last executing test programs:

7m37.524037849s ago: executing program 1 (id=1370):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x2, 0xc03}}}}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x50}, 0x1, 0xd}, 0x0) (fail_nth: 6)

7m36.715620525s ago: executing program 1 (id=1371):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10)
r3 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0xf1)

7m36.495601206s ago: executing program 1 (id=1373):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="240000000706010200000000000000000a000002050001000785a51706544d09c0b2d7084394ef3240dc1dc77376fc071bb5b917183d8046843481ebcb2d3c63bfd3a580ef779a5194984bd90030a460e6f493fbc9a859d8f34068f70a278a365c153a364eede065bd50c47368b02b9d78c2bcc14a1516b42782c3d67d06e08fb07681498d6681016ec9d53f92213e953e7aeaef49131e3559096aedc7ce717d1b2af2e84cfaa1229c41d187fd0a0d4d7acc06b571e8d00d15f3565f596e0453907dd8a2a56ec7eb849f16823613198bd3e3f79c657f26e15c6f374b"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1)
sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x44, r2, 0x201, 0x0, 0x0, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x44}, 0x8, 0x3000000000002, 0x0, 0x885}, 0x24000090)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00'})
pipe2$9p(&(0x7f0000000240), 0x0)
rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r5 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1\xd1\x11\xf0\xc2Gj+kV\x00'/179, 0x2)
ftruncate(r5, 0xfbff)
fcntl$addseals(r5, 0x409, 0x7)
ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x8000})
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r6, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x0, 0x20}, 0xc)

7m35.042827965s ago: executing program 1 (id=1376):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="b6d42a5f67df4b00"/24], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
epoll_create1(0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0)

7m33.655398524s ago: executing program 1 (id=1378):
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, <r0=>0x0})
prlimit64(r0, 0xe, 0x0, 0x0)
openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0)
syz_emit_ethernet(0x32, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffff9d6f61fa050088a804008100"], 0x0)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r2, &(0x7f0000000100), 0x8)
ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, &(0x7f0000000b00)={0x1, 0x40, @start={0x0, 0x0, "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", "c431cffbd1bf92a14656d97da438a1d8e85b3691f862322e55a26909dfddbc1adec51a9a6264df8c86adfa24fc3aec13d09bc76f30a4b35fdf306fdf3929b0179cb253f3020ca0b384d24a4b595ff9b54883a6ab19585efac6a92b14b62369fab797b4b2d1ef2e53d203df6e8bfbdc1e84c5892f0af32322f56500d9d318db38879b6905f8b67c75aaf9a730024cc30fbc8d437941689fb0b8d1481c3f704c2fb02243eda1059bf45e344099d7399faf797e5c14ed10915826c6bfb881d3bee757703990b8a8e5e33827a12e88f594e723b3745e0090d9aaf1b868187e4000f67a8ee6d46219f95fbe0a507129101bdf27bdaa67ba8f420e8c34a5f3a83374574cf2716d0e363af61d8883d09838c067e8309a765ac1e6f6985f3b7572115d37f230051ae1653aaf79198bf7b1830782ebd7a0e423763c25815beb4f80589ea0a5ee44bafb2b2ed3d08c05c26f428a4bfea5b4cc6b58b56d9725db112a099b8a8bf2c20874f43072e7296760c8b2001182ecc5fccfcf5a7b69bd99a78581c1cfea0d1ce21a2504a57524f5a5fb718830308d05a4e1c5d5d2bc8903e0cf16812b50062384afca1567c9c92e5e51c04c3b276ba43e6a8745b585ddd5f058cd2dbb49aba5008b28205b3dccfa2831aa720344bc4c7ce56807539dcdeb8830626041ccea1db2938456c0833ab64fde13c68be161ad1a602011311a3a75515a07d908d4122bec5e5fea97624d5c33040045195e6d7ac9c30c830ddf71ed46693a6ff5646bebfbe1f760e27167c42020eb0ba14a55485e895f07b2d3ab6d3b55217ac3a4733502c964796bc508deeacff52fe5eba17b787787cd394d2673a884a5474f7ccda0868bfdfafbc371a28049cce184e5c183ba6aa72385155033463e84ccded69c872760af5be02863e195e27294916ab17d4d87cd84e4d6e5042fceac8924e3848007b1827859a406d55d40c8ccc9aff6b13ddc0dc5dc11f4dde581bbbb04d3dc1e762e98da18b8654b61ec35ebb281d3dbaff3af4b16c03ea6ce400de3f99eadc2443361deb24c45fdeed4f4721dcf10635f1b33340e92cb57f5c02a4376ad254e4e20fc1470655bd44d8afab75286302719fcf0b8105e2205de07c3e89d8997fe3371a8f0bc3481a0763bfe2293a8d8c9eb8cbaa1529ad97f426120e285303129aa7782bec6bc241c974b7100a2814edaf0910b73069f6afc871e444c7bd75c0e89afb17eebc1d1f60ce0450d2f7f1644fb4772f3925affe71592a703d3b4eadb641fa4579c9fa048e4ca4507b8b67781aa9e9dd4dc3c13b362ee80123980af6c7878b6a05571dba8747159f787ca9850eb6066ef107f80180066dc5357bb71fe26310d80ac067855a59782cd3ef199d8ee45891343d6520cd0e2ad04d5c09db6f6d4f854c13bb6e3a23fc83d1487a352a30a08339a3c5025cd045520c323"}, [0x80000000, 0x8, 0x8, 0xffff, 0x7fffffff, 0x1, 0x2, 0x1, 0x2, 0x0, 0x9, 0x48, 0x400, 0x8, 0x6, 0x8, 0x7, 0x1, 0x24, 0x0, 0x1, 0x0, 0x3, 0x80000001, 0x3c, 0x0, 0x7, 0x5, 0xffffffff, 0x5e, 0x3, 0x6, 0xa3b0, 0x7, 0x0, 0x1, 0x6, 0x5, 0xfffffffffffffffb, 0x800, 0x1, 0x7, 0x7, 0x1, 0x6, 0x1, 0xc8, 0x4, 0x1, 0x2, 0x3ff, 0x8000, 0x4, 0x5, 0x3, 0x7, 0xc, 0x8, 0x2, 0xffffffff, 0x0, 0x200, 0x4, 0x5]})
r3 = dup(r2)
mkdir(&(0x7f0000000000)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
syz_open_dev$vim2m(&(0x7f0000000080), 0x1010000002, 0x2)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000140)={0xfffffffe, 0x0, 0x2, {0x1, @pix={0x3, 0x80, 0x33565348, 0x8, 0x5, 0x0, 0x6, 0xfeedcafe, 0x1, 0x6, 0x2, 0x1}}})
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
chroot(&(0x7f0000000000)='./file0/../file0\x00')
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0\x00', 0xd00, 0x1)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20008800)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x30, 0x1412, 0x4, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x60000010}, 0x50)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000240701700ff00000000000109022400010000000009040000020300000009210000000122050009058103"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
mount(&(0x7f0000000100)=@nullb, &(0x7f00000003c0)='./file1\x00', &(0x7f00000001c0)='qnx6\x00', 0x0, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)

7m32.458499369s ago: executing program 1 (id=1384):
mkdir(0x0, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x3000000000002, 0x0, 0x885}, 0x24000090)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0)
bind$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
memfd_create(0x0, 0x2)
r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
write$qrtrtun(r2, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000013c0)={r2, &(0x7f0000000380)="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", &(0x7f0000001380)=""/48}, 0x20)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe)
listen(r3, 0xa1)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xc}}, 0x14}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0)

7m26.587684311s ago: executing program 0 (id=1403):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000000900))
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000940)={0x0, <r4=>0x0})
r5 = getegid()
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000a40)=[{{&(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000740)="d09bea70954e5884ceae1145206e7d6259a0b1bc5dca51055352776d88bf8677853ca2b48e80a6e7a8b0516e014f4af657e97d4abb02d3fd035c39197f6dd97335862ee6958faa9e4735910ac02caadefe9179e4b3fe82847af62d849db393860e351ccd3fb92c27b0adc6f81ea39231a977e5d891f30659167057e3a97e7ae62c0bd6e83def928078a95ced53af66ad7de5680f38ebc619564287570180e51ea2d4518e5cf94f6826f8d9b3aea0660753bc14ed21857fe25a043e6cbc8a5347ac8c7588a8a34ecc757cd27b4bfaee930684f53064e5cbea0bcf98c83af6fd39e5c7fd1ff4f6", 0xe6}, {&(0x7f00000004c0)="8a55fd49037265e30fec400e54b1c6fcd143ff48f3a11230bc64db19897cd66b0a995f607765d24affc279002fafb9d8df618d8999d7209a99a6151c5c4b2922f8c6b2cdfddc850b38f983bb2a256a688de3f2c0273d40d81aab8ab2c8d678a7c6244d52c08000ce760a268b1da4dccd8acdd9f52ef81360a7ce9793f2a63cf44b03835ff48fe06f03e326351c5deadabd9ae4c323b46d7e1c88656dc4a5043ce529ea1352b14c9c058d", 0xaa}], 0x2, &(0x7f0000000980)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r4, 0x0, r5}}}], 0x60, 0x4}}], 0x1, 0x840)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='./file1\x00', 0x40000782)
r6 = syz_open_dev$dri(0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x83, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0)
sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}}, 0x28}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000060a0b0400000000000000000200000038000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c59208000240000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x8c}}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
ioctl$DRM_IOCTL_RM_MAP(r6, 0x4028641b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil})

7m25.003799345s ago: executing program 0 (id=1406):
r0 = socket$inet6(0xa, 0x800000000000802, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1})
socket(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
init_module(&(0x7f0000000400)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYRESOCT=r0], 0x40, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
epoll_create1(0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x7, &(0x7f00000001c0)=@framed={{0x18, 0x8}, [@call={0x85, 0x0, 0x0, 0x7e}, @map_fd={0x18, 0x0, 0x0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = socket$netlink(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000080)={0x44, r3, 0x615, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x44}, 0x5}, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xffffffffffffffff]}, 0x8, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x2)
setresuid(0x0, 0xee00, 0x0)
ioctl$KDMKTONE(r4, 0x4b30, 0x300000)
openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0x40402, 0x0)

7m24.441443684s ago: executing program 0 (id=1407):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="240000000706010200000000000000000a000002050001000785a51706544d09c0b2d7084394ef3240dc1dc77376fc071bb5b917183d8046843481ebcb2d3c63bfd3a580ef779a5194984bd90030a460e6f493fbc9a859d8f34068f70a278a365c153a364eede065bd50c47368b02b9d78c2bcc14a1516b42782c3d67d06e08fb07681498d6681016ec9d53f92213e953e7aeaef49131e3559096aedc7ce717d1b2af2e84cfaa1229c41d187fd0a0d4d7acc06b571e8d00d15f3565f596e0453907dd8a2a56ec7eb849f16823613198bd3e3f79c657f26e15c6f374b"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1)
sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x44, r2, 0x201, 0x0, 0x0, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x44}, 0x8, 0x3000000000002, 0x0, 0x885}, 0x24000090)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00'})
pipe2$9p(&(0x7f0000000240), 0x0)
rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r4 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1\xd1\x11\xf0\xc2Gj+kV\x00'/179, 0x2)
fcntl$addseals(r4, 0x409, 0x7)
ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f00000000c0)=0x5)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r5, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x0, 0x20}, 0xc)

7m23.449719235s ago: executing program 0 (id=1411):
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000940)={{}, 'syz0\x00', 0x40})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
ioctl$FBIOBLANK(r1, 0x4611, 0x1)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000080), &(0x7f0000000140)={'U+', 0x5}, 0x16, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000180)={0x28, 0x4, r3, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
umount2(&(0x7f0000002580)='./file0/../file0\x00', 0x9)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0)
ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000200))
syz_emit_ethernet(0x4a, &(0x7f0000000380)={@broadcast, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "72b2af", 0x4, 0x2f, 0x0, @dev, @mcast2, {[], {0x0, 0x883e, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6)

7m22.158146398s ago: executing program 0 (id=1414):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="b6d42a5f67df4b00"/24], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0)

7m21.689442118s ago: executing program 0 (id=1416):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$dri(&(0x7f00000005c0), 0x1f, 0x800)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0), 0x0})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064d1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x1, 0x0, <r4=>0x0})
r5 = getpid()
r6 = syz_pidfd_open(r5, 0x0)
r7 = memfd_create(&(0x7f0000000040)='rootmode', 0x0)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r7, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080))
setns(r6, 0x24020000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES8=r4, @ANYRES32=r0, @ANYBLOB="0000000010000000b7080000000000007b8af8ff00000000bfa200010000000007020000f8ffffffb703000008000000b7b730f262666f122c7bc47c0400000000224d405a64c225cb6a039ad132fba07d86d76440aafe16c043517e0cf8ec989e9f60832c550b68c23dd61f8b0d74e9ca0f61aa53dd3e1e992c3d8e2e13caf5d069ca46e6c422f90b38c9d4d8f4c7f8fd0e1550e006ab2e7630af65e18fcf03c9c6344909992c"], 0x0, 0x934, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94)

7m21.474362223s ago: executing program 32 (id=1416):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$dri(&(0x7f00000005c0), 0x1f, 0x800)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0), 0x0})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064d1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x1, 0x0, <r4=>0x0})
r5 = getpid()
r6 = syz_pidfd_open(r5, 0x0)
r7 = memfd_create(&(0x7f0000000040)='rootmode', 0x0)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r7, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080))
setns(r6, 0x24020000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES8=r4, @ANYRES32=r0, @ANYBLOB="0000000010000000b7080000000000007b8af8ff00000000bfa200010000000007020000f8ffffffb703000008000000b7b730f262666f122c7bc47c0400000000224d405a64c225cb6a039ad132fba07d86d76440aafe16c043517e0cf8ec989e9f60832c550b68c23dd61f8b0d74e9ca0f61aa53dd3e1e992c3d8e2e13caf5d069ca46e6c422f90b38c9d4d8f4c7f8fd0e1550e006ab2e7630af65e18fcf03c9c6344909992c"], 0x0, 0x934, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94)

7m17.009817557s ago: executing program 33 (id=1384):
mkdir(0x0, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x3000000000002, 0x0, 0x885}, 0x24000090)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0)
bind$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
memfd_create(0x0, 0x2)
r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
write$qrtrtun(r2, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000013c0)={r2, &(0x7f0000000380)="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", &(0x7f0000001380)=""/48}, 0x20)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe)
listen(r3, 0xa1)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xc}}, 0x14}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0)

12.032620612s ago: executing program 2 (id=2515):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 32)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a)
fallocate(r3, 0x20, 0x4000, 0x8000) (async)
accept4(r3, &(0x7f0000000240)=@vsock, &(0x7f00000002c0)=0x80, 0x80000) (async)
sendto$inet(r3, &(0x7f00000000c0)="ba16e3d08e379da7984cf04a9af658e3f0920b50c092e6a218d1c80314139998d4d48190da7c35687bf1c49fe51df7ed9432c5d3264fa6d87dede0c8223cc65cc835f490dd281765e09d51f2e6de4a80031481bbec58c915632d6a151727bc6e58ba8da699b02c377bc1b93464220984445704b10bb5d1e7431941c90b34d285da919049f881be045ec52c355ca2344b359fffdfa53cae9079c3d2a61115c7a6b88e7d1dc66204242ddba79fd5fc9012b0fe5b1a6e263071669004c0ae63e5b3bcab3a7753f4da427aa3e28876d139a218888c72891ebad19419041b7d77a33f824e9c056ffc8f01a146e6f256f96ddb12aa0c69878ca11778c6", 0xfa, 0x4000, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) (async)
ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000300)={0x1b0000, 0x0, [0x126c, 0x3, 0x81, 0x2, 0x77ffffff, 0x0, 0x1000, 0x8]}) (async, rerun: 32)
r4 = socket$qrtr(0x2a, 0x2, 0x0) (async, rerun: 32)
setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000200)={0x0, [0x7, 0xa3], 0x200}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10.003713766s ago: executing program 2 (id=2518):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000046d100180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000008208500000072000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000340)="0000ffffffffa00094bbf6ba2587", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

9.553018806s ago: executing program 5 (id=2521):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000000700000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10)
r1 = memfd_create(&(0x7f0000000040)='rootmode', 0x0)
pwritev(r1, &(0x7f0000000180)=[{&(0x7f0000000100)='E', 0x1}], 0x1, 0x0, 0x0)

9.439705662s ago: executing program 3 (id=2523):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r3, 0x1, 0x10, &(0x7f0000000040), 0x4)
sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="9e", 0x1}], 0x1}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r7, 0x5)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter\x00')
r9 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r10=>0x0})
bind$can_j1939(r9, &(0x7f0000000100)={0x1d, r10}, 0x18)
sendmsg$NFNL_MSG_ACCT_GET(r9, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={0x0, 0x90}, 0x1, 0x0, 0x0, 0x4c000}, 0x20002080)
preadv(r8, &(0x7f0000000380)=[{&(0x7f0000000080)=""/36, 0x24}, {&(0x7f0000000180)=""/79, 0x4f}], 0x2, 0x0, 0x0)
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)

9.419334976s ago: executing program 5 (id=2524):
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000280)={0x201, 0x0, 0x0, 0x0, 0x0, 0x0})
writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000100)="89", 0x1}], 0x1)
r2 = getpgrp(0xffffffffffffffff)
r3 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
r4 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid_for_children\x00')
sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@RTM_GETNSID={0x4c, 0x5a, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NETNSA_NSID={0x8, 0x1, 0x1}, @NETNSA_NSID={0x8, 0x1, 0x1}, @NETNSA_PID={0x8, 0x2, r2}, @NETNSA_FD={0x8, 0x3, r3}, @NETNSA_FD={0x8, 0x3, r4}, @NETNSA_FD={0x8, 0x3, r5}, @NETNSA_PID={0x8, 0x2, 0xffffffffffffffff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c081}, 0x24040000)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x1)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2)

9.255764375s ago: executing program 5 (id=2525):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0xd000, 0xeeee8000}}, "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", "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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

8.094753397s ago: executing program 6 (id=2526):
r0 = socket$kcm(0x10, 0x2, 0x4)
semctl$SETVAL(0x0, 0x2, 0x10, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000)
syz_usb_connect(0x2, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e0dec14004231a022918010203010902220001000000000904000001e36ec200090500000000000000070582"], 0x0)
close(r0) (async)
close(r0)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000050000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000002a97850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000200)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f00000002c0)={0xc, r2}) (async)
ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f00000002c0)={0xc, r2})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000340)={0x28, 0x4, r2, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x10}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000340)={0x28, 0x4, r2, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x10})
ioctl$IOMMU_VFIO_SET_IOMMU(r1, 0x3b66, 0x3)
ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000ff2f00000000000001"]) (async)
ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000ff2f00000000000001"])
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
io_uring_setup(0x6281, &(0x7f0000000080))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
r5 = syz_io_uring_setup(0x35c9, &(0x7f0000000380)={0x0, 0x1ffffc, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f0000000180)=<r6=>0x0, 0x0)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000200)={0x0, 0x104000, 0x0, 0xa5c}, 0x1c)
r7 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x4e23, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x24) (async)
connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x4e23, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x24)
listen(r7, 0x8)
r8 = socket$netlink(0x10, 0x3, 0x4)
writev(r8, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00", 0x42}], 0x1) (async)
writev(r8, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00", 0x42}], 0x1)
syz_io_uring_submit(r6, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) (async)
syz_io_uring_submit(r6, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000000c0)=0xe)
fcntl$dupfd(r9, 0x0, r9) (async)
fcntl$dupfd(r9, 0x0, r9)

8.069143096s ago: executing program 3 (id=2527):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
read$FUSE(r3, &(0x7f00000077c0)={0x2020, 0x0, 0x0, <r4=>0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(r3, 0x0, 0x0)
syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
socket$nl_route(0x10, 0x3, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/186, 0xba)
syz_fuse_handle_req(r3, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x148, 0x0, 0x6, [{{0x6, 0x400000003, 0x7, 0xf7c, 0xc, 0x400, {0x7, 0x2, 0x18001, 0x369b, 0x23, 0x7, 0x3, 0x1, 0x6, 0x2000, 0x8, r4, r5, 0x40824c39, 0x4}}, {0x3, 0x0, 0x9f, 0x4, 'rkotmo\xb8\xa4ade\x00\xe1\x00\x00\x00\x00\x00\x00\x00\x00\xea;\xff\xc7\xfeXA^\x90\xde\xea|G\xe7\xa0\xca\x1c\xd8dE\xd4\x12\x13\x87\x02\f\xf4p\xfe\x9d\x06\x83f;\x7f\xeb\xc9\xc6\xff\xd2\xb4\x1f\x91V3\xb9\xeb\x13-\xf5\x9e\xd6Zdm\xad\xdd\v\xaf\x1aZZ\x8c\x92\xaa\xd9=t.\x9a0\xac\xae\x92\xc4\x9bx\x83\x1b3\xeeE\x10o\x94\x10\xa2%w>\xe0\x17\x1a\xdc\xe6T\xd3\xbf\xc7\x87J\\A\xa9\x18\x04\xb5\xfa\xf6\x1d\x903\x9e\xb9f\x12\xf7\xca\xea\x82\xeb\xe9v\xc9\xb2\x9c\x9b\xe3\tV\xbeS\xb6\xc62\xd1+\x0f'}}]}, 0x0, 0x0, 0x0})
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r7 = dup(r6)
ioctl$PIO_CMAP(r7, 0x4b71, &(0x7f0000000380)={0x400, 0x4, 0x10001, 0x5, 0x4, 0x8})

8.06137967s ago: executing program 2 (id=2528):
unshare(0x2a020800)
fsopen(&(0x7f0000000000)='hfsplus\x00', 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e0000002000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x8000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpgid(0x0)
prctl$PR_SCHED_CORE(0x3e, 0xefffffffffffffff, r2, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000780), 0x10, &(0x7f0000000200)={&(0x7f00000002c0)=@can={{}, 0x0, 0x1, 0x0, 0x0, "400000008b20aaf0"}, 0x10}}, 0x20000000)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000007c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r2, @ANYBLOB="100028bd7000ffdbdf250e000000780001801400020070696d72656731000000000000000000080003000300000014000200697036746e6c3000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f7c6f5f6261746164760008000300bc4c27e208000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="200001800800030000000000140002006272696467655f736c6176655f300000"], 0xac}, 0x1, 0x0, 0x0, 0x4000000}, 0x40400c5)
syz_usb_control_io$printer(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0)
syz_usb_control_io$uac1(r4, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$uac1(r4, 0x0, 0x0)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/210, 0xd2}], 0x1}, 0x61)

7.075031139s ago: executing program 5 (id=2530):
unshare(0x2a020800)
fsopen(&(0x7f0000000000)='hfsplus\x00', 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e0000002000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x8000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpgid(0x0)
prctl$PR_SCHED_CORE(0x3e, 0xefffffffffffffff, r2, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000780), 0x10, &(0x7f0000000200)={&(0x7f00000002c0)=@can={{}, 0x0, 0x1, 0x0, 0x0, "400000008b20aaf0"}, 0x10}}, 0x20000000)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000007c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r2, @ANYBLOB="100028bd7000ffdbdf250e000000780001801400020070696d72656731000000000000000000080003000300000014000200697036746e6c3000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f7c6f5f6261746164760008000300bc4c27e208000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="200001800800030000000000140002006272696467655f736c6176655f300000"], 0xac}, 0x1, 0x0, 0x0, 0x4000000}, 0x40400c5)
syz_usb_control_io$printer(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0)
syz_usb_control_io$uac1(r4, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$uac1(r4, 0x0, 0x0)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/210, 0xd2}], 0x1}, 0x61)

5.9983757s ago: executing program 3 (id=2531):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x100)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
listen(r1, 0x9)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg(r2, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e20, @private=0xa010101}, 0x74, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x6, 0xc9, 0xf22})
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x28, r4, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}]}, 0x28}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
write$nbd(r6, &(0x7f0000000280)={0x67446698, 0x1, 0x4, 0x3, 0x2}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0xa)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r7, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x20, r7, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x800)
connect$packet(r0, &(0x7f0000000000)={0x1f, 0xf8, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14)
shutdown(r0, 0x1)

5.021431268s ago: executing program 4 (id=2532):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x2c, 0x3d, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x9, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x2c}}, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
sendmmsg$unix(r6, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000080)="3b464c3bcd2bd7d2b1a92eca79c286a06dffdfeb623ea9e40a2c95cd702350d944237596556c9479bf1521276d845eb45d2cd8e6380fc6ce9c3451c4c197909a89cc640607df2e7a", 0x48}, {&(0x7f0000000180)="fa302c5276f60e090ecdcd2ab8152552e0ec74a69db872f09ac999fb27496391dbf3d0bc94611c29", 0x28}], 0x2}}], 0x1, 0x0)

4.403730191s ago: executing program 6 (id=2533):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14010000100007000000000000000000fe880002000000000000000000000001fe80ddffffffffffffff0000000000bb00002201fffc0004", @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="ffffffff000000000000000000000000000011003c000000fe8000000000000000000000000000bb01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000ffffffff02000000000000000000000014000e00fe8000000000000000000000000000bb050019003200000008001600"], 0x114}}, 0x0)

4.340398019s ago: executing program 6 (id=2534):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10)
r1 = memfd_create(&(0x7f0000000040)='rootmode', 0x0)
pwritev(r1, &(0x7f0000000180)=[{&(0x7f0000000100)='E', 0x1}], 0x1, 0x0, 0x0)

4.263018399s ago: executing program 6 (id=2535):
r0 = socket(0x10, 0x3, 0x4)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) (async, rerun: 64)
r1 = socket(0x10, 0x803, 0x0) (rerun: 64)
sendto(r1, &(0x7f0000000000)="120000003200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async)
syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYBLOB="9a450017fa101fc18d046e768a4da3d2132d831310e12b882488cea5e00bf0cddc895a6e1e640171a37c4d4bd2093884adf0fc8d1c141a2043f51df48765bc714d62fe281a4c3a3c9427c9ed36485d7174a14dfa02afd7681787910cebc13cc79d365870ffe8b7f134c3eee631ef82e9e2c1983cde0ae85178ee6fbbafcf1547aa3bb2463821131f3251c327b18faadcb9d5370e00068064211b8c286a9f0e453f0489effabc209d072ea42efcefbb72c9a842318a6864e2835a0c15c595bdb266f5cdaf8ac2d4d6d768a5e2e7df78cd8cdec2a8303e22", @ANYRESDEC=r0, @ANYRES64=r1, @ANYRES16=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES16=r2, @ANYBLOB="d78ae751d9dc4691385939cb27a91a9ca13ab04aa1db23ca5a2bfd9a8261bf5ef609f7be32bfa0a5d33cf91da62ae48370c9a100eadc1e1b7e666a0259e07b1fe48a1cfa8f981d6165dc69a18644450a81abd5fbd19c7269084712f2661ca47a13ae15fde32dbfc4717fa03c1f9e7f4e9db17884905c0ad899ffbe73b0bf5119c11d6f1bbe72777879e6bf12e2fec9945bef16979734d6d8dae01eb8afa73c081108611360fc052c8961a48b0fecbd88fc4bc9857f437a84cfc5793fd6fd336e749f6281f97e84f61b79c6f2a6c8a7cc817ed56546e5745d34fcd8866e548ee430eaa7a39a88481f3687a34258a781f248"], 0x0)

3.973776069s ago: executing program 4 (id=2536):
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000280)=<r1=>0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000400850000009300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
write$cgroup_pid(r0, &(0x7f0000000680)=r1, 0x12)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)={0x18, 0x3c, 0x107, 0xfffffffc, 0x80000, {0x4, 0x7c}, [@nested={0x4, 0x48}]}, 0xfd13}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
syz_init_net_socket$ax25(0x3, 0x2, 0x0)
r3 = socket(0x28, 0x5, 0x0)
listen(r3, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
r4 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x1a44d, 0x10100, 0x0, 0x3d7}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000280)=0x1, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0)
socket$kcm(0x10, 0x2, 0x4)
openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$netlink(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005a000d03"], 0x1c}], 0x1, 0x0, 0x0, 0x4005}, 0x846)
r9 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
writev(r9, &(0x7f0000000400)=[{&(0x7f0000000000)="aefdda9d2403ffbf5a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb01", 0x24}], 0x1)
syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x80000016, 0x0, &(0x7f00000004c0)})
io_uring_enter(r4, 0x567, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000400"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)

3.878533303s ago: executing program 2 (id=2537):
syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0)
r1 = socket$inet(0x2, 0x2, 0x1)
setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000000)=0xfffffffc, 0x4)
bind$inet(r1, &(0x7f0000000680)={0x2, 0x4e1e, @private=0xa010101}, 0x10)
openat$nullb(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYBLOB="00000000000000004c00128009000100766c616e000000003c00028006000500810000001c0004800c00010006000000000000000c00019f0f0c0000090000000c0002000000000005000000060001000400000008000500"], 0x74}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000240)=0xd)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554", 0x1e)
ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0xc0045405, 0xffffffffffffffff)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r3, &(0x7f0000000000), 0x6)
socket$nl_route(0x10, 0x3, 0x0)

3.814578125s ago: executing program 3 (id=2538):
socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'sy\xa4', 0x20, 0xffd}, 0x2a, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x40101)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00', 0x100})
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25"})
close_range(r2, 0xffffffffffffffff, 0x0)

2.647622355s ago: executing program 6 (id=2539):
r0 = io_uring_setup(0x178e, &(0x7f00000000c0)={0x0, 0x52c1})
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = creat(&(0x7f0000000240)='./file0\x00', 0x148)
pipe2$9p(&(0x7f0000001900)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r6 = dup(r5)
write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000004c0), 0x10400, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',cache=mmap'])
chmod(&(0x7f0000000340)='./file0\x00', 0x0)
r7 = open$dir(&(0x7f0000000180)='./file0\x00', 0x1, 0x0)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif\x00'}, 0x58)
r9 = accept4(r8, 0x0, 0x0, 0x0)
sendmsg$kcm(r9, &(0x7f00000009c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000280)='W', 0x1}, {&(0x7f0000000200)="04000000000000001f63617b8d9601e90cb4321cf9bf04a8cdb64a61fce6", 0x1e}], 0x2}, 0x0)
r10 = openat$cgroup_ro(r3, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
r11 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x80000)
ioctl$BLKREPORTZONE(r11, 0xc0101282, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000000000000000000000000004e024dd4ff843a7e3e9b257739c6bdb971c0e2497182e8bb0d17e1215ce1791d646ab99f"])
ftruncate(r10, 0x57)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r12)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, <r14=>0x0})
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000980)=[{{&(0x7f0000000540)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000440)="9a0bd4bf527920c01b550e62ed41e1af24520bdc62ff803f34339cac5598026ad3c011d686c8b761f5a50d", 0x2b}, {&(0x7f0000000600)="cdf756d7a95785a2380292b798094c1e18e99944af644b45bf3caafddcc5007b849621a4aa6e58a81c040c994f08f786078931a9e89e1b90fd3a6f7a315808401908ec8932cc497dc7012b679c97d9d6712f43949e8ec435e0fcd4d6e71fb01099defc355146846cd180be510810806b81ff932041b36975c1d1d77a3579ce69511144b19ea57f249ea274485d891dee67edfa014b957fb45f99da163e8d59c054f59dc437d4d36195f7528df54643183be365e7a57e07554269bb31a6365eab766c60e5069958238cc44427340af058e373997594b9a37a7d8e9f7094f1fc413c87", 0xe2}, {&(0x7f0000000780)="add26e10b77cb3e7a195a9b844c4d048788b27a448a7e0c5bd417c1193b5ea67c0", 0x21}], 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r3, @ANYRES32, @ANYRES32=r12, @ANYRES32=r10, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r14, @ANYBLOB="0600"], 0x80, 0x40000}}], 0x1, 0x8804)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="7961000000000000008d7e000000"], 0x14}}, 0x4000054)
sendfile(r7, r10, 0x0, 0x7ffff000)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=<r15=>0x0)
bind$nfc_llcp(r1, &(0x7f0000000240)={0x27, r15, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760beeab11e88509de7f1939e8abfe0055acc8ef039a5be42200000000000000000100", 0x38}, 0x60)
ppoll(&(0x7f0000000040)=[{r1, 0x4528}], 0x1, 0x0, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

2.609646563s ago: executing program 3 (id=2540):
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x509340, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="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", 0xfffff, 0xfffffffffffffffb)

2.55327999s ago: executing program 4 (id=2541):
openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', <r1=>0x0})
socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={@mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1})
ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r1})
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', <r4=>0x0})
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000540)={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r4}) (fail_nth: 2)

2.460472284s ago: executing program 2 (id=2542):
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r0, 0x5b07, &(0x7f0000000040))

1.795863659s ago: executing program 5 (id=2543):
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000940)={{}, 'syz0\x00', 0x40})
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@my=0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x2, r3, 0xf0})
prctl$PR_MCE_KILL(0x21, 0x0, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000180)={0x28, 0x4, r3, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7})
ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000200))
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4)
socket$inet6(0xa, 0x2, 0x10000)
close(r2)

1.691749685s ago: executing program 2 (id=2544):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
fremovexattr(r1, &(0x7f0000000000)=@known='system.posix_acl_access\x00')
open_tree(r1, 0x0, 0x89981)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x0, '.\x00'}})

1.691595785s ago: executing program 4 (id=2545):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10)
r1 = memfd_create(&(0x7f0000000040)='rootmode', 0x0)
pwritev(r1, &(0x7f0000000180)=[{&(0x7f0000000100)='E', 0x1}], 0x1, 0x0, 0x0)

1.316953372s ago: executing program 6 (id=2546):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x2c, 0x3d, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x9, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x2c}}, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
sendmmsg$unix(r6, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000080)="3b464c3bcd2bd7d2b1a92eca79c286a06dffdfeb623ea9e40a2c95cd702350d944237596556c9479bf1521276d845eb45d2cd8e6380fc6ce9c3451c4c197909a89cc640607df2e7a", 0x48}, {&(0x7f0000000180)="fa302c5276f60e090ecdcd2ab8152552e0ec74a69db872f09ac999fb27496391dbf3d0bc94611c29", 0x28}], 0x2}}], 0x1, 0x0)

905.241291ms ago: executing program 3 (id=2547):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x7, 0x10000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x3, 0x300)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r4, &(0x7f0000002240)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000740)=[@ip_ttl={{0x5, 0x0, 0x34, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @empty}}}], 0x38}}], 0x1, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x40c0}, 0xc4)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20)
r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00')
preadv(r7, &(0x7f0000000040)=[{&(0x7f0000000180)=""/66, 0x42}, {0x0}], 0x2, 0x0, 0x3)
r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0)
sendfile(r8, 0xffffffffffffffff, 0x0, 0x20000023896)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0xd000, 0xeeee8000}}, "cb31455c9e9d288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97af85a08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d03ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e50100cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f78930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb7eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a91b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156ee4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c4ad8c81d77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d4738d5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa710c3e20fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95d3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362eb5bf86fce896dbc2a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641baf9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca433d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33205f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eeae43a354fe51b4c49e8fcda3c322b738ed2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f6fb4ded9749640e0e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a343133158364a9fe3bb4b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc245e748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d349cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3953c89aff4eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33d0d9ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc1016821c013109f34aece6183994b853d0e9561375c02cdd26b1b5511ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e7e8f67b8be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c08518bdc6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e4b1760f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e51600"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

721.752049ms ago: executing program 5 (id=2548):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffbfffffffe}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
gettid()
arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x5)
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000001300)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x28, 0x8, 0x0, 0x5, 0x0, 0x3e, 0xf, 0x20b, 0x40, 0x343, 0x2, 0x2, 0x38, 0x1, 0x1, 0x8, 0x2}, [{0x0, 0x5, 0xffffffffffffffff, 0x9, 0x1, 0xd329686, 0xfffffffffffffffa, 0x8}], "", ['\x00', '\x00', '\x00', '\x00']}, 0x478)
r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1f, 0x1}}, 0x3c)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x20000023896)
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x100, 0x0, 0x0, "7a58beca3900000000000000000000000200"})
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0xe)
syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$FIONREAD(r6, 0x541b, &(0x7f0000000080))
syz_usb_connect(0x6, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="800008641982302013f140b8bb54dedf70f209822d00010000600000ee48b10040000003"], 0x0)

719.340597ms ago: executing program 4 (id=2549):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@delchain={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0x0, 0xc}, {0x4, 0x1}}}, 0x24}}, 0x0)

0s ago: executing program 4 (id=2550):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
getpid()
get_mempolicy(0x0, &(0x7f00000000c0), 0x8000000000000001, &(0x7f00004a7000/0xe000)=nil, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, &(0x7f0000000040)='lazytime\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x44010)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x4e8, 0x450, 0x2c0, 0xffffffff, 0x3a8, 0x2c0, 0x450, 0x450, 0xffffffff, 0x450, 0x450, 0x5, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xff000000, 0x0, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0xffffff00, 0xff], 0x3ff, 0x1, 0x5c, 0x4e20, 0x4e22, 0x4e24, 0x4e24, 0x804, 0x20c0}, 0x80, 0x2}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x801, {0x0, @broadcast, @multicast2, @port=0x1, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00'}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x890, 0x218, 0x0, 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @rand_addr, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYRES32=r2], 0x30}}, 0x0)
r9 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f0000001b80)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000200)="8259c3e4fd6893372695be3d7dc3716245bfcec0c42e44463d114e1b57d2ab8a3dc38668eb1b", 0x26}, {&(0x7f0000000280)="9dfad7eb17056dbf37610d313a4a517476cb5b7edb2e56995c4984a1899ed0d7aefd8adf656c4fb47160f9a9af7961c95e4b7f5d7f4c2cf1a85cea8031f557ae4f370bfbd88108cad0fd0de00bc756a73ad7c94f1c899bf1a39060973bd302eafb55ee0d0993bf856c4c2644b205408294370473a2c10f77d945b5239fc912879c3d96e0ebf895957425b973aa8d022afe62d2755577a1e796f80adac3e3d8eb42c107d1ed23e739642ae6081db98307", 0xb0}, {&(0x7f00000004c0)="c23015f924f267052b2fe87aaeb017797c98616c471ba5033c4fafb4a1a92b9d9f523bef6624d8f316355b5e15eb6d5d5635ffc775b4340ad620fc189248e94ef8fa37aca3a0ea3672e2622cefa9f5d2f5e6401c51af1c00f67513e9dfc89c4ea08065cfa8e7d42f2e21e8d889e2381eb311759e6d66b7440527d45ac4533bc47912cd818896c01e7a4d073faf06ab5dd945a9839c1308e4", 0x98}, {&(0x7f0000000580)="33401b3003053712f1805b69d12d56eb618dc0562b8dafd12f3e8e766d106cfa85013aa4d3b0ea7b3c0b8e0a3e47bea7212b38004f687dd3fdee7d9383bb54b486e0cfe8616ce632b9fd04f895ceddcd3094c9226df9eec24417392f3d55c46c1a93cadb8f28a44a93916cd2d1929c877ec236c393b71a", 0x77}, {&(0x7f0000000400)="cb3f3dba94b1a7d6e49b15910dfdb0b9b8e4bc92119d9d08a2da853ea9f24a17b3c740810c2cbed4054a56ca0fa3c2a3a36b6c7491", 0x35}, {&(0x7f0000000600)="05301c739bf8991ff974ec4efa78a6e84cc68e270272142d62f26709078bdc8a21d8bdb781", 0x25}, {&(0x7f0000000640)="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", 0xfc}, {&(0x7f0000000740)="30d3652eb6b9bb2c86b5be7710f370f2dcd5dc32e1e3daa93aa7a41b8567a9adac2c3b21d6a9b1f242d9d189b3be9718b32b8dc967aeea83ee46d117ea71a121966323726914b27ff06e89939c81db4db9fd1097bcf55031421077cfe77c5973d043cc1840cb0a01246fc33e97069ec2c66e8a0201f500cf782bd491a3773746d8ae2ecaa92ce4eb7f061ce01b4cdf6e59f2cc402e8cf8c234c29620225ab1c9425e15aa3373aec891babc69d414f86e5e091bdad52bba0842", 0xb9}, {&(0x7f0000000800)="b4087617bfc3fd3cb7910a87082c75e7623443a0981e7441353450a891bdd76e3e9dfb6213104c1265707f78e2dc2435c08f808749f99f1c1011acd7b79203550d17e0c9e7cbc4ba35cede4b0bf115574f243927711490f8405456c3cf613bfd21023d87a6a3155d3e0da1aeae85fe6e2a282a4d501798b0b3508bd7f772f64524ab58b7112818dcc4df54d2d0b4d5f8195c85cf8388cb2d7af4f03ca0c92c41142939", 0xa3}], 0x9, &(0x7f0000000980)=[{0x110, 0x239, 0x8, "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"}, {0x1010, 0x117, 0x0, "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"}, {0xb8, 0x112, 0x401, "09657ae8519035d17340091ee5b21b4ff05a3f88f294fdc5a9d408aaefffe16d85c3abb1fa4d036693ef75a5dbd5bca22ea7493fcc78a17b002ab83d9bf4e7c363b57f5e261eb2aea9b488a9878b73311d453fabb41b2c00aaad7ab4da183ac4803109ebdbc54d28397ec69f9fdd2e49a33eec293a778963b2baeea44c759cc5f53c5cc4c263260358c768096c8d78b0f1cb98ee2136d2379a076415312601beac44ea"}], 0x11d8}, 0x4014)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01020a30e6cfaff8a83b080000000c0001"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
r12 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0)
migrate_pages(r12, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272)

kernel console output (not intermixed with test programs):

8 R08: 0000000000000498 R09: 0000000000000000
[  841.945415][T13707] R10: 0000000020000500 R11: 0000000000000246 R12: 0000000000000000
[  841.953368][T13707] R13: 0000000000000000 R14: 00007f668cf75fa0 R15: 00007ffca83310d8
[  841.961355][T13707]  </TASK>
[  841.966808][T13732] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  841.979454][T13707] Mem-Info:
[  841.982661][T13707] active_anon:20142 inactive_anon:0 isolated_anon:0
[  841.982661][T13707]  active_file:23662 inactive_file:38809 isolated_file:0
[  841.982661][T13707]  unevictable:768 dirty:525 writeback:3
[  841.982661][T13707]  slab_reclaimable:11644 slab_unreclaimable:106501
[  841.982661][T13707]  mapped:34432 shmem:16374 pagetables:886
[  841.982661][T13707]  sec_pagetables:0 bounce:0
[  841.982661][T13707]  kernel_misc_reclaimable:0
[  841.982661][T13707]  free:1273817 free_pcp:684 free_cma:0
[  842.125254][T13707] Node 0 active_anon:90868kB inactive_anon:0kB active_file:57060kB inactive_file:155168kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:148040kB dirty:2000kB writeback:0kB shmem:74360kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11212kB pagetables:3444kB sec_pagetables:0kB all_unreclaimable? no
[  842.995817][T13707] Node 1 active_anon:0kB inactive_anon:0kB active_file:37588kB inactive_file:68kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:88kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  843.026510][    C1] vkms_vblank_simulate: vblank timer overrun
[  843.070028][T13707] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  843.097198][    C1] vkms_vblank_simulate: vblank timer overrun
[  843.104575][T13707] lowmem_reserve[]: 0 2487 2487 0 0
[  843.110400][T13707] Node 0 DMA32 free:1210380kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:79264kB inactive_anon:0kB active_file:57060kB inactive_file:155068kB unevictable:1536kB writepending:1836kB present:3129332kB managed:2547124kB mlocked:0kB bounce:0kB free_pcp:1356kB local_pcp:576kB free_cma:0kB
[  843.141132][    C1] vkms_vblank_simulate: vblank timer overrun
[  843.151425][T13707] lowmem_reserve[]: 0 0 0 0 0
[  843.158488][T13707] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  843.194053][T13742] Invalid ELF header magic: != ELF
[  843.233227][T13707] lowmem_reserve[]:
[  843.298414][ T5819] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  843.385348][T12740] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[  843.416259][T13707]  0 0 0 0 0
[  843.455294][T13707] Node 1 Normal free:3873368kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:37588kB inactive_file:68kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  843.611519][T12740] usb 3-1: config 0 has no interfaces?
[  843.617566][T13707] lowmem_reserve[]: 0 0 0 0 0
[  843.625758][T12740] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de
[  843.645245][T12740] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  843.684183][T12740] usb 3-1: config 0 descriptor??
[  843.689296][T13707] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  843.715645][ T5819] usb 7-1: Using ep0 maxpacket: 8
[  843.723327][ T5819] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  843.724493][T13707] Node 0 DMA32: 5*4kB (E) 328*8kB (ME) 406*16kB (M) 88*32kB (UME) 216*64kB (UME) 104*128kB (UME) 54*256kB (UME) 32*512kB (UME) 20*1024kB (UME) 11*2048kB (ME) 268*4096kB (M) = 1210036kB
[  843.748136][ T5819] usb 7-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3
[  843.761656][T13707] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  843.780624][T13707] Node 1 Normal: 192*4kB (UE) 63*8kB (UME) 46*16kB (UE) 172*32kB (UME) 86*64kB (UME) 29*128kB (UME) 11*256kB (UME) 7*512kB (UM) 8*1024kB (UME) 2*2048kB (UE) 937*4096kB (M) = 3873368kB
[  843.803721][ T5819] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  843.820640][    C1] vkms_vblank_simulate: vblank timer overrun
[  843.837895][ T5819] usb 7-1: Product: syz
[  843.843690][ T5819] usb 7-1: Manufacturer: syz
[  843.849300][ T5819] usb 7-1: SerialNumber: syz
[  843.874980][ T5819] usb 7-1: config 0 descriptor??
[  844.025158][T13707] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  844.034759][T13707] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  844.054920][T13707] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  844.947062][T13707] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  844.985263][T13707] 81451 total pagecache pages
[  845.012254][T13707] 0 pages in swap cache
[  845.020019][T13707] Free swap  = 124580kB
[  845.024197][T13707] Total swap = 124996kB
[  845.040648][ T5909] usb 3-1: USB disconnect, device number 63
[  845.065454][ T5819] msi2500 7-1:0.0: Registered as swradio24
[  845.071338][ T5819] msi2500 7-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  845.073237][T13707] 2097051 pages RAM
[  845.093856][ T5819] usb 7-1: USB disconnect, device number 18
[  845.125229][T13707] 0 pages HighMem/MovableOnly
[  845.142668][T13707] 428612 pages reserved
[  845.155210][T13707] 0 pages cma reserved
[  845.825138][T13761] ax25_connect(): syz.4.2152 uses autobind, please contact jreuter@yaina.de
[  847.976878][    T9] usb 5-1: new high-speed USB device number 68 using dummy_hcd
[  848.345145][    T9] usb 5-1: Using ep0 maxpacket: 8
[  848.355451][    T9] usb 5-1: config 150 has an invalid interface number: 204 but max is 0
[  848.414279][    T9] usb 5-1: config 150 has no interface number 0
[  848.454809][    T9] usb 5-1: config 150 interface 204 has no altsetting 0
[  848.506014][    T9] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  848.525636][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  848.544753][    T9] usb 5-1: Product: syz
[  848.552641][    T9] usb 5-1: Manufacturer: syz
[  848.564264][T13778] Invalid ELF header magic: != ELF
[  848.994320][    T9] usb 5-1: SerialNumber: syz
[  849.331939][    T9] usb 5-1: USB disconnect, device number 68
[  849.907255][T13790] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  849.975398][T13790] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  850.099856][T13800] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  850.415249][ T5819] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  850.576840][ T5819] usb 6-1: Using ep0 maxpacket: 16
[  850.604995][ T5819] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  850.615478][ T5819] usb 6-1: config 0 has no interface number 0
[  850.630825][ T5819] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  850.645157][ T5819] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  850.664163][ T5819] usb 6-1: Product: syz
[  850.673578][ T5819] usb 6-1: Manufacturer: syz
[  850.678555][ T5819] usb 6-1: SerialNumber: syz
[  850.684978][ T5819] usb 6-1: config 0 descriptor??
[  850.693339][ T5819] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  850.751847][T13814] netlink: 'syz.2.2166': attribute type 9 has an invalid length.
[  850.771097][T13814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2166'.
[  851.287241][T13824] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  852.665323][T13803] Bluetooth: hci3: Opcode 0x0c1a failed: -110
[  852.671644][T13568] Bluetooth: hci3: command 0x0c1a tx timeout
[  852.957267][   T29] audit: type=1400 audit(1737413422.373:796): avc:  denied  { read } for  pid=13835 comm="syz.6.2172" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  852.985643][   T29] audit: type=1400 audit(1737413422.403:797): avc:  denied  { open } for  pid=13835 comm="syz.6.2172" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  853.093570][ T5819] gspca_spca1528: reg_w err -71
[  853.107583][ T5819] spca1528 6-1:0.1: probe with driver spca1528 failed with error -71
[  853.123432][ T5819] usb 6-1: USB disconnect, device number 20
[  853.435841][T13803] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  854.778276][ T5828] Bluetooth: hci4: command 0x0c1a tx timeout
[  855.174919][T13853] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2176'.
[  855.226168][T13863] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  855.290181][T13853] loop6: detected capacity change from 0 to 524287999
[  855.299614][    C1] blk_print_req_error: 7 callbacks suppressed
[  855.299636][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  855.314920][    C1] buffer_io_error: 7 callbacks suppressed
[  855.314940][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  855.331372][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  855.340658][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  855.350010][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  855.359233][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  855.368698][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  855.377859][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  855.399965][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  855.409235][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  855.417322][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  855.426521][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  855.435468][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  855.444670][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  855.454604][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  855.463890][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  855.471845][T13853] ldm_validate_partition_table(): Disk read failed.
[  855.482014][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  855.482062][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  855.483252][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  855.483274][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  855.499542][ T3466] loop: Write error at byte offset 1, length 4096.
[  856.019503][T13853] Dev loop6: unable to read RDB block 8
[  856.025425][T13853]  loop6: unable to read partition table
[  856.031216][T13853] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³˜) failed (rc=-5)
[  856.292014][T13876] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  856.527312][   T29] audit: type=1400 audit(1737413425.923:798): avc:  denied  { write } for  pid=13856 comm="syz.3.2177" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  856.550187][    C0] vkms_vblank_simulate: vblank timer overrun
[  856.842873][T13886] NILFS (loop6): device size too small
[  857.349485][   T25] usb 5-1: new high-speed USB device number 69 using dummy_hcd
[  857.675427][   T25] usb 5-1: Using ep0 maxpacket: 8
[  857.730698][   T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  857.802056][   T25] usb 5-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3
[  857.825212][   T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  857.833382][   T25] usb 5-1: Product: syz
[  857.855453][   T25] usb 5-1: Manufacturer: syz
[  857.860194][   T25] usb 5-1: SerialNumber: syz
[  858.045306][   T25] usb 5-1: config 0 descriptor??
[  858.105844][   T29] audit: type=1400 audit(1737413427.523:799): avc:  denied  { write } for  pid=13891 comm="syz.5.2187" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  858.249914][T13894] Invalid ELF header magic: != ELF
[  859.750216][T13902] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0
[  859.772871][ T5819] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  860.040707][   T25] msi2500 5-1:0.0: Registered as swradio24
[  860.048419][   T25] msi2500 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  860.205371][ T5819] usb 7-1: Using ep0 maxpacket: 8
[  860.210876][   T25] usb 5-1: USB disconnect, device number 69
[  860.226604][ T5819] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  860.263604][ T5819] usb 7-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3
[  860.293179][ T5819] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  860.326056][ T5819] usb 7-1: Product: syz
[  860.356285][ T5819] usb 7-1: Manufacturer: syz
[  860.361323][ T5819] usb 7-1: SerialNumber: syz
[  860.368485][ T5819] usb 7-1: config 0 descriptor??
[  860.426078][ T5819] msi2500 7-1:0.0: Registered as swradio24
[  860.432331][ T5819] msi2500 7-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  860.432538][T13915] FAULT_INJECTION: forcing a failure.
[  860.432538][T13915] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  860.447115][T13916] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  860.464971][T13915] CPU: 0 UID: 0 PID: 13915 Comm: syz.3.2192 Not tainted 6.13.0-syzkaller #0
[  860.473959][T13915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  860.484015][T13915] Call Trace:
[  860.487279][T13915]  <TASK>
[  860.490197][T13915]  dump_stack_lvl+0x16c/0x1f0
[  860.494868][T13915]  should_fail_ex+0x497/0x5b0
[  860.499551][T13915]  _copy_from_iter+0x2a1/0x1560
[  860.504389][T13915]  ? trace_lock_acquire+0x14e/0x1f0
[  860.505294][T12740] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[  860.509572][T13915]  ? __alloc_skb+0x1fe/0x380
[  860.509608][T13915]  ? __pfx__copy_from_iter+0x10/0x10
[  860.526957][T13915]  ? __virt_addr_valid+0x1a4/0x590
[  860.532062][T13915]  ? __virt_addr_valid+0x5e/0x590
[  860.537072][T13915]  ? __phys_addr_symbol+0x30/0x80
[  860.542106][T13915]  ? __check_object_size+0x488/0x710
[  860.547397][T13915]  netlink_sendmsg+0x813/0xd70
[  860.552150][T13915]  ? __pfx_netlink_sendmsg+0x10/0x10
[  860.557442][T13915]  ____sys_sendmsg+0xaaf/0xc90
[  860.562228][T13915]  ? copy_msghdr_from_user+0x10b/0x160
[  860.567697][T13915]  ? __pfx_____sys_sendmsg+0x10/0x10
[  860.573011][T13915]  ___sys_sendmsg+0x135/0x1e0
[  860.577703][T13915]  ? __pfx____sys_sendmsg+0x10/0x10
[  860.582920][T13915]  ? __pfx_lock_release+0x10/0x10
[  860.587961][T13915]  ? trace_lock_acquire+0x14e/0x1f0
[  860.593190][T13915]  ? __fget_files+0x206/0x3a0
[  860.597890][T13915]  __sys_sendmsg+0x16e/0x220
[  860.602496][T13915]  ? __pfx___sys_sendmsg+0x10/0x10
[  860.605927][   T51] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  860.607616][T13915]  do_syscall_64+0xcd/0x250
[  860.619671][T13915]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  860.625579][T13915] RIP: 0033:0x7f668cd85d29
[  860.629995][T13915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  860.649603][T13915] RSP: 002b:00007f668dc0d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  860.658004][T13915] RAX: ffffffffffffffda RBX: 00007f668cf75fa0 RCX: 00007f668cd85d29
[  860.665975][T13915] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003
[  860.673939][T13915] RBP: 00007f668dc0d090 R08: 0000000000000000 R09: 0000000000000000
[  860.681891][T13915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  860.689847][T13915] R13: 0000000000000000 R14: 00007f668cf75fa0 R15: 00007ffca83310d8
[  860.697807][T13915]  </TASK>
[  860.700894][    C0] vkms_vblank_simulate: vblank timer overrun
[  860.715512][T12740] usb 3-1: Using ep0 maxpacket: 32
[  860.758346][T12740] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  860.792729][   T51] usb 6-1: Using ep0 maxpacket: 8
[  860.840523][T13919] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0
[  860.901902][T12740] usb 3-1: config 0 has no interface number 0
[  860.934812][   T51] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  861.009518][T12740] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  861.037358][T12740] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  861.050446][   T51] usb 6-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3
[  861.094398][   T51] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  861.131603][T12740] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  861.152344][   T51] usb 6-1: Product: syz
[  861.161517][   T51] usb 6-1: Manufacturer: syz
[  861.168602][T12740] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  861.183350][ T5824] usb 7-1: USB disconnect, device number 19
[  861.185549][   T51] usb 6-1: SerialNumber: syz
[  861.215011][T12740] usb 3-1: config 0 descriptor??
[  861.221840][   T51] usb 6-1: config 0 descriptor??
[  861.287706][   T51] msi2500 6-1:0.0: Registered as swradio24
[  861.293672][   T51] msi2500 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  861.499882][   T25] usb 4-1: new high-speed USB device number 81 using dummy_hcd
[  861.576398][ T5819] usb 5-1: new high-speed USB device number 70 using dummy_hcd
[  861.676380][   T25] usb 4-1: Using ep0 maxpacket: 8
[  861.704508][   T25] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  861.947305][   T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  861.987176][   T51] usb 6-1: USB disconnect, device number 21
[  861.995338][ T5819] usb 5-1: Using ep0 maxpacket: 8
[  862.003007][   T25] usb 4-1: Product: syz
[  862.007570][   T25] usb 4-1: Manufacturer: syz
[  862.011179][ T5819] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  862.026690][   T25] usb 4-1: SerialNumber: syz
[  862.036439][   T25] usb 4-1: config 0 descriptor??
[  862.043324][ T5819] usb 5-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3
[  862.052630][ T5819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  862.063748][ T5819] usb 5-1: Product: syz
[  862.072166][   T25] gspca_main: se401-2.14.0 probing 047d:5003
[  862.078870][ T5819] usb 5-1: Manufacturer: syz
[  862.087870][ T5819] usb 5-1: SerialNumber: syz
[  862.120786][ T5819] usb 5-1: config 0 descriptor??
[  862.645336][   T25] gspca_se401: Bayer format not supported!
[  862.876060][   T25] usb 4-1: USB disconnect, device number 81
[  863.014540][ T5819] msi2500 5-1:0.0: Registered as swradio24
[  863.022880][ T5819] msi2500 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  863.044306][ T5819] usb 5-1: USB disconnect, device number 70
[  863.104372][T13938] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  863.419193][T13940] netlink: 'syz.2.2198': attribute type 6 has an invalid length.
[  863.427109][T13940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2198'.
[  863.501519][T12740] usbhid 3-1:0.1: can't add hid device: -71
[  863.632044][T12740] usbhid 3-1:0.1: probe with driver usbhid failed with error -71
[  863.988809][T12740] usb 3-1: USB disconnect, device number 64
[  864.497157][T13956] NILFS (loop6): device size too small
[  864.668121][T13958] ax25_connect(): syz.3.2202 uses autobind, please contact jreuter@yaina.de
[  866.346994][T13974] fuse: Bad value for 'user_id'
[  866.355196][T13974] fuse: Bad value for 'user_id'
[  866.413726][T13975] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2208'.
[  866.571219][T13949] nvme_fabrics: unknown parameter or missing value 'gDf˜
' in ctrl creation request
[  867.491300][   T25] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  867.683246][T13987] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2211'.
[  867.692751][   T25] usb 7-1: Using ep0 maxpacket: 32
[  867.705717][T13987] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2211'.
[  867.726933][T13987] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2211'.
[  867.736793][   T25] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  867.745318][   T25] usb 7-1: config 0 has no interface number 0
[  867.760963][T13987] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2211'.
[  867.770717][   T25] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  867.791977][   T25] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  867.812774][   T25] usb 7-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  867.832783][   T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  867.845265][   T25] usb 7-1: config 0 descriptor??
[  868.100475][T13995] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  869.465828][T14007] ax25_connect(): syz.5.2215 uses autobind, please contact jreuter@yaina.de
[  869.855332][T13568] Bluetooth: hci4: command 0x0c1a tx timeout
[  870.147293][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  870.153872][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  870.277746][   T25] usbhid 7-1:0.1: can't add hid device: -71
[  870.350592][T14022] rtc_cmos 00:00: Alarms can be up to one day in the future
[  870.362408][   T25] usbhid 7-1:0.1: probe with driver usbhid failed with error -71
[  870.415493][T12740] usb 4-1: new high-speed USB device number 82 using dummy_hcd
[  870.436690][   T25] usb 7-1: USB disconnect, device number 20
[  870.565244][    T9] usb 5-1: new high-speed USB device number 71 using dummy_hcd
[  870.585295][T12740] usb 4-1: Using ep0 maxpacket: 8
[  870.593029][T12740] usb 4-1: config 150 has an invalid interface number: 204 but max is 0
[  870.602351][T12740] usb 4-1: config 150 has no interface number 0
[  870.639285][T12740] usb 4-1: config 150 interface 204 has no altsetting 0
[  870.659324][T12740] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  870.673966][T12740] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  870.683203][T12740] usb 4-1: Product: syz
[  870.692101][T12740] usb 4-1: Manufacturer: syz
[  870.697350][T12740] usb 4-1: SerialNumber: syz
[  870.725164][    T9] usb 5-1: Using ep0 maxpacket: 16
[  870.731980][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  870.746797][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  870.763271][    T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  870.776355][    T9] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  870.785271][   T25] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  870.793282][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  870.976540][    T9] usb 5-1: config 0 descriptor??
[  870.985837][   T25] usb 7-1: Using ep0 maxpacket: 8
[  870.996388][T12740] usb 4-1: USB disconnect, device number 82
[  871.005422][   T25] usb 7-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb
[  871.029671][   T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  871.054245][   T25] usb 7-1: Product: syz
[  871.083924][   T25] usb 7-1: Manufacturer: syz
[  871.104211][   T25] usb 7-1: SerialNumber: syz
[  871.265601][T14036] FAULT_INJECTION: forcing a failure.
[  871.265601][T14036] name failslab, interval 1, probability 0, space 0, times 0
[  871.278628][T14036] CPU: 0 UID: 0 PID: 14036 Comm: syz.2.2225 Not tainted 6.13.0-syzkaller #0
[  871.287348][T14036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  871.297423][T14036] Call Trace:
[  871.300716][T14036]  <TASK>
[  871.303652][T14036]  dump_stack_lvl+0x16c/0x1f0
[  871.308353][T14036]  should_fail_ex+0x497/0x5b0
[  871.313048][T14036]  ? fs_reclaim_acquire+0xae/0x150
[  871.318174][T14036]  should_failslab+0xc2/0x120
[  871.322867][T14036]  __kmalloc_noprof+0xcb/0x510
[  871.327641][T14036]  ? __pfx___mutex_trylock_common+0x10/0x10
[  871.333534][T14036]  ? __kernel_text_address+0xd/0x40
[  871.338731][T14036]  ? genl_rcv_msg+0x580/0x800
[  871.343440][T14036]  genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290
[  871.350567][T14036]  genl_family_rcv_msg_doit+0xbf/0x2f0
[  871.356034][T14036]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  871.362091][T14036]  ? genl_get_cmd+0x195/0x580
[  871.366786][T14036]  ? __radix_tree_lookup+0x21f/0x2c0
[  871.372072][T14036]  genl_rcv_msg+0x565/0x800
[  871.376574][T14036]  ? __pfx_genl_rcv_msg+0x10/0x10
[  871.381605][T14036]  ? __pfx_nbd_genl_connect+0x10/0x10
[  871.387009][T14036]  ? __pfx___lock_acquire+0x10/0x10
[  871.392213][T14036]  netlink_rcv_skb+0x16b/0x440
[  871.396974][T14036]  ? __pfx_genl_rcv_msg+0x10/0x10
[  871.402011][T14036]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  871.407320][T14036]  ? down_read+0xc9/0x330
[  871.411668][T14036]  ? __pfx_down_read+0x10/0x10
[  871.416434][T14036]  ? netlink_deliver_tap+0x1ae/0xd30
[  871.421739][T14036]  genl_rcv+0x28/0x40
[  871.425741][T14036]  netlink_unicast+0x53c/0x7f0
[  871.430505][T14036]  ? __pfx_netlink_unicast+0x10/0x10
[  871.435806][T14036]  netlink_sendmsg+0x8b8/0xd70
[  871.440573][T14036]  ? __pfx_netlink_sendmsg+0x10/0x10
[  871.445891][T14036]  ____sys_sendmsg+0xaaf/0xc90
[  871.450668][T14036]  ? lockdep_hardirqs_on+0x7c/0x110
[  871.455862][T14036]  ? __pfx_____sys_sendmsg+0x10/0x10
[  871.461180][T14036]  ___sys_sendmsg+0x135/0x1e0
[  871.465868][T14036]  ? __pfx____sys_sendmsg+0x10/0x10
[  871.471068][T14036]  ? __pfx_lock_release+0x10/0x10
[  871.476106][T14036]  ? trace_lock_acquire+0x14e/0x1f0
[  871.481329][T14036]  ? __fget_files+0x206/0x3a0
[  871.486008][T14036]  __sys_sendmsg+0x16e/0x220
[  871.490599][T14036]  ? __pfx___sys_sendmsg+0x10/0x10
[  871.495711][T14036]  do_syscall_64+0xcd/0x250
[  871.500218][T14036]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  871.506099][T14036] RIP: 0033:0x7f8d85f85d29
[  871.510517][T14036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  871.530132][T14036] RSP: 002b:00007f8d86cce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  871.538540][T14036] RAX: ffffffffffffffda RBX: 00007f8d86176080 RCX: 00007f8d85f85d29
[  871.546493][T14036] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005
[  871.554459][T14036] RBP: 00007f8d86cce090 R08: 0000000000000000 R09: 0000000000000000
[  871.562434][T14036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  871.570391][T14036] R13: 0000000000000000 R14: 00007f8d86176080 R15: 00007ffd25c7ae28
[  871.578375][T14036]  </TASK>
[  871.920368][    T9] HID 045e:07da: Invalid code 65791 type 1
[  871.970681][    T9] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.000A/input/input16
[  872.015587][    T9] microsoft 0003:045E:07DA.000A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  872.554278][T14044] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  872.601060][ T5909] usb 5-1: USB disconnect, device number 71
[  872.627042][T14044] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  872.852281][T14054] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2230'.
[  872.861579][   T25] mxuport 7-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71)
[  872.870719][   T25] mxuport 7-1:254.0: probe with driver mxuport failed with error -5
[  872.886711][   T25] usb 7-1: USB disconnect, device number 21
[  873.450835][T14060] ax25_connect(): syz.2.2231 uses autobind, please contact jreuter@yaina.de
[  874.395319][   T25] usb 5-1: new high-speed USB device number 72 using dummy_hcd
[  874.575382][   T25] usb 5-1: Using ep0 maxpacket: 32
[  874.612444][   T25] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  874.628983][T14069] netlink: 'syz.3.2233': attribute type 1 has an invalid length.
[  874.674943][   T25] usb 5-1: config 0 has no interface number 0
[  874.716581][   T25] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  874.737522][T14069] 8021q: adding VLAN 0 to HW filter on device bond1
[  875.025250][ T5909] usb 4-1: new high-speed USB device number 83 using dummy_hcd
[  875.073088][   T25] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  875.083953][   T25] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  875.093557][   T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  875.108386][   T25] usb 5-1: config 0 descriptor??
[  875.135026][T14074] bond1: (slave gretap1): making interface the new active one
[  875.145711][T14074] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  875.250014][T14080] tipc: Started in network mode
[  875.270047][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  875.821126][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  875.831626][T14080] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  875.871812][ T5909] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  875.900860][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  875.926888][   T29] audit: type=1326 audit(1737413445.343:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14079 comm="syz.5.2237" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f66d5b85d29 code=0x0
[  875.951046][T14080] tipc: New replicast peer: fc01:0000:0000:0000:0000:0000:0000:0000
[  875.976045][ T5909] usb 4-1: config 0 descriptor??
[  875.993940][T14080] tipc: Enabled bearer <udp:syz1>, priority 10
[  876.017081][T14090] FAULT_INJECTION: forcing a failure.
[  876.017081][T14090] name failslab, interval 1, probability 0, space 0, times 0
[  876.075647][T14090] CPU: 0 UID: 0 PID: 14090 Comm: syz.6.2238 Not tainted 6.13.0-syzkaller #0
[  876.084380][T14090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  876.094440][T14090] Call Trace:
[  876.097719][T14090]  <TASK>
[  876.100658][T14090]  dump_stack_lvl+0x16c/0x1f0
[  876.105354][T14090]  should_fail_ex+0x497/0x5b0
[  876.110045][T14090]  ? fs_reclaim_acquire+0xae/0x150
[  876.115164][T14090]  should_failslab+0xc2/0x120
[  876.119851][T14090]  __kmalloc_noprof+0xcb/0x510
[  876.124629][T14090]  genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290
[  876.131752][T14090]  ? cred_has_capability.isra.0+0x192/0x2f0
[  876.137667][T14090]  genl_family_rcv_msg_doit+0xbf/0x2f0
[  876.143136][T14090]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  876.149220][T14090]  ? bpf_lsm_capable+0x9/0x10
[  876.153902][T14090]  ? security_capable+0x7e/0x260
[  876.158849][T14090]  genl_rcv_msg+0x565/0x800
[  876.163361][T14090]  ? __pfx_genl_rcv_msg+0x10/0x10
[  876.168393][T14090]  ? __pfx_ieee802154_scan_req+0x10/0x10
[  876.174035][T14090]  ? __pfx___lock_acquire+0x10/0x10
[  876.179245][T14090]  netlink_rcv_skb+0x16b/0x440
[  876.184028][T14090]  ? __pfx_genl_rcv_msg+0x10/0x10
[  876.189059][T14090]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  876.194377][T14090]  ? down_read+0xc9/0x330
[  876.198726][T14090]  ? __pfx_down_read+0x10/0x10
[  876.203501][T14090]  ? netlink_deliver_tap+0x1ae/0xd30
[  876.208813][T14090]  genl_rcv+0x28/0x40
[  876.212815][T14090]  netlink_unicast+0x53c/0x7f0
[  876.217594][T14090]  ? __pfx_netlink_unicast+0x10/0x10
[  876.222904][T14090]  netlink_sendmsg+0x8b8/0xd70
[  876.227687][T14090]  ? __pfx_netlink_sendmsg+0x10/0x10
[  876.232995][T14090]  ____sys_sendmsg+0xaaf/0xc90
[  876.237778][T14090]  ? copy_msghdr_from_user+0x10b/0x160
[  876.243259][T14090]  ? __pfx_____sys_sendmsg+0x10/0x10
[  876.248585][T14090]  ___sys_sendmsg+0x135/0x1e0
[  876.253282][T14090]  ? __pfx____sys_sendmsg+0x10/0x10
[  876.258499][T14090]  ? __pfx_lock_release+0x10/0x10
[  876.263534][T14090]  ? trace_lock_acquire+0x14e/0x1f0
[  876.268757][T14090]  ? __fget_files+0x206/0x3a0
[  876.273449][T14090]  __sys_sendmsg+0x16e/0x220
[  876.278047][T14090]  ? __pfx___sys_sendmsg+0x10/0x10
[  876.283183][T14090]  do_syscall_64+0xcd/0x250
[  876.287705][T14090]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  876.293618][T14090] RIP: 0033:0x7f48ab185d29
[  876.298044][T14090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  876.317668][T14090] RSP: 002b:00007f48ac002038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  876.326097][T14090] RAX: ffffffffffffffda RBX: 00007f48ab375fa0 RCX: 00007f48ab185d29
[  876.334077][T14090] RDX: 000000000000c040 RSI: 00000000200003c0 RDI: 0000000000000004
[  876.342052][T14090] RBP: 00007f48ac002090 R08: 0000000000000000 R09: 0000000000000000
[  876.350034][T14090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  876.358064][T14090] R13: 0000000000000000 R14: 00007f48ab375fa0 R15: 00007ffe272e35f8
[  876.366069][T14090]  </TASK>
[  876.369208][    C0] vkms_vblank_simulate: vblank timer overrun
[  876.866910][ T5909] usb 4-1: string descriptor 0 read error: -71
[  877.137915][ T5824] tipc: Node number set to 1
[  877.166392][ T5909] uclogic 0003:256C:006D.000B: failed retrieving string descriptor #200: -71
[  877.287527][ T5909] uclogic 0003:256C:006D.000B: failed retrieving pen parameters: -71
[  877.323361][ T5909] uclogic 0003:256C:006D.000B: failed probing pen v2 parameters: -71
[  877.733218][ T5909] uclogic 0003:256C:006D.000B: failed probing parameters: -71
[  877.745313][ T5909] uclogic 0003:256C:006D.000B: probe with driver uclogic failed with error -71
[  878.074910][ T5909] usb 4-1: USB disconnect, device number 83
[  878.172980][   T25] usbhid 5-1:0.1: can't add hid device: -71
[  878.187729][   T25] usbhid 5-1:0.1: probe with driver usbhid failed with error -71
[  878.235750][   T25] usb 5-1: USB disconnect, device number 72
[  878.505009][T14112] ax25_connect(): syz.2.2244 uses autobind, please contact jreuter@yaina.de
[  879.433271][T14121] NILFS (loop3): device size too small
[  879.776312][T14127] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  881.411567][T14137] FAULT_INJECTION: forcing a failure.
[  881.411567][T14137] name failslab, interval 1, probability 0, space 0, times 0
[  881.424453][T14137] CPU: 0 UID: 0 PID: 14137 Comm: syz.3.2250 Not tainted 6.13.0-syzkaller #0
[  881.433143][T14137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  881.443188][T14137] Call Trace:
[  881.446447][T14137]  <TASK>
[  881.449361][T14137]  dump_stack_lvl+0x16c/0x1f0
[  881.454119][T14137]  should_fail_ex+0x497/0x5b0
[  881.458783][T14137]  should_failslab+0xc2/0x120
[  881.463460][T14137]  kmem_cache_alloc_noprof+0x6e/0x3d0
[  881.468815][T14137]  ? skb_clone+0x190/0x3f0
[  881.473214][T14137]  skb_clone+0x190/0x3f0
[  881.477439][T14137]  netlink_deliver_tap+0xabd/0xd30
[  881.482541][T14137]  netlink_unicast+0x5e1/0x7f0
[  881.487290][T14137]  ? __pfx_netlink_unicast+0x10/0x10
[  881.492575][T14137]  netlink_sendmsg+0x8b8/0xd70
[  881.497325][T14137]  ? __pfx_netlink_sendmsg+0x10/0x10
[  881.502618][T14137]  ____sys_sendmsg+0xaaf/0xc90
[  881.507367][T14137]  ? copy_msghdr_from_user+0x10b/0x160
[  881.512807][T14137]  ? __pfx_____sys_sendmsg+0x10/0x10
[  881.518085][T14137]  ___sys_sendmsg+0x135/0x1e0
[  881.522738][T14137]  ? __pfx____sys_sendmsg+0x10/0x10
[  881.527926][T14137]  ? __fget_files+0x206/0x3a0
[  881.532592][T14137]  __sys_sendmsg+0x16e/0x220
[  881.537161][T14137]  ? __pfx___sys_sendmsg+0x10/0x10
[  881.542249][T14137]  ? __pfx___schedule+0x10/0x10
[  881.547105][T14137]  do_syscall_64+0xcd/0x250
[  881.551594][T14137]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  881.557470][T14137] RIP: 0033:0x7f668cd85d29
[  881.561864][T14137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  881.581450][T14137] RSP: 002b:00007f668dbec038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  881.589852][T14137] RAX: ffffffffffffffda RBX: 00007f668cf76080 RCX: 00007f668cd85d29
[  881.597809][T14137] RDX: 0000000000004000 RSI: 0000000020000380 RDI: 0000000000000005
[  881.605760][T14137] RBP: 00007f668dbec090 R08: 0000000000000000 R09: 0000000000000000
[  881.613722][T14137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  881.621680][T14137] R13: 0000000000000000 R14: 00007f668cf76080 R15: 00007ffca83310d8
[  881.629640][T14137]  </TASK>
[  881.632757][    C0] vkms_vblank_simulate: vblank timer overrun
[  882.014257][T14140] Invalid ELF header magic: != ELF
[  885.046590][T14163] ax25_connect(): syz.4.2259 uses autobind, please contact jreuter@yaina.de
[  885.779863][T14165] FAULT_INJECTION: forcing a failure.
[  885.779863][T14165] name failslab, interval 1, probability 0, space 0, times 0
[  885.792665][T14165] CPU: 0 UID: 0 PID: 14165 Comm: syz.3.2255 Not tainted 6.13.0-syzkaller #0
[  885.801348][T14165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  885.811383][T14165] Call Trace:
[  885.814656][T14165]  <TASK>
[  885.817585][T14165]  dump_stack_lvl+0x16c/0x1f0
[  885.822257][T14165]  should_fail_ex+0x497/0x5b0
[  885.826924][T14165]  should_failslab+0xc2/0x120
[  885.831590][T14165]  kmem_cache_alloc_noprof+0x6e/0x3d0
[  885.836955][T14165]  ? trace_lock_acquire+0x14e/0x1f0
[  885.842143][T14165]  ? skb_clone+0x190/0x3f0
[  885.846564][T14165]  skb_clone+0x190/0x3f0
[  885.850825][T14165]  dev_queue_xmit_nit+0x38f/0xbc0
[  885.855870][T14165]  ? netif_skb_features+0x3b0/0xd50
[  885.861089][T14165]  dev_hard_start_xmit+0x283/0x7b0
[  885.866212][T14165]  __dev_queue_xmit+0x7f0/0x43e0
[  885.871142][T14165]  ? __pfx___dev_queue_xmit+0x10/0x10
[  885.876536][T14165]  ? __asan_memcpy+0x3c/0x60
[  885.881109][T14165]  ? __asan_memcpy+0x3c/0x60
[  885.885679][T14165]  ? __skb_clone+0x570/0x760
[  885.890250][T14165]  netlink_deliver_tap+0xa87/0xd30
[  885.895363][T14165]  netlink_dump+0x639/0xd00
[  885.899883][T14165]  ? __pfx_netlink_dump+0x10/0x10
[  885.904926][T14165]  ? kfree_skbmem+0x1a4/0x1f0
[  885.909603][T14165]  ? kfree_skbmem+0x17a/0x1f0
[  885.914279][T14165]  ? kfree_skbmem+0x1a4/0x1f0
[  885.918955][T14165]  netlink_recvmsg+0xa0d/0xf30
[  885.923723][T14165]  ? __pfx_netlink_recvmsg+0x10/0x10
[  885.929008][T14165]  ? irqentry_exit+0x3b/0x90
[  885.933595][T14165]  ? lockdep_hardirqs_on+0x7c/0x110
[  885.938801][T14165]  sock_recvmsg+0x1f6/0x250
[  885.943302][T14165]  ____sys_recvmsg+0x219/0x6b0
[  885.948077][T14165]  ? __pfx_____sys_recvmsg+0x10/0x10
[  885.953373][T14165]  ? preempt_schedule_common+0x44/0xc0
[  885.958848][T14165]  ___sys_recvmsg+0x115/0x1a0
[  885.963517][T14165]  ? __pfx____sys_recvmsg+0x10/0x10
[  885.968709][T14165]  ? _raw_spin_unlock_irqrestore+0x61/0x80
[  885.974511][T14165]  ? rcu_preempt_deferred_qs_irqrestore+0x505/0xb80
[  885.981113][T14165]  do_recvmmsg+0x2f8/0x740
[  885.985529][T14165]  ? __pfx_do_recvmmsg+0x10/0x10
[  885.990475][T14165]  ? __pfx___schedule+0x10/0x10
[  885.995329][T14165]  ? lockdep_hardirqs_on+0x7c/0x110
[  886.000547][T14165]  __x64_sys_recvmmsg+0x239/0x290
[  886.005574][T14165]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  886.011126][T14165]  do_syscall_64+0xcd/0x250
[  886.015646][T14165]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  886.021543][T14165] RIP: 0033:0x7f668cd85d29
[  886.025953][T14165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  886.045561][T14165] RSP: 002b:00007f668dbec038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  886.053988][T14165] RAX: ffffffffffffffda RBX: 00007f668cf76080 RCX: 00007f668cd85d29
[  886.062053][T14165] RDX: 0000000000000002 RSI: 0000000020000bc0 RDI: 0000000000000006
[  886.070025][T14165] RBP: 00007f668dbec090 R08: 0000000000000000 R09: 0000000000000000
[  886.077995][T14165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  886.085960][T14165] R13: 0000000000000000 R14: 00007f668cf76080 R15: 00007ffca83310d8
[  886.093957][T14165]  </TASK>
[  886.097126][    C0] vkms_vblank_simulate: vblank timer overrun
[  886.332631][T14155] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  886.787187][T14187] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2264'.
[  886.854427][T14189] Invalid ELF header magic: != ELF
[  887.156838][ T5824] usb 5-1: new high-speed USB device number 73 using dummy_hcd
[  887.495485][ T5824] usb 5-1: Using ep0 maxpacket: 8
[  887.543446][ T5824] usb 5-1: config 150 has an invalid interface number: 204 but max is 0
[  887.552446][ T5824] usb 5-1: config 150 has no interface number 0
[  887.559046][ T5824] usb 5-1: config 150 interface 204 has no altsetting 0
[  888.511009][ T5824] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  888.544767][ T5824] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  888.556814][ T5824] usb 5-1: Product: syz
[  888.561026][ T5824] usb 5-1: Manufacturer: syz
[  888.566314][ T5824] usb 5-1: SerialNumber: syz
[  888.616020][ T5909] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[  888.801169][ T5909] usb 3-1: Using ep0 maxpacket: 16
[  888.809362][ T5909] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  889.095820][ T5909] usb 3-1: config 0 has no interface number 0
[  889.107411][ T5909] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  889.121573][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  889.151207][ T5824] usb 5-1: USB disconnect, device number 73
[  889.172897][ T5909] usb 3-1: Product: syz
[  889.185429][ T5909] usb 3-1: Manufacturer: syz
[  889.198412][ T5909] usb 3-1: SerialNumber: syz
[  889.210860][ T5909] usb 3-1: config 0 descriptor??
[  889.233700][ T5909] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  889.558592][T14209] ax25_connect(): syz.5.2271 uses autobind, please contact jreuter@yaina.de
[  890.224686][ T5909] gspca_spca1528: reg_w err -110
[  890.335210][ T5909] spca1528 3-1:0.1: probe with driver spca1528 failed with error -110
[  890.963114][T14219] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2272'.
[  891.336607][ T5824] usb 3-1: USB disconnect, device number 65
[  892.031643][T14227] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  892.524827][   T29] audit: type=1400 audit(1737413461.933:801): avc:  denied  { unmount } for  pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  892.819604][T14237] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  894.119572][T14243] Invalid ELF header magic: != ELF
[  896.195572][T12740] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  896.383264][ T5909] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  896.445368][T12740] usb 7-1: Using ep0 maxpacket: 16
[  896.614563][T12740] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  896.695730][T12740] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  896.710351][T14269] Invalid ELF header magic: != ELF
[  896.750145][T12740] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  896.769433][ T5909] usb 6-1: Using ep0 maxpacket: 16
[  896.789006][T12740] usb 7-1: Product: syz
[  896.794500][ T5909] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  896.799102][T12740] usb 7-1: Manufacturer: syz
[  896.824706][T12740] usb 7-1: SerialNumber: syz
[  897.011457][T12740] usb 7-1: config 0 descriptor??
[  897.152260][ T5909] usb 6-1: config 0 has no interface number 0
[  897.156555][T12740] hub 7-1:0.0: bad descriptor, ignoring hub
[  897.160518][ T5909] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  897.172005][T12740] hub 7-1:0.0: probe with driver hub failed with error -5
[  897.205421][ T5909] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  897.225909][T12740] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input17
[  897.271044][ T5909] usb 6-1: Product: syz
[  897.295276][ T5909] usb 6-1: Manufacturer: syz
[  897.299983][ T5909] usb 6-1: SerialNumber: syz
[  897.367853][ T5909] usb 6-1: config 0 descriptor??
[  897.402087][T14258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  897.407242][ T5909] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  897.443640][T14258] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  897.975687][ T5909] gspca_spca1528: reg_w err -110
[  898.425279][ T5909] spca1528 6-1:0.1: probe with driver spca1528 failed with error -110
[  899.576328][T12740] usb 7-1: USB disconnect, device number 22
[  900.924288][   T29] audit: type=1400 audit(1737413470.213:802): avc:  denied  { write } for  pid=14291 comm="syz.3.2293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  901.008621][T14294] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  901.044630][T14294] batadv_slave_1: entered promiscuous mode
[  901.055167][ T5824] usb 6-1: USB disconnect, device number 22
[  901.331830][T14294] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2293'.
[  902.095423][   T51] usb 5-1: new high-speed USB device number 74 using dummy_hcd
[  903.553296][   T51] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  903.562648][   T51] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  903.571515][   T51] usb 5-1: Product: syz
[  903.576040][   T51] usb 5-1: Manufacturer: syz
[  903.580662][   T51] usb 5-1: SerialNumber: syz
[  903.597213][   T51] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  903.618001][   T25] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  904.123146][T14304] netlink: 'syz.4.2299': attribute type 10 has an invalid length.
[  904.348888][T14304] 8021q: adding VLAN 0 to HW filter on device batadv0
[  904.359390][T14304] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  905.676477][T12740] usb 5-1: USB disconnect, device number 74
[  905.876215][T14341] binder: 14334:14341 unknown command 33
[  905.881910][T14341] binder: 14334:14341 ioctl c0306201 200001c0 returned -22
[  905.910266][   T25] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  905.948149][   T25] ath9k_htc: Failed to initialize the device
[  905.970422][T12740] usb 5-1: ath9k_htc: USB layer deinitialized
[  906.921137][T14349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2313'.
[  906.986774][T14349] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode
[  907.767397][T14349] binder: 14348:14349 ioctl 4018620d 0 returned -22
[  908.013996][T14349] binder: 14348:14349 ioctl c0306201 0 returned -14
[  908.023628][T14349] binder: 14348:14349 ioctl c0306201 0 returned -14
[  910.089233][T14380] Invalid source name
[  910.093309][T14380] UBIFS error (pid: 14380): cannot open "./file0", error -22
[  910.098224][T14380] fuse: Bad value for 'group_id'
[  910.111022][T14380] fuse: Bad value for 'group_id'
[  911.105636][ T5909] usb 4-1: new high-speed USB device number 84 using dummy_hcd
[  911.525461][ T5909] usb 4-1: Using ep0 maxpacket: 16
[  911.538365][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  911.549807][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  911.565190][ T5909] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  912.173479][ T5909] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  912.184603][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  912.201429][ T5909] usb 4-1: config 0 descriptor??
[  913.087068][T14405] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2325'.
[  913.129836][ T5909] HID 045e:07da: Invalid code 65791 type 1
[  913.140790][ T5909] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.000C/input/input18
[  913.155399][ T5909] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  913.211644][    T9] usb 5-1: new high-speed USB device number 75 using dummy_hcd
[  913.278576][ T5824] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[  913.395244][    T9] usb 5-1: Using ep0 maxpacket: 8
[  913.441822][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  913.458875][ T5824] usb 7-1: device descriptor read/64, error -71
[  913.564553][    T9] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  913.715717][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  913.753505][    T9] usb 5-1: config 0 descriptor??
[  913.758771][ T5824] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[  913.811815][T11965] usb 4-1: USB disconnect, device number 84
[  913.935318][ T5824] usb 7-1: device descriptor read/64, error -71
[  914.003387][    T9] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  914.055932][ T5824] usb usb7-port1: attempt power cycle
[  914.220828][   T29] audit: type=1400 audit(1737413483.633:803): avc:  denied  { listen } for  pid=14392 comm="syz.4.2322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  914.430244][   T29] audit: type=1400 audit(1737413483.663:804): avc:  denied  { connect } for  pid=14392 comm="syz.4.2322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  914.601362][ T5824] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[  914.631954][   T25] usb 5-1: USB disconnect, device number 75
[  914.644029][ T5824] usb 7-1: device descriptor read/8, error -71
[  914.895364][ T5824] usb 7-1: new high-speed USB device number 26 using dummy_hcd
[  914.956297][ T5824] usb 7-1: device descriptor read/8, error -71
[  915.086035][ T5824] usb usb7-port1: unable to enumerate USB device
[  915.559803][   T29] audit: type=1400 audit(1737413484.973:805): avc:  denied  { ioctl } for  pid=14421 comm="syz.3.2329" path="socket:[46130]" dev="sockfs" ino=46130 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  915.773839][T14428] nvme_fabrics: unknown parameter or missing value 'gDf˜
' in ctrl creation request
[  915.875460][T12740] usb 4-1: new high-speed USB device number 85 using dummy_hcd
[  915.899650][T14432] input: syz0 as /devices/virtual/input/input19
[  916.105302][T12740] usb 4-1: Using ep0 maxpacket: 8
[  916.111926][T12740] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  916.148330][T12740] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3
[  916.196889][T12740] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  916.205211][T12740] usb 4-1: Product: syz
[  916.209616][T12740] usb 4-1: Manufacturer: syz
[  916.214434][T12740] usb 4-1: SerialNumber: syz
[  916.274617][T12740] usb 4-1: config 0 descriptor??
[  916.295219][   T25] usb 7-1: new high-speed USB device number 27 using dummy_hcd
[  916.458240][   T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  916.494967][   T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  916.514422][T12740] msi2500 4-1:0.0: Registered as swradio24
[  916.520822][   T25] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.20
[  916.530302][T12740] msi2500 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  916.542364][   T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  916.564896][T12740] usb 4-1: USB disconnect, device number 85
[  916.572992][   T25] usb 7-1: config 0 descriptor??
[  916.930316][T14441] nvme_fabrics: unknown parameter or missing value 'gDf˜
' in ctrl creation request
[  916.957146][T14452] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2337'.
[  916.993663][   T25] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0
[  917.004875][   T25] cp2112 0003:10C4:EA90.000D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0
[  917.053004][T14441] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2335'.
[  917.063733][T14441] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2335'.
[  917.073332][T14441] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2335'.
[  917.083653][T14441] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2335'.
[  917.195627][T14455] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  917.205548][T14455] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  917.225238][T12740] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[  917.395220][T12740] usb 3-1: Using ep0 maxpacket: 8
[  917.425955][T12740] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  917.591049][T14464] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2333'.
[  918.432109][T12740] usb 3-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3
[  918.460501][T12740] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  918.625296][T13568] Bluetooth: hci4: command 0x0c1a tx timeout
[  918.750431][T12740] usb 3-1: Product: syz
[  918.754753][T12740] usb 3-1: Manufacturer: syz
[  918.759521][T12740] usb 3-1: SerialNumber: syz
[  918.767129][T12740] usb 3-1: config 0 descriptor??
[  920.394504][   T25] cp2112 0003:10C4:EA90.000D: error requesting version
[  920.426913][T12740] msi2500 3-1:0.0: Registered as swradio24
[  920.432775][T12740] msi2500 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  920.480105][T14480] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  921.077216][   T25] cp2112 0003:10C4:EA90.000D: probe with driver cp2112 failed with error -71
[  921.099349][   T25] usb 7-1: USB disconnect, device number 27
[  921.110118][T12740] usb 3-1: USB disconnect, device number 66
[  921.846741][T14497] FAULT_INJECTION: forcing a failure.
[  921.846741][T14497] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  921.892020][T14497] CPU: 0 UID: 0 PID: 14497 Comm: syz.4.2348 Not tainted 6.13.0-syzkaller #0
[  921.900747][T14497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  921.910815][T14497] Call Trace:
[  921.914102][T14497]  <TASK>
[  921.917039][T14497]  dump_stack_lvl+0x16c/0x1f0
[  921.921741][T14497]  should_fail_ex+0x497/0x5b0
[  921.926443][T14497]  _copy_from_iter+0x2a1/0x1560
[  921.931314][T14497]  ? trace_lock_acquire+0x14e/0x1f0
[  921.936531][T14497]  ? __alloc_skb+0x1fe/0x380
[  921.937231][T14498] nvme_fabrics: unknown parameter or missing value 'gDf˜
' in ctrl creation request
[  921.941128][T14497]  ? __pfx__copy_from_iter+0x10/0x10
[  921.941162][T14497]  ? __virt_addr_valid+0x1a4/0x590
[  921.960887][T14497]  ? __virt_addr_valid+0x5e/0x590
[  921.965930][T14497]  ? __phys_addr_symbol+0x30/0x80
[  921.970970][T14497]  ? __check_object_size+0x488/0x710
[  921.976273][T14497]  netlink_sendmsg+0x813/0xd70
[  921.981068][T14497]  ? __pfx_netlink_sendmsg+0x10/0x10
[  921.986387][T14497]  ____sys_sendmsg+0xaaf/0xc90
[  921.991173][T14497]  ? copy_msghdr_from_user+0x10b/0x160
[  921.996648][T14497]  ? __pfx_____sys_sendmsg+0x10/0x10
[  922.001986][T14497]  ___sys_sendmsg+0x135/0x1e0
[  922.006660][T14497]  ? __pfx____sys_sendmsg+0x10/0x10
[  922.011867][T14497]  ? __pfx_lock_release+0x10/0x10
[  922.016977][T14497]  ? trace_lock_acquire+0x14e/0x1f0
[  922.022199][T14497]  ? __fget_files+0x206/0x3a0
[  922.026887][T14497]  __sys_sendmsg+0x16e/0x220
[  922.031489][T14497]  ? __pfx___sys_sendmsg+0x10/0x10
[  922.036616][T14497]  do_syscall_64+0xcd/0x250
[  922.041125][T14497]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  922.047024][T14497] RIP: 0033:0x7f91a9b85d29
[  922.051435][T14497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  922.071044][T14497] RSP: 002b:00007f91aaa67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  922.079456][T14497] RAX: ffffffffffffffda RBX: 00007f91a9d75fa0 RCX: 00007f91a9b85d29
[  922.087422][T14497] RDX: 0000000000000000 RSI: 0000000020003700 RDI: 0000000000000003
[  922.095389][T14497] RBP: 00007f91aaa67090 R08: 0000000000000000 R09: 0000000000000000
[  922.103353][T14497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  922.111314][T14497] R13: 0000000000000000 R14: 00007f91a9d75fa0 R15: 00007ffc79726338
[  922.119302][T14497]  </TASK>
[  922.122416][    C0] vkms_vblank_simulate: vblank timer overrun
[  922.156152][T14502] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2349'.
[  922.214621][   T29] audit: type=1400 audit(1737413491.623:806): avc:  denied  { write } for  pid=14499 comm="syz.5.2349" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  922.237698][    C0] vkms_vblank_simulate: vblank timer overrun
[  922.439718][T14508] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2351'.
[  922.455906][T14510] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2352'.
[  922.467941][T14510] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2352'.
[  923.220816][ T5872] usb 4-1: new high-speed USB device number 86 using dummy_hcd
[  924.138638][T14521] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR
[  924.316182][T14527] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  924.625330][   T29] audit: type=1400 audit(1737413493.703:807): avc:  denied  { mounton } for  pid=14518 comm="syz.6.2355" path="/167/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[  925.135143][ T5872] usb 4-1: Using ep0 maxpacket: 8
[  925.141772][ T5872] usb 4-1: config 150 has an invalid interface number: 204 but max is 0
[  925.150337][ T5872] usb 4-1: config 150 has no interface number 0
[  925.156977][ T5872] usb 4-1: config 150 interface 204 has no altsetting 0
[  925.175915][ T5872] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  925.184991][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  925.985205][ T5872] usb 4-1: Product: syz
[  925.989422][ T5872] usb 4-1: Manufacturer: syz
[  925.994038][ T5872] usb 4-1: SerialNumber: syz
[  926.391008][ T5824] usb 5-1: new high-speed USB device number 76 using dummy_hcd
[  926.493727][ T5872] usb 4-1: can't set config #150, error -71
[  926.515298][ T5872] usb 4-1: USB disconnect, device number 86
[  926.664376][ T5824] usb 5-1: Using ep0 maxpacket: 16
[  926.847739][ T5824] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  926.859695][ T5824] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  926.871184][ T5824] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  926.891840][T14539] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2359'.
[  927.354795][ T5824] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  927.368725][ T5824] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  927.434010][ T5824] usb 5-1: config 0 descriptor??
[  927.486685][T14542] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2360'.
[  927.855177][ T5872] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  928.104822][ T5824] HID 045e:07da: Invalid code 65791 type 1
[  928.123491][ T5824] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.000E/input/input20
[  928.142644][ T5824] microsoft 0003:045E:07DA.000E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  928.155338][T11965] usb 7-1: new high-speed USB device number 28 using dummy_hcd
[  928.245468][ T5872] usb 6-1: device descriptor read/64, error -71
[  928.314914][   T25] usb 5-1: USB disconnect, device number 76
[  928.376171][T11965] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  928.400317][T11965] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  928.624534][T11965] usb 7-1: config 0 descriptor??
[  928.765323][ T5872] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  928.868242][T11965] [drm] vendor descriptor length:6 data:06 5f 01 6f 00 00 00 00 00 00 00
[  928.935622][ T5872] usb 6-1: device descriptor read/64, error -71
[  929.025015][T11965] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  929.058199][ T5872] usb usb6-port1: attempt power cycle
[  929.435209][ T5872] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  929.465755][ T5872] usb 6-1: device descriptor read/8, error -71
[  929.526445][T14564] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2367'.
[  929.705316][ T5872] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  929.740814][ T5872] usb 6-1: device descriptor read/8, error -71
[  929.785198][   T25] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[  929.855418][ T5872] usb usb6-port1: unable to enumerate USB device
[  929.945257][   T25] usb 3-1: Using ep0 maxpacket: 8
[  929.956206][   T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  929.975568][   T25] usb 3-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3
[  929.984709][   T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  929.994610][   T25] usb 3-1: Product: syz
[  929.998933][   T25] usb 3-1: Manufacturer: syz
[  930.003685][   T25] usb 3-1: SerialNumber: syz
[  930.010605][   T25] usb 3-1: config 0 descriptor??
[  930.048349][   T25] msi2500 3-1:0.0: Registered as swradio24
[  930.054216][   T25] msi2500 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  930.114860][T11965] [drm:udl_init] *ERROR* Selecting channel failed
[  930.244371][T11965] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2
[  930.275783][T11965] [drm] Initialized udl on minor 2
[  930.284769][T11965] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  930.319870][T11965] udl 7-1:0.0: [drm] Cannot find any crtc or sizes
[  930.352577][ T5824] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  930.377814][T11965] usb 7-1: USB disconnect, device number 28
[  930.396180][T14578] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2370'.
[  930.422253][ T5872] usb 3-1: USB disconnect, device number 67
[  930.453452][ T5824] udl 7-1:0.0: [drm] Cannot find any crtc or sizes
[  930.785447][   T25] usb 4-1: new high-speed USB device number 87 using dummy_hcd
[  930.889642][T14583] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2371'.
[  931.005687][   T25] usb 4-1: Using ep0 maxpacket: 16
[  931.036958][   T25] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  931.045174][   T25] usb 4-1: config 0 has no interface number 0
[  931.057197][   T25] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  931.095005][   T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  931.103552][   T25] usb 4-1: Product: syz
[  931.165272][   T25] usb 4-1: Manufacturer: syz
[  931.172441][   T25] usb 4-1: SerialNumber: syz
[  931.245258][ T5824] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  931.247953][   T25] usb 4-1: config 0 descriptor??
[  931.397355][   T25] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  931.590253][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  931.609209][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  931.685938][ T5824] usb 6-1: Using ep0 maxpacket: 16
[  931.724955][T14576] nvme_fabrics: unknown parameter or missing value 'gDf˜
' in ctrl creation request
[  931.750632][ T5824] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  931.765362][ T5824] usb 6-1: config 0 has no interface number 0
[  931.786588][ T5824] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  931.812006][ T5824] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  931.830891][ T5824] usb 6-1: Product: syz
[  931.853492][ T5824] usb 6-1: Manufacturer: syz
[  931.863934][ T5824] usb 6-1: SerialNumber: syz
[  931.891750][ T5824] usb 6-1: config 0 descriptor??
[  931.907055][ T5824] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  932.155278][    T9] usb 7-1: new high-speed USB device number 29 using dummy_hcd
[  932.375485][    T9] usb 7-1: device descriptor read/64, error -71
[  932.745332][    T9] usb 7-1: new high-speed USB device number 30 using dummy_hcd
[  932.885307][    T9] usb 7-1: device descriptor read/64, error -71
[  933.015793][    T9] usb usb7-port1: attempt power cycle
[  933.387668][    T9] usb 7-1: new high-speed USB device number 31 using dummy_hcd
[  933.528603][   T25] gspca_spca1528: reg_w err -110
[  933.535546][   T25] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110
[  933.539964][ T5824] gspca_spca1528: reg_w err -71
[  933.606867][    T9] usb 7-1: device descriptor read/8, error -71
[  933.653989][ T5824] spca1528 6-1:0.1: probe with driver spca1528 failed with error -71
[  933.681130][   T25] usb 4-1: USB disconnect, device number 87
[  933.708945][ T5824] usb 6-1: USB disconnect, device number 27
[  933.784281][T14613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2378'.
[  933.804039][T14613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2378'.
[  933.895364][    T9] usb 7-1: new high-speed USB device number 32 using dummy_hcd
[  933.940585][    T9] usb 7-1: device descriptor read/8, error -71
[  934.068623][    T9] usb usb7-port1: unable to enumerate USB device
[  934.155267][ T5824] usb 5-1: new full-speed USB device number 77 using dummy_hcd
[  934.889129][   T29] audit: type=1400 audit(1737413503.803:808): avc:  denied  { map } for  pid=14615 comm="syz.2.2379" path="/proc/1818/stat" dev="proc" ino=47415 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[  935.028964][ T5824] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  935.038814][ T5824] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  935.056060][ T5824] usb 5-1: config 0 descriptor??
[  936.251458][ T5824] pegasus 5-1:0.0: probe with driver pegasus failed with error -32
[  936.583109][   T29] audit: type=1400 audit(1737413505.843:809): avc:  denied  { connect } for  pid=14620 comm="syz.5.2380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  937.595232][T12740] usb 7-1: new high-speed USB device number 33 using dummy_hcd
[  938.076237][T12740] usb 7-1: Using ep0 maxpacket: 8
[  938.083344][T12740] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  938.169703][T12740] usb 7-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3
[  938.220158][T12740] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  938.250468][T12740] usb 7-1: Product: syz
[  938.255104][T12740] usb 7-1: Manufacturer: syz
[  938.259724][T12740] usb 7-1: SerialNumber: syz
[  938.328152][T12740] usb 7-1: config 0 descriptor??
[  939.190934][T14665] xt_CT: No such helper "pptp"
[  939.720287][T12740] msi2500 7-1:0.0: Registered as swradio24
[  939.813092][T12740] msi2500 7-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  940.141461][   T25] usb 5-1: USB disconnect, device number 77
[  940.183553][T12740] usb 7-1: USB disconnect, device number 33
[  940.286754][T14680] ubi0: attaching mtd0
[  940.329978][T14680] ubi0: scanning is finished
[  941.467842][T14688] xt_nat: multiple ranges no longer supported
[  941.582630][T14687] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2393'.
[  941.591772][T14687] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2393'.
[  942.332860][T14680] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4
[  945.708246][   T29] audit: type=1400 audit(1737413514.493:810): avc:  denied  { accept } for  pid=14724 comm="syz.5.2403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  945.728720][   T29] audit: type=1326 audit(1737413515.123:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14723 comm="syz.2.2405" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d85f85d29 code=0x0
[  947.175557][ T5872] usb 5-1: new high-speed USB device number 78 using dummy_hcd
[  947.496460][ T5872] usb 5-1: Using ep0 maxpacket: 32
[  947.516283][ T5872] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  947.986656][   T29] audit: type=1400 audit(1737413516.973:812): avc:  denied  { setopt } for  pid=14742 comm="syz.5.2407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  948.485137][ T5872] usb 5-1: config 0 has no interface number 0
[  948.505394][ T5872] usb 5-1: string descriptor 0 read error: -71
[  948.520304][   T29] audit: type=1400 audit(1737413516.993:813): avc:  denied  { read write } for  pid=14742 comm="syz.5.2407" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  948.523780][ T5872] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  948.794610][   T29] audit: type=1400 audit(1737413516.993:814): avc:  denied  { open } for  pid=14742 comm="syz.5.2407" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  948.829104][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  948.968502][ T5872] usb 5-1: config 0 descriptor??
[  949.009408][ T5872] usb 5-1: can't set config #0, error -71
[  949.060845][ T5872] usb 5-1: USB disconnect, device number 78
[  949.146093][    T9] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  950.177303][T12740] usb 7-1: new low-speed USB device number 34 using dummy_hcd
[  950.210822][T14761] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2412'.
[  950.256190][    T9] usb 6-1: unable to get BOS descriptor or descriptor too short
[  950.265475][    T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  950.274529][    T9] usb 6-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  950.309288][    T9] usb 6-1: config 1 interface 0 has no altsetting 1
[  950.324889][    T9] usb 6-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75
[  950.342782][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  950.351871][    T9] usb 6-1: Product: syz
[  950.365713][    T9] usb 6-1: Manufacturer: syz
[  950.370404][    T9] usb 6-1: SerialNumber: syz
[  950.392627][    T9] smsusb:smsusb_probe: board id=8, interface number 0
[  950.529880][T12740] usb 7-1: config 0 has an invalid interface number: 55 but max is 0
[  950.543980][T12740] usb 7-1: config 0 has no interface number 0
[  951.315492][T12740] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  951.326743][T12740] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[  951.338065][T12740] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  951.350016][T12740] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  951.361377][T12740] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8
[  951.372851][T12740] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  951.386446][T12740] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  951.396122][T12740] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  951.411316][    T9] smsusb:smsusb_probe: usb_set_interface failed, rc -71
[  951.419903][T12740] usb 7-1: config 0 descriptor??
[  951.445220][    T9] smsusb 6-1:1.0: probe with driver smsusb failed with error -71
[  951.445478][T14754] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  951.471777][    T9] usb 6-1: USB disconnect, device number 28
[  951.491845][T14754] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  951.551978][T12740] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  951.658361][T11965] usb 5-1: new full-speed USB device number 79 using dummy_hcd
[  952.397168][T11965] usb 5-1: config 0 has an invalid interface number: 102 but max is 0
[  952.405506][T11965] usb 5-1: config 0 has no interface number 0
[  952.426007][T11965] usb 5-1: config 0 interface 102 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64
[  952.460207][T12740] usb 7-1: USB disconnect, device number 34
[  952.463902][T11965] usb 5-1: config 0 interface 102 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  952.582147][T12740] ldusb 7-1:0.55: LD USB Device #0 now disconnected
[  952.617449][T11965] usb 5-1: New USB device found, idVendor=3923, idProduct=7825, bcdDevice=c6.57
[  952.686945][T14783] FAULT_INJECTION: forcing a failure.
[  952.686945][T14783] name failslab, interval 1, probability 0, space 0, times 0
[  952.700516][T14783] CPU: 1 UID: 0 PID: 14783 Comm: syz.3.2417 Not tainted 6.13.0-syzkaller #0
[  952.709213][T14783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  952.719275][T14783] Call Trace:
[  952.722559][T14783]  <TASK>
[  952.725494][T14783]  dump_stack_lvl+0x16c/0x1f0
[  952.730187][T14783]  should_fail_ex+0x497/0x5b0
[  952.734877][T14783]  ? fs_reclaim_acquire+0xae/0x150
[  952.740012][T14783]  should_failslab+0xc2/0x120
[  952.744699][T14783]  __kmalloc_noprof+0xcb/0x510
[  952.749471][T14783]  ? bpf_sk_storage_diag_alloc+0x2bf/0x6c0
[  952.755290][T14783]  bpf_sk_storage_diag_alloc+0xa0/0x6c0
[  952.760850][T14783]  __inet_diag_dump_start+0x3b8/0x7f0
[  952.766242][T14783]  __netlink_dump_start+0x607/0x970
[  952.771456][T14783]  inet_diag_handler_cmd+0x284/0x2e0
[  952.776752][T14783]  ? __pfx_inet_diag_handler_cmd+0x10/0x10
[  952.782571][T14783]  ? __pfx_inet_diag_dump_start+0x10/0x10
[  952.788295][T14783]  ? __pfx_inet_diag_dump+0x10/0x10
[  952.793510][T14783]  ? __pfx_inet_diag_dump_done+0x10/0x10
[  952.799171][T14783]  ? __rcu_read_unlock+0x2b4/0x580
[  952.804319][T14783]  sock_diag_rcv_msg+0x437/0x790
[  952.809286][T14783]  netlink_rcv_skb+0x16b/0x440
[  952.814076][T14783]  ? __pfx_sock_diag_rcv_msg+0x10/0x10
[  952.819595][T14783]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  952.824915][T14783]  ? rcu_is_watching+0x12/0xc0
[  952.829700][T14783]  netlink_unicast+0x53c/0x7f0
[  952.834487][T14783]  ? __pfx_netlink_unicast+0x10/0x10
[  952.839795][T14783]  netlink_sendmsg+0x8b8/0xd70
[  952.844580][T14783]  ? __pfx_netlink_sendmsg+0x10/0x10
[  952.849896][T14783]  sock_write_iter+0x4fe/0x5b0
[  952.854675][T14783]  ? __pfx_sock_write_iter+0x10/0x10
[  952.859984][T14783]  ? __pfx_file_has_perm+0x10/0x10
[  952.865106][T14783]  do_iter_readv_writev+0x532/0x7f0
[  952.870334][T14783]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  952.876101][T14783]  ? bpf_lsm_file_permission+0x9/0x10
[  952.881486][T14783]  ? security_file_permission+0x71/0x210
[  952.887138][T14783]  vfs_writev+0x363/0xdd0
[  952.891482][T14783]  ? __pfx_vfs_writev+0x10/0x10
[  952.896336][T14783]  ? find_held_lock+0x2d/0x110
[  952.901124][T14783]  ? __pfx_lock_release+0x10/0x10
[  952.906164][T14783]  ? trace_lock_acquire+0x14e/0x1f0
[  952.911397][T14783]  ? __fget_files+0x206/0x3a0
[  952.916094][T14783]  ? do_writev+0x297/0x340
[  952.920514][T14783]  do_writev+0x297/0x340
[  952.924766][T14783]  ? __pfx_do_writev+0x10/0x10
[  952.929562][T14783]  do_syscall_64+0xcd/0x250
[  952.934100][T14783]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  952.940021][T14783] RIP: 0033:0x7f668cd85d29
[  952.944441][T14783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  952.964053][T14783] RSP: 002b:00007f668dbcb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  952.972466][T14783] RAX: ffffffffffffffda RBX: 00007f668cf76160 RCX: 00007f668cd85d29
[  952.980441][T14783] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005
[  952.988405][T14783] RBP: 00007f668dbcb090 R08: 0000000000000000 R09: 0000000000000000
[  952.996407][T14783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  953.005160][T14783] R13: 0000000000000000 R14: 00007f668cf76160 R15: 00007ffca83310d8
[  953.013151][T14783]  </TASK>
[  953.017247][ T5828] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  953.026656][T11965] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  953.071611][T11965] usb 5-1: Product: syz
[  953.085186][T11965] usb 5-1: Manufacturer: syz
[  953.101832][T11965] usb 5-1: SerialNumber: syz
[  953.114533][T11965] usb 5-1: config 0 descriptor??
[  953.124470][T14767] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  953.133106][T14767] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  953.162759][T11965] plusb 5-1:0.102 usb0: register 'plusb' at usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 52:95:a1:63:91:54
[  953.389448][T11965] usb 5-1: USB disconnect, device number 79
[  953.415019][T11965] plusb 5-1:0.102 usb0: unregister 'plusb' usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1
[  953.515565][T12740] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  953.697143][T12740] usb 6-1: Using ep0 maxpacket: 8
[  953.711085][T12740] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  953.809278][T12740] usb 6-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3
[  953.949650][T12740] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  953.959224][T12740] usb 6-1: Product: syz
[  953.963500][T12740] usb 6-1: Manufacturer: syz
[  953.969760][T12740] usb 6-1: SerialNumber: syz
[  953.993201][T12740] usb 6-1: config 0 descriptor??
[  954.055372][    T9] usb 4-1: new high-speed USB device number 88 using dummy_hcd
[  954.074804][T12740] msi2500 6-1:0.0: Registered as swradio24
[  954.094863][T12740] msi2500 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  954.159257][T14802] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2424'.
[  954.215333][    T9] usb 4-1: Using ep0 maxpacket: 8
[  954.233046][    T9] usb 4-1: config 150 has an invalid interface number: 204 but max is 0
[  954.257765][    T9] usb 4-1: config 150 has no interface number 0
[  954.302535][    T9] usb 4-1: config 150 interface 204 has no altsetting 0
[  954.347484][    T9] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  954.380886][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  954.399274][ T5824] usb 6-1: USB disconnect, device number 29
[  954.405856][    T9] usb 4-1: Product: syz
[  954.412387][    T9] usb 4-1: Manufacturer: syz
[  954.483832][T14808] FAULT_INJECTION: forcing a failure.
[  954.483832][T14808] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  954.497083][T14808] CPU: 1 UID: 0 PID: 14808 Comm: syz.6.2423 Not tainted 6.13.0-syzkaller #0
[  954.505770][T14808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  954.515828][T14808] Call Trace:
[  954.519114][T14808]  <TASK>
[  954.522051][T14808]  dump_stack_lvl+0x16c/0x1f0
[  954.526748][T14808]  should_fail_ex+0x497/0x5b0
[  954.531441][T14808]  _copy_from_user+0x2e/0xd0
[  954.536037][T14808]  memdup_user+0x71/0xd0
[  954.540286][T14808]  snd_ctl_ioctl+0xe17/0x1310
[  954.544979][T14808]  ? __pfx_snd_ctl_ioctl+0x10/0x10
[  954.550106][T14808]  ? __pfx_lock_release+0x10/0x10
[  954.555151][T14808]  ? selinux_file_ioctl+0x180/0x270
[  954.560362][T14808]  ? selinux_file_ioctl+0xb4/0x270
[  954.565485][T14808]  ? __pfx_snd_ctl_ioctl+0x10/0x10
[  954.570608][T14808]  __x64_sys_ioctl+0x190/0x200
[  954.575387][T14808]  do_syscall_64+0xcd/0x250
[  954.579903][T14808]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  954.585813][T14808] RIP: 0033:0x7f48ab185d29
[  954.590231][T14808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  954.609852][T14808] RSP: 002b:00007f48abfc0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  954.618276][T14808] RAX: ffffffffffffffda RBX: 00007f48ab376160 RCX: 00007f48ab185d29
[  954.626251][T14808] RDX: 0000000020000280 RSI: 00000000c4c85512 RDI: 0000000000000009
[  954.634223][T14808] RBP: 00007f48abfc0090 R08: 0000000000000000 R09: 0000000000000000
[  954.642196][T14808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  954.650174][T14808] R13: 0000000000000000 R14: 00007f48ab376160 R15: 00007ffe272e35f8
[  954.658166][T14808]  </TASK>
[  954.824456][    T9] usb 4-1: SerialNumber: syz
[  955.205234][T11965] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[  955.236207][T14791] syzkaller0: entered promiscuous mode
[  955.255267][T14791] syzkaller0: entered allmulticast mode
[  955.409931][    T9] usb 4-1: USB disconnect, device number 88
[  955.485338][T11965] usb 3-1: Using ep0 maxpacket: 16
[  955.658159][T11965] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  955.846758][T11965] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  955.969187][T11965] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  956.000357][T11965] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  956.010096][T11965] usb 3-1: Product: syz
[  956.014482][T11965] usb 3-1: Manufacturer: syz
[  956.019877][T11965] usb 3-1: SerialNumber: syz
[  956.033635][T11965] usb 3-1: config 0 descriptor??
[  956.124595][T11965] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  956.134041][T11965] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[  956.221226][T14824] cgroup: Unknown subsys name 'mask'
[  956.240212][T14824] netlink: 'syz.4.2432': attribute type 1 has an invalid length.
[  956.248425][T14824] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2432'.
[  956.393510][T14818] nvme_fabrics: unknown parameter or missing value 'gDf˜
' in ctrl creation request
[  956.415984][T14831] FAULT_INJECTION: forcing a failure.
[  956.415984][T14831] name failslab, interval 1, probability 0, space 0, times 0
[  956.429277][T14831] CPU: 1 UID: 0 PID: 14831 Comm: syz.4.2433 Not tainted 6.13.0-syzkaller #0
[  956.437974][T14831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  956.448041][T14831] Call Trace:
[  956.451325][T14831]  <TASK>
[  956.454265][T14831]  dump_stack_lvl+0x16c/0x1f0
[  956.458965][T14831]  should_fail_ex+0x497/0x5b0
[  956.463672][T14831]  should_failslab+0xc2/0x120
[  956.468373][T14831]  __kmalloc_noprof+0xcb/0x510
[  956.473159][T14831]  io_cqring_event_overflow+0xcb/0x6f0
[  956.478639][T14831]  io_req_cqe_overflow+0x101/0x1e0
[  956.483773][T14831]  __io_submit_flush_completions+0x8d9/0x1c00
[  956.489867][T14831]  io_submit_sqes+0xa1c/0x25c0
[  956.494654][T14831]  __do_sys_io_uring_enter+0xd43/0x1620
[  956.500212][T14831]  ? __fget_files+0x206/0x3a0
[  956.504885][T14831]  ? __pfx___do_sys_io_uring_enter+0x10/0x10
[  956.510875][T14831]  ? fput+0x67/0x440
[  956.514776][T14831]  ? ksys_write+0x1ba/0x250
[  956.519272][T14831]  ? __pfx_ksys_write+0x10/0x10
[  956.524125][T14831]  do_syscall_64+0xcd/0x250
[  956.528632][T14831]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  956.534527][T14831] RIP: 0033:0x7f91a9b85d29
[  956.538940][T14831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  956.558549][T14831] RSP: 002b:00007f91aaa67038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[  956.566957][T14831] RAX: ffffffffffffffda RBX: 00007f91a9d75fa0 RCX: 00007f91a9b85d29
[  956.574924][T14831] RDX: 0000000000000000 RSI: 0000000000002def RDI: 0000000000000004
[  956.582888][T14831] RBP: 00007f91aaa67090 R08: 0000000000000000 R09: 0000000000000000
[  956.590862][T14831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  956.598830][T14831] R13: 0000000000000000 R14: 00007f91a9d75fa0 R15: 00007ffc79726338
[  956.606895][T14831]  </TASK>
[  956.668873][T14830] nvme_fabrics: unknown parameter or missing value 'gDf˜
' in ctrl creation request
[  956.830315][T11965] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  956.832311][   T29] audit: type=1326 audit(1737413526.243:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14809 comm="syz.2.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d85f85d29 code=0x7ffc0000
[  956.843426][T11965] em28xx 3-1:0.0: Config register raw data: 0xfffffffb
[  956.908258][   T29] audit: type=1326 audit(1737413526.243:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14809 comm="syz.2.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f8d85f85d29 code=0x7ffc0000
[  956.994757][   T29] audit: type=1326 audit(1737413526.253:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14809 comm="syz.2.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d85f85d29 code=0x7ffc0000
[  957.045155][   T29] audit: type=1326 audit(1737413526.253:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14809 comm="syz.2.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d85f85d29 code=0x7ffc0000
[  957.141740][   T29] audit: type=1326 audit(1737413526.253:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14809 comm="syz.2.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8d85f8592b code=0x7ffc0000
[  957.405268][   T29] audit: type=1326 audit(1737413526.253:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14809 comm="syz.2.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8d85f8592b code=0x7ffc0000
[  957.574769][T11965] em28xx 3-1:0.0: Unknown AC97 audio processor detected!
[  957.593452][   T29] audit: type=1326 audit(1737413526.253:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14809 comm="syz.2.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d85f85d29 code=0x7ffc0000
[  957.616889][    C0] vkms_vblank_simulate: vblank timer overrun
[  957.624573][   T29] audit: type=1326 audit(1737413526.253:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14809 comm="syz.2.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8d85f8592b code=0x7ffc0000
[  957.647900][    C0] vkms_vblank_simulate: vblank timer overrun
[  957.659723][   T29] audit: type=1326 audit(1737413526.323:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14809 comm="syz.2.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8d85f8592b code=0x7ffc0000
[  957.683028][    C0] vkms_vblank_simulate: vblank timer overrun
[  957.733233][   T29] audit: type=1326 audit(1737413526.323:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14809 comm="syz.2.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8d85fb85e5 code=0x7ffc0000
[  958.395849][T14810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  958.418104][T14810] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  958.439184][T11965] em28xx 3-1:0.0: couldn't setup AC97 register 2
[  958.461083][T11965] em28xx 3-1:0.0: couldn't setup AC97 register 4
[  958.518924][T11965] em28xx 3-1:0.0: couldn't setup AC97 register 6
[  958.535432][T11965] em28xx 3-1:0.0: couldn't setup AC97 register 54
[  958.543086][T11965] em28xx 3-1:0.0: couldn't setup AC97 register 56
[  958.602598][T11965] usb 3-1: USB disconnect, device number 68
[  958.765276][ T5828] Bluetooth: hci4: command 0x0c1a tx timeout
[  960.242857][T14861] FAULT_INJECTION: forcing a failure.
[  960.242857][T14861] name failslab, interval 1, probability 0, space 0, times 0
[  960.256100][T14861] CPU: 1 UID: 0 PID: 14861 Comm: syz.2.2441 Not tainted 6.13.0-syzkaller #0
[  960.264804][T14861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  960.274873][T14861] Call Trace:
[  960.278160][T14861]  <TASK>
[  960.281099][T14861]  dump_stack_lvl+0x16c/0x1f0
[  960.285784][T14861]  should_fail_ex+0x497/0x5b0
[  960.290462][T14861]  ? fs_reclaim_acquire+0xae/0x150
[  960.295591][T14861]  should_failslab+0xc2/0x120
[  960.300265][T14861]  __kmalloc_cache_noprof+0x68/0x410
[  960.305551][T14861]  snd_mixer_oss_put_volume1_sw.constprop.0.isra.0+0xd4/0x510
[  960.313008][T14861]  snd_mixer_oss_put_volume1+0x6b2/0xd30
[  960.318639][T14861]  ? __pfx_snd_mixer_oss_put_volume1+0x10/0x10
[  960.324791][T14861]  snd_mixer_oss_ioctl1+0x611/0x1cf0
[  960.330073][T14861]  ? __pfx_snd_mixer_oss_ioctl1+0x10/0x10
[  960.335802][T14861]  ? ioctl_has_perm.constprop.0.isra.0+0x2fc/0x450
[  960.342306][T14861]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  960.349175][T14861]  ? selinux_file_ioctl+0x180/0x270
[  960.354387][T14861]  snd_mixer_oss_ioctl+0x3e/0x50
[  960.359326][T14861]  ? __pfx_snd_mixer_oss_ioctl+0x10/0x10
[  960.364960][T14861]  __x64_sys_ioctl+0x190/0x200
[  960.369727][T14861]  do_syscall_64+0xcd/0x250
[  960.374231][T14861]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  960.380128][T14861] RIP: 0033:0x7f8d85f85d29
[  960.384534][T14861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  960.404140][T14861] RSP: 002b:00007f8d86cce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  960.412550][T14861] RAX: ffffffffffffffda RBX: 00007f8d86176080 RCX: 00007f8d85f85d29
[  960.420516][T14861] RDX: 0000000020000040 RSI: 00000000c0040d07 RDI: 0000000000000005
[  960.428477][T14861] RBP: 00007f8d86cce090 R08: 0000000000000000 R09: 0000000000000000
[  960.436440][T14861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  960.444403][T14861] R13: 0000000000000000 R14: 00007f8d86176080 R15: 00007ffd25c7ae28
[  960.452387][T14861]  </TASK>
[  961.701716][T14876] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  963.818671][T14890] FAULT_INJECTION: forcing a failure.
[  963.818671][T14890] name failslab, interval 1, probability 0, space 0, times 0
[  963.881412][T14890] CPU: 1 UID: 0 PID: 14890 Comm: syz.6.2449 Not tainted 6.13.0-syzkaller #0
[  963.890145][T14890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  963.900218][T14890] Call Trace:
[  963.903504][T14890]  <TASK>
[  963.906447][T14890]  dump_stack_lvl+0x16c/0x1f0
[  963.911141][T14890]  should_fail_ex+0x497/0x5b0
[  963.915820][T14890]  ? fs_reclaim_acquire+0xae/0x150
[  963.920928][T14890]  should_failslab+0xc2/0x120
[  963.925603][T14890]  __kmalloc_noprof+0xcb/0x510
[  963.930362][T14890]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  963.935999][T14890]  tomoyo_realpath_from_path+0xb9/0x720
[  963.941546][T14890]  ? tomoyo_path_number_perm+0x235/0x590
[  963.947177][T14890]  ? tomoyo_path_number_perm+0x235/0x590
[  963.952806][T14890]  tomoyo_path_number_perm+0x248/0x590
[  963.958275][T14890]  ? tomoyo_path_number_perm+0x235/0x590
[  963.963914][T14890]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  963.969925][T14890]  ? __pfx_lock_release+0x10/0x10
[  963.974947][T14890]  ? trace_lock_acquire+0x14e/0x1f0
[  963.980149][T14890]  ? lock_acquire+0x2f/0xb0
[  963.984650][T14890]  ? __fget_files+0x40/0x3a0
[  963.989249][T14890]  ? __fget_files+0x206/0x3a0
[  963.993923][T14890]  security_file_ioctl+0x9b/0x240
[  963.998961][T14890]  __x64_sys_ioctl+0xb7/0x200
[  964.003653][T14890]  do_syscall_64+0xcd/0x250
[  964.008173][T14890]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  964.014076][T14890] RIP: 0033:0x7f48ab185d29
[  964.018489][T14890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  964.038094][T14890] RSP: 002b:00007f48ac002038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  964.046591][T14890] RAX: ffffffffffffffda RBX: 00007f48ab375fa0 RCX: 00007f48ab185d29
[  964.054556][T14890] RDX: 0000000020000280 RSI: 00000000c0603d0f RDI: 0000000000000003
[  964.062530][T14890] RBP: 00007f48ac002090 R08: 0000000000000000 R09: 0000000000000000
[  964.070498][T14890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  964.078480][T14890] R13: 0000000000000000 R14: 00007f48ab375fa0 R15: 00007ffe272e35f8
[  964.086459][T14890]  </TASK>
[  964.293697][T14890] ERROR: Out of memory at tomoyo_realpath_from_path.
[  964.717316][T11965] usb 3-1: new high-speed USB device number 69 using dummy_hcd
[  964.875351][T11965] usb 3-1: Using ep0 maxpacket: 16
[  965.131916][T11965] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  965.143123][T11965] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  965.502744][T11965] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  965.515781][T11965] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  965.524863][T11965] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  965.534807][T11965] usb 3-1: config 0 descriptor??
[  965.969393][T11965] HID 045e:07da: Invalid code 65791 type 1
[  965.989401][T11965] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.000F/input/input21
[  966.025542][T11965] microsoft 0003:045E:07DA.000F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  966.176821][   T51] usb 3-1: USB disconnect, device number 69
[  967.702832][T14868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2443'.
[  968.080173][T14910] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2457'.
[  969.407914][T14930] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  969.615181][    T9] usb 5-1: new high-speed USB device number 80 using dummy_hcd
[  969.926599][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  969.936583][    T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  969.951052][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  970.930655][    T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  970.945534][    T9] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  970.954853][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  971.531268][    T9] usb 5-1: config 0 descriptor??
[  971.617430][T14942] FAULT_INJECTION: forcing a failure.
[  971.617430][T14942] name failslab, interval 1, probability 0, space 0, times 0
[  971.662501][T14942] CPU: 1 UID: 0 PID: 14942 Comm: syz.6.2465 Not tainted 6.13.0-syzkaller #0
[  971.671236][T14942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  971.681303][T14942] Call Trace:
[  971.684594][T14942]  <TASK>
[  971.687526][T14942]  dump_stack_lvl+0x16c/0x1f0
[  971.692214][T14942]  should_fail_ex+0x497/0x5b0
[  971.696894][T14942]  ? fs_reclaim_acquire+0xae/0x150
[  971.702010][T14942]  should_failslab+0xc2/0x120
[  971.706685][T14942]  __kmalloc_noprof+0xcb/0x510
[  971.711446][T14942]  ? d_absolute_path+0x137/0x1b0
[  971.716390][T14942]  ? rcu_is_watching+0x12/0xc0
[  971.721158][T14942]  tomoyo_encode2+0x100/0x3e0
[  971.725843][T14942]  tomoyo_encode+0x29/0x50
[  971.730260][T14942]  tomoyo_realpath_from_path+0x19d/0x720
[  971.735915][T14942]  tomoyo_path_number_perm+0x248/0x590
[  971.741377][T14942]  ? tomoyo_path_number_perm+0x235/0x590
[  971.747013][T14942]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  971.753011][T14942]  ? __pfx_lock_release+0x10/0x10
[  971.758035][T14942]  ? trace_lock_acquire+0x14e/0x1f0
[  971.763242][T14942]  ? lock_acquire+0x2f/0xb0
[  971.767747][T14942]  ? __fget_files+0x40/0x3a0
[  971.772340][T14942]  ? __fget_files+0x206/0x3a0
[  971.777022][T14942]  security_file_ioctl+0x9b/0x240
[  971.782047][T14942]  __x64_sys_ioctl+0xb7/0x200
[  971.786733][T14942]  do_syscall_64+0xcd/0x250
[  971.791238][T14942]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  971.797130][T14942] RIP: 0033:0x7f48ab185d29
[  971.801545][T14942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  971.821165][T14942] RSP: 002b:00007f48ac002038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  971.829582][T14942] RAX: ffffffffffffffda RBX: 00007f48ab375fa0 RCX: 00007f48ab185d29
[  971.837552][T14942] RDX: 0000000000000000 RSI: 00000000c0506107 RDI: 0000000000000003
[  971.845520][T14942] RBP: 00007f48ac002090 R08: 0000000000000000 R09: 0000000000000000
[  971.853495][T14942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  971.861467][T14942] R13: 0000000000000000 R14: 00007f48ab375fa0 R15: 00007ffe272e35f8
[  971.869463][T14942]  </TASK>
[  971.891952][T14942] ERROR: Out of memory at tomoyo_realpath_from_path.
[  971.923343][    T9] hdpvr 5-1:0.0: firmware version 0x15 dated 
[  972.040822][T14946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2466'.
[  972.174500][T12740] libceph: connect (1)[c::]:6789 error -101
[  972.181242][T12740] libceph: mon0 (1)[c::]:6789 connect error
[  972.422790][T14929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  972.477685][T12740] libceph: connect (1)[c::]:6789 error -101
[  972.574176][T14950] ceph: No mds server is up or the cluster is laggy
[  972.605454][T12740] libceph: mon0 (1)[c::]:6789 connect error
[  972.625329][T14929] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  972.634503][    T9] hdpvr 5-1:0.0: device init failed
[  972.639874][    T9] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12
[  972.652680][    T9] usb 5-1: USB disconnect, device number 80
[  972.844159][T14959] usb usb8: usbfs: process 14959 (syz.5.2468) did not claim interface 0 before use
[  974.436922][T14974] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2472'.
[  974.524186][ T5909] usb 5-1: new high-speed USB device number 81 using dummy_hcd
[  974.685256][ T5909] usb 5-1: Using ep0 maxpacket: 8
[  974.784433][ T5909] usb 5-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=1f.cb
[  974.843796][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  974.855309][T12740] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  974.866628][ T5909] usb 5-1: Product: syz
[  974.877293][ T5909] usb 5-1: Manufacturer: syz
[  974.911355][ T5909] usb 5-1: SerialNumber: syz
[  974.948971][ T5909] usb 5-1: config 0 descriptor??
[  974.972491][ T5909] gm12u320 5-1:0.0: [drm:gm12u320_misc_request.constprop.0] *ERROR* Misc. req. error -22
[  974.982930][ T5909] gm12u320 5-1:0.0: probe with driver gm12u320 failed with error -5
[  974.996306][ T5909] usb-storage 5-1:0.0: USB Mass Storage device detected
[  975.013790][ T5909] usb-storage 5-1:0.0: device ignored
[  975.045179][T12740] usb 6-1: Using ep0 maxpacket: 8
[  975.052110][T12740] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  975.082453][T12740] usb 6-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3
[  975.101029][T12740] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  975.127086][T12740] usb 6-1: Product: syz
[  975.144013][T12740] usb 6-1: Manufacturer: syz
[  975.155133][T12740] usb 6-1: SerialNumber: syz
[  975.172013][T12740] usb 6-1: config 0 descriptor??
[  975.247262][   T29] kauditd_printk_skb: 33 callbacks suppressed
[  975.247280][   T29] audit: type=1400 audit(1737413544.663:858): avc:  denied  { nlmsg_write } for  pid=14963 comm="syz.4.2471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  975.425900][T12740] msi2500 6-1:0.0: Registered as swradio24
[  975.431781][T12740] msi2500 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  975.532604][T12740] usb 6-1: USB disconnect, device number 30
[  975.877172][T15002] FAULT_INJECTION: forcing a failure.
[  975.877172][T15002] name failslab, interval 1, probability 0, space 0, times 0
[  975.889972][T15002] CPU: 0 UID: 0 PID: 15002 Comm: syz.2.2477 Not tainted 6.13.0-syzkaller #0
[  975.898657][T15002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  975.908714][T15002] Call Trace:
[  975.911994][T15002]  <TASK>
[  975.914926][T15002]  dump_stack_lvl+0x16c/0x1f0
[  975.919632][T15002]  should_fail_ex+0x497/0x5b0
[  975.924328][T15002]  ? fs_reclaim_acquire+0xae/0x150
[  975.929445][T15002]  should_failslab+0xc2/0x120
[  975.934159][T15002]  __kmalloc_cache_noprof+0x68/0x410
[  975.939453][T15002]  ? __asan_memcpy+0x3c/0x60
[  975.944054][T15002]  sctp_transport_new+0x94/0x790
[  975.949006][T15002]  sctp_assoc_add_peer+0x2e5/0x1530
[  975.954225][T15002]  sctp_connect_new_asoc+0x209/0x790
[  975.959524][T15002]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  975.965351][T15002]  ? selinux_sctp_bind_connect+0x112/0x2c0
[  975.971176][T15002]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  975.976750][T15002]  sctp_sendmsg+0x1610/0x1eb0
[  975.981444][T15002]  ? avc_has_perm+0x11b/0x1c0
[  975.986150][T15002]  ? __pfx_sctp_sendmsg+0x10/0x10
[  975.991190][T15002]  ? lock_acquire.part.0+0x155/0x380
[  975.996500][T15002]  ? __pfx_sock_has_perm+0x10/0x10
[  976.001636][T15002]  ? __pfx_sctp_sendmsg+0x10/0x10
[  976.006673][T15002]  inet_sendmsg+0x119/0x140
[  976.011197][T15002]  __sys_sendto+0x42a/0x4f0
[  976.015720][T15002]  ? __pfx___sys_sendto+0x10/0x10
[  976.020786][T15002]  ? ksys_write+0x1ba/0x250
[  976.025296][T15002]  ? __pfx_ksys_write+0x10/0x10
[  976.030173][T15002]  __x64_sys_sendto+0xe0/0x1c0
[  976.034965][T15002]  ? do_syscall_64+0x91/0x250
[  976.039667][T15002]  ? lockdep_hardirqs_on+0x7c/0x110
[  976.044891][T15002]  do_syscall_64+0xcd/0x250
[  976.049419][T15002]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  976.055346][T15002] RIP: 0033:0x7f8d85f85d29
[  976.059767][T15002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  976.079387][T15002] RSP: 002b:00007f8d83df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  976.087816][T15002] RAX: ffffffffffffffda RBX: 00007f8d86176160 RCX: 00007f8d85f85d29
[  976.095799][T15002] RDX: 000000000000fee4 RSI: 0000000020847fff RDI: 0000000000000006
[  976.103779][T15002] RBP: 00007f8d83df6090 R08: 000000002005ffe4 R09: 000000000000001c
[  976.111752][T15002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  976.119727][T15002] R13: 0000000000000000 R14: 00007f8d86176160 R15: 00007ffd25c7ae28
[  976.127723][T15002]  </TASK>
[  976.130834][    C0] vkms_vblank_simulate: vblank timer overrun
[  976.269231][T15006] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2480'.
[  976.335197][T11965] usb 7-1: new high-speed USB device number 35 using dummy_hcd
[  976.517834][T11965] usb 7-1: Using ep0 maxpacket: 32
[  976.524706][T11965] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  976.945010][T11965] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  976.956149][T11965] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  976.966023][T11965] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7
[  976.977490][T11965] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  977.057598][T11965] usb 7-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  977.135205][T11965] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  977.174102][    T9] usb 5-1: USB disconnect, device number 81
[  977.214862][T11965] usb 7-1: Product: syz
[  977.252589][T11965] usb 7-1: Manufacturer: syz
[  977.298149][T11965] usb 7-1: SerialNumber: syz
[  977.310873][T11965] usb 7-1: config 0 descriptor??
[  977.478508][T15028] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  977.485652][T15028] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  977.873748][   T29] audit: type=1326 audit(1737413547.283:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15000 comm="syz.6.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48ab185d29 code=0x7ffc0000
[  977.927552][T15031] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2485'.
[  977.938981][   T29] audit: type=1326 audit(1737413547.313:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15000 comm="syz.6.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48ab185d29 code=0x7ffc0000
[  977.962438][    C0] vkms_vblank_simulate: vblank timer overrun
[  977.995283][   T29] audit: type=1326 audit(1737413547.323:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15000 comm="syz.6.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f48ab185d29 code=0x7ffc0000
[  978.018665][    C0] vkms_vblank_simulate: vblank timer overrun
[  978.408254][T11965] iforce 7-1:0.0: usb_submit_urb failed: -71
[  978.414317][T11965] input input22: Device does not respond to id packet M
[  978.431487][   T29] audit: type=1326 audit(1737413547.393:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15000 comm="syz.6.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48ab185d29 code=0x7ffc0000
[  978.465291][T11965] iforce 7-1:0.0: usb_submit_urb failed: -71
[  978.471498][T11965] input input22: Device does not respond to id packet P
[  978.488886][   T29] audit: type=1326 audit(1737413547.393:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15000 comm="syz.6.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48ab185d29 code=0x7ffc0000
[  978.525908][T11965] iforce 7-1:0.0: usb_submit_urb failed: -71
[  978.532106][T11965] input input22: Device does not respond to id packet B
[  978.672266][T11965] iforce 7-1:0.0: usb_submit_urb failed: -71
[  978.685240][   T29] audit: type=1326 audit(1737413547.823:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15000 comm="syz.6.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f48ab185d29 code=0x7ffc0000
[  978.688599][T11965] input input22: Device does not respond to id packet N
[  978.980967][   T29] audit: type=1326 audit(1737413547.823:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15000 comm="syz.6.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48ab185d29 code=0x7ffc0000
[  979.005644][T11965] iforce 7-1:0.0: usb_submit_urb failed: -71
[  979.065882][T11965] iforce 7-1:0.0: usb_submit_urb failed: -71
[  979.072967][T11965] iforce 7-1:0.0: usb_submit_urb failed: -71
[  979.079989][T11965] iforce 7-1:0.0: usb_submit_urb failed: -71
[  979.087217][T11965] iforce 7-1:0.0: usb_submit_urb failed -90
[  979.094471][T11965] iforce 7-1:0.0: usb_submit_urb failed -90
[  979.103829][T11965] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input22
[  979.149954][T11965] usb 7-1: USB disconnect, device number 35
[  979.419188][   T29] audit: type=1326 audit(1737413547.823:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15000 comm="syz.6.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48ab185d29 code=0x7ffc0000
[  979.605117][T13568] Bluetooth: hci4: command 0x0c1a tx timeout
[  979.605206][ T5828] Bluetooth: hci3: command 0x0c1a tx timeout
[  979.635188][   T51] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  979.635285][   T29] audit: type=1326 audit(1737413548.083:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15041 comm="syz.5.2488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d5b85d29 code=0x7ffc0000
[  979.666146][    C0] vkms_vblank_simulate: vblank timer overrun
[  979.786471][   T51] usb 6-1: too many configurations: 220, using maximum allowed: 8
[  979.841064][   T51] usb 6-1: unable to read config index 0 descriptor/start: -61
[  979.855135][   T51] usb 6-1: can't read configurations, error -61
[  980.035150][   T51] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  980.379459][   T29] kauditd_printk_skb: 36 callbacks suppressed
[  980.379476][   T29] audit: type=1326 audit(1737413549.793:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15041 comm="syz.5.2488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f66d5b8592b code=0x7ffc0000
[  980.435919][   T51] usb 6-1: too many configurations: 220, using maximum allowed: 8
[  980.476275][   T51] usb 6-1: unable to read config index 0 descriptor/start: -61
[  980.484026][   T51] usb 6-1: can't read configurations, error -61
[  980.495211][   T29] audit: type=1326 audit(1737413549.853:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15041 comm="syz.5.2488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f66d5b8592b code=0x7ffc0000
[  980.511285][   T51] usb usb6-port1: attempt power cycle
[  980.518510][    C0] vkms_vblank_simulate: vblank timer overrun
[  980.584883][   T29] audit: type=1326 audit(1737413549.853:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15041 comm="syz.5.2488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f66d5b8592b code=0x7ffc0000
[  980.789797][   T29] audit: type=1326 audit(1737413549.883:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15041 comm="syz.5.2488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f66d5b8592b code=0x7ffc0000
[  980.813555][T15055] nvme_fabrics: unknown parameter or missing value 'gDf˜
' in ctrl creation request
[  980.901822][   T29] audit: type=1326 audit(1737413549.893:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15041 comm="syz.5.2488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f66d5b8592b code=0x7ffc0000
[  981.324815][   T29] audit: type=1326 audit(1737413549.893:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15041 comm="syz.5.2488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f66d5b8592b code=0x7ffc0000
[  981.349611][    C0] vkms_vblank_simulate: vblank timer overrun
[  981.485136][T15054] nvme_fabrics: unknown parameter or missing value 'gDf˜
' in ctrl creation request
[  981.545191][   T51] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  981.565170][   T29] audit: type=1326 audit(1737413549.893:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15041 comm="syz.5.2488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f66d5b8592b code=0x7ffc0000
[  981.655089][   T51] usb 6-1: too many configurations: 220, using maximum allowed: 8
[  981.665513][   T29] audit: type=1326 audit(1737413549.893:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15041 comm="syz.5.2488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f66d5b8592b code=0x7ffc0000
[  981.720726][   T29] audit: type=1326 audit(1737413549.893:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15041 comm="syz.5.2488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f66d5b8592b code=0x7ffc0000
[  981.745111][   T51] usb 6-1: unable to read config index 0 descriptor/start: -71
[  981.762489][   T51] usb 6-1: can't read configurations, error -71
[  981.770174][   T29] audit: type=1326 audit(1737413549.913:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15041 comm="syz.5.2488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f66d5b8592b code=0x7ffc0000
[  981.832072][T15080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2498'.
[  982.012764][T15080] hsr_slave_0: left promiscuous mode
[  982.037228][T15080] hsr_slave_1: left promiscuous mode
[  982.318270][   T51] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  982.766785][   T51] usb 6-1: Using ep0 maxpacket: 16
[  983.029705][   T51] usb 6-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01
[  983.038993][   T51] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  983.047275][   T51] usb 6-1: Product: syz
[  983.051897][   T51] usb 6-1: Manufacturer: syz
[  983.056761][   T51] usb 6-1: SerialNumber: syz
[  983.106511][   T51] usb 6-1: config 0 descriptor??
[  983.221773][   T51] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected.
[  983.755750][T13568] Bluetooth: hci4: command 0x0c1a tx timeout
[  984.357496][T15099] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2497'.
[  984.367563][T15099] openvswitch: netlink: Unexpected mask (mask=8000040, allowed=10048)
[  985.278235][   T51] pwc: Warning: more than 1 configuration available.
[  985.296354][   T51] pwc: Failed to set LED on/off time (-71)
[  985.310757][   T51] pwc: send_video_command error -71
[  985.319179][   T51] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  985.334923][   T51] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71
[  985.365530][   T51] usb 6-1: USB disconnect, device number 34
[  985.415341][ T5872] usb 4-1: new high-speed USB device number 89 using dummy_hcd
[  985.455405][T12740] usb 7-1: new high-speed USB device number 36 using dummy_hcd
[  985.575708][T15125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2510'.
[  985.663245][T15123] NILFS (loop4): device size too small
[  985.669065][ T5872] usb 4-1: Using ep0 maxpacket: 16
[  985.676578][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  985.689955][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  985.700052][ T5872] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  985.713104][ T5872] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  985.722478][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  985.740264][ T5872] usb 4-1: config 0 descriptor??
[  985.745808][T12740] usb 7-1: Using ep0 maxpacket: 8
[  985.752470][T12740] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  985.768886][T12740] usb 7-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3
[  985.781458][T12740] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  985.790222][T12740] usb 7-1: Product: syz
[  985.794429][T12740] usb 7-1: Manufacturer: syz
[  985.799550][T12740] usb 7-1: SerialNumber: syz
[  985.814976][T12740] usb 7-1: config 0 descriptor??
[  986.036610][T12740] msi2500 7-1:0.0: Registered as swradio24
[  986.042999][T12740] msi2500 7-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  987.023223][T12740] usb 7-1: USB disconnect, device number 36
[  987.134640][ T5872] usbhid 4-1:0.0: can't add hid device: -71
[  987.168536][ T5872] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  987.203389][ T5872] usb 4-1: USB disconnect, device number 89
[  987.713805][T15144] hsr_slave_0: left promiscuous mode
[  987.984424][T15144] hsr_slave_1: left promiscuous mode
[  989.659605][T15162] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2519'.
[  990.142978][T15175] NILFS (loop4): device size too small
[  991.402942][T15190] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2528'.
[  991.519199][T11965] usb 7-1: new full-speed USB device number 37 using dummy_hcd
[  991.745453][    T9] usb 3-1: new high-speed USB device number 70 using dummy_hcd
[  991.796598][T11965] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  991.963158][T11965] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  992.010975][    T9] usb 3-1: Using ep0 maxpacket: 16
[  992.119584][T11965] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  992.147317][    T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  992.185197][    T9] usb 3-1: config 0 has no interface number 0
[  992.208518][T11965] usb 7-1: New USB device found, idVendor=2304, idProduct=021a, bcdDevice=18.29
[  992.219370][    T9] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  992.245962][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  992.264185][T11965] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  992.292716][    T9] usb 3-1: Product: syz
[  992.298234][T15196] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2530'.
[  992.316141][T11965] usb 7-1: Product: syz
[  992.329437][    T9] usb 3-1: Manufacturer: syz
[  992.344592][T11965] usb 7-1: Manufacturer: syz
[  992.356223][    T9] usb 3-1: SerialNumber: syz
[  992.362581][T11965] usb 7-1: SerialNumber: syz
[  992.387775][T11965] usb 7-1: config 0 descriptor??
[  992.393722][    T9] usb 3-1: config 0 descriptor??
[  992.419013][    T9] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  992.428247][T11965] em28xx 7-1:0.0: New device syz syz @ 12 Mbps (2304:021a, interface 0, class 0)
[  992.474855][T11965] em28xx 7-1:0.0: Device initialization failed.
[  992.515746][T11965] em28xx 7-1:0.0: Device must be connected to a high-speed USB 2.0 port.
[  992.945415][ T5909] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  993.046218][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  993.205393][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  993.485281][ T5909] usb 6-1: Using ep0 maxpacket: 16
[  993.510426][ T5909] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  993.520624][ T5909] usb 6-1: config 0 has no interface number 0
[  993.529372][ T5909] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  993.552321][T15192] nvme_fabrics: unknown parameter or missing value 'gDf˜
' in ctrl creation request
[  993.643416][T15192] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2529'.
[  993.661791][T15192] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2529'.
[  993.706784][T15192] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2529'.
[  993.793434][T15192] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2529'.
[  994.326020][ T5909] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  994.413383][    T9] gspca_spca1528: reg_w err -71
[  994.501586][T15213] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  994.694760][    T9] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71
[  994.705162][ T5909] usb 6-1: Product: syz
[  994.709424][ T5909] usb 6-1: Manufacturer: syz
[  994.716622][    T9] usb 3-1: USB disconnect, device number 70
[  994.725850][ T5909] usb 6-1: SerialNumber: syz
[  994.746890][ T5909] usb 6-1: config 0 descriptor??
[  994.765667][ T5868] usb 7-1: USB disconnect, device number 37
[  994.787493][ T5909] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  994.848494][T15216] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2533'.
[  994.901609][T15207] nvme_fabrics: unknown parameter or missing value 'gDf˜
' in ctrl creation request
[  995.070724][T15207] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2531'.
[  995.080312][T15207] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2531'.
[  995.089725][T15207] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2531'.
[  995.099324][T15207] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2531'.
[  995.292703][   T29] kauditd_printk_skb: 11 callbacks suppressed
[  995.292722][   T29] audit: type=1400 audit(1737413564.703:925): avc:  denied  { listen } for  pid=15222 comm="syz.4.2536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  996.628002][ T5909] gspca_spca1528: reg_w err -110
[  996.633893][ T5909] spca1528 6-1:0.1: probe with driver spca1528 failed with error -110
[  996.751696][T15234] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  997.112292][T15242] FAULT_INJECTION: forcing a failure.
[  997.112292][T15242] name failslab, interval 1, probability 0, space 0, times 0
[  997.125900][T15234] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  997.126376][ T5872] usb 6-1: USB disconnect, device number 35
[  997.146030][T15242] CPU: 0 UID: 0 PID: 15242 Comm: syz.4.2541 Not tainted 6.13.0-syzkaller #0
[  997.154742][T15242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  997.164794][T15242] Call Trace:
[  997.168065][T15242]  <TASK>
[  997.170990][T15242]  dump_stack_lvl+0x16c/0x1f0
[  997.175671][T15242]  should_fail_ex+0x497/0x5b0
[  997.180351][T15242]  ? fs_reclaim_acquire+0xae/0x150
[  997.185463][T15242]  should_failslab+0xc2/0x120
[  997.190141][T15242]  __kmalloc_noprof+0xcb/0x510
[  997.194904][T15242]  ? rcu_is_watching+0x12/0xc0
[  997.199675][T15242]  tomoyo_encode2+0x100/0x3e0
[  997.204355][T15242]  tomoyo_encode+0x29/0x50
[  997.208770][T15242]  tomoyo_realpath_from_path+0x19d/0x720
[  997.214404][T15242]  ? tomoyo_path_number_perm+0x235/0x590
[  997.220035][T15242]  tomoyo_path_number_perm+0x248/0x590
[  997.225488][T15242]  ? tomoyo_path_number_perm+0x235/0x590
[  997.231118][T15242]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  997.237117][T15242]  ? __pfx_lock_release+0x10/0x10
[  997.242138][T15242]  ? trace_lock_acquire+0x14e/0x1f0
[  997.247344][T15242]  ? lock_acquire+0x2f/0xb0
[  997.251845][T15242]  ? __fget_files+0x40/0x3a0
[  997.256433][T15242]  ? __fget_files+0x206/0x3a0
[  997.261108][T15242]  security_file_ioctl+0x9b/0x240
[  997.266132][T15242]  __x64_sys_ioctl+0xb7/0x200
[  997.270812][T15242]  do_syscall_64+0xcd/0x250
[  997.275323][T15242]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  997.281218][T15242] RIP: 0033:0x7f91a9b85d29
[  997.285627][T15242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  997.305238][T15242] RSP: 002b:00007f91aaa67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  997.313737][T15242] RAX: ffffffffffffffda RBX: 00007f91a9d75fa0 RCX: 00007f91a9b85d29
[  997.321703][T15242] RDX: 0000000020000540 RSI: 000000000000890b RDI: 0000000000000009
[  997.329757][T15242] RBP: 00007f91aaa67090 R08: 0000000000000000 R09: 0000000000000000
[  997.337720][T15242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  997.345779][T15242] R13: 0000000000000000 R14: 00007f91a9d75fa0 R15: 00007ffc79726338
[  997.353759][T15242]  </TASK>
[  997.357034][    C0] vkms_vblank_simulate: vblank timer overrun
[  997.435353][T15242] ERROR: Out of memory at tomoyo_realpath_from_path.
[  998.046480][T15253] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[  998.055680][T15253] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[  998.066371][T15253] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  998.325276][   T29] audit: type=1400 audit(1737413567.433:926): avc:  denied  { setattr } for  pid=15251 comm="syz.2.2544" name="vcsa" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1
[  998.411808][T15248] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  998.644669][T15262] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  999.318866][T15269] ubi0: attaching mtd0
[  999.336936][T15269] ubi0: scanning is finished
[  999.354780][T15269] Oops: general protection fault, probably for non-canonical address 0xdffffc0000002002: 0000 [#1] PREEMPT SMP KASAN NOPTI
[  999.367736][T15269] KASAN: probably user-memory-access in range [0x0000000000010010-0x0000000000010017]
[  999.377266][T15269] CPU: 1 UID: 0 PID: 15269 Comm: syz.4.2550 Not tainted 6.13.0-syzkaller #0
[  999.385931][T15269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  999.395981][T15269] RIP: 0010:notifier_chain_register+0xc1/0x420
[  999.402137][T15269] Code: 00 00 00 e8 11 30 34 00 48 8b 04 24 0f b6 00 84 c0 74 08 3c 03 0f 8e ff 02 00 00 48 8d 7b 10 45 8b 65 10 48 89 f8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 74 08 3c 03 0f 8e d5 02 00 00 8b 6b 10 44 89
[  999.421762][T15269] RSP: 0018:ffffc9000b8afa60 EFLAGS: 00010203
[  999.427839][T15269] RAX: 0000000000002002 RBX: 0000000000010005 RCX: ffffffff8165e487
[  999.435816][T15269] RDX: ffff8880602ec880 RSI: ffffffff8165e42f RDI: 0000000000010015
[  999.443767][T15269] RBP: 0000000000010005 R08: 0000000000000004 R09: 0000000000000001
[  999.451720][T15269] R10: 0000000000010005 R11: 000000000001c808 R12: 0000000000000001
[  999.459673][T15269] R13: ffff88805b0ad8c8 R14: ffff88802cd058d0 R15: dffffc0000000000
[  999.467634][T15269] FS:  00007f91aaa466c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  999.476565][T15269] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  999.483135][T15269] CR2: 0000001b2fd0f000 CR3: 0000000034bfa000 CR4: 00000000003526f0
[  999.491093][T15269] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  999.499050][T15269] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  999.507009][T15269] Call Trace:
[  999.510268][T15269]  <TASK>
[  999.513188][T15269]  ? die_addr+0x3b/0xa0
[  999.517334][T15269]  ? exc_general_protection+0x155/0x230
[  999.522871][T15269]  ? asm_exc_general_protection+0x26/0x30
[  999.528598][T15269]  ? notifier_chain_register+0xf7/0x420
[  999.534146][T15269]  ? notifier_chain_register+0x9f/0x420
[  999.539697][T15269]  ? notifier_chain_register+0xc1/0x420
[  999.545237][T15269]  blocking_notifier_chain_register+0x76/0xd0
[  999.551299][T15269]  ubi_wl_init+0x1018/0x17b0
[  999.555889][T15269]  ubi_attach+0x1b92/0x4c00
[  999.560376][T15269]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  999.566688][T15269]  ? lockdep_init_map_type+0x16d/0x7d0
[  999.572218][T15269]  ? __pfx_ubi_attach+0x10/0x10
[  999.577051][T15269]  ? ubi_attach_mtd_dev+0x1543/0x3590
[  999.582420][T15269]  ubi_attach_mtd_dev+0x158f/0x3590
[  999.587615][T15269]  ? __pfx_ubi_attach_mtd_dev+0x10/0x10
[  999.593169][T15269]  ? __pfx_get_mtd_device+0x10/0x10
[  999.598353][T15269]  ctrl_cdev_ioctl+0x339/0x3d0
[  999.603103][T15269]  ? __pfx_ctrl_cdev_ioctl+0x10/0x10
[  999.608377][T15269]  ? selinux_file_ioctl+0x180/0x270
[  999.613580][T15269]  ? selinux_file_ioctl+0xb4/0x270
[  999.618679][T15269]  ? __pfx_ctrl_cdev_ioctl+0x10/0x10
[  999.623968][T15269]  __x64_sys_ioctl+0x190/0x200
[  999.628721][T15269]  do_syscall_64+0xcd/0x250
[  999.633214][T15269]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  999.639094][T15269] RIP: 0033:0x7f91a9b85d29
[  999.643490][T15269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  999.663103][T15269] RSP: 002b:00007f91aaa46038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  999.671506][T15269] RAX: ffffffffffffffda RBX: 00007f91a9d76080 RCX: 00007f91a9b85d29
[  999.679470][T15269] RDX: 0000000020000502 RSI: 0000000040186f40 RDI: 0000000000000003
[  999.687431][T15269] RBP: 00007f91a9c01b08 R08: 0000000000000000 R09: 0000000000000000
[  999.695414][T15269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  999.703374][T15269] R13: 0000000000000000 R14: 00007f91a9d76080 R15: 00007ffc79726338
[  999.711340][T15269]  </TASK>
[  999.714342][T15269] Modules linked in:
[  999.718929][T15269] ---[ end trace 0000000000000000 ]---
[  999.827829][T15269] RIP: 0010:notifier_chain_register+0xc1/0x420
[  999.888874][T15269] Code: 00 00 00 e8 11 30 34 00 48 8b 04 24 0f b6 00 84 c0 74 08 3c 03 0f 8e ff 02 00 00 48 8d 7b 10 45 8b 65 10 48 89 f8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 74 08 3c 03 0f 8e d5 02 00 00 8b 6b 10 44 89
[  999.909812][T15269] RSP: 0018:ffffc9000b8afa60 EFLAGS: 00010203
[  999.916666][T15269] RAX: 0000000000002002 RBX: 0000000000010005 RCX: ffffffff8165e487
[  999.966825][T15269] RDX: ffff8880602ec880 RSI: ffffffff8165e42f RDI: 0000000000010015
[  999.975299][T15269] RBP: 0000000000010005 R08: 0000000000000004 R09: 0000000000000001
[  999.984061][T15269] R10: 0000000000010005 R11: 000000000001c808 R12: 0000000000000001
[  999.992710][T15269] R13: ffff88805b0ad8c8 R14: ffff88802cd058d0 R15: dffffc0000000000
[ 1000.001793][T15269] FS:  00007f91aaa466c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[ 1000.039022][T15273] xt_nat: multiple ranges no longer supported
[ 1000.058770][T15273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2550'.
[ 1000.067826][T15273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2550'.
[ 1000.691626][T15269] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1000.727322][T15269] CR2: 00007f91aaa24f98 CR3: 0000000034bfa000 CR4: 00000000003526f0
[ 1000.797034][T15269] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1000.805870][T15269] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1000.814028][T15269] Kernel panic - not syncing: Fatal exception
[ 1000.820363][T15269] Kernel Offset: disabled
[ 1000.824680][T15269] Rebooting in 86400 seconds..