last executing test programs:

5m26.099835642s ago: executing program 3 (id=1578):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r1 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
readv(r3, &(0x7f00000006c0)=[{&(0x7f0000002480)=""/4110, 0x48}], 0x1)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000140)={{0xbffffffd, 0x1, 0xffffffff, 0xfffffff8, 'syz1\x00', 0x20}, 0x2, 0x2, 0x5, 0x0, 0x0, 0x4ff, 'syz0\x00', 0x0})

5m24.999991774s ago: executing program 3 (id=1580):
r0 = socket$inet6(0xa, 0x2, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$SNDRV_TIMER_IOCTL_CREATE(r0, 0xc02054a5, &(0x7f0000000040)={0x2, r0, 'id1\x00'})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x3e, 0x0, 0x24, 0x24, 0x2, [@struct={0xf, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2, 0x20}]}, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x3e}, 0x28)
setsockopt$sock_attach_bpf(r0, 0x1, 0x45, &(0x7f00000000c0), 0x4)

5m24.915131293s ago: executing program 3 (id=1581):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", <r2=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", <r3=>0xffffffffffffffff})
mprotect(&(0x7f0000729000/0x3000)=nil, 0x3000, 0x2000005)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r7 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
keyctl$read(0xb, r7, &(0x7f0000000240)=""/112, 0x349b7f55)
ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r3, <r8=>0xffffffffffffffff})
ioctl$SYNC_IOC_FILE_INFO(r8, 0xc0383e04, &(0x7f00000003c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
fcntl$getownex(r6, 0x10, &(0x7f0000000300)={0x0, <r9=>0x0})
timer_create(0x0, &(0x7f0000000340)={0x0, 0x27, 0x4, @tid=r9}, &(0x7f0000000380))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESDEC, @ANYRES16, @ANYRES16], 0xf)

5m23.985817369s ago: executing program 3 (id=1584):
symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r2)
sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x4040000}, 0x20008000)
mknodat$loop(r0, &(0x7f0000000340)='./file1\x00', 0x0, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
openat$dir(0xffffffffffffff9c, 0x0, 0x242041, 0x1c1)
unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file1\x00', 0x0)
rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000840)='./file1\x00')
r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.empty_time\x00', 0x275a, 0x0)
write$binfmt_misc(r4, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}})

5m23.277506424s ago: executing program 3 (id=1588):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x1, 0x0, 0x0, 0x0, {0xa, 0xfffe, 0x0, @local}}}, 0x32)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001280), r5)
sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="2503000000000000000008"], 0x14}}, 0x0)

5m22.887105541s ago: executing program 3 (id=1589):
symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r2)
sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x4040000}, 0x20008000)
mknodat$loop(r0, &(0x7f0000000340)='./file1\x00', 0x0, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
r3 = syz_open_dev$mouse(&(0x7f0000000000), 0xe, 0x0)
unlinkat(r3, &(0x7f0000000240)='./file1\x00', 0x0)
rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000840)='./file1\x00')
r4 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.empty_time\x00', 0x275a, 0x0)
write$binfmt_misc(r5, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}})

5m22.669203069s ago: executing program 32 (id=1589):
symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r2)
sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x4040000}, 0x20008000)
mknodat$loop(r0, &(0x7f0000000340)='./file1\x00', 0x0, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
r3 = syz_open_dev$mouse(&(0x7f0000000000), 0xe, 0x0)
unlinkat(r3, &(0x7f0000000240)='./file1\x00', 0x0)
rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000840)='./file1\x00')
r4 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.empty_time\x00', 0x275a, 0x0)
write$binfmt_misc(r5, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}})

4m14.516547033s ago: executing program 1 (id=1766):
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0xd0, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfffa}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xf}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x12}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xe}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x55}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x22}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x200401e4}, 0x2004c000)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000d80)=ANY=[@ANYRESOCT], &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000020000000c000000001466bfdac3c37dd5273545b9193c412d42832b1bc897a82f6f0b95c99bcf82e5ef1a49736b94ceead334e440a96111d5713c3408ca3de393208cc5dfb2d637ec39407436c4494f0d20"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800", @ANYRESHEX], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x2, 0x3, 0x0, 0xad7}, 0x14)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000003c0)=0x5009, 0x4)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="2000000040000701feffffff00000000017c000004004280040001800400028016a31fdf7ce10161d410ff422b8e2fbb5087050c7166e190fcfe13dbf82a57a82fefc92afd799452a689e3a5505df1e8cf0c701ad72839279467c82e3fe76ffc80600202809d4dcd4cc067db037194463cde68290cc1221d89661e517136f46f8a5ac4d4f3c149b0088309c4099b3eff05da02de13577133898fe1184f05568ab3"], 0x20}}, 0xc000)
r1 = socket$alg(0x26, 0x5, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000008c0)=ANY=[], 0xbc}}, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
pread64(r3, 0x0, 0x0, 0x7)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0xca9, 0x0, 0x0, 0x0, 0xf407}, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x11, 0x6, 0x1ff, {0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)

4m14.14808266s ago: executing program 1 (id=1769):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x8, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x1c, 0x3e, 0x229, 0x0, 0x25dfdbfc, {0xa}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x1c}}, 0x8000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), &(0x7f00000002c0)=@v3={0x3000000, [{0x2, 0x9}, {0x3, 0x3ff}]}, 0x18, 0x1)
r5 = socket(0x10, 0x803, 0x0)
write(r5, &(0x7f0000000300)="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", 0xfc)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r6 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x141002)
ioctl$FE_DISEQC_SEND_BURST(r6, 0x6f41, 0x0)
r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0)
read$FUSE(r7, &(0x7f0000000dc0)={0x2020, 0x0, <r8=>0x0}, 0x2020)
write$FUSE_WRITE(r7, &(0x7f0000000280)={0x18, 0x0, r8, {0x8000}}, 0x18)

4m13.113334547s ago: executing program 1 (id=1771):
socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000001fc0)=[{{&(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f00000006c0)="57126202c24e0828b32d142c429127b1461e6436182b8546f2ccf12d40cdce5217d1188e1371a62d00c7662d2e0ebd7862ff302f84ea4d83d72de8f4ce2b18373f303740370eabf7a590fa029075059151b1c10a952b5cab4c54556d39b8f36ffba8130f12f9cfeb8a02a555ea5f95f14779444333a8d9bfbdae9fef01e41e567daeb740a84058bc3217d7285c4262eca0295e20a0c0c7c29f8c846ead783d6d0fce133e413a633ce7fd2d8048b66b6ac9f28a8f23162aa76484d5c13c74bdce817d27bb39e82ca72f422232162465dba73275e60fb76170305e9514e1fc9a5c06543a6c52c4b7", 0xe7}], 0x1, 0x0, 0x0, 0x40884}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001e00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000a0fa00000000000000b2b1000002050000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32], 0xd0, 0x4000}}, {{&(0x7f0000001f00)=@abs={0x1, 0x0, 0x4e22}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x7a, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000540))
ioctl$KVM_RUN(r4, 0xae80, 0x0)
prlimit64(0x0, 0x0, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x3, &(0x7f00000002c0)=0x402)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r5 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
pipe(&(0x7f0000000000)={<r6=>0xffffffffffffffff})
r7 = epoll_create1(0x0)
splice(r6, 0x0, r7, 0x0, 0x20f39, 0x8)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040ed7e54e20"], 0x7)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x2, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xa, 0xfffffffffffffffe, 0x20000005, 0x0, 0x2, 0xfffffffffffffffe], 0xdddd1000})
socket(0x10, 0x3, 0x0)

4m7.795051668s ago: executing program 1 (id=1780):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x2d046000)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r1 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="24000000210001"], 0x24}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x48}}, 0x0)
sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}})
newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x2000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0xf, 0x0, r3, 0xb4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x13, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@alu={0x7, 0x0, 0x9, 0x9, 0x7, 0x10, 0x10}, @jmp={0x5, 0x0, 0x4, 0xb, 0x2, 0xffffffffffffff2c, 0x8}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00'}, 0x94)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r3, 0x40049366, &(0x7f0000000500)=0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)

4m6.163775436s ago: executing program 1 (id=1785):
r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(0xffffffffffffffff, 0xc0186445, &(0x7f0000000000)={0x58, 0x1})
socket$inet_smc(0x2b, 0x1, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2)
move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x279)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0xa, 0xc, "faf98357e5a1149989fc8dbec3bd02b82a128bbad0099cebdc25f5abb534464c516bdd8a0f3500", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237641a8ccf162e43ac61f700000000009b4100", [0x9, 0xa]}})
syz_usb_connect(0x0, 0x36, &(0x7f0000001300)=ANY=[@ANYBLOB="120100000cb78a405e0483020b99010203010902"], 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000800)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102384, 0x18ff0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
userfaultfd(0x801)
sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x24010000)
sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x2004c811)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
writev(r1, &(0x7f0000000200)=[{&(0x7f0000000380)}], 0x1)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r4, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48)
ioperm(0x0, 0x2, 0x7e)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)

4m5.954876237s ago: executing program 1 (id=1787):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x1ff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000500)=@assoc_value={<r0=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000080)=r0, 0x4)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={r0, 0x3c, &(0x7f0000000080)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x43}}, @in6={0xa, 0x4e23, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1ff}, @in={0x2, 0x4e22, @empty}]}, &(0x7f0000000400)=0x10)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8)
socket$inet_smc(0x2b, 0x1, 0x0)
timer_create(0x0, 0x0, 0x0)
shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000)
shmget$private(0x0, 0x2000, 0x8, &(0x7f0000f25000/0x2000)=nil)
r2 = syz_open_dev$loop(&(0x7f0000000140), 0x3, 0x189083)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0x9, &(0x7f0000000040)=0x1ff, 0x4)
syz_emit_ethernet(0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60f7d8ff003c3c00fe8000000000000000000000000000aaff0200000000000000000000000000010004000000000000c91020010000000000000000000000000001c910fc0000004823245883d41018c2d9000000000000000000000001000000000000"], 0x0)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="2500000014001b05ad8f43e70000000000000d000100d76f51d2887e3e1d6a0000000000cbce9b48a47bcec47fa088e18816a87019dcaaa570b30b551979cbba6af53379df1f364ca63846a5dc2cee13b8e79453a889dd5f211412329246fa0e34774beed8b84b85b0f2e5312c0719146d8d4e5c8d748f555f61683308db2a5fb35819ecae7ef33e54fcd4e4d811dd8305386943a7f064645ee45566986ca7abd0adaca578"], 0x24}, 0x1, 0x0, 0x0, 0x2400a051}, 0x44000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r5, 0x1000, {0x2a00, 0x80010000, 0x0, 0x2, 0x8, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}})
ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r5)
ioctl$I2C_RDWR(r5, 0x707, &(0x7f00000000c0)={&(0x7f00000004c0)=[{0x1, 0x800, 0x6e, &(0x7f0000000440)="2ee4610df6db1ab4ae590d85499b6d1a0c2322e866ea515e5d04c4de6a5d9f33607871f0af00001f99611c6ac47e9a7403801e4235c0cff4463c761e79156ddb1094f2bbcfabe2b0ebb97b9b5cad6a63579464ecb6d9dd9749c8a12f8d5ae4d48f57efe65f848bd0e068593e65f0"}], 0x1})
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
write$sndseq(r6, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @control={0x3, 0x5a, 0x93}}, {0x0, 0x0, 0x0, 0x2, @time={0xffffffd7, 0xfffffffd}, {}, {0x80}, @result={0x2, 0x2}}], 0x38)
ioctl$SYNC_IOC_FILE_INFO(r6, 0xc0383e04, 0x0)
r7 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r8 = add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @desc3}, &(0x7f0000000780)={0x0, "3215ee5299c6f92fe43dd9c925e421d383d95c7d40a0dc64eb3897e609000000cd1ae9cfd5bb7cd51e2a1550b5699a6fffc50001af1f91341326b8cb0100", 0x12}, 0x24, 0xfffffffffffffffe)
keyctl$chown(0x4, r8, 0x0, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r7, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, 0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0)

4m4.813302232s ago: executing program 33 (id=1787):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x1ff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000500)=@assoc_value={<r0=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000080)=r0, 0x4)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={r0, 0x3c, &(0x7f0000000080)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x43}}, @in6={0xa, 0x4e23, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1ff}, @in={0x2, 0x4e22, @empty}]}, &(0x7f0000000400)=0x10)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8)
socket$inet_smc(0x2b, 0x1, 0x0)
timer_create(0x0, 0x0, 0x0)
shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000)
shmget$private(0x0, 0x2000, 0x8, &(0x7f0000f25000/0x2000)=nil)
r2 = syz_open_dev$loop(&(0x7f0000000140), 0x3, 0x189083)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0x9, &(0x7f0000000040)=0x1ff, 0x4)
syz_emit_ethernet(0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60f7d8ff003c3c00fe8000000000000000000000000000aaff0200000000000000000000000000010004000000000000c91020010000000000000000000000000001c910fc0000004823245883d41018c2d9000000000000000000000001000000000000"], 0x0)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="2500000014001b05ad8f43e70000000000000d000100d76f51d2887e3e1d6a0000000000cbce9b48a47bcec47fa088e18816a87019dcaaa570b30b551979cbba6af53379df1f364ca63846a5dc2cee13b8e79453a889dd5f211412329246fa0e34774beed8b84b85b0f2e5312c0719146d8d4e5c8d748f555f61683308db2a5fb35819ecae7ef33e54fcd4e4d811dd8305386943a7f064645ee45566986ca7abd0adaca578"], 0x24}, 0x1, 0x0, 0x0, 0x2400a051}, 0x44000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r5, 0x1000, {0x2a00, 0x80010000, 0x0, 0x2, 0x8, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}})
ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r5)
ioctl$I2C_RDWR(r5, 0x707, &(0x7f00000000c0)={&(0x7f00000004c0)=[{0x1, 0x800, 0x6e, &(0x7f0000000440)="2ee4610df6db1ab4ae590d85499b6d1a0c2322e866ea515e5d04c4de6a5d9f33607871f0af00001f99611c6ac47e9a7403801e4235c0cff4463c761e79156ddb1094f2bbcfabe2b0ebb97b9b5cad6a63579464ecb6d9dd9749c8a12f8d5ae4d48f57efe65f848bd0e068593e65f0"}], 0x1})
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
write$sndseq(r6, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @control={0x3, 0x5a, 0x93}}, {0x0, 0x0, 0x0, 0x2, @time={0xffffffd7, 0xfffffffd}, {}, {0x80}, @result={0x2, 0x2}}], 0x38)
ioctl$SYNC_IOC_FILE_INFO(r6, 0xc0383e04, 0x0)
r7 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r8 = add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @desc3}, &(0x7f0000000780)={0x0, "3215ee5299c6f92fe43dd9c925e421d383d95c7d40a0dc64eb3897e609000000cd1ae9cfd5bb7cd51e2a1550b5699a6fffc50001af1f91341326b8cb0100", 0x12}, 0x24, 0xfffffffffffffffe)
keyctl$chown(0x4, r8, 0x0, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r7, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, 0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0)

2m40.915496481s ago: executing program 6 (id=1995):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0)
socket(0x10, 0x80002, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd)
r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
readv(r2, &(0x7f00000006c0)=[{&(0x7f0000002480)=""/4110, 0x48}], 0x1)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000140)={{0xbffffffd, 0x1, 0xffffffff, 0xfffffff8, 'syz1\x00', 0x20}, 0x2, 0x2, 0x5, 0x0, 0x0, 0x4ff, 'syz0\x00', 0x0})

2m36.394634864s ago: executing program 6 (id=2007):
socket$l2tp6(0xa, 0x2, 0x73)
socket(0x40000000015, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x3, &(0x7f0000000300)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
getpid()
r0 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
read(r2, &(0x7f00000003c0)=""/163, 0xa3)
ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000))
r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x200)
ioctl$TCXONC(r3, 0x540a, 0x2)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0)
r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/oss_mixer\x00', 0x101001, 0x0)
write$proc_mixer(r4, 0x0, 0x33)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8)
write(0xffffffffffffffff, 0x0, 0x0)
socketpair(0x1d, 0x800, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20)

2m32.573954347s ago: executing program 6 (id=2017):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000040), 0xfffffffffffffeed)
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
ptrace$ARCH_SET_GS(0x1e, r0, &(0x7f0000000240), 0x1001)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
mmap(&(0x7f0000868000/0x3000)=nil, 0x3000, 0x100000c, 0x13, r5, 0x5450b000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
mmap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r6, 0xe6905000)
r7 = socket$unix(0x1, 0x2, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00')
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r8 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
readlinkat(r8, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000140)=""/144, 0x90)
setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f00000000c0)=0x3f9, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x30}}, 0x4000000)
setrlimit(0xe, &(0x7f0000000180)={0x7ff})

2m30.432585664s ago: executing program 6 (id=2020):
symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r2)
mknodat$loop(r0, &(0x7f0000000340)='./file1\x00', 0x0, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
openat$dir(0xffffffffffffff9c, 0x0, 0x242041, 0x1c1)
unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file1\x00', 0x0)
rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000840)='./file1\x00')
r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.empty_time\x00', 0x275a, 0x0)
write$binfmt_misc(r4, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}})

2m29.165241831s ago: executing program 6 (id=2024):
r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(0xffffffffffffffff, 0xc0186445, &(0x7f0000000000)={0x58, 0x1})
socket$inet_smc(0x2b, 0x1, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2)
move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x279)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0xa, 0xc, "faf98357e5a1149989fc8dbec3bd02b82a128bbad0099cebdc25f5abb534464c516bdd8a0f3500", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237641a8ccf162e43ac61f700000000009b4100", [0x9, 0xa]}})
syz_usb_connect(0x0, 0x36, &(0x7f0000001300)=ANY=[@ANYBLOB="120100000cb78a405e0483020b99010203010902"], 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000800)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x0, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102384, 0x18ff0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
userfaultfd(0x801)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002ac0), 0x0, 0x24010000)
sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x2004c811)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
writev(r1, &(0x7f0000000200)=[{&(0x7f0000000380)='!', 0x1}], 0x1)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r4, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
ioperm(0x0, 0x2, 0x7e)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff"], 0x0)

2m27.983014854s ago: executing program 6 (id=2027):
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x2, 0xfa19, 0xffffffff}, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000200)={0x48})
ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x3)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = dup(r3)
r5 = socket(0x11, 0x3, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r7, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7e530194fe3aa6381da5d5d6c0a4a0ec97d85e6e8e450255cf7833adb4d06e07422c98f566b6297f5f8fc5ec499e892dc79bb7a6242fe7cc90fc364e63f4dbeb2f19369bd010f77ed7881a27435d1f0557a9be4a67ffb3f92b749a963848c7b5e108a8ab792e833a4110b21e0bae5b00e7224a9e32d1f70c7f77dc84d1471f6a", @ANYRES16=r8, @ANYBLOB="000825bd7000fcdbdf253700000008000300", @ANYRES32=r9, @ANYBLOB="08005700080000000800570003000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20044880}, 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000000300)={0x0, 0x3}, 0x8)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', <r10=>0x0})
bind$packet(r5, &(0x7f00000001c0)={0x11, 0x0, r10, 0x1, 0x2, 0x6, @broadcast}, 0x14)
r11 = getpid()
kcmp(r11, r11, 0x5, 0xffffffffffffffff, 0xffffffffffffffff)
r12 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r12, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

2m27.486181596s ago: executing program 34 (id=2027):
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x2, 0xfa19, 0xffffffff}, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000200)={0x48})
ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x3)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = dup(r3)
r5 = socket(0x11, 0x3, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r7, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7e530194fe3aa6381da5d5d6c0a4a0ec97d85e6e8e450255cf7833adb4d06e07422c98f566b6297f5f8fc5ec499e892dc79bb7a6242fe7cc90fc364e63f4dbeb2f19369bd010f77ed7881a27435d1f0557a9be4a67ffb3f92b749a963848c7b5e108a8ab792e833a4110b21e0bae5b00e7224a9e32d1f70c7f77dc84d1471f6a", @ANYRES16=r8, @ANYBLOB="000825bd7000fcdbdf253700000008000300", @ANYRES32=r9, @ANYBLOB="08005700080000000800570003000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20044880}, 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000000300)={0x0, 0x3}, 0x8)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', <r10=>0x0})
bind$packet(r5, &(0x7f00000001c0)={0x11, 0x0, r10, 0x1, 0x2, 0x6, @broadcast}, 0x14)
r11 = getpid()
kcmp(r11, r11, 0x5, 0xffffffffffffffff, 0xffffffffffffffff)
r12 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r12, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

1m53.114913446s ago: executing program 4 (id=2115):
unshare(0x62040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000020000103000000000000000002"], 0x24}, 0x1, 0x0, 0x0, 0x40008d4}, 0x0)

1m49.667760323s ago: executing program 4 (id=2131):
r0 = io_uring_setup(0x4822, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x0, 0x2fb})
r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
flock(r1, 0x2)
r2 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0)
flock(r2, 0x1)
r3 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
r4 = open(&(0x7f0000000180)='.\x00', 0x8080, 0x12e)
flock(r4, 0x1)
flock(r3, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

1m49.059259656s ago: executing program 4 (id=2135):
syz_open_dev$usbfs(0x0, 0x6, 0x800)
r0 = socket$tipc(0x1e, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0)

1m48.058397847s ago: executing program 4 (id=2140):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x8bf81a, 0x0)
mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000100)='./file0/file0/file0\x00', 0x0, 0x32f451, 0x0)
umount2(&(0x7f0000000280)='./file0/file0/file0\x00', 0xa)

1m47.035304354s ago: executing program 4 (id=2142):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50)
pipe(&(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write$binfmt_misc(r5, &(0x7f0000000000)="a5", 0x1)
r6 = openat$cuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0)
splice(r4, 0x0, r6, 0x0, 0xcea5, 0x6)

1m45.890736287s ago: executing program 4 (id=2145):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
creat(0x0, 0xecf86c37d53049cc)
lsetxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48)

1m45.103625928s ago: executing program 35 (id=2145):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
creat(0x0, 0xecf86c37d53049cc)
lsetxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48)

41.795278091s ago: executing program 2 (id=2540):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a7c000000060a0104000000000000000302000000500004804c0001800c0001007061796c6f6164003c00028008000440000000000800054000000000080003400000005708000240000000020800064008fd0002080007400000000808000840000040000900010073797a30000000000900020073797a32"], 0x5f8}}, 0x20000000)

41.75817524s ago: executing program 2 (id=2541):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x10, 0x0, &(0x7f0000001500)=""/16, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4e2288bca9cf3ba, 0x0, 0xfffffffe}, 0x50)
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000001f40)={0x2, 0xc001001f, 0x0, 0x0, 0x0, 0x54})
r3 = memfd_create(&(0x7f00000003c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3)
ftruncate(r3, 0xffff)
r4 = socket$nl_crypto(0x10, 0x3, 0x15)
recvmsg(r4, 0x0, 0x1)
r5 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r5, 0x0, 0x0)
r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000140)={0x1, 0xd, 0x1, &(0x7f0000000100)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}})
ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000680)=ANY=[@ANYBLOB="0000000002000000", @ANYRES32=r3, @ANYBLOB="00000000000000000000007ca3c6b1199077fc846503eff3360e08aa8d3bd1b423", @ANYRES32=r3, @ANYBLOB="0000000000100000000000000010000000000000"])
r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r9, &(0x7f0000002f00)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0x9, @loopback, 0xcd89}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000380)="3b20fc", 0x3}], 0x1}}, {{&(0x7f00000002c0)={0xa, 0x4e20, 0x2, @remote, 0x8}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000540)="3bb35e", 0x3}], 0x1}}, {{&(0x7f0000000840)={0xa, 0x4e23, 0x3, @local, 0x3}, 0x1c, &(0x7f0000001d80)=[{&(0x7f0000001cc0)='l', 0x1}], 0x1}}], 0x3, 0x4004851)
setsockopt(r9, 0x84, 0x14, &(0x7f0000000040)="020000000980ffff", 0x8)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r10=>0x0})
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="6b74aac1669c9603304f3b2e371fca", @ANYRES16=r11, @ANYBLOB="010025bd7000000000000200000008000300", @ANYRES32=r10, @ANYBLOB="08002600b409000008009f0007000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r7, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x0, 0xc6, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x75, 0x8, 0x8, &(0x7f0000000340)}}, 0x10)
r12 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200000f, 0x4000010, r12, 0x0)
r13 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c00000000140000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={r13}, 0x4)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r13, 0x68, &(0x7f0000000200)}, 0x10)

39.452864839s ago: executing program 2 (id=2552):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20048054)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
creat(&(0x7f00000003c0)='./bus\x00', 0x0)
r2 = open(&(0x7f00000000c0)='./bus\x00', 0x18d03e, 0x0)
r3 = open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x181)
ftruncate(r3, 0x2008002)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
syz_io_uring_setup(0x1714, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

38.502458774s ago: executing program 2 (id=2557):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0)
close(0x3)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r1 = openat$vim2m(0xffffff9c, &(0x7f0000000b00), 0x2, 0x0)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc0f8565c, &(0x7f0000000100)={0x901, 0x80, 0x4, {0x2, @sliced={0x9, [0xda34, 0x9, 0x0, 0x3, 0x4, 0x6, 0x7, 0x6, 0x0, 0x2, 0x8, 0x8063, 0x0, 0xb, 0x7, 0x54c, 0xc8, 0x2, 0x3, 0x3, 0x0, 0x0, 0x1, 0x4, 0x8001, 0x7, 0xfffb, 0x6, 0x5, 0x5000, 0x1a01, 0x80, 0x0, 0x80, 0x3, 0x0, 0x8, 0x6, 0x5, 0x8, 0x3, 0x9, 0x3, 0x8, 0x0, 0x0, 0x5, 0xe1f1], 0xdbb}}, 0x80})
ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc0f8565c, &(0x7f0000000000)={0x0, 0x3, 0x2, {0x2, @win={{0x1000009, 0x9, 0x82, 0x80}, 0x9, 0xfffffffd, 0x0, 0x1, 0x0, 0x7}}, 0x30})
read$char_usb(r0, &(0x7f0000000000)=""/188, 0xbc)

34.105933648s ago: executing program 2 (id=2578):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0)
ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000880)=[0x77, 0x7])
ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)=[0x77, 0x7])

32.614076531s ago: executing program 2 (id=2585):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0)
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2)
write$tun(r4, &(0x7f0000004c40)={@val={0x1c, 0xf5}, @val, @mpls={[{}], @ipv6=@gre_packet={0x4, 0x6, "ace260", 0x5c7, 0x2f, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x2, {{0x0, 0x1, 0x23, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x1, {0x3e}}}, {0x8, 0x22eb, 0x3, {{0x2, 0x2, 0x48, 0x1, 0x1, 0x0, 0x1, 0x61}, 0x2, {0xfffffffb, 0xf587, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2, "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"}}}}}}, 0x601)
write$cgroup_int(r3, &(0x7f0000000000)=0x2b00, 0x12)
socket$packet(0x11, 0x3, 0x300)
prctl$PR_SET_NAME(0xf, &(0x7f0000000500)='w\xde\xa3\x05\xa3\x91\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xaek\xbd\x87W\x1d\x1b(\x8e\xf8\\2\x98\xf7P\x1b8\xcf\xf5\xdc<M\xb6\x06\x157\x80\x03\xb4\x9f\xd1\xf9\xdd\xf6&\x1d*lK\xe3\xbd\xe8\xda\xc7\x8c\xe4\xab\x8bM\xf5\x1a\x86\xc8\x9c rC\f\xee^0\xf7\xd9\xafc\x05\x91p=\xfe\x7f\xff\x9eN\xc9Zt@\x15{\x8c\x927\xfe\xc7ZEy8\x9e\x80ia[\x88\x153(\xff\xa4\xd3\xed\x12.\x9b\xb9\xc4\'\x14\xac\x14;\x02S!\x1f]bm\xe6\x0e\xb8= \xdbg/pq\x0fu\xa1\x03`\x00\xe0\x8c\xf3A\x88\xb1F\xcb\xf7O7\xfcu\xfb\xbd^\x94\xf6{\xd9k\xa13Q\x97\x03h\x12\xc8[&UX\x81\x1eK\x9c&e[R\xb4\x96\xee4~\x02\xe5\x12\x11\x98:\xfc~D(\xe3p\x03\xa7J\vP25\\t\xf0\xe7\xe2]\x88X\x91\xd5\xd8)q\x8dV\x1e\x059w\x9e`NI\x94\xbe^#\xdfE\'\x96\xd2\xc1\xce\x89\xdf\x02K\xeak\x97d\bRH\xac\x9ev\xb7\xd0\x02A\xaa\xfe\xa7\xd6\x03\x89\xb3\x96\xcb\x8b\xd7(\xf6\xb2\\6A\xe3\xae\xb3')
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0xf, 0x8, 0x0, 0x10, 0x0, 0x0, 0x25dfdbfe, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x20, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@dev={0xfe, 0x80, '\x00', 0x18}}}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x4e24, @private=0xa010101}}]}, 0x80}}, 0x0)

22.666727682s ago: executing program 8 (id=2640):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$tty1(0xc, 0x4, 0x3)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003040)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0xa5dfdbfd, {0x0, 0x0, 0x0, r3, {0xe, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x1, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
r4 = syz_io_uring_setup(0x49d, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=<r5=>0x0, &(0x7f00000006c0)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r4, 0x1, 0x0, 0x0, 0x2})
io_uring_enter(r4, 0x4c6e, 0xc67a, 0xc, 0x0, 0x0)
io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x0)

21.829904068s ago: executing program 8 (id=2641):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002140)=ANY=[@ANYBLOB="1c000000010401040000e26624ea00000a0000040500010001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000004)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4050)

21.687705249s ago: executing program 8 (id=2642):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x2c1c2, 0x1f2)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
getsockopt$bt_BT_POWER(r1, 0x12, 0x4, 0x0, &(0x7f0000000200)=0x3e)
syz_usb_connect(0x0, 0x5f, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd70102030109024d00010000000009040000050095c20009050000000000000007058433c4"], 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x10000005)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, <r6=>0xffffffffffffffff}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6   \x00'}, 0x20)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000300), 0x2, r6}, 0x38)
ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000100))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
preadv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000)

20.442581853s ago: executing program 5 (id=2646):
socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000001fc0)=[{{&(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f00000006c0)="57126202c24e0828b32d142c429127b1461e6436182b8546f2ccf12d40cdce5217d1188e1371a62d00c7662d2e0ebd7862ff302f84ea4d83d72de8f4ce2b18373f303740370eabf7a590fa029075059151b1c10a952b5cab4c54556d39b8f36ffba8130f12f9cfeb8a02a555ea5f95f14779444333a8d9bfbdae9fef01e41e567daeb740a84058bc3217d7285c4262eca0295e20a0c0c7c29f8c846ead783d6d0fce133e413a633ce7fd2d8048b66b6ac9f28a8f23162aa76484d5c13c74bdce817d27bb39e82ca72f422232162465dba73275e60fb76170305e9514e1fc9a5c06543a6c52c4b7", 0xe7}], 0x1, 0x0, 0x0, 0x40884}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001e00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000a0fa00000000000000b2b1000002050000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0xd0, 0x4000}}, {{&(0x7f0000001f00)=@abs={0x1, 0x0, 0x4e22}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x7a, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000540))
ioctl$KVM_RUN(r4, 0xae80, 0x0)
prlimit64(0x0, 0x0, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x3, &(0x7f00000002c0)=0x402)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r5 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
pipe(&(0x7f0000000000)={<r6=>0xffffffffffffffff})
r7 = epoll_create1(0x0)
splice(r6, 0x0, r7, 0x0, 0x20f39, 0x8)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040ed7e54e20"], 0x7)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x2, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xa, 0xfffffffffffffffe, 0x20000005, 0x0, 0x2, 0xfffffffffffffffe], 0xdddd1000})
socket(0x10, 0x3, 0x0)

20.128041321s ago: executing program 0 (id=2648):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"})
ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0)

19.841938606s ago: executing program 8 (id=2649):
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x4040140)
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
socket$nl_generic(0x10, 0x3, 0x10)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x2, 0x4}, 0x4)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000140)={0xfffd, 0x0, 0xf82, 0x9}, &(0x7f00000001c0)=0x10)
syz_emit_ethernet(0x129a, &(0x7f0000002e00)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6a40000012641100ff010000000000000000000000000001ff02000000000000000000000000000133000141650000008714000000000000c91000000000000000000000000000000001800087cffd88fcee6ae536b8c262754f3f8ec5fa7a086511afb5bf6b285621c8b330927a16149838d79d3ff338b9c577ff508de5c17126f5a0c2d7c191f7eb1ff291c53d77353dd1d4c8e2f2d603400cf856575165e7bd94a7d3d51257c559d3ec1d72c741aa710b5c29512380d245c2b10fc74e10d5fb6a76dd85c5cad5d16e87be2fa83b5610f09a7dd9ca5b5d12a9f2f988186f99589ae69f88a805fde9bdc3bbd2a54df889217e752b7808d4d58970bd6bd69b6ebdc304a469a1605f0d2ad15a87e59403c15737dcd04f4cc3376a1be190954a09bcfca45dddc9dc4eef5d4c15eea50df3dde4a5fd6002d389ee6c5f49e7e0b136868da9799043ef44fce3e886ace4ba544b17cd1f62dffa4a1e77d18124304fb64c192e6f32d92ced6a37216c43a8b60b3659832b586bf301b97e5da1171aebd2094d1c3a869f9a8882130c525982ebaa7405352f1a1700b612c56f95f99ece44bfc97972de9e5b6a305162a14814e5650647a0bfa36044bfb32292a735530fe3136fce8dda40cf18c334a74e2b45cb56f84c7cf3ce783e104b7a303725c51fda58eca6132da8142cc4d5a5c46bfecbbf9b0382438126c87fc9ccd9e54b7563c14af10ddcab508c530718a51c89da5f91edf2206fef8d35bed7dff645bae4bd07d77c1ab795f659c5df7c40914b5bd75ac9932fd9e1f8e62d5244b58ad5af3ab91e11c17be3e01ac0aed8ff1c8e251ba0a9dbf84e4f4cdf4e4a10bb7ba5da4c31f7bfdc5b2b7cf58067820ba9f69994ddd97e705ae624d4d5d3eb3888d7de30c84bdaf3be067dc83ffd81f6d24e8e49c0e1339a77dffd695cabbbb171b2f664e798dfea0000dc7976055253358f73a633556f7e39de07f57d32e481f41b5f287e9ddde4e0b2db190a37b273208df7c536d8b331a64f6c38bb37b6c66c8ca37a0828cd155ee6a57c7e1d44d087a98aaddc6f00bf7c25846e6dffb0f3178cada93dcaf72cd46602f90d417bdba1345c4b5f2bc1cf93a276255ec18fd7d4c5c4317082886ffa394beb4868cad97f5d297d15a2bd1ca25f9bf34283a33813379954617c47085b51e9cdbbb7c2012161711df77d22b52a1d444028ea7f3287022329dcf8e0b8c89d9c0f16b866f14c10efe3082e9b1dba2508cae5deb398f94f038d71c27f7bd05db9adc24133341f688915b656f5548301f5c2c523e607a3b609e295d8ae53fc57d94788d47c3dd6a101acb101c64f1d4414cae3ad26bf97dd467edc8cd99ad7a4d108aefb9086980f063132ccba176b804d649c1d4304cda2fa693510c3b2c003c32fcd682199bf48774dee0d5dfc2f76e65b8f448dd9c92557ce6ca5e8739e1a81ee9ebf62523c2b7112af846bb7cf34abc1ac30d42311f4443f5ecefa4eaad4728ee99269dd0319911b2abcff7b3e73785b37c39802fe457c04d60249d1494a73c7b7182967a3120258ef64ff8a89811969968790a84c96c53268e98aff617aa9984840909cbc6162b416cf1850a856d35ae7f6afacac31cef7ba854852b2b07ecdaa621e45e354265e5604f2585cc943e7ff06f7bd0acfa24333c7177038641cb6709e230395c9d2a98c71d0fca3493627929890f7e2b0ee33a470de227a993a953265b8d0b5307123575afd3480fb79a7dc9934185e773fcf7d0dbf781ee8498d621d1415535becbb4b69aa3a92be6c1fda8919934bb5ad5fe6cdf8c9e40bef5c60e198c2693dcc8b24db242251a50ffe218340576d9b54f0b08c694b69ab4eb5f85ea3f4b008ba7b1811ffa09e160c2ec59f58d569a6949944f7d15e61e3eff7797b93208b89f25873d6c1c5f6ceb9e1c7680c40f351bc3f23e790d3f18c7b27ab116331dca9e1245e29b91ea2d7a0075ad71765628093d2379f3e1389f3421cc3b1cf2f09d6aee49978a1ebb24da4c1514d9a327c7ca987db9d0c4ea94696ff9ec108181f7bed9ac0567d428d7da544a1f0d0aa05b9f2afa16c2998993f584ce0f98adc08d293f6613f8d984783641f73e5feb21fb9bde3e6d7d5ce9139a93ce80fce5480e78df6257261427a13aa0eb04825b7cb5c3e8193f9bca7916b06f5f457c6f0344d625f60ac1d150df9d6d30a87a12f9fafbca818fd75fcc723aebdfab109d96673cd87bc6ba4d4cbb710ead33c637197ab72f08bdbc4c0a46146da96e738171ee1f483a7a2f401d4483f7f3b06555d46e3585efe5c495fdf78bd57a129ba486c65646bc48e9e60079d4d27588034742621e940f2597863f214668a9ac3b41a7ff39cbd8f361b7d86024f79df5cb4ce7486db85e6e349ea3626145cda7ab43e457fd598ebda2896cfc3b02d872f6a55afe4ae56844b55debd3715ed85318d8d0c686e097ebabcd2ef6d9a40428fa5360dd6c94e7baa924049c5510e81922ae107451814e7d92f3297d521a843dfcdd823232ac1bd3de39aa796ca1bacd44bbb809e05caf263f65ff0c793988d844fa9a0228006cf3ece98af488e0839c358565f11d314031632f5f740ca8a572eca6751a6434a947be4c3bd14447208e751b6cc8366bd593616577f11812063b07a84cdcc40da51a06bd80dc4a5a060d3c8be9b126f7d39237e9b05ee76dedbe28028e3c15514f82eda080c55534686fc74e57de19c0151f2fa167afe422b29f3991ec1138de0b561947d6175f9c8f5727d405866de4e5ba7a840b9ef07dbc4e6bba88f01bff87f7cad1a224beb5c3eea6046fe90080d7f3d69f7b65e3f70c49d96ef0da03aa5a8bdcd46c531895ef112beae0dbcba63c61d95458dee87a25b1cc4a75eb0cdf3b2f427d9792ed4bf6a4bf8ec5411beeb173b8071174ddb6b0c7d7e5174734da7371cfc909f491474921861587b3419e2465dd7161b136701ee377677101df4b9ebd9e4c32fa17cb29925834b4fdf9c68bdf6be5fd76823f5ba2d9f1d130a04fab715dea7c3850675782aa0afd12f2ba0866eb579d1e397af270202686d57bb877bae1f45beb3ac7190e5bbe79cb14911809d03a5bf1c402683e96d0b90efd127dd16b29f78c0d9d9fe620bb8ffb5963482a96268c5a0f434ce4ad0c323b0c4ddaba50787b87647a8057f2e280df36d83871ddcb5b7707244dc735f8767e7d0fb67f8a05c0c1ce8da3379b815e3aa5ecadbc33a534915aa68baa6e13335e842a1460f08cb6ba24a611c105a0a263449b9cedb8bf79d295b5beed5a0a7d0036742366d1a3da82d3a609d990a8bb9e27ccc61f4eeebfd39895703374f6f2e4582958cd89d21db6c21e99318197dbd2832db931b0b7b98504abf9266fea76e7aa05aa6a09165f5a184cfca06e820bb19d5f65ead75ce6f561e94fac7d341d25136fbdf550664c15febd1727f586279406cbe9dada31785883d03a05b4c0d8edffcdd8c6460c0ba048f480ed4a03a8ff7ac2a5ef46d31b0f9e13c898ee6d8853f90e7d4ee826f2d6a40550797096bd5932efd002a400c762f55228a86a812e9620866b26125e90a0ab7f9405058dc6804e922ed620f1b5b4f4811cdcd987929708a132b70409bc942dea0db37e6399913369d48ef4fc1ba737e0f47d8b8ea0be52dc8357bf5ae42888599454f1b9f38d910e77fa065d19be89efffe3489182bf48825892e3bb31d86977b69c2e65c2be9a948b2221d2b0f630e7d0657c0782e8b1ce4d0bbf485a96d0fb50a8a5352b82c65b7952612a9b2d10d904c48585d9309c00d135b3d141883cab0ac5b1f4f75ec337c59b76b21782860d909e8f7697f6dfa58988271d3b8023bd72923a69cec2b48b9d44bc33729ddfa4a76adf2b34593f263403c9c30b6b66f59672a3eb708b1e017568a675352c51a67580aff76c3911ba9ac206ffec023a0e607466e44c433748804b507e5054a313ae3ad5ce9cc3a2bc639a00187db34285c73d985972fbfa50dbd8dd9063bbe76aceaabfb0aea5ef1e24350760837011c848f7600c5dd7969b4e61230ac1fb5cc610da5d6838609d578df20fc71ed84c2d179b6496cc289be64e8c48284c9c7ef52214bf61b446d8af058bbed89ce5ac42b8d6061e7ac7744eabf5cb291ae04c8fe8aab3124561f6e9c25b064bbd6ed32aa2957d411400fd6210201473b4ea1dacee7fbca4e94f881c055f6d8478e9912f3f22266b592b1498e73a4fd0a2302c1cd3e28ca14168d85ee5a65b0b9d9adadc4505fcdadcc1a8a5011b50b0b87d54b69203b6b11093facbf6c5cef28b33e968ce7b16c79b72f50b9575038f587fe2740415454fd23c01101ed83e7ebe078658abaa6d1b181bc71b2ea5ab20bd7bfa77afb3ffd06717c147e44f416d19d185bf20c835ced388c24a70a3789ea28e6df1b160bfb3bb7d7ae0db265823f87702bc2daee3b57c03695909f112f73dd4c9dead4295f4bc6a767ca8a07848f2f7b0bd3dfa87ca8fc4c690c04454a6dccda407966b50af51a349e0e4da54b6afe6706ee3c8a8100a375ed30deb36fff06c8345f503db564c2e61c4491ce58f5383e4034e27322e8ab9d16184bb39b9540af961a496729a77733b7cc58917b82417c441b146c0e638be63dfa0da8bc60b78d289dac4fca238f5285f7c4408ae1fd3dbb0576d87e67511418a075df1aebe7b288e83bc823f0f7c3d55064e7f041286b79e54cb19c9f9fe4df09ed01372c7fd2dca6c657d78868f115d8dc2911babcb7d6fe04639350cb8be46c88446bda62b8c207127c821d10d9732bed797b4d1d9d6ee3d11df00185e91291ba0f4e4e7ab3366562db76178be993096925a85f33825a5a78ad309b0a3d54527585116fed205d4e2356b0b4aa18d0f883040b28e6368f268b97622aaae696acb32329d273d3dfe60e38fb6f84664666e6281f3189c52c1d24d3c27e2cb1383e8f87e99c63c32e99efd0fcf0426fc8a479ad9a480c849a5676fbf8d8ac3f3141788ab6d1a2b01869cb7927e551bd906751e1bafc708daf2a9ef38a18c46a206df38e8e1fd97ffd10fc4f200c0164080ac3db95ad9d3040fb8c38d247f3b99013792efc07ceae5ad34bfd6b754c4ca82f68baaf04470a23ee5cd1625e5db35a3614483a1afa6877435af48b468e6218cb1df4bd220ab2711a584a71091b381ab47f42769e0d2e9e5c4847dfda9619292115a2fb2fc7df3df10b348df7d3fd9b7e631b30801edbfc569a75b4a1171ebc98468c56af88491369d28044e940cebfdb2f0def340ec551a53287d3190159f348113663b1429f95b9d44a8fbca51af7e677169bfd7e26af0147831f8925937cc246141718176f970d416c79f83cab7ccde9c41b66224dfe000b81f0120c4a4e7fe7c3f4b438a99e54f44c79cb5a3eee6f1ac1e1c0c5a5ed006753574dfee1afb23b4c84c75d1ab4e0831f37cba9187c53be5e70d55c344b8a62b6e04a7baa86e9a5f4b13e8313ca6f405961f65c8a47b5d8241b66916fa8cf3d26f4f2b0e3ab1f779e293757b56eee1bd85bdc5ba7028dab38e0a5d5929bace27b3b69ccf0887e9b70849e0a8714eb0de4e77fbe752216234ccf7a02a4860449e2bdf6e9e9d578a775d6ec37f4d901b92ec67f2cfb8b44ddb166b8674a5125e5549d54c2b4faad54aa5a0cd17da923c32388590313ebae586084dd657904f8954a611ba63924600b2075ce7fd98128af771f29c679e6f2475883043975bebb64f22023100da4ffd1f5ed019cb1738a986dab9bf9a2f702a211956787178fad8defbcfe31a1a4d5973af26a86f2c311d329d283ff371f3f3924e8e88a8bb3a3b07f0f793a72bcf60158a67d5af68bc1855b8e8c8aacecfe735bc554ee050200010401080647c3c83fb95dd1509fae06bd02b755c66b3d3be45d4163b2c56940e57ed5168d28e5b5c32e235d0402ac9877524d645b5fe8795a34cc67a58ad1d25116852692e2d6ab411ba94420000100063833f5457555e245c7a8399bd4706bd964a970575eb88cdc687aefcb49683b70d9f16aa3fd1f722c35005053904cbda36b0f2d2342351841b7000000000000004908010a00000000fc010000000000000000000000000001fe8000000000000000000000000000aa00000000000000000000000000000001000000000000000000000000000000017304000000000000c910fe80000000000000000000000000001ec910fe800000000000000000000000000022040181003206020500000000fc020000000000000000000000000000fc010000000000000000000000000001fe8000000000000000000000000000388400006500000000870a0108000000000000000000000000000000000000000000000000000000000000000000000001fe80000000000000000000000000000c2001000000000000000000000000000200000000000000000000ffff000000004e1d4e22009c90780100000007000000a098f75bcd9a5516f311a8eaa9ce4a38b9000000000000000000000000000000674e20c1c38da0a452bae176e96e2b1e08fcde1ee4805fe36ef556ff6cb46fd595915c864cafe26107bc517193b48ef75e34272cb58a0edc78aea033a347974dea840918d802fa5f8a1c7c9a75d450fb18d042893597291d77675a63867fef542bcf00"/4762], 0x0)
io_setup(0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0)
close_range(r3, r3, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000340)={0x2, 0x5, 0x0, 0x2, 0xe, 0x0, 0x0, 0x7, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0xe, @in6={0xa, 0x4e24, 0xfffffffd, @private1, 0x8598}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x0, 0x81}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0xfffff800, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}}]}, 0x70}, 0x1, 0x400000000000000}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
memfd_create(&(0x7f00000000c0)='pids.current\x00', 0x1)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0xc000)
bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r5, &(0x7f0000000000), 0xd)

19.426971295s ago: executing program 7 (id=2650):
syz_emit_ethernet(0xbe, &(0x7f0000000400)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "0b86c107cddd39d10e870794ae120f860174b07efe05336d54f519ebba5a2b26", "5e5992c2209db5127a4a84d3d6e03d081a4118a2bbd22f0ca038289c45b30eca6703476382c29175c40096a9c60c3cce", "6a9f3a451dd7eb4523e02c2a4a00f81073727f3ac9f91e284b975a32", {"8f865412904b133eebafc6eb170fb006", "21144ab13a642475fc21552dce5cda9c"}}}}}}}, 0x0)
r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0)
syz_open_dev$radio(0x0, 0x2, 0x2)
r1 = syz_open_dev$radio(0x0, 0x2, 0x2)
preadv2(r1, &(0x7f0000000500), 0x0, 0x5, 0x2, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x400, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = socket$kcm(0x10, 0x0, 0x0)
sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './cgroup/../file0/file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x142b42, 0x84)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r4, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_procs(r6, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f0000000040), 0x12)
r8 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='+pids'], 0x6)
io_uring_setup(0x4126, &(0x7f00000007c0)={0x0, 0x0, 0x2, 0x0, 0x1000000})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000040)={0xd, {0x7, 0x9, 0x7f, 0x8}})

19.299859787s ago: executing program 8 (id=2651):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg(r1, &(0x7f0000000940)={&(0x7f0000000500)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x3, 0x2, 0x0, {0xa, 0x4e23, 0xffffdba3, @remote, 0x8}}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000580)="2c524babd57f8bf1053f7914deacf9e26e2656b5cea94d6c93d4867414f50c1836953e8e7ecdd99d1896e86dd8932d8265f23aed2ba769d104cdba69e1ad31", 0x3f}, {&(0x7f0000000700)="11d91e71a48900bbc221b0e42f249f9af9a1ef318fe79959211e768cf4d58d7d1d4ad8591b03d739b667fb452ee2d7996f3341ee7c3f5d11e300a2c5d94c7a81c09e3f688dfae8867ef3fa530f710e0107109c45a5eb3c7c059c88ed7a8704a12e8eaea42ec34dfbb02c920200005732fbf6968a08a8cb2c3f58d86e6f10c49b44448613028c76c6d47e7206a4308d", 0x8f}, {&(0x7f0000000040)="3568124532031cbefe113c", 0xb}, {&(0x7f0000000b80)="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", 0x16c}], 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="60000000000000001d000000e7a000007f713318d7efefb27c404556c8840cae7aa3db177953cde8e73aa68bc1525f9af651eab593cff9e2ca67afb506ac3306512742c5dd3f71d7af67c6a7155a8b5b9ce7bba73b7a1f62c53cac1614d90000e0000000000000000e01000006000000fdebe371b85fd727a646776a0f5b917f7ea1eed1073eaf18eb9815dca4ca0c556319d7d822cb0a05f9602926ae88f54aed4e12b9c9c0032330ae148878bee28745dd588d2b73270100000000000000288d22982dbf309ff96279308ce34a54716d637c1681b43912ca0410477c5c02b7a3bb4d401185df2dbcaf18bf9ad0887aa7301061891c24f0f0f55a8693eb2c09f53aa951aaa86832b40967e7788a1ca05692f9e8988fef59b803c6f168e635607278328920da40838bd4383d96b1a772915b5ab74f0601bd614e6bd2949fbd6f10b15ff9250000000000000074f2450fb1247d2d72b5c92aa5485afed5ce68d9984ff20616f41c88f89cc80846bd5f387e2a3adaa36816ff8b0c26520e597b23b1"], 0x140}, 0x20000014)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x2e)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r4, 0x400455c8, 0x4)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000019080)=0x30)

19.247751168s ago: executing program 5 (id=2652):
syz_emit_ethernet(0xbe, &(0x7f0000000400)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "0b86c107cddd39d10e870794ae120f860174b07efe05336d54f519ebba5a2b26", "5e5992c2209db5127a4a84d3d6e03d081a4118a2bbd22f0ca038289c45b30eca6703476382c29175c40096a9c60c3cce", "6a9f3a451dd7eb4523e02c2a4a00f81073727f3ac9f91e284b975a32", {"8f865412904b133eebafc6eb170fb006", "21144ab13a642475fc21552dce5cda9c"}}}}}}}, 0x0)
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0)
syz_open_dev$radio(0x0, 0x2, 0x2)
r0 = syz_open_dev$radio(0x0, 0x2, 0x2)
preadv2(r0, &(0x7f0000000500), 0x0, 0x5, 0x2, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x400, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = socket$kcm(0x10, 0x0, 0x0)
sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './cgroup/../file0/file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x142b42, 0x84)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r3, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040), 0x12)

18.866443051s ago: executing program 0 (id=2653):
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x23, &(0x7f0000000380)=[{&(0x7f0000000080)={0xb4, 0x6d, 0x1, 0x0, 0x0, "", [@typed={0xa3, 0x9e, 0x0, 0x0, @ipv6=@mcast1}]}, 0xb4}], 0x1, 0x0, 0x0, 0x4000001}, 0x0)

18.857609972s ago: executing program 7 (id=2654):
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$netlink(0x10, 0x3, 0x6)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140))
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0x8003}, {0x400000b1, 0x0, 0x6}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000005c0)={0x1, 0x0, [{0x40000084, 0x0, 0x39}]})

18.759232003s ago: executing program 5 (id=2655):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20048054)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
creat(&(0x7f00000003c0)='./bus\x00', 0x0)
open(&(0x7f00000000c0)='./bus\x00', 0x18d03e, 0x0)
r2 = open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x181)
ftruncate(r2, 0x2008002)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

18.737548619s ago: executing program 0 (id=2656):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
accept4$inet6(r2, 0x0, &(0x7f00000001c0), 0x100000)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000500)={0xc, 0x0, &(0x7f0000000440)=[@dead_binder_done], 0x5f, 0x0, &(0x7f0000000480)="0cce0523552df5799e844ca6558f6adffcf24e07e5aafad225a33a8e32337edc3c2fbfc0bc8e4b3186f8a3370b1f55a74ae0226a953523162a7a9f41178a9e3faa7b1913c6f39572ca71b3990d00e4f182d285a6ff07bbee81bb648e4347fe"})
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)
r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
close(r3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000180100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000008740000000c0a95c900000000000000000100000008000440000000000900010073797a300000000038000380340000800400018004000680140007800c000100636f756e7465720004000280140001800c0001"], 0xe4}}, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x0, 'caif0\x00', {}, 0x8})
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
read$FUSE(r2, &(0x7f0000000640)={0x2020}, 0x2020)
execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y<yN\xfbXh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab?P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb8\x10\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\x03\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7vC\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']})

18.60719652s ago: executing program 7 (id=2657):
r0 = syz_open_dev$I2C(&(0x7f0000000200), 0x1, 0x402)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/83, 0x53}], 0x1, 0xfffffffd, 0x8003)

18.467138236s ago: executing program 7 (id=2658):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0)

18.260307579s ago: executing program 7 (id=2659):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0)
pipe2(&(0x7f0000000000), 0x80800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x4e24, 0x9, @mcast2, 0x80}, 0x1c)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x34, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x5c}}, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xac800000}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x8)
connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)="82", 0x1}, {&(0x7f0000000040)="a89e470a", 0x4}], 0x2}}], 0x1, 0x4404c880)

17.230192501s ago: executing program 36 (id=2585):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0)
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2)
write$tun(r4, &(0x7f0000004c40)={@val={0x1c, 0xf5}, @val, @mpls={[{}], @ipv6=@gre_packet={0x4, 0x6, "ace260", 0x5c7, 0x2f, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x2, {{0x0, 0x1, 0x23, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x1, {0x3e}}}, {0x8, 0x22eb, 0x3, {{0x2, 0x2, 0x48, 0x1, 0x1, 0x0, 0x1, 0x61}, 0x2, {0xfffffffb, 0xf587, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2, "3b4caef13d37b5aec2969ee8dfb0c61838c8e2779da6255efacb0884e77c428f4d86b6e778ee3a1891fedfd7190ffbe3b2e015a550ab6e452b2902440d13bd03605e906d3831f80dd0206c111128aa48442d787c7567db85a59e4ad3cce683b4e10f311b00f815c9ca0df017e1f5fbea8114d1ba6de8010363528577c133ce558e5e5f5bdcb84de895a585525edc929cfa7fcc7c9680b3f037c0659eb1603ad18feb20ffbd689ddb32ebaf48b8003acd66c6bd27bcba284aef84220491b9f9f468dcd85a18625466ea89c06669619527749e024143c8b26e67ae99e7dfcfbce29319044ef1bb29eecac81a47aeaf8af6fb7b9e3f12cd2703a50566b86c041391e05bfe81d6b14d9fa7797e5dcfc41d19260c1a39d48c8d7a11a5645619e2c1bb78dfddb23b88129cfe5d27947881b21b1b4a05ef9940135a9aea70f6633c2d555a4117368ccecfe8b333a9a10a78a0d76549bedd7a1b08f76901369865ca7bdad40ab576acbc6ebe23a0e5636c2941b4f28d5088717bcd59febc6f0b4fb6c5b2e958ce5ce1d8bdc30acfc99b449f06be1a59eaba0d13a0855e387efc64bddb5655d7cd22d97529b8bb6229d822e4340b381c4f212a25bf9a7822dce79c622812837893afa7667128b4e7b40c9b7a54724cde9e8ef2800db8b9009210e092610bf075d3c55691ffef6b4e6a0c670f9a063d0de2fa93c386efc530896aa208cf679c296b26637531cbb2bd3f55a1422d7b08eb39e20b1e5214d1373a2c61c120f237ff5a03c0cf512492d040350e7068ad21bcc69032331a4c7e5902be63f488bc7982643bc1508560a7b528e41db61b9fa8a34c1f53f39461f7daae62dfc9aedc24133bfc142fc9cb8d08e916492be3b4a2b681521dd11a688a2c25cde0aeb88f3ba975c876ab935f58de93881a4b997892fefd1f07501ee8ed0d14d6af02a3661caac723ec062070a5cb498f250e062084ce534289b4facf570536f6bfa698161b6a37501a3fee8aa86839bedc974daa2754320098a96ad47a3a5e753f6acfe3d1ab3a7a464069a35d3f52f0ed722e5c8abcf26a450a8237b0d1ed1c6da1e02af15e0d9f63309eb9da7578426bdcd5362e595127e08bc0214fd5c2d10f9b379558e146524560853c9e929da48df6e894913a419dcb723eb8d32bb82004cb53fcc7260ab74c5b22e41598a1b16deeeb833817c27709e9542b660d6e95e93047fbfba72422d1a0923bda75387d26fce2d4e93e4d0f89a2aadb71f25e03f80ae75b938069bddb2f6d19c6b2c09e4f92c9d4d941980f0989052e49c9d4f7c548a0f4b9aa358aedd738d21b96ae1e4f4fd909b0db87413ef4fd8a71dc63af5aa0e8db2a3a44fffff7731e6f3d69a21f015a8ba46bf2a9cbe799ed4617748975a24a3702f5b113d9556c75a444d6a3154628ea3dbb66488ee7c5c7dbdc3cb6aec8c9843358dfcce06fc23e99daa91001a1ac1846417f37c423cb16dbb65d15a593ef58aec109f88e52b4740804e25e4b640e8474f66f39d252183f3d30a37d36ef02d80a65ff972fcb61a9073e381f2f9ed1910aa9219e7ad34be7159f0343b93d5587ada33d25ec3bb507e8a5630fd816ac50e7358a304024b4647315a1993f47ef1ad443420ddedac63cabb2276c7461b709185a119cf1f57cec72c9702393d74f43563e7d5a608eeaade372adf1ade1e7499705c9887d81382faccaf88de8fd2bfd1cecd89c7108c08b925bf2addb3d548b91ac8d61d11a60fe4a940b4a51d89096351a3368555f47f2ccdaa08ed40f1adc360014b963f73d5982b81b85a5b9ac449404de524eae576b92256b61c5b4e84e52879a6881db3e1a44d0d068b69ab8c8827e929976b3ad737f15753aadf23d16ade1c2a1a2f8262faf677a22c81a47df2fae71b6793bf6767e8f2190f0644b8d95fdcf45a1b203127af45ba6c00fc8c3ef174884cf198c255d8ee16f1f8f7384e1feca1eb1ac5c05ddab7672ab10ab04312e87"}}}}}}, 0x601)
write$cgroup_int(r3, &(0x7f0000000000)=0x2b00, 0x12)
socket$packet(0x11, 0x3, 0x300)
prctl$PR_SET_NAME(0xf, &(0x7f0000000500)='w\xde\xa3\x05\xa3\x91\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xaek\xbd\x87W\x1d\x1b(\x8e\xf8\\2\x98\xf7P\x1b8\xcf\xf5\xdc<M\xb6\x06\x157\x80\x03\xb4\x9f\xd1\xf9\xdd\xf6&\x1d*lK\xe3\xbd\xe8\xda\xc7\x8c\xe4\xab\x8bM\xf5\x1a\x86\xc8\x9c rC\f\xee^0\xf7\xd9\xafc\x05\x91p=\xfe\x7f\xff\x9eN\xc9Zt@\x15{\x8c\x927\xfe\xc7ZEy8\x9e\x80ia[\x88\x153(\xff\xa4\xd3\xed\x12.\x9b\xb9\xc4\'\x14\xac\x14;\x02S!\x1f]bm\xe6\x0e\xb8= \xdbg/pq\x0fu\xa1\x03`\x00\xe0\x8c\xf3A\x88\xb1F\xcb\xf7O7\xfcu\xfb\xbd^\x94\xf6{\xd9k\xa13Q\x97\x03h\x12\xc8[&UX\x81\x1eK\x9c&e[R\xb4\x96\xee4~\x02\xe5\x12\x11\x98:\xfc~D(\xe3p\x03\xa7J\vP25\\t\xf0\xe7\xe2]\x88X\x91\xd5\xd8)q\x8dV\x1e\x059w\x9e`NI\x94\xbe^#\xdfE\'\x96\xd2\xc1\xce\x89\xdf\x02K\xeak\x97d\bRH\xac\x9ev\xb7\xd0\x02A\xaa\xfe\xa7\xd6\x03\x89\xb3\x96\xcb\x8b\xd7(\xf6\xb2\\6A\xe3\xae\xb3')
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0xf, 0x8, 0x0, 0x10, 0x0, 0x0, 0x25dfdbfe, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x20, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@dev={0xfe, 0x80, '\x00', 0x18}}}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x4e24, @private=0xa010101}}]}, 0x80}}, 0x0)

17.224984281s ago: executing program 5 (id=2661):
socket$inet6_sctp(0xa, 0x801, 0x84)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x200}, 0x0)
socket$inet(0x2, 0x2, 0x0)
r2 = fsopen(&(0x7f00000000c0)='exfat\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='iocharset', &(0x7f0000000040)='\xff\xa4\xb9\xc1arset', 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x40006)
r3 = memfd_create(&(0x7f0000000000)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\x04\x00\x00\x00\x00\x00\x00\x00\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xb0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c<L\xaa\x87A\xcdN#\xfb\xb0\xf2\x1e\x0e#J\xd0hB<\xc0\x82A0)p\xe7&J\x82\x83\x83\xd14\x01\xcf\x1b\xa9\x1d\x1ef\x0f\x86(1\xd6l\xd2\x8f\xb0\xad\t\x15\xdb|\x87\xf1\xc4\xb8\xb2\x9a\xd2A\x80\xbf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd6\x80\x00\x00\x00\x00\x00\x00\x00\x88&}\xd1\x00\x00\x00\xe6\xaf\t\x9f\x96\rN\xc9\x90\xbe\xedZd\x14\xc9\x0f\x14v\xb6\x04\xf2U\xb4\xf6\xbe\xddT\xcb\x00\x00\x00\x00\x00\x00\xe9\x00\x00\x00\x00\x00\x00o:}\xa7jmH\xedn\x11\xfe\xe2\x0fT\x00\x94\xbc\xc6\x7f\x93eE1xp\xa3\xdc\xd7K9J<\xeb\xd2!\xf4\x19\xbd#\xb8\x83\x858\n\xf8\x12Z\x1a\x12\xfa\xcc\x04\r\xf3\xf4;\v\x15b^\xea\xa2\x04 \xe8\x99\xb3\x97\x9e\r\xb0\x05\xbb(f\xd0\x85\xc5\x15\xae#\x12Q\xacF\xfb\xc8\xbd\xcc#\v\x00\x00\x00\x00\x00\x00\x8f\x9b\x00\x03\xc8}\x11\xbc\x01\x8fi\xf5\x7f\xaf\x11\xfb\x16\x95\xdfc\xc9\x8a/&dw\xdf]ao\\\x88\xf7\xce\xbd\xb0\xa6J~\x8d\xf1\xe9\x1c\xcfo\xb3\xdc\x04Y\x8e\r\xf5\xa0\xeft\x06G0\xe3D\xd6\xa3L\xedN\x0e\xdc@7\xd8^\xae\xea\x92\xbe\x9c\xf9~\xa5\x0f\xbf\xd8l\x96`\x0f\x00e\x8aR{\x17Y\x15m>\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\x14\x16\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd75\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\xa2K\xa1\xb3\xce\x1e\x96{%\xa8\xc7\x93\xdb\x80v+o\xb8\xe8\x1b\x06\xfbwb\x11\xb7\x9fu\xf3\xd3\x7f\x04k\xa0B\xa5\xc9\xb1\xec\xb1\xf6\x11\xc1O\xecG\xe6q5\x97u\x0fl\x90\x9b\x9f\xaf\xfb\xdf\x12^\xc9\x92|\x11\"\xd7\xb5\xf0\xdc\\\f\xec\xfd\xa1\xfdVZ*\xeb\xde\x14\xe0\x8b\x1c\x820b\x89\xbd\xd7\x0e\x9b\xf2\xe9A\xfb\x89\xc6\x84\x14b\xd4\x7f\xdf.\x05\x00S\xf5\x19\xb4fE\x87\xd4E\xc8>\x8f\x05Bg\x15\xe1\x8c\x94ERT\xac\xb4\x00\x00\x00\x00\x00\x00\x00\xc4\x0f\xc1\x9e\xf6#f\x03\xb0\xe4\xb6\xf5\x04z+Pa\xbc\x12a7z\xad6\xf7\xeb\xa7\x88\"\xcf\xf6\xcfP\x12\a;h\x95\x90\x83\x06\xdf\xbd}.\xa6$2D\xf1T\xc9\x8aG\x12\xe51', 0x7)
fcntl$addseals(r3, 0x409, 0xb)
ptrace$ARCH_SHSTK_DISABLE(0x1e, 0x0, 0x0, 0x5002)
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00')
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket(0x15, 0x5, 0x0)
getsockopt(r6, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)=ANY=[@ANYBLOB="3800000040000701feffffff00000100017c000004004280200002801c000b8014003c0000"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
read$FUSE(r4, 0x0, 0x0)
pread64(r4, &(0x7f000001a240)=""/102400, 0x19000, 0x100008)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)

17.18081931s ago: executing program 7 (id=2662):
r0 = io_uring_setup(0x7530, &(0x7f00000003c0)={0x0, 0x48d7, 0x800, 0x0, 0xfffffffd})
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

16.862073636s ago: executing program 0 (id=2663):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r1 = dup3(0xffffffffffffffff, r0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"})
ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0)

16.745756821s ago: executing program 8 (id=2664):
ioctl$KDGKBMETA(0xffffffffffffffff, 0x4bfa, 0x0)
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRES32=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id='])
read$FUSE(r1, &(0x7f0000004140)={0x2020, 0x0, <r2=>0x0}, 0x2020)
syz_fuse_handle_req(r1, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x5, {0x5, 0x2, 0x7, 0x8, 0x4, 0x0, {0x103f, 0x3, 0x6, 0xffff, 0x1000, 0x80000000000000ff, 0x0, 0x1, 0x120, 0x2000, 0x10001, 0x0, 0x0, 0x502, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r1, &(0x7f0000000440)={0x50, 0x0, r2, {0x7, 0x29, 0x2, 0x14c0348, 0x40, 0x1, 0xfffffff1, 0x0, 0x0, 0x0, 0x80, 0x7fffffff}}, 0x50)
openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0)
openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r6 = userfaultfd(0x801)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000140))
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000180), 0xc06620, 0x4)

15.960435161s ago: executing program 0 (id=2665):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)

15.892287445s ago: executing program 5 (id=2666):
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x23, &(0x7f0000000380)=[{&(0x7f0000000080)={0xb4, 0x6d, 0x1, 0x0, 0x0, "", [@typed={0xa3, 0x9e, 0x0, 0x0, @ipv6=@mcast1}]}, 0xb4}], 0x1, 0x0, 0x0, 0x4000001}, 0x0)

15.862087676s ago: executing program 0 (id=2667):
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$netlink(0x10, 0x3, 0x6)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140))
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0x8003}, {0x400000b1, 0x0, 0x6}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000005c0)={0x1, 0x0, [{0x40000084, 0x0, 0x39}]})

15.783211272s ago: executing program 5 (id=2668):
syz_clone3(0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xd4}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000340)=0xc4b6, 0x45)
r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000340)={'pcl816\x00', [0x401, 0x5, 0x0, 0x100, 0x27, 0xcc7, 0x8, 0x7, 0x3, 0xfc, 0x451f, 0x0, 0xa, 0x2, 0x7, 0x2005, 0xfffffffe, 0x40ed, 0x43, 0x40000003, 0x7, 0x6beab93e, 0xf27, 0x3, 0x800b, 0x4, 0x80002, 0x0, 0x4fa7f95b, 0x5, 0x5149]})
ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000200)=0x5)
r4 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4)
r5 = eventfd2(0x0, 0x0)
io_submit(0x0, 0x2, &(0x7f0000000440)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x1, r5}, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0xfdaf, 0x0, 0x3, r5}])
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0)
sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012"], 0x28}, 0x1, 0x0, 0x0, 0x820}, 0x802)
r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r6, 0xc0145b0e, &(0x7f0000000000))

2.01584833s ago: executing program 37 (id=2662):
r0 = io_uring_setup(0x7530, &(0x7f00000003c0)={0x0, 0x48d7, 0x800, 0x0, 0xfffffffd})
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1.520992634s ago: executing program 38 (id=2664):
ioctl$KDGKBMETA(0xffffffffffffffff, 0x4bfa, 0x0)
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRES32=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id='])
read$FUSE(r1, &(0x7f0000004140)={0x2020, 0x0, <r2=>0x0}, 0x2020)
syz_fuse_handle_req(r1, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x5, {0x5, 0x2, 0x7, 0x8, 0x4, 0x0, {0x103f, 0x3, 0x6, 0xffff, 0x1000, 0x80000000000000ff, 0x0, 0x1, 0x120, 0x2000, 0x10001, 0x0, 0x0, 0x502, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r1, &(0x7f0000000440)={0x50, 0x0, r2, {0x7, 0x29, 0x2, 0x14c0348, 0x40, 0x1, 0xfffffff1, 0x0, 0x0, 0x0, 0x80, 0x7fffffff}}, 0x50)
openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0)
openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r6 = userfaultfd(0x801)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000140))
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000180), 0xc06620, 0x4)

19.001069ms ago: executing program 39 (id=2667):
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$netlink(0x10, 0x3, 0x6)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140))
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0x8003}, {0x400000b1, 0x0, 0x6}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000005c0)={0x1, 0x0, [{0x40000084, 0x0, 0x39}]})

0s ago: executing program 40 (id=2668):
syz_clone3(0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xd4}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000340)=0xc4b6, 0x45)
r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000340)={'pcl816\x00', [0x401, 0x5, 0x0, 0x100, 0x27, 0xcc7, 0x8, 0x7, 0x3, 0xfc, 0x451f, 0x0, 0xa, 0x2, 0x7, 0x2005, 0xfffffffe, 0x40ed, 0x43, 0x40000003, 0x7, 0x6beab93e, 0xf27, 0x3, 0x800b, 0x4, 0x80002, 0x0, 0x4fa7f95b, 0x5, 0x5149]})
ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000200)=0x5)
r4 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4)
r5 = eventfd2(0x0, 0x0)
io_submit(0x0, 0x2, &(0x7f0000000440)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x1, r5}, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0xfdaf, 0x0, 0x3, r5}])
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0)
sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012"], 0x28}, 0x1, 0x0, 0x0, 0x820}, 0x802)
r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r6, 0xc0145b0e, &(0x7f0000000000))

kernel console output (not intermixed with test programs):

1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  862.075480][T13740] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1950'.
[  862.086523][ T5925] usb 5-1: new high-speed USB device number 87 using dummy_hcd
[  865.101139][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  865.107490][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  866.127153][T11619] usb 1-1: config 0 descriptor??
[  866.205020][T11619] usb 1-1: can't set config #0, error -71
[  866.237819][T11619] usb 1-1: USB disconnect, device number 81
[  866.258776][ T5925] usb 5-1: device descriptor read/all, error -71
[  866.298250][T13745] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1951'.
[  866.351208][T13745] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1951'.
[  866.434804][T13745] xfrm0 speed is unknown, defaulting to 1000
[  866.761214][T13758] loop5: detected capacity change from 0 to 7
[  867.100971][T11619] usb 3-1: new high-speed USB device number 77 using dummy_hcd
[  867.215548][ T5925] usb 5-1: new high-speed USB device number 88 using dummy_hcd
[  867.223909][ T5935] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  867.380629][T11619] usb 3-1: Using ep0 maxpacket: 32
[  867.395103][T13758] Dev loop5: unable to read RDB block 7
[  867.401459][T13758]  loop5: unable to read partition table
[  867.407562][T13758] loop5: partition table beyond EOD, truncated
[  867.414268][T11619] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[  867.422740][T13758] loop_reread_partitions: partition scan of loop5 (úùƒWå¡™‰ü�¾Ã½¸*‹ºÐ	œëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5)
[  867.446385][T11619] usb 3-1: config 0 has no interface number 0
[  867.464895][T11619] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  867.479898][T11619] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  867.492836][T11619] usb 3-1: Product: syz
[  867.497051][T11619] usb 3-1: Manufacturer: syz
[  867.502033][T11619] usb 3-1: SerialNumber: syz
[  867.519135][T11619] usb 3-1: config 0 descriptor??
[  867.533739][T11619] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  867.542447][ T5925] usb 5-1: config 0 has no interfaces?
[  867.548074][ T5935] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  867.560172][ T5935] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  867.574569][ T5925] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  867.587948][ T5935] usb 7-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00
[  867.599658][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  867.607923][ T5935] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  867.616171][ T5925] usb 5-1: Product: syz
[  867.624994][ T5925] usb 5-1: Manufacturer: syz
[  867.635003][ T5935] usb 7-1: config 0 descriptor??
[  867.641226][ T5925] usb 5-1: SerialNumber: syz
[  867.656362][ T5925] usb 5-1: config 0 descriptor??
[  867.749905][T11619] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  867.770664][    T9] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[  867.778779][T11619] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  867.954167][T13776] netlink: 'syz.0.1959': attribute type 9 has an invalid length.
[  867.962234][T13776] netlink: 'syz.0.1959': attribute type 11 has an invalid length.
[  867.970346][T13776] netlink: 'syz.0.1959': attribute type 12 has an invalid length.
[  867.978456][T13776] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.1959'.
[  867.988907][T13776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1959'.
[  868.431375][T11587] usb 5-1: USB disconnect, device number 88
[  868.465527][    T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  868.487432][    T9] usb 6-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00
[  868.496956][    C1] quatech-serial ttyUSB0: qt2_process_read_urb - port change to invalid port: 252
[  868.510594][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  868.792394][    T9] usb 6-1: config 0 descriptor??
[  868.831802][    C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71
[  868.832202][ T5925] usb 3-1: USB disconnect, device number 77
[  868.865048][    T9] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  868.904631][ T5925] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  868.930552][T11587] usb 5-1: new high-speed USB device number 89 using dummy_hcd
[  868.980947][ T5925] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  869.092554][ T5925] quatech2 3-1:0.51: device disconnected
[  869.112274][T13773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  869.122783][T13773] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  869.134680][T13773] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1958'.
[  869.256269][T13785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  869.268183][T13785] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  869.446912][T11587] usb 5-1: config index 0 descriptor too short (expected 2512, got 36)
[  869.455375][T11587] usb 5-1: config 235 has too many interfaces: 156, using maximum allowed: 32
[  869.464684][T11587] usb 5-1: config 235 has an invalid descriptor of length 171, skipping remainder of the config
[  869.477717][T11587] usb 5-1: config 235 has 0 interfaces, different from the descriptor's value: 156
[  869.497466][T11587] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  869.507445][T11587] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  869.511705][T11619] usb 6-1: USB disconnect, device number 11
[  870.889954][T11587] usb 5-1: string descriptor 0 read error: -71
[  870.934255][T11617] usb 7-1: USB disconnect, device number 4
[  870.952828][T11587] usb 5-1: USB disconnect, device number 89
[  872.220575][T11617] usb 5-1: new high-speed USB device number 90 using dummy_hcd
[  872.711850][T13813] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1967'.
[  872.891563][T13816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1968'.
[  872.974193][T13816] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1968'.
[  872.988430][T11617] usb 5-1: unable to get BOS descriptor or descriptor too short
[  873.129934][T11617] usb 5-1: config 119 has an invalid interface number: 120 but max is 0
[  873.138548][T11617] usb 5-1: config 119 has no interface number 0
[  873.144962][T11617] usb 5-1: config 119 interface 120 has no altsetting 0
[  873.155216][T11617] usb 5-1: New USB device found, idVendor=0408, idProduct=4035, bcdDevice=65.3b
[  873.170559][T11617] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  873.178629][T11617] usb 5-1: Product: syz
[  873.184162][T11617] usb 5-1: Manufacturer: syz
[  873.188842][T11617] usb 5-1: SerialNumber: syz
[  873.217515][T13818] xfrm0 speed is unknown, defaulting to 1000
[  873.809918][T13820] IPVS: length: 24 != 24159191448
[  873.899604][T13829] trusted_key: encrypted_key: insufficient parameters specified
[  873.991015][ T5814] Bluetooth: hci2: ISO packet for unknown connection handle 0
[  874.273488][T11617] uvcvideo 5-1:119.120: Found UVC 0.00 device syz (0408:4035)
[  874.312831][T11617] uvcvideo 5-1:119.120: Forcing UVC version to 1.0a
[  874.344352][T11617] uvcvideo 5-1:119.120: No valid video chain found.
[  874.375544][T11617] usb 5-1: USB disconnect, device number 90
[  874.620633][T13832] overlayfs: failed lookup in lower (newroot/30, name='file1', err=-40): overlapping layers
[  874.734133][T13832] loop2: detected capacity change from 0 to 7
[  874.751265][T13832] Dev loop2: unable to read RDB block 7
[  874.760173][T13832]  loop2: unable to read partition table
[  874.770180][T13832] loop2: partition table beyond EOD, truncated
[  874.777114][T13832] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  874.860683][T13837] fuse: Unknown parameter 'fd0x0000000000000004'
[  875.004285][T13834] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1972'.
[  875.101798][T13846] ip6t_rpfilter: unknown options
[  875.179208][T13850] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  875.500713][T11618] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  875.643402][T11587] usb 3-1: new full-speed USB device number 78 using dummy_hcd
[  875.657938][T13855] netlink: 'syz.5.1974': attribute type 10 has an invalid length.
[  875.848889][T11587] usb 3-1: unable to get BOS descriptor or descriptor too short
[  875.860071][T11587] usb 3-1: not running at top speed; connect to a high speed hub
[  875.860766][T11618] usb 7-1: Using ep0 maxpacket: 16
[  875.874910][T11587] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 115, changing to 4
[  875.875402][T11618] usb 7-1: config 0 has an invalid interface number: 8 but max is 0
[  875.896534][T11587] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 111, changing to 4
[  875.899114][T11618] usb 7-1: config 0 has no interface number 0
[  875.930801][T11587] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023
[  875.944126][T11587] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  876.000579][T11618] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  876.011993][T11618] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  876.023586][T11618] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  876.044664][T11618] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  876.052912][T11618] usb 7-1: Product: syz
[  876.053210][T11587] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  876.057242][T11618] usb 7-1: SerialNumber: syz
[  876.073374][T11618] usb 7-1: config 0 descriptor??
[  876.076139][T11587] usb 3-1: Product: syz
[  876.081907][T11618] cm109 7-1:0.8: invalid payload size 0, expected 4
[  876.090110][T11587] usb 3-1: Manufacturer: syz
[  876.091984][T11618] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input15
[  876.110732][T11587] usb 3-1: SerialNumber: syz
[  876.262132][T13865] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1551 sclass=netlink_route_socket pid=13865 comm=syz.4.1978
[  876.310140][    C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  876.310311][    T9] usb 7-1: USB disconnect, device number 5
[  876.317378][    C1] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  876.367070][T11587] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  876.395738][T11587] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  876.473810][    T9] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  876.556154][T11587] usb 3-1: USB disconnect, device number 78
[  876.605704][   T30] audit: type=1400 audit(876.576:783): avc:  denied  { unmount } for  pid=5805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  876.641519][ T5814] Bluetooth: hci0: unexpected event for opcode 0x204e
[  876.649276][T13746] udevd[13746]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  877.195104][T13876] bond1 (unregistering): Released all slaves
[  877.356576][T13889] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1981'.
[  877.798210][T13882] IPVS: length: 24 != 24159191448
[  878.034728][T13898] netlink: 180 bytes leftover after parsing attributes in process `syz.5.1983'.
[  878.456255][T13903] fuse: Unknown parameter 'fd0x0000000000000004'
[  878.541352][T13904] IPVS: length: 24 != 24159191448
[  879.075933][T13906] xfrm0 speed is unknown, defaulting to 1000
[  879.648451][T13916] fuse: Bad value for 'fd'
[  882.250770][T11617] usb 6-1: new full-speed USB device number 12 using dummy_hcd
[  882.283128][T13939] netlink: 180 bytes leftover after parsing attributes in process `syz.6.1993'.
[  882.604827][T11617] usb 6-1: unable to get BOS descriptor or descriptor too short
[  882.622902][T11617] usb 6-1: not running at top speed; connect to a high speed hub
[  882.647486][T11617] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 115, changing to 4
[  882.663356][T11617] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 111, changing to 4
[  882.860422][T13943] trusted_key: encrypted_key: insufficient parameters specified
[  883.088236][ T5814] Bluetooth: hci1: ISO packet for unknown connection handle 0
[  883.130574][T11617] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023
[  883.188788][T11617] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  883.199153][T11617] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  883.207580][T11617] usb 6-1: Product: syz
[  883.213389][T11617] usb 6-1: Manufacturer: syz
[  883.218533][T11617] usb 6-1: SerialNumber: syz
[  883.309413][T13948] futex_wake_op: syz.6.1995 tries to shift op by -1; fix this program
[  883.330964][T13947] fuse: Unknown parameter 'fd0x0000000000000004'
[  883.480658][T11617] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  883.504974][T11617] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  883.779698][T11617] usb 6-1: USB disconnect, device number 12
[  884.923807][T13746] udevd[13746]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  886.674348][T13978] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  887.706014][T13993] trusted_key: encrypted_key: insufficient parameters specified
[  888.062784][ T5814] Bluetooth: hci2: ISO packet for unknown connection handle 0
[  888.315503][T13979] ALSA: mixer_oss: invalid OSS volume ''
[  888.755350][T14000] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  888.976447][T14003] Device name cannot be null; rc = [-22]
[  889.299870][T14005] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2002'.
[  889.664128][T14015] netlink: 'syz.4.2010': attribute type 9 has an invalid length.
[  889.671947][T14015] netlink: 'syz.4.2010': attribute type 11 has an invalid length.
[  889.679783][T14015] netlink: 'syz.4.2010': attribute type 12 has an invalid length.
[  889.687863][T14015] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.2010'.
[  889.698205][T14015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2010'.
[  889.933018][T14013] loop5: detected capacity change from 0 to 7
[  890.300856][T11618] usb 3-1: new high-speed USB device number 79 using dummy_hcd
[  890.315384][T13992] ALSA: mixer_oss: invalid OSS volume ''
[  890.430585][T14013] Dev loop5: unable to read RDB block 7
[  890.436219][T14013]  loop5: unable to read partition table
[  890.466539][T14013] loop5: partition table beyond EOD, truncated
[  890.527032][T14013] loop_reread_partitions: partition scan of loop5 (úùƒWå¡™‰ü�¾Ã½¸*‹ºÐ	œëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5)
[  890.619308][T11618] usb 3-1: config 0 has no interfaces?
[  890.644074][T11618] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  890.663164][T14027] No source specified
[  890.670541][T11618] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  890.800652][T11618] usb 3-1: Product: syz
[  890.815781][T11618] usb 3-1: Manufacturer: syz
[  890.843506][T11618] usb 3-1: SerialNumber: syz
[  890.870041][T11618] usb 3-1: config 0 descriptor??
[  891.539164][ T5935] usb 3-1: USB disconnect, device number 79
[  892.230065][ T5935] usb 3-1: new high-speed USB device number 80 using dummy_hcd
[  892.928002][   T30] audit: type=1400 audit(892.896:784): avc:  denied  { listen } for  pid=14024 comm="syz.4.2015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  893.400303][   T30] audit: type=1400 audit(893.356:785): avc:  denied  { listen } for  pid=14024 comm="syz.4.2015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  893.425041][T14026] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14026 comm=syz.4.2015
[  893.519337][   T30] audit: type=1400 audit(893.486:786): avc:  denied  { name_bind } for  pid=14024 comm="syz.4.2015" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1
[  893.777692][T11618] usb 1-1: new full-speed USB device number 82 using dummy_hcd
[  893.979824][T11618] usb 1-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30
[  894.195863][T11618] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  894.207036][T11618] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  894.232370][T11618] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  894.268409][T11618] usb 1-1: config 0 interface 0 has no altsetting 0
[  894.288666][T11618] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00
[  894.301201][T11618] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  894.344853][T11618] usb 1-1: config 0 descriptor??
[  894.447326][T14063] netlink: 'syz.5.2023': attribute type 9 has an invalid length.
[  894.455259][T14063] netlink: 'syz.5.2023': attribute type 11 has an invalid length.
[  894.463257][T14063] netlink: 'syz.5.2023': attribute type 12 has an invalid length.
[  894.471166][T14063] netlink: 210020 bytes leftover after parsing attributes in process `syz.5.2023'.
[  894.480895][T14063] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2023'.
[  894.490819][T11617] usb 5-1: new high-speed USB device number 91 using dummy_hcd
[  894.699743][T14057] loop2: detected capacity change from 0 to 7
[  894.706418][T14057] Dev loop2: unable to read RDB block 7
[  894.712034][T14057]  loop2: unable to read partition table
[  894.717754][T14057] loop2: partition table beyond EOD, truncated
[  894.723937][T14057] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  894.762074][T11617] usb 5-1: config 0 has an invalid interface number: 69 but max is 0
[  894.773821][T11617] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  894.801229][T11617] usb 5-1: config 0 has no interface number 0
[  894.807404][T11617] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0
[  894.829131][T12932] overlayfs: failed lookup in lower (newroot/38, name='bus', err=-40): overlapping layers
[  894.830631][T11617] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0
[  894.885581][T11617] usb 5-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  894.915525][T11618] ryos 0003:1E7D:3138.001B: hidraw0: USB HID v0.00 Device [HID 1e7d:3138] on usb-dummy_hcd.0-1/input0
[  894.943108][T12932] overlayfs: failed lookup in lower (newroot/38, name='bus', err=-40): overlapping layers
[  894.948803][T11617] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  895.017539][T11617] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  895.046248][T11617] usb 5-1: Product: syz
[  895.062713][T11617] usb 5-1: Manufacturer: syz
[  895.090607][T11617] usb 5-1: SerialNumber: syz
[  895.136635][T11617] usb 5-1: config 0 descriptor??
[  895.240725][T11617] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  895.255193][T11617] cyberjack ttyUSB0: usb_submit_urb(read int) failed
[  895.282226][T11617] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  895.882669][T11617] usb 1-1: USB disconnect, device number 82
[  896.400724][T14078] No source specified
[  896.696791][ T5814] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  896.716589][T11618] usb 5-1: USB disconnect, device number 91
[  896.725029][ T5814] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  896.734320][ T5814] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  896.750694][ T5814] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  896.759639][ T5814] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  896.770289][T11618] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  896.833378][T14082] xfrm0 speed is unknown, defaulting to 1000
[  896.862431][T11618] cyberjack 5-1:0.69: device disconnected
[  897.974752][T14082] chnl_net:caif_netlink_parms(): no params data found
[  898.134190][T14100] futex_wake_op: syz.2.2031 tries to shift op by -1; fix this program
[  898.135024][T14101] netlink: 'syz.4.2032': attribute type 9 has an invalid length.
[  898.151290][T14101] netlink: 'syz.4.2032': attribute type 11 has an invalid length.
[  898.159395][T14101] netlink: 'syz.4.2032': attribute type 12 has an invalid length.
[  898.167468][T14101] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.2032'.
[  898.178260][T14101] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2032'.
[  898.660290][   T36] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  898.891626][ T5823] Bluetooth: hci4: command tx timeout
[  899.030632][T11617] usb 1-1: new high-speed USB device number 83 using dummy_hcd
[  900.004912][T14082] bridge0: port 1(bridge_slave_0) entered blocking state
[  900.032088][T11617] usb 1-1: Using ep0 maxpacket: 16
[  900.044621][T14082] bridge0: port 1(bridge_slave_0) entered disabled state
[  900.052680][T11617] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  900.091449][T14082] bridge_slave_0: entered allmulticast mode
[  900.120616][T11617] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  900.141502][T14082] bridge_slave_0: entered promiscuous mode
[  900.223106][T11617] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  900.240641][T11617] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  900.269731][T11617] usb 1-1: Product: syz
[  900.289264][T11617] usb 1-1: Manufacturer: syz
[  900.309656][T11617] usb 1-1: SerialNumber: syz
[  900.438801][T14117] netlink: 'syz.4.2035': attribute type 9 has an invalid length.
[  900.446705][T14117] netlink: 'syz.4.2035': attribute type 11 has an invalid length.
[  900.454680][T14117] netlink: 'syz.4.2035': attribute type 12 has an invalid length.
[  900.462626][T14117] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.2035'.
[  900.473329][T14117] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2035'.
[  900.641973][   T36] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  900.663322][T11617] usb 1-1: config 0 descriptor??
[  900.689827][T11617] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  900.719673][T11617] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[  900.731722][T14082] bridge0: port 2(bridge_slave_1) entered blocking state
[  900.744741][T14082] bridge0: port 2(bridge_slave_1) entered disabled state
[  900.765243][T14082] bridge_slave_1: entered allmulticast mode
[  900.816410][T14082] bridge_slave_1: entered promiscuous mode
[  900.960713][ T5823] Bluetooth: hci4: command tx timeout
[  901.123249][   T36] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  901.360114][T11617] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  901.517427][T11617] em28xx 1-1:0.0: Config register raw data: 0xfffffffb
[  902.393571][T11617] em28xx 1-1:0.0: Unknown AC97 audio processor detected!
[  903.063202][ T5823] Bluetooth: hci4: command tx timeout
[  903.109249][T11617] em28xx 1-1:0.0: couldn't setup AC97 register 4
[  903.129150][T11617] em28xx 1-1:0.0: couldn't setup AC97 register 6
[  903.164318][T14082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  903.177102][T11617] em28xx 1-1:0.0: couldn't setup AC97 register 54
[  903.200995][T11617] em28xx 1-1:0.0: couldn't setup AC97 register 56
[  903.217756][T11617] usb 1-1: USB disconnect, device number 83
[  903.267781][   T36] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  903.288674][T14082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  903.329315][T14082] team0: Port device team_slave_0 added
[  903.354291][T14082] team0: Port device team_slave_1 added
[  903.728937][T14082] batman_adv: batadv0: Adding interface: batadv_slave_0
[  903.756452][T14082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  903.800255][T14082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  903.831627][   T63] Bluetooth: hci5: Frame reassembly failed (-84)
[  903.834306][T14082] batman_adv: batadv0: Adding interface: batadv_slave_1
[  903.847757][   T63] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0
[  903.931090][T14144] futex_wake_op: syz.0.2041 tries to shift op by -1; fix this program
[  903.968057][T14082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  904.016421][T14082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  904.261213][T14148] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  904.586951][T14082] hsr_slave_0: entered promiscuous mode
[  904.611426][T14082] hsr_slave_1: entered promiscuous mode
[  904.631502][T14082] debugfs: 'hsr0' already exists in 'hsr'
[  904.660612][T14082] Cannot create hsr debugfs directory
[  904.687729][   T36] bridge_slave_1: left allmulticast mode
[  904.694321][   T36] bridge_slave_1: left promiscuous mode
[  904.728860][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  904.741561][   T36] bridge_slave_0: left allmulticast mode
[  904.747210][   T36] bridge_slave_0: left promiscuous mode
[  904.757139][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  904.766890][T14151] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  904.794485][T14153] fuse: Bad value for 'fd'
[  904.900198][T14155] futex_wake_op: syz.4.2043 tries to shift op by -1; fix this program
[  905.040867][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  905.062891][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  905.097725][   T36] bond0 (unregistering): Released all slaves
[  905.131089][ T5814] Bluetooth: hci4: command tx timeout
[  905.765824][T14166] loop5: detected capacity change from 0 to 7
[  905.840749][ T5823] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  905.850577][    C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  906.102004][T11617] usb 3-1: new high-speed USB device number 81 using dummy_hcd
[  906.179221][T14166] Dev loop5: unable to read RDB block 7
[  906.184855][T14166]  loop5: unable to read partition table
[  906.190725][T14166] loop5: partition table beyond EOD, truncated
[  906.196877][T14166] loop_reread_partitions: partition scan of loop5 (úùƒWå¡™‰ü�¾Ã½¸*‹ºÐ	œëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5)
[  906.301754][T11617] usb 3-1: config 0 has no interfaces?
[  906.346730][T11617] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  906.420640][T11617] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  906.429294][T11617] usb 3-1: Product: syz
[  906.471784][T11617] usb 3-1: Manufacturer: syz
[  906.494994][T11617] usb 3-1: SerialNumber: syz
[  906.508424][T11617] usb 3-1: config 0 descriptor??
[  906.567670][   T36] hsr_slave_0: left promiscuous mode
[  906.921115][T11587] usb 3-1: USB disconnect, device number 81
[  907.087840][   T36] hsr_slave_1: left promiscuous mode
[  907.116999][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  907.160914][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  907.215426][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  907.230679][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  907.244291][T14186] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2049'.
[  907.278236][   T36] veth1_macvtap: left promiscuous mode
[  907.290788][   T36] veth0_macvtap: left promiscuous mode
[  907.300601][   T36] veth1_vlan: left promiscuous mode
[  907.305876][   T36] veth0_vlan: left promiscuous mode
[  907.400557][T11587] usb 3-1: new high-speed USB device number 82 using dummy_hcd
[  907.560562][T11617] usb 5-1: new high-speed USB device number 92 using dummy_hcd
[  907.573817][T11587] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  907.589989][T11587] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  907.603243][T11587] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  907.618675][T11587] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  907.722052][T11617] usb 5-1: config 0 has an invalid interface number: 69 but max is 0
[  907.737340][T11617] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  907.763317][T11617] usb 5-1: config 0 has no interface number 0
[  907.779663][T11617] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0
[  907.808408][T11617] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0
[  907.823428][T11617] usb 5-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  907.836975][   T36] team0 (unregistering): Port device team_slave_1 removed
[  907.838243][T11617] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  907.854282][T11617] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  907.863716][T11617] usb 5-1: Product: syz
[  907.869862][T11617] usb 5-1: Manufacturer: syz
[  907.875187][T11617] usb 5-1: SerialNumber: syz
[  907.890016][T11617] usb 5-1: config 0 descriptor??
[  907.899427][   T36] team0 (unregistering): Port device team_slave_0 removed
[  907.901094][T11617] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  907.926470][T11617] cyberjack ttyUSB0: usb_submit_urb(read int) failed
[  907.935354][T11617] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  908.945242][T14082] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  909.058690][    T9] usb 5-1: USB disconnect, device number 92
[  909.089233][T14082] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  909.100001][    T9] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  909.129899][    T9] cyberjack 5-1:0.69: device disconnected
[  909.138373][T14082] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  909.148681][T11587] usb 3-1: string descriptor 0 read error: -71
[  909.172797][T11587] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  909.206841][T14082] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  909.293116][T11587] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2
[  909.360638][T11617] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  909.377438][T14214] futex_wake_op: syz.2.2054 tries to shift op by -1; fix this program
[  909.385013][T11587] usb 3-1: USB disconnect, device number 82
[  909.504876][T14082] 8021q: adding VLAN 0 to HW filter on device bond0
[  909.541975][T11617] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  909.694636][T11617] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  909.718279][T14082] 8021q: adding VLAN 0 to HW filter on device team0
[  909.748876][T11617] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  909.767682][T11617] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  909.775478][   T63] bridge0: port 1(bridge_slave_0) entered blocking state
[  909.787818][   T63] bridge0: port 1(bridge_slave_0) entered forwarding state
[  909.859696][T11617] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  909.875462][   T63] bridge0: port 2(bridge_slave_1) entered blocking state
[  909.882597][   T63] bridge0: port 2(bridge_slave_1) entered forwarding state
[  909.957987][T11617] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  910.069829][T14082] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  910.100204][T11617] usb 6-1: Product: syz
[  910.109085][T11617] usb 6-1: Manufacturer: syz
[  910.114921][T11617] usb 6-1: SerialNumber: syz
[  910.137538][T14082] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  910.180082][T11617] usb 6-1: config 0 descriptor??
[  910.201460][T11617] garmin_gps 6-1:0.0: Garmin GPS usb/tty converter detected
[  910.222661][T11617] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8
[  910.257723][T11617] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8
[  911.082463][T14248] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2059'.
[  911.195289][T14082] 8021q: adding VLAN 0 to HW filter on device batadv0
[  911.790298][ T1153] Bluetooth: hci5: Frame reassembly failed (-84)
[  911.905559][T14247] xfrm0 speed is unknown, defaulting to 1000
[  912.215829][ T5814] Bluetooth: hci3: unexpected event for opcode 0x204e
[  912.289980][T14082] veth0_vlan: entered promiscuous mode
[  912.348001][T14082] veth1_vlan: entered promiscuous mode
[  912.480045][T14082] veth0_macvtap: entered promiscuous mode
[  912.604872][T14082] veth1_macvtap: entered promiscuous mode
[  912.917177][T14082] batman_adv: batadv0: Interface activated: batadv_slave_0
[  912.958981][T14082] batman_adv: batadv0: Interface activated: batadv_slave_1
[  913.067565][   T36] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  913.107626][   T36] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  913.133399][   T36] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  913.163553][   T36] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  913.435750][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  913.699625][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  913.842386][ T5814] Bluetooth: hci5: command 0x1003 tx timeout
[  913.848281][ T5823] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  913.925204][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  913.956923][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  914.316218][T11587] usb 6-1: USB disconnect, device number 13
[  914.323933][T11587] garmin_gps 6-1:0.0: device disconnected
[  914.733465][T14316] loop2: detected capacity change from 0 to 7
[  914.819037][T14313] netlink: 212328 bytes leftover after parsing attributes in process `syz.4.2066'.
[  914.876770][T14316] Dev loop2: unable to read RDB block 7
[  914.900908][T14313] netlink: ct family unspecified
[  914.937872][T14316]  loop2: unable to read partition table
[  914.980712][T14316] loop2: partition table beyond EOD, truncated
[  914.997393][T14316] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  915.104620][ T5178] Dev loop2: unable to read RDB block 7
[  915.110324][ T5178]  loop2: unable to read partition table
[  915.122091][ T5178] loop2: partition table beyond EOD, truncated
[  915.140858][T11619] usb 3-1: new high-speed USB device number 83 using dummy_hcd
[  915.335387][T11619] usb 3-1: Using ep0 maxpacket: 8
[  915.354932][T11619] usb 3-1: unable to get BOS descriptor or descriptor too short
[  915.380272][T11619] usb 3-1: config 86 has an invalid interface number: 149 but max is 0
[  915.407376][T11619] usb 3-1: config 86 has no interface number 0
[  915.429345][T11619] usb 3-1: config 86 interface 149 has no altsetting 0
[  915.457526][T11619] usb 3-1: New USB device found, idVendor=056c, idProduct=8007, bcdDevice= a.5c
[  915.483553][T11619] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  915.513797][T11619] usb 3-1: Product: syz
[  915.531491][T11619] usb 3-1: Manufacturer: syz
[  915.545322][T14331] No source specified
[  915.552495][T11619] usb 3-1: SerialNumber: syz
[  915.871887][T11619] belkin_sa 3-1:86.149: Belkin / Peracom / GoHubs USB Serial Adapter converter detected
[  915.899896][T11619] usb 3-1: bcdDevice: 0a5c, bfc: 0
[  915.912941][T11619] usb 3-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0
[  916.002972][T11619] usb 3-1: USB disconnect, device number 83
[  916.037075][T11619] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0
[  916.106290][T11619] belkin_sa 3-1:86.149: device disconnected
[  916.871779][T14348] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  917.312566][T14348] netlink: 'syz.4.2073': attribute type 10 has an invalid length.
[  917.422578][T14355] netlink: 'syz.5.2075': attribute type 9 has an invalid length.
[  917.430438][T14355] netlink: 'syz.5.2075': attribute type 11 has an invalid length.
[  917.438549][T14355] netlink: 'syz.5.2075': attribute type 12 has an invalid length.
[  917.446593][T14355] netlink: 210020 bytes leftover after parsing attributes in process `syz.5.2075'.
[  917.456422][T14355] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2075'.
[  917.961097][T14367] futex_wake_op: syz.5.2078 tries to shift op by -1; fix this program
[  917.974117][   T30] audit: type=1400 audit(917.946:787): avc:  denied  { getopt } for  pid=14363 comm="syz.4.2080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  918.274848][T14374] No source specified
[  919.797915][T14378] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2084'.
[  920.511360][T14383] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2085'.
[  920.520367][T14383] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2085'.
[  921.240609][T11619] usb 5-1: new high-speed USB device number 93 using dummy_hcd
[  921.268889][T14396] loop5: detected capacity change from 0 to 7
[  921.422077][T11619] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[  921.481395][T11619] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  921.530578][T11617] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  921.719879][T11619] usb 5-1: config 0 descriptor??
[  921.725068][T14396] Dev loop5: unable to read RDB block 7
[  921.731031][T14396]  loop5: unable to read partition table
[  921.754980][T14396] loop5: partition table beyond EOD, truncated
[  921.781609][T14396] loop_reread_partitions: partition scan of loop5 (úùƒWå¡™‰ü�¾Ã½¸*‹ºÐ	œëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5)
[  921.781725][T11617] usb 6-1: config 0 has no interfaces?
[  921.855057][T11617] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  921.899493][T11617] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  922.003163][T14406] netlink: 'syz.7.2089': attribute type 9 has an invalid length.
[  922.011154][T14406] netlink: 'syz.7.2089': attribute type 11 has an invalid length.
[  922.019003][T14406] netlink: 'syz.7.2089': attribute type 12 has an invalid length.
[  922.027029][T14406] netlink: 210020 bytes leftover after parsing attributes in process `syz.7.2089'.
[  922.036950][T14406] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2089'.
[  922.861196][T11619] hackrf 5-1:0.0: usb_control_msg() failed -71 request 0e
[  922.888950][T11619] hackrf 5-1:0.0: Could not detect board
[  922.895129][T11617] usb 6-1: Product: syz
[  922.902497][T11619] hackrf 5-1:0.0: probe with driver hackrf failed with error -71
[  922.910300][T11617] usb 6-1: Manufacturer: syz
[  922.939023][T11617] usb 6-1: SerialNumber: syz
[  923.006629][T11619] usb 5-1: USB disconnect, device number 93
[  923.014376][T11617] usb 6-1: config 0 descriptor??
[  923.348911][T14401] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2
[  923.364818][T14401] Buffer I/O error on dev loop5, logical block 0, lost async page write
[  923.380015][T11619] usb 6-1: USB disconnect, device number 14
[  923.437961][T14415] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2091'.
[  923.790623][T11619] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  924.113334][T11619] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  924.124672][T14422] No source specified
[  924.851010][T11619] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  924.900296][T11619] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  925.970555][T11619] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  926.020852][T11619] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  926.078401][T11619] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  926.132695][T11619] usb 6-1: can't set config #27, error -71
[  926.184850][T11619] usb 6-1: USB disconnect, device number 15
[  926.195583][T14439] tipc: Started in network mode
[  926.205500][T14439] tipc: Node identity 1ec0f3fdefaa, cluster identity 4711
[  926.253185][T14439] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  926.253243][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  926.266180][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  926.352078][T14447] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2100'.
[  926.490153][T14447] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2100'.
[  926.544663][T14444] syzkaller0: entered promiscuous mode
[  926.581273][T14444] syzkaller0: entered allmulticast mode
[  926.601983][T14444] tipc: Resetting bearer <eth:syzkaller0>
[  926.637714][T14441] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  926.669947][T14452] syzkaller0: entered promiscuous mode
[  926.687838][T14452] syzkaller0: entered allmulticast mode
[  926.713579][T14447] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2100'.
[  926.829894][T14438] tipc: Resetting bearer <eth:syzkaller0>
[  927.861271][   T30] audit: type=1400 audit(927.826:788): avc:  denied  { setopt } for  pid=14474 comm="syz.4.2102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  928.316413][   T30] audit: type=1400 audit(928.286:789): avc:  denied  { read } for  pid=14480 comm="syz.5.2104" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  928.524015][   T30] audit: type=1400 audit(928.286:790): avc:  denied  { open } for  pid=14480 comm="syz.5.2104" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  928.548647][   T30] audit: type=1400 audit(928.476:791): avc:  denied  { ioctl } for  pid=14480 comm="syz.5.2104" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  929.260678][ T5925] usb 5-1: new high-speed USB device number 94 using dummy_hcd
[  929.423925][ T5925] usb 5-1: Using ep0 maxpacket: 16
[  929.435235][ T5925] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  929.446135][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  929.463492][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  929.486903][ T5925] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  929.496714][ T5925] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  929.513278][ T5925] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  929.523520][ T5925] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  929.532128][ T5925] usb 5-1: Manufacturer: syz
[  929.553242][ T5925] usb 5-1: config 0 descriptor??
[  929.754120][   T30] audit: type=1400 audit(929.716:792): avc:  denied  { write } for  pid=14493 comm="syz.5.2109" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  929.811017][ T5925] rc_core: IR keymap rc-hauppauge not found
[  929.817021][ T5925] Registered IR keymap rc-empty
[  929.824096][ T5925] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  929.860719][ T5925] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  929.891887][ T5925] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  929.906070][ T5925] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input16
[  929.936698][ T5925] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  929.970711][ T5925] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  930.000673][ T5925] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  930.051124][ T5925] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  930.083845][ T5925] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  930.130604][ T5925] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  930.161963][ T5925] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  930.208125][ T5925] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  930.233713][ T5925] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  930.260670][ T5925] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  930.283467][ T5925] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  930.292758][ T5925] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  930.307700][ T5925] usb 5-1: USB disconnect, device number 94
[  930.320185][T14438] tipc: Disabling bearer <eth:syzkaller0>
[  930.342911][T14445] tipc: Resetting bearer <eth:syzkaller0>
[  930.352510][T14425] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  930.363337][ T5935] tipc: Node number set to 4050318333
[  930.370818][T11617] tipc: Node number set to 4269801491
[  930.389945][T14425] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  930.430364][T14425] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  930.450726][T14445] tipc: Resetting bearer <eth:syzkaller0>
[  930.503047][T14445] tipc: Disabling bearer <eth:syzkaller0>
[  930.651671][   T30] audit: type=1400 audit(930.626:793): avc:  denied  { write } for  pid=14506 comm="syz.7.2112" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  930.678720][   T30] audit: type=1400 audit(930.656:794): avc:  denied  { ioctl } for  pid=14506 comm="syz.7.2112" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x6f3e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  930.893734][   T30] audit: type=1400 audit(930.856:795): avc:  denied  { connect } for  pid=14510 comm="syz.2.2113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  931.009549][T14515] xfrm0 speed is unknown, defaulting to 1000
[  931.315094][   T30] audit: type=1400 audit(931.286:796): avc:  denied  { bind } for  pid=14536 comm="syz.2.2122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  933.117128][T14515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2115'.
[  933.223928][T14557] syz.7.2127 uses old SIOCAX25GETINFO
[  935.220526][T14591] tc_dump_action: action bad kind
[  936.200612][T14609] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2138'.
[  936.551274][ T5935] usb 1-1: new high-speed USB device number 84 using dummy_hcd
[  936.842037][ T5935] usb 1-1: Using ep0 maxpacket: 16
[  937.050973][ T5935] usb 1-1: config 0 has an invalid interface number: 2 but max is 0
[  937.059014][ T5935] usb 1-1: config 0 has no interface number 0
[  937.100655][ T5935] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  937.160714][ T5935] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  937.283012][ T5935] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  937.410432][ T5935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  938.032941][ T5935] usb 1-1: config 0 descriptor??
[  938.613057][ T5935] hid_parser_main: 24 callbacks suppressed
[  938.613080][ T5935] mcp2221 0003:04D8:00DD.001C: unknown main item tag 0x2
[  938.710510][ T5935] mcp2221 0003:04D8:00DD.001C: item fetching failed at offset 4/5
[  938.762302][ T5935] mcp2221 0003:04D8:00DD.001C: can't parse reports
[  938.768929][ T5935] mcp2221 0003:04D8:00DD.001C: probe with driver mcp2221 failed with error -22
[  938.845807][ T5935] usb 1-1: USB disconnect, device number 84
[  939.829249][   T30] audit: type=1400 audit(939.786:797): avc:  denied  { append } for  pid=14650 comm="syz.5.2149" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  939.950624][   T30] audit: type=1400 audit(939.786:798): avc:  denied  { execute } for  pid=14650 comm="syz.5.2149" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  940.048527][ T5814] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  940.058756][ T5814] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  940.069839][ T5814] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  940.079884][ T5814] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  940.087389][ T5814] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  940.171245][T14654] xfrm0 speed is unknown, defaulting to 1000
[  940.310510][   T30] audit: type=1400 audit(940.276:799): avc:  denied  { read } for  pid=14665 comm="syz.5.2153" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  940.923879][T11617] IPVS: starting estimator thread 0...
[  941.034881][T14666] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  941.084984][T14666] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  941.092180][T14675] IPVS: using max 76 ests per chain, 182400 per kthread
[  941.216838][T14666] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  942.070609][T14666] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  942.169039][ T5823] Bluetooth: hci1: command tx timeout
[  942.177356][T14666] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  942.209971][T14666] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  942.321185][T14666] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  942.330597][T14666] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  942.421581][T14666] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  942.472031][T14666] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  942.491727][T14666] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  942.588103][T14666] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  942.794024][T14654] chnl_net:caif_netlink_parms(): no params data found
[  942.910674][   T30] audit: type=1400 audit(942.886:800): avc:  denied  { mounton } for  pid=14698 comm="syz.5.2162" path="/proc/390/task" dev="proc" ino=54596 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  943.041829][ T5814] Bluetooth: hci0: command 0x0406 tx timeout
[  943.087068][T14654] bridge0: port 1(bridge_slave_0) entered blocking state
[  943.134967][T14654] bridge0: port 1(bridge_slave_0) entered disabled state
[  943.155526][T14654] bridge_slave_0: entered allmulticast mode
[  943.184356][T14654] bridge_slave_0: entered promiscuous mode
[  943.235274][T14654] bridge0: port 2(bridge_slave_1) entered blocking state
[  943.242792][T14654] bridge0: port 2(bridge_slave_1) entered disabled state
[  943.249924][T14654] bridge_slave_1: entered allmulticast mode
[  943.288173][ T5814] Bluetooth: hci3: command 0x0406 tx timeout
[  943.288293][T14654] bridge_slave_1: entered promiscuous mode
[  943.333513][T14714] netlink: 'syz.7.2164': attribute type 10 has an invalid length.
[  943.401279][T14714] 8021q: adding VLAN 0 to HW filter on device batadv0
[  943.431639][T14714] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  943.800602][T14716] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  943.810843][T14716] batman_adv: batadv0: Removing interface: batadv_slave_0
[  943.864808][T14716] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  943.872889][T14716] batman_adv: batadv0: Removing interface: batadv_slave_1
[  943.894155][T14716] bond0: (slave batadv0): Releasing backup interface
[  944.350599][ T5814] Bluetooth: hci2: command 0x0405 tx timeout
[  944.660558][ T5814] Bluetooth: hci4: command 0x0c1a tx timeout
[  944.666621][ T5814] Bluetooth: hci1: command 0x040f tx timeout
[  944.826009][T14654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  944.837796][T14654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  944.884702][T14654] team0: Port device team_slave_0 added
[  944.903508][T14654] team0: Port device team_slave_1 added
[  944.999332][T14654] batman_adv: batadv0: Adding interface: batadv_slave_0
[  945.018153][T14654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  945.090716][T14654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  945.121433][ T5814] Bluetooth: hci0: command 0x0406 tx timeout
[  945.160514][T14654] batman_adv: batadv0: Adding interface: batadv_slave_1
[  945.190492][T14654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  945.286721][T14654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  945.360936][ T5814] Bluetooth: hci3: command 0x0406 tx timeout
[  945.459347][T14654] hsr_slave_0: entered promiscuous mode
[  945.496474][T14654] hsr_slave_1: entered promiscuous mode
[  945.690537][ T5925] usb 6-1: new full-speed USB device number 16 using dummy_hcd
[  945.882095][ T5925] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  945.907977][ T5925] usb 6-1: too many endpoints for config 0 interface 0 altsetting 3: 128, using maximum allowed: 30
[  945.929941][ T5925] usb 6-1: config 0 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 128
[  945.961463][ T5925] usb 6-1: config 0 interface 0 has no altsetting 0
[  946.169548][ T5925] usb 6-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64
[  946.178928][ T5935] usb 1-1: new high-speed USB device number 85 using dummy_hcd
[  946.196788][ T5925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  946.207117][ T5925] usb 6-1: Product: syz
[  946.212163][ T5925] usb 6-1: Manufacturer: syz
[  946.218303][ T5925] usb 6-1: SerialNumber: syz
[  946.239779][ T5925] usb 6-1: config 0 descriptor??
[  946.240320][T14654] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  946.249880][ T5925] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state.
[  946.263886][ T5925] pctv452e: pctv452e_power_ctrl: 1
[  946.263886][ T5925] 
[  946.284270][T14654] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  946.309673][T14654] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  946.333714][T14654] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  946.364801][ T5935] usb 1-1: unable to get BOS descriptor or descriptor too short
[  946.380061][ T5935] usb 1-1: unable to read config index 0 descriptor/start: -71
[  946.389239][ T5935] usb 1-1: can't read configurations, error -71
[  946.400739][ T5814] Bluetooth: hci2: command 0x0405 tx timeout
[  946.454755][ T5925] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -71
[  946.454755][ T5925] 
[  946.466264][ T5925] dvb-usb: bulk message failed: -22 (5/0)
[  946.515658][ T5925] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  946.529656][ T5925] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19)
[  946.542950][ T5925] usb 6-1: USB disconnect, device number 16
[  946.654798][T14654] 8021q: adding VLAN 0 to HW filter on device bond0
[  946.720063][T14654] 8021q: adding VLAN 0 to HW filter on device team0
[  946.726827][ T5814] Bluetooth: hci1: command 0x040f tx timeout
[  946.726880][ T5814] Bluetooth: hci4: command 0x0c1a tx timeout
[  946.739086][   T30] audit: type=1400 audit(946.686:801): avc:  denied  { accept } for  pid=14750 comm="syz.7.2173" lport=44174 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  946.766231][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  946.773369][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  946.797430][T12478] bridge0: port 2(bridge_slave_1) entered blocking state
[  946.804612][T12478] bridge0: port 2(bridge_slave_1) entered forwarding state
[  947.532918][T14654] 8021q: adding VLAN 0 to HW filter on device batadv0
[  947.780533][ T5935] usb 1-1: new high-speed USB device number 87 using dummy_hcd
[  947.945717][ T5935] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  947.959252][ T5935] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  948.037501][ T5935] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  948.037586][ T5935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  948.144845][T14776] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  948.284783][ T5935] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  948.310088][   T30] audit: type=1400 audit(947.876:802): avc:  denied  { ioctl } for  pid=14783 comm="syz.2.2183" path="socket:[54916]" dev="sockfs" ino=54916 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  948.801486][ T5823] Bluetooth: hci4: command 0x0c1a tx timeout
[  948.807591][ T5823] Bluetooth: hci1: command 0x040f tx timeout
[  949.151282][T11617] usb 1-1: USB disconnect, device number 87
[  949.760782][T11618] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  949.940799][T11618] usb 6-1: Using ep0 maxpacket: 32
[  950.033164][T11618] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  950.205252][T11618] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  950.255993][T11618] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  950.315926][T11618] usb 6-1: Product: syz
[  950.353582][T11618] usb 6-1: Manufacturer: syz
[  950.387797][T11618] usb 6-1: SerialNumber: syz
[  950.485193][T11618] usb 6-1: config 0 descriptor??
[  950.544704][T14796] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  950.630871][T11618] hub 6-1:0.0: bad descriptor, ignoring hub
[  950.655794][T14654] veth0_vlan: entered promiscuous mode
[  950.684179][T11618] hub 6-1:0.0: probe with driver hub failed with error -5
[  950.769651][T14654] veth1_vlan: entered promiscuous mode
[  950.880511][ T5814] Bluetooth: hci1: command 0x040f tx timeout
[  951.180422][T14654] veth0_macvtap: entered promiscuous mode
[  951.203638][T14654] veth1_macvtap: entered promiscuous mode
[  951.293041][T14654] batman_adv: batadv0: Interface activated: batadv_slave_0
[  951.322226][T14654] batman_adv: batadv0: Interface activated: batadv_slave_1
[  951.367282][   T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  951.388456][   T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  951.435544][    T9] usb 6-1: USB disconnect, device number 17
[  951.465340][   T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  951.497466][   T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  951.560583][T14821] xfrm0 speed is unknown, defaulting to 1000
[  951.589927][   T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  951.603953][   T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  951.637969][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  951.653750][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  952.277496][   T30] audit: type=1400 audit(952.256:803): avc:  denied  { read } for  pid=14837 comm="syz.7.2197" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  952.336247][   T30] audit: type=1400 audit(952.276:804): avc:  denied  { open } for  pid=14837 comm="syz.7.2197" path="/32/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  952.702804][T14847] Bluetooth: MGMT ver 1.23
[  952.921837][T14846] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  952.938088][T14846] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  952.951100][T14846] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  952.961038][ T5814] Bluetooth: hci1: command 0x040f tx timeout
[  952.988593][T14846] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  953.025285][T14846] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  953.100064][T11617] kernel read not supported for file /video37 (pid: 11617 comm: kworker/1:12)
[  953.521706][T14879] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2208'.
[  954.891316][ T5814] Bluetooth: hci0: command 0x0406 tx timeout
[  954.970543][ T5823] Bluetooth: hci3: command 0x0406 tx timeout
[  954.976742][ T5814] Bluetooth: hci2: command 0x0405 tx timeout
[  955.055501][ T5814] Bluetooth: hci1: command 0x040f tx timeout
[  955.061869][ T5823] Bluetooth: hci4: command 0x0c1a tx timeout
[  956.392879][T14896] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  956.412746][T14896] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  956.425284][T14896] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  956.450757][T14896] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  956.486655][T14896] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  956.708417][   T30] audit: type=1400 audit(956.676:805): avc:  denied  { read } for  pid=14918 comm="syz.8.2225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  956.821395][T14920] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  956.831926][T14920] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  956.846207][T14920] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  956.852278][T14920] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  956.858234][T14920] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  957.528345][   T30] audit: type=1326 audit(957.276:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14936 comm="syz.2.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b4b9c799 code=0x7ffc0000
[  957.598411][   T30] audit: type=1326 audit(957.276:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14936 comm="syz.2.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b4b9c799 code=0x7ffc0000
[  957.931991][   T30] audit: type=1326 audit(957.276:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14936 comm="syz.2.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f23b4b9c799 code=0x7ffc0000
[  957.968352][   T30] audit: type=1326 audit(957.276:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14936 comm="syz.2.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b4b9c799 code=0x7ffc0000
[  958.022268][   T30] audit: type=1326 audit(957.286:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14936 comm="syz.2.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b4b9c799 code=0x7ffc0000
[  958.055029][   T30] audit: type=1326 audit(957.286:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14936 comm="syz.2.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f23b4b9c799 code=0x7ffc0000
[  958.095184][   T30] audit: type=1326 audit(957.286:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14936 comm="syz.2.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b4b9c799 code=0x7ffc0000
[  958.118675][   T30] audit: type=1326 audit(957.286:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14936 comm="syz.2.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b4b9c799 code=0x7ffc0000
[  958.151453][   T30] audit: type=1326 audit(957.296:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14936 comm="syz.2.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f23b4b9c799 code=0x7ffc0000
[  958.183500][   T30] audit: type=1326 audit(957.296:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14936 comm="syz.2.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b4b9c799 code=0x7ffc0000
[  958.263968][T11617] usb 3-1: new high-speed USB device number 84 using dummy_hcd
[  958.867791][T11617] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  958.891099][ T5823] Bluetooth: hci1: command 0x040f tx timeout
[  958.897251][ T5823] Bluetooth: hci4: command 0x0c1a tx timeout
[  958.903387][ T5823] Bluetooth: hci2: command 0x0405 tx timeout
[  958.909482][ T5823] Bluetooth: hci3: command 0x0406 tx timeout
[  958.915623][ T5823] Bluetooth: hci0: command 0x0406 tx timeout
[  959.555312][T11617] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  959.568855][T11617] usb 3-1: New USB device found, idVendor=08b7, idProduct=8000, bcdDevice= 0.00
[  959.583735][T11617] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  959.592802][T11617] usb 3-1: SerialNumber: syz
[  959.823484][T11617] usb 3-1: 0:2 : does not exist
[  959.885443][T11617] usb 3-1: USB disconnect, device number 84
[  959.984869][T13746] udevd[13746]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  961.150571][T11617] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  961.340574][T11617] usb 6-1: Using ep0 maxpacket: 16
[  961.376318][T11617] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  961.450037][T11619] libceph: connect (1)[c::]:6789 error -101
[  961.509484][T11617] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22
[  961.555289][T11619] libceph: mon0 (1)[c::]:6789 connect error
[  961.578285][T11617] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  961.600312][T11617] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  961.617324][T11617] usb 6-1: SerialNumber: syz
[  961.848898][T15012] ceph: No mds server is up or the cluster is laggy
[  961.858228][T11617] libceph: connect (1)[c::]:6789 error -101
[  961.865217][T11617] libceph: mon0 (1)[c::]:6789 connect error
[  961.876036][ T5935] usb 6-1: USB disconnect, device number 18
[  962.800358][T15033] 9p: Bad value for 'rfdno'
[  962.967316][   T30] kauditd_printk_skb: 13 callbacks suppressed
[  962.967331][   T30] audit: type=1400 audit(962.936:829): avc:  denied  { connect } for  pid=15046 comm="syz.0.2271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  963.067680][T15053] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2273'.
[  963.421125][T11617] IPVS: starting estimator thread 0...
[  963.530937][T15063] IPVS: using max 41 ests per chain, 98400 per kthread
[  964.662723][   T30] audit: type=1400 audit(964.616:830): avc:  denied  { write } for  pid=15079 comm="syz.0.2278" path="socket:[55939]" dev="sockfs" ino=55939 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  964.955664][T15092] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  965.682023][T15106] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2289'.
[  965.838237][T11619] kernel read not supported for file /video37 (pid: 11619 comm: kworker/1:14)
[  966.009044][T15119] usb usb8: usbfs: process 15119 (syz.0.2294) did not claim interface 0 before use
[  966.190694][ T5935] usb 3-1: new high-speed USB device number 85 using dummy_hcd
[  966.432259][ T5935] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  966.450760][ T5935] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  966.470769][ T5935] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  966.480058][ T5935] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  966.491356][ T5935] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  966.506386][ T5935] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  966.515914][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  966.688418][T15129] hugetlbfs: syz.0.2298 (15129): Using mlock ulimits for SHM_HUGETLB is obsolete
[  966.990798][ T5935] usb 3-1: Product: syz
[  966.996068][ T5935] usb 3-1: Manufacturer: syz
[  967.242598][ T5935] cdc_wdm 3-1:1.0: skipping garbage
[  967.249655][ T5935] cdc_wdm 3-1:1.0: skipping garbage
[  967.310988][ T5935] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  967.330897][ T5935] cdc_wdm 3-1:1.0: Unknown control protocol
[  967.452887][   T30] audit: type=1400 audit(967.416:831): avc:  denied  { read write } for  pid=15115 comm="syz.2.2293" name="cdc-wdm0" dev="devtmpfs" ino=4168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[  967.505973][   T30] audit: type=1400 audit(967.416:832): avc:  denied  { open } for  pid=15115 comm="syz.2.2293" path="/dev/cdc-wdm0" dev="devtmpfs" ino=4168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[  967.567319][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  967.574123][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  967.582293][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  967.588898][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  967.600588][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  967.607203][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  967.613455][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  967.620043][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  967.626319][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  967.632911][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  967.639161][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  967.645769][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  967.660542][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  967.667159][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  967.677768][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  967.684392][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  967.700653][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  967.707275][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  967.720656][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  967.727277][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  968.369541][ T5935] usb 3-1: USB disconnect, device number 85
[  968.375552][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  968.476064][T15158] syzkaller0: entered promiscuous mode
[  968.485320][T15158] syzkaller0: entered allmulticast mode
[  968.989396][   T30] audit: type=1400 audit(968.956:833): avc:  denied  { connect } for  pid=15168 comm="syz.0.2311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  969.221742][   T30] audit: type=1400 audit(969.196:834): avc:  denied  { transfer } for  pid=15181 comm="syz.2.2316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  969.250563][ T5935] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  969.317012][   T30] audit: type=1326 audit(969.286:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15179 comm="syz.8.2315" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f586659c799 code=0x0
[  969.445848][ T5935] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  969.455691][ T5935] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  969.463891][ T5935] usb 6-1: Product: syz
[  969.477443][ T5935] usb 6-1: Manufacturer: syz
[  969.486406][ T5935] usb 6-1: SerialNumber: syz
[  969.499670][ T5935] usb 6-1: config 0 descriptor??
[  969.515764][ T5935] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  969.840589][   T30] audit: type=1400 audit(969.806:836): avc:  denied  { listen } for  pid=15193 comm="syz.0.2320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  969.941888][T15200] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2323'.
[  969.979615][ T5823] block nbd8: Receive control failed (result -32)
[  969.984102][ T5814] block nbd8: Receive control failed (result -32)
[  969.995865][T12681] block nbd8: Receive control failed (result -32)
[  970.006283][T15180] block nbd8: shutting down sockets
[  970.098584][T15210] binder_alloc: 15209: binder_alloc_buf, no vma
[  970.163974][ T5935] gspca_sunplus: reg_r err -71
[  970.174920][ T5935] sunplus 6-1:0.0: probe with driver sunplus failed with error -71
[  970.185794][ T5935] usb 6-1: USB disconnect, device number 19
[  970.314032][ T1153] Bluetooth: hci5: Frame reassembly failed (-84)
[  970.321531][T15220] Bluetooth: hci5: Frame reassembly failed (-84)
[  970.380535][T11619] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  970.533372][T11619] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  970.545622][T11619] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  970.554890][T11619] usb 9-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  970.562975][T11619] usb 9-1: Product: syz
[  970.567907][T11619] usb 9-1: SerialNumber: syz
[  971.478939][   T30] audit: type=1400 audit(971.446:837): avc:  denied  { ioctl } for  pid=15228 comm="syz.2.2335" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  971.623521][T11619] cdc_ncm 9-1:1.0: MAC-Address: 42:42:42:42:42:42
[  971.629982][T11619] cdc_ncm 9-1:1.0: dwNtbInMaxSize=5 is too small. Using 2048
[  971.641173][T11619] cdc_ncm 9-1:1.0: setting rx_max = 2048
[  971.701773][T15231] nbd0: detected capacity change from 0 to 127
[  971.758684][ T5814] block nbd0: Receive control failed (result -104)
[  971.824596][T11619] cdc_ncm 9-1:1.0: setting tx_max = 16384
[  971.860686][T11619] cdc_ncm 9-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.8-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  971.894108][   T30] audit: type=1400 audit(971.866:838): avc:  denied  { read write } for  pid=15239 comm="syz.0.2340" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  971.908884][T11619] usb 9-1: USB disconnect, device number 2
[  971.960843][   T30] audit: type=1400 audit(971.896:839): avc:  denied  { open } for  pid=15239 comm="syz.0.2340" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  971.965813][T11619] cdc_ncm 9-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.8-1, CDC NCM (NO ZLP)
[  972.328152][ T5814] Bluetooth: hci5: command 0x1003 tx timeout
[  972.336140][T12681] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  973.196275][   T30] audit: type=1400 audit(973.166:840): avc:  denied  { watch } for  pid=15261 comm="syz.2.2350" path="/487/file0" dev="tmpfs" ino=2777 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  973.316691][   T30] audit: type=1400 audit(973.166:841): avc:  denied  { watch_sb } for  pid=15261 comm="syz.2.2350" path="/487/file0" dev="tmpfs" ino=2777 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  973.591244][   T30] audit: type=1400 audit(973.556:842): avc:  denied  { read } for  pid=15271 comm="syz.5.2355" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  973.980387][ T5823] Bluetooth: hci4: unexpected event for opcode 0x2028
[  975.007272][T15308] Invalid option length (64930) for dns_resolver key
[  976.150525][ T5925] usb 3-1: new high-speed USB device number 86 using dummy_hcd
[  976.312800][ T5925] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  976.341416][ T5925] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  976.366186][ T5925] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  976.376578][ T5925] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  976.388244][ T5925] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  976.403413][ T5925] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  976.412797][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  976.438581][ T5925] usb 3-1: Product: syz
[  976.450714][ T5925] usb 3-1: Manufacturer: syz
[  976.481345][ T5925] cdc_wdm 3-1:1.0: skipping garbage
[  976.493356][ T5925] cdc_wdm 3-1:1.0: skipping garbage
[  976.521650][ T5925] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  976.544824][ T5925] cdc_wdm 3-1:1.0: Unknown control protocol
[  976.791326][    C0] wdm_int_callback: 3703 callbacks suppressed
[  976.791350][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  976.804002][    C0] wdm_int_callback: 3703 callbacks suppressed
[  976.804019][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  976.816850][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  976.823458][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  976.829838][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  976.836437][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  976.842715][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  976.849308][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  976.855631][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  976.862213][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  976.868778][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  976.875372][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  976.881623][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  976.888207][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  976.894437][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  976.901018][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  976.907257][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  976.913848][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  976.920137][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  976.926727][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  976.933502][ T5925] usb 3-1: USB disconnect, device number 86
[  976.933547][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  977.615074][T11617] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  978.010575][T11617] usb 6-1: Using ep0 maxpacket: 16
[  978.487779][T11617] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  978.499787][T11617] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  978.508980][T11617] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  978.517071][T11617] usb 6-1: Product: syz
[  978.521649][T11617] usb 6-1: Manufacturer: syz
[  978.526878][T11617] usb 6-1: SerialNumber: syz
[  978.535659][T11617] usb 6-1: config 0 descriptor??
[  978.543775][T11617] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  978.553783][T11617] em28xx 6-1:0.0: DVB interface 0 found: bulk
[  979.153598][T11617] em28xx 6-1:0.0: unknown em28xx chip ID (0)
[  979.844062][T11617] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  979.880306][T11617] em28xx 6-1:0.0: board has no eeprom
[  980.479733][T15359] em28xx 6-1:0.0: reading from i2c device at 0x482c failed (error=-5)
[  980.714609][T11617] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  980.749360][T11617] em28xx 6-1:0.0: dvb set to bulk mode.
[  980.768037][T11620] em28xx 6-1:0.0: Binding DVB extension
[  980.804288][T11617] usb 6-1: USB disconnect, device number 20
[  980.855751][T11617] em28xx 6-1:0.0: Disconnecting em28xx
[  981.777665][T11620] em28xx 6-1:0.0: Registering input extension
[  981.789098][T11617] em28xx 6-1:0.0: Closing input extension
[  981.876086][T11617] em28xx 6-1:0.0: Freeing device
[  982.906521][T15436] netlink: 388 bytes leftover after parsing attributes in process `syz.2.2416'.
[  983.369553][T15444] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2419'.
[  984.804521][T15476] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2429'.
[  984.968199][T15483] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2432'.
[  985.102742][T15484] xfrm0 speed is unknown, defaulting to 1000
[  985.320754][T11619] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  985.330634][T11617] usb 1-1: new high-speed USB device number 88 using dummy_hcd
[  985.550619][T11617] usb 1-1: Using ep0 maxpacket: 16
[  985.570523][T11619] usb 6-1: Using ep0 maxpacket: 16
[  985.570537][    T9] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  985.584485][T11619] usb 6-1: config 0 has no interfaces?
[  985.602504][T11619] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  985.615498][T11617] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  985.644493][T11619] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  985.682263][T11617] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  985.698812][T11619] usb 6-1: Manufacturer: syz
[  985.720529][T11617] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  985.735186][T11619] usb 6-1: config 0 descriptor??
[  985.751958][    T9] usb 9-1: Using ep0 maxpacket: 8
[  985.795131][    T9] usb 9-1: unable to get BOS descriptor or descriptor too short
[  985.808416][    T9] usb 9-1: config 4 interface 0 has no altsetting 0
[  985.834771][    T9] usb 9-1: string descriptor 0 read error: -22
[  985.841769][    T9] usb 9-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  985.888917][    T9] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[  985.984519][    T9] usb 9-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  986.051982][    T9] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  986.117909][    T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  986.162195][    T9] usb 9-1: media controller created
[  986.202606][T15489] usb 9-1: dvb_usb_au6610: wlen=83, aborting
[  986.257363][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  986.267840][T15484] xfrm0 speed is unknown, defaulting to 1000
[  986.423314][    T9] zl10353_read_register: readreg error (reg=127, ret==0)
[  986.452716][T15501] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2439'.
[  986.554237][    T9] usb 9-1: USB disconnect, device number 3
[  987.458378][T15518] netlink: 'syz.8.2445': attribute type 4 has an invalid length.
[  987.484471][T15519] netlink: 179596 bytes leftover after parsing attributes in process `syz.2.2444'.
[  987.720751][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  987.730657][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  987.929831][T15520] xfrm0 speed is unknown, defaulting to 1000
[  988.060684][T11618] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  988.161158][T11617] usb 1-1: string descriptor 0 read error: -71
[  988.179996][T11617] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  988.206404][T11617] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  988.255794][T11617] usb 1-1: rejected 1 configuration due to insufficient available bus power
[  988.295909][T11617] usb 1-1: no configuration chosen from 1 choice
[  988.320941][T11618] usb 9-1: Using ep0 maxpacket: 16
[  988.330574][T11617] usb 1-1: USB disconnect, device number 88
[  988.359953][T11618] usb 9-1: config 0 has no interfaces?
[  988.366574][T11618] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  988.380565][T11618] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  988.389257][T11618] usb 9-1: Manufacturer: syz
[  988.428277][T11618] usb 9-1: config 0 descriptor??
[  989.002867][T15554] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2458'.
[  989.034421][T15554] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  989.073079][T15518] xfrm0 speed is unknown, defaulting to 1000
[  989.784968][    T9] usb 6-1: USB disconnect, device number 21
[  990.219621][T15580] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.2467'.
[  990.276332][    T9] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  990.555751][    T9] usb 6-1: Using ep0 maxpacket: 32
[  990.625826][    T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  990.828201][    T9] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  990.882109][    T9] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  990.917399][ T5925] usb 9-1: USB disconnect, device number 4
[  990.956911][    T9] usb 6-1: Product: syz
[  990.965526][    T9] usb 6-1: Manufacturer: syz
[  990.970189][    T9] usb 6-1: SerialNumber: syz
[  990.998115][    T9] usb 6-1: config 0 descriptor??
[  991.030107][T15576] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  991.046266][    T9] hub 6-1:0.0: bad descriptor, ignoring hub
[  991.073641][    T9] hub 6-1:0.0: probe with driver hub failed with error -5
[  991.378904][   T30] kauditd_printk_skb: 3 callbacks suppressed
[  991.378920][   T30] audit: type=1400 audit(991.346:846): avc:  denied  { bind } for  pid=15602 comm="syz.0.2478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  991.443888][ T5925] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  991.470813][T11617] usb 3-1: new high-speed USB device number 87 using dummy_hcd
[  991.591277][ T5935] usb 6-1: reset high-speed USB device number 22 using dummy_hcd
[  991.600875][ T5925] usb 9-1: Using ep0 maxpacket: 16
[  991.612062][ T5925] usb 9-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  991.621644][ T5925] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  991.630113][ T5925] usb 9-1: Product: syz
[  991.634761][ T5925] usb 9-1: Manufacturer: syz
[  991.640298][ T5925] usb 9-1: SerialNumber: syz
[  991.640536][T11617] usb 3-1: Using ep0 maxpacket: 32
[  991.657009][T11617] usb 3-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31
[  991.671990][ T5925] usb 9-1: config 0 descriptor??
[  991.680051][T11617] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  991.743313][T11617] usb 3-1: selecting invalid altsetting 3
[  991.764022][ T5935] usb 6-1: device firmware changed
[  991.778540][T11617] comedi comedi5: could not set alternate setting 3 in high speed
[  991.784071][ T5935] usb 6-1: USB disconnect, device number 22
[  991.802675][T11617] usbduxsigma 3-1:128.0: driver 'usbduxsigma' failed to auto-configure device.
[  991.835087][T11617] usbduxsigma 3-1:128.0: probe with driver usbduxsigma failed with error -22
[  992.086286][ T5925] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  992.159354][T15614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  992.169628][T15614] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  992.473658][ T5925] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  992.483650][ T5925] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  992.491647][ T5925] usb 9-1: media controller created
[  992.510041][ T5925] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  992.530515][ T5935] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  992.701305][ T5935] usb 6-1: Using ep0 maxpacket: 32
[  992.713261][   T30] audit: type=1400 audit(992.686:847): avc:  denied  { bind } for  pid=15575 comm="syz.5.2466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  992.736249][ T5935] usb 6-1: unable to get BOS descriptor or descriptor too short
[  992.745753][ T5935] usb 6-1: no configurations
[  992.750495][ T5935] usb 6-1: can't read configurations, error -22
[  993.054126][ T5925] zl10353_read_register: readreg error (reg=127, ret==0)
[  993.061635][ T5925] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  993.076008][ T5925] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  993.081106][   T30] audit: type=1400 audit(993.046:848): avc:  denied  { getopt } for  pid=15620 comm="syz.0.2483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  993.120218][ T5925] usb 9-1: USB disconnect, device number 5
[  993.169361][ T5925] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  993.185756][T15625] openvswitch: netlink: Flow key attr not present in new flow.
[  993.679123][T15633] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2487'.
[  994.318366][T11617] usb 3-1: USB disconnect, device number 87
[  995.007507][T15653] syzkaller0: entered promiscuous mode
[  995.014427][T15653] syzkaller0: entered allmulticast mode
[  995.110707][T11619] usb 3-1: new high-speed USB device number 88 using dummy_hcd
[  995.143348][T15661] fuse: Bad value for 'fd'
[  995.159291][   T30] audit: type=1400 audit(995.126:849): avc:  denied  { ioctl } for  pid=15642 comm="syz.5.2491" path="/dev/ptyqe" dev="devtmpfs" ino=133 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  995.283107][T11619] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  995.307387][T11619] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  995.347471][T11619] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  995.373080][T11619] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  995.404680][T11619] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  995.433713][T11619] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  995.442860][T11617] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  995.451055][T11619] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  995.463294][T11619] usb 3-1: Product: syz
[  995.475726][T11619] usb 3-1: Manufacturer: syz
[  995.499377][T11619] cdc_wdm 3-1:1.0: skipping garbage
[  995.511541][T11619] cdc_wdm 3-1:1.0: skipping garbage
[  995.540053][T11619] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  995.553407][T11619] cdc_wdm 3-1:1.0: Unknown control protocol
[  996.020717][T11617] usb 9-1: Using ep0 maxpacket: 8
[  996.139365][T11617] usb 9-1: config index 0 descriptor too short (expected 30, got 18)
[  996.157259][T11617] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  996.179900][T11617] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  996.228517][T11618] usb 3-1: USB disconnect, device number 88
[  996.256947][T11617] usb 9-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  996.270674][T11617] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  996.278765][T11617] usb 9-1: Product: syz
[  996.283129][T11617] usb 9-1: Manufacturer: syz
[  996.288883][T11617] usb 9-1: SerialNumber: syz
[  996.299758][T11617] usb 9-1: config 0 descriptor??
[  996.620796][T11618] usb 1-1: new high-speed USB device number 89 using dummy_hcd
[  996.781771][T11618] usb 1-1: Using ep0 maxpacket: 8
[  996.814526][T11618] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  996.848360][T11618] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  996.876545][T11618] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  996.915489][T11618] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  996.937718][T11618] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  996.951362][T11618] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  997.175193][T11618] usb 1-1: GET_CAPABILITIES returned 0
[  997.191270][T11618] usbtmc 1-1:16.0: can't read capabilities
[  997.379016][    C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  997.389650][T15665] usbtmc 1-1:16.0: Unable to send data, error -71
[  997.416110][ T5935] usb 1-1: USB disconnect, device number 89
[  998.068132][ T5925] usb 9-1: USB disconnect, device number 6
[  998.074554][ T5935] usb 3-1: new high-speed USB device number 89 using dummy_hcd
[  998.125376][T15682] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32)
[  998.150068][T15682] faux_driver vgem: [drm] Unknown color mode 3; guessing buffer size.
[  998.188148][   T30] audit: type=1400 audit(998.156:850): avc:  denied  { create } for  pid=15679 comm="syz.0.2504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[  998.250503][ T5935] usb 3-1: Using ep0 maxpacket: 8
[  998.258027][ T5935] usb 3-1: unable to get BOS descriptor or descriptor too short
[  998.282175][ T5935] usb 3-1: config 4 interface 0 has no altsetting 0
[  998.309860][ T5935] usb 3-1: string descriptor 0 read error: -22
[  998.317043][ T5935] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  998.326426][ T5935] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[  998.334716][ T5925] kernel read not supported for file /video37 (pid: 5925 comm: kworker/0:5)
[  998.354507][ T5935] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  998.355758][T15693] tipc: Failed to obtain node identity
[  998.367910][T15693] tipc: Enabling of bearer <ib:vcan0> rejected, failed to enable media
[  998.401557][ T5935] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  998.436523][ T5935] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  998.449485][ T5935] usb 3-1: media controller created
[  998.468522][ T5935] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  998.581896][ T5935] zl10353_read_register: readreg error (reg=127, ret==0)
[  998.673998][ T5935] usb 3-1: USB disconnect, device number 89
[  998.806905][T15682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  999.240666][   T30] audit: type=1400 audit(998.846:851): avc:  denied  { create } for  pid=15701 comm="syz.5.2512" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  999.371625][T15679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  999.536031][   T30] audit: type=1400 audit(999.476:852): avc:  denied  { unlink } for  pid=12096 comm="syz-executor" name="file0" dev="tmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  999.609845][T15721] sock: sock_timestamping_bind_phc: sock not bind to device
[  999.639329][T15720] 9p: Bad value for 'rfdno'
[  999.880577][ T5935] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[ 1000.031919][ T5935] usb 9-1: Using ep0 maxpacket: 8
[ 1000.051728][ T5935] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1000.080320][ T5935] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1000.113288][ T5935] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1000.144381][ T5935] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1000.208218][ T5935] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1000.217943][ T5935] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1000.434464][ T5935] usb 9-1: GET_CAPABILITIES returned 0
[ 1000.452866][ T5935] usbtmc 9-1:16.0: can't read capabilities
[ 1000.640977][ T5935] usb 1-1: new high-speed USB device number 90 using dummy_hcd
[ 1000.658472][    C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1000.709671][ T5925] usb 9-1: USB disconnect, device number 7
[ 1000.835819][ T5935] usb 1-1: Using ep0 maxpacket: 8
[ 1000.868141][ T5935] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[ 1000.897074][ T5935] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1000.913292][ T5935] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1000.937217][ T5935] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1000.962875][ T5935] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1001.008113][ T5935] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1001.033470][ T5935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1001.066657][T15755] usb usb8: usbfs: process 15755 (syz.2.2532) did not claim interface 0 before use
[ 1001.114176][T15755] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[ 1001.132243][T15755] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[ 1001.142184][T15755] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[ 1001.762882][   T25] block nbd0: Possible stuck request ffff888027848000: control (read@0,1024B). Runtime 30 seconds
[ 1001.774908][   T25] block nbd0: Possible stuck request ffff888027848200: control (read@1024,1024B). Runtime 30 seconds
[ 1001.786740][   T25] block nbd0: Possible stuck request ffff888027848400: control (read@2048,1024B). Runtime 30 seconds
[ 1001.797811][   T25] block nbd0: Possible stuck request ffff888027848600: control (read@3072,1024B). Runtime 30 seconds
[ 1001.869397][T11618] usb 1-1: USB disconnect, device number 90
[ 1001.875458][T15771] usbtmc 1-1:16.0: simple usb_control_msg failed -71
[ 1002.522569][   T30] audit: type=1400 audit(1002.496:853): avc:  denied  { mount } for  pid=15784 comm="syz.7.2542" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[ 1002.633255][ T5935] usb 3-1: new high-speed USB device number 90 using dummy_hcd
[ 1002.690603][ T5925] usb 1-1: new high-speed USB device number 91 using dummy_hcd
[ 1002.803957][ T5935] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[ 1002.816571][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1002.827439][ T5935] usb 3-1: Product: syz
[ 1002.834799][ T5935] usb 3-1: Manufacturer: syz
[ 1002.844163][ T5935] usb 3-1: SerialNumber: syz
[ 1002.850529][ T5925] usb 1-1: Using ep0 maxpacket: 16
[ 1002.868427][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1002.892771][ T5935] usb 3-1: config 0 descriptor??
[ 1002.910128][ T5925] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1002.922783][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1002.933704][ T5935] hub 3-1:0.0: bad descriptor, ignoring hub
[ 1002.949315][ T5935] hub 3-1:0.0: probe with driver hub failed with error -5
[ 1002.960024][ T5925] usb 1-1: Product: syz
[ 1002.968800][ T5925] usb 1-1: Manufacturer: syz
[ 1002.980373][ T5925] usb 1-1: SerialNumber: syz
[ 1002.995599][ T5925] usb 1-1: config 0 descriptor??
[ 1003.008052][ T5925] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1003.018868][ T5925] em28xx 1-1:0.0: DVB interface 0 found: bulk
[ 1003.107347][ T5935] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state.
[ 1003.136833][ T5935] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1003.174389][ T5935] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo)
[ 1003.207311][ T5935] usb 3-1: media controller created
[ 1003.267620][ T5935] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1003.398581][ T5935] DVB: Unable to find symbol dib7000p_attach()
[ 1003.406015][ T5935] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo'
[ 1003.476244][T15803] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[ 1003.507895][T15803] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[ 1003.570554][ T5935] rc_core: IR keymap rc-dib0700-rc5 not found
[ 1003.588303][ T5935] Registered IR keymap rc-empty
[ 1003.618746][ T5935] dvb-usb: could not initialize remote control.
[ 1003.630974][ T5925] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[ 1003.642683][ T5935] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected.
[ 1003.710046][   T30] audit: type=1400 audit(1003.676:854): avc:  denied  { map } for  pid=15782 comm="syz.2.2541" path="socket:[59160]" dev="sockfs" ino=59160 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[ 1003.774314][   T30] audit: type=1400 audit(1003.716:855): avc:  denied  { read accept } for  pid=15782 comm="syz.2.2541" path="socket:[59160]" dev="sockfs" ino=59160 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[ 1003.895491][ T5935] usb 3-1: USB disconnect, device number 90
[ 1004.015510][ T5935] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected.
[ 1004.065388][ T5925] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1004.108712][ T5925] em28xx 1-1:0.0: board has no eeprom
[ 1004.410549][ T5925] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1004.424947][ T5925] em28xx 1-1:0.0: dvb set to bulk mode.
[ 1004.448122][ T5935] em28xx 1-1:0.0: Binding DVB extension
[ 1004.747204][   T30] audit: type=1800 audit(1004.716:856): pid=15831 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.2552" name="bus" dev="tmpfs" ino=2975 res=0 errno=0
[ 1005.524902][T15787] em28xx 1-1:0.0: reading from i2c device at 0x482c failed (error=-5)
[ 1005.618930][ T5935] em28xx 1-1:0.0: Registering input extension
[ 1005.645667][ T5935] usb 1-1: USB disconnect, device number 91
[ 1005.657614][ T5935] em28xx 1-1:0.0: Disconnecting em28xx
[ 1005.690558][ T5925] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[ 1005.699385][ T5935] em28xx 1-1:0.0: Closing input extension
[ 1005.749360][ T5935] em28xx 1-1:0.0: Freeing device
[ 1005.850544][T11618] usb 3-1: new high-speed USB device number 91 using dummy_hcd
[ 1005.895685][ T5925] usb 6-1: Using ep0 maxpacket: 16
[ 1005.911712][ T5925] usb 6-1: config 0 has an invalid interface number: 68 but max is 0
[ 1005.936590][ T5925] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1005.976359][ T5925] usb 6-1: config 0 has no interface number 0
[ 1006.002401][ T5925] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4
[ 1006.021246][T11618] usb 3-1: Using ep0 maxpacket: 32
[ 1006.026595][ T5925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1006.037971][T11618] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1006.056870][T11618] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1006.071206][ T5925] usb 6-1: Product: syz
[ 1006.073246][T11618] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1006.090568][ T5925] usb 6-1: Manufacturer: syz
[ 1006.100688][ T5925] usb 6-1: SerialNumber: syz
[ 1006.110914][T11618] usb 3-1: Product: syz
[ 1006.121182][T11618] usb 3-1: Manufacturer: syz
[ 1006.137785][T11618] usb 3-1: SerialNumber: syz
[ 1006.138206][ T5925] usb 6-1: config 0 descriptor??
[ 1006.167945][T15852] usb usb8: usbfs: process 15852 (syz.7.2558) did not claim interface 0 before use
[ 1006.190853][T11618] usb 3-1: config 0 descriptor??
[ 1006.200252][T15847] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[ 1006.218156][T11618] hub 3-1:0.0: bad descriptor, ignoring hub
[ 1006.223483][ T5925] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 1006.239194][T11618] hub 3-1:0.0: probe with driver hub failed with error -5
[ 1006.415597][   T12] usb 6-1: Failed to submit usb control message: -71
[ 1006.415938][ T5925] usb 6-1: USB disconnect, device number 25
[ 1006.464767][   T12] usb 6-1: unable to send the bmi data to the device: -71
[ 1006.495007][   T12] usb 6-1: unable to get target info from device
[ 1006.523379][   T12] usb 6-1: could not get target info (-71)
[ 1006.548819][   T12] usb 6-1: could not probe fw (-71)
[ 1007.536089][T15875] usb usb8: usbfs: process 15875 (syz.5.2564) did not claim interface 0 before use
[ 1007.971245][ T5925] usb 1-1: new high-speed USB device number 92 using dummy_hcd
[ 1008.131561][ T5925] usb 1-1: Using ep0 maxpacket: 16
[ 1008.142855][ T5925] usb 1-1: config 0 has an invalid interface number: 68 but max is 0
[ 1008.158747][ T5925] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1008.169717][ T5925] usb 1-1: config 0 has no interface number 0
[ 1008.177621][ T5925] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4
[ 1008.186968][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1008.195530][ T5925] usb 1-1: Product: syz
[ 1008.199786][ T5925] usb 1-1: Manufacturer: syz
[ 1008.204558][ T5925] usb 1-1: SerialNumber: syz
[ 1008.213815][ T5925] usb 1-1: config 0 descriptor??
[ 1008.236290][ T5925] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 1008.426516][T12478] usb 1-1: Failed to submit usb control message: -71
[ 1008.426582][T12478] usb 1-1: unable to send the bmi data to the device: -71
[ 1008.426599][T12478] usb 1-1: unable to get target info from device
[ 1008.426613][T12478] usb 1-1: could not get target info (-71)
[ 1008.426634][T12478] usb 1-1: could not probe fw (-71)
[ 1008.426710][    T9] usb 1-1: USB disconnect, device number 92
[ 1008.810567][T11618] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[ 1008.950535][    T9] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[ 1008.962206][T11618] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1008.971077][T11618] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1008.983733][T11618] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1008.992870][T11618] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1009.004217][T11618] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1009.022394][T11618] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1009.032132][T11618] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1009.040176][T11618] usb 6-1: Product: syz
[ 1009.045053][T11618] usb 6-1: Manufacturer: syz
[ 1009.092364][T11618] cdc_wdm 6-1:1.0: skipping garbage
[ 1009.113521][T11618] cdc_wdm 6-1:1.0: skipping garbage
[ 1009.127840][T11618] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device
[ 1009.136949][T11618] cdc_wdm 6-1:1.0: Unknown control protocol
[ 1009.423334][    T9] usb 9-1: config index 0 descriptor too short (expected 23569, got 27)
[ 1009.691889][ T5935] usb 3-1: USB disconnect, device number 91
[ 1009.697685][T11618] usb 6-1: USB disconnect, device number 26
[ 1009.830883][    T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1009.852179][    T9] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[ 1009.861310][    T9] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[ 1009.870691][    T9] usb 9-1: Manufacturer: syz
[ 1009.882148][    T9] usb 9-1: config 0 descriptor??
[ 1009.980588][    T9] rc_core: IR keymap rc-hauppauge not found
[ 1009.986661][    T9] Registered IR keymap rc-empty
[ 1009.992624][    T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0
[ 1010.006411][    T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input21
[ 1010.101451][    T9] usb 9-1: USB disconnect, device number 8
[ 1010.140535][T11619] usb 3-1: new high-speed USB device number 92 using dummy_hcd
[ 1010.303677][T11619] usb 3-1: config index 0 descriptor too short (expected 23569, got 27)
[ 1010.335252][T11619] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1010.362663][T11619] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[ 1010.381303][T11619] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[ 1010.403395][T11619] usb 3-1: Manufacturer: syz
[ 1010.419342][T11619] usb 3-1: config 0 descriptor??
[ 1010.500640][T11619] rc_core: IR keymap rc-hauppauge not found
[ 1010.512928][T11619] Registered IR keymap rc-empty
[ 1010.524530][T11619] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[ 1010.547778][T11619] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input22
[ 1010.750809][    T9] usb 3-1: USB disconnect, device number 92
[ 1011.803362][   T30] audit: type=1400 audit(1011.776:857): avc:  denied  { write } for  pid=15953 comm="syz.0.2591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 1011.904691][T15958] syzkaller0: entered promiscuous mode
[ 1011.911046][T15958] syzkaller0: entered allmulticast mode
[ 1011.947993][T15958] tipc: Started in network mode
[ 1011.953161][T15958] tipc: Node identity cacb739be371, cluster identity 4711
[ 1011.967319][T15958] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1011.974705][T15955] xfrm0 speed is unknown, defaulting to 1000
[ 1011.986287][T15956] tipc: Resetting bearer <eth:syzkaller0>
[ 1012.008923][T15956] tipc: Disabling bearer <eth:syzkaller0>
[ 1012.106803][T15960] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2593'.
[ 1012.160679][T11618] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[ 1012.374110][T11618] usb 6-1: Using ep0 maxpacket: 16
[ 1012.416493][T11618] usb 6-1: config 0 has no interfaces?
[ 1012.448436][T11618] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1012.506464][T11618] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1012.537840][T11618] usb 6-1: Manufacturer: syz
[ 1012.614976][T11618] usb 6-1: config 0 descriptor??
[ 1013.678455][T15986] xfrm0 speed is unknown, defaulting to 1000
[ 1014.742871][T11618] usb 6-1: USB disconnect, device number 27
[ 1015.180677][T11618] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[ 1015.374002][T11618] usb 6-1: Using ep0 maxpacket: 16
[ 1015.388551][T11618] usb 6-1: config 0 has an invalid interface number: 68 but max is 0
[ 1015.408494][T11618] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1015.433314][T11618] usb 6-1: config 0 has no interface number 0
[ 1015.439441][T11618] usb 6-1: config 0 interface 68 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1015.455624][T11618] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4
[ 1015.466889][T11618] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1015.490656][T11618] usb 6-1: Product: syz
[ 1015.494859][T11618] usb 6-1: Manufacturer: syz
[ 1015.499469][T11618] usb 6-1: SerialNumber: syz
[ 1015.518879][T11618] usb 6-1: config 0 descriptor??
[ 1015.542829][T11618] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 1015.736183][   T36] usb 6-1: Failed to submit usb control message: -71
[ 1015.740613][T11618] usb 6-1: USB disconnect, device number 28
[ 1015.743749][   T36] usb 6-1: unable to send the bmi data to the device: -71
[ 1015.760628][   T36] usb 6-1: unable to get target info from device
[ 1015.768428][   T36] usb 6-1: could not get target info (-71)
[ 1015.777679][T16025] binder: 16018:16025 ioctl c0306201 0 returned -14
[ 1015.814741][   T36] usb 6-1: could not probe fw (-71)
[ 1016.097770][   T30] audit: type=1800 audit(1016.066:858): pid=16030 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.2614" name="bus" dev="tmpfs" ino=423 res=0 errno=0
[ 1016.384886][T16032] xfrm0 speed is unknown, defaulting to 1000
[ 1016.891141][T16025] syz.0.2613 (16025): drop_caches: 2
[ 1017.094659][T16037] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2615'.
[ 1017.112593][T16047] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[ 1017.390531][T11619] usb 1-1: new high-speed USB device number 93 using dummy_hcd
[ 1017.582430][T11619] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1017.595867][T11619] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1017.616519][T11619] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1017.636066][T11619] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1017.657945][T11619] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1017.690412][T11619] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1017.711714][T11619] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1017.727023][T11619] usb 1-1: Product: syz
[ 1017.738055][T11619] usb 1-1: Manufacturer: syz
[ 1017.771761][T11619] cdc_wdm 1-1:1.0: skipping garbage
[ 1017.781224][T11619] cdc_wdm 1-1:1.0: skipping garbage
[ 1017.807489][T11619] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[ 1017.818155][T11619] cdc_wdm 1-1:1.0: Unknown control protocol
[ 1017.998908][    T9] usb 1-1: USB disconnect, device number 93
[ 1018.210544][T11619] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[ 1018.370947][T11619] usb 9-1: Using ep0 maxpacket: 8
[ 1018.379957][T11619] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[ 1018.404035][T11619] usb 9-1: config 0 has no interface number 0
[ 1018.427100][T11619] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1018.464974][T11619] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1018.492436][T11619] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1018.532635][T11619] usb 9-1: config 0 descriptor??
[ 1018.571103][T11619] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1019.128804][T11619] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[ 1019.191622][T11619] hid-generic 0000:0000:0000.001D: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1019.284209][T11618] usb 9-1: USB disconnect, device number 9
[ 1019.571509][T11619] usb 1-1: new high-speed USB device number 94 using dummy_hcd
[ 1019.740479][T11619] usb 1-1: Using ep0 maxpacket: 32
[ 1019.748903][T11619] usb 1-1: config 0 has an invalid interface number: 89 but max is 0
[ 1019.759825][T11619] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1019.783594][T11619] usb 1-1: config 0 has no interface number 0
[ 1019.805458][T11619] usb 1-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1019.848657][T11619] usb 1-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68
[ 1019.869769][T11619] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1019.908295][T11619] usb 1-1: Product: syz
[ 1019.930950][T11619] usb 1-1: Manufacturer: syz
[ 1019.944830][T11619] usb 1-1: SerialNumber: syz
[ 1019.986864][T11619] usb 1-1: config 0 descriptor??
[ 1020.007294][T11619] hub 1-1:0.89: bad descriptor, ignoring hub
[ 1020.023611][T11619] hub 1-1:0.89: probe with driver hub failed with error -5
[ 1020.039464][T11619] option 1-1:0.89: GSM modem (1-port) converter detected
[ 1020.053268][T16082] netlink: 52 bytes leftover after parsing attributes in process `syz.8.2630'.
[ 1020.491424][    T9] usb 1-1: USB disconnect, device number 94
[ 1020.499006][    T9] option 1-1:0.89: device disconnected
[ 1020.623462][T16088] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[ 1021.046831][T16093] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2634'.
[ 1021.063993][T16093] geneve2: entered promiscuous mode
[ 1021.350918][T15798] usb 1-1: new high-speed USB device number 95 using dummy_hcd
[ 1021.562871][T15798] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1022.184359][T15798] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1022.199465][T15798] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1022.208706][T15798] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1022.220042][T15798] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1022.233315][T15798] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1022.242859][T15798] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1022.251011][T15798] usb 1-1: Product: syz
[ 1022.255207][T15798] usb 1-1: Manufacturer: syz
[ 1022.266692][T15798] cdc_wdm 1-1:1.0: skipping garbage
[ 1022.272033][T15798] cdc_wdm 1-1:1.0: skipping garbage
[ 1022.278811][T15798] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[ 1022.288512][T15798] cdc_wdm 1-1:1.0: Unknown control protocol
[ 1022.475609][T15798] usb 1-1: USB disconnect, device number 95
[ 1022.620522][    T9] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[ 1022.771800][    T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1022.781984][    T9] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1022.792910][    T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1022.804509][    T9] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[ 1022.819172][    T9] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1022.828239][    T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1022.836285][    T9] usb 9-1: Product: syz
[ 1022.840487][    T9] usb 9-1: Manufacturer: syz
[ 1022.845091][    T9] usb 9-1: SerialNumber: syz
[ 1022.853284][    T9] usb 9-1: config 0 descriptor??
[ 1022.860188][    T9] garmin_gps 9-1:0.0: Garmin GPS usb/tty converter detected
[ 1022.868440][    T9] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8
[ 1022.878954][    T9] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8
[ 1023.194628][T16112] xfrm0 speed is unknown, defaulting to 1000
[ 1023.353614][T16125] vivid-007: =================  START STATUS  =================
[ 1023.363281][T16125] vivid-007: Enable Output Cropping: true grabbed
[ 1023.372090][T16125] vivid-007: Enable Output Composing: true grabbed
[ 1023.378734][T16125] vivid-007: Enable Output Scaler: true grabbed
[ 1023.385670][T16125] vivid-007: Tx RGB Quantization Range: Automatic grabbed
[ 1023.394809][T16125] vivid-007: Transmit Mode: HDMI grabbed
[ 1023.406114][T16125] vivid-007: Hotplug Present: 0x00000000
[ 1023.412163][T16125] vivid-007: RxSense Present: 0x00000000
[ 1023.418006][T16125] vivid-007: EDID Present: 0x00000000
[ 1023.423799][T16125] vivid-007: ==================  END STATUS  ==================
[ 1023.738431][ T5823] Bluetooth: hci2: unexpected event for opcode 0x204e
[ 1023.935371][T16137] futex_wake_op: syz.7.2647 tries to shift op by -1; fix this program
[ 1023.976788][T16139] binder: BINDER_SET_CONTEXT_MGR already set
[ 1023.999081][T16139] binder: 16138:16139 ioctl 4018620d 200000004a80 returned -16
[ 1025.183556][   T36] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0
[ 1025.218014][   T36] Bluetooth: hci5: Frame reassembly failed (-84)
[ 1025.581925][T16166] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2656'.
[ 1025.620383][T16166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2656'.
[ 1026.045671][    T9] usb 9-1: USB disconnect, device number 10
[ 1026.758297][    T9] garmin_gps 9-1:0.0: device disconnected
[ 1027.170638][T16186] openvswitch: netlink: Flow key attr not present in new flow.
[ 1027.190589][T16188] binder: BINDER_SET_CONTEXT_MGR already set
[ 1027.200603][ T5823] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1027.207654][T12681] Bluetooth: hci5: command 0x1003 tx timeout
[ 1027.220669][T16188] binder: 16187:16188 ioctl 4018620d 200000004a80 returned -16
[ 1027.365317][T16192] fuse: Bad value for 'fd'
[ 1028.215578][T16202] sock: sock_timestamping_bind_phc: sock not bind to device
[ 1031.840831][   T25] block nbd0: Possible stuck request ffff888027848000: control (read@0,1024B). Runtime 60 seconds
[ 1031.851555][   T25] block nbd0: Possible stuck request ffff888027848200: control (read@1024,1024B). Runtime 60 seconds
[ 1031.862440][   T25] block nbd0: Possible stuck request ffff888027848400: control (read@2048,1024B). Runtime 60 seconds
[ 1031.873459][   T25] block nbd0: Possible stuck request ffff888027848600: control (read@3072,1024B). Runtime 60 seconds
[ 1034.247156][ T5178] udevd[5178]: worker [13764] /devices/virtual/block/nbd0 is taking a long time
[ 1049.122401][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 1049.128706][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 1061.921853][   T25] block nbd0: Possible stuck request ffff888027848000: control (read@0,1024B). Runtime 90 seconds
[ 1061.932563][   T25] block nbd0: Possible stuck request ffff888027848200: control (read@1024,1024B). Runtime 90 seconds
[ 1061.943474][   T25] block nbd0: Possible stuck request ffff888027848400: control (read@2048,1024B). Runtime 90 seconds
[ 1061.954494][   T25] block nbd0: Possible stuck request ffff888027848600: control (read@3072,1024B). Runtime 90 seconds
[ 1092.003197][   T25] block nbd0: Possible stuck request ffff888027848000: control (read@0,1024B). Runtime 120 seconds
[ 1092.014042][   T25] block nbd0: Possible stuck request ffff888027848200: control (read@1024,1024B). Runtime 120 seconds
[ 1092.025036][   T25] block nbd0: Possible stuck request ffff888027848400: control (read@2048,1024B). Runtime 120 seconds
[ 1092.036327][   T25] block nbd0: Possible stuck request ffff888027848600: control (read@3072,1024B). Runtime 120 seconds
[ 1110.562021][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 1110.568314][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 1122.080691][   T25] block nbd0: Possible stuck request ffff888027848000: control (read@0,1024B). Runtime 150 seconds
[ 1122.091474][   T25] block nbd0: Possible stuck request ffff888027848200: control (read@1024,1024B). Runtime 150 seconds
[ 1122.102445][   T25] block nbd0: Possible stuck request ffff888027848400: control (read@2048,1024B). Runtime 150 seconds
[ 1122.113461][   T25] block nbd0: Possible stuck request ffff888027848600: control (read@3072,1024B). Runtime 150 seconds
[ 1152.180777][   T25] block nbd0: Possible stuck request ffff888027848000: control (read@0,1024B). Runtime 180 seconds
[ 1152.191594][   T25] block nbd0: Possible stuck request ffff888027848200: control (read@1024,1024B). Runtime 180 seconds
[ 1152.202699][   T25] block nbd0: Possible stuck request ffff888027848400: control (read@2048,1024B). Runtime 180 seconds
[ 1152.213704][   T25] block nbd0: Possible stuck request ffff888027848600: control (read@3072,1024B). Runtime 180 seconds
[ 1153.258334][ T5178] udevd[5178]: worker [13764] /devices/virtual/block/nbd0 timeout; kill it
[ 1153.267376][ T5178] udevd[5178]: seq 22521 '/devices/virtual/block/nbd0' killed
[ 1161.121490][   T31] INFO: task syz.2.2585:15945 blocked for more than 143 seconds.
[ 1161.129254][   T31]       Tainted: G             L      syzkaller #0
[ 1161.135830][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1161.144563][   T31] task:syz.2.2585      state:D stack:26200 pid:15945 tgid:15935 ppid:5812   task_flags:0x400140 flags:0x00080002
[ 1161.156596][   T31] Call Trace:
[ 1161.159869][   T31]  <TASK>
[ 1161.162883][   T31]  __schedule+0xfee/0x6120
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1161.167302][   T31]  ? __lock_acquire+0x4a5/0x2630
[ 1161.172306][   T31]  ? __pfx___schedule+0x10/0x10
[ 1161.177743][   T30] audit: type=1400 audit(1161.146:859): avc:  denied  { write } for  pid=5792 comm="syz-executor" path="pipe:[5337]" dev="pipefs" ino=5337 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[ 1161.200343][   T31]  ? find_held_lock+0x2b/0x80
[ 1161.205665][   T31]  ? schedule+0x2bf/0x390
[ 1161.210014][   T31]  schedule+0xdd/0x390
[ 1161.230510][   T31]  schedule_preempt_disabled+0x13/0x30
[ 1161.236027][   T31]  __mutex_lock+0xc9a/0x1b90
[ 1161.261952][   T31]  ? bdev_open+0xa2/0xe40
[ 1161.266358][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 1161.274110][   T31]  ? bd_prepare_to_claim+0x1e0/0x280
[ 1161.279408][   T31]  ? __pfx_bd_prepare_to_claim+0x10/0x10
[ 1161.285556][   T31]  ? __kasan_slab_alloc+0x89/0x90
[ 1161.290662][   T31]  ? bdev_open+0xa2/0xe40
[ 1161.294988][   T31]  bdev_open+0xa2/0xe40
[ 1161.299145][   T31]  ? iput+0x3a/0x40
[ 1161.302970][   T31]  bdev_file_open_by_dev+0x179/0x210
[ 1161.308252][   T31]  swsusp_check+0x72/0x470
[ 1161.312758][   T31]  software_resume+0x6f/0x330
[ 1161.317433][   T31]  resume_store+0x248/0x460
[ 1161.321991][   T31]  ? __pfx_resume_store+0x10/0x10
[ 1161.327030][   T31]  ? find_held_lock+0x2b/0x80
[ 1161.331738][   T31]  ? sysfs_file_kobj+0xe4/0x290
[ 1161.336588][   T31]  ? sysfs_file_kobj+0xe4/0x290
[ 1161.341454][   T31]  ? __pfx_resume_store+0x10/0x10
[ 1161.346473][   T31]  kobj_attr_store+0x58/0x80
[ 1161.351434][   T31]  ? __pfx_kobj_attr_store+0x10/0x10
[ 1161.356726][   T31]  sysfs_kf_write+0xf2/0x150
[ 1161.361405][   T31]  kernfs_fop_write_iter+0x3e0/0x5f0
[ 1161.366702][   T31]  ? __pfx_sysfs_kf_write+0x10/0x10
[ 1161.371951][   T31]  vfs_write+0x6ac/0x1070
[ 1161.376285][   T31]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[ 1161.382129][   T31]  ? __pfx_vfs_write+0x10/0x10
[ 1161.386918][   T31]  ksys_write+0x12a/0x250
[ 1161.391778][   T31]  ? __pfx_ksys_write+0x10/0x10
[ 1161.396632][   T31]  do_syscall_64+0x106/0xf80
[ 1161.401328][   T31]  ? clear_bhb_loop+0x40/0x90
[ 1161.406005][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1161.411913][   T31] RIP: 0033:0x7f23b4b9c799
[ 1161.416337][   T31] RSP: 002b:00007f23b59fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1161.424761][   T31] RAX: ffffffffffffffda RBX: 00007f23b4e16180 RCX: 00007f23b4b9c799
[ 1161.432806][   T31] RDX: 0000000000000012 RSI: 0000200000000000 RDI: 0000000000000008
[ 1161.440969][   T31] RBP: 00007f23b4c32c99 R08: 0000000000000000 R09: 0000000000000000
[ 1161.448925][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1161.456905][   T31] R13: 00007f23b4e16218 R14: 00007f23b4e16180 R15: 00007fff0136ae38
[ 1161.464926][   T31]  </TASK>
[ 1161.467973][   T31] 
[ 1161.467973][   T31] Showing all locks held in the system:
[ 1161.476400][   T31] 1 lock held by khungtaskd/31:
[ 1161.481690][   T31]  #0: ffffffff8e7e76a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[ 1161.491643][   T31] 2 locks held by kworker/u8:3/49:
[ 1161.496786][   T31]  #0: ffff88801f328148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0
[ 1161.507931][   T31]  #1: ffffc90000b97d08 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0
[ 1161.519562][   T31] 1 lock held by klogd/5167:
[ 1161.524195][   T31]  #0: ffff8880b843b1a0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140
[ 1161.534122][   T31] 2 locks held by getty/5566:
[ 1161.538782][   T31]  #0: ffff888033d180a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[ 1161.548535][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500
[ 1161.558687][   T31] 1 lock held by udevd/13764:
[ 1161.563380][   T31]  #0: ffff888027319358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40
[ 1161.573081][   T31] 6 locks held by syz.2.2585/15945:
[ 1161.578253][   T31]  #0: ffff88804a7e9b38 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[ 1161.587899][   T31]  #1: ffff888037e0e420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[ 1161.597218][   T31]  #2: ffff888062169888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[ 1161.607008][   T31]  #3: ffff88801fe8f788 (kn->active#63){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[ 1161.617065][   T31]  #4: ffffffff8e6a4308 (system_transition_mutex){+.+.}-{4:4}, at: software_resume+0x65/0x330
[ 1161.627408][   T31]  #5: ffff888027319358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xa2/0xe40
[ 1161.636663][   T31] 2 locks held by syz.7.2662/16180:
[ 1161.641860][   T31]  #0: ffffffff8f529608 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450
[ 1161.650275][   T31]  #1: ffffffff8e6a4308 (system_transition_mutex){+.+.}-{4:4}, at: lock_system_sleep+0x56/0x70
[ 1161.660686][   T31] 1 lock held by syz-executor/16185:
[ 1161.665981][   T31]  #0: ffffffff8f529608 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450
[ 1161.674467][   T31] 1 lock held by syz.8.2664/16191:
[ 1161.679563][   T31]  #0: ffffffff8f529608 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450
[ 1161.688489][   T31] 1 lock held by syz.0.2667/16200:
[ 1161.693652][   T31]  #0: ffffffff8f529608 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450
[ 1161.702129][   T31] 1 lock held by syz.5.2668/16202:
[ 1161.707230][   T31]  #0: ffffffff8f529608 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450
[ 1161.715735][   T31] 1 lock held by syz-executor/16205:
[ 1161.721030][   T31]  #0: ffffffff8f529608 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450
[ 1161.729506][   T31] 1 lock held by syz-executor/16207:
[ 1161.734821][   T31]  #0: ffffffff8f529608 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450
[ 1161.743297][   T31] 1 lock held by syz-executor/16210:
[ 1161.748556][   T31]  #0: ffffffff8f529608 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450
[ 1161.757021][   T31] 1 lock held by syz-executor/16211:
[ 1161.762561][   T31]  #0: ffffffff8f529608 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450
[ 1161.771071][   T31] 1 lock held by syz-executor/16217:
[ 1161.776370][   T31]  #0: ffffffff8f529608 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450
[ 1161.784847][   T31] 1 lock held by syz-executor/16219:
[ 1161.790117][   T31]  #0: ffffffff8f529608 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450
[ 1161.798599][   T31] 1 lock held by syz-executor/16221:
[ 1161.803903][   T31]  #0: ffffffff8f529608 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450
[ 1161.812347][   T31] 1 lock held by syz-executor/16224:
[ 1161.817633][   T31]  #0: ffffffff8f529608 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450
[ 1161.826091][   T31] 1 lock held by syz-executor/16225:
[ 1161.831377][   T31]  #0: ffffffff8f529608 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450
[ 1161.839790][   T31] 1 lock held by syz-executor/16231:
[ 1161.845142][   T31]  #0: ffffffff8f529608 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450
[ 1161.853705][   T31] 
[ 1161.856066][   T31] =============================================
[ 1161.856066][   T31] 
[ 1161.867752][   T31] NMI backtrace for cpu 0
[ 1161.867769][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1161.867791][   T31] Tainted: [L]=SOFTLOCKUP
[ 1161.867797][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1161.867806][   T31] Call Trace:
[ 1161.867812][   T31]  <TASK>
[ 1161.867818][   T31]  dump_stack_lvl+0x100/0x190
[ 1161.867840][   T31]  nmi_cpu_backtrace.cold+0x12d/0x151
[ 1161.867852][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1161.867871][   T31]  nmi_trigger_cpumask_backtrace+0x1d7/0x230
[ 1161.867893][   T31]  sys_info+0x141/0x190
[ 1161.867909][   T31]  watchdog+0xd25/0x1050
[ 1161.867928][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1161.867944][   T31]  ? __kthread_parkme+0x18c/0x230
[ 1161.867962][   T31]  ? kthread+0x13a/0x450
[ 1161.867972][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1161.867986][   T31]  kthread+0x370/0x450
[ 1161.867996][   T31]  ? __pfx_kthread+0x10/0x10
[ 1161.868007][   T31]  ret_from_fork+0x754/0xd80
[ 1161.868019][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1161.868031][   T31]  ? __switch_to+0x7b4/0x1120
[ 1161.868045][   T31]  ? __pfx_kthread+0x10/0x10
[ 1161.868056][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1161.868075][   T31]  </TASK>
[ 1161.868079][   T31] Sending NMI from CPU 0 to CPUs 1:
[ 1161.993324][    C1] NMI backtrace for cpu 1
[ 1161.993341][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1161.993360][    C1] Tainted: [L]=SOFTLOCKUP
[ 1161.993365][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1161.993373][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[ 1161.993394][    C1] Code: 88 82 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 71 1b 00 fb f4 <e9> fc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
[ 1161.993407][    C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000242
[ 1161.993419][    C1] RAX: 000000000621584f RBX: ffff88801e6a24c0 RCX: ffffffff8b901c75
[ 1161.993429][    C1] RDX: 0000000000000000 RSI: ffffffff8de76c97 RDI: ffffffff8c1b0720
[ 1161.993438][    C1] RBP: 0000000000000001 R08: 0000000000000001 R09: ffffed10170a6795
[ 1161.993446][    C1] R10: ffff8880b8533cab R11: 0000000000000000 R12: ffffed1003cd4498
[ 1161.993455][    C1] R13: 0000000000000001 R14: ffffffff90d99110 R15: 0000000000000000
[ 1161.993464][    C1] FS:  0000000000000000(0000) GS:ffff888124442000(0000) knlGS:0000000000000000
[ 1161.993478][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1161.993488][    C1] CR2: 00007fe56f147e20 CR3: 000000000e598000 CR4: 00000000003526f0
[ 1161.993497][    C1] Call Trace:
[ 1161.993503][    C1]  <TASK>
[ 1161.993508][    C1]  default_idle+0x9/0x10
[ 1161.993526][    C1]  default_idle_call+0x6c/0xb0
[ 1161.993544][    C1]  do_idle+0x43a/0x550
[ 1161.993563][    C1]  ? __pfx_do_idle+0x10/0x10
[ 1161.993582][    C1]  cpu_startup_entry+0x4f/0x60
[ 1161.993598][    C1]  start_secondary+0x21d/0x2d0
[ 1161.993619][    C1]  ? __pfx_start_secondary+0x10/0x10
[ 1161.993639][    C1]  common_startup_64+0x13e/0x148
[ 1161.993661][    C1]  </TASK>
[ 1162.166392][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[ 1162.173221][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1162.183887][   T31] Tainted: [L]=SOFTLOCKUP
[ 1162.188185][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1162.198231][   T31] Call Trace:
[ 1162.201487][   T31]  <TASK>
[ 1162.204394][   T31]  dump_stack_lvl+0x100/0x190
[ 1162.209077][   T31]  vpanic+0x552/0x970
[ 1162.213035][   T31]  ? __pfx_vpanic+0x10/0x10
[ 1162.217561][   T31]  ? nmi_trigger_cpumask_backtrace+0x182/0x230
[ 1162.223705][   T31]  panic+0xd1/0xe0
[ 1162.227433][   T31]  ? __pfx_panic+0x10/0x10
[ 1162.231842][   T31]  ? nmi_trigger_cpumask_backtrace+0x1b5/0x230
[ 1162.237995][   T31]  ? nmi_trigger_cpumask_backtrace+0x1f6/0x230
[ 1162.244151][   T31]  ? nmi_trigger_cpumask_backtrace+0x200/0x230
[ 1162.250304][   T31]  ? watchdog.cold+0x198/0x1ca
[ 1162.255062][   T31]  ? watchdog+0xd35/0x1050
[ 1162.259557][   T31]  watchdog.cold+0x1a9/0x1ca
[ 1162.264156][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1162.268821][   T31]  ? __kthread_parkme+0x18c/0x230
[ 1162.273837][   T31]  ? kthread+0x13a/0x450
[ 1162.278070][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1162.282738][   T31]  kthread+0x370/0x450
[ 1162.286794][   T31]  ? __pfx_kthread+0x10/0x10
[ 1162.291371][   T31]  ret_from_fork+0x754/0xd80
[ 1162.295947][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1162.301045][   T31]  ? __switch_to+0x7b4/0x1120
[ 1162.305714][   T31]  ? __pfx_kthread+0x10/0x10
[ 1162.310294][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1162.315057][   T31]  </TASK>
[ 1162.318306][   T31] Kernel Offset: disabled
[ 1162.322610][   T31] Rebooting in 86400 seconds..