0.0: probe with driver usbhid failed with error -32
[ 2755.250591][ T7521] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9447'.
[ 2755.347587][ T7523] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9447'.
[ 2755.428990][T25973] usb 3-1: USB disconnect, device number 56
[ 2756.196609][ T7530] netlink: 'syz.2.9449': attribute type 1 has an invalid length.
[ 2756.226238][ T7530] 8021q: adding VLAN 0 to HW filter on device bond3
[ 2756.238174][ T7530] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9449'.
[ 2756.271395][ T7530] bond3: (slave wlan0): Enslaving as an active interface with a down link
[ 2756.382553][T26203] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9
[ 2756.521734][T26203] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9
[ 2756.536407][T26203] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71
[ 2756.553264][T26203] usb 5-1: USB disconnect, device number 93
[ 2757.110307][T25973] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[ 2758.074274][T25973] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 2758.089470][T25973] usb 3-1: config 0 has an invalid interface number: 144 but max is 1
[ 2758.098033][T25973] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2758.167751][T25973] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 2758.177127][T25973] usb 3-1: config 0 has no interface number 0
[ 2758.785201][T25973] usb 3-1: config 0 interface 144 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 13
[ 2758.798432][T25973] usb 3-1: config 0 interface 144 has no altsetting 0
[ 2758.954131][T25973] usb 3-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=d0.ae
[ 2758.967223][T25973] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2758.986899][T25973] usb 3-1: Product: syz
[ 2758.998802][T25973] usb 3-1: Manufacturer: syz
[ 2758.998832][ T2383] Bluetooth: hci5: Received unexpected HCI Event 0x00
[ 2759.059316][T25973] usb 3-1: SerialNumber: syz
[ 2759.201024][T25973] usb 3-1: config 0 descriptor??
[ 2759.212210][ T7566] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7566 comm=syz.5.9460
[ 2759.406347][ T7571] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 0, id = 0
[ 2760.515641][T25973] ims_pcu 3-1:0.144: Missing CDC union descriptor
[ 2760.548983][T25973] ims_pcu 3-1:0.144: probe with driver ims_pcu failed with error -22
[ 2760.652691][T25973] usb 3-1: USB disconnect, device number 57
[ 2760.728470][ T7579] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9463'.
[ 2760.783759][ T7581] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9463'.
[ 2761.484740][ T2383] Bluetooth: hci4: ISO packet for unknown connection handle 0
[ 2762.168724][ T7581] bond3: (slave wlan0): Releasing active interface
[ 2762.530990][ T7597] input: syz1 as /devices/virtual/input/input136
[ 2763.255880][ T7607] netlink: 196 bytes leftover after parsing attributes in process `syz.2.9468'.
[ 2763.930176][T31020] usb 2-1: new full-speed USB device number 64 using dummy_hcd
[ 2764.042150][ T7610] netlink: 'syz.5.9470': attribute type 1 has an invalid length.
[ 2764.080516][ T7610] netlink: 96 bytes leftover after parsing attributes in process `syz.5.9470'.
[ 2764.089504][ T7610] netlink: 1 bytes leftover after parsing attributes in process `syz.5.9470'.
[ 2764.105128][T31020] usb 2-1: config 0 has an invalid interface number: 41 but max is 0
[ 2764.117592][ T7610] netlink: 658 bytes leftover after parsing attributes in process `syz.5.9470'.
[ 2764.127158][T31020] usb 2-1: config 0 has no interface number 0
[ 2764.133923][T31020] usb 2-1: config 0 interface 41 has no altsetting 0
[ 2764.148305][T31020] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 2764.174419][T31020] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2764.189502][T31020] usb 2-1: Product: syz
[ 2764.199070][T31020] usb 2-1: Manufacturer: syz
[ 2764.204947][T31020] usb 2-1: SerialNumber: syz
[ 2764.215373][T31020] usb 2-1: config 0 descriptor??
[ 2764.226066][ T7617] input: syz1 as /devices/virtual/input/input137
[ 2764.527108][ T7622] fuse: Unknown parameter 'C«¼U„‘ðºh€©Ä'
[ 2764.789211][ T7626] netlink: 72 bytes leftover after parsing attributes in process `syz.4.9474'.
[ 2764.883748][ T7613] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 2764.895183][ T7613] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2764.909682][ T7613] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2764.927475][ T7613] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 2764.947640][ T7613] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 2764.964320][ T7613] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 2765.052571][T31020] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[ 2765.513020][ T7636] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7636 comm=syz.4.9477
[ 2765.645446][   T30] audit: type=1400 audit(1766164038.589:1079): avc:  denied  { create } for  pid=7629 comm="syz.2.9475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[ 2765.657119][ T7640] netlink: 'syz.2.9475': attribute type 10 has an invalid length.
[ 2765.686539][ T7640] 8021q: adding VLAN 0 to HW filter on device team0
[ 2765.716740][   T30] audit: type=1400 audit(1766164038.659:1080): avc:  denied  { setopt } for  pid=7629 comm="syz.2.9475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[ 2765.753298][ T7640] bond0: (slave team0): Enslaving as an active interface with an up link
[ 2765.763126][ T9223] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[ 2765.824653][ T7645] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9478'.
[ 2765.884804][ T7647] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9478'.
[ 2765.920182][ T9223] usb 1-1: Using ep0 maxpacket: 8
[ 2766.049024][ T9223] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13
[ 2766.060037][ T9223] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[ 2766.227694][ T7629] delete_channel: no stack
[ 2766.303822][ T7648] bond12: (slave wlan0): Releasing active interface
[ 2766.327638][T31020] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9
[ 2766.637164][ T9223] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2766.645373][T31020] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9
[ 2766.656749][ T9223] usb 1-1: Product: syz
[ 2766.661154][ T9223] usb 1-1: Manufacturer: syz
[ 2766.665950][T31020] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71
[ 2766.674635][ T9223] usb 1-1: SerialNumber: syz
[ 2766.680840][ T9223] usb 1-1: config 0 descriptor??
[ 2766.687929][T31020] usb 2-1: USB disconnect, device number 64
[ 2766.699686][ T9223] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[ 2766.830176][ T2383] Bluetooth: hci3: command 0x0406 tx timeout
[ 2766.885825][   T30] audit: type=1400 audit(1766164039.829:1081): avc:  denied  { allowed } for  pid=7655 comm="syz.4.9480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[ 2766.920300][ T6218] Bluetooth: hci1: command 0x2016 tx timeout
[ 2766.926359][ T2383] Bluetooth: hci4: command 0x0406 tx timeout
[ 2767.048406][ T6218] Bluetooth: hci5: command 0x2016 tx timeout
[ 2767.054630][ T2383] Bluetooth: hci2: command 0x0405 tx timeout
[ 2767.078689][   T30] audit: type=1400 audit(1766164040.019:1082): avc:  denied  { read } for  pid=7660 comm="syz.1.9481" dev="nsfs" ino=4026532856 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 2767.115270][   T30] audit: type=1400 audit(1766164040.049:1083): avc:  denied  { open } for  pid=7660 comm="syz.1.9481" path="net:[4026532856]" dev="nsfs" ino=4026532856 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 2767.146096][ T7661] cgroup: subsys name conflicts with all
[ 2767.220526][ T9223] gspca_zc3xx: reg_w_i err -110
[ 2767.424878][ T7667] JFS: discard option not supported on device
[ 2767.432202][ T7667] Mount JFS Failure: -22
[ 2767.436504][ T7667] jfs_mount failed w/return code = -22
[ 2767.856591][ T9223] gspca_zc3xx: Unknown sensor - set to TAS5130C
[ 2767.870204][ T9223] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -110
[ 2767.939534][ T7671] mkiss: ax0: crc mode is auto.
[ 2768.933273][ T9223] usb 1-1: USB disconnect, device number 14
[ 2768.957125][ T7681] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9485'.
[ 2769.071591][ T2383] Bluetooth: hci2: command 0x0405 tx timeout
[ 2769.410601][ T7683] input: syz1 as /devices/virtual/input/input138
[ 2769.661315][ T7693] netlink: 'syz.0.9488': attribute type 1 has an invalid length.
[ 2769.669356][ T7693] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9488'.
[ 2769.834726][ T7696] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9489'.
[ 2770.923000][ T7702] netlink: 'syz.2.9490': attribute type 1 has an invalid length.
[ 2770.935789][ T7702] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9490'.
[ 2770.948362][ T7703] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9491'.
[ 2771.009721][ T7705] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9491'.
[ 2771.711362][ T6218] Bluetooth: hci2: command 0x0405 tx timeout
[ 2772.310302][ T9030] usb 5-1: new high-speed USB device number 94 using dummy_hcd
[ 2772.690170][ T9030] usb 5-1: Using ep0 maxpacket: 16
[ 2772.719807][ T9030] usb 5-1: config 5 has an invalid interface number: 164 but max is 1
[ 2772.732003][ T9030] usb 5-1: config 5 contains an unexpected descriptor of type 0x2, skipping
[ 2772.741484][ T9030] usb 5-1: config 5 has an invalid interface number: 121 but max is 1
[ 2772.750016][ T9030] usb 5-1: config 5 has no interface number 0
[ 2772.778534][ T7718] mkiss: ax0: crc mode is auto.
[ 2772.796360][ T9030] usb 5-1: config 5 has no interface number 1
[ 2772.809948][ T9030] usb 5-1: config 5 interface 121 altsetting 21 endpoint 0x2 has an invalid bInterval 130, changing to 7
[ 2772.849372][ T9030] usb 5-1: config 5 interface 121 altsetting 21 has an invalid descriptor for endpoint zero, skipping
[ 2772.885872][ T9030] usb 5-1: config 5 interface 121 altsetting 21 has an invalid descriptor for endpoint zero, skipping
[ 2772.940323][ T9030] usb 5-1: config 5 interface 121 altsetting 21 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[ 2773.460253][ T9030] usb 5-1: config 5 interface 121 altsetting 21 has an invalid descriptor for endpoint zero, skipping
[ 2773.503319][ T9030] usb 5-1: config 5 interface 121 altsetting 21 has an invalid descriptor for endpoint zero, skipping
[ 2773.540486][ T9030] usb 5-1: config 5 interface 121 altsetting 21 has 7 endpoint descriptors, different from the interface descriptor's value: 6
[ 2773.585495][ T7726] netlink: 72 bytes leftover after parsing attributes in process `syz.2.9498'.
[ 2774.217652][ T7724] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7724 comm=syz.5.9496
[ 2774.283816][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[ 2774.321312][ T9030] usb 5-1: config 5 interface 164 has no altsetting 0
[ 2774.338314][ T9030] usb 5-1: config 5 interface 121 has no altsetting 0
[ 2774.371977][ T9030] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=d1.f9
[ 2774.392236][ T9030] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2774.422370][ T9030] usb 5-1: Product: syz
[ 2774.440696][ T9030] usb 5-1: Manufacturer: syz
[ 2774.599155][ T7735] JFS: discard option not supported on device
[ 2774.606108][ T7735] Mount JFS Failure: -22
[ 2774.610573][ T7735] jfs_mount failed w/return code = -22
[ 2774.639841][ T9030] usb 5-1: SerialNumber: syz
[ 2775.028823][ T9030] usb 5-1: can't set config #5, error -71
[ 2775.045405][ T9030] usb 5-1: USB disconnect, device number 94
[ 2775.950275][ T7743] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7743 comm=syz.0.9502
[ 2776.302956][ T7739] input: syz1 as /devices/virtual/input/input139
[ 2776.483417][ T7747] cgroup: subsys name conflicts with all
[ 2776.886385][ T7760] cgroup: subsys name conflicts with all
[ 2776.961742][T25304] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[ 2777.160522][T25304] usb 3-1: Using ep0 maxpacket: 8
[ 2777.176392][T25304] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13
[ 2777.186410][ T2383] Bluetooth: hci1: ISO packet for unknown connection handle 0
[ 2777.408310][T25304] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[ 2777.428945][T25304] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2777.459560][T25304] usb 3-1: Product: syz
[ 2777.466714][T25304] usb 3-1: Manufacturer: syz
[ 2777.481887][T25304] usb 3-1: SerialNumber: syz
[ 2777.492062][T25304] usb 3-1: config 0 descriptor??
[ 2777.509466][T25304] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[ 2777.524244][ T7765] mkiss: ax0: crc mode is auto.
[ 2778.443765][ T7773] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2778.451541][ T7773] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[ 2778.459764][ T7773] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2778.467557][ T7773] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[ 2778.478829][ T7773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9509'.
[ 2778.518537][T25304] gspca_zc3xx: reg_w_i err -110
[ 2778.831092][ T7776] input: syz1 as /devices/virtual/input/input140
[ 2778.945558][ T6717] udevd[6717]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory
[ 2779.250975][T25304] gspca_zc3xx: Unknown sensor - set to TAS5130C
[ 2779.267586][ T7789] input: syz1 as /devices/virtual/input/input141
[ 2779.379802][T25304] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -110
[ 2779.704728][ T6218] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 2779.715196][ T6218] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2779.723998][ T6218] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2779.732213][ T6218] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2779.739807][ T6218] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2779.777415][T26203] usb 3-1: USB disconnect, device number 58
[ 2779.984281][ T7797] netlink: 72 bytes leftover after parsing attributes in process `syz.4.9516'.
[ 2780.000581][ T5878] syz_tun (unregistering): left allmulticast mode
[ 2780.416533][ T7805] input: syz1 as /devices/virtual/input/input142
[ 2780.668176][ T7790] chnl_net:caif_netlink_parms(): no params data found
[ 2780.784911][ T7790] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2780.810907][ T7790] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2780.818102][ T7790] bridge_slave_0: entered allmulticast mode
[ 2780.826690][ T7790] bridge_slave_0: entered promiscuous mode
[ 2780.847049][ T7790] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2780.854339][ T7790] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2780.862590][ T7790] bridge_slave_1: entered allmulticast mode
[ 2780.869301][ T7790] bridge_slave_1: entered promiscuous mode
[ 2780.899296][ T7790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2780.918416][ T7790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2780.953123][ T7790] team0: Port device team_slave_0 added
[ 2780.961369][ T7790] team0: Port device team_slave_1 added
[ 2780.990051][ T7790] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2780.997926][ T7790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2781.033051][ T7790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2781.052463][ T7790] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2781.059646][ T7790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2781.085797][ T7790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2781.149584][ T7790] hsr_slave_0: entered promiscuous mode
[ 2781.156630][ T7790] hsr_slave_1: entered promiscuous mode
[ 2781.163532][ T7790] debugfs: 'hsr0' already exists in 'hsr'
[ 2781.169322][ T7790] Cannot create hsr debugfs directory
[ 2781.319162][ T7816] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7816 comm=syz.2.9519
[ 2781.676721][ T7790] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2781.677454][ T7822] overlayfs: failed to resolve './file0': -2
[ 2781.717317][ T7790] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[ 2781.790879][ T6218] Bluetooth: hci0: command tx timeout
[ 2781.828248][ T7790] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2781.839318][ T7790] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[ 2782.037464][ T7790] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2782.058654][ T7790] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[ 2782.143266][   T24] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[ 2782.175345][ T7790] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2782.199210][ T7790] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[ 2782.300278][   T24] usb 1-1: Using ep0 maxpacket: 8
[ 2782.314319][   T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13
[ 2782.351918][   T24] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[ 2782.381497][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2782.405785][   T24] usb 1-1: Product: syz
[ 2782.417604][   T24] usb 1-1: Manufacturer: syz
[ 2782.432962][   T24] usb 1-1: SerialNumber: syz
[ 2782.438013][ T7790] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 2782.446782][   T24] usb 1-1: config 0 descriptor??
[ 2782.456383][ T7790] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 2782.468890][   T24] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[ 2782.477797][ T7790] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 2782.489862][ T7790] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 2782.567080][ T7790] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2782.588662][ T7790] 8021q: adding VLAN 0 to HW filter on device team0
[ 2782.606920][ T7261] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2782.614040][ T7261] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2782.684575][T32359] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2782.691758][T32359] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2782.991280][   T24] gspca_zc3xx: reg_w_i err -110
[ 2783.073640][ T7853] Bluetooth: MGMT ver 1.23
[ 2783.081186][ T6218] Bluetooth: hci5: unexpected event for opcode 0x0803
[ 2783.154144][ T7790] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2783.264396][ T7790] veth0_vlan: entered promiscuous mode
[ 2783.283975][ T7790] veth1_vlan: entered promiscuous mode
[ 2783.327848][ T7790] veth0_macvtap: entered promiscuous mode
[ 2783.346802][ T7790] veth1_macvtap: entered promiscuous mode
[ 2783.442087][ T7790] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2783.454403][ T7790] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2783.471279][ T4906] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2783.482151][ T4906] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2783.493010][ T4906] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2783.494433][ T7863] input: syz1 as /devices/virtual/input/input143
[ 2783.502371][ T4906] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2783.590399][   T24] gspca_zc3xx: Unknown sensor - set to TAS5130C
[ 2783.597682][   T24] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -110
[ 2783.631543][ T7668] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2783.657179][ T7668] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2783.697024][ T3477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2783.717167][ T3477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2783.749217][   T30] audit: type=1400 audit(1766164056.689:1084): avc:  denied  { mounton } for  pid=7790 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[ 2783.880427][ T2383] Bluetooth: hci0: command tx timeout
[ 2783.905043][   T25] block nbd1: Possible stuck request ffff888026440000: control (read@0,1024B). Runtime 30 seconds
[ 2783.919901][   T25] block nbd1: Possible stuck request ffff888026440200: control (read@1024,1024B). Runtime 30 seconds
[ 2783.931417][   T25] block nbd1: Possible stuck request ffff888026440400: control (read@2048,1024B). Runtime 30 seconds
[ 2783.942358][   T25] block nbd1: Possible stuck request ffff888026440600: control (read@3072,1024B). Runtime 30 seconds
[ 2783.996103][ T2383] Bluetooth: hci0: Received unexpected HCI Event 0x00
[ 2784.042459][ T7869] netlink: 'syz.2.9529': attribute type 1 has an invalid length.
[ 2784.050519][ T7869] netlink: 96 bytes leftover after parsing attributes in process `syz.2.9529'.
[ 2784.061028][ T7869] netlink: 1 bytes leftover after parsing attributes in process `syz.2.9529'.
[ 2784.069941][ T7869] netlink: 658 bytes leftover after parsing attributes in process `syz.2.9529'.
[ 2784.400129][ T7873] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7873 comm=syz.4.9530
[ 2784.899969][T26361] usb 1-1: USB disconnect, device number 15
[ 2785.161410][ T6218] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[ 2785.271698][T26361] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[ 2785.420229][T26361] usb 1-1: Using ep0 maxpacket: 16
[ 2785.428003][T26361] usb 1-1: config 5 has an invalid interface number: 164 but max is 1
[ 2785.436593][T26361] usb 1-1: config 5 contains an unexpected descriptor of type 0x2, skipping
[ 2785.445491][T26361] usb 1-1: config 5 has an invalid interface number: 121 but max is 1
[ 2785.453976][T26361] usb 1-1: config 5 has no interface number 0
[ 2785.460038][T26361] usb 1-1: config 5 has no interface number 1
[ 2785.466702][T26361] usb 1-1: config 5 interface 121 altsetting 21 endpoint 0x2 has an invalid bInterval 130, changing to 7
[ 2785.478416][T26361] usb 1-1: config 5 interface 121 altsetting 21 has an invalid descriptor for endpoint zero, skipping
[ 2785.489434][T26361] usb 1-1: config 5 interface 121 altsetting 21 has an invalid descriptor for endpoint zero, skipping
[ 2785.501357][T26361] usb 1-1: config 5 interface 121 altsetting 21 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[ 2785.513699][T26361] usb 1-1: config 5 interface 121 altsetting 21 has an invalid descriptor for endpoint zero, skipping
[ 2785.525362][T26361] usb 1-1: config 5 interface 121 altsetting 21 has an invalid descriptor for endpoint zero, skipping
[ 2785.536383][T26361] usb 1-1: config 5 interface 121 altsetting 21 has 7 endpoint descriptors, different from the interface descriptor's value: 6
[ 2785.549776][T26361] usb 1-1: config 5 interface 164 has no altsetting 0
[ 2785.556668][T26361] usb 1-1: config 5 interface 121 has no altsetting 0
[ 2785.567240][T26361] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=d1.f9
[ 2785.576532][T26361] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2785.584701][T26361] usb 1-1: Product: syz
[ 2785.588930][T26361] usb 1-1: Manufacturer: syz
[ 2785.593599][T26361] usb 1-1: SerialNumber: syz
[ 2785.803030][ T7879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2785.843567][ T7879] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2785.878237][ T7889] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2785.886103][ T7889] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[ 2785.894741][ T7889] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2785.902580][ T7889] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock
[ 2785.929930][ T7889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9535'.
[ 2785.963058][ T6218] Bluetooth: hci0: command 0x040f tx timeout
[ 2786.179087][ T7879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2786.208339][ T7879] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2786.253097][T26361] uvcvideo 1-1:5.164: Found UVC 0.00 device syz (046d:08c1)
[ 2786.350878][T26361] uvcvideo 1-1:5.164: No valid video chain found.
[ 2786.386870][T26361] usb 1-1: USB disconnect, device number 16
[ 2786.460234][T26203] usb 2-1: new full-speed USB device number 65 using dummy_hcd
[ 2786.600738][ T7894] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2786.606851][ T7894] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2786.614489][ T7894] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 2786.620617][ T7894] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 2786.628970][ T7894] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 2786.634967][ T7894] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 2786.642959][ T7894] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 2786.653187][ T7894] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 2786.701633][T26203] usb 2-1: config 0 has an invalid interface number: 41 but max is 0
[ 2786.709797][T26203] usb 2-1: config 0 has no interface number 0
[ 2786.716004][T26203] usb 2-1: config 0 interface 41 has no altsetting 0
[ 2786.724571][T26203] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 2786.733839][T26203] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2786.742040][T26203] usb 2-1: Product: syz
[ 2786.746257][T26203] usb 2-1: Manufacturer: syz
[ 2786.757745][T26203] usb 2-1: SerialNumber: syz
[ 2786.800296][ T7899] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2786.808062][ T7899] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[ 2786.817151][ T7899] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2786.825282][ T7899] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock
[ 2786.849839][ T7899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9538'.
[ 2786.899811][T26203] usb 2-1: config 0 descriptor??
[ 2788.400458][ T7915] netlink: 'syz.0.9542': attribute type 1 has an invalid length.
[ 2788.432007][ T7915] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9542'.
[ 2788.520168][ T6218] Bluetooth: hci1: command 0x2016 tx timeout
[ 2788.556565][T26203] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9
[ 2788.578381][T26203] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71
[ 2788.606941][T26203] usb 2-1: USB disconnect, device number 65
[ 2788.690371][ T6218] Bluetooth: hci4: command 0x0406 tx timeout
[ 2788.694065][ T3768] Bluetooth: hci0: command 0x040f tx timeout
[ 2788.696501][ T6218] Bluetooth: hci2: command 0x0405 tx timeout
[ 2788.702665][ T2383] Bluetooth: hci5: command 0x2016 tx timeout
[ 2788.722515][ T6804] usb 3-1: new full-speed USB device number 59 using dummy_hcd
[ 2788.751087][ T7922] FAULT_INJECTION: forcing a failure.
[ 2788.751087][ T7922] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2788.764371][ T7922] CPU: 0 UID: 0 PID: 7922 Comm: syz.4.9544 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2788.764397][ T7922] Tainted: [L]=SOFTLOCKUP
[ 2788.764403][ T7922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2788.764413][ T7922] Call Trace:
[ 2788.764419][ T7922]  <TASK>
[ 2788.764426][ T7922]  dump_stack_lvl+0x16c/0x1f0
[ 2788.764456][ T7922]  should_fail_ex+0x512/0x640
[ 2788.764485][ T7922]  _copy_from_user+0x2e/0xd0
[ 2788.764509][ T7922]  copy_msghdr_from_user+0x98/0x160
[ 2788.764527][ T7922]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 2788.764556][ T7922]  ___sys_sendmsg+0xfe/0x1d0
[ 2788.764574][ T7922]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2788.764620][ T7922]  __sys_sendmsg+0x16d/0x220
[ 2788.764636][ T7922]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2788.764667][ T7922]  do_syscall_64+0xcd/0xf80
[ 2788.764690][ T7922]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2788.764707][ T7922] RIP: 0033:0x7efe5178f749
[ 2788.764721][ T7922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2788.764736][ T7922] RSP: 002b:00007efe4f9ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2788.764753][ T7922] RAX: ffffffffffffffda RBX: 00007efe519e5fa0 RCX: 00007efe5178f749
[ 2788.764764][ T7922] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003
[ 2788.764774][ T7922] RBP: 00007efe4f9ee090 R08: 0000000000000000 R09: 0000000000000000
[ 2788.764784][ T7922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2788.764794][ T7922] R13: 00007efe519e6038 R14: 00007efe519e5fa0 R15: 00007ffc21d2fea8
[ 2788.764817][ T7922]  </TASK>
[ 2789.801677][ T6804] usb 3-1: config 0 has an invalid interface number: 41 but max is 0
[ 2789.809966][ T6804] usb 3-1: config 0 has no interface number 0
[ 2789.818617][ T6804] usb 3-1: config 0 interface 41 has no altsetting 0
[ 2789.939783][ T6804] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 2789.990175][ T6804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2790.008775][ T6804] usb 3-1: Product: syz
[ 2790.030374][ T6804] usb 3-1: Manufacturer: syz
[ 2790.040857][ T6804] usb 3-1: SerialNumber: syz
[ 2790.200937][ T6804] usb 3-1: config 0 descriptor??
[ 2790.328668][ T7940] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2790.338362][ T7940] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[ 2790.347372][ T7940] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2790.355205][ T7940] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[ 2790.420789][ T7940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9548'.
[ 2790.621512][ T7942] input: syz1 as /devices/virtual/input/input144
[ 2790.751036][T18833] Bluetooth: hci0: command 0x040f tx timeout
[ 2790.795130][ T7920] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2790.806615][ T7920] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2790.823168][ T7920] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2790.832082][ T7920] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2790.839572][ T7920] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2791.213410][ T6804] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[ 2791.321416][ T7955] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2791.329207][ T7955] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[ 2791.338150][ T7955] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2791.346205][ T7955] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[ 2791.374343][ T7955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9551'.
[ 2791.446292][ T7944] chnl_net:caif_netlink_parms(): no params data found
[ 2791.829618][ T7944] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2791.837442][ T7944] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2791.856118][ T7944] bridge_slave_0: entered allmulticast mode
[ 2791.881149][ T7944] bridge_slave_0: entered promiscuous mode
[ 2791.909981][ T7944] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2791.956761][ T7944] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2791.994305][ T7944] bridge_slave_1: entered allmulticast mode
[ 2792.017297][ T7944] bridge_slave_1: entered promiscuous mode
[ 2792.186429][ T7965] netlink: 196 bytes leftover after parsing attributes in process `syz.0.9552'.
[ 2792.200578][ T7920] Bluetooth: hci4: SCO packet for unknown connection handle 201
[ 2792.308703][ T7944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2792.532780][ T7944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2792.611283][ T7944] team0: Port device team_slave_0 added
[ 2792.619709][ T7944] team0: Port device team_slave_1 added
[ 2792.653007][ T7944] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2792.666507][ T7944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2792.697596][ T7944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2792.722754][ T7944] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2792.737674][ T7944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2792.765856][ T6804] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9
[ 2792.780169][ T7944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2792.830294][ T7920] Bluetooth: hci0: command 0x040f tx timeout
[ 2792.856595][ T6804] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9
[ 2792.868869][ T6804] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71
[ 2792.898025][ T6804] usb 3-1: USB disconnect, device number 59
[ 2792.935176][ T7944] hsr_slave_0: entered promiscuous mode
[ 2792.992931][ T7920] Bluetooth: hci3: command tx timeout
[ 2793.021536][ T7944] hsr_slave_1: entered promiscuous mode
[ 2793.027555][ T7944] debugfs: 'hsr0' already exists in 'hsr'
[ 2793.043234][ T7944] Cannot create hsr debugfs directory
[ 2794.238570][ T7978] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-ç/": -EINTR
[ 2794.880180][ T7944] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 2794.909465][ T7944] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 2794.916118][ T7920] Bluetooth: hci0: command 0x040f tx timeout
[ 2795.011179][ T7989] netlink: 196 bytes leftover after parsing attributes in process `syz.0.9558'.
[ 2795.380176][T18833] Bluetooth: hci3: command tx timeout
[ 2795.385627][ T7920] Bluetooth: hci4: SCO packet for unknown connection handle 201
[ 2795.430872][ T7944] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 2795.467248][ T7944] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 2795.596942][ T8000] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2795.604162][ T8000] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2795.631796][ T8000] bridge0: entered allmulticast mode
[ 2795.738511][ T7944] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2795.772607][ T7944] 8021q: adding VLAN 0 to HW filter on device team0
[ 2795.787650][ T3759] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2795.794733][ T3759] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2795.845124][ T3759] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2795.852260][ T3759] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2795.976855][T18833] Bluetooth: hci2: Received unexpected HCI Event 0x00
[ 2796.125980][ T7944] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2796.491343][ T7944] veth0_vlan: entered promiscuous mode
[ 2796.506766][ T7944] veth1_vlan: entered promiscuous mode
[ 2796.590854][ T7944] veth0_macvtap: entered promiscuous mode
[ 2796.610666][ T7944] veth1_macvtap: entered promiscuous mode
[ 2796.630476][ T7944] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2796.642618][ T7944] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2796.653932][T32368] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2796.664192][T32368] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2796.675400][T32368] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2796.688712][T32368] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2796.760726][T32435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2796.768559][T32435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2796.793299][ T7999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2796.802942][ T7999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2796.822558][   T30] audit: type=1400 audit(1766164069.769:1085): avc:  denied  { add_name } for  pid=7944 comm="syz-executor" name="syz6" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[ 2796.823037][ T7944] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000007: 0000 [#1] SMP KASAN NOPTI
[ 2796.848001][   T30] audit: type=1400 audit(1766164069.769:1086): avc:  denied  { create } for  pid=7944 comm="syz-executor" name="syz6" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[ 2796.859170][ T7944] KASAN: null-ptr-deref in range [0x0000000000000038-0x000000000000003f]
[ 2796.859187][ T7944] CPU: 0 UID: 0 PID: 7944 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2796.859209][ T7944] Tainted: [L]=SOFTLOCKUP
[ 2796.859215][ T7944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2796.859224][ T7944] RIP: 0010:simple_xattrs_free+0x60/0x1e0
[ 2796.859246][ T7944] Code: ea 03 80 3c 02 00 0f 85 8b 01 00 00 49 c7 45 00 00 00 00 00 e8 21 9c 75 ff 4c 89 fa 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 56 01 00 00 48 bd 00 00 00 00 00 fc ff df 49 8b
[ 2796.938586][ T7944] RSP: 0018:ffffc90004f8fae0 EFLAGS: 00010202
[ 2796.944640][ T7944] RAX: dffffc0000000000 RBX: ffff88809417a780 RCX: ffffffff826a4395
[ 2796.952592][ T7944] RDX: 0000000000000007 RSI: ffffffff82494a6f RDI: 0000000000000038
[ 2796.960543][ T7944] RBP: ffff88809417a818 R08: 0000000000000005 R09: 0000000000000000
[ 2796.968491][ T7944] R10: 00000000ffffffea R11: ffffffff8b77814d R12: 1ffff920009f1f6b
[ 2796.976438][ T7944] R13: 0000000000000000 R14: ffff88805b491740 R15: 0000000000000038
[ 2796.984399][ T7944] FS:  000055555a1da500(0000) GS:ffff8881248f5000(0000) knlGS:0000000000000000
[ 2796.993308][ T7944] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2796.999869][ T7944] CR2: 00007f5417e65da0 CR3: 000000003524f000 CR4: 00000000003526f0
[ 2797.007819][ T7944] Call Trace:
[ 2797.011079][ T7944]  <TASK>
[ 2797.013990][ T7944]  __kernfs_new_node+0x7b4/0x990
[ 2797.018912][ T7944]  ? __pfx___kernfs_new_node+0x10/0x10
[ 2797.024350][ T7944]  ? find_held_lock+0x2b/0x80
[ 2797.029013][ T7944]  ? kernfs_root+0xee/0x2a0
[ 2797.033498][ T7944]  kernfs_new_node+0x13c/0x1e0
[ 2797.038246][ T7944]  ? kasan_save_track+0x14/0x30
[ 2797.043078][ T7944]  kernfs_create_dir_ns+0x4c/0x1a0
[ 2797.048173][ T7944]  cgroup_mkdir+0x40f/0x12e0
[ 2797.052741][ T7944]  ? __pfx_cgroup_mkdir+0x10/0x10
[ 2797.057745][ T7944]  kernfs_iop_mkdir+0x111/0x190
[ 2797.062574][ T7944]  ? bpf_lsm_inode_mkdir+0x9/0x10
[ 2797.067585][ T7944]  vfs_mkdir+0x731/0xb60
[ 2797.071807][ T7944]  do_mkdirat+0x442/0x5e0
[ 2797.076122][ T7944]  ? __pfx_do_mkdirat+0x10/0x10
[ 2797.080954][ T7944]  ? getname_flags.part.0+0x1c5/0x550
[ 2797.086303][ T7944]  __x64_sys_mkdirat+0x83/0xb0
[ 2797.091050][ T7944]  do_syscall_64+0xcd/0xf80
[ 2797.095535][ T7944]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2797.101406][ T7944] RIP: 0033:0x7f5417f8de97
[ 2797.105800][ T7944] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2797.125390][ T7944] RSP: 002b:00007fff268e1d88 EFLAGS: 00000206 ORIG_RAX: 0000000000000102
[ 2797.133780][ T7944] RAX: ffffffffffffffda RBX: 00007fff268e1de0 RCX: 00007f5417f8de97
[ 2797.141731][ T7944] RDX: 00000000000001ff RSI: 00007fff268e1de0 RDI: 00000000ffffff9c
[ 2797.149680][ T7944] RBP: 0000000000000001 R08: 0000000000000017 R09: 00007fff268e1ad7
[ 2797.157630][ T7944] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008
[ 2797.165578][ T7944] R13: 0000000000000003 R14: 00007fff268e2258 R15: 0000000000000000
[ 2797.173531][ T7944]  </TASK>
[ 2797.176529][ T7944] Modules linked in:
[ 2797.181591][   T30] audit: type=1400 audit(1766164069.769:1087): avc:  denied  { associate } for  pid=7944 comm="syz-executor" name="syz6" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 2797.181733][ T7944] ---[ end trace 0000000000000000 ]---
[ 2797.203104][   T30] audit: type=1400 audit(1766164069.829:1088): avc:  denied  { write } for  pid=5798 comm="syz-executor" path="pipe:[3981]" dev="pipefs" ino=3981 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[ 2797.203142][   T30] audit: type=1400 audit(1766164069.829:1089): avc:  denied  { read } for  pid=5167 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[ 2797.203172][   T30] audit: type=1400 audit(1766164069.829:1090): avc:  denied  { search } for  pid=5167 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2797.203198][   T30] audit: type=1400 audit(1766164069.829:1091): avc:  denied  { search } for  pid=5167 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2797.203227][   T30] audit: type=1400 audit(1766164069.829:1092): avc:  denied  { add_name } for  pid=5167 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2797.203253][   T30] audit: type=1400 audit(1766164069.829:1093): avc:  denied  { create } for  pid=5167 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 2797.241839][T18833] Bluetooth: hci0: command 0x040f tx timeout
[ 2797.254307][   T30] audit: type=1400 audit(1766164069.829:1094): avc:  denied  { append open } for  pid=5167 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 2797.276536][ T7944] RIP: 0010:simple_xattrs_free+0x60/0x1e0
[ 2797.390199][T18833] Bluetooth: hci3: command tx timeout
[ 2797.402722][ T7944] Code: ea 03 80 3c 02 00 0f 85 8b 01 00 00 49 c7 45 00 00 00 00 00 e8 21 9c 75 ff 4c 89 fa 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 56 01 00 00 48 bd 00 00 00 00 00 fc ff df 49 8b
[ 2797.423092][ T7944] RSP: 0018:ffffc90004f8fae0 EFLAGS: 00010202
[ 2797.429161][ T7944] RAX: dffffc0000000000 RBX: ffff88809417a780 RCX: ffffffff826a4395
[ 2797.439532][ T7944] RDX: 0000000000000007 RSI: ffffffff82494a6f RDI: 0000000000000038
[ 2797.447948][ T7944] RBP: ffff88809417a818 R08: 0000000000000005 R09: 0000000000000000
[ 2797.456878][ T7944] R10: 00000000ffffffea R11: ffffffff8b77814d R12: 1ffff920009f1f6b
[ 2797.510421][ T7944] R13: 0000000000000000 R14: ffff88805b491740 R15: 0000000000000038
[ 2797.518430][ T7944] FS:  000055555a1da500(0000) GS:ffff8881248f5000(0000) knlGS:0000000000000000
[ 2797.528360][ T7944] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2797.580158][ T7944] CR2: 00007f5417e65da0 CR3: 000000003524f000 CR4: 00000000003526f0
[ 2797.588201][ T7944] Kernel panic - not syncing: Fatal exception
[ 2797.594520][ T7944] Kernel Offset: disabled
[ 2797.598846][ T7944] Rebooting in 86400 seconds..