last executing test programs:

10.898897317s ago: executing program 3 (id=347):
socket$xdp(0x2c, 0x3, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8006}, 0x94)
syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x901b01)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000027c0)='/proc/asound/timers\x00', 0x0, 0x0)
sendmsg$inet6(r1, &(0x7f0000006980)={&(0x7f0000000080)={0xa, 0x4e21, 0x9, @dev={0xfe, 0x80, '\x00', 0x31}, 0x9}, 0x1c, &(0x7f0000005840)=[{0x0}, {&(0x7f00000014c0)="58be5f9bdc6e19fe68cad3274ee08d07dd9047bd", 0x14}, {&(0x7f0000001500)="538840cb8a6473ccbab5c2eac28ee6a979ae36f49da6e1c079ffc89beabcf002f4917045177b13599d2f1fea2549ff53a5be49ac8b729d894d156783d68ed0a06c97e77583caf97f53c54582d08c281a516c82d35a6cf0613406b49e1870ec775db35253289c347e6dda4dbe925cb432c4628129f1dacf9bd26c5a51875b9d9bb3eff02bec045ae547055c060697540f6b5a832726e14b68b41db9ea6c97fb8903cb7e5ef49a90f6025230d0e45aa1b3ad8416538cace0e14fd9f1c2cec90f6d54f4af22bd2db107bd88cd3590cf0df2a36a650d385dab8fe3d79715b9c840e3fde910d84abed7d986c419d4c9a786468a0ba8b988bc868ba71f2d3a327b3088948595039937629185f5f7d47585cc67578b5ef3d91d0e273ea2521be4262a73be552eb0714d46da14dca267e1b635f6b7ee14463f46a7782013454324adc25ba61ae390d0bdb6a6b463e65674d5d649bfd3b64ff8842b0b8e0c6b00aa7bceb136bc10b30b2b2a25b737fa5f37c5a67b64e610c2adfe6dd26538f8b495ff5dc2ea4eb2532619dc8fd5bdc8018147cda92a1c30e66bff591091cca0e80a478bc65b28eb152a2e442041a667d494af0b5fd500d072e133abdeef2fdd6391391441981c1166ae7754405f1ccfaaf4af267779d3b45f754745c865a650f2e52dffc35afe0a358665dd5061b8ae0afab908d51ec21b5a1b4e5fd981ef4f2ae64b60450507cda691541e4f88e16fd7ec501d28a54f5a487129b3f8cf89f60e3a6c5119c2b271f6642ae2437ffc01eef8534029db892955fe51da4eb8a4235f1482bd14da317708ee75b5b2882023a294a7baaeecb760938a8fecd863ae8693cd523d2ad2ff9f40b46c50e5c151f62e8e9025485f6db1ad5aececa42480d2e41c27c79a0dd52b273dc0580b0284221dfd9553028134fb3ec6c3a22aa43c419e8f51e839401191b3b1647eacd6d64e70743261dd33defc46811a8f7827f6447f45802768122753f90e16b119b93ded6fc0466cd8a31a4503407d1327adba6d5706924bd96669fea163d02d8ccdc2ad57893a3c6a1dde253017d1ce916d1aa21ba1f5430ba19c200ff5ab45622bb1c0338487fe0ec91b5a5a5371366d2979a33da0fcbe721d54721875223071809cbe87dd475ef48427c0a95410b9c51a1712bbb638373d13ec617313d52b6112d178ec079bc8482082eb00c475005dd1b65b551ec4304f3381bbf9caed2072cd5b83fb199aba95b631f3795ec2938f88136cdb55b904e39e8e1d22fba0c70180c6e7b49b511d7e89221c6a6ee538791e47c847cbc0f0f91d65c5ccfb7d69568d8b93b673669ba70df6608a38dd6f0db841d7f8eb43e4989943910771ab3f46af21557b44ebfc8b4f22ea01f87ce81652b1f1836f1d095627566d6b1c1c0de8e575bbef9fd33c75f597506aa0bce1be586eaab89e1500989309f34f5e5bf21038d4ef37caad54180b720e0142a18935910915516d98c9962adb8209d1a8b29589f92498edc7743745d1b3e85fbbea9617d18ea4b4dc0bb9f38e5d460f31601b7ec9210c75be0e55ff2e477cc273afac5162fc5e3767e0cd4fed297d55e2c5883e418d47a63cedd59f8dca2c227ee5f0fbc469bd676ab37c48272858a34106138c8a01642e95e2df6dc7e31b74d6ee80a5a325fc365966f7b0002a0adf2397c19a42ea5cef856eddb17df84f5ce855cc05141f6008b1906da7ad3715f688c3305eae706689108c44064af1ecf45e4f63c7820671a20c850a617a4a28c15088ea9b74cfef19c21f8a8b2294342ebe47b22526144a40880d7c86874b02ce1f69b795a7de1eea00f234768f4f746aeed319067c5334b8f21667405f6c1d18f4bb42727f79d598da716cb06fdec287e4cf604ff7502a2b38a1dba0447316b98d47b858c52818def047289718be7418dec3cd3521e4c301b9cab0f2203d3d2708d6db5e119680e53575aae9aa487def8b50ee02e27e2e4464ae0a2a12a6404f52ef668db94b4704c65f37a409d17c685c06202a9e46b89d66d3f6ccce3bf7f1a03701521d8f2c97ffa1867a9c00ef80e0816977f597082120d5a25f6d76c33d7d5b2328880f38fbc247469f9a2696d78a184b43cb89c5208ef42ad2236dec8dbc5fd02aae37a1c3bf8b0e2c7de5b80dfacaa73264bc9aaf0abc3cef50ef90b19814d53eb8dd88b1db301a73e71283df3d2c21f96da0c962cf998c780897c120a935833a5bf89820b57e658a2a61649a000b0df46403e8f2a13198c31edafadf94cdb4d60be6f0fe68ad9772f1ae13d39a4ba026027dc72dde88da318a681dd00aeefba22559af7156d2d623012280deb13d68e473630319afcca0856bb31925a221d9e8267b6cf6b89cf4dcddfa06fb39e907381b5eff240f8052c60150e1aec87785ea4caabb77acbbd324134bfd6ba04d89634e7bc69478ccf074a31a56d24568bfaa053d3e450ef6742f2a9a9841226d56e7914577a3ae3e8f6dc7f2c9d7dd9da4d64530b85b036d61f2b63fe2c37b3d05734faa6efa29b73b0f5788c5dca4bb64e91cc1ac201ee76ebae89f4b7906651ae95d19e53a4149d7c7abfc090ca26e8ad069d42adaee139fd769f48c20700dfc0540cd9aa5a6c0dfe0d45222b522eba782c3531cab112bbcbb585209b82647f2dbea5626780be4331fbef37c333c51e147042168c72012ff6981ffd20ba424f478f55a12a187be12368f1f3a7599f4b0e75d48fbde8b1b7c0f632d3bfef50271d13850a6a497943d384ff4b39343f241cc60343cf06c38186b857668bf7196ada7ce0fac75415caef361507305417bab9af9cf61fc0a23b69bbc2109e122346aa1293481a2f3182086d66be9eb3189fa1032d94a3e02e6e3993f445b26defec8431cfdcd1e2ef939302dad3083fa7d8f22027c426d9baf31d8104608a55d0d33598125e2ccf5c046dc30acddc8d42a8da2f89614a88187e872ee41d49325edb256592ff4b8cf19e5c3455681497f4037aa3de2905a30b5ed5dc68d601d7fca1d0b3e5e0326674e1b0cabe803a2cdfb85abb8720702a826581b3142d2ba5f5e4a4ee8ce843761ac8a0701421f7c40275f50708e7ac81fed483d97f4ba3b80a6e814ea463b9c0f23df9bea5e0dd0ccaad87cb7294e0e512e072ee663c84edfe319444a27611a78466aa3d4a24673ae6d38d2007d8103471880b015e22e2543a9601ffefde910c8aaa8214fd647ab03fc1c901c952a3a3fe7f5fe81dc6723d438c1166e32fe5abe55ade4e920f2239e64e814eed87579da011d4d7c2a18d1d083e0de9ec911bb3a8c23d5f266184e0d1cb83896bf6af0c26af07076c9ed00352b111fe87039c3e711f5b064b819b131cac4f786128af826300b9b022719fd8685b38755abdcb9116cc444e58b6904d9e3b33acceb7e210ed60804acf6620a07e7e5e3c49eac484c80ee03173a4f7428ea2eb42212a9724a0084f4fc8d628f893c2da01e0a332088fece", 0x9a0}], 0x3, &(0x7f00000058c0)}, 0x1)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, r2)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x4040000)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000)
read$FUSE(r1, &(0x7f0000002800)={0x2020}, 0x2020)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x2000000f})
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
timerfd_gettime(0xffffffffffffffff, &(0x7f00000001c0))
pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x8000000000000001}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xfffffffffffffffe, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=ANY=[@ANYBLOB="dc01000016000100000000000000000000000000000000000000ffff7f000001ac1e00010000000000000000000000000000000000000000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffac1e01010000000033000000fe80000000000000000000000000000e00000000000000000000000000000000000000000000000000ffffffffffffff03000000000000000000000000000000000000000000000000000200000000000000fefffffffffffbff000000000000000096070000000000000000000000000002be0000000000000000000000b1a00100e400060020010000000000000000000000000001000000000000000000000000000000014e2100084e200000020020800600"/228, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000000000000000000000000001000004d43c000000e0000002000000000000000000000000ff0100000000000002000000000000000600000000000000fcffffffffffffffff070000000000007f00000000000000000000000000000009000000000000000200000000000000100000000000000002000000000000007f0000000000000003000000ff070000040000002dbd7000073500000a0003b14200000000000000"], 0x1dc}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
ioctl$XFS_IOC_ERROR_CLEARALL(r5, 0x40085875)

10.011596527s ago: executing program 3 (id=349):
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000)
r0 = userfaultfd(0x80001)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x2, 0x41, &(0x7f0000000300)={{0x12, 0x1, 0x201, 0x26, 0xb5, 0x2d, 0x10, 0x153b, 0x1182, 0x63be, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2f, 0x1, 0x9d, 0xe, 0x50, 0x4, "", [{{0x9, 0x4, 0x23, 0x3, 0x0, 0xe, 0xb9, 0x90, 0x4, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0xfff}, {0xd, 0x24, 0xf, 0x1, 0xffff7fff, 0x8001, 0x6, 0x4}, {0x6, 0x24, 0x1a, 0x5}}]}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x5, &(0x7f0000000440)={0x5, 0xf, 0x5}, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})
ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0)
setpriority(0x0, 0x0, 0x2a14b58)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={&(0x7f0000000840)="d55436564ac47a874282b70f485638003ddfcf0b9fe497d500696d37a33131e546e7a3a2951c679372cdd361a8c3cdfb9f3a9f151909256c06148f8a338819063f86d316667d1b22c10bf462a86ea3a797839f8dafb95fe9adc5058b22ae14d320bf19e6d9b7c98b26af6cc2cab3c06eb3641ccea271a15d7d7287a59e3c8a51e1beeda87bcfe241fbe131baf46262504413a399ce7743f598a5c37d706f3b459760e30d5df2e94e33a68426cda5e3ccf660cfc5a13770fc6951", &(0x7f0000000900)="75c343d2f714dd24d836b49034183018931a33ad04e794ae2d26b6068e36cab2ef4816c15b3c25651d69433ce3dff8"}}, &(0x7f0000000300)=<r1=>0x0)
syz_usb_connect$uac2(0x2, 0x9f, &(0x7f0000000300)=ANY=[@ANYBLOB="1201100300000020410e4a4240000102030109028d000301bd2005080b0002010b20010904000000010120000924011923041500000c240302ff010c0303060064090401000001022000090401010101022000102401022a03011000000610000021000824020101040506090501090002"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0})
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000300000008f003041b40000102030109021b00010109007f09040000020701080509050102bf03050707"], &(0x7f0000000780)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x250, 0x8, 0xf6, 0xff, 0x0, 0x6}, 0x10, &(0x7f0000000a00)=ANY=[@ANYBLOB="050f1000010b100102a000278006000420deb1f215e1869853c9a7308bb3829ecccf8051c584a0915e3fdb2df359e9cad6bf5dd61721dc0158a0f8ee534faeb99aef1240e4962e2ad072d0f040bcefc2dc8825f9fd12e0dcdcacbc858858f08c60c8c68e46058ed372ad7837718a3b84608caabb7dbffad66a2547adb822f28378526d1bb20031b22329ce38ed9f8ca7ad7660602f9bbd1040aeb8d4eafcda4014bf75"], 0xa, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x827}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x437}}, {0x75, &(0x7f0000000380)=@string={0x75, 0x3, "04a6155ae8bea4a7fba5b24dd54cf7c7e91fbdfe774d156c25e03440732880e0dd624e2a3efaa0e7e0911788d0086bddb6e43ac8083dad4b3b4973fc968da6580dcaa6ff6598337558e04b9d1d5053b48bf13e1dfa33c16732582e34c580a8707b1d5652583d64925cb8b5e36a76f07fe78019"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x861}}, {0x6a, &(0x7f0000000480)=@string={0x6a, 0x3, "32b8137775facad1e1a2aec869b4b87b4d45a1f0be9c803d662e77fc109045b7495f73446ccd8db958d2371e749130eae04de74afe15998310753f63df854d32ffdf8a2fea631f7e55d499c34301f79d74739ae07cc5c23ea7876bca153648468d505a30b02c02c0"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x420}}, {0xc7, &(0x7f0000000600)=@string={0xc7, 0x3, "f9c5069db7e7c3787f07de67a50e1d9890cec05894d2cd850ebd7b61ad013dedcadc85b297e6ef052d5c943aba65a092336c558cfa4dd5c3fd31dc91e0b75217602130fc8502204b8a252cce6ded815006f73b1c5f0ca4bea9496ef14bf82a4b2daf85057ff92226d97180afcdeac9696e554335fb8eaa43e515ceb73cd02e041eb26cf49a273815f897ada1e08d4a905b83697131b3fae6be55249cf791dcd2017a9df7acb8bb86af8e030ef0a09cc1d2c0c589a6460d5a5f21f3da114d40c8d32b10d180"}}]})
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r4 = io_uring_setup(0x6a9c, &(0x7f0000000040)={0x0, 0x6d57, 0x8000, 0x0, 0x23d})
writev(0xffffffffffffffff, &(0x7f00000009c0)=[{&(0x7f0000001480)}, {&(0x7f0000000080)}, {&(0x7f0000000940)="52c4689ebeea0ec511c0283241539085bc677839ef5f51562df74844d63bc45d8a041d645b34d380fdb47bbccbe9fa2bd4423b031925624c0905f736fff3aab1deed9f02c9d50d04f18fbca288ba24e7162a136199d5d6f5", 0x58}], 0x3)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)
io_uring_enter(r4, 0x2219, 0xcf74, 0x16, 0x0, 0x0)
ioctl$XFS_IOC_SWAPEXT(r0, 0xc0c0586d, &(0x7f0000000100)={0x0, r0, r3, 0x800, 0x3, '\x00', {0x9, 0x8, 0xb, 0x1000, 0x3, 0xffff, 0x0, 0x50da, {0x6d}, {0xc000000, 0xffffffff}, {0x1, 0x1}, 0x0, 0x14, 0x3dda0000, 0x0, 0x867, 0xff, 0x7, 0x8, 0x3, 0x6, '\x00', 0x800, 0xc3ba, 0x676, 0xffee}})
timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
fdatasync(0xffffffffffffffff)
mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil)
socket$netlink(0x10, 0x3, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet(r5, 0x0, 0x0, 0x4880)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x3, 0xff)

9.764032418s ago: executing program 0 (id=350):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c)
ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000011c0)={0x0, 0xd3d, "796cc7", 0x2, 0x7})
sendmmsg$inet6(r1, &(0x7f0000001140)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback, 0x5}, 0x1c, &(0x7f00000006c0)=[{0x0}], 0x1}}], 0x1, 0x8020)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000000), &(0x7f0000000080)=0x8)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x4)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r4, 0x2)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000080000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r5, 0xffffffffffffffff, 0x0)

9.359492442s ago: executing program 4 (id=352):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000001140)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback, 0x5}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000000), &(0x7f0000000080)=0x8)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x4)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r4, 0x2)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r5, 0xffffffffffffffff, 0x0)

9.255816257s ago: executing program 2 (id=353):
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0)
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000180)={'comedi_parport\x00', [0xd00, 0x1f, 0x6, 0xfff, 0x3, 0xcc7, 0x0, 0x6, 0x5, 0x100ff, 0x2, 0x1, 0x1, 0x2, 0x9, 0x3, 0xbc761c6, 0x9, 0x42, 0x40000003, 0xfff, 0x8, 0x5, 0x2000006, 0x800b, 0x32, 0x5, 0x2, 0xd, 0x1, 0xffffff5c]})

8.659999625s ago: executing program 2 (id=354):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x8, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_getaddr={0x18, 0x16, 0x205, 0x70bd2b, 0x0, {0xa, 0x0, 0x12}}, 0x18}, 0x1, 0x0, 0x0, 0x40008c1}, 0x4000000)
syz_open_dev$video4linux(&(0x7f0000000000), 0x8dc7, 0x2000)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48)
r2 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r2, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10)
r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2)
write$tun(r3, 0x0, 0x3db)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18e4ffffffffff0000000000000018110000", @ANYRES32=<r4=>r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32=0x1, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f00000006c0)="cc", &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r5, &(0x7f0000000380), &(0x7f0000000500)=""/166}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r1, @ANYBLOB="f0ceb8a5d74f88aac95386cbba19611138e2a28a400bbe3b6cf9de78d8434bd05a007ebad26e8451159a0d4991dd85deb5ff3924e33f50f0ac59bc5dd7f0a6c2f27bdfb550bc0d9838cfe5fb9566beccc04268460e4f086fc54c117f7687760bcf757951a89bfdca944249d84c4d4166c33e39a598e0cf17c69f6b3af88f7561450b26e6dccf0ee5fec2068df6e8946efacd927063d1c68600385cc202aa5aa9a01a34ad18507f02c65e535659cc3794932f2a3c07660b9ab2cba054f8c0d7eec0c18a062c0ee780afa69a5ef3acd136c1a58aaf17cf9affd4eb90018cb549dabf4d745644d3a5d8aa254203e2db79ae0f17", @ANYRES16=r4], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r7 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r8, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x806, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xc4}}, 0x20050890)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, &(0x7f00000028c0)={{0x0, 0x0, 0x80000001, 0x7, 0x1450, 0x2, 0x1, 0x3, 0x29e, 0x81, 0xffffffff, 0x2, 0x5, 0x2, 0x2}, 0x8, [0x0]})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40180, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})

7.962991127s ago: executing program 0 (id=355):
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000000040)="1c0000001a009b8a2a569e409031c72023d7d6cb8f8ae3140000003b", 0x1c) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x141842, 0x8)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (async)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r1) (async)
sendmsg$qrtr(r0, &(0x7f0000004800)={&(0x7f0000000180)={0x2a, 0xfffffff9, 0x7ffe}, 0xc, &(0x7f0000003440)=[{&(0x7f0000000740)="f17b9b08d271886c4973efc4818eef", 0xf}, {&(0x7f0000001800)="e6148ecde81dbea7e683e826c037177ba333b4f27a088f9746b975194e85cdf11efe37b8094dfb5f67cdc0db9c9a5fa295af21d8a6956dd53857c42aec0c5fe2b086b9494d4040fa8728023fe4a21d99b70678e8784d846c84860d743877e605ac1d0f6687daf3684fc75e51f8f71d2b51976f2dc468486c4d7157f9810a44738584b21975400f73fbb853c7a940e75a51bf68ec0c3615d46837363d346fce42d461e0b73ac71f6a7903c7293f1a97ca358e176440218d6c064cfc961452abfddc49c89102da9235a77848b803993110a6a5798a759293513081eccfec4058c4adb5ec", 0xe3}, {&(0x7f0000002240)="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", 0x1000}, {&(0x7f0000003240)="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", 0xfd}, {&(0x7f0000003340)="ef305334cc499d62b816f520ee53eded504c6a5d5bdd338484395a33ac42b9abb47ab685ff6273bd3613eb21cd08b5f2d0f4ea6113", 0x35}, {&(0x7f0000003380)="2836d5882a585064d734ccc93b0ec1c517e5fad4413102ee2b56f14736fe2a29a9399bfe7f3f97c99ca3138c0f4b7d71cd44a287eb43eed09c918e38dc529a0dcf5bf38349aa0ffbbc8d62f1b03f06b6098275fe43959c2b15fd31ddd515eb674a1f086bdfbc811bb9b0e4d3dfdec0b2e86e5aedf425587f929f6c2b45bb8c18fd3392be17dc44cd89a8e0", 0x8b}], 0x6, &(0x7f00000034c0)=[{0x58, 0x10a, 0x8001, "96c4ea5a0d4567f95a88ef07afcb38ebac1877ef33f63a221d33c866d4209cf1af851b76629ef4fa11ee2358952704503678efd9e02118ffcb1cca7715370f42ebc0bcd6d9033a"}, {0xa0, 0x10f, 0x9, "dd326cd923176ba5eb23f0ac077413196661c5367682b69fc3eed99db12ade8aeb748df6d329fa00e635b419a137d0467bb73bd9c6ad4ad0a40f892f29b1d11537854626071240aad9c133deb8c9b006d24e9085a19c9a818fb9200eecc40a546e24dfc76f60fef11289574a27064d630889c94b477a31a4f84c684c93321f051c715e6b59008d3eb6966a4daacc"}, {0x50, 0x119, 0x1, "0e03456d57fd8dbd8d1b4f758c1f4cef588d457d32af4738d282a934465139b7bd51a053a206b822f946f4eb28271a7cdfd0a55eea0879f926d413"}, {0x1010, 0x10e, 0xf, "85585ec9986db91eae48e579f96ae5f140cc0a4ded95120c0d17423852b1c45e807bea41da2e2e992b1e44d19cec878f9a674e3b947671fbaa005d1e6b1b0b408b05fa46418677e173d0bf62740c1079a2c147f84e58860dcfaf1a22e909d18a0412c4549d92dda26bbff7fd767f751c2e7115b8caaa406c74561c7bde933280360535c24dbcb487bc4e976e12dfe0ae6b681c746af0a636871c6bd9bc215bd2169e164a8e622d7505e5294f5677e923673b1a9c8814929b8bbdf62e33ea4ee079d4a996dc165f6b122652f11609e88cc599e0b55c44e812d038029d4039bf1138e81288603dc9c737fb52edcc699f3895f70f325c354830855c9b52c1189aed4dd80595c68eced991517488f8bc873f0fca13ebe195a14cdcc52529478312c69b52622a607eec261a011011c3c2f95b236bd5f787412788221a25f49cd5d833a712568231ce998f2e7367313e080dbac6a67b5de5358088d096285589795c47f1919b28196757522a9a27305af94bbc4ac1e99e58d80f42d1e0f314c1737704f961deefdbe216e6579847c88253a64ce697cb6b39d072534aaa2835203dbe6a9adff5134794eba71cbcd0857bf4f2a14dcedaf0113cadfd19156f58780849ff5bec8240a49a553d754df1d4e6fd9a54b2c8642e3779b0e0fbcb4761ddda133dfaea78a725bd43d92459904cc44687231ac1b15dd0db6f6ebf84649f81fe89a45507567a8c5cc386e71cc6e9fd8d055f4b66444eaf8f1909e89497e2dff64a44cc2b19897700e290a46a0aa35cf6ca4a981efb9771b2b7a4e36ba164b3ca7a1b556a60c120af5ca468f3c084dea54fd15a7c25fce2b072f6de5eeb911911ed9313257013ca9f542fd1b50f22c06f6a9d13fcde89bd2c73656a6cd279e11e58cc383502c3cc87713a6016b190014802126b489c72654dddc0e6b4b6b3e48e933251e1dd0cf1b0b1e5240a0c9c4131b6602be1d7446bcea2ba5637dfba8e4c7ef7b412237782efde18bc1112e5d8ed25777170a44debe506c99391c8cf67197dd05ae78ab2eaec006c2f933a5a40be897fa5175fe398cbf3caf690334d6e20199ec1300c40c0fd507554e9d3ba176b22f0e070a4de8f1ff74e44de4bfad34b6e7f33f4fd21640efb2c303a86adecc88210deace176cd6013b3c9a6074adc1b080233aaa75cd53b79ee9f35586dcd52021013649cbcf668e0e2000445819c79929da95f11ec8bb08a034853e6e34ea050fd5e271051a96ceb31f4f7df56a5d23506ef76263f07aa528d667a7e963cda797b370e2d8a05f4109455860a4e65d97caa24c2cbcd41fedc0c334ee6f5bbf2495ad8cc3fc3427239817c4c5f96169d78a8f2c609f1abc320cc547d6739b4da09c9b89db17c509231b0f9b026d4584ff21ed94f5f802f01cb5e62db5a4b230e6564672553c3825d3f4a1757c85b97fe28235e9b2aa67783720f87c616ae4161c2676c9c211e7d6efa6a8ac3424cc3606b7ddc63b14879e45c6c9b35b231f86ea020479722349a14eff6f8779b648800057cfb56540633103a380c5af3cc91643e22c4e508773744a9387304d5da6b56f7571869df2818baefc7fec7ed420fa2d8dd03edaec17ba5ba7297e036c5da99e51d2878b088528bfd909cff9a3b4d6f1dce24eb0d98f2be4f35f907df3160b6f6cfe697cf4d3a62987887150ae9f4b5aad6264abfad7eb3f5ba6b1fdfff06a8855c7f48e0096296a20b378c6f1f06803a8ca4d050c71d1e288b3927f748580ca742ffbb617e03c2cc92c7ab40271d5b625d6775c2c5cd0dc1b113198e3fd9b740b746453245743343635523f4098c4e5f540536df9574193ec9466781a5fbc058767a9014a30d5c87b77c9da91a3ae8d8dcee81b09c2d80aef0fd64051a4b753efa08d1490d209a811f8932d2dc22117fab945b39edd227db30c840a862edab020053d125c87487b9fe2246beed458d46d8c8bc486f47100833a549c2c18e7d210cd1000e12d077d1eaad1e8d228d5ca9c3ca09ef7de8653ec737a44a775755725078cb47e2d36badef6b5275ac8463c709338253c6b61a44997dcc96a7628752533638364a5e09b63e0d51032da057a5e3848f9a89764ec8960216e315f23b862a02cb1057716fac8e06b7bd3323d288de502c45667213562119d1faa6019905861f324303c4a91af5fff90e493123111984850974b8adb5c0b0b4ba0aa605f6511b0f278a5895e69346ada1357f048911142b0c64353f0c8068a27102692c07b12b4e02e09df8de10cb58af2829b1daa6205c95cc6b60e59877518d69db4b35de46be01b170443662f7dfeee9c4af126e9c74efa2366ff244c16492824eb00b233b7904c153a47ca469587bba2f2f9e68a4f435a827c06ec9624982162393d9a51a1e0f228e229d4b212b70dbdb9577373581427e267da420f3412ce1027bbbdf7313ab6c80a6e243616a0fa6493b645540e4f9b2ef187b4e1e4317ddc68675ce5b3418ed1573de64969c5130851009ab150f630215c0a5a696e5e91dea1aa16e761f7a80c80b8cdd3723bbef5bab6f2bd0dee0c1b7b9648514dff915f2b6809061648f6b0b5ab8ec4c20d4c08be1919b226bd644a981201fba3df6f942264688cc75a9102602d1d42ca9ca8e5dcc896e27ed13cfed5faaf12a599789e0696820ec52a20900afc43abc6b5a1ab73a9f3b14265476caae0e7dc97884e9a91c268dfeb118fdfebd276ee26b7ecd6a278df9a5eb15314101947a096e73c6306d2aa73aee025643a9dff7fb3425a527a33f6d00540ce24a6a53668cc98d5d87dd96ca085b49b606e07bc667b12e726f4953839bbb82f37c89d9888d232b9e236b4736564ff7ca29c003296cac66a539704a3fd74ab20153543a1508e013a886f76182765cf2366ec3af10f80b916d80b124d5f1cae5309a0da409aacdcb1d76aeffa66307293eca6ef871d6170d9a6d979a0420fbee05b9d4f1bb023035c7fc110b946632c348b4560f27d777711acbca0597b512db1c247c24eaa6274fcc286252a9a06af1d7790854aaeb39a3c8acf182eca5f5c75ab7b56f74ef76750120ae8bbb4a3bb0ac0cb041542b6aad03ee332e3ab80b154d3c0b3e8f11536de8f972d8b848a7ccb32a20125fd2b8979c780a144a03d0ba6eb728415649899e00f05d81862b02057c2780cc4a457ab3510d9a4b333ef8fe8025f9253d2afa347c237a6d8ffca07dd697f92e42e108de5acec1d4eb2b8cf81e8a978a6672efc289391316645ee76d4124f1a05c4079bcee3efd2f9703b8db18b313e3a25125ec94e93b9197e99d3666d77d500674ba731558da03408a5db9195746bc16b5eef4d420e265f63839e90379983987575460bad706bc20a4c935d80959fca50cc0945b346d397cb62f92a428b05a5b0e6116ab77988d2388802ca991dd8d6889e54f957f2c82e4513460d2b570a2bc94c43700e2b249ad272180592e2cd0fc922164f02a35bcfbaf621b3b500ee06b38dce2cab482e000a65b77b912d5113db96a417706e02a009ca5daba1d7b63fec2a4a4563a909895ac7f79d02b35fd96c3c9645d6e33274ae456f5fd3e4c6707a8a9c79fa3b074137a11d2bed72c7337b154cf0fc8f8690fd92ee33bc76a8f859b9894e92d788117b96ac9b7ab77572c26ced643cbd5c838f24d6fe2f92fd94a5480975bde3dbf2c526b90b3efb006dd29a0599780a0115a8f8127e3da5b7029c21c932e456b213d41ea3a3c57b4ad41676bfce6b23989337d9600a49cb96af5b19e2e150c58422a469c602db2cdba0429da7e8c5a773ef12ab2bff717894f6480977fbc2d1a31a3e03f391aa7a62ba4ecc98b3412ee46b0e0ea6934b03d53a773033c2fba30cc710d8b7f3fb875f8869388a80a2d072c806b9832f0c2667ffd765d33ee6989cdd0f66400926f8cef527537a5c405c64be3d05d2c85816d8a290071cd52919d6edf56faa432097ddc795b1691c0117c69bcba46c4fcdeea8c46f049f0481add426cdf939c9a6409c1d90f39998547aeffad1abfe7f03878c29da6da20e4dd17080731f1cd94db1f6c044489fcbbd64bccbbcccf4228ac1df3e7e608fb2759548b3ce788a0b27b64c1e31984a6cc425bcf8025af2c5f2df810eebb245a3be4e1d08ceb58afb4b77f5cbc1a9e3217519df02bc77d0237aa03d32fbe9defd7675db7c94fe4cb163ed49f0552756ba09e931069dcc943b3b2e02e83f84c84633acf0eea7a16c3738eace36068085e719df4ac82a0a030a7f012d007e7a93420a3bb2ab4019741c4cd4fcf09e2c5f2b21bec6d1f045736b50211498417ac3888764f73720450b65bb252691c4a6561f8874d981e427136f540e9e814553ee14543f17c0f183100d7d2f02746b032c1f72845dddf12b94eba15c707837db390d315e043ac2d93901226360e85670b378e170562ed5e26ef0ce1432715ae0b28a06c4b5e46cd9e8e1a552055a53bb617c31fc263656bcac3681c0aea5c7bad6ed345c37389eaee67d7d7852437bc92682510ad1ac3da5a3ba8e391c9b03cb2f9105410ca42975830f2e8b0e1fdcf1835707778b8474b77c7a572affe6221e5a4b00bc0d0525417069b67602296eef533369cc3028b807aba5f2cf9a194fe961e6bcadf1ef31f00cde274ab17fae166368e97e1ac5567c18f584d1db350a1628120cd4c8f4e5f3e71de5c2eb6354da3e14b76bdff535c6e85669806fadd2087951b2953bea6a9c1b1ee6a396f7b9dfe490e4d6f72e8a74b22c23e51ee9ea3e4202b80f615d443134cbe47051a7cbb2278959a61c314095a181180b05f0ff6355dc82b85e5b8e70259f889bdbc822b3fcb391dd508198d919b6d04e16745ee2cfe32a0612f43f907652871dee3f9961432b58144718d48d1df9f4f9923cb11dd76453d18b44bb4a8ef17c850960d3a396dd05c20cc9712d981dd10db98c705ca3f8ec503b5a0cfec29430a339217e6c7b2e60cdb41f60180773493784fddba483018186d50eee42f2f72de88b5bc3230ad7009ba0be670223878e647dad698d13d9dec4fabfb3a32d8ce2dec2206c50c0320b3ddb66c17a2f124be8ab2af82d2061b1a85a779691fe214137c6662e57ff8320fd5d65f46da68a1013b405725d11eecc97824747fe90ff0120d5bd16396963c17ed16192b7ac94ed090893229f3abefe40dd3c865c0b5cb64e9ccaa74572de416c4a4272a1df899e272d212c10c850f2b9ae5204b8e686d5e2c271877af2327777e4042fd47c17af0796161ad27e84895c5f19e21d8e405d65d1f8ad6496b8d4ba0061272a3b4d15aef65441962dad91bbb679936a1f3d6fe6580d47e1d8e5e512868206a9354464ef4900dc4559bf7aa80642be568584eb9b7af0b6f226e40c532302b4920d81203a839f26e2c410281d3fda33fa1142029c744aaeecd41b516a596f67302d84a7d2b4e43eb69bd0fe1842f0b841e3d5884e020a1a4b608a3df1d1128f4247f0e0eb51164f804eac2122ec8f56014bddc4d183622bd5b60b6ce76cd8b350f415c0dc65efc33e5b66388a73b75589c58267d86c5d7d50a3f21ace4613036ea274ed15ec6ed3109735638d56a4de9db0c62d252ee6f100a1bd27f9e828c6b6d51a7bf4ccacbfc97daa41e8c528355490609800bf61c8326bc82a959d9faf83aea64b5366d16c0331297133059ed15cb9c3e8e17729083e59cf7af23d5f52bd10ef8b865aa6f007c4f2fbf806c6228cfbbc52531ee2722f70b1d3c1b0eadfdc407a7e8dc83c1e9e568ac597a7ee5d33837a0629ab6732cdcfd9e234d6b10"}, {0xd0, 0x101, 0xcdb, "cb4565e29d45e27d0f42350b9e50caeb227a318bfb52d1d0d3bddbead5ce2011300bf55723965d97c3714495a674f47c1d153917988da32427eecef3fbf84c05797208be0edd6e492fcc2309370669413f14531749c016b0303647a9dc2659a6545eca5019ff3aca37c0ac6c2a3b832c0f35b028517d0d9e13a914412ef7e44aa31202767a5d63b41b1d2e6192d3f29234a67dfd1e98d699093d20102f15a1907c213ebbad054e4e82e0e16ded18285cb758830b0d657fb061"}, {0x30, 0xff, 0x1, "83943f6d25e07d211e24a4c6ae00c269aaea4aab3f86939c4e0a3fa1e22dba2f"}, {0x68, 0x84, 0x1, "72b34c5f8cf0898809928fc8decfd606b618598ae7a1b170977d897c950d67038bad2f22ecaff936e393d60e1d078ba795fb4a504e5f99e34a0b8980df2cfd58159453415b541630369905d0b6df71d7a9f5c879"}, {0x48, 0x29, 0xf, "b10ef19b70e50a96585b9a9873b88dc647e8ee714a987155a245f6d1d1dafdb2800677b77c52efcf270df0dc9cb9b056ec4db2f505"}], 0x1308, 0x48804}, 0x38) (async)
getdents(r2, &(0x7f0000001900)=""/246, 0xf6)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f0000000580)={0x64, r3, 0x200, 0x70bd25, 0x25dfdb7c, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x65}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x20044810) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) (async)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000340)={<r4=>0xffffffffffffffff, &(0x7f00000001c0)=')\x00', 0x0, &(0x7f0000000200)={@align=0x3a, {0x101, 0x4, 0x3, 0x26b}}, 0x6, &(0x7f0000000280)={@_ha_fsid}, &(0x7f0000000300)=0x5})
write$UHID_INPUT(r4, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
r5 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_BSS(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd7000fbdbdf251900000008000300", @ANYRES32=r8, @ANYBLOB="050024"], 0x34}, 0x1, 0x0, 0x0, 0x2004c051}, 0x14) (async)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000090a010400000000000000000a0004040900010073797a31000000000900020073797a310000000008000a407439fffc08000980040002801800218008000100647570000c000280080001400000000d140000001100010000000000000000000900000a87467d8b605a79a563aa32e5f5d67cc4b364f400d88bf3ec3377f869c40561b926fd4efba8bb19631ba2665e1e2339f51ddb5392cbd41a3140704927285c80ddd7f26abeac5adf32d59f3713d5b7d9b45f08aaa04e1781f0e2af6c5a64c674db"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000019080), 0x102400)

7.726785366s ago: executing program 1 (id=356):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000001000010000000000000000080000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020900010073797a3000000000080005400000000d18001280140001800a00010071faffffff000000040002800800034000000110140000001000010000000000000000000784000a0000000000000000007a06a55477609263bc6c23765cfeb24a4fcaf11c01c785f16ef137723b342f9b96898930b678d5232aa9641c05fb3de207021809b49c1161c34a11849f170fd9ef9c209f05ff88655f27ad54fab8c2d44dfddb89778514c430f848737c4ef0cb5260acf2b19e86cbe84756cb83d10d399ae25a7af84e05caf7f16babdd30211d3b47080c208fc2f1dfc70bb698a02804f5f2b50538e10f592c0061f63e488dfa713470638903014de3c857ad676b4627ad511aa058586d3fb789cc7663b0cede214b6bbb4ffe58bd5a2f390c1fc20c007273ee0cdef9acb58104cb386c8cbc4e3d613dc641"], 0xa4}}, 0x20050800)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r4, &(0x7f0000000340)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x7}}, 0x18)
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100))

7.510091182s ago: executing program 0 (id=357):
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
socket$unix(0x1, 0x5, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000180)='\x00', 0x1)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x4004)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r4, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f907, 0x0, '\x00', @p_u8=&(0x7f0000000180)}})
connect$pppoe(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
r5 = socket$nl_route(0x10, 0x3, 0x0)
fremovexattr(r4, &(0x7f0000000140)=@random={'user.', 'lo\x00'})
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000180)={'rti800\x00', [0x100, 0x3ff, 0x1, 0xf1, 0x858d, 0x100, 0x8, 0x3000, 0x7, 0xa, 0x0, 0x7, 0x5, 0x401, 0x9, 0x0, 0x1, 0x7, 0x1, 0x7, 0x7, 0x4, 0x7, 0x9, 0x4b, 0x2, 0x90, 0x5, 0x81, 0x800, 0x8]})

6.741171904s ago: executing program 4 (id=358):
r0 = fsopen(&(0x7f0000000180)='hfs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
socket$kcm(0x2, 0xa, 0x2)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2200, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
accept4(r4, 0x0, 0x0, 0x800)
r5 = syz_open_dev$radio(&(0x7f00000000c0), 0x1, 0x2)
ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f0000000040)={0x9, 0x9})
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, 0x0)
init_module(&(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0xff, 0x4, 0xfc, 0xffffffffffffffff, 0x3, 0x6, 0x8, 0xc5, 0x40, 0x278, 0x10, 0x4, 0x38, 0x0, 0xe9, 0x4, 0xc}, [], "8202bdbe1aeb0f28648055f1d5740d47"}, 0x50, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000003080300000000000000f71f00000700000605150302840000000c000480080001400000"], 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x40)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r5, 0xc0e85667, &(0x7f0000000540)={0xc0000000, 0x274, "8cb0d364ebce7e4dbd134c2bc2c94c13e8ce2174b9978a56eb869adda66e1bba", 0xffffffffffff645d, 0xf, 0x7, 0xfffffffffffffffb, 0x0, 0x3, 0x4, 0x2, [0xffffff6f, 0x9, 0x7, 0x8]})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f00000001c0)=0x304008000)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="ee7d3c0200000000000010a12b9877", @ANYRES16=r2, @ANYBLOB="010002000000000000000100000014000180060001000200000008000300ac1414aa"], 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10)

6.668885683s ago: executing program 1 (id=359):
ioperm(0x7, 0x4, 0x7)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0)

4.662485178s ago: executing program 2 (id=360):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x6, &(0x7f0000006680))
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r1, 0x4068aea3, &(0x7f0000000100)={0xed, 0x0, 0x6})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, 0x0, &(0x7f00000000c0))
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'})
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc1}, 0x2400c012)
write$proc_mixer(r5, &(0x7f0000000000)=ANY=[@ANYBLOB='VOLUME \')ine\' 1'], 0x2a)
close(r5)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r8=>0x0})
syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02)
r9 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r9, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r9, 0x7a0, &(0x7f00000001c0)={@any, 0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r9, 0x7a8, &(0x7f0000000000)={{@my=0x1}, @my=0x1, 0x0, 0x0, 0x421})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r9, 0x7a8, 0x0)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r9, 0x7a9, &(0x7f00000003c0)={{@my=0x1}, 0xfff, 0xffffffffffffffff, 0x0, 0xa0000000000000, 0x3, 0x2, 0x1000000000ff6, 0x58df})
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x1)
sendmsg$NL80211_CMD_SET_INTERFACE(r2, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x28, r4, 0x2, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x4, 0x4e}}}}}, 0x28}}, 0x0)

4.60620212s ago: executing program 0 (id=361):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wg1\x00', <r1=>0x0})
sendmmsg$inet(r0, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="103c5a64dc6ae642259b5c9a5184db9796bdd0f68bc8d55c9c5c65ad3070f1d9e40c53428bf3b27582db734de621dec5914153b515ae0403cde10c5fd856ee9e9d613459fa74313e4cd59e3e19dcbc57a7b0d20870dc4028b729f6e8bd3ace6450d4c78c53180f786f8edcaa0ce5add9c15eed6b1137954ffe0d079e614612b07cb6e20ebfcc050c3b2cd62f9cef7009ad8d0450495632acb15f2c4f8d2c233e3c698279076054cdb37bc7409199907db4ebe8e250bada3d74cbd5b261b94c797e225e98a26addf26c9df1692ca6369029abbe8f79", 0xd5}, {&(0x7f0000000100)="1f900ea2c03ac871d253e4af526f9f207ad50093", 0x14}, {&(0x7f0000000140)="00b1f4ce91464dc46abea8c2f229411f6e09b8fddea9b561131fc0aa4612b68f16dd14de0386e71fb1698f39240b9656aab20fc9382c7afd51800ed62127532964fe", 0x42}, {&(0x7f00000001c0)="e1065504fb6527c2534bd77b29ee790b2b030e5099875b15c56288a13f2d39aaabb1cef5b1543f27c585557b20e57bcd1a31b420e84bd9ca51611fff30691d7c994508f228ac81de214d51f1cd720c35463371c120e6a95286b1f317c4b143b978942511d14afc888fe3e6bb647582d49f60f8c530dcbf0f680cbdd42bffdb2a333f2e40eea32a9d7a27eb6675e8b92576446fd5f1ea6d50f95d4d7064006ad0afb815bfbaa775895b48b4b1f68a8ca562019aad0c9a29530342708724eb36591f3b5d82655efbd40228bfa70766eb23aa02eda238f90e7b6ec6fcc6e95c7d40c0c711bd3e6404b1990b528c5caa3203adc02a4ef40173", 0xf7}, {&(0x7f00000002c0)="c3b8e53c22328b5de39c8a76276ce9b43b82b77a6ee0fda9b7", 0x19}, {&(0x7f0000000300)="76793e38b104440780d10211ef3824644642b0693799de9991151591f3f4910eef90aba11dec39f1db0796ef8d517c4ef80a3b433a030b84aba86f4bba8ace9bfa6700ff12e332212721e34b373fa32c4681a9754f9079f90b3d2eaad371e76f8915644c3b8d6c377df2b0e089b0ee26c47d4a36700da9f28b2f4343b89dcecb4d37832800adc46253ca5d0c936de2f988ce970b0ec926460f299cb4c450ec91d61279cc51623ffadad5fc95ad4b0d38eab77f", 0xb3}, {&(0x7f00000003c0)="f0a6653eba730810fd2d9e8c6e93a67492ef493cdd8540626e0eab6f34ba407be947f51faa9db97d5a2fce3058d09c7c371b3aac7054d44ade03a4349cc08b960cc9eb74a22a7d5e718a0955b52cb5ec77850bb42dc11476b41ca59fba5ea6bbbc42e52a8664240ff8cfab59f93f7f14adbc9d18fd34425d84ca33fa27024bcffb0229078293400d5f53701f5d65a7399f077b8caec450b6f0f55d4db2d77a3bd2ac2d5325f19cd1c7fe420c", 0xac}], 0x7, &(0x7f0000000540)=[@ip_tos_int={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x50}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000005c0)="36e04a4faa6e84d519ce1fd0989afecfceb3538b4c0f7f8a22d37b690087bec1c6969be81966f65f87b5d7c1cf7a36f45bdd28cc4852c33cfcadabccd1987ee8b4f7b428ca19b359f91b5c4b", 0x4c}, {&(0x7f0000000640)="4d5a324cdb5ea5cd812aa47b5417a4d8c05c7425d0b92a780c819207c4c09cad0a02e0e50856a8770c48af8143230bafffade2bd6c5f0c7e75d3bd5363a9b6b71b634c6fc2971366b72590183982a5f197216273fc8045654bccdcbfe0bf4bd82782375ff72d2b14eaba310c1e34b5656630cb8486bf59d498e75eb40de77836", 0x80}, {&(0x7f00000006c0)="69666e9c8664dcbe42527d2f651429c1350d41f2751acbf5284fc7b947e2f13193b5b642f0b9a6004c4eef9a88b1b67cc0f3d22c5a196e4225226fdd702fd6047c44b7aa6d97b84cf047f27be6350e72e09a0df585ce1a9bcc86a72f329133ae0624fe7eb231ecf4ec55b4805abfa44a03ec4a9289334aa59f37fb15dc368583c201604e41b407be7eb01673cc13ba3c2bd5a9f6b0db4b51eb8a7db4599d104905fbe233f7ca6ec18de1", 0xaa}, {&(0x7f0000000780)="5a560f19cfc0d5cff9b93855e781dd7fb810ab105cf9cda025e966ad9c9f873cf77dd25b1b31cccea6320ed70d592d43ab15", 0x32}], 0x4, &(0x7f0000000800)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2d}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0x6a, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@private=0xa010101, 0x139}, {@remote, 0x6}]}]}}}], 0x48}}], 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000900)={<r2=>r0, 0xfffffffffffffff7, 0x3, 0x2})
r3 = openat2(0xffffffffffffffff, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x1a9903, 0xa, 0x3}, 0x18)
ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f00000009c0)={0x10200, 0x2, 0x3000, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0x602, r3})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x2)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r3)
sendmsg$NL80211_CMD_START_P2P_DEVICE(r3, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x20, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7362, 0x63}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8084}, 0x10)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000bc0)={0x4, [0x0, 0x200, 0xfff, 0x86]}, 0xc)
ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000c00)={0x10004, 0x3, 0x58000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x10001, r2})
sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x410000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x80, r4, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x47}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x80}}, 0x4000c)
syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000e00)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x6a3, 0xcd7, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4f, 0x20, 0x8, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x3, 0x67, {0x9, 0x21, 0x1, 0x2, 0x1, {0x22, 0x737}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x81}}}}}]}}]}}, &(0x7f0000001340)={0xa, &(0x7f0000000e40)={0xa, 0x6, 0x110, 0x5, 0xc, 0x30, 0x8, 0x40}, 0xf2, &(0x7f0000000e80)={0x5, 0xf, 0xf2, 0x3, [@wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0x35, 0x9, 0x5, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x93, 0x42, 0xd, 0xb, 0x9}, @generic={0xd7, 0x10, 0x2, "c310c1f4ea306e4ef16b8b1ddd54f7709d6e4e1b8adf36194c12e556e6d540dd78c5fb9d9bcd837f3144896005224c1d1a2b02aa1a45980812e3f09bdc7e0c322557cc0e8c0748ae794744f471cb698cc1b6a9ac0eb054b5abd4c01973b6d282e8499b771dac277878ea5ec29184f75d9db03aec7dcd47f4cfd3621ecc817f1fdc527ab53d8e4f3eca12b24cd1879094e49962200ea16bd5ee6ab8269bd23e5877f3c6ae408f82a172900226c92c0cc9179678e7d8e644187448e42ac5b65dcfc78ad1580229642532240d7141b67cbe1718d38d"}]}, 0x8, [{0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0x401}}, {0x98, &(0x7f0000000fc0)=@string={0x98, 0x3, "7f02f7d72c79e4c0c2f86e664215de0ac596f68d0b30e16bd28898db9cd3171071671b8f552eb7a81eb60a728c1ce9009b60e7b388cf51cc905c6d8501b940c311d485e23015f6149627b959c467677127c9d2a346713ced77ccb304ae673e91ebc5f93c7c4be3ad1291565d37145bc3c27a2f087ab2fbf365d6b88a907107c5c20d6d1b7242d90b18da2c7f0e3becfcb6771cf01674"}}, {0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x415}}, {0xeb, &(0x7f0000001100)=@string={0xeb, 0x3, "ac65242b83cf2ff549b36d0320db67f5cbdb5a7f57355d83138fccd337fe1625a655c22bab9cfde6f1c92463b915bab973b586bf976cf5dc1de3c9c8f8c126d080e6c34cae14ab580ebc265dcefb9c1d43897beb76fe94c4885cb518be5eca3bbdff2a06056371c409a6e0fb2836600b5506b1ef16a49d90bf95144fcaab561e2a7e0df4dc282cae301f2afb1b01b698dc48fa3888c38f5aa340e5138ed52fe3052c25d5ba2093b3cf5098d39550d70990dae68c58eace00662478f0506d9538d2f4cc4071f03a6086a9cf6a9b13c116bb3caa70a6bbc2251ed3836f1a39e901ec5ff1f396df88e2a4"}}, {0xb2, &(0x7f0000001200)=@string={0xb2, 0x3, "a95c251efd3113554f1964c1b115b8be9af38edddd723ab7478f422d2d46b4a5bbb4608f55bf0701dc611aa0807c8f2723166e121f4ff0229fe945ca3878e1e852ccd17b16db9e626f80cf3a659c81663d33315e1448501b64527acd1db545c5091aa05349e2182f93ca356037db9a5c4bdae7563cc7bcfd8f29a922bed52760ca9f2928b751a2d7a1c93bfc6d8f3cb7b8017de608d8b843b066a7560dfb28b0ef6e92726238ba9286fc76baf182fd45"}}, {0x4, &(0x7f00000012c0)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0x404}}]})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000013c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000001400)={0x0, 0x1a, "05fb804f010a5a8ca8dd44084ad2edc45fbfcacb6a3572461cfc"}, &(0x7f0000001440)=0x22)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r3, 0x4068aea3, &(0x7f0000001480))
ioctl$KVM_CAP_X2APIC_API(r2, 0x4068aea3, &(0x7f0000001500)={0x81, 0x0, 0x3})
ioctl$NILFS_IOCTL_SYNC(r5, 0x80086e8a, &(0x7f0000001580))
setsockopt$inet6_tcp_int(r3, 0x6, 0x3, &(0x7f00000015c0)=0x2, 0x4)
ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f0000001600))
bpf$OBJ_GET_MAP(0x7, &(0x7f0000001680)=@o_path={&(0x7f0000001640)='./file0\x00', 0x0, 0x4000, r3}, 0x18)
ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_TIMESTAMP_INFO(r3, 0xc0106440, &(0x7f0000001700)={0x2, 0x10000, &(0x7f00000016c0)})
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001740)='net/mcfilter\x00')
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r6, 0x28, 0x0, &(0x7f0000001780)=0x100, 0x8)
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x28, r4, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3c0a, 0x1b}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x240000c0}, 0x801)
setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f00000018c0)={0x2b, 0x1, '\x00', [@ra={0x5, 0x2, 0x10}, @jumbo={0xc2, 0x4, 0x2}]}, 0x18)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000001900)={{0x1, 0x1, 0x18, <r7=>r5, {0x3, 0x8}}, './file0\x00'})
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000001940)={0x6, 0x0, [{0x8ab, 0x0, 0x8}, {0xa2e, 0x0, 0x8}, {0xb54, 0x0, 0x97}, {0xab0, 0x0, 0x2}, {0x82c, 0x0, 0xb5}, {0x919, 0x0, 0x10001}]})
ioctl$OCFS2_IOC_REFLINK(r2, 0x40186f04, &(0x7f0000001a40)={&(0x7f00000019c0)='/8\x00', &(0x7f0000001a00)='--\'\x00', 0x7})
sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x20, r4, 0x0, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x26}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x20000010)

4.601641649s ago: executing program 3 (id=362):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, <r3=>0x0}, &(0x7f00000000c0)=0xc)
fchown(r2, r3, 0x0)
ioprio_set$uid(0x0, r3, 0x2004)
socket$kcm(0x29, 0x0, 0x0)
setreuid(r3, r3)
sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xe0, 0xb, 0x6, 0x401, 0x0, 0x0, {0x2}, [@IPSET_ATTR_ADT={0x44, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x7ebec3df}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @multicast}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}]}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x6}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x6}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x81}, 0x8800)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000380)={<r4=>0x0, 0x84, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x4}, @in={0x2, 0x4e24, @private=0xa010101}, @in6={0xa, 0x4e23, 0xee, @rand_addr=' \x01\x00', 0x4}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, &(0x7f00000003c0)=0x10)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000400)={r4, 0x1}, 0x8)
ioctl$SNDCTL_SEQ_NRSYNTHS(r1, 0x8004510a, &(0x7f0000000440))
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r1, <r5=>0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)}, 0x20)
setns(r1, 0xd15777b9d7345d7f)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000000540))
fchmod(r5, 0x32)
ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000580)=""/252)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'syztnl2\x00', <r7=>0x0, 0x29, 0x7, 0x2b, 0x3, 0xc, @rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x20, 0xec0d, 0x1000}})
sendmsg$nl_route_sched(r6, &(0x7f0000001840)={&(0x7f0000000680), 0xc, &(0x7f0000001800)={&(0x7f0000000780)=@newchain={0x1050, 0x64, 0x100, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x4, 0x4}, {0xa, 0xfffc}, {0xe, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0xfd}, @TCA_RATE={0x6, 0x5, {0x1}}, @filter_kind_options=@f_u32={{0x8}, {0x308, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'syz_tun\x00'}, @TCA_U32_DIVISOR={0x8, 0x4, 0xa0}, @TCA_U32_INDEV={0x14, 0x8, 'macvlan0\x00'}, @TCA_U32_SEL={0x2d4, 0x5, {0x5, 0xfb, 0x81, 0x0, 0x0, 0x1a, 0x101, 0x6, [{0x7f, 0x5, 0x4, 0x8000}, {0x0, 0x47, 0x9, 0x800}, {0x0, 0xca2c, 0xff8000, 0x2}, {0x1ff, 0x0, 0xd, 0x8}, {0x7f, 0xff, 0xa, 0xfffffffb}, {0x1, 0xffffffff, 0x7f, 0x1}, {0x8, 0x3, 0x3, 0x81}, {0x1, 0x5, 0x401, 0x7}, {0x8, 0x4, 0x8000, 0x2}, {0x0, 0x7fffffff, 0x7}, {0x7, 0x4, 0x4, 0x9}, {0x8, 0x0, 0x5, 0x3}, {0x6, 0x166, 0x8, 0x7}, {0x9, 0x6, 0x1, 0xfffffffd}, {0x80000000, 0x1, 0x6, 0x9}, {0x5, 0x401, 0x0, 0xa}, {0x36, 0x10001, 0x80, 0x7}, {0x1, 0x7f, 0x7, 0x7}, {0x3, 0x8, 0x6, 0x2f4}, {0x1000, 0x4, 0x2, 0x7}, {0xb3d1, 0x3, 0x9, 0xf}, {0xffffff80, 0x1000, 0x80000001, 0x100}, {0x7fff, 0x8, 0x8, 0x7}, {0x10000, 0xd, 0x16, 0x3106}, {0xffffffff, 0x4ce1547e, 0x5, 0x7a}, {0x7, 0xf0, 0x3, 0x2}, {0x3, 0x2, 0x6, 0x879}, {0x7fffffff, 0x8000, 0xf, 0xf}, {0x7, 0x5, 0x6, 0x4}, {0x8, 0x2, 0x7, 0x9}, {0x80000001, 0xfffffff8, 0x8, 0x8847}, {0x1d0bd7e7, 0x40, 0x1, 0x6}, {0x527, 0x95, 0x3, 0x80}, {0xb3e, 0x7, 0xfff}, {0x8, 0x6c, 0xfe75, 0x562e}, {0x6, 0x4f7, 0x3, 0x4}, {0x7, 0x6cd, 0x5bc45366, 0x938d}, {0x45, 0x3, 0x8b13}, {0x4, 0x8, 0x3, 0x9}, {0x1, 0x7ff, 0x4, 0x8}, {0xffff6965, 0x5, 0xffffff85, 0x2}, {0x100, 0xc5, 0x2, 0x40}, {0x101, 0x800, 0x10001, 0x3fd}, {0x0, 0x4, 0xf, 0x5}]}}]}}, @filter_kind_options=@f_u32={{0x8}, {0xd04, 0x2, [@TCA_U32_POLICE={0x94, 0x6, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x80000001}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffff8e57, 0x7, 0xf9, 0x0, 0x6, {0xf, 0x2, 0x500e, 0x3, 0x7, 0x4}, {0x7d, 0x2, 0x8, 0x1, 0x3, 0x2}, 0x3, 0xfff, 0x40}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7f}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffd, 0xffffffffffffffff, 0x7, 0x0, 0x1000, {0xb, 0x1, 0x2, 0x3, 0x5, 0x9}, {0x3, 0x2, 0xf160, 0x0, 0x10, 0xfffffffa}, 0x1, 0x3}}]}, @TCA_U32_MARK={0x10, 0xa, {0x4, 0x3}}, @TCA_U32_POLICE={0x414, 0x6, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x3, 0x8000, 0x781, 0x1, 0x1000, 0x400, 0x3ff800, 0xffffffff, 0xffffffff, 0x80000000, 0x2, 0x80, 0x7fff, 0x603, 0x3ff, 0xe7, 0x8, 0x80000001, 0x1, 0x0, 0xac7, 0x7, 0xc2d, 0x0, 0x20, 0x8, 0x7, 0x80000000, 0x6f, 0x6, 0x1, 0x2, 0x9, 0x8, 0x7e, 0x30, 0x7, 0x1, 0x5, 0xe70, 0x4, 0x0, 0x4, 0x100, 0x7fff, 0xbb3e, 0x495, 0x3, 0x5, 0x5, 0x3, 0x6, 0x398, 0x6, 0x5, 0x5, 0x7000000, 0x0, 0x2, 0x1ff, 0x7, 0x6, 0x9af9, 0x3, 0x0, 0x5, 0x95d, 0x1, 0x92, 0x4, 0x10001, 0x0, 0x4, 0xb, 0x3, 0x7, 0x40000000, 0xffffffff, 0x1, 0x9, 0x7, 0x5, 0x3, 0x9, 0x6, 0x2, 0xfffffff7, 0x7fffffff, 0x10001, 0x6, 0x7, 0x4, 0x7fffffff, 0x40, 0x0, 0x4, 0x80008000, 0x1, 0x5, 0x2, 0x7, 0x65, 0xb8, 0x8000, 0x7, 0x7, 0x7208, 0x1, 0xfffffff9, 0x1, 0xffffffff, 0xe4b5bdd, 0x0, 0x998, 0x531f282d, 0x9, 0x0, 0xf8c, 0xa51, 0x1, 0x7fff, 0x7, 0x9, 0x800, 0x8, 0x80000000, 0x3, 0x5, 0x9, 0x10c9, 0xff, 0x80, 0x8, 0x1, 0x80000000, 0xcc, 0xbc61, 0x3, 0x80000000, 0x0, 0x6, 0x10000, 0x5, 0x5, 0x1, 0x8000, 0x3, 0x9, 0x7ff0, 0x58, 0x101, 0x0, 0x59, 0x1, 0x7, 0x7, 0x424, 0x2, 0x8, 0x8, 0x10001, 0x0, 0x2, 0x81, 0x240, 0x2, 0x101, 0x8, 0xfffffffb, 0xffffffff, 0x0, 0x80, 0x100000, 0x5, 0x1, 0x0, 0x1, 0x0, 0x2, 0xeb8, 0x80, 0x0, 0x3, 0x8, 0x10001, 0x9, 0x96, 0x8, 0x9, 0x3, 0x3, 0x2, 0x2, 0x2, 0x1, 0x7ff, 0xd, 0x5, 0x721d, 0x3, 0x7, 0x1, 0x5, 0x1, 0xffffff00, 0x2, 0x26f, 0xfffffb49, 0x10000, 0xfffffffe, 0xf2, 0x80000000, 0x0, 0x7, 0x6, 0x4, 0x1, 0x1, 0xb96b, 0xfffffff7, 0xf4f0, 0xffffffff, 0x6, 0xfff, 0x3, 0x10001, 0x4a, 0x1, 0x1, 0x888, 0x7340, 0x5, 0x3, 0x1, 0x1, 0x9, 0x101, 0x6, 0x7ff, 0x400, 0x57, 0x5, 0x9, 0x5, 0x1, 0x1, 0x5, 0x3868, 0x800, 0x3ff, 0x5, 0x5, 0x3, 0x6]}]}, @TCA_U32_LINK={0x8, 0x3, 0x6}, @TCA_U32_HASH={0x8, 0x2, 0x2}, @TCA_U32_FLAGS={0x8, 0xb, 0x5}, @TCA_U32_POLICE={0x828, 0x6, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x10001, 0x1ff, 0x6, 0x3ff, 0x7ff, 0xe, 0x5, 0x6, 0xb67, 0x100, 0x5, 0x1, 0x2ba, 0x4, 0x28b, 0x48cf8343, 0x2, 0xffffffff, 0x3, 0x9, 0x9000, 0x4, 0x8, 0x8, 0xfffffffb, 0x4, 0x9, 0x4, 0xd, 0x3, 0x32, 0x3, 0x100, 0x2, 0x9, 0x3, 0x5, 0x2, 0x4, 0x3, 0x3, 0xc, 0x2, 0x2, 0xffffc536, 0x2, 0xd, 0x800, 0xac, 0xfb, 0x8, 0x8, 0x2, 0xff, 0x7, 0x101, 0x4, 0x1, 0xfffff917, 0x401, 0x4, 0x4, 0x0, 0x81, 0x9, 0x8, 0xfffffffd, 0x1000, 0x0, 0x7, 0x3, 0x1, 0xb, 0x3, 0x598, 0x155, 0x3, 0x2, 0x2, 0x3, 0x7, 0x7fff, 0x5, 0xaf41, 0x2, 0x8, 0x2, 0x600, 0x10000, 0xa, 0x7, 0x100, 0x5, 0x6, 0xe6e0, 0xc, 0x200, 0x800, 0x8c, 0x7, 0x2, 0x8, 0x5, 0x1800000, 0x9, 0x6, 0xffffff7f, 0x81, 0x7, 0x7, 0x7, 0xa, 0x43b, 0x8001, 0x7, 0x7, 0x4ac3f4cb, 0x7, 0xe, 0x7, 0x4, 0x401, 0x100, 0x80, 0x5, 0x8, 0x10000, 0x359, 0x40, 0x50, 0xffffcbda, 0x0, 0x2, 0x6, 0x0, 0x400, 0x8, 0x9, 0xc2, 0x92, 0xda, 0x6, 0x2307, 0x1, 0x8, 0x5, 0xff, 0x5, 0xffff290b, 0x0, 0x3, 0xe00000, 0x2, 0x7, 0x7f, 0x81, 0x7ff, 0x2, 0x580, 0x2, 0x9, 0x3, 0x2, 0x8, 0x6, 0x7, 0xffffffde, 0x81ae, 0x4, 0x8000, 0x81, 0x0, 0x6, 0x3, 0x10000, 0x7fff, 0x1, 0x3, 0x4, 0x1, 0x3, 0x4, 0x1, 0x3, 0x3, 0x6, 0x6, 0x7, 0x6, 0x5, 0x6, 0x2, 0x7, 0x0, 0x0, 0x0, 0x2, 0x3, 0xd, 0x0, 0x4, 0x10001, 0x101, 0xb970, 0x1, 0xf4, 0x5, 0x4, 0x56, 0x1, 0x6, 0x1, 0x28, 0x0, 0x8, 0xfffffffc, 0x10, 0x5, 0x7ff, 0x8, 0x8, 0x7, 0x400, 0xf22f, 0x9, 0x15f, 0x7, 0x9, 0x8001, 0x8, 0x32, 0x81, 0x7, 0xe73, 0xf, 0x5, 0x9, 0x40000000, 0x10000, 0x1, 0xfffffffc, 0x5, 0x7, 0x80, 0x1, 0xfffffffd, 0x109152af, 0x2, 0x0, 0x0, 0x7, 0x8, 0x7fffffff, 0x3, 0x9]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xb, 0x3, 0x8, 0x7, 0x9, 0xcd6e, 0x8, 0x5785, 0xa4a, 0x2, 0x5, 0x1000, 0x78b6, 0x5, 0x5, 0x5, 0x6, 0x1, 0x2, 0xffffffc0, 0xffff9612, 0x7fff, 0x6df6, 0x4, 0x6, 0x0, 0x3, 0x48, 0x80000001, 0xffffffe8, 0x6, 0x2, 0x1, 0x9, 0x2, 0x3, 0x2, 0x4, 0x26, 0xff, 0x5, 0x1, 0x7, 0xfffff160, 0x6, 0x1, 0x7c3139b, 0xc1c6, 0x3, 0x80000001, 0x2, 0x9, 0x7, 0x3, 0x100, 0x80000000, 0x401, 0x7, 0x59b6, 0x1, 0xffffffff, 0x52, 0x9, 0x7, 0x67f, 0x8, 0xd, 0x5, 0x0, 0x3, 0x8, 0x3, 0x0, 0x2e7, 0x8, 0x3, 0x7fff, 0xffff8000, 0x1, 0x7f, 0x0, 0x7, 0x9, 0x2, 0x10, 0xb, 0x4d, 0xfffffffd, 0x3, 0x3, 0x2, 0xffffff81, 0x26e2, 0x7fffffff, 0x2, 0x7fffffff, 0x10001, 0x1400, 0x400, 0xa, 0x5, 0x10ca, 0x8, 0x10001, 0x40, 0x5, 0x7, 0x10001, 0xb01e, 0x2, 0x810, 0x4, 0x1ff, 0xffffffff, 0x3, 0x400, 0xc61, 0x1, 0xf6, 0x9, 0x1ff, 0x1000000, 0x80000000, 0xf0, 0x7, 0x9, 0x6, 0x8, 0x7fff, 0x401, 0x10000, 0x8001, 0x5, 0x19, 0x7, 0x2, 0x8, 0x4, 0x7, 0x4, 0x9, 0x5, 0x80, 0xfc, 0x2, 0x7, 0x588b, 0x5, 0x8, 0x8000, 0x3, 0x5, 0x7, 0x2c, 0x5, 0x3, 0x6, 0x9, 0x3ff, 0x6, 0x63, 0xffff7fff, 0x7f, 0x9, 0x1000, 0x611721f0, 0xfffffffa, 0xa6b, 0x2, 0x9, 0x870, 0x7f, 0x7fffffff, 0x8, 0xffffff53, 0x9, 0x8001, 0x21, 0x9, 0x7fffffff, 0x9, 0x6, 0x800, 0x3, 0xcb9, 0x3, 0x6, 0x1ff, 0x7, 0x8000, 0x7fff, 0x3, 0x4112, 0x80, 0x1, 0x7, 0x3, 0xfff, 0x4, 0x1, 0x6, 0xffffffb4, 0x4, 0x40, 0x401, 0xb5, 0x5, 0x9, 0x1, 0x6, 0xfffffff9, 0x4, 0xffffffff, 0x7fff, 0xc, 0x2, 0xfffffff7, 0x4, 0x8, 0x5, 0x200, 0xff, 0x8, 0x6048e4b1, 0x3, 0x7ff, 0x3ff, 0x4b8c, 0x6, 0x1, 0x7, 0x46, 0xa, 0xffffffff, 0x8, 0xa4, 0x3, 0x380000, 0x6, 0x7f, 0x0, 0x9, 0x1, 0x52d, 0x9, 0x0, 0xfff, 0x5, 0x4, 0x7, 0x0, 0xf, 0x8, 0x5, 0x35, 0x49b]}]}, @TCA_U32_LINK={0x8}]}}]}, 0x1050}, 0x1, 0x0, 0x0, 0x20008000}, 0x4010)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000001880)={0x41, 0x4, 0x3}, 0x10)
ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0)
execveat(r1, &(0x7f00000018c0)='./file0\x00', &(0x7f0000001a40)={[&(0x7f0000001900)='\x00', &(0x7f0000001940)='\x00', &(0x7f0000001980)='syz_tun\x00', &(0x7f00000019c0)='\x00', &(0x7f0000001a00)='syztnl0\x00']}, &(0x7f0000001bc0)={[&(0x7f0000001a80)='syz2\x00', &(0x7f0000001ac0)='$}!*#,\x00', &(0x7f0000001b00)='macvlan0\x00', &(0x7f0000001b40)='\xbd\x00', &(0x7f0000001b80)='macvlan0\x00']}, 0x100)
r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001c00), 0x2280, 0x0)
ioctl$PTP_SYS_OFFSET(r8, 0x43403d05, &(0x7f0000001c40)={0xa})
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001fc0), r1)
sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000002100)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002000)={0xb4, r9, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xfffffff2, @remote, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast1}}}}]}, @TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5eb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xca4e}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x2001}, 0x55)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002180), r1)
sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000002240)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002200)={&(0x7f00000021c0)={0x14, r10, 0x1, 0x70bd2a, 0x25dfdbfd, {}, ["", ""]}, 0x14}}, 0x80)

4.337442696s ago: executing program 1 (id=363):
r0 = socket(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
kexec_load(0xfffffffffffffffc, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x40000000, 0x41000000}], 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
r5 = socket$unix(0x1, 0x5, 0x0)
r6 = socket$kcm(0x29, 0x2, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x30}, 0x48)
r8 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r8, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)={r8, r7})
sendmsg$kcm(r6, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x1}], 0x1}, 0x4840)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xfff1, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x6}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x3c, r10, 0x4, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x74322356710ae04c)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)

4.3208653s ago: executing program 4 (id=364):
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x106}}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000180), 0x0, 0x40000023, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000)
socket(0x10, 0x2, 0x0)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r6, @ANYRES8=r0, @ANYRES16=r3], 0x50}}, 0x4000040)
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x2c, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r6, 0x10b85, 0x49800}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000090}, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x181000, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc048aeca, &(0x7f0000000180)={0x36, 0x0, [{0x24b, 0x0, 0x29200}, {0xa36, 0x0, 0x4}, {0xa7f, 0x0, 0x7}]})
r10 = userfaultfd(0x80001)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x501})
set_mempolicy(0x2, &(0x7f00000001c0)=0xd, 0x7)
ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r10, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000d76000/0x3000)=nil, 0x800000})

4.087631635s ago: executing program 3 (id=365):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x8, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_getaddr={0x18, 0x16, 0x205, 0x70bd2b, 0x0, {0xa, 0x0, 0x12}}, 0x18}, 0x1, 0x0, 0x0, 0x40008c1}, 0x4000000)
syz_open_dev$video4linux(&(0x7f0000000000), 0x8dc7, 0x2000)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48)
r2 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r2, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10)
r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2)
write$tun(r3, 0x0, 0x3db)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18e4ffffffffff0000000000000018110000", @ANYRES32=<r4=>r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f00000006c0)="cc", &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r5, &(0x7f0000000380), &(0x7f0000000500)=""/166}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r1, @ANYBLOB="f0ceb8a5d74f88aac95386cbba19611138e2a28a400bbe3b6cf9de78d8434bd05a007ebad26e8451159a0d4991dd85deb5ff3924e33f50f0ac59bc5dd7f0a6c2f27bdfb550bc0d9838cfe5fb9566beccc04268460e4f086fc54c117f7687760bcf757951a89bfdca944249d84c4d4166c33e39a598e0cf17c69f6b3af88f7561450b26e6dccf0ee5fec2068df6e8946efacd927063d1c68600385cc202aa5aa9a01a34ad18507f02c65e535659cc3794932f2a3c07660b9ab2cba054f8c0d7eec0c18a062c0ee780afa69a5ef3acd136c1a58aaf17cf9affd4eb90018cb549dabf4d745644d3a5d8aa254203e2db79ae0f17", @ANYRES16=r4], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r7 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="b70200000d000000bfa300000000000005000000000000007a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67d5b310efcfa89147a7fb0a93d035f2f206d2ef831ab7ea0c34f17e3ad6eecbb622003b538dfd8e012e79578e51bc53099e90f4580d7be3e8c254a5cba117cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e6a9f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d996d60a17e3c184b751c51160100000000000080148b9a31ee8dc8b544f3c4a532e60a0ac346dfebd31a08060000000200000000000000334d83239dd20100008000000000d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08a406f99f7b1e1ad828267d4eadd3964663e085354133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0183babc190ae2ebf8aad34732181feb28cb0bae7c34dc5e7c805210600000000000000c3dec04b25df45d4f71ab158c36657b7218baa07a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d01776839b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4e6068f1bf710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2b2ff7f9a7d365e63845f3e1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000010000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edef8ba72205beff7771bcb293747b88486cacee403000000a2919a4b09e168e4e4d5ff2ed893f2e314679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75e26b45264e3d3f8e0048e55ae289c2f884d0766cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2efce676a93110904d5e055af44664b53c764d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007976694b6a0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d201721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e671282a2d3066ac968c7d7d7db195f255b1b4a85eb9ee0a3b68c9e209756623adf685dd715d68ed1274b4d5502f512493af8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef66fa03a99b5c0c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749f6aecf69ba83a71caa9bdddc679f1b826f74b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b2c16bd94d2da66059de81abfa15eeeae3b0ba38d8bb1bf032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f5533d3c58104d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7866f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be813a10788a720a6b5a498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cf2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ec8faf3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7abc231f8cde79b7a6c5aafe954b8ba37818e40c14b36f2d7c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1df7ffffff735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c095162b82ceaeaae9b1713b5f2ee68e2b53d44bd84bf6960157e96bbb96b5e10d66c87e7a9a7d53c281d88ebb175a4dbb82130e6870980e47913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8988d833e71943fe2c1c65a3cf355e5b91114052f8a398d8e10c96b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3df3572a7d9ef5f6103997f1f9e4b0c3970bda50f6c0af58dbd6c031b1a5a7512c58965c514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e24d192d67a1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5d61dc5a114d10ffb2200040000fc1e3865d17d128306d1b81884a934cb0000000000d367000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44b615ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f530043a6cd72af0fcd540a9d4e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c956ec81397e81fbf870a673804220423f52ad8178b9fd04bff816e00000000000000000000000000000000000000000079aaf19bd1e18f582aac5b83d76bd57297512fdcdad18bcf2455bc80394d8f34e2ef84733038f4b6ef516d7baa99f24f2f100fc46aec9dc19b30fe9966b7ae563b6459d86fd3b4c7173f06387517e4189f3fb09c069e20220354b054f2391efe55a0cc7f738b3987ae033ceabddec65ec31f98c7e0858e8d411087889964b8fb3c31f74fa7b2e6e1c1d84a46d8be8afff1ac67eb2da30294d4a0f89978d4e2137319b6448da45bd00eb23aa5be1d566782b5a4aa291a854a4932bcbf472fd1175b521edb1763bb7dae4a124b0006e2ce4799519b3dbd3c0109b17fe2b4b87f6ad4b7176c9c1959669ef42cfce81fbc6dcdc7f9bde1a66c0b3cf9329bfecf0217bda1b72924ee9d90a3bd0be833f206244b5ba0648309018da5442ebd22bca0363183aae9d38f80638f52015cab5a8d772f9b92cb2f286783fa976f7d215136cae0b0b0539dc7dbd56035a69807514c732763f542f10401e65368b821b584fe2f82c94b2f5930246800000000000000000000000000000000000000c8ed77d8ac9f28a2e8f205900241ec8872fe3ecdf73abfc4024298a69649e17f3fe5ebba1e17f2f280e6d3f094cd3448700c5ee102b5d1b04f08ab2e5272990646eca26a62431e8c942ea2c0c621b4821eb5beceee6d53468852159452cf47aead473a8638a4d1ce2d4c6df1074e8cb3ec16149e6b4b7ec1a9aa1b63f41d08afd3d885b98330e25eedaaf5f361b2e81ce0c52ee84a2b340afdc59b177921e2f2a99132b82ed3291196038fe9a4f5a5dc734788c71bf46222d266a48628774c87b88bf3dcbea4574a87726345587e1e233fd4117063d183f477cc53c52a3fafcb998a96cf9f61cdd9ffa82d648880552ac506811accffc85ca34b262ed983d4645f4657522ed32b278891c26d5e70d41f9a5c8df8dc163fd84a81af0020a10fe53ce940d350d62b526f198620abdad179a273682175da1d9d82fde7eb9a45b566e78904238d00908b5876b4ebfca376d631b9b0caf3f1ef32ae87507aace4715efaf840ebda28e741a8b6b29eed5861168b4e1b3842f6db4443974dd0f0d4ceed9ca62fd2a839a8150335dc2b9640825b83c8bf4f931a51b093bf2dc84809af7c14f04b58d64e4f852bc49cf1126567e11f61774559bdbcc500000000000000000000000000eab10c8c592cb6f1ebccd9eb16c155a0666189eb16cea09f164363456645c9b7c168bc214615a7e94ff3d53f85c6396c42050f3205cef3009458f33949efa6a583d87795448b8b21ab6a7ca4bd8b0da30dee0af8b3a0f3cfd0ad9a8e7819b2057e2e5d8b453b6f743f8fc4dee677658958c4d4663ddcdfd0fc44e996665ab5586a4eb40a959fb0dababa05e776c29cf2443ad1d2fa0920288db88e645033ae1a4357078810d20bd93b8194214554c3f8c6efd61bc40000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r8, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x806, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xc4}}, 0x20050890)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, &(0x7f00000028c0)={{0x0, 0x0, 0x80000001, 0x7, 0x1450, 0x2, 0x1, 0x3, 0x29e, 0x81, 0xffffffff, 0x2, 0x5, 0x2, 0x2}, 0x8, [0x0]})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40180, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})

3.281298476s ago: executing program 2 (id=366):
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f00000000c0)={0x82, 0x3, 0x2, 0x717e387b, 0xf, "1ae34e0626788a22b2fb12dab240794233a5bd", 0xffffffff, 0x2})
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x3c1, 0x3, 0x428, 0x0, 0xc8, 0x8, 0x278, 0x5803, 0x358, 0x2e8, 0x2e8, 0x358, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0x0, 0xffffffff], [], 'batadv0\x00', 'wlan0\x00', {0xff}, {}, 0x11, 0x1, 0x2}, 0x0, 0x230, 0x278, 0x0, {0x0, 0x2000000000000}, [@common=@inet=@hashlimit3={{0x158}, {'\x00', {0x1, 0x1, 0x0, 0x5, 0x7ff, 0x7, 0x6, 0xfffffffd, 0x40, 0x20}, {0x100000000}}}, @common=@inet=@udp={{0x30}, {[0x4e24, 0x4e23], [0x4e23, 0x4e24]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x2, 0x8001, 0x7, 0x2, 'syz1\x00', {0x4}}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x0, 0x1}, {0x1, 0x6, 0x3}, {0xffffffffffffffff, 0x3, 0x6}, 0x7, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'lblcr\x00', 0x1, 0x4, 0x6a}, 0x2c)
socket$inet_smc(0x2b, 0x1, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f00000000c0)=0x8)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000240)={{0x73, @local, 0x4e21, 0x1, 'lc\x00', 0x0, 0x83, 0x5}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x4e20, 0x4, 0x1bd, 0x12d5c, 0xfffffff7}}, 0x44)
setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000380)={{0x4, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e23, 0x2000, 0x8, 0x48001}}, 0x44)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000006d000100"/20, @ANYRES32=0x0, @ANYBLOB="000000008000000008001c00", @ANYRES32, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0)
gettid()
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000200), 0x10)
sendmsg$can_bcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="050000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000000000000000000054", @ANYRES16=r2, @ANYRESHEX=r1], 0x48}}, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
prlimit64(0x0, 0xe, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x4, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r6, 0x0, r7, 0x0, 0xf3a, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)

3.278960917s ago: executing program 3 (id=367):
socket$xdp(0x2c, 0x3, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000d26adeb4f1fce09155f3a48b866b8d000000000081229b36b99f8d97a56cccd2db29ef91f8cd3d4d44c547745d7ded7a51d2a447d0d28a701350db2c7960606a66be759a9195511236757e277d500d12aa5483d1b30684f84511939409b287af309f08ad42f5af44d91debe814db491be3e01be6b984965d3ffa72397350d599d8047b30ef7088f554e4df0245fde59e5464ffea0e66e1776a61ad7325c96d0d82da6ecbbbdd2cb6fb92560f88bfa2eb8630a944bd8ed0854a3fbcbdb02a4341b1d37faebe787a10447e9553ed01cb16725fd10bd322a9451ea53e0fb0bf1939040801ffb5a9b818985560d9c1ddda2f"], &(0x7f0000000180)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8006}, 0x94)
syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x901b01)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000027c0)='/proc/asound/timers\x00', 0x0, 0x0)
sendmsg$inet6(r1, &(0x7f0000006980)={0x0, 0x0, &(0x7f0000005840)=[{0x0}, {&(0x7f00000014c0)="58be5f9bdc6e19fe68cad3274ee08d07dd9047bd", 0x14}, {&(0x7f0000001500)="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", 0x9a0}], 0x3, &(0x7f00000058c0)}, 0x1)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x4040000)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000)
read$FUSE(r1, &(0x7f0000002800)={0x2020}, 0x2020)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x2000000f})
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x8000000000000001}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xfffffffffffffffe, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=ANY=[@ANYBLOB="dc01000016000100000000000000000000000000000000000000ffff7f000001ac1e00010000000000000000000000000000000000000000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffac1e01010000000033000000fe80000000000000000000000000000e00000000000000000000000000000000000000000000000000ffffffffffffff03000000000000000000000000000000000000000000000000000200000000000000fefffffffffffbff000000000000000096070000000000000000000000000002be0000000000000000000000b1a00100e400060020010000000000000000000000000001000000000000000000000000000000014e2100084e200000020020800600"/228, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000000000000000000000000001000004d43c000000e0000002000000000000000000000000ff0100000000000002000000000000000600000000000000fcffffffffffffffff070000000000007f00000000000000000000000000000009000000000000000200000000000000100000000000000002000000000000007f0000000000000003000000ff070000040000002dbd7000073500000a0003b14200000000000000"], 0x1dc}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)

3.18526185s ago: executing program 4 (id=368):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
read$eventfd(r0, &(0x7f0000000340), 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000c0000000400000001000084fdffffff0a0000000200000003000000000000000000000105000000200000d5000000302e61615f610061"], 0x0, 0x4c}, 0x28)
syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, '\x00', '\x00', '\x00', {"0000006000000000000000001000"}}}}}}}, 0x0)
rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x4}, 0xfffffffffffffe7c, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000d40)=[{{&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000400)=""/68, 0x44}, {&(0x7f0000000480)=""/178, 0xb2}, {&(0x7f0000000540)=""/80, 0x50}, {&(0x7f0000000600)=""/35, 0x23}, {&(0x7f00000006c0)=""/145, 0x91}, {&(0x7f0000000780)=""/136, 0x88}, {&(0x7f0000000840)=""/40, 0x28}], 0x7}, 0x8}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000900)=""/75, 0x4b}, {&(0x7f0000000980)=""/204, 0xcc}, {&(0x7f0000000a80)=""/142, 0x8e}, {&(0x7f0000000b40)=""/93, 0x5d}, {&(0x7f0000000bc0)=""/151, 0x97}], 0x5, &(0x7f0000000d00)=""/47, 0x2f}, 0x7fffffff}], 0x2, 0x10043, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0x10000}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, 0x0, 0x0)
pipe2$watch_queue(0x0, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x541b, 0x1f)
r4 = openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r4, 0xc0096616, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x8d35)
writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0x6})
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fsopen(&(0x7f00000000c0)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f00000005c0)='fd', 0x0, r5)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x0, 0x2)
fchdir(r7)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz1\x00', 0x1ff)
symlink(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00', &(0x7f0000000280)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmmsg$unix(r8, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{&(0x7f0000000640)=@file={0x1, './file0/../file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004000}}], 0x2, 0x0)
r9 = socket(0x10, 0x803, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f00000001c0)={'tunl0\x00', 0x0, 0x0, 0x40, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}})

2.83369798s ago: executing program 4 (id=369):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e22}}]}, 0x24}}, 0x0)
sendmmsg$inet(r0, &(0x7f0000004040)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20008000)

2.246089485s ago: executing program 4 (id=370):
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d000905097a63"], 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x20000000000000})
fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x1, 0x90})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)
ioctl$BLKFLSBUF(r1, 0x1261, 0x0)
r2 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1)
write$binfmt_script(r2, &(0x7f0000000cc0)={'#! ', './file0'}, 0xb)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r3, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0xc000)
r4 = openat(r2, &(0x7f0000000500)='./file0\x00', 0x202081, 0x10)
r5 = openat$cgroup_ro(r4, &(0x7f0000000600)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000480)={'#! ', '', [{0x20, '.'}, {0x20, 'blkio.bfq.time_recursive\x00'}, {0x20, '/dev/vmci\x00'}, {0x20, '\\.-))\\{+!'}, {0x20, '-\'#%@/'}, {}]}, 0x3d)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0)
r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@my=0x0, 0x1})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r6, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r6, 0x7a5, &(0x7f00000000c0)={{@any, 0x3b}, 0x1, 0x1, 0x4})

2.122984547s ago: executing program 2 (id=371):
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
socket$unix(0x1, 0x5, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000180)='\x00', 0x1)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x4004)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r4, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f907, 0x0, '\x00', @p_u8=&(0x7f0000000180)}})
connect$pppoe(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
r5 = socket$nl_route(0x10, 0x3, 0x0)
fremovexattr(r4, &(0x7f0000000140)=@random={'user.', 'lo\x00'})
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000180)={'rti800\x00', [0x100, 0x3ff, 0x1, 0xf1, 0x858d, 0x100, 0x8, 0x3000, 0x7, 0xa, 0x0, 0x7, 0x5, 0x401, 0x9, 0x0, 0x1, 0x7, 0x1, 0x7, 0x7, 0x4, 0x7, 0x9, 0x4b, 0x2, 0x90, 0x5, 0x81, 0x800, 0x8]})

2.119726404s ago: executing program 3 (id=372):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0c002c8008000000008000001b002a007e15"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8890)
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000680)={0x50, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x54}}}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x17, 0x13, [{0x1}, {0x6c, 0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0x1}, {0x1b, 0x1}, {0x16}, {0x16, 0x1}, {0x36}, {0x24, 0x1}, {0x12, 0x1}, {0x3, 0x1}, {0x6}, {0x1}, {0x30}, {0xf}, {0x24, 0x1}, {0xb, 0x1}, {0xc}]}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x7, 0xbe, "9c3321"}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004080)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x30, 0x0, 0x1, 0x70bd25, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1, 0x51}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x30}, 0x1, 0x0, 0x0, 0x4c854}, 0x20040880)
add_key$fscrypt_provisioning(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
mount$fuse(0x0, 0x0, 0x0, 0x1000430, &(0x7f0000000780)=ANY=[@ANYRESDEC=0x0, @ANYBLOB=',', @ANYBLOB="58e1a192964f91b2b2b082e5b2d36bfb79aa692b33c0fe4f45accc6a979fe95b1d5b"])
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443", 0x67}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[])

2.064954699s ago: executing program 1 (id=373):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0xa4}}, 0x20050800)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r6, &(0x7f0000000340)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x7}}, 0x18)
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10)
ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, &(0x7f0000000100))
ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c9, &(0x7f0000000100))
getdents64(r3, &(0x7f0000000400)=""/4096, 0x1000)

996.957761ms ago: executing program 1 (id=374):
r0 = socket(0x2c, 0x3, 0x1000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, r0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
r2 = syz_io_uring_setup(0x3af2, &(0x7f00000000c0)={0x0, 0xa5f5, 0x0, 0x2, 0x131}, &(0x7f0000000140), &(0x7f00000002c0), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_MEM_REGION(r2, 0x22, &(0x7f0000000240)={&(0x7f0000000200)={&(0x7f00000001c0), 0x0, 0x0, 0xc45, 0x1}}, 0x1)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
mremap(&(0x7f0000448000/0x2000)=nil, 0x2000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, 0x0, &(0x7f00000000c0))
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=@newtfilter={0x24, 0x2c, 0x400, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x9, 0xd}, {0xa, 0xfff1}, {0xe, 0x6}}}, 0x24}}, 0x44080)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd25, 0x60000000, {0x60, 0x0, 0x0, r3, {0x0, 0x9}, {0x0, 0xa}, {0xfff3, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x4000)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901)
fchdir(r5)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x8000, &(0x7f0000000200)={0x7}, 0x20)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x90401, 0x388)
fsetxattr$trusted_overlay_opaque(r6, &(0x7f00000001c0), 0x0, 0x0, 0x1)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4401000010000100feffffbf0001e4d14e2e363741536cd7cd0000000000000000000000000000ffac1414bb000103944e230005000000003a00000000000000000000000000000000008379e127c64281ac9485586b42a5bb1e9527a3578ec4337adf3c54cb820c91a44cc98d798458b4f01b4b594a93bb7ec71e214328e907e0ff684da3187200f2fd5ef2bb15fc2a4888eed89ff296bd6a3720d274b7b1086f6cc8a58bfb8e45fc447acb321e97e5cf4eb79708f245a4233e8319a195a52936e2ed", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac1414bb000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000060000000000000000000000000000001f00000000000000ff0100000000000002000000fcffffff000000002abd7000043500000a0001fd20000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0015005a07350003000000"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000003a00010021bd7000fedbdf250c"], 0x14}, 0x1, 0x0, 0x0, 0x14024811}, 0x4000000)
socket$nl_xfrm(0x10, 0x3, 0x6)

924.340252ms ago: executing program 0 (id=375):
writev(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1)
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x8001fffd)
socket$inet6_sctp(0xa, 0x1, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x1ca5}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0x0, &(0x7f00000002c0)={0xffffffffffffff85, 0x6, 0x0, 0x5, 0x6, 0x8, 0x9, 0xfff, 0x8})
connect$inet6(r3, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0)
setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000080)=0x10000008, 0x4)
recvfrom(r3, &(0x7f0000000440)=""/145, 0x91, 0x40010062, 0x0, 0x0)
listen(0xffffffffffffffff, 0x802)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000d80)={0x2020, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x2020)
capget(&(0x7f0000000440)={0x20071026, r4}, &(0x7f0000000480)={0x1, 0x6, 0x40, 0x1ff, 0x5, 0x2})
socket$kcm(0xa, 0x2, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x18, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x18, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb1cc}}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x4, 0x61, &(0x7f0000000240)=""/97, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0x3, 0x9, 0xfe}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff]}, 0x94)

119.390017ms ago: executing program 1 (id=376):
memfd_create(0x0, 0xc)
clock_settime(0x0, &(0x7f0000000240)={0x77359400})
clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0xb, 0x380017, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x2, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04d, 0xffff, 0x80000000, 0xbb2, 0xffffffffffffffff, 0x4000000006, 0x0, 0x100, 0x4, 0x2, 0x80005, 0x3, 0xc, 0xb})

40.432789ms ago: executing program 2 (id=377):
r0 = fsmount(0xffffffffffffffff, 0x1, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000000)={0x1, 0x2, 0x4})
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x70}}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000fcffffff000000008000000085000000a800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)=ANY=[@ANYBLOB="58000000150a01030000000000000000050000090900010073797a30000000000900020073797a30000000000900010073797a310000000008000340000000040c00064000000000000000040900010073797a3001000000"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008884)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450)
unshare(0x28000600)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@fallback=r5, r5, 0x2f, 0x18}, 0x20)
r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001000)={@cgroup=r5, r6, 0x2f, 0x18, 0x4, @void, @value=r5}, 0x20)
sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x7, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000004)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000005600010000000000000000000700c6c9", @ANYRES32=r7, @ANYBLOB="200001"], 0x38}}, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
r9 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x54)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, 0x49801, 0x59fc9}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6, 0x8, 0x2b}, @IFLA_IPTUN_LINK={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0)

0s ago: executing program 0 (id=378):
r0 = syz_io_uring_setup(0x18d7, &(0x7f00000000c0)={0x0, 0xfffffffc, 0x2, 0xfffffffd, 0x17b}, &(0x7f0000000080), &(0x7f0000ffe000), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x2, &(0x7f0000000180), 0xfe)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00')
read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2020)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000001a40)={{0xffffffffffffffff, &(0x7f0000000000)='/proc/sys/net/ip]\x11tiox_control\x00'/42, 0x200, 0x0, 0x7ff, 0x0, 0x0}, 0x0, 0x0})
write$tun(r2, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x1ff)

kernel console output (not intermixed with test programs):

#144!!!
[  101.582593][ T6143] tpg quantization: 0/0
[  101.632425][ T6143] tpg RGB range: 0/2
[  101.637021][ T6143] vivid-000: ==================  END STATUS  ==================
[  102.029496][ T6168] netlink: 'syz.4.106': attribute type 1 has an invalid length.
[  102.682116][ T6175] netlink: 228 bytes leftover after parsing attributes in process `syz.0.107'.
[  103.909899][ T6169] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  103.992585][   T50] Bluetooth: hci0: command 0x0401 tx timeout
[  105.113398][   T50] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  105.123540][   T50] Bluetooth: hci1: Injecting HCI hardware error event
[  105.139570][   T50] Bluetooth: hci1: hardware error 0x00
[  105.330910][ T6179] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  105.490927][ T6189] pimreg: entered allmulticast mode
[  105.561341][ T6189] bond0: entered promiscuous mode
[  105.572565][ T6189] bond_slave_0: entered promiscuous mode
[  105.583023][ T5804] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  105.584900][ T6189] bond_slave_1: entered promiscuous mode
[  105.698673][ T6192] netlink: 28 bytes leftover after parsing attributes in process `syz.1.112'.
[  105.775840][ T5804] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  105.799599][ T5804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  105.957286][ T5804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  106.152694][ T5627] Bluetooth: hci0: command 0x0401 tx timeout
[  106.160479][ T5804] usb 5-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00
[  106.316208][ T5804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.765233][ T5804] usb 5-1: config 0 descriptor??
[  107.756322][   T50] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  107.809743][ T6202] vivid-000: =================  START STATUS  =================
[  107.821467][ T6202] vivid-000: Test Pattern: 75% Colorbar
[  107.831432][ T6202] vivid-000: Fill Percentage of Frame: 100
[  107.858895][ T6202] vivid-000: Horizontal Movement: No Movement
[  108.009140][ T6202] vivid-000: Vertical Movement: No Movement
[  108.223422][ T6202] vivid-000: OSD Text Mode: All
[  108.254988][ T6202] vivid-000: Show Border: false
[  108.282891][ T6202] vivid-000: Show Square: false
[  108.307150][ T6210] netlink: 228 bytes leftover after parsing attributes in process `syz.3.116'.
[  108.331563][ T6202] vivid-000: Sensor Flipped Horizontally: false
[  108.856324][ T6202] vivid-000: Sensor Flipped Vertically: false
[  108.945263][ T6202] vivid-000: Insert SAV Code in Image: false
[  108.980802][ T6202] vivid-000: Insert EAV Code in Image: false
[  109.010627][ T6202] vivid-000: Insert Video Guard Band: false
[  109.041369][ T6202] vivid-000: Reduced Framerate: false
[  109.062404][ T6202] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator
[  109.102083][ T6202] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator
[  109.150916][ T6202] vivid-000: Enable Capture Cropping: true
[  109.167659][ T6202] vivid-000: Enable Capture Composing: true
[  109.189155][ T6202] vivid-000: Enable Capture Scaler: true
[  109.207640][ T6202] vivid-000: Timestamp Source: End of Frame
[  109.227263][ T6202] vivid-000: Colorspace: sRGB
[  109.241944][ T6202] vivid-000: Transfer Function: Default
[  109.258755][ T6202] vivid-000: Y'CbCr Encoding: Default
[  109.275175][ T6202] vivid-000: HSV Encoding: Hue 0-179
[  109.295237][ T6202] vivid-000: Quantization: Default
[  109.309520][ T6202] vivid-000: Apply Alpha To Red Only: false
[  109.327447][ T6202] vivid-000: Standard Aspect Ratio: 4x3
[  109.347600][ T6202] vivid-000: DV Timings Signal Mode: Current DV Timings inactive
[  109.372668][ T6202] vivid-000: DV Timings: 640x480p59 inactive
[  109.392396][ T6202] vivid-000: DV Timings Aspect Ratio: Source Width x Height
[  109.415686][ T6202] vivid-000: Maximum EDID Blocks: 2
[  109.431904][ T6202] vivid-000: Limited RGB Range (16-235): false
[  109.451704][ T6202] vivid-000: Rx RGB Quantization Range: Automatic
[  109.473621][ T6202] vivid-000: Power Present: 0x00000001
[  109.493194][ T6202] tpg source WxH: 320x240 (Y'CbCr)
[  109.507566][ T6202] tpg field: 1
[  109.519637][ T6202] tpg crop: (0,0)/320x240
[  109.534810][ T6202] tpg compose: (0,0)/320x240
[  109.548264][ T6202] tpg colorspace: 8
[  109.560067][ T6202] tpg transfer function: 0/0
[  109.577333][ T6202] tpg Y'CbCr encoding: 0/0
[  109.590213][ T6202] tpg quantization: 0/0
[  109.605352][ T6202] tpg RGB range: 0/2
[  109.617873][ T6202] vivid-000: ==================  END STATUS  ==================
[  109.659692][ T5804] usbhid 5-1:0.0: can't add hid device: -71
[  109.672075][ T5804] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  109.721122][ T5804] usb 5-1: USB disconnect, device number 8
[  109.765164][   T29] audit: type=1400 audit(1779729974.747:300): avc:  denied  { mount } for  pid=6214 comm="syz.2.121" name="/" dev="configfs" ino=1062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  109.922021][   T29] audit: type=1400 audit(1779729974.767:301): avc:  denied  { search } for  pid=6214 comm="syz.2.121" name="/" dev="configfs" ino=1062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  109.982538][ T5728] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  110.057200][   T29] audit: type=1400 audit(1779729974.767:302): avc:  denied  { search } for  pid=6214 comm="syz.2.121" name="/" dev="configfs" ino=1062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  110.080239][   T29] audit: type=1400 audit(1779729974.767:303): avc:  denied  { read } for  pid=6214 comm="syz.2.121" name="/" dev="configfs" ino=1062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  110.240650][ T5746] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  110.401135][ T5728] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  110.813276][   T29] audit: type=1400 audit(1779729974.767:304): avc:  denied  { read open } for  pid=6214 comm="syz.2.121" path="/" dev="configfs" ino=1062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  110.850325][ T5746] usb 4-1: Using ep0 maxpacket: 8
[  111.149269][   T29] audit: type=1400 audit(1779729974.937:305): avc:  denied  { getopt } for  pid=6214 comm="syz.2.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  111.224016][ T5746] usb 4-1: config 0 has an invalid interface number: 55 but max is 0
[  111.351839][ T5746] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  111.395071][ T5728] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  111.404668][ T5728] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.419182][ T5746] usb 4-1: config 0 has no interface number 0
[  111.428790][ T5746] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  111.452123][ T5746] usb 4-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  111.470015][ T5746] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  111.482761][ T5746] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.498168][ T5728] usb 1-1: config 0 descriptor??
[  111.578928][ T5746] usb 4-1: config 0 descriptor??
[  111.622909][ T5746] ldusb 4-1:0.55: Interrupt in endpoint not found
[  112.036983][ T6230] netlink: 228 bytes leftover after parsing attributes in process `syz.2.122'.
[  113.371221][ T6218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  113.394538][ T5728] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor
[  113.440800][ T6218] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  113.474973][ T5728] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0002/input/input10
[  113.725652][ T5735] usb 4-1: USB disconnect, device number 5
[  113.814768][ T5728] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0
[  113.932993][ T5728] usb 1-1: USB disconnect, device number 4
[  114.104348][ T6239] fido_id[6239]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[  114.165061][ T6245] syz.4.127 uses obsolete (PF_INET,SOCK_PACKET)
[  114.181941][   T29] audit: type=1400 audit(1779729979.157:306): avc:  denied  { ioctl } for  pid=6242 comm="syz.4.127" path="socket:[11148]" dev="sockfs" ino=11148 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  114.232439][   T29] audit: type=1400 audit(1779729979.187:307): avc:  denied  { read write } for  pid=6242 comm="syz.4.127" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  114.266672][   T29] audit: type=1400 audit(1779729979.187:308): avc:  denied  { open } for  pid=6242 comm="syz.4.127" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  114.295762][   T29] audit: type=1400 audit(1779729979.187:309): avc:  denied  { map } for  pid=6242 comm="syz.4.127" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  114.382549][ T5735] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  114.532597][ T5735] usb 3-1: Using ep0 maxpacket: 16
[  114.550023][ T5735] usb 3-1: config 0 has an invalid descriptor of length 40, skipping remainder of the config
[  114.564070][ T6251] vivid-000: =================  START STATUS  =================
[  114.574010][ T5735] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  114.585387][ T6251] vivid-000: Test Pattern: 75% Colorbar
[  114.591342][ T6251] vivid-000: Fill Percentage of Frame: 100
[  114.598301][ T5735] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  114.608734][ T6251] vivid-000: Horizontal Movement: No Movement
[  114.617435][ T6251] vivid-000: Vertical Movement: No Movement
[  114.624069][ T5735] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  114.654282][ T6251] vivid-000: OSD Text Mode: All
[  114.676762][ T5735] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  114.691567][ T6251] vivid-000: Show Border: false
[  114.710650][ T6251] vivid-000: Show Square: false
[  114.729586][ T6251] vivid-000: Sensor Flipped Horizontally: false
[  114.741086][ T5735] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  114.760404][ T5735] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  114.768637][ T6251] vivid-000: Sensor Flipped Vertically: false
[  114.782559][ T5735] usb 3-1: Manufacturer: syz
[  114.787622][ T6251] vivid-000: Insert SAV Code in Image: false
[  114.843841][ T6251] vivid-000: Insert EAV Code in Image: false
[  114.885000][ T6258] Invalid ELF header type: 3 != 1
[  114.918712][ T6258] netlink: 20 bytes leftover after parsing attributes in process `syz.1.133'.
[  115.041894][ T5735] usb 3-1: config 0 descriptor??
[  115.044714][ T6251] vivid-000: Insert Video Guard Band: 
[  115.126243][   T29] audit: type=1400 audit(1779729979.787:310): avc:  denied  { create } for  pid=6253 comm="syz.1.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  115.192688][ T6251] false
[  115.297401][ T6251] vivid-000: Reduced Framerate: false
[  115.392618][ T6251] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator
[  115.759672][ T6251] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator
[  116.181741][ T6251] vivid-000: Enable Capture Cropping: true
[  116.639256][ T6251] vivid-000: Enable Capture Composing: true
[  116.816989][   T29] audit: type=1400 audit(1779729979.847:311): avc:  denied  { write } for  pid=6253 comm="syz.1.133" name="radio5" dev="devtmpfs" ino=984 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  117.098462][ T6251] vivid-000: Enable Capture Scaler: true
[  117.138886][ T6251] vivid-000: Timestamp Source: End of Frame
[  117.152304][ T6251] vivid-000: Colorspace: sRGB
[  117.167296][ T6251] vivid-000: Transfer Function: Default
[  117.173772][   T29] audit: type=1400 audit(1779729979.867:312): avc:  denied  { module_load } for  pid=6253 comm="syz.1.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  117.195595][ T6251] vivid-000: Y'CbCr Encoding: Default
[  117.201200][ T6251] vivid-000: HSV Encoding: Hue 0-179
[  117.207756][ T6251] vivid-000: Quantization: Default
[  117.217845][   T29] audit: type=1400 audit(1779729982.107:313): avc:  denied  { create } for  pid=6262 comm="syz.0.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  117.238792][ T6251] vivid-000: Apply Alpha To Red Only: false
[  117.254508][ T6251] vivid-000: Standard Aspect Ratio: 4x3
[  117.261371][ T6251] vivid-000: DV Timings Signal Mode: Current DV Timings inactive
[  117.269515][   T29] audit: type=1400 audit(1779729982.107:314): avc:  denied  { setopt } for  pid=6262 comm="syz.0.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  117.291191][ T6251] vivid-000: DV Timings: 640x480p59 inactive
[  117.297507][ T6251] vivid-000: DV Timings Aspect Ratio: Source Width x Height
[  117.305207][ T6251] vivid-000: Maximum EDID Blocks: 2
[  117.312201][ T6251] vivid-000: Limited RGB Range (16-235): false
[  117.318657][   T29] audit: type=1400 audit(1779729982.107:315): avc:  denied  { write } for  pid=6262 comm="syz.0.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  117.339462][ T6251] vivid-000: Rx RGB Quantization Range: Automatic
[  117.346819][ T6251] vivid-000: Power Present: 0x00000001
[  117.352755][ T6251] tpg source WxH: 320x240 (Y'CbCr)
[  117.358101][ T6251] tpg field: 1
[  117.361602][ T6251] tpg crop: (0,0)/320x240
[  117.366157][ T6251] tpg compose: (0,0)/320x240
[  117.370909][ T6251] tpg colorspace: 8
[  117.375379][ T6251] tpg transfer function: 0/0
[  117.380422][ T6251] tpg Y'CbCr encoding: 0/0
[  117.385014][ T6251] tpg quantization: 0/0
[  117.389320][ T6251] tpg RGB range: 0/2
[  117.396988][ T6251] vivid-000: ==================  END STATUS  ==================
[  117.461060][ T6264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.134'.
[  117.503305][ T6254] hfs: unable to load iocharset "io#harset"
[  117.566460][ T5735] rc_core: IR keymap rc-hauppauge not found
[  117.746182][ T6268] lo speed is unknown, defaulting to 1000
[  117.752745][ T6268] lo speed is unknown, defaulting to 1000
[  117.761220][ T6268] lo speed is unknown, defaulting to 1000
[  117.769424][ T6268] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  117.785080][ T6268] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  117.802130][ T6268] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  117.816000][ T6268] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  117.829941][ T6268] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  117.853215][   T29] audit: type=1400 audit(1779729982.717:316): avc:  denied  { create } for  pid=6265 comm="syz.2.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  117.878351][ T6268] lo speed is unknown, defaulting to 1000
[  117.888449][ T6268] lo speed is unknown, defaulting to 1000
[  117.896295][ T6268] lo speed is unknown, defaulting to 1000
[  117.903465][ T6268] lo speed is unknown, defaulting to 1000
[  117.910498][ T6268] lo speed is unknown, defaulting to 1000
[  118.013853][ T5735] Registered IR keymap rc-empty
[  118.103343][   T29] audit: type=1400 audit(1779729982.727:317): avc:  denied  { write } for  pid=6265 comm="syz.2.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  118.126543][ T5735] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  118.158286][ T6269] SELinux:  Context system_u:object_r:getty_var_run_t:s0 is not valid (left unmapped).
[  118.262788][ T5735] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  118.445758][   T29] audit: type=1400 audit(1779729983.387:318): avc:  denied  { relabelto } for  pid=6262 comm="syz.0.134" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:getty_var_run_t:s0"
[  118.492776][ T5735] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  118.585176][ T5735] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input11
[  118.612104][ T6281] netlink: 228 bytes leftover after parsing attributes in process `syz.4.139'.
[  118.691907][   T29] audit: type=1400 audit(1779729983.387:319): avc:  denied  { associate } for  pid=6262 comm="syz.0.134" name="fuse" dev="devtmpfs" ino=99 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:getty_var_run_t:s0"
[  118.740150][ T5735] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  118.772643][ T5735] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  118.802708][ T5735] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  119.298072][ T5735] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  120.043896][ T5735] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  120.103110][ T5735] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  120.174403][ T5735] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  120.257724][ T5735] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  120.403157][ T5735] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  120.503644][ T5735] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  120.591610][ T5735] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  120.628929][ T5735] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  120.697723][ T5735] usb 3-1: USB disconnect, device number 5
[  120.812015][   T50] Bluetooth: hci0: unexpected event for opcode 0x4889
[  121.087860][ T6308] netlink: 28 bytes leftover after parsing attributes in process `syz.1.146'.
[  121.096998][ T5735] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  121.107966][ T6308] netlink: 'syz.1.146': attribute type 8 has an invalid length.
[  121.122599][ T6308] netlink: 209840 bytes leftover after parsing attributes in process `syz.1.146'.
[  121.162722][ T5746] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  121.277144][ T5735] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  121.535386][ T5735] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  121.565831][ T5746] usb 5-1: Using ep0 maxpacket: 16
[  121.581237][ T5746] usb 5-1: config 0 has an invalid descriptor of length 42, skipping remainder of the config
[  121.606862][ T5746] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  121.651141][ T5735] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  121.658314][ T5746] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  121.702241][ T5735] usb 3-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00
[  121.731256][ T5746] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  121.869708][ T5735] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.883221][ T5735] usb 3-1: config 0 descriptor??
[  121.889857][ T5735] usb 3-1: can't set config #0, error -71
[  121.897404][ T5735] usb 3-1: USB disconnect, device number 6
[  121.916200][   T29] kauditd_printk_skb: 2 callbacks suppressed
[  121.916214][   T29] audit: type=1400 audit(1779729986.897:322): avc:  denied  { read write } for  pid=6316 comm="syz.0.148" name="uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  121.974152][ T5746] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  121.992684][ T5746] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  122.038229][ T5714] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  122.071303][   T29] audit: type=1400 audit(1779729986.897:323): avc:  denied  { open } for  pid=6316 comm="syz.0.148" path="/dev/uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  122.125815][ T5746] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  122.168861][ T5746] usb 5-1: Manufacturer: syz
[  122.173130][   T29] audit: type=1400 audit(1779729986.947:324): avc:  denied  { create } for  pid=6316 comm="syz.0.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  122.223701][ T5714] usb 4-1: Using ep0 maxpacket: 16
[  122.238456][ T5714] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  122.251779][   T29] audit: type=1400 audit(1779729987.097:325): avc:  denied  { write } for  pid=6319 comm="syz.2.149" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  122.331741][ T5746] usb 5-1: config 0 descriptor??
[  122.341461][ T5714] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  122.412628][ T6326] netlink: 228 bytes leftover after parsing attributes in process `syz.0.151'.
[  122.477339][   T29] audit: type=1400 audit(1779729987.097:326): avc:  denied  { ioctl } for  pid=6319 comm="syz.2.149" path="socket:[12499]" dev="sockfs" ino=12499 ioctlcmd=0x5878 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  123.758930][   T29] audit: type=1400 audit(1779729987.137:327): avc:  denied  { create } for  pid=6319 comm="syz.2.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  123.780401][   T29] audit: type=1400 audit(1779729987.137:328): avc:  denied  { checkpoint_restore } for  pid=6319 comm="syz.2.149" capability=40  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  123.804856][   T29] audit: type=1400 audit(1779729987.647:329): avc:  denied  { read append } for  pid=6327 comm="syz.2.152" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  124.610068][ T5714] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  124.619828][ T5714] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  124.629590][ T5714] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  124.716057][   T29] audit: type=1400 audit(1779729987.657:330): avc:  denied  { open } for  pid=6327 comm="syz.2.152" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  124.811117][ T5714] usb 4-1: string descriptor 0 read error: -71
[  124.817552][ T5714] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  124.852673][ T5714] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  124.864026][   T29] audit: type=1400 audit(1779729987.687:331): avc:  denied  { listen } for  pid=6327 comm="syz.2.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  124.866164][ T5746] rc_core: IR keymap rc-hauppauge not found
[  124.929082][ T5714] usb 4-1: config 0 descriptor??
[  124.944380][ T5714] usb 4-1: can't set config #0, error -71
[  124.947278][ T5746] Registered IR keymap rc-empty
[  124.975704][ T5714] usb 4-1: USB disconnect, device number 6
[  124.976730][ T5746] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  125.111313][ T5746] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  125.152613][ T5728] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  125.202278][ T5746] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  125.215082][ T6338] netlink: 228 bytes leftover after parsing attributes in process `syz.2.154'.
[  125.217938][ T5746] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input12
[  125.245428][ T5746] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  125.275711][ T5746] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  125.302687][ T5728] usb 2-1: Using ep0 maxpacket: 16
[  125.303002][ T5746] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  125.309879][ T5728] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  125.333906][ T5746] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  125.353352][ T5746] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  125.353446][ T5728] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  125.421470][ T5728] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  125.433560][ T5746] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  125.454500][ T5746] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  125.484608][ T5728] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  125.506222][ T5746] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  125.530544][ T5728] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  125.556309][ T5746] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  125.582082][ T5728] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  125.591664][ T5728] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  125.592663][ T5746] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  125.624861][ T5728] usb 2-1: Manufacturer: syz
[  125.641747][ T5746] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  125.641774][ T5746] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  125.657366][ T5728] usb 2-1: config 0 descriptor??
[  125.660811][ T5746] usb 5-1: USB disconnect, device number 9
[  126.062552][ T5728] rc_core: IR keymap rc-hauppauge not found
[  126.062570][ T5728] Registered IR keymap rc-empty
[  126.062671][ T5728] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  126.086443][ T5728] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  126.113371][ T5728] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  126.118446][ T5728] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input13
[  126.129191][ T5728] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  126.147750][ T5728] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  126.162642][ T5728] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  126.185925][ T5728] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  126.202662][ T5728] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  126.232089][ T5728] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  126.242648][ T5728] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  126.267338][ T5728] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  126.282610][ T5728] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  126.287207][   T24] lo speed is unknown, defaulting to 1000
[  126.307542][ T5728] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  126.336104][ T5728] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  126.336127][ T5728] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  126.437492][ T5728] usb 2-1: USB disconnect, device number 6
[  126.538688][ T5746] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  126.727647][ T5746] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  126.727697][ T5746] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  126.727712][ T5746] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  126.727746][ T5746] usb 1-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00
[  126.727770][ T5746] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.750613][ T5746] usb 1-1: config 0 descriptor??
[  127.182642][   T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  127.201751][ T1309] ieee802154 phy0 wpan0: encryption failed: -22
[  127.201811][ T1309] ieee802154 phy1 wpan1: encryption failed: -22
[  127.268253][ T5746] wacom 0003:056A:0010.0003: unknown main item tag 0x0
[  127.268951][ T5746] wacom 0003:056A:0010.0003: Unknown device_type for 'HID 056a:0010'. Assuming pen.
[  127.283404][ T5746] wacom 0003:056A:0010.0003: hidraw0: USB HID v0.00 Device [HID 056a:0010] on usb-dummy_hcd.0-1/input0
[  127.288575][ T5746] input: Wacom Graphire Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0010.0003/input/input14
[  127.445380][   T10] usb 3-1: config 27 has an invalid descriptor of length 205, skipping remainder of the config
[  127.445519][   T10] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  127.445575][   T10] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  127.445641][   T10] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  127.445678][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.452528][   T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  127.466948][ T6362] netlink: 24 bytes leftover after parsing attributes in process `syz.0.159'.
[  127.517908][ T6364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.159'.
[  127.599755][ T5746] usb 1-1: USB disconnect, device number 5
[  127.612764][   T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  127.612804][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  127.612826][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  127.612854][   T24] usb 2-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00
[  127.612873][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.620791][   T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  127.621949][   T10] usb 3-1: invalid MIDI out EP 0
[  127.628493][   T24] usb 2-1: config 0 descriptor??
[  127.949412][   T10] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22
[  128.048809][   T24] wacom 0003:056A:0010.0004: unknown main item tag 0x0
[  128.049702][   T24] wacom 0003:056A:0010.0004: Unknown device_type for 'HID 056a:0010'. Assuming pen.
[  128.102304][   T24] wacom 0003:056A:0010.0004: hidraw0: USB HID v0.00 Device [HID 056a:0010] on usb-dummy_hcd.1-1/input0
[  128.216079][   T24] input: Wacom Graphire Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0010.0004/input/input17
[  128.245220][ T6370] netlink: 24 bytes leftover after parsing attributes in process `syz.1.161'.
[  128.431819][ T6370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.161'.
[  128.460307][   T24] usb 2-1: USB disconnect, device number 7
[  128.567652][ T6373] fido_id[6373]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0010.0004/report_descriptor': No such file or directory
[  129.096410][   T24] usb 3-1: USB disconnect, device number 7
[  129.502829][ T6385] tmpfs: Bad value for 'mpol'
[  129.622829][   T29] kauditd_printk_skb: 12 callbacks suppressed
[  129.622873][   T29] audit: type=1400 audit(1779729994.477:344): avc:  denied  { append } for  pid=6382 comm="syz.3.164" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  129.721675][ T6390] netlink: 28 bytes leftover after parsing attributes in process `syz.1.166'.
[  129.730294][   T29] audit: type=1400 audit(1779729994.477:345): avc:  denied  { open } for  pid=6382 comm="syz.3.164" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  129.794654][ T6390] netlink: 'syz.1.166': attribute type 8 has an invalid length.
[  129.837344][   T29] audit: type=1400 audit(1779729994.487:346): avc:  denied  { mounton } for  pid=6384 comm="syz.4.165" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  129.901216][ T6390] netlink: 209840 bytes leftover after parsing attributes in process `syz.1.166'.
[  129.942305][   T29] audit: type=1400 audit(1779729994.487:347): avc:  denied  { ioctl } for  pid=6382 comm="syz.3.164" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  129.973180][   T29] audit: type=1400 audit(1779729994.687:348): avc:  denied  { create } for  pid=6382 comm="syz.3.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  130.104149][   T29] audit: type=1400 audit(1779729994.717:349): avc:  denied  { write } for  pid=6382 comm="syz.3.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  130.407077][   T29] audit: type=1400 audit(1779729994.787:350): avc:  denied  { write } for  pid=6382 comm="syz.3.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  130.429189][   T29] audit: type=1400 audit(1779729994.857:351): avc:  denied  { read write } for  pid=5618 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  130.455635][   T29] audit: type=1400 audit(1779729994.857:352): avc:  denied  { open } for  pid=5618 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  130.494954][ T6397] FAULT_INJECTION: forcing a failure.
[  130.494954][ T6397] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  130.525593][ T6397] CPU: 1 UID: 0 PID: 6397 Comm: syz.2.169 Not tainted syzkaller #0 PREEMPT(full) 
[  130.525614][ T6397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  130.525623][ T6397] Call Trace:
[  130.525628][ T6397]  <TASK>
[  130.525634][ T6397]  dump_stack_lvl+0x100/0x190
[  130.525658][ T6397]  should_fail_ex.cold+0x5/0xa
[  130.525682][ T6397]  _copy_from_user+0x2e/0xd0
[  130.525709][ T6397]  __sys_bpf+0x243/0x4b90
[  130.525729][ T6397]  ? __pfx___sys_bpf+0x10/0x10
[  130.525743][ T6397]  ? proc_fail_nth_write+0x9f/0x220
[  130.525762][ T6397]  ? find_held_lock+0x2b/0x80
[  130.525782][ T6397]  ? find_held_lock+0x2b/0x80
[  130.525797][ T6397]  ? ksys_write+0x190/0x250
[  130.525815][ T6397]  ? ksys_write+0x190/0x250
[  130.525838][ T6397]  ? __mutex_unlock_slowpath+0x15d/0x8a0
[  130.525863][ T6397]  ? kernel_write+0x613/0x6c0
[  130.525881][ T6397]  ? __fget_files+0x215/0x3d0
[  130.525913][ T6397]  ? fput+0x79/0x100
[  130.525936][ T6397]  ? ksys_write+0x1ac/0x250
[  130.525953][ T6397]  ? __pfx_ksys_write+0x10/0x10
[  130.525975][ T6397]  __x64_sys_bpf+0x7b/0xc0
[  130.525992][ T6397]  ? lockdep_hardirqs_on+0x78/0x100
[  130.526016][ T6397]  do_syscall_64+0x10b/0x860
[  130.526039][ T6397]  ? clear_bhb_loop+0x40/0x90
[  130.526061][ T6397]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.526077][ T6397] RIP: 0033:0x7f2b9019ce59
[  130.526091][ T6397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  130.526107][ T6397] RSP: 002b:00007f2b90f90028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  130.526123][ T6397] RAX: ffffffffffffffda RBX: 00007f2b90415fa0 RCX: 00007f2b9019ce59
[  130.526134][ T6397] RDX: 0000000000000038 RSI: 0000200000000b00 RDI: 0000000000000018
[  130.526144][ T6397] RBP: 00007f2b90f90090 R08: 0000000000000000 R09: 0000000000000000
[  130.526153][ T6397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  130.526162][ T6397] R13: 00007f2b90416038 R14: 00007f2b90415fa0 R15: 00007fffd9496368
[  130.526184][ T6397]  </TASK>
[  130.562555][   T29] audit: type=1400 audit(1779729994.857:353): avc:  denied  { ioctl } for  pid=5618 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  130.615765][ T6403] =======================================================
[  130.615765][ T6403] WARNING: The mand mount option has been deprecated and
[  130.615765][ T6403]          and is ignored by this kernel. Remove the mand
[  130.615765][ T6403]          option from the mount to silence this warning.
[  130.615765][ T6403] =======================================================
[  130.818144][ T6403] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  130.829651][ T6403] netlink: 52 bytes leftover after parsing attributes in process `syz.4.168'.
[  131.195174][ T6404] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[  131.207031][ T6404] overlayfs: failed to look up (tracing) for ino (-66)
[  131.440316][ T6406] netlink: 24 bytes leftover after parsing attributes in process `syz.2.171'.
[  131.523049][ T5746] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  131.683128][ T5746] usb 1-1: Using ep0 maxpacket: 16
[  131.701703][ T5746] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  131.701744][ T5746] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  131.704887][ T5746] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  131.717369][ T6415] netlink: 24 bytes leftover after parsing attributes in process `syz.1.174'.
[  131.748144][ T5746] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  131.748184][ T5746] usb 1-1: Manufacturer: syz
[  131.758696][ T5746] usb 1-1: config 0 descriptor??
[  131.913375][   T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  132.062657][   T24] usb 5-1: Using ep0 maxpacket: 32
[  132.105710][   T24] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  132.139765][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.186013][   T24] usb 5-1: config 0 descriptor??
[  132.418816][   T24] as10x_usb: device has been detected
[  132.437024][ T6411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  132.455357][   T24] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  132.472771][ T6411] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  132.509950][   T24] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  132.547698][   T24] as10x_usb: error during firmware upload part1
[  132.568755][   T24] Registered device nBox DVB-T Dongle
[  132.832981][ T6435] FAULT_INJECTION: forcing a failure.
[  132.832981][ T6435] name failslab, interval 1, probability 0, space 0, times 0
[  132.857504][ T6435] CPU: 1 UID: 0 PID: 6435 Comm: syz.3.180 Not tainted syzkaller #0 PREEMPT(full) 
[  132.857529][ T6435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  132.857539][ T6435] Call Trace:
[  132.857545][ T6435]  <TASK>
[  132.857551][ T6435]  dump_stack_lvl+0x100/0x190
[  132.857577][ T6435]  should_fail_ex.cold+0x5/0xa
[  132.857597][ T6435]  ? tomoyo_realpath_from_path+0xb6/0x690
[  132.857618][ T6435]  should_failslab+0xc2/0x120
[  132.857635][ T6435]  __kmalloc_noprof+0xe0/0x850
[  132.857656][ T6435]  ? kfree+0x1dd/0x6c0
[  132.857676][ T6435]  tomoyo_realpath_from_path+0xb6/0x690
[  132.857701][ T6435]  tomoyo_path_number_perm+0x23c/0x580
[  132.857724][ T6435]  ? tomoyo_path_number_perm+0x22e/0x580
[  132.857743][ T6435]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  132.857779][ T6435]  ? find_held_lock+0x2b/0x80
[  132.857793][ T6435]  ? __fget_files+0x215/0x3d0
[  132.857811][ T6435]  ? hook_file_ioctl_common+0x149/0x410
[  132.857823][ T6435]  ? __fget_files+0x215/0x3d0
[  132.857844][ T6435]  ? __fget_files+0x21f/0x3d0
[  132.857867][ T6435]  security_file_ioctl+0xd3/0x230
[  132.857888][ T6435]  __x64_sys_ioctl+0xb7/0x210
[  132.857904][ T6435]  do_syscall_64+0x10b/0x860
[  132.857924][ T6435]  ? clear_bhb_loop+0x40/0x90
[  132.857941][ T6435]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.857955][ T6435] RIP: 0033:0x7fbaa6b9ce59
[  132.857968][ T6435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  132.857981][ T6435] RSP: 002b:00007fbaa79b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  132.857995][ T6435] RAX: ffffffffffffffda RBX: 00007fbaa6e16180 RCX: 00007fbaa6b9ce59
[  132.858004][ T6435] RDX: 0000200000000280 RSI: 00000000c05064a7 RDI: 0000000000000008
[  132.858013][ T6435] RBP: 00007fbaa79b7090 R08: 0000000000000000 R09: 0000000000000000
[  132.858021][ T6435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  132.858029][ T6435] R13: 00007fbaa6e16218 R14: 00007fbaa6e16180 R15: 00007ffecbc35108
[  132.858047][ T6435]  </TASK>
[  132.859424][ T6435] ERROR: Out of memory at tomoyo_realpath_from_path.
[  133.093475][ T5728] usb 5-1: USB disconnect, device number 10
[  133.157516][ T5728] Unregistered device nBox DVB-T Dongle
[  133.165306][ T5728] as10x_usb: device has been disconnected
[  133.590873][ T5621] usb 1-1: USB disconnect, device number 6
[  133.642929][ T5728] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  133.814053][ T5728] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  133.846696][ T5728] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  133.881991][ T5728] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  133.892532][   T42] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[  133.911091][ T5728] usb 5-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00
[  133.942666][ T5728] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.972025][ T5728] usb 5-1: config 0 descriptor??
[  134.055178][   T42] usb 3-1: not running at top speed; connect to a high speed hub
[  134.088922][   T42] usb 3-1: config 157 has an invalid interface number: 35 but max is 0
[  134.121757][   T42] usb 3-1: config 157 has no interface number 0
[  134.151361][   T42] usb 3-1: config 157 interface 35 has no altsetting 0
[  134.173829][   T42] usb 3-1: string descriptor 0 read error: -22
[  134.196929][   T42] usb 3-1: New USB device found, idVendor=153b, idProduct=1182, bcdDevice=63.be
[  134.221286][   T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.285136][   T42] dvb-usb: found a 'Terratec Cinergy S2 PCIe Dual Port 2' in warm state.
[  134.321289][   T42] dw2102: su3000_power_ctrl: 1, initialized 0
[  134.340459][   T42] dvb-usb: bulk message failed: -22 (2/0)
[  134.394044][   T42] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  134.437544][ T5728] usbhid 5-1:0.0: can't add hid device: -71
[  134.476718][ T5728] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  134.486174][ T6439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  134.502086][   T42] dvb-usb: Terratec Cinergy S2 PCIe Dual Port 2 error while loading driver (-19)
[  134.522873][ T6439] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  134.546489][ T5728] usb 5-1: USB disconnect, device number 11
[  134.825119][ T6454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  134.835181][ T6454] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  135.110494][ T6457] vxfs: WRONG superblock magic 00000000 at 1
[  135.164523][ T6457] vxfs: WRONG superblock magic 00000000 at 8
[  135.187409][ T6457] vxfs: can't find superblock.
[  135.228290][ T6461] vxfs: WRONG superblock magic 00000000 at 1
[  135.244446][ T6461] vxfs: WRONG superblock magic 00000000 at 8
[  135.259111][ T6461] vxfs: can't find superblock.
[  135.493057][ T5746] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  136.044655][ T5746] usb 5-1: Using ep0 maxpacket: 16
[  136.197520][ T5746] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  136.344419][ T6467] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  136.356938][ T5714] usb 3-1: USB disconnect, device number 8
[  136.366835][ T5746] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  136.394627][ T5746] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  136.437950][ T5746] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  136.483274][ T5746] usb 5-1: Manufacturer: syz
[  136.490713][ T6475] netlink: 28 bytes leftover after parsing attributes in process `syz.3.193'.
[  136.504888][ T6475] netlink: 'syz.3.193': attribute type 8 has an invalid length.
[  136.520743][ T5746] usb 5-1: config 0 descriptor??
[  136.535279][ T6475] netlink: 209840 bytes leftover after parsing attributes in process `syz.3.193'.
[  137.672438][   T50] Bluetooth: hci0: command 0x0401 tx timeout
[  138.969808][ T6494] vivid-000: =================  START STATUS  =================
[  138.984068][ T6494] vivid-000: Test Pattern: 75% Colorbar
[  138.990327][ T6494] vivid-000: Fill Percentage of Frame: 100
[  138.998913][ T6494] vivid-000: Horizontal Movement: No Movement
[  139.007956][ T6494] vivid-000: Vertical Movement: No Movement
[  139.015778][ T6494] vivid-000: OSD Text Mode: All
[  139.021392][ T6494] vivid-000: Show Border: false
[  139.028920][ T6494] vivid-000: Show Square: false
[  139.034990][ T6494] vivid-000: Sensor Flipped Horizontally: false
[  139.041938][ T6494] vivid-000: Sensor Flipped Vertically: false
[  139.050162][ T6494] vivid-000: Insert SAV Code in Image: false
[  139.057982][ T6494] vivid-000: Insert EAV Code in Image: false
[  139.107740][ T6494] vivid-000: Insert Video Guard Band: false
[  139.146408][ T6498] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  139.173040][ T6498] netlink: 52 bytes leftover after parsing attributes in process `syz.0.197'.
[  139.469127][ T6494] vivid-000: Reduced Framerate: false
[  139.499986][ T6494] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator
[  139.513684][ T6494] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator
[  139.532119][ T6494] vivid-000: Enable Capture Cropping: true
[  139.541172][ T6494] vivid-000: Enable Capture Composing: true
[  139.548936][ T6494] vivid-000: Enable Capture Scaler: true
[  139.555585][ T6494] vivid-000: Timestamp Source: End of Frame
[  139.563486][ T6494] vivid-000: Colorspace: sRGB
[  139.568961][ T6494] vivid-000: Transfer Function: Default
[  139.575713][ T6494] vivid-000: Y'CbCr Encoding: Default
[  139.582096][ T6494] vivid-000: HSV Encoding: Hue 0-179
[  139.589102][ T6494] vivid-000: Quantization: Default
[  139.598224][ T6494] vivid-000: Apply Alpha To Red Only: false
[  139.609197][ T6494] vivid-000: Standard Aspect Ratio: 4x3
[  139.617332][ T6494] vivid-000: DV Timings Signal Mode: Current DV Timings inactive
[  139.624113][ T6502] lo speed is unknown, defaulting to 1000
[  139.626533][ T6494] vivid-000: DV Timings: 640x480p59 inactive
[  139.715200][ T6494] vivid-000: DV Timings Aspect Ratio: Source Width x Height
[  139.742622][ T6494] vivid-000: Maximum EDID Blocks: 2
[  139.748013][ T6494] vivid-000: Limited RGB Range (16-235): false
[  139.754785][ T6494] vivid-000: Rx RGB Quantization Range: Automatic
[  139.761381][ T6494] vivid-000: Power Present: 0x00000001
[  139.767752][ T6494] tpg source WxH: 320x240 (Y'CbCr)
[  139.778483][ T6494] tpg field: 1
[  139.781917][ T6494] tpg crop: (0,0)/320x240
[  139.786817][ T5746] usb 5-1: USB disconnect, device number 12
[  139.789681][ T6494] tpg compose: (0,0)/320x240
[  139.797624][ T6494] tpg colorspace: 8
[  139.807491][ T6494] tpg transfer function: 0/0
[  139.812197][ T6494] tpg Y'CbCr encoding: 0/0
[  139.817096][ T6494] tpg quantization: 0/0
[  139.821303][ T6494] tpg RGB range: 0/2
[  139.825329][ T6494] vivid-000: ==================  END STATUS  ==================
[  139.992261][ T5621] IPVS: starting estimator thread 0...
[  140.175179][ T6508] IPVS: using max 45 ests per chain, 108000 per kthread
[  140.373333][ T6511] nbd3: detected capacity change from 0 to 63
[  140.381488][ T6513] nbd: must specify an index to disconnect
[  141.569208][   T42] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  142.091529][   T50] block nbd3: Receive control failed (result -104)
[  142.198783][   T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 52, changing to 7
[  142.254469][   T29] kauditd_printk_skb: 8 callbacks suppressed
[  142.254502][   T29] audit: type=1400 audit(1779730007.237:362): avc:  denied  { setopt } for  pid=6522 comm="syz.0.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  142.279258][   T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 9272, setting to 1024
[  142.294581][   T42] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  142.307664][   T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.364415][   T42] usb 2-1: config 0 descriptor??
[  142.441252][ T6531] hfs: unable to load iocharset "io#harset"
[  142.581133][ T6535] Invalid ELF header type: 3 != 1
[  142.593785][ T6535] netlink: 20 bytes leftover after parsing attributes in process `syz.3.206'.
[  142.924061][   T29] audit: type=1400 audit(1779730007.854:363): avc:  denied  { create } for  pid=6540 comm="syz.0.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  143.045545][ T6539] fuseblk: Unknown parameter 'blksiz‹e'
[  143.061929][ T6542] Cannot find del_set index 1 as target
[  143.133627][   T29] audit: type=1400 audit(1779730008.104:364): avc:  denied  { listen } for  pid=6540 comm="syz.0.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  144.347814][   T42] ath6kl: Failed to submit usb control message: -110
[  144.580437][   T42] ath6kl: unable to send the bmi data to the device: -110
[  144.587812][   T42] ath6kl: Unable to send get target info: -110
[  144.597565][   T42] ath6kl: Failed to init ath6kl core: -110
[  144.607068][   T42] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -110
[  144.833927][ T5728] usb 2-1: USB disconnect, device number 8
[  144.859426][ T6548] netdevsim netdevsim3: Direct firmware load for .
[  144.859426][ T6548]  failed with error -2
[  144.935800][ T6548] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  144.935800][ T6548] 
[  144.948940][ T6555] vivid-000: =================  START STATUS  =================
[  144.977905][ T6555] vivid-000: Test Pattern: 75% Colorbar
[  144.990122][ T6555] vivid-000: Fill Percentage of Frame: 100
[  144.997596][ T6555] vivid-000: Horizontal Movement: No Movement
[  145.004936][ T6555] vivid-000: Vertical Movement: No Movement
[  145.011564][ T6555] vivid-000: OSD Text Mode: All
[  145.017129][ T6555] vivid-000: Show Border: false
[  145.023430][ T6555] vivid-000: Show Square: false
[  145.029096][ T6555] vivid-000: Sensor Flipped Horizontally: false
[  145.036259][ T6555] vivid-000: Sensor Flipped Vertically: false
[  145.043383][ T6555] vivid-000: Insert SAV Code in Image: false
[  145.050161][ T6555] vivid-000: Insert EAV Code in Image: false
[  145.057874][ T6555] vivid-000: Insert Video Guard Band: false
[  145.063911][   T42] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  145.073558][ T6555] vivid-000: Reduced Framerate: false
[  145.079046][ T6555] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator
[  145.086836][ T6555] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator
[  145.095189][ T6555] vivid-000: Enable Capture Cropping: true
[  145.101147][ T6555] vivid-000: Enable Capture Composing: true
[  145.108820][ T6555] vivid-000: Enable Capture Scaler: true
[  145.115609][ T6555] vivid-000: Timestamp Source: End of Frame
[  145.121608][ T6555] vivid-000: Colorspace: sRGB
[  145.131407][ T6555] vivid-000: Transfer Function: Default
[  145.137601][ T6555] vivid-000: Y'CbCr Encoding: Default
[  145.145560][ T6555] vivid-000: HSV Encoding: Hue 0-179
[  145.151087][ T6555] vivid-000: Quantization: Default
[  145.156346][ T6555] vivid-000: Apply Alpha To Red Only: false
[  145.162846][ T6555] vivid-000: Standard Aspect Ratio: 4x3
[  145.168525][ T6555] vivid-000: DV Timings Signal Mode: Current DV Timings inactive
[  145.176975][ T6555] vivid-000: DV Timings: 640x480p59 inactive
[  145.183459][ T6555] vivid-000: DV Timings Aspect Ratio: Source Width x Height
[  145.191204][ T6555] vivid-000: Maximum EDID Blocks: 2
[  145.196853][ T6555] vivid-000: Limited RGB Range (16-235): false
[  145.206432][ T6555] vivid-000: Rx RGB Quantization Range: Automatic
[  145.213954][ T6555] vivid-000: Power Present: 0x00000001
[  145.220209][ T6555] tpg source WxH: 320x240 (Y'CbCr)
[  145.250154][   T42] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  145.261656][   T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  145.274128][ T6555] tpg field: 1
[  145.278228][ T6555] tpg crop: (0,0)/320x240
[  145.282856][   T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  145.293080][ T6555] tpg compose: (0,0)/320x240
[  145.297963][ T6555] tpg colorspace: 8
[  145.302859][   T42] usb 5-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00
[  145.312540][ T6555] tpg transfer function: 0/0
[  145.319593][ T6555] tpg Y'CbCr encoding: 0/0
[  145.324310][   T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.338753][ T6555] tpg quantization: 0/0
[  145.343604][ T6555] tpg RGB range: 0/2
[  145.347884][ T6555] vivid-000: ==================  END STATUS  ==================
[  145.424864][   T42] usb 5-1: config 0 descriptor??
[  145.881001][   T42] usbhid 5-1:0.0: can't add hid device: -71
[  145.897322][   T42] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  145.906203][ T6564] netlink: 24 bytes leftover after parsing attributes in process `syz.0.217'.
[  145.936222][   T42] usb 5-1: USB disconnect, device number 13
[  145.979084][ T6567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.216'.
[  146.035536][ T6569] netlink: 12 bytes leftover after parsing attributes in process `syz.3.216'.
[  146.945081][ T6571] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.953364][ T6571] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.031595][ T6571] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  147.046153][ T6571] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  147.260390][   T85] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  147.354211][   T85] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  147.418436][   T85] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  147.503245][   T85] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  147.904597][ T5621] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  148.132419][   T29] audit: type=1400 audit(1779730013.104:365): avc:  denied  { set_context_mgr } for  pid=6593 comm="syz.1.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  148.178526][   T29] audit: type=1400 audit(1779730013.154:366): avc:  denied  { map } for  pid=6593 comm="syz.1.223" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  148.212493][ T5621] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  148.294525][   T29] audit: type=1400 audit(1779730013.204:367): avc:  denied  { call } for  pid=6593 comm="syz.1.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  148.346233][ T5621] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  148.357631][ T5621] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  148.367458][ T5621] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  148.379403][ T5621] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  148.392950][ T5621] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  148.403974][ T5621] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  148.412748][ T5621] usb 4-1: Product: syz
[  148.417236][ T5621] usb 4-1: Manufacturer: syz
[  148.429960][ T5621] cdc_wdm 4-1:1.0: skipping garbage
[  148.437103][ T5621] cdc_wdm 4-1:1.0: skipping garbage
[  148.437127][ T6583] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  148.455376][ T5621] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  148.461777][ T5621] cdc_wdm 4-1:1.0: Unknown control protocol
[  148.462662][ T5728] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  148.643209][ T5728] usb 1-1: Using ep0 maxpacket: 32
[  148.648382][   T29] audit: type=1400 audit(1779730013.624:368): avc:  denied  { read write } for  pid=6582 comm="syz.3.220" name="cdc-wdm0" dev="devtmpfs" ino=2959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[  148.673509][ T6584] cdc_wdm 4-1:1.0: Error submitting int urb - -90
[  148.701614][ T5728] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  148.721699][ T5728] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.734755][   T29] audit: type=1400 audit(1779730013.654:369): avc:  denied  { open } for  pid=6582 comm="syz.3.220" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[  148.830276][ T5728] usb 1-1: config 0 descriptor??
[  149.108548][ T5728] as10x_usb: device has been detected
[  149.117257][ T6586] cdc_wdm 4-1:1.0: Error submitting int urb - -90
[  149.134756][ T5728] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  149.151464][ T6605] netlink: 24 bytes leftover after parsing attributes in process `syz.3.220'.
[  149.173842][ T6589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  149.198800][ T5728] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  149.214000][ T6589] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  149.279657][ T6606] tmpfs: Bad value for 'mpol'
[  149.343491][ T5728] as10x_usb: error during firmware upload part1
[  149.370084][ T5728] Registered device nBox DVB-T Dongle
[  149.526823][ T6596] syz.1.223 (6596): drop_caches: 2
[  149.672664][   T50] Bluetooth: hci0: command 0x0401 tx timeout
[  149.713417][ T6614] netlink: 36 bytes leftover after parsing attributes in process `syz.4.229'.
[  149.892520][ T5728] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  149.902634][   T24] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  149.947883][ T5621] usb 1-1: USB disconnect, device number 7
[  150.010964][ T5621] Unregistered device nBox DVB-T Dongle
[  150.012612][ T5735] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  150.028109][ T5621] as10x_usb: device has been disconnected
[  150.042544][ T5728] usb 2-1: Using ep0 maxpacket: 16
[  150.050109][ T5728] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  150.063166][   T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  150.079114][ T5728] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  150.092170][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  150.104225][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  150.116001][ T5728] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  150.125645][ T5728] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  150.133823][   T24] usb 3-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00
[  150.144091][ T5728] usb 2-1: Manufacturer: syz
[  150.148744][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.163964][ T5728] usb 2-1: config 0 descriptor??
[  150.177236][   T24] usb 3-1: config 0 descriptor??
[  150.182617][ T5735] usb 5-1: Using ep0 maxpacket: 16
[  150.199350][ T5735] usb 5-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config
[  150.218164][ T5735] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  150.229560][ T5735] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  150.240252][ T5735] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  150.251223][ T5735] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  150.265993][ T5735] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  150.275256][ T5735] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  150.283410][ T5735] usb 5-1: Manufacturer: syz
[  150.290883][ T5735] usb 5-1: config 0 descriptor??
[  150.422637][ T5621] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  150.563625][ T5735] rc_core: IR keymap rc-hauppauge not found
[  150.569605][ T5735] Registered IR keymap rc-empty
[  150.575398][ T5735] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  150.584358][ T5621] usb 1-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99
[  150.605588][ T5735] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  150.614129][ T5621] usb 1-1: config 0 interface 0 has no altsetting 0
[  150.633832][ T5735] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  150.649045][   T24] wacom 0003:056A:0010.0005: unknown main item tag 0x0
[  150.663983][   T24] wacom 0003:056A:0010.0005: Unknown device_type for 'HID 056a:0010'. Assuming pen.
[  150.675638][ T5735] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input20
[  150.688687][ T5621] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  150.703656][ T5621] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  150.705890][ T5728] usb 4-1: USB disconnect, device number 7
[  150.712706][ T5621] usb 1-1: Product: syz
[  150.722769][ T5621] usb 1-1: Manufacturer: syz
[  150.723184][   T24] wacom 0003:056A:0010.0005: hidraw0: USB HID v0.00 Device [HID 056a:0010] on usb-dummy_hcd.2-1/input0
[  150.727787][ T5621] usb 1-1: SerialNumber: syz
[  150.763547][ T5735] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  150.794098][ T5735] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  150.805227][   T24] input: Wacom Graphire Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0010.0005/input/input21
[  150.829940][ T6610] netlink: 24 bytes leftover after parsing attributes in process `syz.2.227'.
[  150.855644][ T5621] usb 1-1: config 0 descriptor??
[  150.883076][ T5735] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  150.897460][ T6618] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  150.922557][ T5735] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  150.963150][ T5735] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  150.988138][ T5621] usb 1-1: selecting invalid altsetting 0
[  150.992600][ T5735] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  151.020834][ T6610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.227'.
[  151.033017][ T5735] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  151.048129][ T5728] usb 3-1: USB disconnect, device number 9
[  151.054702][ T5735] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  151.083453][ T5735] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  151.115050][ T5735] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  151.169586][ T5735] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  151.205015][ T5735] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  151.208502][ T6625] comedi comedi3: comedi_config --init_data is deprecated
[  151.242160][ T5735] usb 5-1: USB disconnect, device number 14
[  151.362360][   T10] usb 1-1: USB disconnect, device number 8
[  151.370032][ T6630] FAULT_INJECTION: forcing a failure.
[  151.370032][ T6630] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  151.385063][ T6630] CPU: 1 UID: 0 PID: 6630 Comm: syz.3.233 Not tainted syzkaller #0 PREEMPT(full) 
[  151.385087][ T6630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  151.385096][ T6630] Call Trace:
[  151.385102][ T6630]  <TASK>
[  151.385108][ T6630]  dump_stack_lvl+0x100/0x190
[  151.385133][ T6630]  should_fail_ex.cold+0x5/0xa
[  151.385156][ T6630]  _copy_from_user+0x2e/0xd0
[  151.385183][ T6630]  __keyctl_dh_compute+0x1b6/0x10d0
[  151.385209][ T6630]  ? find_held_lock+0x2b/0x80
[  151.385225][ T6630]  ? get_pid_task+0xfc/0x250
[  151.385243][ T6630]  ? get_pid_task+0xfc/0x250
[  151.385263][ T6630]  ? __pfx___keyctl_dh_compute+0x10/0x10
[  151.385291][ T6630]  ? proc_fail_nth_write+0x9f/0x220
[  151.385330][ T6630]  keyctl_dh_compute+0xd9/0x140
[  151.385355][ T6630]  ? __pfx_keyctl_dh_compute+0x10/0x10
[  151.385384][ T6630]  ? ksys_write+0x1ac/0x250
[  151.385403][ T6630]  ? __pfx_ksys_write+0x10/0x10
[  151.385425][ T6630]  __do_sys_keyctl+0x464/0x5a0
[  151.385447][ T6630]  do_syscall_64+0x10b/0x860
[  151.385472][ T6630]  ? clear_bhb_loop+0x40/0x90
[  151.385493][ T6630]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.385509][ T6630] RIP: 0033:0x7fbaa6b9ce59
[  151.385523][ T6630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  151.385539][ T6630] RSP: 002b:00007fbaa79f9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[  151.385563][ T6630] RAX: ffffffffffffffda RBX: 00007fbaa6e15fa0 RCX: 00007fbaa6b9ce59
[  151.385573][ T6630] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000017
[  151.385583][ T6630] RBP: 00007fbaa79f9090 R08: 00002000000001c0 R09: 0000000000000000
[  151.385593][ T6630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  151.385602][ T6630] R13: 00007fbaa6e16038 R14: 00007fbaa6e15fa0 R15: 00007ffecbc35108
[  151.385625][ T6630]  </TASK>
[  151.885654][ T6644] netlink: 24 bytes leftover after parsing attributes in process `syz.2.238'.
[  152.180730][   T29] audit: type=1400 audit(1779730017.154:370): avc:  denied  { read } for  pid=6645 comm="syz.3.239" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  152.212828][   T29] audit: type=1400 audit(1779730017.154:371): avc:  denied  { open } for  pid=6645 comm="syz.3.239" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  152.850260][ T6632] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  153.020181][ T5735] usb 2-1: USB disconnect, device number 9
[  153.958646][   T50] Bluetooth: hci0: command 0x0401 tx timeout
[  155.404833][ T6660] FAULT_INJECTION: forcing a failure.
[  155.404833][ T6660] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  155.417958][ T6660] CPU: 1 UID: 0 PID: 6660 Comm: syz.0.241 Not tainted syzkaller #0 PREEMPT(full) 
[  155.417983][ T6660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  155.417992][ T6660] Call Trace:
[  155.417998][ T6660]  <TASK>
[  155.418005][ T6660]  dump_stack_lvl+0x100/0x190
[  155.418031][ T6660]  should_fail_ex.cold+0x5/0xa
[  155.418054][ T6660]  _copy_from_user+0x2e/0xd0
[  155.418081][ T6660]  move_addr_to_kernel+0x65/0x170
[  155.418107][ T6660]  copy_msghdr_from_user+0x417/0x4f0
[  155.418132][ T6660]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  155.418168][ T6660]  ___sys_sendmsg+0x106/0x1e0
[  155.418194][ T6660]  ? __pfx____sys_sendmsg+0x10/0x10
[  155.418245][ T6660]  __sys_sendmsg+0x170/0x220
[  155.418265][ T6660]  ? __pfx___sys_sendmsg+0x10/0x10
[  155.418294][ T6660]  ? rcu_is_watching+0x12/0xc0
[  155.418324][ T6660]  do_syscall_64+0x10b/0x860
[  155.418356][ T6660]  ? clear_bhb_loop+0x40/0x90
[  155.418377][ T6660]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.418394][ T6660] RIP: 0033:0x7f4bff59ce59
[  155.418409][ T6660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  155.418425][ T6660] RSP: 002b:00007f4c003fc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  155.418443][ T6660] RAX: ffffffffffffffda RBX: 00007f4bff816090 RCX: 00007f4bff59ce59
[  155.418454][ T6660] RDX: 000000000004c844 RSI: 0000200000000380 RDI: 0000000000000009
[  155.418464][ T6660] RBP: 00007f4c003fc090 R08: 0000000000000000 R09: 0000000000000000
[  155.418474][ T6660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  155.418484][ T6660] R13: 00007f4bff816128 R14: 00007f4bff816090 R15: 00007ffce2892d18
[  155.418506][ T6660]  </TASK>
[  155.421523][ T6664] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  155.649277][ T6664] netlink: 52 bytes leftover after parsing attributes in process `syz.2.243'.
[  155.998447][   T29] audit: type=1400 audit(1779730020.964:372): avc:  denied  { create } for  pid=6662 comm="syz.4.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[  156.294675][ T5621] usb 5-1: new low-speed USB device number 15 using dummy_hcd
[  156.552643][ T5735] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  156.560295][ T5621] usb 5-1: Invalid ep0 maxpacket: 32
[  156.912560][ T5621] usb 5-1: new low-speed USB device number 16 using dummy_hcd
[  156.942519][ T5735] usb 2-1: Using ep0 maxpacket: 32
[  156.956878][ T5735] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  156.981265][ T5735] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.011105][   T29] audit: type=1400 audit(1779730021.984:373): avc:  denied  { write } for  pid=6669 comm="syz.0.246" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  157.033606][ T5735] usb 2-1: config 0 descriptor??
[  157.082604][ T5621] usb 5-1: Invalid ep0 maxpacket: 32
[  157.099996][ T5621] usb usb5-port1: attempt power cycle
[  157.108198][ T5735] as10x_usb: device has been detected
[  157.135823][ T5735] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  157.197548][ T5735] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  157.244069][ T5735] as10x_usb: error during firmware upload part1
[  157.257497][   T29] audit: type=1400 audit(1779730022.234:374): avc:  denied  { mount } for  pid=6683 comm="syz.2.250" name="/" dev="rpc_pipefs" ino=14631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[  157.267466][ T5735] Registered device nBox DVB-T Dongle
[  157.436524][ T6668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  157.463197][ T6668] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  157.487762][ T6689] netlink: 24 bytes leftover after parsing attributes in process `syz.3.251'.
[  157.513420][ T5621] usb 5-1: new low-speed USB device number 17 using dummy_hcd
[  157.536035][ T6668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  157.553634][ T5621] usb 5-1: Invalid ep0 maxpacket: 32
[  157.556520][ T6668] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  157.582568][ T5735] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  157.698722][ T5621] usb 5-1: new low-speed USB device number 18 using dummy_hcd
[  157.733504][ T5621] usb 5-1: Invalid ep0 maxpacket: 32
[  157.740057][ T5621] usb usb5-port1: unable to enumerate USB device
[  157.743831][ T5735] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  157.759207][ T5735] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  157.770108][ T5735] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.778171][ T5735] usb 3-1: Product: syz
[  157.782379][ T5735] usb 3-1: Manufacturer: syz
[  157.787128][ T5735] usb 3-1: SerialNumber: syz
[  157.796019][ T5735] usb 3-1: config 0 descriptor??
[  157.806831][ T5735] ums-isd200 3-1:0.0: USB Mass Storage device detected
[  157.853270][ T5728] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  158.052232][ T5621] usb 3-1: USB disconnect, device number 10
[  158.356917][ T5728] usb 4-1: Using ep0 maxpacket: 16
[  158.371490][ T5728] usb 4-1: config 0 has an invalid descriptor of length 222, skipping remainder of the config
[  158.392631][ T5728] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  158.441922][ T5804] usb 2-1: USB disconnect, device number 10
[  158.576613][ T5804] Unregistered device nBox DVB-T Dongle
[  158.588181][ T6701] netlink: 228 bytes leftover after parsing attributes in process `syz.4.254'.
[  158.616791][ T5804] as10x_usb: device has been disconnected
[  159.329078][ T5345] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  159.434671][ T6709] FAULT_INJECTION: forcing a failure.
[  159.434671][ T6709] name failslab, interval 1, probability 0, space 0, times 0
[  159.506925][ T6709] CPU: 0 UID: 0 PID: 6709 Comm: syz.2.257 Not tainted syzkaller #0 PREEMPT(full) 
[  159.506956][ T6709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  159.506967][ T6709] Call Trace:
[  159.506973][ T6709]  <TASK>
[  159.506979][ T6709]  dump_stack_lvl+0x100/0x190
[  159.507006][ T6709]  should_fail_ex.cold+0x5/0xa
[  159.507030][ T6709]  ? tomoyo_encode2+0xfb/0x3c0
[  159.507056][ T6709]  should_failslab+0xc2/0x120
[  159.507077][ T6709]  __kmalloc_noprof+0xe0/0x850
[  159.507103][ T6709]  ? d_absolute_path+0x136/0x1b0
[  159.507128][ T6709]  tomoyo_encode2+0xfb/0x3c0
[  159.507157][ T6709]  tomoyo_encode+0x29/0x50
[  159.507182][ T6709]  tomoyo_realpath_from_path+0x18c/0x690
[  159.507214][ T6709]  tomoyo_mount_acl+0x1b6/0x8b0
[  159.507237][ T6709]  ? is_bpf_text_address+0x8a/0x1a0
[  159.507262][ T6709]  ? bpf_ksym_find+0x128/0x1c0
[  159.507294][ T6709]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  159.507317][ T6709]  ? __pfx_tomoyo_mount_acl+0x10/0x10
[  159.507340][ T6709]  ? kernel_text_address+0x8d/0x100
[  159.507365][ T6709]  ? unwind_get_return_address+0x59/0xa0
[  159.507416][ T6709]  ? tomoyo_domain+0xb2/0x150
[  159.507433][ T6709]  ? tomoyo_profile+0x47/0x60
[  159.507452][ T6709]  tomoyo_mount_permission+0x214/0x460
[  159.507476][ T6709]  ? tomoyo_mount_permission+0x1f6/0x460
[  159.507502][ T6709]  ? __pfx_tomoyo_mount_permission+0x10/0x10
[  159.507527][ T6709]  ? irqentry_exit+0x24d/0x7e0
[  159.507565][ T6709]  security_sb_mount+0xdd/0x270
[  159.507590][ T6709]  path_mount+0x158/0x23d0
[  159.507622][ T6709]  ? __pfx_path_mount+0x10/0x10
[  159.507651][ T6709]  ? lockdep_hardirqs_on+0x78/0x100
[  159.507680][ T6709]  ? putname+0xb1/0x110
[  159.507703][ T6709]  ? kmem_cache_free+0x127/0x6c0
[  159.507737][ T6709]  ? __x64_sys_mount+0x293/0x310
[  159.507763][ T6709]  __x64_sys_mount+0x293/0x310
[  159.507791][ T6709]  ? __pfx___x64_sys_mount+0x10/0x10
[  159.507825][ T6709]  do_syscall_64+0x10b/0x860
[  159.507849][ T6709]  ? clear_bhb_loop+0x40/0x90
[  159.507871][ T6709]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.507889][ T6709] RIP: 0033:0x7f2b9019ce59
[  159.507905][ T6709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  159.507921][ T6709] RSP: 002b:00007f2b90f90028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  159.507938][ T6709] RAX: ffffffffffffffda RBX: 00007f2b90415fa0 RCX: 00007f2b9019ce59
[  159.507950][ T6709] RDX: 0000200000000200 RSI: 00002000000020c0 RDI: 0000000000000000
[  159.507960][ T6709] RBP: 00007f2b90f90090 R08: 0000200000002140 R09: 0000000000000000
[  159.507971][ T6709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  159.507980][ T6709] R13: 00007f2b90416038 R14: 00007f2b90415fa0 R15: 00007fffd9496368
[  159.508005][ T6709]  </TASK>
[  159.803670][ T6709] ERROR: Out of memory at tomoyo_realpath_from_path.
[  159.925475][ T5728] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  159.935320][ T5728] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  159.945214][ T5728] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  159.964093][ T5728] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  159.992261][ T5728] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  160.014989][   T29] audit: type=1400 audit(1779730024.984:375): avc:  denied  { setopt } for  pid=6710 comm="syz.1.258" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  160.041834][ T5728] usb 4-1: Manufacturer: syz
[  160.057667][ T5728] usb 4-1: config 0 descriptor??
[  160.282617][ T5735] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  160.375106][ T6718] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  160.861537][ T5345] usb 1-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99
[  160.909610][ T5345] usb 1-1: config 0 interface 0 has no altsetting 0
[  161.272387][ T5345] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  161.496853][ T5345] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  161.543283][ T5345] usb 1-1: Product: syz
[  161.650143][ T5345] usb 1-1: Manufacturer: syz
[  161.663136][ T5345] usb 1-1: SerialNumber: syz
[  161.789752][ T5728] rc_core: IR keymap rc-hauppauge not found
[  161.810281][ T5345] usb 1-1: config 0 descriptor??
[  161.948216][ T6707] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  161.979206][ T5728] Registered IR keymap rc-empty
[  161.984248][ T5728] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  162.022980][ T5728] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  162.043452][ T5728] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  162.043800][ T5345] usb 1-1: selecting invalid altsetting 0
[  162.057422][ T5728] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input24
[  162.079881][ T5735] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  162.090869][ T5735] usb 2-1: config 0 interface 0 has no altsetting 0
[  162.099491][ T5728] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  162.108752][ T5735] usb 2-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.00
[  162.120212][ T5735] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.132616][ T5728] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  162.141849][ T5735] usb 2-1: config 0 descriptor??
[  162.152663][ T5728] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  162.182587][ T5728] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  162.203765][ T5728] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  162.242828][ T5728] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  162.302824][ T5728] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  162.344881][ T6732] netlink: 28 bytes leftover after parsing attributes in process `syz.0.263'.
[  162.360988][ T5728] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  162.391155][ T6732] netlink: 'syz.0.263': attribute type 8 has an invalid length.
[  162.401603][ T6732] netlink: 209840 bytes leftover after parsing attributes in process `syz.0.263'.
[  162.411244][ T5728] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  162.416410][ T5345] usb 1-1: USB disconnect, device number 9
[  162.442595][ T5728] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  162.491082][ T5728] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  162.520608][ T5728] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  162.863515][ T5735] lg-g15 0003:046D:C227.0006: unknown main item tag 0x0
[  162.870510][ T5735] lg-g15 0003:046D:C227.0006: unknown main item tag 0x0
[  162.893110][   T29] audit: type=1400 audit(1779730027.874:376): avc:  denied  { create } for  pid=6710 comm="syz.1.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  162.918671][ T5728] usb 4-1: USB disconnect, device number 8
[  162.924653][ T5735] lg-g15 0003:046D:C227.0006: unknown main item tag 0x0
[  162.933495][ T5735] lg-g15 0003:046D:C227.0006: unknown main item tag 0x0
[  162.940616][ T5735] lg-g15 0003:046D:C227.0006: unknown main item tag 0x0
[  162.982118][ T5735] lg-g15 0003:046D:C227.0006: unknown main item tag 0x0
[  163.051934][ T5735] lg-g15 0003:046D:C227.0006: unknown main item tag 0x0
[  163.079435][   T29] audit: type=1400 audit(1779730027.944:377): avc:  denied  { execute } for  pid=6710 comm="syz.1.258" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=14701 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  163.096686][ T5735] lg-g15 0003:046D:C227.0006: unknown main item tag 0x0
[  163.184434][ T5735] lg-g15 0003:046D:C227.0006: unknown main item tag 0x0
[  163.202690][ T5735] lg-g15 0003:046D:C227.0006: unknown main item tag 0x0
[  163.222771][ T6740] vivid-000: =================  START STATUS  =================
[  163.250237][ T5735] lg-g15 0003:046D:C227.0006: hidraw0: USB HID vff.fd Device [HID 046d:c227] on usb-dummy_hcd.1-1/input0
[  163.262548][   T29] audit: type=1400 audit(1779730027.984:378): avc:  denied  { unmount } for  pid=5618 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  163.273646][ T6740] vivid-000: Test Pattern: 
[  163.299231][ T5735] usb 2-1: USB disconnect, device number 11
[  163.313358][ T6740] 75% Colorbar
[  163.334336][ T6740] vivid-000: Fill Percentage of Frame: 100
[  163.347650][ T6740] vivid-000: Horizontal Movement: No Movement
[  163.362607][ T5728] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  163.381191][ T6740] vivid-000: Vertical Movement: No Movement
[  163.382568][   T24] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  163.412677][ T6740] vivid-000: OSD Text Mode: All
[  163.417335][ T6741] fido_id[6741]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  163.417803][ T6740] vivid-000: Show Border: false
[  163.444825][ T6740] vivid-000: Show Square: false
[  163.462560][ T6740] vivid-000: Sensor Flipped Horizontally: false
[  163.473944][ T6740] vivid-000: Sensor Flipped Vertically: false
[  163.480371][ T6740] vivid-000: Insert SAV Code in Image: false
[  163.486809][ T6740] vivid-000: Insert EAV Code in Image: false
[  163.501493][ T6740] vivid-000: Insert Video Guard Band: false
[  163.509572][ T6740] vivid-000: Reduced Framerate: false
[  163.521037][ T6740] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator
[  163.529240][ T5728] usb 4-1: Using ep0 maxpacket: 16
[  163.536177][ T6740] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator
[  163.546828][ T6740] vivid-000: Enable Capture Cropping: true
[  163.552925][   T24] usb 3-1: Using ep0 maxpacket: 32
[  163.559845][ T5728] usb 4-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config
[  163.570977][ T5728] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  163.582171][ T6740] vivid-000: Enable Capture Composing: true
[  163.588962][ T6740] vivid-000: Enable Capture Scaler: true
[  163.595400][   T24] usb 3-1: config 0 has an invalid interface number: 188 but max is 0
[  163.603911][ T5728] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  163.613837][   T24] usb 3-1: config 0 has no interface number 0
[  163.619957][ T6740] vivid-000: Timestamp Source: End of Frame
[  163.631486][   T24] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  163.632627][ T6740] vivid-000: Colorspace: 
[  163.641598][ T5728] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  163.641624][ T5728] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  163.656375][ T5728] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  163.687517][   T24] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  163.696803][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.705153][ T6740] sRGB
[  163.707845][ T6740] vivid-000: Transfer Function: Default
[  163.712886][ T5728] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  163.713397][ T6740] vivid-000: Y'CbCr Encoding: Default
[  163.722925][   T24] usb 3-1: Product: syz
[  163.726709][ T6740] vivid-000: HSV Encoding: Hue 0-179
[  163.737171][ T6740] vivid-000: Quantization: Default
[  163.738247][ T5728] usb 4-1: Manufacturer: syz
[  163.762090][   T24] usb 3-1: Manufacturer: syz
[  163.774701][   T24] usb 3-1: SerialNumber: syz
[  163.782572][ T6740] vivid-000: Apply Alpha To Red Only: false
[  163.783792][ T5728] usb 4-1: config 0 descriptor??
[  163.788490][ T6740] vivid-000: Standard Aspect Ratio: 4x3
[  163.795386][   T24] usb 3-1: config 0 descriptor??
[  163.798929][ T6740] vivid-000: DV Timings Signal Mode: Current DV Timings inactive
[  163.805687][ T6738] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  163.825577][ T6740] vivid-000: DV Timings: 640x480p59 inactive
[  163.831673][ T6740] vivid-000: DV Timings Aspect Ratio: Source Width x Height
[  163.839412][ T6740] vivid-000: Maximum EDID Blocks: 2
[  163.845098][ T6740] vivid-000: Limited RGB Range (16-235): false
[  163.851782][ T6740] vivid-000: Rx RGB Quantization Range: Automatic
[  163.873376][ T6740] vivid-000: Power Present: 0x00000001
[  163.878973][ T6740] tpg source WxH: 320x240 (Y'CbCr)
[  163.884511][ T6740] tpg field: 1
[  163.887918][ T6740] tpg crop: (0,0)/320x240
[  163.892308][ T6740] tpg compose: (0,0)/320x240
[  163.897726][ T6740] tpg colorspace: 8
[  163.901560][ T6740] tpg transfer function: 0/0
[  163.906508][ T6740] tpg Y'CbCr encoding: 0/0
[  163.910956][ T6740] tpg quantization: 0/0
[  163.919536][ T6740] tpg RGB range: 0/2
[  163.929675][ T6740] vivid-000: ==================  END STATUS  ==================
[  164.049187][   T29] audit: type=1400 audit(1779730029.024:379): avc:  denied  { read write } for  pid=6747 comm="syz.1.268" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  164.093686][ T6738] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  164.137450][   T29] audit: type=1400 audit(1779730029.024:380): avc:  denied  { open } for  pid=6747 comm="syz.1.268" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  164.178813][   T29] audit: type=1400 audit(1779730029.024:381): avc:  denied  { ioctl } for  pid=6747 comm="syz.1.268" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  164.203839][ T6751] netlink: 24 bytes leftover after parsing attributes in process `syz.4.269'.
[  164.232783][ T5728] rc_core: IR keymap rc-hauppauge not found
[  164.238827][ T5728] Registered IR keymap rc-empty
[  164.244071][ T5728] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  164.407796][ T5728] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  164.434924][ T5728] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  164.448938][ T5728] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input25
[  164.463483][ T5728] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  164.482944][ T5728] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  164.512823][ T5728] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  164.532789][ T5728] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  164.603461][   T29] audit: type=1400 audit(1779730029.564:382): avc:  denied  { connect } for  pid=6753 comm="syz.0.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  164.672838][ T5728] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  164.783984][ T5728] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  164.873000][ T5728] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  164.945932][ T5728] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  165.294527][ T5728] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  165.307325][   T24] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  165.332775][   T24] asix 3-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  165.611437][ T5728] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  165.631182][   T24] asix 3-1:0.188: probe with driver asix failed with error -71
[  165.645626][ T5728] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  165.665593][ T6772] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  165.677108][ T6772] netlink: 52 bytes leftover after parsing attributes in process `syz.1.273'.
[  165.698994][   T24] usb 3-1: USB disconnect, device number 11
[  165.701823][ T6774] netlink: 'syz.0.274': attribute type 9 has an invalid length.
[  165.718354][ T6774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.274'.
[  165.720944][ T5728] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  165.799955][ T5728] usb 4-1: USB disconnect, device number 9
[  165.915760][   T29] audit: type=1400 audit(1779730030.894:383): avc:  denied  { connect } for  pid=6775 comm="syz.3.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  165.960607][ T6776] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6776 comm=syz.3.275
[  165.991991][   T29] audit: type=1400 audit(1779730030.954:384): avc:  denied  { block_suspend } for  pid=6778 comm="syz.4.276" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  166.095667][   T29] audit: type=1400 audit(1779730031.064:385): avc:  denied  { read } for  pid=6775 comm="syz.3.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  167.381271][ T6796] xt_nfacct: accounting object `syz1' does not exist
[  167.391249][ T6796] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6796 comm=syz.2.280
[  167.403572][ T6796] netlink: 27 bytes leftover after parsing attributes in process `syz.2.280'.
[  167.474760][   T50] Bluetooth: hci0: unexpected event for opcode 0x4889
[  167.530510][ T6800] syzkaller1: entered promiscuous mode
[  167.536016][ T6800] syzkaller1: entered allmulticast mode
[  167.731160][ T6805] netlink: 228 bytes leftover after parsing attributes in process `syz.3.283'.
[  169.093339][   T29] kauditd_printk_skb: 1 callbacks suppressed
[  169.093366][   T29] audit: type=1400 audit(1779730034.074:387): avc:  denied  { read append } for  pid=6814 comm="syz.3.287" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  169.364365][   T29] audit: type=1400 audit(1779730034.074:388): avc:  denied  { open } for  pid=6814 comm="syz.3.287" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  169.565978][ T6815] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio1-input.0)
[  170.350899][ T6824] netlink: 28 bytes leftover after parsing attributes in process `syz.2.288'.
[  170.396706][ T6824] netlink: 'syz.2.288': attribute type 8 has an invalid length.
[  170.405272][ T6824] netlink: 209840 bytes leftover after parsing attributes in process `syz.2.288'.
[  172.626098][ T2675] block nbd3: Possible stuck request ffff888027e57000: control (read@0,1024B). Runtime 30 seconds
[  172.638076][ T2675] block nbd3: Possible stuck request ffff888027e571c0: control (read@1024,1024B). Runtime 30 seconds
[  172.649004][ T2675] block nbd3: Possible stuck request ffff888027e57380: control (read@2048,1024B). Runtime 30 seconds
[  172.663213][ T2675] block nbd3: Possible stuck request ffff888027e57540: control (read@3072,1024B). Runtime 30 seconds
[  172.887383][ T6839] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  172.912326][ T6839] netlink: 52 bytes leftover after parsing attributes in process `syz.4.291'.
[  173.370522][ T6842] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[  173.380951][ T6842] overlayfs: failed to look up (tracing) for ino (-66)
[  173.976239][   T29] audit: type=1400 audit(1779730038.834:389): avc:  denied  { ioctl } for  pid=6845 comm="syz.1.294" path="/dev/input/event0" dev="devtmpfs" ino=918 ioctlcmd=0x45a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  174.196251][   T29] audit: type=1400 audit(1779730039.174:390): avc:  denied  { setopt } for  pid=6855 comm="syz.0.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  174.233227][ T6857] netlink: 'syz.0.298': attribute type 10 has an invalid length.
[  174.259445][ T6851] hfs: unable to load iocharset "io#harset"
[  174.292678][ T6857] 8021q: adding VLAN 0 to HW filter on device team0
[  174.309124][   T29] audit: type=1400 audit(1779730039.204:391): avc:  denied  { bind } for  pid=6855 comm="syz.0.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  174.419648][ T6856] Invalid ELF header type: 3 != 1
[  174.443420][ T6856] netlink: 20 bytes leftover after parsing attributes in process `syz.1.297'.
[  174.466669][ T6857] bond0: (slave team0): Enslaving as an active interface with an up link
[  174.496219][ T6861] netdevsim netdevsim3: Direct firmware load for .
[  174.496219][ T6861]  failed with error -2
[  174.518101][ T6861] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  174.518101][ T6861] 
[  177.732400][ T6875] can0: slcan on ttyS3.
[  177.739693][   T29] audit: type=1400 audit(1779730042.714:392): avc:  denied  { search } for  pid=5274 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  177.776853][   T29] audit: type=1400 audit(1779730042.714:393): avc:  denied  { search } for  pid=5274 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  177.799532][   T29] audit: type=1400 audit(1779730042.714:394): avc:  denied  { search } for  pid=5274 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  177.926481][   T29] audit: type=1400 audit(1779730042.714:395): avc:  denied  { read } for  pid=5274 comm="dhcpcd" name="n30" dev="tmpfs" ino=3346 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  177.928965][ T6875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.302'.
[  178.026077][ T6874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.303'.
[  178.036757][   T29] audit: type=1400 audit(1779730042.714:396): avc:  denied  { open } for  pid=5274 comm="dhcpcd" path="/run/udev/data/n30" dev="tmpfs" ino=3346 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  178.088500][ T6874] IPVS: set_ctl: invalid protocol: 41 224.0.0.2:20001
[  178.115168][ T5728] IPVS: starting estimator thread 0...
[  178.175754][   T29] audit: type=1400 audit(1779730042.714:397): avc:  denied  { getattr } for  pid=5274 comm="dhcpcd" path="/run/udev/data/n30" dev="tmpfs" ino=3346 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  178.212680][ T6880] IPVS: using max 45 ests per chain, 108000 per kthread
[  178.261239][ T6012] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  178.267674][   T29] audit: type=1400 audit(1779730043.234:398): avc:  denied  { read } for  pid=6884 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  178.293051][ T6012] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  178.310224][ T6012] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  178.354106][   T29] audit: type=1400 audit(1779730043.234:399): avc:  denied  { read open } for  pid=6884 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  178.389130][ T6012] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  178.713761][ T6869] syz.3.301 (6869): drop_caches: 2
[  178.776745][ T6898] netlink: 24 bytes leftover after parsing attributes in process `syz.0.305'.
[  178.839433][ T6873] can0 (unregistered): slcan off ttyS3.
[  179.440507][ T6914] netlink: 228 bytes leftover after parsing attributes in process `syz.1.309'.
[  179.522319][ T6918] netlink: 4 bytes leftover after parsing attributes in process `syz.3.310'.
[  179.560602][ T6918] vlan2: entered allmulticast mode
[  179.580603][ T6918] bond0: entered allmulticast mode
[  179.587377][ T6918] bond_slave_0: entered allmulticast mode
[  179.607940][ T6918] bond_slave_1: entered allmulticast mode
[  179.626879][ T6919] netlink: 14 bytes leftover after parsing attributes in process `syz.3.310'.
[  179.671884][ T6919] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  179.697365][ T6919] bond_slave_0: left allmulticast mode
[  179.705962][ T6919] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  179.721870][ T6919] bond_slave_1: left allmulticast mode
[  179.731752][ T6919] bond0 (unregistering): Released all slaves
[  179.953038][   T29] kauditd_printk_skb: 9 callbacks suppressed
[  179.953053][   T29] audit: type=1400 audit(1779730044.934:409): avc:  denied  { write } for  pid=6904 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  179.983384][ T5735] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  180.229382][ T5735] usb 5-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99
[  180.265570][ T5735] usb 5-1: config 0 interface 0 has no altsetting 0
[  180.296088][ T5735] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  180.315607][ T5735] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  180.335894][ T5735] usb 5-1: Product: syz
[  180.572739][ T5728] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  180.598302][ T5735] usb 5-1: Manufacturer: syz
[  180.689942][ T5735] usb 5-1: SerialNumber: syz
[  180.707131][ T5735] usb 5-1: config 0 descriptor??
[  180.719792][ T6923] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  180.741032][ T5735] usb 5-1: selecting invalid altsetting 0
[  180.754862][   T50] Bluetooth: hci0: unexpected event for opcode 0x4889
[  180.782505][   T29] audit: type=1400 audit(1779730045.744:410): avc:  denied  { write } for  pid=6936 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  180.881521][ T5728] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  180.941501][ T5728] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  180.961938][ T5728] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  180.984605][ T5728] usb 3-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00
[  181.005666][ T5728] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.028510][ T5728] usb 3-1: config 0 descriptor??
[  181.035502][ T5735] usb 5-1: USB disconnect, device number 19
[  181.580941][ T5728] hid_parser_main: 25 callbacks suppressed
[  181.580962][ T5728] wacom 0003:056A:0010.0007: unknown main item tag 0x0
[  181.613613][ T5728] wacom 0003:056A:0010.0007: Unknown device_type for 'HID 056a:0010'. Assuming pen.
[  181.651988][ T5728] wacom 0003:056A:0010.0007: hidraw0: USB HID v0.00 Device [HID 056a:0010] on usb-dummy_hcd.2-1/input0
[  181.686372][ T5728] input: Wacom Graphire Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0010.0007/input/input26
[  181.733469][   T29] audit: type=1400 audit(1779730046.714:411): avc:  denied  { read } for  pid=4963 comm="acpid" name="mouse1" dev="devtmpfs" ino=3065 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  181.774829][ T6937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.314'.
[  181.853109][   T29] audit: type=1400 audit(1779730046.714:412): avc:  denied  { open } for  pid=4963 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3065 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  181.957079][   T29] audit: type=1400 audit(1779730046.774:413): avc:  denied  { ioctl } for  pid=4963 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3065 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  182.019997][ T5728] usb 3-1: USB disconnect, device number 12
[  182.106697][ T6961] netlink: 60 bytes leftover after parsing attributes in process `syz.0.318'.
[  182.207612][ T6964] netlink: 60 bytes leftover after parsing attributes in process `syz.0.318'.
[  183.412290][ T6972] netlink: 24 bytes leftover after parsing attributes in process `syz.4.324'.
[  184.777013][   T29] audit: type=1400 audit(1779730049.754:414): avc:  denied  { mount } for  pid=6974 comm="syz.3.323" name="/" dev="ramfs" ino=16386 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  184.811554][ T6985] netlink: 28 bytes leftover after parsing attributes in process `syz.1.326'.
[  184.935745][ T6985] netlink: 'syz.1.326': attribute type 8 has an invalid length.
[  184.977910][   T29] audit: type=1400 audit(1779730049.874:415): avc:  denied  { map } for  pid=6974 comm="syz.3.323" path="/dev/video4" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  185.034723][ T6985] netlink: 209840 bytes leftover after parsing attributes in process `syz.1.326'.
[  185.621859][ T5625] Bluetooth: hci3: command 0x0406 tx timeout
[  185.621897][ T5625] Bluetooth: hci0: command 0x0401 tx timeout
[  185.621923][ T5625] Bluetooth: hci2: command 0x0406 tx timeout
[  186.006621][   T29] audit: type=1400 audit(1779730050.984:416): avc:  denied  { execute } for  pid=6987 comm="syz.2.327" name="file0" dev="tmpfs" ino=379 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  186.006985][ T6989] process 'syz.2.327' launched './file0' with NULL argv: empty string added
[  186.037639][   T29] audit: type=1400 audit(1779730051.014:417): avc:  denied  { execute_no_trans } for  pid=6987 comm="syz.2.327" path="/70/file0" dev="tmpfs" ino=379 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  186.148903][ T6989] 
ÿ: renamed from dummy0 (while UP)
[  186.182527][   T24] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  186.332613][   T24] usb 1-1: Using ep0 maxpacket: 32
[  186.333934][   T24] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  186.333959][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.336123][   T24] usb 1-1: config 0 descriptor??
[  186.340394][   T24] as10x_usb: device has been detected
[  186.367967][   T24] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  186.586524][ T6970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  186.634552][   T24] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  186.679735][   T24] as10x_usb: error during firmware upload part1
[  186.694081][   T42] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  186.710247][   T24] Registered device nBox DVB-T Dongle
[  186.752210][ T6970] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  186.862515][   T42] usb 2-1: Using ep0 maxpacket: 16
[  186.877680][   T42] usb 2-1: config 0 has an invalid descriptor of length 222, skipping remainder of the config
[  186.922176][   T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  186.955280][   T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  187.004400][   T42] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  187.036299][   T42] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  187.119854][   T42] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  187.133875][   T42] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  187.142251][   T42] usb 2-1: Manufacturer: syz
[  187.173896][ T6970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  187.209547][ T6970] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  187.259371][   T42] usb 2-1: config 0 descriptor??
[  187.297609][ T7004] Invalid ELF header type: 3 != 1
[  187.306346][ T7004] netlink: 20 bytes leftover after parsing attributes in process `syz.3.331'.
[  187.403843][ T7001] hfs: unable to load iocharset "io#harset"
[  187.812677][   T42] rc_core: IR keymap rc-hauppauge not found
[  187.866982][   T42] Registered IR keymap rc-empty
[  187.905676][   T42] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  188.014530][   T42] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  188.254504][   T42] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  188.340246][   T24] usb 1-1: USB disconnect, device number 10
[  188.357933][   T42] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input29
[  188.427463][ T7010] netlink: 12 bytes leftover after parsing attributes in process `syz.2.332'.
[  188.582220][   T29] audit: type=1400 audit(1779730053.554:418): avc:  denied  { mounton } for  pid=7007 comm="syz.2.332" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  188.590054][   T24] Unregistered device nBox DVB-T Dongle
[  188.639285][ T7010] Can't find a SQUASHFS superblock on nullb0
[  188.752427][ T1309] ieee802154 phy0 wpan0: encryption failed: -22
[  188.777592][ T1309] ieee802154 phy1 wpan1: encryption failed: -22
[  189.831835][   T24] as10x_usb: device has been disconnected
[  189.870634][   T42] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  189.892576][   T42] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  189.912769][   T42] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  189.990910][   T42] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  190.012640][   T42] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  190.312304][   T42] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  190.396756][   T42] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  190.414078][   T42] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  190.433087][   T42] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  190.453081][   T42] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  190.474635][   T42] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  190.474660][   T42] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  190.491710][   T42] usb 2-1: USB disconnect, device number 12
[  190.837312][ T7032] FAULT_INJECTION: forcing a failure.
[  190.837312][ T7032] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  190.881728][ T7032] CPU: 1 UID: 0 PID: 7032 Comm: syz.1.340 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  190.881761][ T7032] Tainted: [L]=SOFTLOCKUP
[  190.881767][ T7032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  190.881777][ T7032] Call Trace:
[  190.881783][ T7032]  <TASK>
[  190.881790][ T7032]  dump_stack_lvl+0x100/0x190
[  190.881816][ T7032]  should_fail_ex.cold+0x5/0xa
[  190.881836][ T7032]  ? prepare_alloc_pages+0x16d/0x5f0
[  190.881861][ T7032]  should_fail_alloc_page+0xeb/0x140
[  190.881882][ T7032]  prepare_alloc_pages+0x1f0/0x5f0
[  190.881907][ T7032]  __alloc_frozen_pages_noprof+0x19a/0x2bc0
[  190.881936][ T7032]  ? stack_depot_save_flags+0x27/0x9d0
[  190.881956][ T7032]  ? stack_trace_save+0x8e/0xc0
[  190.881977][ T7032]  ? kasan_save_stack+0x3f/0x50
[  190.881991][ T7032]  ? kasan_save_stack+0x30/0x50
[  190.882005][ T7032]  ? kasan_save_track+0x14/0x30
[  190.882020][ T7032]  ? __kasan_slab_alloc+0x89/0x90
[  190.882036][ T7032]  ? kmem_cache_alloc_noprof+0x241/0x6e0
[  190.882061][ T7032]  ? security_file_alloc+0x34/0x2c0
[  190.882085][ T7032]  ? init_file+0x95/0x480
[  190.882106][ T7032]  ? alloc_empty_file+0x79/0x1c0
[  190.882129][ T7032]  ? alloc_file_pseudo+0x13a/0x230
[  190.882154][ T7032]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  190.882179][ T7032]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  190.882209][ T7032]  ? __lock_acquire+0x4a5/0x2630
[  190.882228][ T7032]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  190.882249][ T7032]  ? policy_nodemask+0xed/0x4f0
[  190.882269][ T7032]  alloc_pages_mpol+0x1fb/0x540
[  190.882290][ T7032]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  190.882310][ T7032]  ? filemap_get_entry+0x22d/0x450
[  190.882325][ T7032]  ? filemap_get_entry+0x22d/0x450
[  190.882345][ T7032]  folio_alloc_noprof+0x22/0x250
[  190.882368][ T7032]  filemap_alloc_folio_noprof.part.0+0x377/0x450
[  190.882389][ T7032]  ? percpu_counter_add_batch+0xb9/0x230
[  190.882409][ T7032]  ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10
[  190.882436][ T7032]  ? alloc_file_pseudo+0x1a5/0x230
[  190.882468][ T7032]  __filemap_get_folio_mpol+0x6a4/0xe70
[  190.882490][ T7032]  ioctx_alloc+0x7e1/0x21a0
[  190.882517][ T7032]  ? __pfx_ioctx_alloc+0x10/0x10
[  190.882541][ T7032]  __x64_sys_io_setup+0xc9/0x220
[  190.882559][ T7032]  do_syscall_64+0x10b/0x860
[  190.882584][ T7032]  ? clear_bhb_loop+0x40/0x90
[  190.882604][ T7032]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  190.882620][ T7032] RIP: 0033:0x7f6d1d39ce59
[  190.882636][ T7032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  190.882651][ T7032] RSP: 002b:00007f6d1e244028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce
[  190.882669][ T7032] RAX: ffffffffffffffda RBX: 00007f6d1d615fa0 RCX: 00007f6d1d39ce59
[  190.882680][ T7032] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000008
[  190.882690][ T7032] RBP: 00007f6d1e244090 R08: 0000000000000000 R09: 0000000000000000
[  190.882700][ T7032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  190.882709][ T7032] R13: 00007f6d1d616038 R14: 00007f6d1d615fa0 R15: 00007ffd229a6268
[  190.882732][ T7032]  </TASK>
[  191.043867][ T5621] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  191.481531][ T7040] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  191.492027][ T7040] netlink: 52 bytes leftover after parsing attributes in process `syz.1.342'.
[  191.528094][   T29] audit: type=1400 audit(1779730056.454:419): avc:  denied  { mounton } for  pid=7035 comm="syz.1.342" path="/60/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  191.583698][ T7041] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[  191.594688][ T7041] overlayfs: failed to look up (tracing) for ino (-66)
[  191.868046][ T5621] usb 4-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99
[  191.917283][ T5621] usb 4-1: config 0 interface 0 has no altsetting 0
[  191.935186][ T5621] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  191.951330][ T5621] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  191.961225][ T5621] usb 4-1: Product: syz
[  191.965771][ T5621] usb 4-1: Manufacturer: syz
[  191.972409][ T5621] usb 4-1: SerialNumber: syz
[  192.016817][ T5621] usb 4-1: config 0 descriptor??
[  192.031847][ T7030] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  192.055643][ T5621] usb 4-1: selecting invalid altsetting 0
[  192.064293][ T7038] lo speed is unknown, defaulting to 1000
[  192.127115][ T7023] syz.2.337 (7023): drop_caches: 2
[  192.537827][ T7048] hfs: unable to load iocharset "io#harset"
[  192.770104][   T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  192.932407][ T7048] Invalid ELF header type: 3 != 1
[  192.948431][ T7048] netlink: 20 bytes leftover after parsing attributes in process `syz.1.345'.
[  193.009081][ T5728] usb 4-1: USB disconnect, device number 10
[  193.247998][   T24] usb 3-1: Using ep0 maxpacket: 16
[  193.642837][   T24] usb 3-1: config 0 contains an unexpected descriptor of type 0x1, skipping
[  193.651663][   T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  193.661942][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  193.673795][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  193.683785][   T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  193.693965][   T24] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  193.707848][   T24] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  193.717193][   T24] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  193.725361][   T24] usb 3-1: Manufacturer: syz
[  193.732018][   T24] usb 3-1: config 0 descriptor??
[  194.029474][ T7057] netlink: 228 bytes leftover after parsing attributes in process `syz.3.347'.
[  194.050700][ T7034] lo speed is unknown, defaulting to 1000
[  194.162529][   T24] rc_core: IR keymap rc-hauppauge not found
[  194.180791][   T24] Registered IR keymap rc-empty
[  194.195696][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  194.232636][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  194.269735][ T7059] netlink: 28 bytes leftover after parsing attributes in process `syz.1.348'.
[  194.287258][ T7059] netlink: 'syz.1.348': attribute type 8 has an invalid length.
[  194.300902][ T7059] netlink: 209840 bytes leftover after parsing attributes in process `syz.1.348'.
[  194.315106][   T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  194.347876][   T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input30
[  194.393047][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  194.422854][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  194.452660][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  194.502808][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  194.568471][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  194.653370][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  194.702820][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  194.755183][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  194.841985][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  194.909040][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  194.958959][   T24] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  194.986928][   T24] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  195.066761][   T24] usb 3-1: USB disconnect, device number 13
[  195.253967][ T5621] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[  195.436536][ T5621] usb 4-1: not running at top speed; connect to a high speed hub
[  195.455912][ T5621] usb 4-1: config 157 has an invalid interface number: 35 but max is 0
[  195.509973][ T5621] usb 4-1: config 157 has no interface number 0
[  195.533478][ T5621] usb 4-1: config 157 interface 35 has no altsetting 0
[  195.548868][ T5621] usb 4-1: string descriptor 0 read error: -22
[  195.556079][ T5621] usb 4-1: New USB device found, idVendor=153b, idProduct=1182, bcdDevice=63.be
[  195.565884][ T5621] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.636765][ T5621] dvb-usb: found a 'Terratec Cinergy S2 PCIe Dual Port 2' in warm state.
[  195.766071][ T5621] dw2102: su3000_power_ctrl: 1, initialized 0
[  195.775117][ T7075] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio1-input.0)
[  195.871716][ T5621] dvb-usb: bulk message failed: -22 (2/0)
[  196.160337][ T7068] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  196.752813][ T7066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  196.844953][ T5621] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  196.876682][ T7066] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  196.922091][ T5621] dvb-usb: Terratec Cinergy S2 PCIe Dual Port 2 error while loading driver (-19)
[  197.075735][ T7066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  197.128610][ T7066] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  197.356204][   T50] Bluetooth: hci0: command 0x0401 tx timeout
[  197.372392][ T7090] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  197.384228][ T7090] netlink: 52 bytes leftover after parsing attributes in process `syz.1.356'.
[  198.326015][ T7096] Invalid ELF header type: 3 != 1
[  198.338498][ T7096] netlink: 20 bytes leftover after parsing attributes in process `syz.4.358'.
[  198.359620][   T42] usb 4-1: USB disconnect, device number 11
[  198.540170][ T7093] hfs: unable to load iocharset "io#harset"
[  200.372456][   T29] audit: type=1400 audit(1779730065.274:420): avc:  denied  { getopt } for  pid=7105 comm="syz.3.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  200.442518][   T29] audit: type=1400 audit(1779730065.274:421): avc:  denied  { create } for  pid=7107 comm="syz.0.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  200.531521][   T29] audit: type=1400 audit(1779730065.324:422): avc:  denied  { setattr } for  pid=7105 comm="syz.3.362" name="tty26" dev="devtmpfs" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1
[  200.616862][   T29] audit: type=1400 audit(1779730065.324:423): avc:  denied  { write } for  pid=7105 comm="syz.3.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  200.643765][   T29] audit: type=1400 audit(1779730065.324:424): avc:  denied  { setopt } for  pid=7105 comm="syz.3.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  200.663598][   T29] audit: type=1400 audit(1779730065.324:425): avc:  denied  { ioctl } for  pid=7105 comm="syz.3.362" path="socket:[15880]" dev="sockfs" ino=15880 ioctlcmd=0x510a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  200.698897][   T29] audit: type=1400 audit(1779730065.324:426): avc:  denied  { write } for  pid=7107 comm="syz.0.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  200.757688][   T29] audit: type=1400 audit(1779730065.324:427): avc:  denied  { ioctl } for  pid=7107 comm="syz.0.361" path="socket:[15885]" dev="sockfs" ino=15885 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  200.777239][ T5621] usb 1-1: new low-speed USB device number 11 using dummy_hcd
[  200.794901][ T7120] netlink: 48 bytes leftover after parsing attributes in process `syz.4.364'.
[  200.821674][   T29] audit: type=1400 audit(1779730065.484:428): avc:  denied  { write } for  pid=7105 comm="syz.3.362" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  200.849325][   T29] audit: type=1400 audit(1779730065.484:429): avc:  denied  { ioctl } for  pid=7105 comm="syz.3.362" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  201.427244][ T5621] usb 1-1: Invalid ep0 maxpacket: 32
[  201.634677][ T7127] IPVS: set_ctl: invalid protocol: 115 172.20.20.170:20001
[  201.652718][ T5621] usb 1-1: new low-speed USB device number 12 using dummy_hcd
[  201.708131][ T7130] IPVS: set_ctl: invalid protocol: 4 224.0.0.1:20000
[  201.826760][ T5621] usb 1-1: Invalid ep0 maxpacket: 32
[  201.930281][ T5621] usb usb1-port1: attempt power cycle
[  201.959279][ T7132] netlink: 228 bytes leftover after parsing attributes in process `syz.3.367'.
[  202.409134][ T5621] usb 1-1: new low-speed USB device number 13 using dummy_hcd
[  202.532080][ T5621] usb 1-1: Invalid ep0 maxpacket: 32
[  202.681282][ T5621] usb 1-1: new low-speed USB device number 14 using dummy_hcd
[  202.712723][ T2675] block nbd3: Possible stuck request ffff888027e57000: control (read@0,1024B). Runtime 60 seconds
[  202.725824][ T2675] block nbd3: Possible stuck request ffff888027e571c0: control (read@1024,1024B). Runtime 60 seconds
[  202.737290][ T5621] usb 1-1: Invalid ep0 maxpacket: 32
[  202.737580][ T5621] usb usb1-port1: unable to enumerate USB device
[  202.742729][ T2675] block nbd3: Possible stuck request ffff888027e57380: control (read@2048,1024B). Runtime 60 seconds
[  202.742779][ T2675] block nbd3: Possible stuck request ffff888027e57540: control (read@3072,1024B). Runtime 60 seconds
[  202.901104][ T7145] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  202.919080][ T7145] netlink: 52 bytes leftover after parsing attributes in process `syz.1.373'.
[  203.033623][ T7146] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[  203.044450][ T7146] overlayfs: failed to look up (tracing) for ino (-66)
[  203.812587][   T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  203.820953][ T5804] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  204.373598][   T10] usb 4-1: Using ep0 maxpacket: 16
[  204.477108][   T10] usb 4-1: config 0 has an invalid descriptor of length 196, skipping remainder of the config
[  204.502540][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  204.514726][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  204.526797][   T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  204.527025][ T5804] usb 5-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99
[  204.548124][   T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  204.564662][ T5804] usb 5-1: config 0 interface 0 has no altsetting 0
[  204.573197][   T10] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  204.584146][ T5804] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  204.594889][   T10] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  204.603542][ T5804] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  204.612090][   T10] usb 4-1: Manufacturer: syz
[  204.617404][ T5804] usb 5-1: Product: syz
[  204.624214][ T5804] usb 5-1: Manufacturer: syz
[  204.635249][   T10] usb 4-1: config 0 descriptor??
[  204.640427][ T5804] usb 5-1: SerialNumber: syz
[  204.664390][ T5804] usb 5-1: config 0 descriptor??
[  204.681766][ T7137] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  204.696934][ T5804] usb 5-1: selecting invalid altsetting 0
[  309.866517][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  309.873484][    C1] rcu: 	(detected by 1, t=10506 jiffies, g=24077, q=296 ncpus=2)
[  309.881188][    C1] rcu: All QSes seen, last rcu_preempt kthread activity 10506 (4294968156-4294957650), jiffies_till_next_fqs=1, root ->qsmask 0x0
[  309.894538][    C1] rcu: rcu_preempt kthread starved for 10506 jiffies! g24077 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[  309.905717][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  309.915667][    C1] rcu: RCU grace-period kthread stack dump:
[  309.921534][    C1] task:rcu_preempt     state:R  running task     stack:28904 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
[  309.935013][    C1] Call Trace:
[  309.938280][    C1]  <TASK>
[  309.941375][    C1]  __schedule+0x1295/0x67a0
[  309.945896][    C1]  ? __pfx___schedule+0x10/0x10
[  309.950749][    C1]  ? find_held_lock+0x2b/0x80
[  309.955414][    C1]  ? schedule+0x2bf/0x390
[  309.959750][    C1]  schedule+0xdd/0x390
[  309.963812][    C1]  schedule_timeout+0x127/0x280
[  309.968653][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[  309.974023][    C1]  ? __pfx_process_timeout+0x10/0x10
[  309.979319][    C1]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  309.985118][    C1]  ? prepare_to_swait_event+0xdf/0x4a0
[  309.990577][    C1]  rcu_gp_fqs_loop+0x1a9/0x900
[  309.995340][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  310.000620][    C1]  ? prepare_to_swait_event+0xae/0x4a0
[  310.006071][    C1]  ? __pfx_rcu_gp_init+0x10/0x10
[  310.011001][    C1]  ? __pfx_rcu_gp_cleanup+0x10/0x10
[  310.016199][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  310.022005][    C1]  rcu_gp_kthread+0x179/0x230
[  310.026678][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  310.031864][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  310.037674][    C1]  ? __kthread_parkme+0x18c/0x230
[  310.042690][    C1]  ? kthread+0x13a/0x450
[  310.046924][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  310.052110][    C1]  kthread+0x370/0x450
[  310.056175][    C1]  ? __pfx_kthread+0x10/0x10
[  310.060846][    C1]  ret_from_fork+0x72b/0xd50
[  310.065428][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  310.070534][    C1]  ? __switch_to+0x800/0x1100
[  310.075208][    C1]  ? __pfx_kthread+0x10/0x10
[  310.079791][    C1]  ret_from_fork_asm+0x1a/0x30
[  310.084564][    C1]  </TASK>
[  310.087578][    C1] rcu: Stack dump where RCU GP kthread last ran:
[  310.093882][    C1] Sending NMI from CPU 1 to CPUs 0:
[  310.099082][    C0] NMI backtrace for cpu 0
[  310.099096][    C0] CPU: 0 UID: 0 PID: 5618 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  310.099115][    C0] Tainted: [L]=SOFTLOCKUP
[  310.099120][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  310.099128][    C0] RIP: 0010:check_preemption_disabled+0x1a/0xe0
[  310.099145][    C0] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 54 55 53 48 83 ec 08 65 8b 1d f5 07 80 08 65 f7 05 e6 07 80 08 ff ff ff 7f <74> 0f 48 83 c4 08 89 d8 5b 5d 41 5c e9 c5 22 03 00 9c 58 f6 c4 02
[  310.099158][    C0] RSP: 0018:ffffc90000007d18 EFLAGS: 00000002
[  310.099170][    C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000002
[  310.099178][    C0] RDX: 0000000000000000 RSI: ffffffff8e015b5d RDI: ffffffff8c1c4500
[  310.099186][    C0] RBP: ffffffff8502b344 R08: 0000000000000001 R09: fffff52000000fa2
[  310.099195][    C0] R10: 0000000000000003 R11: 0000000000000001 R12: ffff888076394a00
[  310.099203][    C0] R13: dffffc0000000000 R14: 0000000000000006 R15: 1ffff92000000fb6
[  310.099212][    C0] FS:  0000555584f85500(0000) GS:ffff88812436a000(0000) knlGS:0000000000000000
[  310.099226][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  310.099235][    C0] CR2: 00007f2b903ea2f8 CR3: 000000005983b000 CR4: 00000000003526f0
[  310.099243][    C0] Call Trace:
[  310.099249][    C0]  <IRQ>
[  310.099254][    C0]  ? debug_object_deactivate+0x2e4/0x3b0
[  310.099274][    C0]  lock_release+0x9a/0x310
[  310.099291][    C0]  _raw_spin_unlock_irqrestore+0x1a/0x80
[  310.099310][    C0]  debug_object_deactivate+0x2e4/0x3b0
[  310.099329][    C0]  ? __pfx_debug_object_deactivate+0x10/0x10
[  310.099349][    C0]  ? timerqueue_linked_add+0x260/0x430
[  310.099365][    C0]  __hrtimer_run_queues+0x2f0/0xa00
[  310.099387][    C0]  ? rcu_is_watching+0x12/0xc0
[  310.099407][    C0]  hrtimer_interrupt+0x3e5/0x940
[  310.099424][    C0]  __sysvec_apic_timer_interrupt+0x10b/0x460
[  310.099443][    C0]  sysvec_apic_timer_interrupt+0x9e/0xc0
[  310.099462][    C0]  </IRQ>
[  310.099466][    C0]  <TASK>
[  310.099471][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  310.099487][    C0] RIP: 0010:__sanitizer_cov_trace_pc+0xb/0x70
[  310.099509][    C0] Code: 61 00 be 03 00 00 00 5b e9 52 18 f1 02 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 65 8b 05 45 ae 02 12 <48> 8b 34 24 65 48 8b 15 21 ae 02 12 a9 00 01 ff 00 74 1b f6 c4 01
[  310.099521][    C0] RSP: 0018:ffffc90002e7f568 EFLAGS: 00000246
[  310.099531][    C0] RAX: 0000000080000000 RBX: 0000000000000000 RCX: ffffffff8273a3ed
[  310.099540][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888076394a00
[  310.099548][    C0] RBP: 0000000000000dc0 R08: 0000000000000005 R09: 0000000000000000
[  310.099556][    C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  310.099563][    C0] R13: 0000000000000000 R14: ffffc90000000000 R15: fffff52000663600
[  310.099574][    C0]  ? alloc_frozen_pages_noprof+0x3d/0x160
[  310.099594][    C0]  alloc_frozen_pages_noprof+0x4a/0x160
[  310.099612][    C0]  alloc_pages_noprof+0x1a/0x160
[  310.099628][    C0]  get_free_pages_noprof+0x10/0xb0
[  310.099642][    C0]  __kasan_populate_vmalloc+0xa0/0x210
[  310.099663][    C0]  alloc_vmap_area+0x95d/0x2b70
[  310.099682][    C0]  ? __pfx_alloc_vmap_area+0x10/0x10
[  310.099699][    C0]  __get_vm_area_node+0x1ca/0x330
[  310.099716][    C0]  __vmalloc_node_range_noprof+0x228/0x1630
[  310.099734][    C0]  ? do_ip6t_get_ctl+0x696/0xac0
[  310.099753][    C0]  ? trace_contention_end+0x122/0x170
[  310.099771][    C0]  ? __mutex_lock+0x26d/0x1b10
[  310.099782][    C0]  ? __lock_acquire+0x4a5/0x2630
[  310.099799][    C0]  ? do_ip6t_get_ctl+0x696/0xac0
[  310.099818][    C0]  ? __pfx___mutex_lock+0x10/0x10
[  310.099831][    C0]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  310.099849][    C0]  ? net_generic+0xea/0x2a0
[  310.099861][    C0]  ? net_generic+0xea/0x2a0
[  310.099880][    C0]  ? do_ip6t_get_ctl+0x696/0xac0
[  310.099897][    C0]  __vmalloc_node_noprof+0xad/0xf0
[  310.099914][    C0]  ? do_ip6t_get_ctl+0x696/0xac0
[  310.099933][    C0]  do_ip6t_get_ctl+0x696/0xac0
[  310.099951][    C0]  ? __mutex_unlock_slowpath+0x15d/0x8a0
[  310.099971][    C0]  ? __lock_acquire+0x483/0x2630
[  310.099988][    C0]  ? __pfx_do_ip6t_get_ctl+0x10/0x10
[  310.100010][    C0]  ? nf_sockopt_find.isra.0+0x222/0x290
[  310.100025][    C0]  nf_getsockopt+0x7c/0xe0
[  310.100037][    C0]  ipv6_getsockopt+0x207/0x2a0
[  310.100058][    C0]  ? __pfx_ipv6_getsockopt+0x10/0x10
[  310.100077][    C0]  ? _copy_from_user+0x59/0xd0
[  310.100096][    C0]  ? copy_from_sockptr_offset.constprop.0+0xe2/0x150
[  310.100117][    C0]  tcp_getsockopt+0xa1/0x110
[  310.100134][    C0]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  310.100152][    C0]  do_sock_getsockopt+0x50a/0x6e0
[  310.100170][    C0]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  310.100188][    C0]  ? nf_sockopt_find.isra.0+0x222/0x290
[  310.100202][    C0]  ? nf_setsockopt+0xb9/0xf0
[  310.100216][    C0]  ? do_sock_setsockopt+0x101/0x1d0
[  310.100231][    C0]  ? kfree+0x1dd/0x6c0
[  310.100247][    C0]  ? tcp_setsockopt+0xae/0x100
[  310.100264][    C0]  __sys_getsockopt+0x148/0x260
[  310.100280][    C0]  ? __x64_sys_getsockopt+0xbd/0x160
[  310.100294][    C0]  __x64_sys_getsockopt+0xbd/0x160
[  310.100307][    C0]  ? do_syscall_64+0x90/0x860
[  310.100324][    C0]  ? lockdep_hardirqs_on+0x78/0x100
[  310.100342][    C0]  do_syscall_64+0x10b/0x860
[  310.100360][    C0]  ? clear_bhb_loop+0x40/0x90
[  310.100375][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.100388][    C0] RIP: 0033:0x7f2b9019e62a
[  310.100400][    C0] Code: 48 83 ec 10 89 d2 48 63 ff 45 31 c9 6a 2a 45 31 c0 31 c9 e8 d8 99 fb ff 48 83 c4 18 c3 0f 1f 00 49 89 ca b8 37 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7
[  310.100412][    C0] RSP: 002b:00007fffd9495fd8 EFLAGS: 00000212 ORIG_RAX: 0000000000000037
[  310.100424][    C0] RAX: ffffffffffffffda RBX: 00007fffd9496060 RCX: 00007f2b9019e62a
[  310.100433][    C0] RDX: 0000000000000041 RSI: 0000000000000029 RDI: 0000000000000003
[  310.100441][    C0] RBP: 0000000000000003 R08: 00007fffd9495ffc R09: 0000000000000000
[  310.100450][    C0] R10: 00007fffd9496060 R11: 0000000000000212 R12: 00007f2b903ea900
[  310.100459][    C0] R13: 00007fffd9495ffc R14: 0000000000000000 R15: 00007f2b903eafc0
[  310.100472][    C0]  </TASK>