last executing test programs:

9m10.200821365s ago: executing program 4 (id=488):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'gre0\x00', <r1=>0x0})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRESHEX=r1, @ANYRES16=r2, @ANYRESDEC=r4, @ANYRES16=r4, @ANYRES64=r0, @ANYRES8=r3, @ANYRES64=0x0], 0xa4}, 0x1, 0x0, 0x0, 0x4040801}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000440)={0x9, 0x0, [{0x40000000, 0x8, 0x6, 0x7, 0xfffff4ad, 0x3, 0x7}, {0x40000001, 0x3ff, 0x5, 0xffff, 0x6, 0x0, 0x2}, {0x40000000, 0x80000000, 0x2, 0x79b3, 0x9, 0x4, 0x6}, {0x40000001, 0x8a5, 0x4, 0x8, 0xa, 0x5, 0x40000}, {0x80000008, 0x2, 0x6, 0x0, 0x9, 0xb9e1, 0xce2c}, {0x40000000, 0x7777, 0x5, 0x101, 0x3, 0x7a, 0x7}, {0x0, 0x40, 0xfdc309cb6af7dfde, 0x7, 0xfffffffb, 0x0, 0x371}, {0x2, 0x10000, 0x4, 0xd396, 0xff, 0x1, 0xc}, {0x80000008, 0x8, 0x1, 0xfff, 0x2, 0x4, 0x10001}]})
syz_open_dev$tty1(0xc, 0x4, 0x1)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000300), 0x280, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
r6 = socket(0x23, 0x5, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x7, 0x2, 0x2, 0x6}, 0x20)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r7, 0x8b32, &(0x7f0000000380)="b8be15296d0d010a2ffc002f5c64ff4121171a5f773836acb202c93e32c6c3d444e08e5ac674b449ccdb34cb2204bd7157177e4f0a26f93a44d631ee0bffc74223a2e9ff1f10f68df53a501eb1697aed2bada412c2e248e05beac74c827a5fc89f8816ef14d538095fd4b987d6ee9e6027663c4474f74d5369ad62a6f4db87a376252c386f3862ea022073")
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r6, 0x113, 0x65, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0xe23, @local}, 0x10)
sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r8 = getpid()
sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
connect$unix(r9, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r10, &(0x7f0000000000), 0x0, 0x0)
recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

9m8.826025351s ago: executing program 4 (id=494):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="210f00000000000000002000000008000300", @ANYBLOB="c8fd6524d7db696bc508ee46069a11bce1a80743ca86f421352adad007a66689b2f3fc14faaee8aa490d58bea17b47a528d5f4c862d6a72a47d0333b6e38a18a99d59fcac5a4fee5b89ba054f7d5112b38fdd739cc0b59bb65db259fa2c38c0eef82fbbc70a329fcd01d0d44dc2823c8af504e33635f0a596c324ad1e0f234f8b2a564b60e16aaca6f66f04d5bc8bc7ff4305c0b5174a7b9446d6a33"], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000)
sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02000000", @ANYRES16=r5, @ANYBLOB="01002dbd7000fddbdf257b0000000c00990008000000620000001400fe004ea4e2dc354a9b0641e8b097d3ea30f6140002016166185f0108a814f46bfe1a6fb900231400fe00a3c0698ca9cb4640fc2adbc15e5a18c1140002019a64da8ce3f1c97529f2099912bed4041400fe00869177455c0fe389aa0f33da64494ad8"], 0x84}, 0x1, 0x0, 0x0, 0x4004800}, 0x5)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x14, 0x0, 0xffffffffffffffdc)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0)
r9 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1}, 0x20)
r10 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc4}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10184095fb00", 0x14}, 0x48, 0xffffffffffffffff)
keyctl$unlink(0x9, r10, 0xffffffffffffffff)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="6a96dd46070605000000000000fa000700001aa6611b0886a74f21b419"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)

9m7.772760962s ago: executing program 4 (id=503):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}]}}}]}, 0x38}, 0x1, 0x0, 0xfeff000000000000, 0x1}, 0x20004004)

9m7.457982723s ago: executing program 4 (id=505):
openat$nullb(0xffffffffffffff9c, 0x0, 0x200200, 0x0)
syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) (async)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262)
umount2(0x0, 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async)
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
capset(0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid() (async)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) (async)
sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async)
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00'}, 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00'}, 0x48)
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x400, 0x0) (async)
r6 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x400, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c633774262eb5ab2c7b9c5cff6ce78185d8c4dc064744e042", <r7=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0)
close_range(r1, r6, 0x0) (async)
close_range(r1, r6, 0x0)
ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x8, 0x0, 0x0)

9m3.820754674s ago: executing program 4 (id=514):
creat(0x0, 0x1)
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6)
io_setup(0xb7, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
r0 = fcntl$getown(0xffffffffffffffff, 0x9)
sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket(0x26, 0x3, 0xff)
mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, 0x0)
syz_emit_ethernet(0x6e, 0x0, 0x0)
setxattr$system_posix_acl(0x0, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0x0, 0x0)
r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000780)={{0x8, 0x5, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x4, 0x0, 0x40000000000, 0xffffffffffffffff, 0xffffffeffffffffe, 0x4, 0x4, 0x0, 0x7, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x1, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0xb, 0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffdfffffffff, 0xfffffffffffffffc, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x7ff, 0x0, 0xfffffffffffffffe, 0x9, 0x1000000000, 0x0, 0x80000000000002, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1ffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2c5, 0x0, 0x100, 0x81, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x9, 0x100000000000, 0x4000000000, 0x3, 0x2, 0x0, 0x7, 0xc0c0, 0x0, 0x4, 0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x20000000, 0x0, 0x80]})

9m3.613779898s ago: executing program 4 (id=517):
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x6, 0x0, 0x100, 0x4, 0x460202})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', <r1=>0x0})
r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x7)
ioctl$TCSETA(r2, 0x8924, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffd})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x6, 0x0, 0x100, 0x6, 0x180107, r1})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r5})

9m3.326626886s ago: executing program 32 (id=517):
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x6, 0x0, 0x100, 0x4, 0x460202})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', <r1=>0x0})
r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x7)
ioctl$TCSETA(r2, 0x8924, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffd})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x6, 0x0, 0x100, 0x6, 0x180107, r1})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r5})

4m38.175169867s ago: executing program 5 (id=1582):
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x70}}, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (async)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) (async)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="200027bd7000fedbdf25010000000000000002410000001000137564703a73797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000001800010000000000fedbdf25020000040001000900040000060015000200000014001680100008800c000380"], 0x38}}, 0x0) (async)
bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0xa}, 0x9c) (async)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)

4m37.863863775s ago: executing program 5 (id=1585):
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x6, 0x4000000007}, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x4, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x4, 0xfa11, 0x10}, 0x0)
r4 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108)
r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00')
preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0)
openat$dlm_control(0xffffff9c, 0x0, 0x400, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23d, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x8, 0x0, 0x10001, 0xfffffffc, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x4, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x960, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0x0, 0x800, 0x0, 0x0, 0x2000, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x3, 0x3, 0x1010001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x3, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9388, 0xffffffff], [0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x4, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x7, 0x2, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000]}, 0x45c)
ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x8)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502)
r6 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
r7 = signalfd(0xffffffffffffffff, 0x0, 0x0)
recvmmsg$unix(r7, &(0x7f00000051c0), 0x0, 0x40, &(0x7f00000052c0)={0x77359400})

4m34.297030945s ago: executing program 5 (id=1600):
socket$nl_rdma(0x10, 0x3, 0x14)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
fcntl$lock(r2, 0x6, &(0x7f0000000080)={0x1, 0x1})
fcntl$lock(r2, 0x7, &(0x7f0000000340)={0x0, 0x2, 0x201, 0x1d})
fcntl$lock(r2, 0x6, &(0x7f00000001c0)={0x2, 0x1, 0x6d, 0x1000000000003})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000002c0))
execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x100)
r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4})
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e22, @remote}}, 0x6, 0x6, 0x33, 0x0, 0x72}, &(0x7f0000000040)=0x98)
ioctl$DVB_DEMUX_DMX_START(r3, 0x6f29)
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x83, 0x10001, 0x80, 0x717e387b, 0x40, "1a4233a5bd000000001000e2df00000000ee4f", 0x0, 0x2})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15)
ioctl$TCSETS(r4, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"})

4m32.230530056s ago: executing program 5 (id=1611):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$BLKPG(r2, 0x1269, &(0x7f0000000040)={0x20, 0x0, 0x98, &(0x7f0000000140)={0x400000003000000, 0x1000, 0x5}})
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x800, 0x800, 0x300, 0x3f, 0x32, 0x1, 0x18, 0x0, {0xce0}, {}, {0x0, 0x0, 0x20000}, {0x0, 0x4, 0xfffffffe}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x3})
socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, 0x0)
ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f00000005c0)={0xffffffffffffffff, &(0x7f0000000180)='(\x00', 0x0, 0x0, 0x1, &(0x7f0000000300)={@_ha_fsid}, 0x0})
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xfffffffd, 0x6, 0x3)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00')
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16)
r4 = userfaultfd(0x801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, 0x0)
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
pread64(r3, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300)
fcntl$getownex(r3, 0x10, &(0x7f0000000100))
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0/../file0\x00', 0x89901)
r5 = getpid()
syz_pidfd_open(r5, 0x0)

4m30.129382219s ago: executing program 5 (id=1616):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x50307, 0x2a2e3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_ROLE={0x8, 0x4, 0x10}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c)
r3 = fcntl$dupfd(r0, 0x406, r2)
write$tcp_congestion(r3, 0x0, 0x0)
write$cgroup_pid(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={<r4=>0xffffffffffffffff}, 0x2, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f0000000140)={0x4, 0x8, 0xfa00, {r4, 0x4}}, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
fcntl$getownex(r3, 0x10, &(0x7f0000000000)={0x0, <r5=>0x0})
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040)=r5, 0x12)

4m29.014781495s ago: executing program 5 (id=1624):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000200)={'lo\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}})
openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
io_destroy(0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1c}}, 0xc000)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000000)=0x200000000)
write$vhost_msg_v2(r3, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000400)=""/179, 0xb3, 0x0, 0x2, 0x4}}, 0x48)
write$vhost_msg_v2(r3, &(0x7f0000000640)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x2}}, 0x48)
write$vhost_msg(r3, &(0x7f0000000100)={0x1, {&(0x7f00000007c0)=""/194, 0xc2, 0x0, 0x3, 0x2}}, 0x48)
write$vhost_msg_v2(r3, 0x0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
socket(0x2, 0x2, 0x1)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
accept4(r4, 0x0, 0x0, 0x800)
prlimit64(r1, 0x8, 0x0, 0x0)
r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_SET_UNIQUE(r5, 0x40106410, &(0x7f0000000000)={0x0, 0x0})

4m28.391695697s ago: executing program 33 (id=1624):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000200)={'lo\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}})
openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
io_destroy(0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1c}}, 0xc000)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000000)=0x200000000)
write$vhost_msg_v2(r3, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000400)=""/179, 0xb3, 0x0, 0x2, 0x4}}, 0x48)
write$vhost_msg_v2(r3, &(0x7f0000000640)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x2}}, 0x48)
write$vhost_msg(r3, &(0x7f0000000100)={0x1, {&(0x7f00000007c0)=""/194, 0xc2, 0x0, 0x3, 0x2}}, 0x48)
write$vhost_msg_v2(r3, 0x0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
socket(0x2, 0x2, 0x1)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
accept4(r4, 0x0, 0x0, 0x800)
prlimit64(r1, 0x8, 0x0, 0x0)
r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_SET_UNIQUE(r5, 0x40106410, &(0x7f0000000000)={0x0, 0x0})

14.339852297s ago: executing program 1 (id=2684):
socket(0x10, 0x80002, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
socket$packet(0x11, 0x3, 0x300)
socket$inet6(0xa, 0x5, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffff000}, 0x50)

14.178504777s ago: executing program 1 (id=2685):
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
madvise(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x17)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
r2 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, 0x0, 0x0, 0xffffffffffffff9c)
r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, &(0x7f0000000040)={0x6, 0x100, "4383afb7ff950dc956dc7ca6b460517eabffe4c257a594055ae392ee6d91e676", 0x9, 0xd, 0x4, 0x100, 0x431})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10)
sendmmsg$unix(r5, &(0x7f0000000680), 0x4924924924925c6, 0x0)

11.638716683s ago: executing program 3 (id=2695):
r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000000)
write$char_usb(r1, &(0x7f0000000480)='V', 0x1)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000)
syz_open_procfs(0xffffffffffffffff, 0x0)
r2 = syz_io_uring_setup(0x7424, 0x0, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000340)=<r4=>0x0)
sched_setscheduler(0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x844)
socket(0x11, 0x4081d, 0x240000)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8014}, 0x8840)
syz_io_uring_submit(r3, r4, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r6, 0x0, 0x0)
listen(r6, 0x1)
getsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
io_uring_enter(r2, 0x1549, 0x3900, 0xb, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x310000, 0x1000}, 0x20)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'sit0\x00', <r9=>0x0})
setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000000340)=0x800, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r7, &(0x7f0000000080)={0x2c, 0x0, r9, 0x3d}, 0x10)

10.915999965s ago: executing program 1 (id=2697):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x20842, 0x63)
ioctl$XFS_IOC_FSGEOMETRY(r0, 0x8100587e, &(0x7f0000000340))
write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10)
r1 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0)
landlock_restrict_self(r1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r2, 0x0)
pivot_root(&(0x7f0000000040)='./file0/../file0/../file0/../file0/../file0\x00', &(0x7f0000000600)='./file0/../file0/../file0/../file0\x00')
syz_open_dev$vbi(&(0x7f0000000140), 0x3, 0x2)
mq_open(0x0, 0x42, 0x197, 0x0)
lseek(0xffffffffffffffff, 0xa904, 0x1)
syz_io_uring_setup(0x66da, 0x0, 0x0, &(0x7f0000000040))
init_module(&(0x7f0000001a80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x81, 0x7, 0x4, 0xffffffff, 0x3, 0x6, 0xe, 0x38c, 0x40, 0x1d3, 0x3, 0x0, 0x38, 0x1, 0xfff8, 0x8, 0x5}, [{0x6474e551, 0x8, 0x0, 0xb, 0x8, 0xffffffffffff0000, 0x9, 0x800000000000}]}, 0xffe84, 0x0)
r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0)
ioctl$COMEDI_CMD(r3, 0x80506409, &(0x7f0000000180)={0x1, 0x30000, 0x80, 0xd, 0x10, 0x3e8, 0x2, 0x0, 0x20, 0x1, 0x20, 0xffffffff, &(0x7f0000000600)=[0x7], 0x1, 0x0, 0xffffffffffffffb8})
syz_io_uring_setup(0x1e1e, &(0x7f0000000340)={0x0, 0xc4bc, 0x10100, 0x0, 0xbe}, &(0x7f0000002000)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22})
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001014d9ec29bd7000fcdf2508000300010000200800010040000000008df56c3b385a90540cc47614c75062974f616683f272ec14b8d78502dc561d6bc334fbfc8dd79cbc8a50162b551e2317ed39b7edcb83eccf9a0b2a86ed7790fb46a962d03a81c884b81d1556b27650ed9736a96b0a62815a52c80c3072a85a2891bc6afc951a499720a0bf5a182d99624b691482c8ac93c328c50250ae99f329575e1c6195cacd3e3710"], 0x20}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r7)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x30, r8, 0x60b, 0x70bd28, 0x4000, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xf8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x30}, 0x1, 0x8000000, 0x0, 0x1}, 0x0)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x42544, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)

10.560683642s ago: executing program 0 (id=2700):
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8004, 0x0, 0x9, 0x7, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x164}, 0x1, 0x0, 0x0, 0x8090}, 0x4000000)
r2 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4040000)
bind$inet6(r2, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r6)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r6, 0x74)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r7 = socket$netlink(0x10, 0x3, 0x13)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x3c, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x64}}}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xb}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1c51}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20040800)
r8 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r8, &(0x7f0000000040)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @multicast1}}, 0x24)
socket$alg(0x26, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

10.507149494s ago: executing program 2 (id=2701):
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x17)
syz_clone(0x41000000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)

10.186536624s ago: executing program 6 (id=2702):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7f, 0x0, 0x9, 0xffffffffffffffff, 0xfffffe0000000005, 0xfa11, 0xffffffff}, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", '\x00', "3f4051c4", "a44a889722b66244"}, 0x28)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
r7 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$USBDEVFS_BULK(r7, 0xc0185502, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xa7}}}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x3}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x3f00}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c040}, 0x0)

10.186191058s ago: executing program 1 (id=2703):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff"], 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
syz_open_dev$MSR(&(0x7f00000001c0), 0xdc, 0x0)
getpid()
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
creat(0x0, 0x17e)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$can_j1939(0x1d, 0x2, 0x7)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x118, 0x24, 0xd0f, 0x70bd28, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xe8, 0x2, {{0x5, 0xa, 0xff, 0x400, 0x2, 0xa781}, [@TCA_NETEM_DELAY_DIST={0x42, 0x2, "fbf9a80bdafad8dc0d07365468b424ff136ccf15dcd1e89a6832b39214f898933fc295e649ef1140859060f9a119775ca30f44754497277cf03705036e2e"}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x3, 0x0, 0xfffff86b, 0x1, 0xfffffffe}}, @NETEM_LOSS_GE={0x14, 0x2, {0xfffffc00, 0x3ff, 0x9, 0x80000001}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x9, 0x7, 0xb8, 0x2}}]}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x5d, 0x7fffffffffffffff, 0x1, 0x0, 0x1, 0xe234}}, @TCA_NETEM_RATE={0x14, 0x6, {0x78, 0x5, 0x1, 0x1}}]}}}]}, 0x118}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

10.046727925s ago: executing program 2 (id=2704):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
io_setup(0x9, &(0x7f0000000240)=<r1=>0x0)
connect$can_bcm(r0, &(0x7f0000000000), 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xa}, 0x94)
syz_clone(0x0, &(0x7f0000000280)="836e45765f7d9d59edd1e77c2d5917ffecb16da7c65dad1e7dce8dfb89bf6269eed598ca5603ba66501c00ac65dc4e9a941e4a1e9cecadebad048deaf2e91f94de7ecba5639f4fcefbe36b832fba479a797ae7f3787b12d545ad2ed2cc967381a23daa87f9c3cdceeaae5f615b4eee3489813b55d20314762003c1c162f8ec27ffe6334ab4ece88753861f42fc782b7ae127b9ed09489f6e5a3f73313edc461195f4ec1d17e477bffefc571b0fd19d256d109d1e7cc1dafae731b618ee337658a033ad43820c8aee4042c180361dfb3f9e5d7cd5", 0xd4, &(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000180)="14c5cc0615dd6480f731e6e9c4e8daa3645b063f6d4257aef2c79e")
io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f00000000000029ffffff000000", 0x20000238}])
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r3, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000380)={0x80, 0x3, 0x10000, 0x9a65, 0xd0fc, 0x9})
request_key(&(0x7f00000001c0)='ceph\x00', &(0x7f0000000400)={'syz', 0x1}, &(0x7f0000000440)='\x00', 0xfffffffffffffffe)

9.127336625s ago: executing program 1 (id=2705):
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8)
connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c)
bpf$TOKEN_CREATE(0x24, &(0x7f00000193c0), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

9.034705782s ago: executing program 6 (id=2706):
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280))
socket$packet(0x11, 0x3, 0x300)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_TX_POWER(r0, 0x0, 0x40000)
r1 = socket$kcm(0xa, 0x2, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x0, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x24044094)
r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)
syz_usb_control_io$hid(r6, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "0100"}, @global=@item_012={0x2, 0x1, 0x0, "0100"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_012={0x2, 0x2, 0x2, "90a0"}, @global=@item_012={0x1, 0x1, 0x8, '8'}, @main=@item_4={0x3, 0x0, 0xb, "c83e2503"}, @local=@item_012={0x2, 0x2, 0x8, "3994"}, @local=@item_4={0x3, 0x2, 0x2, "b09ea549"}, @main=@item_4={0x3, 0x0, 0x8, "ce9abc16"}]}}, 0x0}, 0x0)
r7 = socket(0x2, 0x80805, 0x0)
prlimit64(0x0, 0xb, &(0x7f0000000140)={0x8, 0x84}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r8 = getpid()
sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$XFS_IOC_FSGROWFSRT(r7, 0x40105870, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e23, 0x3, 'rr\x00', 0x1, 0x80005, 0x70}, 0x2c)
sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x7000000)

8.218111942s ago: executing program 0 (id=2708):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1, &(0x7f0000000040)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x41, 0x0, 0x2000000}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x1}}], 0x38, 0x4048800}, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000003c0)={0x2, 0x1, 0x1})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x4)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3"], 0x0)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x880)
ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000040)=@overlay={0x0, 0x1, 0x4, 0x0, 0xd, {}, {0x4, 0x0, 0x0, 0x1, 0x0, 0x0, "12848098"}, 0x6})
ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0xffffffff, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x6c, r6, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x13}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40404}, 0x100)
r8 = openat$nullb(0xffffffffffffff9c, 0x0, 0x185802, 0x0)
r9 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1044, 0x7a4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x100, 0x0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x81}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r9, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x120, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f8, 0xffffffff, 0xffffffff, 0x1f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x120, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x7, 0x4, 0x9}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x328)
sendfile(r8, r8, 0x0, 0x200000)
read$dsp(0xffffffffffffffff, &(0x7f00000000c0)=""/152, 0x98)

8.217880404s ago: executing program 3 (id=2709):
openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
unshare(0x68040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000500)={'mangle\x00', 0x0, [0x0, 0x10006e, 0x20000004, 0x9, 0x6]}, &(0x7f0000000040)=0x54)

7.448958697s ago: executing program 2 (id=2710):
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x89}, 0x0)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
r0 = openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000280)=ANY=[])
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000a, 0x204031, 0xffffffffffffffff, 0x76413000)
r1 = memfd_create(&(0x7f0000000540)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nRp;\a\xeb\xe0~\xa1\xd8\x90\xd2\f\xef&+C\xd69c\xfc\xf2\xad\xa8M\xe8\\\x15Hd~\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\x17\xa7\x7fN\x9bL\xf8\xebQs@}\n\xd2fX\x95\xb0n\x9d\x85\xea\x1a*\x1bI\xd8\x1c\xe8\x9bYS%\x1d\x10\x86\xa0\v\xea\xd9\x89\xda\xa7Wd\xa4Eu\x8cs\a\xc8\x10\xc3\xb2I\x1a\xb2\xfd7\x98\x16\xca\x83y\xf9\x1a\xe7\x06h\av\xa8\xd8\xce\xc8\x1c\xafJ\x90\xefa\xb1/\xee1=\xbfM\xeaw\f\x02\x87\x1c(\x1a-\xeb\xfbV\xeb4Z\x03H\xed\x86\xe12N\x1f\xd8{\xf5\xcf\x92\xb0\x9fzw\x03\xd7\xe9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe2\xe9\xf1u\xf4\xf8[\xdd\xdf\x95\xae\xf1\xab\a\xd6\xad\xf2\x7f9\xcf\xbe\xad(\xbdV(I\xef\xc6~\x8a\x04\xbf#\x1e}\xfd=\vG\xfb\xf7\xb29\nZ\x91;\'\x82\xe1z\x93\xfeYDc}\xde\x853\xed\xff\xc9\x80\xa2\xa8h\x94\xbe1}h\x84,RQj\xdf\xac\vU\xa3\xf2\xacC)\nC\xee}Vv\xde\xc9\xe0\xa2`\x19\"\x01\x05\x7f\x99l^d6L\a8\x99a\x9d\xaf\xa3\xc4&\xeb\xb2\x8d$=A<W\xbb\xeb\xa0b\xc7^\xf9\x01\x96sag`\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9O\x01\xb4\xb1\xb7\xd2_\xbe X\xb2~5\xbb\xbb!\xd3GD\x1fCpx\x17a\xf6\x9f\x03\rfh\xc6\x96A\x04$\x16\xbdiQ\r\xfc\x90\xb4\x81\xff\xf9\t\x19\x8d\xd8\xd4;\xe01\xefp\xe4\xb7\xb163\t\x92\xd9\xa5\xe0\xb1*B\xedqCv\xc2', 0x2)
mmap(&(0x7f000008a000/0x3000)=nil, 0x3000, 0x100000a, 0x810, r1, 0x2772d000)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b20, &(0x7f0000000040)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}})
r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
r3 = socket(0x10, 0x803, 0x0)
bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
read$msr(r2, &(0x7f000001a440)=""/102400, 0x19000)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socket(0x80000000000000a, 0x2, 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
read(r4, 0x0, 0xff40)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/84, 0x0, 0x100000})
ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000080)=0x4000000)
ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1)

6.821829538s ago: executing program 3 (id=2711):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = creat(&(0x7f0000000280)='./cgroup.net/devices.allow\x00', 0x141)
io_setup(0x206, &(0x7f0000000200)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000c80)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x2}])
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="7b87f20f89", @ANYRESHEX, @ANYBLOB="ea1e"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40eff, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r6, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x30)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0)
r7 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0)
mq_timedsend(r7, 0x0, 0x0, 0x6, 0x0)
close(r7)
mq_unlink(&(0x7f0000000000)='eth0\x00')
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5.902163068s ago: executing program 3 (id=2712):
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x207)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000140)=@llc={0x1a, 0x30f, 0x1, 0xb, 0x7f, 0x8d, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}, 0x80)
ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f00000002c0)=@ethtool_ringparam={0x12, 0x0, 0x20040001, 0x0, 0x2, 0x0, 0x9, 0x5}})
mount$tmpfs(0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000000c0)={[{@quota}, {@grpquota_block_hardlimit}]})
r3 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f00000010c0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x25, &(0x7f0000000080), 0x0)
mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='iso9660\x00', 0x1000080, 0x0)

5.14390225s ago: executing program 2 (id=2713):
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x207)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000140)=@llc={0x1a, 0x30f, 0x1, 0xb, 0x7f, 0x8d, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}, 0x80)
ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f00000002c0)=@ethtool_ringparam={0x12, 0x0, 0x20040001, 0x0, 0x2, 0x0, 0x9, 0x5}})
mount$tmpfs(0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000000c0)={[{@quota}, {@grpquota_block_hardlimit}]})
r3 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f00000010c0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x25, &(0x7f0000000080), 0x0)
mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='iso9660\x00', 0x1000080, 0x0)

4.680721576s ago: executing program 0 (id=2714):
mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0)
munlockall()
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x6})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0)
syz_emit_ethernet(0x106, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r3, 0x0, &(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x1})
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r3, 0x0, &(0x7f0000ff8000/0x1000)=nil, 0x1000})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r3, 0xea})
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000180)='lo\x00'})
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x30, 0x10, 0x401, 0x2, 0x0, {}, [@IFLA_WEIGHT={0x8, 0xf, 0x3}, @IFLA_LINK={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4018}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001d0000eed4eba800fedbdf25070000006d0f15100db8c3f18058197fa91030fce75c8daaae4dd78138d4a3c24652090f0d6b668df3592247fae93433b98bde236267e7b6c74408f0e355f049c1151c42a222e1744962032e88f39b856a00c6ef7c1bada56b4d015f362c42", @ANYRES32=0x0, @ANYBLOB="02002003060005000300000005000c0000000000"], 0x2c}}, 0x8c0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20f39, 0x8)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b05, &(0x7f0000000100)={'wlan0\x00'})
write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="520000007d0100000037000800050000004004000000070000000000000000000c45d70700000800010000000000000000000003006c6f000100210600776c616e3000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0], 0x52)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001b80), r5)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x14, r6, 0xc8036ab6d6cbef07, 0x70bf26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000041}, 0x200058c0)

4.118719791s ago: executing program 0 (id=2715):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, 0x0})
mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x420, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}]})
chdir(&(0x7f0000000140)='./file0\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0)
connect$unix(r0, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e)
io_setup(0x3ff, &(0x7f0000000500)=<r5=>0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x3, &(0x7f0000000040)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x110, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1b000000}, 0x94)
io_submit(r5, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0xffff, r1, 0x0}])
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r6, 0xffffffffffffffff, 0x0)

4.08246475s ago: executing program 6 (id=2716):
r0 = socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r1)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r3, 0x24, 0x0, 0xffff, &(0x7f0000000140)=[0x0, 0x0], 0x2, 0x0, 0x0, 0x0, 0x0}, 0x40)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000))
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x45}, 0x40000)
getsockname$packet(r0, 0x0, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x4000010)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
bind$bt_hci(r4, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6)
write(r4, &(0x7f00000000c0)="510003000000", 0x6)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800)
ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0)

3.130423048s ago: executing program 3 (id=2717):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
prlimit64(0x0, 0x1, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000080)='./file1\x00', 0x8)
mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota')
r5 = socket$netlink(0x10, 0x3, 0x9)
splice(0xffffffffffffffff, 0x0, r5, 0x0, 0xd, 0xf)
mkdir(0x0, 0x0)
mkdir(0x0, 0x14b)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10100}, [@ringbuf_output={{}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc641}, 0x94)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000200)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(r6, 0x3b88, &(0x7f0000000040)={0xc, r7})
ioctl$IOMMU_VFIO_SET_IOMMU(r6, 0x3b66, 0x1)
ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r6, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000020"])

3.078785168s ago: executing program 6 (id=2718):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x13, r0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x801, 0x40000003, 0x81, 0x9, 0x80, 0x0, 0xffffffffffffffff, 0xfffffffffffff804, 0x1, 0x0, 0x0, 0x2000000000000, 0x9, 0x3, 0x1, 0x5], 0xeeee0000, 0xdf940}) (async)
inotify_init1(0x0) (async)
open$dir(&(0x7f0000000080)='./file0\x00', 0x181000, 0x20) (async)
creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async)
open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0) (async, rerun: 32)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async, rerun: 32)
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x40) (async)
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000080)={0x7, 0x80000005, 0x81, 0xd3, 0xd, "54932eaa1920050533b2fd93fb1e399d7a3145", 0x10001, 0xfffffffe})
syz_usb_connect(0x2, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) (async)
syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) (async, rerun: 32)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000280)=0x3) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 64)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="80000000", @ANYRES16=r7, @ANYBLOB="010000000000000000004200000008008e007063690011fb5cd211694e1c88e66d5d29ee10cc000200303030303a30303a31302e30000040000d0087006c325f64726f70730000000005008300b267000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001f00325f6472000000"], 0x80}}, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000070000000900010073797a300000000048000000090a010400000000000000000700000008000a40737905fd000000000900010073797a300000000008000540000000040c0009800800014000009143140000001000010000000000000000000084000a"], 0x90}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x4008080)

2.972955167s ago: executing program 0 (id=2719):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
io_setup(0x9, &(0x7f0000000240)=<r1=>0x0)
connect$can_bcm(r0, &(0x7f0000000000), 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xa}, 0x94)
syz_clone(0x0, &(0x7f0000000280)="836e45765f7d9d59edd1e77c2d5917ffecb16da7c65dad1e7dce8dfb89bf6269eed598ca5603ba66501c00ac65dc4e9a941e4a1e9cecadebad048deaf2e91f94de7ecba5639f4fcefbe36b832fba479a797ae7f3787b12d545ad2ed2cc967381a23daa87f9c3cdceeaae5f615b4eee3489813b55d20314762003c1c162f8ec27ffe6334ab4ece88753861f42fc782b7ae127b9ed09489f6e5a3f73313edc461195f4ec1d17e477bffefc571b0fd19d256d109d1e7cc1dafae731b618ee337658a033ad43820c8aee4042c180361dfb3f9e5d7cd5", 0xd4, &(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000180)="14c5cc0615dd6480f731e6e9c4e8daa3645b063f6d4257aef2c79e")
io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f00000000000029ffffff000000", 0x20000238}])
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r3, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000380)={0x80, 0x3, 0x10000, 0x9a65, 0xd0fc, 0x9})
request_key(&(0x7f00000001c0)='ceph\x00', &(0x7f0000000400)={'syz', 0x1}, &(0x7f0000000440)='\x00', 0xfffffffffffffffe)

2.445145961s ago: executing program 6 (id=2720):
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
socket$vsock_stream(0x28, 0x1, 0x0) (async, rerun: 32)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) (async)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f00000002c0)="5c2053a401", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x4c) (async, rerun: 64)
r3 = syz_io_uring_setup(0x54d, &(0x7f0000000040)={0x0, 0x735a, 0x100, 0x805, 0x350}, &(0x7f0000000100)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0) (rerun: 64)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x5}]}, 0x10) (async, rerun: 64)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x1, 0x2007, @fd, 0xffffffffffffff7f, 0x0, 0x0, 0x4, 0x1})
io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) (async, rerun: 64)
openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'lo\x00'}) (async, rerun: 64)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44040}, 0x20024014) (async, rerun: 64)
madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r6=>0x0) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r6, 0x1, 0x0, 0x0)

1.858146799s ago: executing program 6 (id=2721):
socket$inet6(0xa, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x18, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
ioctl$sock_netdev_private(r0, 0x89ff, &(0x7f00000002c0)="9c56841661c1d98ce1822001e5d93bd27ae911462402333c662c9d6486eb0b9aab5d007f890d17ca36585bc8d0d1073ba115ce694f5d33db49266b928922744aada5ff6edd4b316ce23d8e5777e3d94cc24b114fe6745703f1d9d53df36c1220e3fe5a0d1c0e004497b5f5d63b7607f9b2f7866c675eb065a7348a71891a2e886755accf63d790035cb9945520ff68b6b8ac6384eeebe0c9d3")
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[], 0x2a, 0x0)
r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe)
keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55)
r5 = socket$inet(0xa, 0x801, 0x84)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)={@fallback=r5, r6, 0x2f, 0x2030, 0x4}, 0x20)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0)
r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[<r8=>0x0], &(0x7f0000000180)=[<r9=>0x0], 0x0, 0x0, 0x1, 0x4000000000000291})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r8, r9], 0x2})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9})
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x4, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, [@call={0x85, 0x0, 0x0, 0x17}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ff}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x6, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x3}, 0x94)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r10, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

1.653401594s ago: executing program 2 (id=2722):
syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102384, 0x18ff0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mtu(r1, 0x0, 0xa, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x5e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f0000000140)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}}], 0x1, 0x44008004)
write$binfmt_misc(r1, &(0x7f0000000300), 0xfdef)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0xad)
write$char_usb(r2, &(0x7f00000008c0)='-0', 0x2)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0)
r4 = epoll_create(0x80f04)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000300)={0x2008})
epoll_wait(r4, 0x0, 0x0, 0xfffffff7)
ioctl$FS_IOC_GETFLAGS(r3, 0x5437, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x40c0)
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x20180, 0x0)
io_uring_register$IORING_REGISTER_RING_FDS(r5, 0x14, &(0x7f0000004680)=[{0x8, 0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000000c0)=""/35, 0x23}, {&(0x7f0000000100)=""/69, 0x45}, {&(0x7f0000000180)}, {&(0x7f00000001c0)=""/105, 0x69}, {&(0x7f00000047c0)=""/243, 0xf3}, {&(0x7f0000000240)=""/137, 0x89}, {&(0x7f0000001440)=""/34, 0x22}, {&(0x7f0000001480)=""/93, 0x5d}], &(0x7f00000015c0)=[0x2, 0x10, 0x4, 0x0, 0xfff, 0x5, 0x9, 0x6]}, {0x0, 0x1, 0x0, &(0x7f0000001b80), &(0x7f0000001c00)=[0x8, 0x2, 0x8, 0x81, 0x3, 0x4, 0x80000000, 0xfffffffffffffffc, 0x0]}, {0x5, 0x1, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000001c80)=""/44, 0x2c}, {&(0x7f0000001cc0)=""/62, 0x3e}, {&(0x7f0000001d00)=""/98, 0x62}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/4096, 0x1000}], &(0x7f0000004440)=[0x6, 0x8, 0x2, 0x9, 0x3, 0x1, 0x9, 0x3, 0x1000]}, {0x6, 0x1, 0x0, &(0x7f0000003200)=[{&(0x7f0000002ec0)=""/96, 0x60}, {&(0x7f0000002f40)=""/239, 0xef}, {&(0x7f0000003040)=""/49, 0x31}, {&(0x7f0000003080)=""/37, 0x25}, {&(0x7f00000030c0)=""/110, 0x6e}, {&(0x7f0000003140)=""/192, 0xc0}], &(0x7f0000003280)=[0x1, 0x2b53, 0x1, 0xfffffffffffffff9, 0x37f, 0x3, 0x8, 0x5]}, {0x6, 0x1, 0x0, &(0x7f00000045c0)=[{&(0x7f00000032c0)=""/109, 0x6d}, {&(0x7f0000003340)=""/101, 0x65}, {&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f00000043c0)=""/117, 0x75}, {&(0x7f0000004740)=""/99, 0x63}, {&(0x7f00000044c0)=""/248, 0xf8}], &(0x7f0000004640)=[0x2, 0x2, 0xec, 0x696, 0xfff, 0x5]}], 0x5)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @rand_addr=0x4}, 0xffffffffffffffa3)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7}, 0x4)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={r7, 0x0, &(0x7f0000000040)=""/42}, 0x20)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7, 0x30}, 0xc)
sendto$inet(r6, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10)

1.547142733s ago: executing program 0 (id=2723):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x2f}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = syz_open_dev$dvb_frontend(&(0x7f0000000180), 0x0, 0x161002)
ioctl$FE_GET_PROPERTY(r1, 0x80106f53, &(0x7f0000000080)={0xd, &(0x7f0000000100)=[{0x28, '\x00', @buffer={"19bbe196c98534ad0e087975788f750a6c3c4871102c975142ddf68f040a8da1", 0x20}, 0x380}]})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

755.081927ms ago: executing program 1 (id=2707):
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
madvise(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x17)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
r2 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, 0x0, 0x0, 0xffffffffffffff9c)
r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, &(0x7f0000000040)={0x6, 0x100, "4383afb7ff950dc956dc7ca6b460517eabffe4c257a594055ae392ee6d91e676", 0x9, 0xd, 0x4, 0x100, 0x431})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10)
sendmmsg$unix(r5, &(0x7f0000000680), 0x4924924924925c6, 0x0)

630.252388ms ago: executing program 2 (id=2724):
openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
unshare(0x68040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000500)={'mangle\x00', 0x0, [0x0, 0x10006e, 0x20000004, 0x9, 0x6]}, &(0x7f0000000040)=0x54)

0s ago: executing program 3 (id=2725):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0
[  558.928557][    T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input37
[  558.965600][    T9] mceusb 7-1:0.0: Error: mce write urb status = -71
[  559.000617][    T9] mceusb 7-1:0.0: Error: mce write urb status = -71
[  559.036403][    T9] mceusb 7-1:0.0: Error: mce write urb status = -71
[  559.064961][    T9] mceusb 7-1:0.0: Error: mce write urb status = -71
[  559.107124][  T977] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[  559.115648][    T9] mceusb 7-1:0.0: Error: mce write urb status = -71
[  559.139477][    T9] mceusb 7-1:0.0: Error: mce write urb status = -71
[  559.165157][    T9] mceusb 7-1:0.0: Error: mce write urb status = -71
[  559.196846][    T9] mceusb 7-1:0.0: Error: mce write urb status = -71
[  559.226509][    T9] mceusb 7-1:0.0: Error: mce write urb status = -71
[  559.248160][    T9] mceusb 7-1:0.0: Error: mce write urb status = -71
[  559.314973][  T977] usb 3-1: too many configurations: 9, using maximum allowed: 8
[  559.322783][    T9] mceusb 7-1:0.0: Registered  with mce emulator interface version 1
[  559.330750][    T9] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  559.357626][T13522] netlink: 'syz.3.2048': attribute type 12 has an invalid length.
[  559.374266][ T5807] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  559.503349][  T977] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  559.517669][    T9] usb 7-1: USB disconnect, device number 11
[  559.524072][  T977] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 9
[  559.551837][  T977] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  559.575997][  T977] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 9
[  559.593784][  T977] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  559.607683][  T977] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 9
[  559.618308][  T977] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  559.629236][  T977] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 9
[  559.641085][  T977] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  559.651776][  T977] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 9
[  559.662078][  T977] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  559.674316][  T977] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 9
[  559.684232][ T5807] usb 1-1: Using ep0 maxpacket: 32
[  559.690953][  T977] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  559.701318][ T5807] usb 1-1: config 0 has an invalid interface number: 85 but max is 0
[  559.709976][ T5807] usb 1-1: config 0 has no interface number 0
[  559.716138][  T977] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 9
[  559.727454][ T5807] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 248, changing to 11
[  559.739279][ T5807] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid maxpacket 33403, setting to 1024
[  559.762438][  T977] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  559.779152][  T977] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 9
[  559.799475][ T5807] usb 1-1: config 0 interface 85 has no altsetting 0
[  559.809678][  T977] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  559.823202][  T977] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  559.833576][  T977] usb 3-1: Product: syz
[  559.846299][ T5807] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  559.855681][ T5807] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  559.863764][  T977] usb 3-1: Manufacturer: syz
[  559.868760][ T5807] usb 1-1: Product: syz
[  559.873539][  T977] usb 3-1: SerialNumber: syz
[  559.879701][ T5807] usb 1-1: Manufacturer: syz
[  559.885535][ T5807] usb 1-1: SerialNumber: syz
[  559.891642][  T977] usb 3-1: config 0 descriptor??
[  559.913741][ T5807] usb 1-1: config 0 descriptor??
[  560.090589][  T977] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  560.302329][T13532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2050'.
[  560.857182][ T5807] appletouch 1-1:0.85: Failed to request geyser raw mode
[  560.864451][ T5807] appletouch 1-1:0.85: probe with driver appletouch failed with error -5
[  560.878841][ T5807] usb 1-1: USB disconnect, device number 41
[  560.935834][  T977] usb 7-1: Using ep0 maxpacket: 16
[  560.947146][  T977] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  560.977099][  T977] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  560.998482][  T977] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  561.007889][T13539] netlink: 'syz.1.2052': attribute type 39 has an invalid length.
[  561.008426][  T977] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  561.041732][  T977] usb 7-1: config 0 descriptor??
[  561.421439][T13544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  561.441656][T13544] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  561.779629][T13552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2055'.
[  561.818853][  T977] shield 0003:0955:7214.0016: unknown main item tag 0x0
[  561.838039][  T977] shield 0003:0955:7214.0016: unknown main item tag 0x0
[  561.853778][  T977] shield 0003:0955:7214.0016: unknown main item tag 0x0
[  561.877571][  T977] shield 0003:0955:7214.0016: unknown main item tag 0x0
[  561.899584][  T977] shield 0003:0955:7214.0016: unknown main item tag 0x0
[  561.920890][  T977] input: HID 0955:7214 Haptics as /devices/virtual/input/input39
[  561.997128][  T977] shield 0003:0955:7214.0016: Registered Thunderstrike controller
[  562.015987][  T977] shield 0003:0955:7214.0016: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.6-1/input0
[  562.035920][   T29] audit: type=1400 audit(1052.365:881): avc:  denied  { bind } for  pid=13525 comm="syz.6.2049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  562.113219][ T5856] shield 0003:0955:7214.0016: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  562.133064][  T977] usb 7-1: USB disconnect, device number 12
[  562.186742][ T5856] shield 0003:0955:7214.0016: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  562.229821][ T5856] shield 0003:0955:7214.0016: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  562.249022][ T5856] shield 0003:0955:7214.0016: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  562.441260][T13567] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2061'.
[  562.791425][T13570] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2062'.
[  562.807108][  T977] usb 1-1: new full-speed USB device number 42 using dummy_hcd
[  563.111621][ T5856] usb 3-1: USB disconnect, device number 64
[  563.425038][T13580] tmpfs: Unknown parameter ''
[  563.887116][  T977] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  563.929975][  T977] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  563.947972][  T977] usb 1-1: config 0 interface 0 has no altsetting 0
[  563.963120][  T977] usb 1-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00
[  563.984972][  T977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  564.011597][  T977] usb 1-1: config 0 descriptor??
[  564.133706][T13585] overlayfs: failed to resolve './file0': -2
[  564.353312][T13591] netlink: 'syz.2.2069': attribute type 4 has an invalid length.
[  564.361368][T13591] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2069'.
[  564.458745][  T977] hid-steam 0003:28DE:1102.0017: unknown main item tag 0x0
[  564.466325][  T977] hid-steam 0003:28DE:1102.0017: unknown main item tag 0x0
[  564.492949][    T9] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[  564.522492][  T977] hid-steam 0003:28DE:1102.0017: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0
[  564.610356][  T977] hid-steam 0003:28DE:1102.0017: Steam Controller 'XXXXXXXXXX' connected
[  564.634746][  T977] input: Steam Controller as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28DE:1102.0017/input/input40
[  564.663998][    T9] usb 2-1: Using ep0 maxpacket: 16
[  564.718979][    T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11
[  564.736385][   T29] audit: type=1400 audit(1054.892:882): avc:  denied  { map } for  pid=13565 comm="syz.0.2061" path="socket:[48456]" dev="sockfs" ino=48456 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  564.736566][    T9] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  565.012062][   T29] audit: type=1400 audit(1054.892:883): avc:  denied  { read } for  pid=13565 comm="syz.0.2061" path="socket:[48456]" dev="sockfs" ino=48456 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  565.037182][    T9] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  565.064774][  T977] hid-steam 0003:28DE:1102.0018: unknown main item tag 0x0
[  565.110354][  T977] hid-steam 0003:28DE:1102.0018: unknown main item tag 0x0
[  565.175280][    T9] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  565.203655][    T9] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  565.221447][    T9] usb 2-1: config 1 interface 0 has no altsetting 0
[  565.228641][  T977] hid-steam 0003:28DE:1102.0018: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0
[  565.322482][T13599] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2841 sclass=netlink_xfrm_socket pid=13599 comm=syz.3.2071
[  565.402633][    T9] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  565.611272][  T977] usb 1-1: USB disconnect, device number 42
[  565.622168][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  565.630618][   T29] audit: type=1400 audit(1055.248:884): avc:  denied  { mounton } for  pid=13594 comm="syz.6.2070" path="/syzcgroup/unified/syz6" dev="cgroup2" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  565.663666][T13602] fuse: Bad value for 'rootmode'
[  565.681711][    T9] ums-sddr09 2-1:1.0: USB Mass Storage device detected
[  565.711912][  T977] hid-steam 0003:28DE:1102.0017: Steam Controller 'XXXXXXXXXX' disconnected
[  565.781583][T13598] fido_id[13598]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  565.962865][T13616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  565.974419][T13616] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  566.121557][   T29] audit: type=1800 audit(1056.184:885): pid=13588 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.1.2068" name="/newroot/428/pids.events" dev="tmpfs" ino=2284 res=0 errno=0
[  566.506073][   T29] audit: type=1400 audit(1056.399:886): avc:  denied  { setopt } for  pid=13622 comm="syz.2.2076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  566.527007][    T9] ums-sddr09 2-1:1.0: probe with driver ums-sddr09 failed with error -22
[  566.561611][    T9] usb 2-1: USB disconnect, device number 63
[  566.574816][   T29] audit: type=1400 audit(1056.614:887): avc:  denied  { getopt } for  pid=13622 comm="syz.2.2076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  566.812315][T13633] overlayfs: failed to resolve './file0': -2
[  566.822515][   T24] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[  567.335836][T13639] FAULT_INJECTION: forcing a failure.
[  567.335836][T13639] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  567.367458][T13639] CPU: 0 UID: 0 PID: 13639 Comm: syz.1.2080 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  567.367489][T13639] Tainted: [L]=SOFTLOCKUP
[  567.367495][T13639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  567.367506][T13639] Call Trace:
[  567.367513][T13639]  <TASK>
[  567.367520][T13639]  dump_stack_lvl+0x100/0x190
[  567.367554][T13639]  should_fail_ex.cold+0x5/0xa
[  567.367573][T13639]  ? prepare_alloc_pages+0x16d/0x5f0
[  567.367595][T13639]  should_fail_alloc_page+0xeb/0x140
[  567.367615][T13639]  prepare_alloc_pages+0x1f0/0x5f0
[  567.367640][T13639]  __alloc_frozen_pages_noprof+0x19a/0x2ba0
[  567.367668][T13639]  ? __pfx_stack_trace_save+0x10/0x10
[  567.367694][T13639]  ? stack_depot_save_flags+0x27/0x9d0
[  567.367714][T13639]  ? kasan_save_stack+0x3f/0x50
[  567.367740][T13639]  ? kasan_save_stack+0x30/0x50
[  567.367765][T13639]  ? kasan_save_track+0x14/0x30
[  567.367794][T13639]  ? kasan_save_stack+0x30/0x50
[  567.367822][T13639]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  567.367852][T13639]  ? __lock_acquire+0x4a5/0x2630
[  567.367877][T13639]  ? __lock_acquire+0x4a5/0x2630
[  567.367899][T13639]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  567.367931][T13639]  ? policy_nodemask+0xed/0x4f0
[  567.367952][T13639]  alloc_pages_mpol+0x1fb/0x550
[  567.367972][T13639]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  567.367991][T13639]  ? __anon_vma_prepare+0x2db/0x5e0
[  567.368013][T13639]  ? __anon_vma_prepare+0x2db/0x5e0
[  567.368040][T13639]  folio_alloc_mpol_noprof+0x36/0x340
[  567.368064][T13639]  vma_alloc_folio_noprof+0xed/0x1d0
[  567.368085][T13639]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  567.368106][T13639]  ? __anon_vma_prepare+0x2e2/0x5e0
[  567.368135][T13639]  do_anonymous_page+0xb3a/0x1fb0
[  567.368164][T13639]  ? __pmd_alloc+0x3fb/0x950
[  567.368187][T13639]  __handle_mm_fault+0x1d42/0x2b60
[  567.368215][T13639]  ? mt_find+0x45e/0x8e0
[  567.368242][T13639]  ? __pfx___handle_mm_fault+0x10/0x10
[  567.368264][T13639]  ? __pfx_mt_find+0x10/0x10
[  567.368303][T13639]  ? find_vma+0xbf/0x140
[  567.368320][T13639]  ? __pfx_find_vma+0x10/0x10
[  567.368345][T13639]  handle_mm_fault+0x36d/0xa20
[  567.368375][T13639]  do_user_addr_fault+0x74c/0x12f0
[  567.368403][T13639]  exc_page_fault+0x6f/0xd0
[  567.368428][T13639]  asm_exc_page_fault+0x26/0x30
[  567.368445][T13639] RIP: 0010:rep_movs_alternative+0x11/0x90
[  567.368464][T13639] Code: c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 fd 93 04 00 66 66 2e 0f
[  567.368481][T13639] RSP: 0018:ffffc900161b7e68 EFLAGS: 00050202
[  567.368496][T13639] RAX: 00000000000000ff RBX: 0000000000000001 RCX: 0000000000000001
[  567.368507][T13639] RDX: 0000000000000001 RSI: ffffffff8c10d6a0 RDI: 0000200000000080
[  567.368518][T13639] RBP: 0000200000000080 R08: 0000000000000000 R09: fffffbfff1821ad4
[  567.368529][T13639] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff8c10d6a0
[  567.368540][T13639] R13: 0000200000000081 R14: 00007ffffffff000 R15: 0000000000000000
[  567.368564][T13639]  _copy_to_user+0xa4/0xd0
[  567.368586][T13639]  keyctl_capabilities+0x5a/0x160
[  567.368612][T13639]  __do_sys_keyctl+0x427/0x5a0
[  567.368636][T13639]  do_syscall_64+0x106/0xf80
[  567.368659][T13639]  ? clear_bhb_loop+0x40/0x90
[  567.368682][T13639]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  567.368700][T13639] RIP: 0033:0x7f5af759c799
[  567.368715][T13639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  567.368731][T13639] RSP: 002b:00007f5af853e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[  567.368746][T13639] RAX: ffffffffffffffda RBX: 00007f5af7815fa0 RCX: 00007f5af759c799
[  567.368757][T13639] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 000000000000001f
[  567.368768][T13639] RBP: 00007f5af853e090 R08: 0000000000000000 R09: 0000000000000000
[  567.368779][T13639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  567.368789][T13639] R13: 00007f5af7816038 R14: 00007f5af7815fa0 R15: 00007fff1017c528
[  567.368815][T13639]  </TASK>
[  567.388735][   T24] usb 4-1: Using ep0 maxpacket: 16
[  567.866513][   T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  567.905405][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  567.939020][T13649] x_tables: duplicate underflow at hook 1
[  567.965121][   T29] audit: type=1400 audit(1057.887:888): avc:  denied  { getopt } for  pid=13647 comm="syz.6.2083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  568.020122][T13653] fuse: Unknown parameter 'euid<00000000000000000000'
[  568.065971][T13655] fuse: Bad value for 'rootmode'
[  568.071299][   T29] audit: type=1400 audit(1057.887:889): avc:  denied  { write } for  pid=13647 comm="syz.6.2083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  568.094128][   T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x74, changing to 0x4
[  568.129714][   T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 6
[  568.171458][   T24] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  568.457782][   T24] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  568.474124][   T24] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  568.500105][   T24] usb 4-1: Manufacturer: syz
[  568.517736][   T24] usb 4-1: config 0 descriptor??
[  569.163440][   T24] rc_core: IR keymap rc-hauppauge not found
[  569.170655][   T24] Registered IR keymap rc-empty
[  569.203996][   T24] mceusb 4-1:0.0: Error: mce write urb status = -71
[  569.249131][   T24] mceusb 4-1:0.0: Error: mce write urb status = -71
[  569.294580][   T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  569.356199][   T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input41
[  569.445959][   T24] mceusb 4-1:0.0: Error: mce write urb status = -71
[  569.518374][   T24] mceusb 4-1:0.0: Error: mce write urb status = -71
[  569.591374][   T24] mceusb 4-1:0.0: Error: mce write urb status = -71
[  569.648791][   T24] mceusb 4-1:0.0: Error: mce write urb status = -71
[  569.781204][   T29] audit: type=1400 audit(1059.515:890): avc:  denied  { wake_alarm } for  pid=13680 comm="syz.1.2090" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  569.802894][   T24] mceusb 4-1:0.0: Error: mce write urb status = -71
[  569.860983][   T24] mceusb 4-1:0.0: Error: mce write urb status = -71
[  569.911850][   T24] mceusb 4-1:0.0: Error: mce write urb status = -71
[  569.932497][   T24] mceusb 4-1:0.0: Error: mce write urb status = -71
[  569.974982][   T24] mceusb 4-1:0.0: Error: mce write urb status = -71
[  570.008700][   T24] mceusb 4-1:0.0: Error: mce write urb status = -71
[  570.041619][   T24] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  570.073078][   T24] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  570.102560][   T24] usb 4-1: USB disconnect, device number 59
[  570.233098][   T29] audit: type=1400 audit(1060.039:891): avc:  denied  { block_suspend } for  pid=13691 comm="syz.6.2092" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  570.274413][ T5941] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  570.445104][ T5941] usb 1-1: Using ep0 maxpacket: 16
[  570.464306][ T5941] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11
[  570.493166][ T5941] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  570.503027][ T5941] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  570.512798][ T5941] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  570.522626][ T5941] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  570.536758][ T5941] usb 1-1: config 1 interface 0 has no altsetting 0
[  570.587414][ T5941] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  570.596859][ T5941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  570.686256][    T9] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[  570.709455][ T5941] ums-sddr09 1-1:1.0: USB Mass Storage device detected
[  570.828521][T13706] fuse: Unknown parameter 'use00000000000000000000'
[  570.851161][    T9] usb 3-1: device descriptor read/64, error -71
[  570.936024][T13690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  570.968309][T13690] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  571.150491][    T9] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[  571.471564][    T9] usb 3-1: device descriptor read/64, error -71
[  571.615869][    T9] usb usb3-port1: attempt power cycle
[  571.676626][   T29] audit: type=1800 audit(1061.396:892): pid=13690 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.0.2091" name="/newroot/405/pids.events" dev="tmpfs" ino=2177 res=0 errno=0
[  571.866396][ T5941] ums-sddr09 1-1:1.0: probe with driver ums-sddr09 failed with error -22
[  571.882324][ T5941] usb 1-1: USB disconnect, device number 43
[  572.347122][    T9] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[  572.414844][    T9] usb 3-1: device descriptor read/8, error -71
[  572.761301][    T9] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[  572.967317][    T9] usb 3-1: device descriptor read/8, error -71
[  573.236377][    T9] usb usb3-port1: unable to enumerate USB device
[  574.658980][   T29] audit: type=1400 audit(1063.792:893): avc:  denied  { write } for  pid=13743 comm="syz.1.2107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  574.699531][T13752] fuse: Unknown parameter 'use00000000000000000000'
[  575.139441][T13766] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2112'.
[  576.222441][T13771] overlayfs: failed to clone upperpath
[  577.033235][   T29] audit: type=1400 audit(1065.635:894): avc:  denied  { ioctl } for  pid=13765 comm="syz.3.2114" path="socket:[48026]" dev="sockfs" ino=48026 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  577.145690][   T29] audit: type=1400 audit(1065.644:895): avc:  denied  { connect } for  pid=13765 comm="syz.3.2114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  577.394262][T13784] vivid-000: disconnect
[  577.445376][   T29] audit: type=1400 audit(1066.786:896): avc:  denied  { checkpoint_restore } for  pid=13775 comm="syz.2.2117" capability=40  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  577.562165][T13779] vivid-000: reconnect
[  577.755442][T13792] overlayfs: failed to resolve './file0': -2
[  577.820561][T13794] fuse: Unknown parameter 'use00000000000000000000'
[  578.199939][   T29] audit: type=1400 audit(1067.497:897): avc:  denied  { create } for  pid=13805 comm="syz.1.2127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  578.560149][   T29] audit: type=1400 audit(1067.638:898): avc:  denied  { listen } for  pid=13805 comm="syz.1.2127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  578.563199][T13802] syzkaller0: entered promiscuous mode
[  578.605944][   T29] audit: type=1400 audit(1067.694:899): avc:  denied  { append } for  pid=13805 comm="syz.1.2127" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  578.628975][T13802] syzkaller0: entered allmulticast mode
[  578.827305][T13812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2128'.
[  580.469572][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  580.476130][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  580.507460][T13827] netlink: 'syz.0.2132': attribute type 10 has an invalid length.
[  580.563268][T13827] bridge0: port 2(bridge_slave_1) entered blocking state
[  580.570526][T13827] bridge0: port 2(bridge_slave_1) entered forwarding state
[  580.577866][T13827] bridge0: port 1(bridge_slave_0) entered blocking state
[  580.584922][T13827] bridge0: port 1(bridge_slave_0) entered forwarding state
[  580.602640][T13827] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  580.627387][T13833] fuse: Unknown parameter 'user_i00000000000000000000'
[  581.041077][    T9] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  581.109624][  T977] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[  581.210018][    T9] usb 7-1: Using ep0 maxpacket: 16
[  581.222598][    T9] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  581.240761][    T9] usb 7-1: config 0 interface 0 has no altsetting 0
[  581.251799][    T9] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  581.261624][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  581.269968][  T977] usb 2-1: Using ep0 maxpacket: 16
[  581.276976][    T9] usb 7-1: config 0 descriptor??
[  581.286898][  T977] usb 2-1: config 157 has an invalid descriptor of length 0, skipping remainder of the config
[  581.297871][  T977] usb 2-1: config 157 has 0 interfaces, different from the descriptor's value: 1
[  581.707897][  T977] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  581.717625][  T977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  581.725693][  T977] usb 2-1: Product: syz
[  581.730326][  T977] usb 2-1: Manufacturer: syz
[  581.734956][  T977] usb 2-1: SerialNumber: syz
[  581.951921][T13858] tipc: New replicast peer: 0.0.0.0
[  581.957901][T13858] tipc: Enabled bearer <udp:syz2>, priority 10
[  581.987054][    T9] nzxt-smart2 0003:1E71:2009.0019: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.6-1/input0
[  582.205482][T13838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  582.237814][T13838] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  582.249403][   T24] usb 2-1: USB disconnect, device number 64
[  582.388418][T13877] fuse: Unknown parameter 'user_i00000000000000000000'
[  582.434669][ T5870] usb 7-1: USB disconnect, device number 13
[  582.541103][ T5941] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  582.723300][ T5941] usb 1-1: Using ep0 maxpacket: 16
[  582.730208][ T5941] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  582.743271][ T5941] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  582.754453][ T5941] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x74, changing to 0x4
[  582.768846][ T5941] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 6
[  582.779287][ T5941] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  582.793721][ T5941] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  582.803758][ T5941] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  582.818075][ T5941] usb 1-1: Manufacturer: syz
[  582.828477][ T5941] usb 1-1: config 0 descriptor??
[  582.917144][ T5870] usb 3-1: new high-speed USB device number 69 using dummy_hcd
[  583.128345][ T5870] usb 3-1: config index 0 descriptor too short (expected 2084, got 36)
[  583.157272][ T5870] usb 3-1: config 0 has an invalid interface number: 240 but max is 0
[  583.227451][ T5870] usb 3-1: config 0 has no interface number 0
[  583.233596][ T5870] usb 3-1: config 0 interface 240 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  583.282737][ T5870] usb 3-1: config 0 interface 240 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0
[  583.326316][ T5870] usb 3-1: config 0 interface 240 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  583.349229][ T5870] usb 3-1: config 0 interface 240 has no altsetting 0
[  583.458671][ T5941] rc_core: IR keymap rc-hauppauge not found
[  583.465311][ T5941] Registered IR keymap rc-empty
[  583.471985][ T5941] mceusb 1-1:0.0: Error: mce write urb status = -71
[  583.487020][ T5870] usb 3-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00
[  583.500985][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  583.509453][ T5941] mceusb 1-1:0.0: Error: mce write urb status = -71
[  583.536674][ T5941] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  583.549477][ T5870] usb 3-1: config 0 descriptor??
[  583.576525][ T5941] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input43
[  583.618483][T13899] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2154'.
[  583.634118][ T5941] mceusb 1-1:0.0: Error: mce write urb status = -71
[  583.663791][ T5941] mceusb 1-1:0.0: Error: mce write urb status = -71
[  583.688591][ T5941] mceusb 1-1:0.0: Error: mce write urb status = -71
[  583.763794][ T5941] mceusb 1-1:0.0: Error: mce write urb status = -71
[  584.010532][ T5941] mceusb 1-1:0.0: Error: mce write urb status = -71
[  584.037751][ T5941] mceusb 1-1:0.0: Error: mce write urb status = -71
[  584.059179][ T5941] mceusb 1-1:0.0: Error: mce write urb status = -71
[  584.080553][ T5941] mceusb 1-1:0.0: Error: mce write urb status = -71
[  584.101901][ T5941] mceusb 1-1:0.0: Error: mce write urb status = -71
[  584.126497][ T5941] mceusb 1-1:0.0: Error: mce write urb status = -71
[  584.146161][ T5941] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  584.155707][ T5941] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  584.236397][ T5870] uclogic 0003:5543:004D.001A: interface is invalid, ignoring
[  584.735349][T13911] tipc: Started in network mode
[  584.740375][T13911] tipc: Node identity ac14142f, cluster identity 4711
[  584.750466][T13911] tipc: New replicast peer: 0.0.0.0
[  584.756620][T13911] tipc: Enabled bearer <udp:syz2>, priority 10
[  585.153296][T13917] fuse: Unknown parameter 'user_i00000000000000000000'
[  585.199988][   T29] audit: type=1400 audit(1074.048:900): avc:  denied  { bind } for  pid=13918 comm="syz.6.2161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  585.716054][    T9] usb 1-1: USB disconnect, device number 44
[  585.794514][ T5941] usb 3-1: USB disconnect, device number 69
[  585.870218][  T977] tipc: Node number set to 2886997039
[  585.944341][T13930] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2163'.
[  586.288548][   T29] audit: type=1400 audit(1075.068:901): avc:  denied  { connect } for  pid=13929 comm="syz.3.2165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  586.943306][   T29] audit: type=1400 audit(1075.676:902): avc:  denied  { lock } for  pid=13937 comm="syz.1.2166" path="socket:[50312]" dev="sockfs" ino=50312 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  588.191834][T13958] fuse: Unknown parameter 'user_id00000000000000000000'
[  588.330624][T13961] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2172'.
[  588.339796][T13961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2172'.
[  588.352280][T13961] trusted_key: encrypted_key: insufficient parameters specified
[  588.445608][T13963] sp0: Synchronizing with TNC
[  589.593321][   T29] audit: type=1400 audit(1078.156:903): avc:  denied  { mount } for  pid=13979 comm="syz.1.2179" name="/" dev="hugetlbfs" ino=49604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  589.723404][T13986] PKCS7: Unknown OID: [4] (bad)
[  589.728406][T13986] PKCS7: Only support pkcs7_signedData type
[  590.200142][T13940] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  590.246493][T13984] netlink: 'syz.1.2179': attribute type 6 has an invalid length.
[  590.262017][T13984] netlink: 360 bytes leftover after parsing attributes in process `syz.1.2179'.
[  590.329543][T13994] fuse: Unknown parameter 'user_id00000000000000000000'
[  590.879766][T14008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2188'.
[  590.918702][   T29] audit: type=1400 audit(1079.391:904): avc:  denied  { ioctl } for  pid=14003 comm="syz.2.2187" path="socket:[49683]" dev="sockfs" ino=49683 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  591.581628][   T29] audit: type=1400 audit(1080.018:905): avc:  denied  { map } for  pid=14019 comm="syz.0.2194" path="socket:[49704]" dev="sockfs" ino=49704 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  591.818558][T14028] fuse: Unknown parameter 'user_id00000000000000000000'
[  591.926823][  T977] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  592.006923][T14031] netlink: 'syz.6.2198': attribute type 1 has an invalid length.
[  592.026649][T14031] netlink: 2108 bytes leftover after parsing attributes in process `syz.6.2198'.
[  592.161540][  T977] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  592.175858][  T977] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  592.216775][T14037] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  592.235560][   T29] audit: type=1400 audit(1080.627:906): avc:  denied  { getopt } for  pid=14030 comm="syz.6.2198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  592.267029][  T977] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  592.276159][  T977] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  592.290409][  T977] usb 1-1: Manufacturer: syz
[  592.299840][T14039] netlink: 'syz.3.2201': attribute type 29 has an invalid length.
[  592.308733][  T977] usb 1-1: config 0 descriptor??
[  592.407172][T14041] netlink: 'syz.3.2201': attribute type 29 has an invalid length.
[  592.437321][T14039] netlink: 'syz.3.2201': attribute type 32 has an invalid length.
[  592.503327][T14039] netlink: 500 bytes leftover after parsing attributes in process `syz.3.2201'.
[  593.344929][T14051] tmpfs: Unknown parameter ''
[  593.702286][  T977] uclogic 0003:256C:006D.001B: interface is invalid, ignoring
[  593.793003][   T29] audit: type=1400 audit(1082.086:907): avc:  denied  { ioctl } for  pid=14052 comm="syz.2.2204" path="socket:[50482]" dev="sockfs" ino=50482 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  593.854857][   T29] audit: type=1400 audit(1082.096:908): avc:  denied  { write } for  pid=14052 comm="syz.2.2204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  593.935469][  T977] usb 1-1: USB disconnect, device number 45
[  594.055608][T14062] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  594.063235][T14062] IPv6: NLM_F_CREATE should be set when creating new route
[  594.070542][T14062] IPv6: NLM_F_CREATE should be set when creating new route
[  594.077893][T14062] IPv6: NLM_F_CREATE should be set when creating new route
[  594.125384][ T5927] usb 3-1: new high-speed USB device number 70 using dummy_hcd
[  594.191259][T14062] fuse: Bad value for 'fd'
[  594.346897][ T5927] usb 3-1: config 0 has an invalid interface number: 69 but max is 0
[  594.355311][   T29] audit: type=1326 audit(1082.601:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14064 comm="syz.3.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83c39c799 code=0x7ffc0000
[  594.360427][ T5927] usb 3-1: config 0 has no interface number 0
[  594.391353][ T5927] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  594.401908][ T5927] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  594.421612][ T5927] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  594.428342][   T29] audit: type=1326 audit(1082.601:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14064 comm="syz.3.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83c39c799 code=0x7ffc0000
[  594.457896][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  594.484145][ T5927] usb 3-1: Product: syz
[  594.487604][   T29] audit: type=1326 audit(1082.601:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14064 comm="syz.3.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ff83c39c799 code=0x7ffc0000
[  594.492466][ T5927] usb 3-1: Manufacturer: syz
[  594.523851][   T29] audit: type=1326 audit(1082.601:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14064 comm="syz.3.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83c39c799 code=0x7ffc0000
[  594.547804][   T29] audit: type=1326 audit(1082.601:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14064 comm="syz.3.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7ff83c39c799 code=0x7ffc0000
[  594.648537][ T5927] usb 3-1: SerialNumber: syz
[  594.661002][ T5927] usb 3-1: config 0 descriptor??
[  594.666675][T14057] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  594.688636][ T5927] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  594.707126][ T5927] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  595.677856][T14057] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2205'.
[  596.264166][T14097] tmpfs: Unknown parameter ''
[  596.727456][T14098] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2216'.
[  596.917066][T14093] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2216'.
[  596.940306][T14103] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  597.007064][T14105] tmpfs: Unknown parameter ''
[  597.440275][T14093] openvswitch: netlink: Flow key attr not present in new flow.
[  597.469526][ T5927] usb 3-1: USB disconnect, device number 70
[  597.481998][ T5927] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  597.523188][ T5927] cyberjack 3-1:0.69: device disconnected
[  598.411568][T14129] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2225'.
[  598.581491][ T5870] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  598.903472][ T5870] usb 7-1: Using ep0 maxpacket: 16
[  599.091824][ T5870] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  599.103689][ T5870] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  599.224126][ T5870] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  599.225986][T14134] ip6erspan0: entered allmulticast mode
[  599.253815][ T5870] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  599.294331][ T5870] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  599.352963][ T5870] usb 7-1: config 0 descriptor??
[  599.722906][T14148] tmpfs: Unknown parameter ''
[  600.146599][ T5870] microsoft 0003:045E:07DA.001C: ignoring exceeding usage max
[  600.165342][ T5870] microsoft 0003:045E:07DA.001C: ignoring exceeding usage max
[  600.182937][T14151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2236'.
[  600.202467][T14151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2236'.
[  600.302440][T14152] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2228'.
[  600.324321][T14152] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2228'.
[  600.557282][    T9] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  600.576608][    T9] hid-generic 0000:0000:0000.001D: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  601.089834][    T9] IPVS: starting estimator thread 0...
[  601.359718][T14169] IPVS: using max 40 ests per chain, 96000 per kthread
[  602.647033][   T29] kauditd_printk_skb: 5 callbacks suppressed
[  602.647048][   T29] audit: type=1400 audit(1090.378:919): avc:  denied  { name_bind } for  pid=14183 comm="syz.1.2245" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  603.058950][ T5870] microsoft 0003:045E:07DA.001C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0
[  603.078902][ T5870] microsoft 0003:045E:07DA.001C: no inputs found
[  603.107513][ T5870] microsoft 0003:045E:07DA.001C: could not initialize ff, continuing anyway
[  603.145239][ T5870] usb 7-1: USB disconnect, device number 14
[  603.319571][T14193] fido_id[14193]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  603.405782][T14198] tmpfs: Unknown parameter ''
[  603.841211][T14200] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2247'.
[  603.855894][T14200] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2247'.
[  604.237782][   T29] audit: type=1400 audit(1091.866:920): avc:  denied  { mount } for  pid=14204 comm="syz.2.2250" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[  604.321488][   T29] audit: type=1400 audit(1091.884:921): avc:  denied  { mount } for  pid=14204 comm="syz.2.2250" name="/" dev="configfs" ino=1127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  604.939514][ T5870] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  605.110742][ T5870] usb 1-1: Using ep0 maxpacket: 16
[  605.164923][ T5870] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11
[  605.174007][ T5870] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  605.189467][ T5870] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  605.242772][ T5870] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  605.248856][T14218] netlink: 'syz.6.2253': attribute type 12 has an invalid length.
[  605.253504][ T5870] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  605.284498][ T5870] usb 1-1: config 1 interface 0 has no altsetting 0
[  605.302231][ T5870] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  605.335688][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  605.394283][ T5870] ums-sddr09 1-1:1.0: USB Mass Storage device detected
[  605.599368][T14212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  605.692729][T14212] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  606.423515][T14250] netlink: 268 bytes leftover after parsing attributes in process `syz.1.2261'.
[  606.730779][   T29] audit: type=1800 audit(1094.149:922): pid=14212 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.0.2252" name="/newroot/429/pids.events" dev="tmpfs" ino=2307 res=0 errno=0
[  607.647793][ T5870] ums-sddr09 1-1:1.0: probe with driver ums-sddr09 failed with error -22
[  607.674951][ T5870] usb 1-1: USB disconnect, device number 46
[  607.848676][T14257] netlink: 'syz.1.2263': attribute type 10 has an invalid length.
[  608.179277][   T29] audit: type=1400 audit(1095.553:923): avc:  denied  { mount } for  pid=14274 comm="syz.1.2268" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  608.276477][T14281] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1
[  608.288151][T14281] batman_adv: batadv0: Adding interface: ip6gretap1
[  608.297140][T14281] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  608.338110][T14281] batman_adv: batadv0: Interface activated: ip6gretap1
[  610.028192][ T5870] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[  610.913196][ T5870] usb 4-1: Using ep0 maxpacket: 16
[  610.924775][ T5870] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11
[  610.941718][ T5870] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  610.959952][T14305] macvtap1: entered promiscuous mode
[  610.965254][T14305] syz_tun: entered promiscuous mode
[  610.998110][ T5870] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  611.011218][ T5870] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  611.021132][ T5870] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  611.031218][ T5870] usb 4-1: config 1 interface 0 has no altsetting 0
[  611.038027][ T5870] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  611.048807][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  611.117452][ T5870] ums-sddr09 4-1:1.0: USB Mass Storage device detected
[  611.401694][T14300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  611.416139][T14300] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  611.637186][   T29] audit: type=1800 audit(1098.781:924): pid=14300 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.3.2277" name="/newroot/463/pids.events" dev="tmpfs" ino=2480 res=0 errno=0
[  611.718887][   T29] audit: type=1400 audit(1098.865:925): avc:  denied  { read } for  pid=14323 comm="syz.1.2281" path="socket:[50944]" dev="sockfs" ino=50944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  611.748845][ T5870] ums-sddr09 4-1:1.0: probe with driver ums-sddr09 failed with error -22
[  611.777238][ T5870] usb 4-1: USB disconnect, device number 60
[  612.442042][T14342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  612.450632][T14342] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  612.517204][    T9] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  612.553423][T14342] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4)
[  612.700584][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  612.714157][T14352] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2290'.
[  612.742511][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  612.751000][ T5870] usb 3-1: new high-speed USB device number 71 using dummy_hcd
[  612.765373][    T9] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  612.775961][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  612.814010][    T9] usb 1-1: config 0 descriptor??
[  612.942734][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  612.955180][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  612.973394][ T5870] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  612.984342][ T5870] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  612.993850][ T5870] usb 3-1: Manufacturer: syz
[  613.033799][ T5870] usb 3-1: config 0 descriptor??
[  613.308745][    T9] playstation 0003:054C:0DF2.001E: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0
[  613.657279][T14373] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9)
[  613.663815][T14373] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  613.671826][T14373] vhci_hcd vhci_hcd.0: Device attached
[  614.023352][  T977] usb 39-1: new low-speed USB device number 2 using vhci_hcd
[  614.068538][ T5870] uclogic 0003:256C:006D.001F: interface is invalid, ignoring
[  614.636372][T14374] vhci_hcd: connection reset by peer
[  614.703474][  T274] vhci_hcd vhci_hcd.3: stop threads
[  614.748974][  T274] vhci_hcd vhci_hcd.3: release socket
[  614.812039][  T274] vhci_hcd vhci_hcd.3: disconnect device
[  615.182882][ T5870] usb 3-1: USB disconnect, device number 71
[  615.279513][T14383] FAULT_INJECTION: forcing a failure.
[  615.279513][T14383] name failslab, interval 1, probability 0, space 0, times 0
[  615.334823][T14383] CPU: 0 UID: 0 PID: 14383 Comm: syz.2.2302 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  615.334852][T14383] Tainted: [L]=SOFTLOCKUP
[  615.334861][T14383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  615.334871][T14383] Call Trace:
[  615.334877][T14383]  <TASK>
[  615.334884][T14383]  dump_stack_lvl+0x100/0x190
[  615.334918][T14383]  should_fail_ex.cold+0x5/0xa
[  615.334941][T14383]  should_failslab+0xc2/0x120
[  615.334960][T14383]  kmem_cache_alloc_node_noprof+0x81/0x6f0
[  615.334986][T14383]  ? __alloc_skb+0x140/0x710
[  615.335019][T14383]  __alloc_skb+0x140/0x710
[  615.335039][T14383]  ? __alloc_skb+0x5b7/0x710
[  615.335059][T14383]  ? __pfx___alloc_skb+0x10/0x10
[  615.335078][T14383]  ? genl_rcv_msg+0x4be/0x800
[  615.335102][T14383]  netlink_ack+0x117/0xb80
[  615.335135][T14383]  netlink_rcv_skb+0x333/0x420
[  615.335161][T14383]  ? __pfx_genl_rcv_msg+0x10/0x10
[  615.335180][T14383]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  615.335216][T14383]  ? netlink_deliver_tap+0x1ae/0xcc0
[  615.335244][T14383]  genl_rcv+0x28/0x40
[  615.335268][T14383]  netlink_unicast+0x5aa/0x870
[  615.335294][T14383]  ? __pfx_netlink_unicast+0x10/0x10
[  615.335327][T14383]  netlink_sendmsg+0x8b0/0xda0
[  615.335357][T14383]  ? __pfx_netlink_sendmsg+0x10/0x10
[  615.335382][T14383]  ? __might_fault+0x60/0x140
[  615.335416][T14383]  ____sys_sendmsg+0x9e1/0xb70
[  615.335443][T14383]  ? __pfx_netlink_sendmsg+0x10/0x10
[  615.335470][T14383]  ? __pfx_____sys_sendmsg+0x10/0x10
[  615.335511][T14383]  ___sys_sendmsg+0x190/0x1e0
[  615.335533][T14383]  ? __pfx____sys_sendmsg+0x10/0x10
[  615.335584][T14383]  __sys_sendmsg+0x170/0x220
[  615.335608][T14383]  ? __pfx___sys_sendmsg+0x10/0x10
[  615.335649][T14383]  do_syscall_64+0x106/0xf80
[  615.335674][T14383]  ? clear_bhb_loop+0x40/0x90
[  615.335696][T14383]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  615.335715][T14383] RIP: 0033:0x7fa882f9c799
[  615.335731][T14383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  615.335748][T14383] RSP: 002b:00007fa883e43028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  615.335766][T14383] RAX: ffffffffffffffda RBX: 00007fa883215fa0 RCX: 00007fa882f9c799
[  615.335778][T14383] RDX: 0000000000040040 RSI: 0000200000000080 RDI: 0000000000000004
[  615.335789][T14383] RBP: 00007fa883e43090 R08: 0000000000000000 R09: 0000000000000000
[  615.335800][T14383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  615.335810][T14383] R13: 00007fa883216038 R14: 00007fa883215fa0 R15: 00007ffe4fe98868
[  615.335836][T14383]  </TASK>
[  615.677709][    T9] playstation 0003:054C:0DF2.001E: Failed to retrieve feature with reportID 9: -71
[  615.687147][    T9] playstation 0003:054C:0DF2.001E: Failed to retrieve DualSense pairing info: -71
[  615.697028][    T9] playstation 0003:054C:0DF2.001E: Failed to get MAC address from DualSense
[  615.705802][    T9] playstation 0003:054C:0DF2.001E: Failed to create dualsense.
[  615.716826][   T29] audit: type=1400 audit(1102.552:926): avc:  denied  { read } for  pid=14389 comm="syz.2.2305" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  615.744209][    T9] playstation 0003:054C:0DF2.001E: probe with driver playstation failed with error -71
[  615.760866][    T9] usb 1-1: USB disconnect, device number 47
[  615.914054][ T5870] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  615.928441][  T793] usb 3-1: new high-speed USB device number 72 using dummy_hcd
[  616.074370][ T5870] usb 7-1: Using ep0 maxpacket: 8
[  616.202405][  T793] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 249, changing to 11
[  616.215571][  T793] usb 3-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.40
[  616.226289][  T793] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  616.243995][ T5870] usb 7-1: unable to get BOS descriptor or descriptor too short
[  616.252114][  T793] usb 3-1: Product: 覿䗫֕챷碿齣஧傕慙鉯��筩埽鲞奀歙棚䆻Ҥ웖쌎✲⢾柮�䕀䰈ተ歪ㆤ啉谊悎배㘈鞻ᯧ딉侕芊�葉䱘餈赲⟽꿉ꓷ䟟蟤⇨䲕俵텟探筌�撺峎㧸�骤倪疄ส컼쌠ᅒ퇨窶�犖⽗਑ꯔ듗鞦＋
[  616.305006][ T5870] usb 7-1: config 6 has an invalid interface number: 57 but max is 0
[  616.314818][ T5870] usb 7-1: config 6 has no interface number 0
[  616.325603][ T5870] usb 7-1: config 6 interface 57 has no altsetting 0
[  616.334772][  T793] usb 3-1: Manufacturer: â°Š
[  616.348320][  T793] usb 3-1: SerialNumber: ã �
[  616.354146][ T5870] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=67.16
[  616.373715][ T5870] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  616.386391][ T5870] usb 7-1: Product: syz
[  616.392163][ T5870] usb 7-1: Manufacturer: syz
[  616.403566][ T5870] usb 7-1: SerialNumber: syz
[  616.604233][  T793] usbhid 3-1:1.0: can't add hid device: -71
[  616.619355][    T9] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[  616.630219][  T793] usbhid 3-1:1.0: probe with driver usbhid failed with error -71
[  616.692436][  T793] usb 3-1: USB disconnect, device number 72
[  616.703355][   T29] audit: type=1400 audit(1103.526:927): avc:  denied  { accept } for  pid=14384 comm="syz.6.2300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  616.741751][ T5870] legousbtower 7-1:6.57: interrupt endpoints not found
[  616.794238][ T5870] usb 7-1: USB disconnect, device number 15
[  616.820192][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  616.844507][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  617.425080][T14417] wg1 speed is unknown, defaulting to 1000
[  617.454839][    T9] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  617.508427][    T9] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  617.536395][    T9] usb 4-1: Manufacturer: syz
[  617.565019][    T9] usb 4-1: config 0 descriptor??
[  617.640228][T14424] fuse: Unknown parameter 'euid<00000000000000000000'
[  618.040584][T14431] netlink: 'syz.2.2318': attribute type 1 has an invalid length.
[  618.542863][ T5941] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  618.583150][    T9] uclogic 0003:256C:006D.0020: interface is invalid, ignoring
[  618.750921][ T5941] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  618.928769][ T5941] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  618.935246][    T9] usb 4-1: USB disconnect, device number 62
[  619.005560][ T5941] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  619.094411][ T5941] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  619.130598][ T5941] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  619.160601][ T5941] usb 7-1: Product: syz
[  619.182143][ T5941] usb 7-1: Manufacturer: syz
[  619.193964][ T5941] usb 7-1: SerialNumber: syz
[  619.227527][ T5941] usb 7-1: config 0 descriptor??
[  619.237091][T14437] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  619.253623][T14437] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  619.297089][ T5941] usb 7-1: ucan: probing device on interface #0
[  619.509943][ T5941] usb 7-1: ucan: could not read protocol version, ret=-32
[  619.547752][  T977] vhci_hcd vhci_hcd.3: vhci_device speed not set
[  619.548494][T14462] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2316'.
[  619.568917][ T5941] usb 7-1: ucan: probe failed; try to update the device firmware
[  619.611467][T14462] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2316'.
[  620.125633][T14480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  620.138309][T14480] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  620.152635][T14482] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  620.191510][T14486] fuse: Unknown parameter 'euid<00000000000000000000'
[  620.232114][T14480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  620.246126][T14480] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  620.371261][ T5941] usb 3-1: new high-speed USB device number 73 using dummy_hcd
[  620.400529][T14482] loop8: detected capacity change from 0 to 7
[  620.413441][T14480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  620.472291][    C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  620.481942][    C1] buffer_io_error: 25 callbacks suppressed
[  620.481959][    C1] Buffer I/O error on dev loop8, logical block 0, async page read
[  620.557369][T14480] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  620.614734][    C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  620.624370][    C1] Buffer I/O error on dev loop8, logical block 0, async page read
[  620.641120][    C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  620.650738][    C1] Buffer I/O error on dev loop8, logical block 0, async page read
[  620.731751][T14480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  620.751796][    C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  620.761439][    C1] Buffer I/O error on dev loop8, logical block 0, async page read
[  620.777298][    C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  620.786942][    C1] Buffer I/O error on dev loop8, logical block 0, async page read
[  620.819601][    C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  620.829196][    C1] Buffer I/O error on dev loop8, logical block 0, async page read
[  620.841447][    C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  620.851075][    C1] Buffer I/O error on dev loop8, logical block 0, async page read
[  620.871758][    C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  620.881392][    C1] Buffer I/O error on dev loop8, logical block 0, async page read
[  620.889323][T14482] ldm_validate_partition_table(): Disk read failed.
[  620.981863][    C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  620.991511][    C1] Buffer I/O error on dev loop8, logical block 0, async page read
[  621.017506][    C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  621.027132][    C1] Buffer I/O error on dev loop8, logical block 0, async page read
[  621.043098][T14482] Dev loop8: unable to read RDB block 0
[  621.059219][T14482]  loop8: unable to read partition table
[  621.067191][T14482] loop8: partition table beyond EOD, truncated
[  621.073498][T14482] loop_reread_partitions: partition scan of loop8 (úùƒå¡™‰ü�¾SêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5)
[  621.103205][T14480] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  621.170525][T14480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  621.179128][ T5941] usb 3-1: unable to get BOS descriptor or descriptor too short
[  621.203108][T14480] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  621.220061][ T5941] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  621.231147][ T5941] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  621.244156][ T5941] usb 3-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40
[  621.277455][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  621.289172][ T5941] usb 3-1: Product: syz
[  621.318978][ T5941] usb 3-1: Manufacturer: syz
[  621.485957][ T5870] usb 7-1: USB disconnect, device number 16
[  621.512676][ T5941] usb 3-1: SerialNumber: syz
[  621.761654][T14511] ip6gre1: entered promiscuous mode
[  621.772111][T14511] ip6gre1: entered allmulticast mode
[  621.810460][ T5941] usb 3-1: 0:1 : does not exist
[  621.826537][ T5941] usb 3-1: BAAD GENERIC IO: no channels?
[  622.053193][ T8610] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  622.063827][ T5941] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[  622.084180][    T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  622.101698][ T8610] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  622.141233][ T5941] usb 3-1: USB disconnect, device number 73
[  622.147662][T10668] udevd[10668]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  622.650245][    T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  622.864153][T14517] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed
[  622.873036][T14517] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff)
[  622.902788][    T9] usb 3-1: new high-speed USB device number 74 using dummy_hcd
[  623.223590][  T977] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  623.283378][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  623.294573][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  623.331815][    T9] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  623.341274][    T9] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  623.357857][    T9] usb 3-1: Manufacturer: syz
[  623.378120][    T9] usb 3-1: config 0 descriptor??
[  623.545616][T14536] wg1 speed is unknown, defaulting to 1000
[  624.000389][   T29] audit: type=1400 audit(1110.357:928): avc:  denied  { append } for  pid=14545 comm="syz.6.2344" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  624.066426][T14550] ip6t_srh: unknown srh invflags 4000
[  624.089029][  T977] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  624.257704][    T9] uclogic 0003:256C:006D.0021: interface is invalid, ignoring
[  624.269100][  T977] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  624.279672][  T977] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  624.281280][ T5941] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[  624.299973][ T5877] usb 7-1: new full-speed USB device number 17 using dummy_hcd
[  624.309222][  T977] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  624.320855][  T977] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  624.330204][  T977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  624.339368][  T977] usb 1-1: Product: syz
[  624.343528][  T977] usb 1-1: Manufacturer: syz
[  624.348149][  T977] usb 1-1: SerialNumber: syz
[  624.354334][  T977] usb 1-1: config 0 descriptor??
[  624.360002][T14542] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  624.367257][T14542] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  624.375273][  T977] usb 1-1: ucan: probing device on interface #0
[  624.462939][ T5941] usb 4-1: Using ep0 maxpacket: 32
[  624.464585][ T5877] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  624.471501][ T5941] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  624.479430][ T5877] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  624.493836][  T793] usb 3-1: USB disconnect, device number 74
[  624.499269][ T5877] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0003, bcdDevice= 0.00
[  624.509361][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  624.515876][ T5877] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  624.524422][ T5941] usb 4-1: Product: syz
[  624.529612][ T5877] usb 7-1: SerialNumber: syz
[  624.532802][ T5941] usb 4-1: Manufacturer: syz
[  624.542486][ T5941] usb 4-1: SerialNumber: syz
[  624.562537][ T5941] usb 4-1: config 0 descriptor??
[  624.564210][ T5877] usb 7-1: 0:2 : does not exist
[  624.595346][  T977] usb 1-1: ucan: could not read protocol version, ret=-32
[  624.602661][  T977] usb 1-1: ucan: probe failed; try to update the device firmware
[  625.005166][  T793] usb 7-1: USB disconnect, device number 17
[  625.011303][ T5941] peak_usb 4-1:0.0 can0: unable to request usb[type=0 value=0] err=-71
[  625.022290][ T5941] peak_usb 4-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71)
[  625.087946][T14559] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2348'.
[  625.098240][ T5941] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71
[  625.117699][ T5941] usb 4-1: USB disconnect, device number 63
[  625.246628][T14565] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2351'.
[  625.863154][   T29] audit: type=1800 audit(1112.107:929): pid=14582 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.1.2355" name="/newroot/500/pids.events" dev="tmpfs" ino=2672 res=0 errno=0
[  625.990984][ T5877] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[  626.183398][ T5877] usb 4-1: device descriptor read/64, error -71
[  626.461342][ T5877] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[  626.482658][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  626.600161][ T5877] usb 4-1: device descriptor read/64, error -71
[  626.728905][ T5877] usb usb4-port1: attempt power cycle
[  626.801509][   T29] audit: type=1800 audit(1112.977:930): pid=14605 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.1.2361" name="/newroot/502/pids.events" dev="tmpfs" ino=2684 res=0 errno=0
[  627.048021][ T5870] usb 1-1: USB disconnect, device number 48
[  627.130032][T14614] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2362'.
[  627.155812][ T5877] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[  627.188395][ T5877] usb 4-1: device descriptor read/8, error -71
[  627.455393][ T5877] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[  627.498817][ T5877] usb 4-1: device descriptor read/8, error -71
[  627.626517][ T5877] usb usb4-port1: unable to enumerate USB device
[  627.874173][T14630] tmpfs: Unknown parameter ''
[  628.265367][T14627] overlayfs: failed to clone upperpath
[  628.282092][   T29] audit: type=1400 audit(1114.362:931): avc:  denied  { create } for  pid=14626 comm="syz.1.2367" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  628.386137][T14636] loop6: detected capacity change from 0 to 7
[  628.413693][    C1] blk_print_req_error: 6 callbacks suppressed
[  628.413712][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  628.429362][    C1] buffer_io_error: 6 callbacks suppressed
[  628.429372][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  628.478718][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  628.488375][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  628.501995][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  628.511660][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  628.532972][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  628.533523][T14639] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  628.542681][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  628.572696][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  628.582354][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  628.830388][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  628.840050][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  628.854001][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  628.863623][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  628.875848][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  628.885463][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  628.893397][T14636] ldm_validate_partition_table(): Disk read failed.
[  628.905131][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  628.914743][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  628.933319][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  628.942938][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  628.961690][T14636] Dev loop6: unable to read RDB block 0
[  628.970957][T14636]  loop6: unable to read partition table
[  628.977386][T14636] loop6: partition table beyond EOD, truncated
[  628.983778][T14636] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü�¾SêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5)
[  629.348445][T13387] Bluetooth: hci3: ACL packet for unknown connection handle 201
[  629.485336][ T5877] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  629.496458][    T9] usb 3-1: new high-speed USB device number 75 using dummy_hcd
[  629.763175][ T5877] usb 7-1: Using ep0 maxpacket: 8
[  629.770069][ T5877] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  629.780633][    T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  629.790645][ T5877] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  629.869835][T14673] tmpfs: Unknown parameter ''
[  630.222022][    T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  630.233992][ T5877] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  630.244014][    T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  630.253963][ T5877] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  630.267201][ T5877] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  630.277050][ T5877] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  630.290245][    T9] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  630.306002][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  630.348437][    T9] usb 3-1: Product: syz
[  630.413483][    T9] usb 3-1: Manufacturer: syz
[  630.475834][    T9] usb 3-1: SerialNumber: syz
[  630.522589][    T9] usb 3-1: config 0 descriptor??
[  630.564826][T14644] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  630.604590][T14644] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  630.730333][    T9] usb 3-1: ucan: probing device on interface #0
[  630.740416][T14677] ip6t_srh: unknown srh match flags  FF3F
[  630.758120][ T5877] usb 7-1: GET_CAPABILITIES returned 0
[  630.774626][ T5877] usbtmc 7-1:16.0: can't read capabilities
[  630.939155][    T9] usb 3-1: ucan: could not read protocol version, ret=0
[  630.946104][    T9] usb 3-1: ucan: probe failed; try to update the device firmware
[  630.972962][T14642] usbtmc 7-1:16.0: usbtmc488_ioctl_trigger returned -90
[  631.007247][T14642] netlink: 212360 bytes leftover after parsing attributes in process `syz.6.2371'.
[  632.083139][   T29] audit: type=1400 audit(1117.871:932): avc:  denied  { ioctl } for  pid=14703 comm="syz.3.2391" path="socket:[52737]" dev="sockfs" ino=52737 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  632.168210][   T29] audit: type=1400 audit(1117.993:933): avc:  denied  { getopt } for  pid=14703 comm="syz.3.2391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  632.317700][   T29] audit: type=1400 audit(1118.049:934): avc:  denied  { write } for  pid=14703 comm="syz.3.2391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  632.463538][ T5941] usb 3-1: USB disconnect, device number 75
[  632.492354][T14715] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2393'.
[  632.817930][ T5941] usb 7-1: USB disconnect, device number 18
[  632.913913][   T29] audit: type=1400 audit(1118.695:935): avc:  denied  { read write } for  pid=14718 comm="syz.2.2395" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  633.007841][   T29] audit: type=1400 audit(1118.695:936): avc:  denied  { open } for  pid=14718 comm="syz.2.2395" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  633.471423][ T5941] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[  633.646748][ T5941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  634.066848][   T29] audit: type=1400 audit(1119.481:937): avc:  denied  { mounton } for  pid=14726 comm="syz.0.2398" path="/" dev="autofs" ino=52850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1
[  634.287164][ T5941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  634.319766][ T5941] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  634.333933][ T5941] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  634.343437][ T5941] usb 4-1: Manufacturer: syz
[  634.362590][ T5941] usb 4-1: config 0 descriptor??
[  634.842621][    T9] usb 1-1: new full-speed USB device number 49 using dummy_hcd
[  635.032283][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[  635.075025][    T9] usb 1-1: not running at top speed; connect to a high speed hub
[  635.086150][    T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  635.171291][    T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 256, setting to 64
[  635.263368][    T9] usb 1-1: config 1 interface 2 has no altsetting 0
[  635.275343][    T9] usb 1-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40
[  635.292205][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  635.301859][ T5941] uclogic 0003:256C:006D.0022: interface is invalid, ignoring
[  635.576781][ T5941] usb 4-1: USB disconnect, device number 68
[  635.619244][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  635.821706][    T9] usb 1-1: Product: syz
[  635.825988][    T9] usb 1-1: Manufacturer: syz
[  635.830628][    T9] usb 1-1: SerialNumber: syz
[  636.398621][    T9] usb 1-1: selecting invalid altsetting 0
[  636.411000][T14772] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2408'.
[  636.866486][    T9] usb 1-1: 2:1 : format type 0 is detected, processed as PCM
[  636.874904][    T9] usb 1-1: selecting invalid altsetting 0
[  636.886470][    T9] usb 1-1: 2:1: cannot set freq 13115191 to ep 0x82
[  636.899128][    T9] usb 1-1: selecting invalid altsetting 0
[  637.170416][    T9] usb 1-1: USB disconnect, device number 49
[  637.353791][   T29] audit: type=1400 audit(1122.812:938): avc:  denied  { getopt } for  pid=14790 comm="syz.6.2414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  637.394022][T14791] overlayfs: failed to clone upperpath
[  637.412268][T10665] udevd[10665]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  638.525944][ T5870] usb 4-1: new full-speed USB device number 69 using dummy_hcd
[  639.088975][T14821] wg1 speed is unknown, defaulting to 1000
[  639.241802][T14822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  639.251474][T14822] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  639.307927][   T29] audit: type=1400 audit(1124.422:939): avc:  denied  { bind } for  pid=14805 comm="syz.3.2418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  639.506284][   T29] audit: type=1400 audit(1124.422:940): avc:  denied  { listen } for  pid=14805 comm="syz.3.2418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  639.532474][   T29] audit: type=1400 audit(1124.422:941): avc:  denied  { accept } for  pid=14805 comm="syz.3.2418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  639.560198][   T29] audit: type=1400 audit(1124.431:942): avc:  denied  { write } for  pid=14805 comm="syz.3.2418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  639.587777][   T29] audit: type=1400 audit(1124.431:943): avc:  denied  { read } for  pid=14805 comm="syz.3.2418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  639.621346][   T29] audit: type=1400 audit(1124.431:944): avc:  denied  { ioctl } for  pid=14805 comm="syz.3.2418" path="socket:[53298]" dev="sockfs" ino=53298 ioctlcmd=0x8b15 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  640.876711][    T9] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  641.036949][    T9] usb 1-1: Using ep0 maxpacket: 16
[  641.045858][    T9] usb 1-1: config 1 has an invalid interface number: 105 but max is 0
[  641.056985][    T9] usb 1-1: config 1 has no interface number 0
[  641.066098][    T9] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  641.077397][    T9] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  641.088971][    T9] usb 1-1: config 1 interface 105 has no altsetting 0
[  641.112767][    T9] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  641.121917][    T9] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  641.132540][    T9] usb 1-1: Product: syz
[  641.139331][    T9] usb 1-1: Manufacturer: syz
[  641.148431][    T9] usb 1-1: SerialNumber: syz
[  641.190928][T14854] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  641.208433][T14854] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  641.524748][ T5870] usb 4-1: unable to get BOS descriptor or descriptor too short
[  641.534244][ T5870] usb 4-1: unable to read config index 0 descriptor/start: -71
[  641.542877][ T5870] usb 4-1: can't read configurations, error -71
[  642.266195][T14854] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  642.273477][T14854] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  643.331445][T14875] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2438'.
[  643.399895][    T9] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32
[  643.417797][    T9] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32
[  643.431585][    T9] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: 0
[  643.475550][    T9] aqc111 1-1:1.105 eth9: register 'aqc111' at usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 34:32:02:8f:26:7f
[  644.011519][   T29] audit: type=1400 audit(1129.064:945): avc:  denied  { listen } for  pid=14882 comm="syz.1.2442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  645.453699][    T9] usb 1-1: USB disconnect, device number 50
[  645.462093][    T9] aqc111 1-1:1.105 eth9: unregister 'aqc111' usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[  645.528600][    T9] aqc111 1-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  645.542664][    T9] aqc111 1-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  645.552919][    T9] aqc111 1-1:1.105 eth9 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[  645.713858][T14921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2450'.
[  645.995684][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  646.002021][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  646.106061][ T5870] hid (null): unknown global tag 0xd9
[  646.111695][ T5870] hid (null): report_id 0 is invalid
[  646.125073][ T5870] hid (null): report_id 0 is invalid
[  646.394903][T13387] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  646.411617][ T5870] hid-generic AB63:0003:000F.0023: unexpected long global item
[  646.431871][ T5870] hid-generic AB63:0003:000F.0023: probe with driver hid-generic failed with error -22
[  647.885503][   T29] audit: type=1400 audit(1132.704:946): avc:  denied  { write } for  pid=14987 comm="syz.3.2458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  648.096646][T15004] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.2461'.
[  648.449399][   T29] audit: type=1400 audit(1133.237:947): avc:  denied  { create } for  pid=14999 comm="syz.0.2461" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  648.696657][   T29] audit: type=1400 audit(1133.256:948): avc:  denied  { write } for  pid=14999 comm="syz.0.2461" name="file0" dev="tmpfs" ino=2499 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  648.801174][   T29] audit: type=1400 audit(1133.256:949): avc:  denied  { open } for  pid=14999 comm="syz.0.2461" path="/464/file0" dev="tmpfs" ino=2499 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  649.105098][   T29] audit: type=1400 audit(1133.256:950): avc:  denied  { ioctl } for  pid=14999 comm="syz.0.2461" path="/464/file0" dev="tmpfs" ino=2499 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  649.158393][ T5877] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  649.171983][T15014] CUSE: info not properly terminated
[  650.241467][ T5877] usb 1-1: Using ep0 maxpacket: 16
[  650.345800][ T5877] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  650.382283][ T5877] usb 1-1: config 0 has no interface number 0
[  650.427294][ T5877] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  650.460512][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  650.904911][T15045] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2470'.
[  650.972784][ T5877] usb 1-1: Product: syz
[  650.977505][ T5877] usb 1-1: Manufacturer: syz
[  650.989790][ T5877] usb 1-1: SerialNumber: syz
[  651.011349][ T5877] usb 1-1: config 0 descriptor??
[  651.024196][ T5877] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  651.269250][ T5877] gspca_spca1528: reg_w err -71
[  651.403447][ T5877] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71
[  651.413219][   T29] audit: type=1400 audit(1135.914:951): avc:  denied  { unlink } for  pid=5810 comm="syz-executor" name="file0" dev="tmpfs" ino=2499 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  651.437169][ T5877] usb 1-1: USB disconnect, device number 51
[  652.121842][T15064] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2477'.
[  652.813885][ T5941] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[  652.845093][T15071] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2478'.
[  653.102625][ T5941] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  653.112934][ T5941] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  653.123926][ T5941] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  653.133759][ T5941] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  653.147327][ T5941] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  653.400778][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  653.698175][ T5941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  653.726743][ T5941] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  653.735162][ T5941] usb 4-1: invalid MIDI out EP 0
[  654.349438][T10710] udevd[10710]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  654.467400][ T5941] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22
[  654.689952][T15096] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2485'.
[  655.301472][   T29] audit: type=1326 audit(1139.648:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15104 comm="syz.6.2489" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f445419c799 code=0x0
[  655.525487][ T5927] usb 4-1: USB disconnect, device number 71
[  656.981860][T15125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  657.365883][T15125] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  657.386259][T15125] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2496'.
[  657.613108][T15129] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2497'.
[  657.754033][T15125] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2496'.
[  657.905081][T15131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  657.942336][ T5877] usb 1-1: new full-speed USB device number 52 using dummy_hcd
[  658.018142][T15131] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  658.225193][ T5877] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  658.254432][ T5877] usb 1-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1
[  658.264071][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  658.455245][ T5877] usb 1-1: Product: syz
[  658.500578][ T5877] usb 1-1: Manufacturer: syz
[  658.517760][ T5877] usb 1-1: SerialNumber: syz
[  658.556088][ T5877] usb 1-1: config 0 descriptor??
[  658.585313][ T5877] imon_raw 1-1:0.0: IR endpoint missing
[  658.821832][T15146] sp0: Synchronizing with TNC
[  658.844757][T15146] ip_vti0: left promiscuous mode
[  659.740583][ T5927] usb 1-1: USB disconnect, device number 52
[  662.428930][   T29] audit: type=1400 audit(1146.020:953): avc:  denied  { write } for  pid=15178 comm="syz.6.2512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  662.922845][T15195] snd_dummy snd_dummy.0: control 0:0:8:syz0:0 is already present
[  664.225600][ T5877] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[  664.246330][  T977] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  664.567639][ T5877] usb 4-1: Using ep0 maxpacket: 16
[  664.578125][ T5877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  664.615798][  T977] usb 1-1: device descriptor read/64, error -71
[  665.416813][ T5877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  665.452723][ T5877] usb 4-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00
[  665.495616][ T5877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  665.525709][ T5877] usb 4-1: config 0 descriptor??
[  665.679019][  T977] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  666.052663][   T29] audit: type=1400 audit(1149.707:954): avc:  denied  { getopt } for  pid=15193 comm="syz.3.2517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  666.213301][  T977] usb 1-1: device descriptor read/64, error -71
[  666.291368][T15195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  666.320200][T15195] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  666.331197][  T977] usb usb1-port1: attempt power cycle
[  666.671201][ T5877] usbhid 4-1:0.0: can't add hid device: -71
[  666.677359][ T5877] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  666.703991][ T5877] usb 4-1: USB disconnect, device number 72
[  666.939892][    T9] usb 3-1: new high-speed USB device number 76 using dummy_hcd
[  667.174321][    T9] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  667.189886][    T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  667.201055][    T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  667.210938][    T9] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  667.242651][    T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  667.818718][T15233] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2527'.
[  667.827774][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  667.904182][    T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  667.911840][    T9] usb 3-1: invalid MIDI out EP 0
[  667.999352][ T5877] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[  668.172332][ T5877] usb 4-1: config index 0 descriptor too short (expected 39, got 27)
[  668.629643][ T5877] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  668.651611][ T5877] usb 4-1: config 0 interface 0 has no altsetting 0
[  668.660905][T15242] netem: change failed
[  668.679807][ T5927] libceph: connect (1)[c::]:6789 error -101
[  668.706876][ T5927] libceph: mon0 (1)[c::]:6789 connect error
[  668.790696][ T5877] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  668.886252][    T9] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22
[  668.902751][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  668.919728][T15238] ceph: No mds server is up or the cluster is laggy
[  668.993669][ T5927] libceph: connect (1)[c::]:6789 error -101
[  669.009691][ T5927] libceph: mon0 (1)[c::]:6789 connect error
[  669.111203][ T5877] usb 4-1: Product: syz
[  669.115397][ T5877] usb 4-1: Manufacturer: syz
[  669.160089][ T5877] usb 4-1: SerialNumber: syz
[  669.188184][ T5877] usb 4-1: config 0 descriptor??
[  669.216227][ T5877] hub 4-1:0.0: bad descriptor, ignoring hub
[  669.222171][ T5877] hub 4-1:0.0: probe with driver hub failed with error -5
[  669.254728][ T5877] usb 4-1: selecting invalid altsetting 0
[  669.281981][ T5941] usb 3-1: USB disconnect, device number 76
[  669.879402][T15258] vcan1: entered promiscuous mode
[  669.913031][T15258] team0: Device vcan1 is up. Set it down before adding it as a team port
[  670.498720][ T5877] usb 4-1: USB disconnect, device number 73
[  670.944319][   T29] audit: type=1400 audit(1154.283:955): avc:  denied  { unmount } for  pid=11843 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  672.478096][ T5877] usb 3-1: new high-speed USB device number 77 using dummy_hcd
[  672.763798][ T5877] usb 3-1: device descriptor read/64, error -71
[  673.003322][T15304] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2544'.
[  673.330193][ T5877] usb 3-1: new high-speed USB device number 78 using dummy_hcd
[  673.479883][ T5941] usb 4-1: new high-speed USB device number 74 using dummy_hcd
[  673.491102][ T5877] usb 3-1: device descriptor read/64, error -71
[  673.699422][ T5877] usb usb3-port1: attempt power cycle
[  673.861713][ T5941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  673.873112][ T5941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  673.906710][ T5941] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  673.915996][ T5941] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  673.931212][ T5941] usb 4-1: Manufacturer: syz
[  673.959241][ T5941] usb 4-1: config 0 descriptor??
[  674.568092][ T5877] usb 3-1: new high-speed USB device number 79 using dummy_hcd
[  674.613384][ T5877] usb 3-1: device descriptor read/8, error -71
[  674.879641][ T5877] usb 3-1: new high-speed USB device number 80 using dummy_hcd
[  674.913141][ T5877] usb 3-1: device descriptor read/8, error -71
[  675.051483][ T5877] usb usb3-port1: unable to enumerate USB device
[  675.227361][ T5941] uclogic 0003:256C:006D.0024: interface is invalid, ignoring
[  675.384251][ T5941] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  675.455341][ T5877] usb 4-1: USB disconnect, device number 74
[  675.661370][ T5941] usb 1-1: config index 0 descriptor too short (expected 39, got 27)
[  675.669581][ T5941] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  675.679698][ T5941] usb 1-1: config 0 interface 0 has no altsetting 0
[  675.688071][ T5941] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  675.697317][ T5941] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  675.705603][ T5941] usb 1-1: Product: syz
[  675.709982][ T5941] usb 1-1: Manufacturer: syz
[  675.716764][ T5941] usb 1-1: SerialNumber: syz
[  675.770078][    T9] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  676.242009][ T5941] usb 1-1: config 0 descriptor??
[  676.297594][ T5941] hub 1-1:0.0: bad descriptor, ignoring hub
[  676.303763][ T5941] hub 1-1:0.0: probe with driver hub failed with error -5
[  676.314964][ T5941] usb 1-1: selecting invalid altsetting 0
[  676.450487][    T9] usb 7-1: Using ep0 maxpacket: 32
[  676.460305][    T9] usb 7-1: config 0 has an invalid interface number: 188 but max is 0
[  676.468957][    T9] usb 7-1: config 0 has no interface number 0
[  676.482539][    T9] usb 7-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  676.497052][    T9] usb 7-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  676.525991][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  676.535412][    T9] usb 7-1: Product: syz
[  676.540497][T15336] netlink: 'syz.1.2554': attribute type 3 has an invalid length.
[  676.553283][T15336] netlink: 'syz.1.2554': attribute type 3 has an invalid length.
[  676.561725][    T9] usb 7-1: Manufacturer: syz
[  676.567167][    T9] usb 7-1: SerialNumber: syz
[  676.568036][T15336] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2554'.
[  676.574666][    T9] usb 7-1: config 0 descriptor??
[  676.586580][T15314] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  676.820266][T15314] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  677.172272][T15362] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2560'.
[  677.230751][T15322] usb 1-1: reset high-speed USB device number 56 using dummy_hcd
[  677.262799][  T793] usb 3-1: new high-speed USB device number 81 using dummy_hcd
[  677.477838][  T793] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  677.488396][  T793] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  677.500574][  T793] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  677.513966][  T793] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  677.528479][  T793] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  677.563258][  T793] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  677.588540][  T793] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  677.597270][  T793] usb 3-1: invalid MIDI out EP 0
[  677.718914][  T793] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22
[  677.837114][  T793] usb 1-1: USB disconnect, device number 56
[  678.147164][ T5877] usb 3-1: USB disconnect, device number 81
[  679.043769][T15381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2564'.
[  679.542908][    T9] asix 7-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  679.795214][    T9] asix 7-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  679.983409][    T9] asix 7-1:0.188: probe with driver asix failed with error -71
[  680.085795][    T9] usb 7-1: USB disconnect, device number 19
[  680.366251][   T29] audit: type=1400 audit(1163.061:956): avc:  denied  { transfer } for  pid=15395 comm="syz.3.2571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  682.071349][    T9] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  682.231863][    T9] usb 1-1: Using ep0 maxpacket: 16
[  682.238389][    T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11
[  682.248352][    T9] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  682.258565][    T9] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  682.272982][    T9] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  682.293872][    T9] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  682.313607][    T9] usb 1-1: config 1 interface 0 has no altsetting 0
[  682.320414][    T9] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  682.338538][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  682.361798][T15426] fuse: Unknown parameter 'euid<00000000000000000000'
[  682.445615][    T9] ums-sddr09 1-1:1.0: USB Mass Storage device detected
[  682.520449][  T793] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  682.685514][  T793] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  682.704000][T15416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  682.727842][T15416] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  682.736359][  T793] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  682.760437][  T793] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  682.776837][  T793] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  682.802157][  T793] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  682.818920][  T793] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  682.939550][  T793] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  682.950937][  T793] usb 7-1: invalid MIDI out EP 0
[  683.462966][T15440] vti0: entered promiscuous mode
[  683.631139][   T29] audit: type=1800 audit(1166.159:957): pid=15416 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.0.2576" name="/newroot/483/pids.events" dev="tmpfs" ino=2599 res=0 errno=0
[  683.743430][    T9] ums-sddr09 1-1:1.0: probe with driver ums-sddr09 failed with error -22
[  683.748341][  T793] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22
[  683.756583][    T9] usb 1-1: USB disconnect, device number 57
[  683.863860][  T793] usb 7-1: USB disconnect, device number 20
[  684.193412][T15450] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2583'.
[  684.262772][T15450] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2583'.
[  686.438528][T15482] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2590'.
[  686.796798][T15487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2593'.
[  686.869461][T15482] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2590'.
[  686.885569][T15482] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2590'.
[  687.596137][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  688.378564][T15513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2601'.
[  689.046121][T15527] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2603'.
[  690.300207][T15545] FAULT_INJECTION: forcing a failure.
[  690.300207][T15545] name failslab, interval 1, probability 0, space 0, times 0
[  690.325511][T15545] CPU: 1 UID: 0 PID: 15545 Comm: syz.6.2609 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  690.325542][T15545] Tainted: [L]=SOFTLOCKUP
[  690.325548][T15545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  690.325559][T15545] Call Trace:
[  690.325565][T15545]  <TASK>
[  690.325573][T15545]  dump_stack_lvl+0x100/0x190
[  690.325608][T15545]  should_fail_ex.cold+0x5/0xa
[  690.325633][T15545]  should_failslab+0xc2/0x120
[  690.325652][T15545]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  690.325677][T15545]  ? security_file_alloc+0x34/0x2c0
[  690.325700][T15545]  ? trace_kmem_cache_alloc+0xf3/0x120
[  690.325717][T15545]  security_file_alloc+0x34/0x2c0
[  690.325734][T15545]  init_file+0x95/0x480
[  690.325749][T15545]  alloc_empty_file+0x73/0x1c0
[  690.325764][T15545]  alloc_file_pseudo+0x13a/0x230
[  690.325780][T15545]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  690.325799][T15545]  ioctx_alloc+0x5d9/0x21d0
[  690.325819][T15545]  ? find_held_lock+0x2b/0x80
[  690.325835][T15545]  ? __pfx_ioctx_alloc+0x10/0x10
[  690.325854][T15545]  __x64_sys_io_setup+0xc9/0x220
[  690.325870][T15545]  do_syscall_64+0x106/0xf80
[  690.325885][T15545]  ? clear_bhb_loop+0x40/0x90
[  690.325900][T15545]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  690.325912][T15545] RIP: 0033:0x7f445419c799
[  690.325922][T15545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  690.325933][T15545] RSP: 002b:00007f44550ed028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce
[  690.325945][T15545] RAX: ffffffffffffffda RBX: 00007f4454415fa0 RCX: 00007f445419c799
[  690.325953][T15545] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 00000000000003ff
[  690.325959][T15545] RBP: 00007f44550ed090 R08: 0000000000000000 R09: 0000000000000000
[  690.325966][T15545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  690.325973][T15545] R13: 00007f4454416038 R14: 00007f4454415fa0 R15: 00007fff4d5e1d28
[  690.325987][T15545]  </TASK>
[  690.853796][   T29] audit: type=1400 audit(1172.803:958): avc:  denied  { execute_no_trans } for  pid=15550 comm="syz.1.2612" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=235 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  690.882950][ T5941] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  691.113010][T15562] netlink: 'syz.6.2614': attribute type 21 has an invalid length.
[  691.121107][T15562] netlink: 164 bytes leftover after parsing attributes in process `syz.6.2614'.
[  691.449265][ T5941] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  691.487004][ T5941] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  691.724608][ T5941] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  691.764314][ T5941] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  691.783110][T15565] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  691.783184][   T29] audit: type=1400 audit(1173.786:959): avc:  denied  { getattr } for  pid=15564 comm="syz.2.2615" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  691.878043][ T5941] usb 1-1: Manufacturer: syz
[  691.890565][   T29] audit: type=1400 audit(1173.842:960): avc:  denied  { setopt } for  pid=15564 comm="syz.2.2615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  692.033894][   T29] audit: type=1400 audit(1173.888:961): avc:  denied  { read write } for  pid=15568 comm="syz.3.2618" name="mouse0" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  692.077975][   T29] audit: type=1400 audit(1173.888:962): avc:  denied  { open } for  pid=15568 comm="syz.3.2618" path="/dev/input/mouse0" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  692.102859][ T5941] usb 1-1: config 0 descriptor??
[  692.936058][   T29] audit: type=1400 audit(1174.862:963): avc:  denied  { unmount } for  pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  694.381089][ T5941] uclogic 0003:256C:006D.0025: failed retrieving string descriptor #100: -71
[  694.392434][ T5941] uclogic 0003:256C:006D.0025: failed retrieving pen parameters: -71
[  694.409393][ T5941] uclogic 0003:256C:006D.0025: failed probing pen v1 parameters: -71
[  694.422245][ T5941] uclogic 0003:256C:006D.0025: failed probing parameters: -71
[  694.434167][ T5941] uclogic 0003:256C:006D.0025: probe with driver uclogic failed with error -71
[  694.465935][ T5941] usb 1-1: USB disconnect, device number 58
[  694.536251][   T29] audit: type=1326 audit(1176.312:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15603 comm="syz.2.2628" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa882f9c799 code=0x0
[  695.091587][T15616] xt_TPROXY: Can be used only with -p tcp or -p udp
[  695.133764][   T29] audit: type=1400 audit(1176.902:965): avc:  denied  { shutdown } for  pid=15615 comm="syz.6.2630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  695.497585][T15623] netlink: 'syz.0.2633': attribute type 1 has an invalid length.
[  696.322145][T15642] syz_tun: left allmulticast mode
[  696.837478][T15644] xt_cgroup: invalid path, errno=-2
[  697.827722][T15655] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2640'.
[  698.256600][   T29] audit: type=1400 audit(1179.821:966): avc:  denied  { setopt } for  pid=15659 comm="syz.1.2642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  698.651060][   T29] audit: type=1400 audit(1180.214:967): avc:  denied  { accept } for  pid=15659 comm="syz.1.2642" lport=40291 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  699.304328][T15672] program syz.0.2643 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  700.758559][T15686] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  700.787470][T15687] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  700.968171][T15698] random: crng reseeded on system resumption
[  700.983327][   T29] audit: type=1400 audit(1182.386:968): avc:  denied  { write } for  pid=15697 comm="syz.3.2650" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  701.391764][   T29] audit: type=1400 audit(1182.769:969): avc:  denied  { map } for  pid=15703 comm="syz.2.2652" path="/dev/video36" dev="devtmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  701.762863][T15716] overlayfs: failed to clone upperpath
[  702.878623][T15740] erspan0: entered promiscuous mode
[  702.904679][T15740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2661'.
[  703.097435][   T29] audit: type=1400 audit(1184.379:970): avc:  denied  { read write } for  pid=15742 comm="syz.0.2665" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  703.135431][T15744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2663'.
[  703.146409][T15744] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2663'.
[  703.155777][T15744] unsupported nlmsg_type 40
[  703.198510][T15748] ieee802154 phy0 wpan0: encryption failed: -22
[  703.221896][   T29] audit: type=1400 audit(1184.397:971): avc:  denied  { open } for  pid=15742 comm="syz.0.2665" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  703.255204][T15749] fuse: Bad value for 'group_id'
[  703.260273][T15749] fuse: Bad value for 'group_id'
[  703.267188][T15749] loop2: detected capacity change from 0 to 7
[  703.277570][T15749] Dev loop2: unable to read RDB block 7
[  703.288768][T15749]  loop2: unable to read partition table
[  703.315366][T15749] loop2: partition table beyond EOD, truncated
[  703.380423][T15749] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5)
[  703.419334][   T29] audit: type=1400 audit(1184.416:972): avc:  denied  { bind } for  pid=15743 comm="syz.1.2663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  703.697452][T15757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2667'.
[  703.803015][T15754] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  704.164797][T15754] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  704.307678][T15754] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  704.349721][T15768] overlayfs: missing 'workdir'
[  704.504365][T15754] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  704.826363][T15780] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2671'.
[  705.335449][ T1146] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  705.423170][ T1146] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  705.483292][ T1146] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  705.494929][ T1146] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  705.843204][T15797] netlink: 'syz.0.2678': attribute type 12 has an invalid length.
[  705.852206][T15797] netlink: 'syz.0.2678': attribute type 29 has an invalid length.
[  705.862438][T15797] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2678'.
[  705.871770][T15797] netlink: 'syz.0.2678': attribute type 2 has an invalid length.
[  705.879687][T15797] netlink: 'syz.0.2678': attribute type 3 has an invalid length.
[  705.907390][T15797] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2678'.
[  706.738397][T15821] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2683'.
[  706.747488][T15821] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2683'.
[  707.033961][ T5877] usb 4-1: new high-speed USB device number 75 using dummy_hcd
[  707.122721][T15829] nbd: couldn't find a device at index -2146435068
[  707.208698][ T5877] usb 4-1: config index 0 descriptor too short (expected 7768, got 18)
[  707.217386][ T5877] usb 4-1: config 0 has an invalid interface number: 49 but max is 0
[  707.259715][ T5877] usb 4-1: config 0 has no interface number 0
[  707.311880][ T5877] usb 4-1: too many endpoints for config 0 interface 49 altsetting 56: 52, using maximum allowed: 30
[  707.345417][ T5877] usb 4-1: config 0 interface 49 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 52
[  707.364399][ T5877] usb 4-1: config 0 interface 49 has no altsetting 0
[  707.399968][ T5877] usb 4-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d
[  707.428046][ T5877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  707.465656][ T5877] usb 4-1: config 0 descriptor??
[  707.939455][ T5927] usb 3-1: new high-speed USB device number 82 using dummy_hcd
[  708.064364][ T5877] usb 4-1: string descriptor 0 read error: -71
[  708.076898][ T5877] ftdi_sio 4-1:0.49: FTDI USB Serial Device converter detected
[  708.088105][ T5877] ftdi_sio ttyUSB0: unknown device type: 0x524d
[  708.097735][ T5877] usb 4-1: USB disconnect, device number 75
[  708.106275][ T5877] ftdi_sio 4-1:0.49: device disconnected
[  708.116628][ T5927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  708.132218][ T5927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  708.154438][ T5927] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  708.173789][ T5927] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  708.191039][ T5927] usb 3-1: Manufacturer: syz
[  708.202384][ T5927] usb 3-1: config 0 descriptor??
[  708.360060][T15839] bridge0: entered promiscuous mode
[  709.278167][  T793] usb 7-1: new full-speed USB device number 21 using dummy_hcd
[  709.288716][ T5927] uclogic 0003:256C:006D.0026: failed retrieving string descriptor #100: -71
[  709.297551][ T5927] uclogic 0003:256C:006D.0026: failed retrieving pen parameters: -71
[  709.309045][ T5927] uclogic 0003:256C:006D.0026: failed probing pen v1 parameters: -71
[  709.319341][ T5927] uclogic 0003:256C:006D.0026: failed probing parameters: -71
[  709.327112][ T5927] uclogic 0003:256C:006D.0026: probe with driver uclogic failed with error -71
[  709.349572][ T5927] usb 3-1: USB disconnect, device number 82
[  709.656116][ T5877] usb 4-1: new high-speed USB device number 76 using dummy_hcd
[  709.685498][  T793] usb 7-1: unable to get BOS descriptor or descriptor too short
[  709.697680][  T793] usb 7-1: not running at top speed; connect to a high speed hub
[  709.708550][  T793] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  709.721903][  T793] usb 7-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= 0.40
[  709.731416][  T793] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  709.739732][  T793] usb 7-1: Product: syz
[  709.744479][  T793] usb 7-1: Manufacturer: syz
[  709.750730][  T793] usb 7-1: SerialNumber: syz
[  709.878031][ T5877] usb 4-1: config 0 has an invalid interface number: 50 but max is 0
[  709.886237][ T5877] usb 4-1: config 0 has no interface number 0
[  709.893106][ T5877] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  709.909297][ T5877] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  709.918652][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  709.936189][ T5877] usb 4-1: Product: syz
[  709.942850][ T5877] usb 4-1: Manufacturer: syz
[  709.947533][ T5877] usb 4-1: SerialNumber: syz
[  709.970149][ T5877] usb 4-1: config 0 descriptor??
[  709.984090][ T5877] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0
[  709.991156][  T793] usb 7-1: Audio class v2/v3 interfaces need an interface association
[  710.011837][   T29] audit: type=1400 audit(1190.845:973): avc:  denied  { module_load } for  pid=15856 comm="syz.1.2697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  710.033493][T15857] Invalid ELF header type: 3 != 1
[  710.051600][T15857] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2697'.
[  710.052508][  T793] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22
[  710.076005][  T793] usb 7-1: invalid MIDI EP
[  710.081925][  T793] usb 7-1: snd-bcd2000: error during probing
[  710.089249][  T793] snd-bcd2000 7-1:1.0: probe with driver snd-bcd2000 failed with error -22
[  710.101723][  T793] usb 7-1: invalid MIDI EP
[  710.106140][  T793] usb 7-1: snd-bcd2000: error during probing
[  710.112573][  T793] snd-bcd2000 7-1:1.1: probe with driver snd-bcd2000 failed with error -22
[  710.123986][  T793] usb 7-1: invalid MIDI EP
[  710.128409][  T793] usb 7-1: snd-bcd2000: error during probing
[  710.135028][  T793] snd-bcd2000 7-1:1.2: probe with driver snd-bcd2000 failed with error -22
[  710.146545][  T793] usb 7-1: USB disconnect, device number 21
[  710.173745][T10668] udevd[10668]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  710.417434][T15866] wg1 speed is unknown, defaulting to 1000
[  710.546663][   T29] audit: type=1400 audit(1191.341:974): avc:  denied  { ioctl } for  pid=15863 comm="syz.0.2700" path="socket:[57696]" dev="sockfs" ino=57696 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  710.582353][   T29] audit: type=1400 audit(1191.341:975): avc:  denied  { bind } for  pid=15863 comm="syz.0.2700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  710.972124][T15881] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2702'.
[  711.536257][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  711.542911][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  712.586537][    C0] usb 4-1: yurex_control_callback - control failed: -2
[  712.616989][ T5877] usb 4-1: USB disconnect, device number 76
[  712.628984][ T5877] yurex 4-1:0.50: USB YUREX #0 now disconnected
[  712.835810][T15894] wg1 speed is unknown, defaulting to 1000
[  712.847558][    T9] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  713.203316][ T5131] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  713.218435][ T5131] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  713.226609][ T5131] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  713.233621][    T9] usb 7-1: Using ep0 maxpacket: 16
[  713.240779][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  713.255761][ T5131] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  713.276932][ T5131] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  713.288604][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  713.298569][    T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  713.311535][    T9] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  713.321860][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  713.344701][    T9] usb 7-1: config 0 descriptor??
[  713.388871][T15028] syz_tun (unregistering): left promiscuous mode
[  713.526281][T15898] wg1 speed is unknown, defaulting to 1000
[  713.783301][    T9] microsoft 0003:045E:07DA.0027: ignoring exceeding usage max
[  713.802075][T15898] chnl_net:caif_netlink_parms(): no params data found
[  713.810630][    T9] microsoft 0003:045E:07DA.0027: ignoring exceeding usage max
[  714.015287][T15898] bridge0: port 1(bridge_slave_0) entered blocking state
[  714.023046][T15898] bridge0: port 1(bridge_slave_0) entered disabled state
[  714.030348][T15898] bridge_slave_0: entered allmulticast mode
[  714.048677][T15898] bridge_slave_0: entered promiscuous mode
[  714.062500][T15898] bridge0: port 2(bridge_slave_1) entered blocking state
[  714.074632][T15898] bridge0: port 2(bridge_slave_1) entered disabled state
[  714.086190][T15898] bridge_slave_1: entered allmulticast mode
[  714.095178][T15898] bridge_slave_1: entered promiscuous mode
[  714.142636][T15898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  714.160396][T15898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  714.239559][T15898] team0: Port device team_slave_0 added
[  714.260163][T15898] team0: Port device team_slave_1 added
[  714.330740][T15898] batman_adv: batadv0: Adding interface: batadv_slave_0
[  714.345884][T15898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  714.389134][T15898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  714.414055][T15898] batman_adv: batadv0: Adding interface: batadv_slave_1
[  714.429975][T15898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  714.485355][T15898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  714.576641][T15898] hsr_slave_0: entered promiscuous mode
[  714.589392][T15898] hsr_slave_1: entered promiscuous mode
[  714.600157][T15898] debugfs: 'hsr0' already exists in 'hsr'
[  714.609444][T15898] Cannot create hsr debugfs directory
[  715.622650][ T5131] Bluetooth: hci6: command tx timeout
[  715.631131][   T29] audit: type=1400 audit(1195.964:976): avc:  denied  { write } for  pid=15921 comm="syz.2.2710" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  715.888661][T15898] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  715.899993][T15898] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  715.914259][T15898] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  715.929143][T15898] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  716.163449][    T9] microsoft 0003:045E:07DA.0027: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0
[  716.252911][    T9] microsoft 0003:045E:07DA.0027: no inputs found
[  716.278455][    T9] microsoft 0003:045E:07DA.0027: could not initialize ff, continuing anyway
[  716.365247][T15938] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  716.618086][    T9] usb 7-1: USB disconnect, device number 22
[  716.635330][T15898] 8021q: adding VLAN 0 to HW filter on device bond0
[  716.757173][T15898] 8021q: adding VLAN 0 to HW filter on device team0
[  716.944095][  T274] bridge0: port 1(bridge_slave_0) entered blocking state
[  716.951283][  T274] bridge0: port 1(bridge_slave_0) entered forwarding state
[  717.374674][  T274] bridge0: port 2(bridge_slave_1) entered blocking state
[  717.381877][  T274] bridge0: port 2(bridge_slave_1) entered forwarding state
[  717.756804][T15898] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  717.773538][ T5131] Bluetooth: hci6: command tx timeout
[  717.964140][   T29] audit: type=1400 audit(1198.275:977): avc:  denied  { map } for  pid=15947 comm="syz.6.2718" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  718.936056][T15898] 8021q: adding VLAN 0 to HW filter on device batadv0
[  719.064465][T15898] veth0_vlan: entered promiscuous mode
[  719.078818][T15898] veth1_vlan: entered promiscuous mode
[  719.166530][T15898] veth0_macvtap: entered promiscuous mode
[  719.219300][T15898] veth1_macvtap: entered promiscuous mode
[  719.259863][T15898] batman_adv: batadv0: Interface activated: batadv_slave_0
[  719.310621][T15898] batman_adv: batadv0: Interface activated: batadv_slave_1
[  719.496634][   T67] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  719.517732][   T67] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  719.653240][   T67] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  719.675808][   T67] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  719.831168][ T8610] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  719.848145][ T8610] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  719.933598][T15978] netlink: 'syz.6.2721': attribute type 29 has an invalid length.
[  720.003200][ T8610] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  720.012260][ T5131] Bluetooth: hci6: command tx timeout
[  720.023658][ T8610] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  720.707017][T15984] wg1 speed is unknown, defaulting to 1000
[  720.930159][T15988] ==================================================================
[  720.938247][T15988] BUG: KASAN: slab-out-of-bounds in try_module_get+0x4c/0xd0
[  720.945617][T15988] Write of size 4 at addr ffff88802d26d708 by task syz.0.2723/15988
[  720.953569][T15988] 
[  720.955876][T15988] CPU: 0 UID: 0 PID: 15988 Comm: syz.0.2723 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  720.955897][T15988] Tainted: [L]=SOFTLOCKUP
[  720.955903][T15988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  720.955912][T15988] Call Trace:
[  720.955917][T15988]  <TASK>
[  720.955923][T15988]  dump_stack_lvl+0x100/0x190
[  720.955949][T15988]  print_report+0x156/0x4c9
[  720.955972][T15988]  ? __virt_addr_valid+0x81/0x620
[  720.955995][T15988]  ? __phys_addr+0xe8/0x180
[  720.956017][T15988]  ? try_module_get+0x4c/0xd0
[  720.956037][T15988]  kasan_report+0xdf/0x1e0
[  720.956052][T15988]  ? try_module_get+0x4c/0xd0
[  720.956072][T15988]  kasan_check_range+0x10f/0x1e0
[  720.956089][T15988]  try_module_get+0x4c/0xd0
[  720.956108][T15988]  dvb_device_open+0x124/0x3b0
[  720.956128][T15988]  ? __pfx_dvb_device_open+0x10/0x10
[  720.956148][T15988]  chrdev_open+0x234/0x6a0
[  720.956164][T15988]  ? __pfx_chrdev_open+0x10/0x10
[  720.956179][T15988]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  720.956199][T15988]  do_dentry_open+0x6d8/0x1660
[  720.956215][T15988]  ? __pfx_chrdev_open+0x10/0x10
[  720.956233][T15988]  vfs_open+0x82/0x3f0
[  720.956254][T15988]  path_openat+0x208c/0x31a0
[  720.956273][T15988]  ? __pfx_path_openat+0x10/0x10
[  720.956291][T15988]  do_file_open+0x20e/0x430
[  720.956307][T15988]  ? __pfx_do_file_open+0x10/0x10
[  720.956328][T15988]  ? alloc_fd+0x476/0x790
[  720.956345][T15988]  ? do_getname+0x191/0x390
[  720.956363][T15988]  do_sys_openat2+0x10d/0x1e0
[  720.956381][T15988]  ? __pfx_do_sys_openat2+0x10/0x10
[  720.956401][T15988]  __x64_sys_openat+0x12d/0x210
[  720.956419][T15988]  ? __pfx___x64_sys_openat+0x10/0x10
[  720.956438][T15988]  ? do_user_addr_fault+0x8d6/0x12f0
[  720.956456][T15988]  do_syscall_64+0x106/0xf80
[  720.956477][T15988]  ? clear_bhb_loop+0x40/0x90
[  720.956493][T15988]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  720.956507][T15988] RIP: 0033:0x7f752d75cfce
[  720.956520][T15988] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  720.956534][T15988] RSP: 002b:00007f752e5cfb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  720.956550][T15988] RAX: ffffffffffffffda RBX: 00007f752e5d06c0 RCX: 00007f752d75cfce
[  720.956561][T15988] RDX: 0000000000161002 RSI: 00007f752e5cfc00 RDI: ffffffffffffff9c
[  720.956571][T15988] RBP: 00007f752e5cfc00 R08: 0000000000000000 R09: 0000000000000000
[  720.956583][T15988] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  720.956593][T15988] R13: 00007f752da16128 R14: 00007f752da16090 R15: 00007ffe5721a5c8
[  720.956608][T15988]  </TASK>
[  720.956613][T15988] 
[  721.213958][T15988] Allocated by task 1:
[  721.218005][T15988]  kasan_save_stack+0x30/0x50
[  721.222669][T15988]  kasan_save_track+0x14/0x30
[  721.227329][T15988]  __kasan_kmalloc+0xaa/0xb0
[  721.231904][T15988]  bus_add_driver+0x92/0x5b0
[  721.236479][T15988]  driver_register+0x1e2/0x360
[  721.241220][T15988]  vidtv_bridge_init+0x38/0x70
[  721.245967][T15988]  do_one_initcall+0x11d/0x760
[  721.250710][T15988]  kernel_init_freeable+0x6e5/0x7a0
[  721.255886][T15988]  kernel_init+0x1f/0x1e0
[  721.260194][T15988]  ret_from_fork+0x754/0xd80
[  721.264766][T15988]  ret_from_fork_asm+0x1a/0x30
[  721.269509][T15988] 
[  721.271810][T15988] The buggy address belongs to the object at ffff88802d26d600
[  721.271810][T15988]  which belongs to the cache kmalloc-256 of size 256
[  721.285838][T15988] The buggy address is located 56 bytes to the right of
[  721.285838][T15988]  allocated 208-byte region [ffff88802d26d600, ffff88802d26d6d0)
[  721.300390][T15988] 
[  721.302692][T15988] The buggy address belongs to the physical page:
[  721.309075][T15988] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2d26c
[  721.317809][T15988] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  721.326292][T15988] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  721.333831][T15988] page_type: f5(slab)
[  721.337804][T15988] raw: 00fff00000000040 ffff88813fe3bb40 dead000000000100 dead000000000122
[  721.346369][T15988] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[  721.354931][T15988] head: 00fff00000000040 ffff88813fe3bb40 dead000000000100 dead000000000122
[  721.363582][T15988] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[  721.372233][T15988] head: 00fff00000000001 ffffea0000b49b01 00000000ffffffff 00000000ffffffff
[  721.380881][T15988] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[  721.389527][T15988] page dumped because: kasan: bad access detected
[  721.395913][T15988] page_owner tracks the page as allocated
[  721.401601][T15988] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 8697272713, free_ts 0
[  721.421200][T15988]  post_alloc_hook+0x153/0x170
[  721.425949][T15988]  get_page_from_freelist+0x111d/0x3140
[  721.431478][T15988]  __alloc_frozen_pages_noprof+0x27c/0x2ba0
[  721.437356][T15988]  new_slab+0xa6/0x6b0
[  721.441402][T15988]  refill_objects+0x26b/0x400
[  721.446061][T15988]  __pcs_replace_empty_main+0x1ab/0x660
[  721.451591][T15988]  __kmalloc_cache_noprof+0x493/0x6f0
[  721.456944][T15988]  bus_add_driver+0x92/0x5b0
[  721.461516][T15988]  driver_register+0x1e2/0x360
[  721.466257][T15988]  usb_register_driver+0x21c/0x3e0
[  721.471351][T15988]  do_one_initcall+0x11d/0x760
[  721.476097][T15988]  kernel_init_freeable+0x6e5/0x7a0
[  721.481274][T15988]  kernel_init+0x1f/0x1e0
[  721.485578][T15988]  ret_from_fork+0x754/0xd80
[  721.490146][T15988]  ret_from_fork_asm+0x1a/0x30
[  721.494892][T15988] page_owner free stack trace missing
[  721.500232][T15988] 
[  721.502534][T15988] Memory state around the buggy address:
[  721.508139][T15988]  ffff88802d26d600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  721.516175][T15988]  ffff88802d26d680: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc
[  721.524211][T15988] >ffff88802d26d700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  721.532243][T15988]                       ^
[  721.536543][T15988]  ffff88802d26d780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  721.544577][T15988]  ffff88802d26d800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  721.552610][T15988] ==================================================================
[  721.598954][   T29] audit: type=1400 audit(1201.663:978): avc:  denied  { write } for  pid=5791 comm="syz-executor" path="pipe:[5359]" dev="pipefs" ino=5359 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[  721.648595][T15988] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  721.655829][T15988] CPU: 1 UID: 0 PID: 15988 Comm: syz.0.2723 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  721.666749][T15988] Tainted: [L]=SOFTLOCKUP
[  721.671052][T15988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  721.681092][T15988] Call Trace:
[  721.684353][T15988]  <TASK>
[  721.687272][T15988]  dump_stack_lvl+0x100/0x190
[  721.691942][T15988]  vpanic+0x552/0x970
[  721.695901][T15988]  ? __pfx_vpanic+0x10/0x10
[  721.700385][T15988]  ? try_module_get+0x4c/0xd0
[  721.705043][T15988]  panic+0xd1/0xe0
[  721.708740][T15988]  ? __pfx_panic+0x10/0x10
[  721.713143][T15988]  ? try_module_get+0x4c/0xd0
[  721.717800][T15988]  ? preempt_schedule_common+0x42/0xc0
[  721.723251][T15988]  check_panic_on_warn.cold+0x19/0x34
[  721.728602][T15988]  end_report.part.0+0x3a/0x90
[  721.733350][T15988]  kasan_report.cold+0xe/0x18
[  721.738011][T15988]  ? try_module_get+0x4c/0xd0
[  721.742674][T15988]  kasan_check_range+0x10f/0x1e0
[  721.747592][T15988]  try_module_get+0x4c/0xd0
[  721.752077][T15988]  dvb_device_open+0x124/0x3b0
[  721.756827][T15988]  ? __pfx_dvb_device_open+0x10/0x10
[  721.762094][T15988]  chrdev_open+0x234/0x6a0
[  721.766493][T15988]  ? __pfx_chrdev_open+0x10/0x10
[  721.771409][T15988]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  721.777718][T15988]  do_dentry_open+0x6d8/0x1660
[  721.782462][T15988]  ? __pfx_chrdev_open+0x10/0x10
[  721.787383][T15988]  vfs_open+0x82/0x3f0
[  721.791435][T15988]  path_openat+0x208c/0x31a0
[  721.796019][T15988]  ? __pfx_path_openat+0x10/0x10
[  721.800940][T15988]  do_file_open+0x20e/0x430
[  721.805424][T15988]  ? __pfx_do_file_open+0x10/0x10
[  721.810438][T15988]  ? alloc_fd+0x476/0x790
[  721.814750][T15988]  ? do_getname+0x191/0x390
[  721.819238][T15988]  do_sys_openat2+0x10d/0x1e0
[  721.823898][T15988]  ? __pfx_do_sys_openat2+0x10/0x10
[  721.829081][T15988]  __x64_sys_openat+0x12d/0x210
[  721.833917][T15988]  ? __pfx___x64_sys_openat+0x10/0x10
[  721.839272][T15988]  ? do_user_addr_fault+0x8d6/0x12f0
[  721.844541][T15988]  do_syscall_64+0x106/0xf80
[  721.849128][T15988]  ? clear_bhb_loop+0x40/0x90
[  721.853803][T15988]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  721.859686][T15988] RIP: 0033:0x7f752d75cfce
[  721.864086][T15988] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  721.883676][T15988] RSP: 002b:00007f752e5cfb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  721.892069][T15988] RAX: ffffffffffffffda RBX: 00007f752e5d06c0 RCX: 00007f752d75cfce
[  721.900023][T15988] RDX: 0000000000161002 RSI: 00007f752e5cfc00 RDI: ffffffffffffff9c
[  721.907972][T15988] RBP: 00007f752e5cfc00 R08: 0000000000000000 R09: 0000000000000000
[  721.915921][T15988] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  721.923871][T15988] R13: 00007f752da16128 R14: 00007f752da16090 R15: 00007ffe5721a5c8
[  721.931826][T15988]  </TASK>
[  721.935107][T15988] Kernel Offset: disabled
[  721.939404][T15988] Rebooting in 86400 seconds..