last executing test programs:

17m23.443362178s ago: executing program 32 (id=168):
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8080)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0x5420, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3}, 0x0, 0x0, 'id0\x00', 'timer0\x00'})

14m50.754580615s ago: executing program 33 (id=592):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0x7fff0000}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000000000185000000870000001801000020756c2500000000002020247b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d000000095"], &(0x7f0000000040)='GPL\x00'}, 0x94)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000b40)=[{}], 0x1, 0x0)
sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003c80)=@newtfilter={0x38, 0x2c, 0x100, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0x6}, {0xa, 0xffe0}, {0xf, 0x5}}, [@f_rsvp={{0x9}, {0x8, 0x2, [@TCA_RSVP_ACT={0x4}]}}]}, 0x38}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r4, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r8 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r8, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r9 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r9, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg$unix(r9, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="90", 0x1}], 0x1, &(0x7f0000000580), 0x0, 0x8801}}], 0x1, 0x20044034)
close_range(r0, 0xffffffffffffffff, 0x0)

14m21.667839678s ago: executing program 0 (id=723):
mkdir(&(0x7f00000020c0)='./file0\x00', 0x82)
futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x1)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_simple={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x9f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4060040}, 0x20000801)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x40048c0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x1f, 0x101, 0x100}})
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000002, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7fc}], 0x2c)
sendto$inet6(r4, &(0x7f0000000040)="e4", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)

14m20.125034445s ago: executing program 0 (id=728):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r2, 0x84, 0x81, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0xfffffffe, @loopback}], 0x1c)
sendto$inet6(r2, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fstat(r4, 0x0)
setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)

14m17.904161792s ago: executing program 0 (id=733):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[], 0x104}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc004}, 0xc000)

14m17.659001889s ago: executing program 0 (id=735):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
truncate(0x0, 0x7)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000007, 0x3, 0x4, 0x1, 0x0, 0x6})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6000000002061b0000000000000000000000000005000400000000000900020073797a3100000000140007800500150020000000080012400000002e0500050002000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0)
creat(0x0, 0x0)
brk(0x0)
fdatasync(0xffffffffffffffff)
syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a03400000000814000000d093b2dc1e8b1fd8cf42ca9118141000010000000000000000000084000a30f8d728ec651863e74a69cad7a5dcda6a6a000000000000000000000000000000a359b2dd1c3044f61b12adac8b157e982b39d54db9490a913f7ec4de4ec4c9bb88adf11ffcf8137191fba951407103def2d86fb91742d53db3422a2a8935e07e5213135c3b28fed3e496ced25305e073dc5792bb5fe32bb48f0ab671838cd493c45e6ea8387eb760bf444a"], 0x6c}}, 0x0)
memfd_secret(0x0)
r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000000)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000080)={@host})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000001100)={{@any, 0xffffffff}, @local, 0x1, 0x8000, 0x6, 0x5, 0x8, 0x9, 0x5})

14m16.36659358s ago: executing program 34 (id=694):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x28, 0x40, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x142, 0x0, 0x1, [@typed={0x8, 0x7, 0x0, 0x0, @ipv4=@loopback}]}, @nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc020)

14m16.221861569s ago: executing program 0 (id=737):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010100000000fcdbdf252b00000008000300", @ANYRES32=r2, @ANYBLOB="0400460004000801e72a2cfd6f4a227702020000080026006c090000"], 0x38}}, 0x4004880)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
r4 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r4, 0x1, 0xa, &(0x7f0000000180)=0x80000006, 0xfffffffffffffdaa)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdir(&(0x7f0000000200)='./bus\x00', 0x10)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}]})
sendmmsg$inet6(r4, &(0x7f0000009c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40840)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x200c0014)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdir(&(0x7f0000000040)='./file0\x00', 0x102)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000780)='rpc_pipefs\x00', 0x1000000, 0x0)
r6 = socket(0x840000000002, 0x3, 0x100)
sendmmsg$inet(r6, &(0x7f0000005240), 0x4000095, 0x0)
setsockopt$WPAN_SECURITY_LEVEL(r6, 0x0, 0x2, &(0x7f0000000280)=0x4, 0x4)

14m14.806578843s ago: executing program 0 (id=740):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x6, &(0x7f0000000100)=0x5, 0x18)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x2c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x80}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040800}, 0x4001)
write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000080), 0x10)
sendmsg$can_bcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xe0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$UHID_INPUT(r6, &(0x7f0000000240)={0x8, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r6, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x3000, 0x3, 0x1, 0x80, 0xffffffffffffffff, 0x0, 0x3000}])
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b)

14m10.467990929s ago: executing program 1 (id=751):
socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0)

14m9.702950439s ago: executing program 1 (id=754):
openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x741002)
writev(r0, 0x0, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
setgroups(0x24, 0xffffffffffffffff)
mkdir(0x0, 0x88)
mount$afs(0x0, 0x0, 0x0, 0x0, 0x0)
socket$inet(0x2, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
socket$kcm(0xa, 0x2, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000001640)=0xc, 0x45)
sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
r3 = fsopen(&(0x7f0000000080)='nfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000240)={@my=0x0})
ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(0xffffffffffffffff, 0x7b0, &(0x7f0000000180)={@any, 0x2})
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)

14m8.800120716s ago: executing program 1 (id=757):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r3 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f0000000180)=@default_ibss_ssid, 0x6, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r4=>0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x78}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})

14m6.620601779s ago: executing program 1 (id=761):
listen(0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socket$inet6(0xa, 0x3, 0x3a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000140)="d800000019008111e0020f060d8107040a60090000020000000455a1bc00090008000699e3ffffff140005000800000006000567b8b7b94002000009080016060000000000000074d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe04", 0x99}, {&(0x7f0000000c40)="6dd950135126d19aaf46a60e", 0xc}], 0x2}, 0x0)

14m6.115553221s ago: executing program 1 (id=763):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010100000000fcdbdf252b00000008000300", @ANYRES32=r2, @ANYBLOB="0400460004000801e72a2cfd6f4a227702020000080026006c090000"], 0x38}}, 0x4004880)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
r4 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r4, 0x1, 0xa, &(0x7f0000000180)=0x80000006, 0xfffffffffffffdaa)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdir(&(0x7f0000000200)='./bus\x00', 0x10)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}]})
sendmmsg$inet6(r4, &(0x7f0000009c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40840)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x200c0014)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdir(&(0x7f0000000040)='./file0\x00', 0x102)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000780)='rpc_pipefs\x00', 0x1000000, 0x0)
r6 = socket(0x840000000002, 0x3, 0x100)
sendmmsg$inet(r6, &(0x7f0000005240), 0x4000095, 0x0)
setsockopt$WPAN_SECURITY_LEVEL(r6, 0x0, 0x2, &(0x7f0000000280)=0x4, 0x4)

14m4.854880182s ago: executing program 1 (id=765):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
read$ptp(0xffffffffffffffff, &(0x7f00000100c0)=""/4096, 0x1000)
syz_open_dev$loop(0x0, 0xff, 0x20802)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002140)=ANY=[@ANYBLOB="5c00000002060104000000000000000000000000140007800800114000000000050015000c0000000900020073797a31000000000500050002000000050004000000000005000100070000000d000300686173683a6e6574"], 0x5c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vcan0\x00'})
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, 0x0, 0x0, 0xfffffffffffffff3, 0x101})
syz_clone3(0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r2, 0x0, 0x19, 0x0, 0x0)

13m59.22550281s ago: executing program 35 (id=740):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x6, &(0x7f0000000100)=0x5, 0x18)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x2c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x80}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040800}, 0x4001)
write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000080), 0x10)
sendmsg$can_bcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xe0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$UHID_INPUT(r6, &(0x7f0000000240)={0x8, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r6, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x3000, 0x3, 0x1, 0x80, 0xffffffffffffffff, 0x0, 0x3000}])
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b)

13m59.00868685s ago: executing program 7 (id=778):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r2=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000200)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000004800010000000000000000000a00806e0800000000000000140001800d2a79075827af", @ANYRES32=0x0], 0x3c}}, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00')
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
setrlimit(0x40000000000008, &(0x7f0000000000))
preadv(r6, &(0x7f0000000040)=[{&(0x7f0000001440)=""/4106, 0x100a}], 0x1, 0x300, 0x0)
r7 = socket(0x80000000000000a, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000240)={0x0, 0xffffffff}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x1)
connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c)
setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
getsockopt$IP_VS_SO_GET_SERVICE(r8, 0x0, 0x483, &(0x7f0000000380), &(0x7f0000000400)=0x68)

13m56.662522162s ago: executing program 7 (id=781):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r1, 0x0)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100f4f665c8812a977114000000180007800c000300ba000000000000e9070002"], 0x2c}, 0x1, 0x0, 0x0, 0x20008081}, 0x10)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

13m56.551933954s ago: executing program 7 (id=782):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010100000000fcdbdf252b00000008000300", @ANYRES32=r2, @ANYBLOB="0400460004000801e72a2cfd6f4a227702020000080026006c090000"], 0x38}}, 0x4004880)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
r4 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r4, 0x1, 0xa, &(0x7f0000000180)=0x80000006, 0xfffffffffffffdaa)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdir(&(0x7f0000000200)='./bus\x00', 0x10)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}]})
sendmmsg$inet6(r4, &(0x7f0000009c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40840)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x200c0014)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdir(&(0x7f0000000040)='./file0\x00', 0x102)
r6 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r6, &(0x7f0000005240), 0x4000095, 0x0)
setsockopt$WPAN_SECURITY_LEVEL(r6, 0x0, 0x2, &(0x7f0000000280)=0x4, 0x4)

13m55.477175979s ago: executing program 7 (id=784):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
truncate(0x0, 0x7)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000007, 0x3, 0x4, 0x1, 0x0, 0x6})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6000000002061b0000000000000000000000000005000400000000000900020073797a3100000000140007800500150020000000080012400000002e0500050002000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0)
creat(0x0, 0x0)
brk(0x0)
fdatasync(0xffffffffffffffff)
syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a03400000000814000000d093b2dc1e8b1fd8cf42ca9118141000010000000000000000000084000a30f8d728ec651863e74a69cad7a5dcda6a6a000000000000000000000000000000a359b2dd1c3044f61b12adac8b157e982b39d54db9490a913f7ec4de4ec4c9bb88adf11ffcf8137191fba951407103def2d86fb91742d53db3422a2a8935e07e5213135c3b28fed3e496ced25305e073dc5792bb5fe32bb48f0ab671838cd493c45e6ea8387eb760bf444a"], 0x6c}}, 0x0)
memfd_secret(0x0)
r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000000)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000080)={@host})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000001100)={{@any, 0xffffffff}, @local, 0x1, 0x8000, 0x6, 0x5, 0x8, 0x9, 0x5})

13m53.956488636s ago: executing program 7 (id=788):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010100000000fcdbdf252b00000008000300", @ANYRES32=r2, @ANYBLOB="0400460004000801e72a2cfd6f4a227702020000080026006c090000"], 0x38}}, 0x4004880)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
r4 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r4, 0x1, 0xa, &(0x7f0000000180)=0x80000006, 0xfffffffffffffdaa)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdir(&(0x7f0000000200)='./bus\x00', 0x10)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}]})
sendmmsg$inet6(r4, &(0x7f0000009c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40840)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x200c0014)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdir(&(0x7f0000000040)='./file0\x00', 0x102)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000780)='rpc_pipefs\x00', 0x1000000, 0x0)
r6 = socket(0x840000000002, 0x3, 0x100)
sendmmsg$inet(r6, &(0x7f0000005240), 0x4000095, 0x0)
setsockopt$WPAN_SECURITY_LEVEL(r6, 0x0, 0x2, &(0x7f0000000280)=0x4, 0x4)

13m52.269523491s ago: executing program 7 (id=790):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0)
unshare(0x8000000)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x10)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
memfd_create(0x0, 0x3)
openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2)
add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1}, 0x50)
fsmount(0xffffffffffffffff, 0x1, 0x80)
r2 = syz_open_procfs(0x0, 0x0)
read$qrtrtun(r2, &(0x7f00000004c0)=""/57, 0x39)
ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, 0x0)
r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x1)
write$binfmt_format(r3, &(0x7f0000000100)='0\x00', 0x2)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file0\x00', 0x0, 0x8}, 0x18)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
r5 = accept(r4, 0x0, 0x0)
sendmmsg$alg(r5, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4}], 0x1, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
pread64(r6, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000)
r7 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r7, &(0x7f0000000040)={0x18, 0x2, {0x0, @dev}}, 0x1e)
connect$pptp(r7, &(0x7f0000000000)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1e)

13m49.788495193s ago: executing program 36 (id=765):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
read$ptp(0xffffffffffffffff, &(0x7f00000100c0)=""/4096, 0x1000)
syz_open_dev$loop(0x0, 0xff, 0x20802)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002140)=ANY=[@ANYBLOB="5c00000002060104000000000000000000000000140007800800114000000000050015000c0000000900020073797a31000000000500050002000000050004000000000005000100070000000d000300686173683a6e6574"], 0x5c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vcan0\x00'})
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, 0x0, 0x0, 0xfffffffffffffff3, 0x101})
syz_clone3(0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r2, 0x0, 0x19, 0x0, 0x0)

13m36.704051853s ago: executing program 37 (id=790):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0)
unshare(0x8000000)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x10)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
memfd_create(0x0, 0x3)
openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2)
add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1}, 0x50)
fsmount(0xffffffffffffffff, 0x1, 0x80)
r2 = syz_open_procfs(0x0, 0x0)
read$qrtrtun(r2, &(0x7f00000004c0)=""/57, 0x39)
ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, 0x0)
r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x1)
write$binfmt_format(r3, &(0x7f0000000100)='0\x00', 0x2)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file0\x00', 0x0, 0x8}, 0x18)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
r5 = accept(r4, 0x0, 0x0)
sendmmsg$alg(r5, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4}], 0x1, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
pread64(r6, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000)
r7 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r7, &(0x7f0000000040)={0x18, 0x2, {0x0, @dev}}, 0x1e)
connect$pptp(r7, &(0x7f0000000000)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1e)

9m20.181280889s ago: executing program 6 (id=1516):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r5 = socket$unix(0x1, 0x1, 0x0)
sendmmsg$unix(r5, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="90", 0x1}], 0x1, &(0x7f0000000580)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18, 0x8801}}], 0x1, 0x20044034)

9m18.62430969s ago: executing program 6 (id=1519):
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet6(0xa, 0x2, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000004240)=0xc3, 0x4)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
dup2(0xffffffffffffffff, r2)

9m16.268162762s ago: executing program 6 (id=1523):
setgroups(0x0, 0x0)
getgroups(0x1, &(0x7f0000000080)=[<r0=>0xee00])
setregid(0x0, r0)
r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00')
prlimit64(0x0, 0xc, &(0x7f0000000200)={0x8, 0x3bc1}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001240)=@filter={'filter\x00', 0xe, 0x4, 0x488, 0xffffffff, 0x240, 0x240, 0x0, 0xffffffff, 0xffffffff, 0x3e0, 0x3e0, 0x3e0, 0xffffffff, 0x4, &(0x7f00000000c0), {[{{@ipv6={@local, @mcast2, [0x0, 0xff000000, 0xff000000, 0xff], [0xff, 0xff000000, 0xff], 'veth1\x00', 'dvmrp0\x00', {}, {0xff}, 0x87, 0x7, 0x1, 0x38}, 0x0, 0x1e0, 0x218, 0x0, {}, [@common=@rt={{0x138}, {0x6, [0x3, 0x4], 0x9, 0x20, 0x1, [@empty, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @local, @mcast1, @mcast1, @dev={0xfe, 0x80, '\x00', 0x2e}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @remote, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @private1, @remote, @mcast2, @remote], 0xb}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x5, 0x6}, {0x0, 0x4, 0x1}, {0x1, 0x3}, 0x9, 0x6}}}, {{@ipv6={@empty, @empty, [0xffffff00, 0xff, 0xff, 0xff], [0xff, 0xffffff00, 0x0, 0xffffff00], 'ip6tnl0\x00', 'batadv_slave_1\x00', {0xff}, {0xff}, 0x8, 0x4, 0x1, 0x8}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
readv(r4, &(0x7f0000000800)=[{&(0x7f0000000340)=""/48, 0x30}], 0x1)
preadv(r2, &(0x7f00000026c0)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x15f, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r1, 0x0, 0x82)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="c01800002000010a00000000000000000a0000002c01018028014880ed00a90013466820cd76bb221fbb4acd690c6a8b9c760a61eeec7793b579aefdb936d00f403d3f04637cdb9ac70e28c5dd66ddedde2d0930650e6821f9a26a4a193c1d06a3e75523f901e44fe087ae32c836c6d6ddba3af8e9a2beae8936168f9fa38c395f5cf7408df69c60bf584bee86a6312e9ce866e456c3eda6f2924082d78a2f385bdbd0c9afb54758c102bf13094645fb6aa34d424ec776691fee3d25307f61fed2752babf7c686e8a3d9b59a8343bcf4121bf5cf400a0c1070855fac565cad8968a97ce0a12a1161054d82d0a240b7de", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB], 0x18c0}}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
r10 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c000104090000000000000002000000", @ANYRES32=r9, @ANYBLOB="000014000a000100aaaaaaaaaaaa000008000f0001000000"], 0x30}, 0x1, 0x0, 0x0, 0x20000}, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
capset(&(0x7f0000000200)={0x20080522}, &(0x7f0000000240)={0x1, 0x3, 0x1, 0xb, 0x2c5f, 0x4})
mkdirat(r5, &(0x7f0000000040)='./file0\x00', 0x20)

9m12.479866444s ago: executing program 6 (id=1531):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r2, 0x84, 0x81, 0x0, 0x0)
sendto$inet6(r2, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)

9m6.470904472s ago: executing program 6 (id=1542):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = syz_open_dev$rtc(&(0x7f0000000680), 0x0, 0x2a00)
ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f0000000140))
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x103182, 0x0)
socket(0x1, 0x1, 0x0)
ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89a0, &(0x7f0000000200)={@rand_addr=0x64010100, @empty})
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r3 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00'}, 0x48)
setpgid(r3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220)
setpgid(0x0, r3)
open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x901)

9m5.247409186s ago: executing program 6 (id=1546):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)=0x1)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, 0x0)
openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$dsp(r0, &(0x7f00000012c0)="a52876830a602220f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)

8m49.83667164s ago: executing program 38 (id=1546):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)=0x1)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, 0x0)
openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$dsp(r0, &(0x7f00000012c0)="a52876830a602220f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)

6m53.444276636s ago: executing program 2 (id=1880):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8)
pipe(&(0x7f00000001c0))
syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fb00fb030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0)
read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/172, 0xac)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1400000000000000040000000100ba2f", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x18, 0x200408cc}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="f7fa4386b2176422", @ANYRESHEX=r3, @ANYRES32=r0, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000280)=0xa, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)

6m49.944948943s ago: executing program 2 (id=1890):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10)
r3 = syz_open_dev$rtc(&(0x7f0000000680), 0x0, 0x2a00)
ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000140))
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x103182, 0x0)
socket(0x1, 0x1, 0x0)
ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89a0, &(0x7f0000000200)={@rand_addr=0x64010100, @empty})
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, 0x0)
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r4 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000f0200006706000020000000620a00fe0ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56bb5df3083d20f8c2bf304000000815dcf0066d7ded3c5c49a08a503ea6d54f7f3125a8200578ac0836d6454745e70a27444003c5b20451b624db6f5320e9befc1e00b8b32917c4d30d16b7edb732bc3ac330b16c442aff70d27659bc58e296b16750c5577c848754b4894b07f15bab1c640a5c0c4fd62f9db829b301ef67fd2b2736f3af0c54af2412313b17c4c8081c4ed0572261960e227d34cfbfdb247bc2351c9d8363a8cb18b7330604da78b0aba47545f9a25a80dd7d28a5ae41824f611dd2de6dd581c52698f9542a444a8a3969946faded5275c00"/420], &(0x7f0000000100)='GPL\x00'}, 0x48)
setpgid(r4, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220)
setpgid(0x0, r4)
open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x901)

6m46.99967303s ago: executing program 2 (id=1897):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r1 = fcntl$dupfd(r0, 0x406, r0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37)
write$binfmt_elf32(r1, &(0x7f0000000a40)=ANY=[], 0x358)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1)
r4 = syz_usb_connect$lan78xx(0x5, 0xfffffffffffffff0, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000500)=ANY=[@ANYRES32=r3, @ANYRES8=r4, @ANYRESHEX=r0, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000370401000000f4dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="890c0400000000001c001280090001006970694bd42c9270000000000c00028005000980"], 0x3c}, 0x1, 0x0, 0x0, 0x44801}, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12011001000000406d0413c500000000000109022400010000a0060904fd0081030003000921000028012207000905810300024908"], 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)
syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f00000001c0)={0x34, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r4, 0x0, 0x0)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2)
syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r6, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="4001cb000000774aec1a61bce59f228b1f00ce52cdc602b95bba60b0f8bc406dced2253bcc8674afb44dc1e1e6b618060eb22318d949abb816c6a86987df6fbe6370c78a7969a280f5b65f0fd161f5a06dcf0222e50d2409b6578a32555a08670a630c271435894bfc7bf5dede729cdbbf9a324d6d2a068fcc1b073fd370a96162b2676e6e51b6d2756b540ab1827ec5bae16a4ca2ac4636a80600000057ccafa3eb5ec4ab70fb222693c98e978e01ad82bda58ff0dad6b9c5c927c5d8e9eff3cbc7c2d3df5175991474821518ac21ed11"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r7 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r7, &(0x7f0000001d80)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010104}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r8=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000380)={0xfbff, 0x1, 0xfffffffa, 0x0, r8}, 0xffffff12)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000580)={r8, @in={{0x2, 0x4e24, @rand_addr=0x64010102}}}, 0x84)
syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000000540)={0x34, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000ac0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

6m43.328279057s ago: executing program 2 (id=1908):
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, 0x0)
setpgid(0x0, r0)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
openat$cgroup_ro(r1, &(0x7f0000000100)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0)

6m43.068168744s ago: executing program 2 (id=1911):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000070a01040000000000000000020000000c000340fffffffffffffffe0900e22c73797a32000000000900010073797a3000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_LEAVE_OCB(r3, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYRES16=0x0, @ANYRES32=r5, @ANYBLOB="f583d45860e2b2027e6496cde26680de0045f198ff1c88735d1c574ef6db06a8871b8d25ceaf96cc57ad8ab849e52fd1419db470dc39ea34509be20a2fcf0cf9c3d995c11b"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4040000)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000070601880000000000000000000000000500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f0000000800)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xc0, 0x0, 0x2, 0x3, 0x0, 0x0, {0x1}, [@CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_TUPLE={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_NAT={0x14, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000}, 0x20000010)
setsockopt(r6, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000100", 0x8)
setsockopt(r6, 0x84, 0x81, &(0x7f00000003c0)="1a00000002000100", 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x1b, &(0x7f0000000380)={0x0, 0x5}, &(0x7f0000000180)=0x8)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000740)=[<r8=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000540)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0), &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x0, 0x2, 0x7, 0x0, r8})
r9 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x4ab00, 0x0)
ioctl$TUNSETVNETHDRSZ(r10, 0x400454d8, &(0x7f00000000c0)=0x4)
write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc00000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e64021d683910c3090b3188a7c747eb2278a273c1b800294429118927"], 0xfdef)

6m39.576175027s ago: executing program 2 (id=1918):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$netlink(0x10, 0x3, 0x4)
writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000300)="4800000014001d1009074beafd0d8c560a84606080ffe020590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75edc6d100000101ff0000000309ff5b00000000", 0x48}], 0x1)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000100], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000e700000000000000000000000000000000feffffff0000000000000000000000a66a1a7e2dec30f400000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108)
openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2082, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1200000006000000040000000271223d00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff})
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x98, 0x30, 0x100, 0x70bd28, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x2, 0x0, 0xfffffffe}, 0x2, r6}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x8804)
ioctl$RNDADDTOENTCNT(r4, 0x40045201, 0x0)

6m38.939518164s ago: executing program 39 (id=1918):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$netlink(0x10, 0x3, 0x4)
writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000300)="4800000014001d1009074beafd0d8c560a84606080ffe020590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75edc6d100000101ff0000000309ff5b00000000", 0x48}], 0x1)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000100], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000e700000000000000000000000000000000feffffff0000000000000000000000a66a1a7e2dec30f400000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108)
openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2082, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1200000006000000040000000271223d00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff})
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x98, 0x30, 0x100, 0x70bd28, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x2, 0x0, 0xfffffffe}, 0x2, r6}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x8804)
ioctl$RNDADDTOENTCNT(r4, 0x40045201, 0x0)

8.259896732s ago: executing program 8 (id=2961):
ftruncate(0xffffffffffffffff, 0x398a0bdb)
add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff)
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
sysinfo(&(0x7f0000000000)=""/196)
r5 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io(r5, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
sendmmsg$inet(r3, &(0x7f00000098c0), 0x0, 0x8000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_ro(r6, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0)
preadv(r7, &(0x7f00000000c0)=[{&(0x7f00000004c0)=""/127, 0x7f}], 0x1, 0x0, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1)
writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)})
close_range(r3, r0, 0x0)

7.648928042s ago: executing program 3 (id=2964):
socket$igmp6(0xa, 0x3, 0x2)
syz_pidfd_open(0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
futex(&(0x7f0000004000)=0x2, 0x4, 0x0, 0x0, &(0x7f0000004000), 0xb201fffe)
r2 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e28, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
bind$inet(r2, 0x0, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40)
r3 = socket(0x15, 0x5, 0x0)
getsockopt(r3, 0x200000000114, 0x2713, 0x0, &(0x7f0000000040))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x78, 0xd, 0x66, 0x0, 0x3}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50)
r6 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'bond0\x00', <r7=>0x0})
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', r7}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r5}, &(0x7f0000000080), &(0x7f00000000c0)=r8}, 0x20)
write(r4, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14)
recvmmsg(r4, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})

7.462578691s ago: executing program 4 (id=2967):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000200), &(0x7f0000000240)=0x4)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000100000022bf000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32], 0x50)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c40)=@o_path={0x0, 0x0, 0x8000, r2}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000006040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000068000000060a010400000000000000000500400008000b4000000000400004803c0001800b00010074756e6e656c00002c0002800800034000000000080001400000000108000340000000020800014000000000080002400000000c0900010073797a30"], 0x5d54}}, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000740), 0x0, 0xffffd6c0, 0xffffffffffffffff, 0x0, 0x20}, 0x38)
io_setup(0x4, &(0x7f0000000080)=<r4=>0x0)
io_submit(r4, 0x2, &(0x7f0000000380)=[0x0, 0x0])
r5 = socket$pppoe(0x18, 0x1, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x101003)
connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x4, @multicast, 'bond0\x00'}}, 0x1e)
ioctl$PPPOEIOCSFWD(r5, 0x80047453, &(0x7f00000002c0)={0x18, 0x4000000, {0x4, @remote, 'erspan0\x00'}})
r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0)
mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x8012, r6, 0x0)

7.252181859s ago: executing program 9 (id=2968):
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {<r2=>0x0, 0xee00}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {<r3=>0x0}}, './file0\x00'})
setresuid(0x0, r2, r3)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000080)=@l={0x92, 0x5, 0xe0, 0x16, 0x2, 0xf, 0x2})
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x5d1f, &(0x7f0000000240)={0x0, 0xd604, 0x1, 0x1, 0x3be}, 0x0, &(0x7f0000000140))
r5 = io_uring_setup(0x5f4c, &(0x7f00000003c0)={0x0, 0x804, 0x2, 0x1000000})
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0xf, &(0x7f0000000540)={0x1002, 0x0, 0x0, 0x0, 0x28}, 0x20)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
r6 = socket(0x40000000015, 0x5, 0x0)
getsockopt(r6, 0x200000000114, 0x2717, 0x0, &(0x7f0000000000))
r7 = socket(0x14, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, 0x0)

6.734816234s ago: executing program 9 (id=2969):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000200), &(0x7f0000000240)=0x4)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000100000022bf000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c40)=@o_path={0x0, 0x0, 0x8000, r2}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000006040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000068000000060a010400000000000000000500400008000b4000000000400004803c0001800b00010074756e6e656c00002c0002800800034000000000080001400000000108000340000000020800014000000000080002400000000c0900010073797a30"], 0x5d54}}, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000740), 0x0, 0xffffd6c0, 0xffffffffffffffff, 0x0, 0x20}, 0x38)
io_setup(0x4, &(0x7f0000000080)=<r4=>0x0)
io_submit(r4, 0x2, &(0x7f0000000380)=[0x0, 0x0])
r5 = socket$pppoe(0x18, 0x1, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x101003)
connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x4, @multicast, 'bond0\x00'}}, 0x1e)
ioctl$PPPOEIOCSFWD(r5, 0x80047453, &(0x7f00000002c0)={0x18, 0x4000000, {0x4, @remote, 'erspan0\x00'}})
r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0)
mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x8012, r6, 0x0)

6.686124595s ago: executing program 4 (id=2970):
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
syz_open_dev$dri(0x0, 0xd21, 0x4000)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_open_dev$usbmon(0x0, 0x0, 0x200400)
syz_open_dev$vbi(0x0, 0x0, 0x2)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f0000000240), 0x0, 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x4004510d, &(0x7f0000000000))
ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r1, @ANYRES32=r0], 0x18}, 0x1, 0x0, 0x0, 0x20000001}, 0x404c010)
recvmmsg(r3, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000340)=""/113, 0x71}, {0x0}, {&(0x7f0000000280)=""/98, 0x62}, {&(0x7f00000003c0)=""/100, 0x64}, {0x0}], 0x8}, 0x4db}, {{0x0, 0x0, 0x0}, 0x2}], 0x6, 0x20000, 0x0)

5.972465058s ago: executing program 9 (id=2972):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000440)={0x40}, 0x0, 0x0, 0x0, 0x0})

5.905482838s ago: executing program 3 (id=2973):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb722000008000000b203000000000000850000000600000085000000080000009500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x1000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

5.651534556s ago: executing program 5 (id=2974):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x88203, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000000000000850000009400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
syz_emit_ethernet(0x22, &(0x7f0000000440)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x1, 0x14, 0x64, 0x0, 0x4, 0x89, 0x0, @rand_addr=0x64010102, @multicast1}}}}}, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x42, 0x0, 0x0)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5.55607462s ago: executing program 4 (id=2975):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', 0x8)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd(0x40048c67)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0xfffffffffffffffc, 0x4, 0x2, r2})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@redirect_dir_on}], [{@fsuuid={'fsuuid', 0x3d, {[0x38, 0x39, 0x36, 0x33, 0x35, 0x63, 0x37, 0x56], 0x2d, [0x35, 0x62, 0x61, 0x33], 0x2d, [0x32, 0x33, 0x66, 0x66], 0x2d, [0x34, 0x37, 0x63, 0x64], 0x2d, [0x32, 0x61, 0x30, 0x66, 0x66, 0x36, 0x61, 0x56]}}}, {@fsuuid={'fsuuid', 0x3d, {[0x38, 0x33, 0x63, 0x34, 0x63, 0x60, 0x36, 0x64], 0x2d, [0x31, 0x64, 0x63, 0x36], 0x2d, [0x30, 0x66, 0x62, 0x33], 0x2d, [0x63, 0x37, 0x0, 0x33], 0x2d, [0x37, 0x0, 0x33, 0x34, 0x32, 0x65, 0x63, 0x64]}}}]})
chdir(&(0x7f00000000c0)='./bus\x00')
socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0xfe, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
socket$kcm(0x2d, 0x2, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00')
preadv(r5, &(0x7f0000000380)=[{&(0x7f0000000080)=""/83, 0x53}], 0x1, 0xc9, 0x1)
madvise(&(0x7f00005ce000/0x3000)=nil, 0x3000, 0xb)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40004)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000054}, 0x84)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xe0000000, 0x5e4b0422, 0x3, 0xffff, 0x5, 0x9, 0x0, 0x0, 0x80, 0x80000001}}, 0x50)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
socket$nl_route(0x10, 0x3, 0x0)

5.516515423s ago: executing program 8 (id=2976):
syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbb5a01f3c2f13608060001"], 0x0)
syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount$binderfs(0x0, 0x0, 0x0, 0x4000, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/12], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000100], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108)
socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffffc, 0x10000, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x17, 0x0, 0x1, [@nested={0x4, 0x13}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

5.003424013s ago: executing program 3 (id=2977):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32, @ANYBLOB="040013000a000600ffffffffffff0000060010008005000006001200000000000400ac000e00bd"], 0x50}}, 0x10)

4.824107089s ago: executing program 3 (id=2978):
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x4420, 0x0)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f00000002c0)={0x9, {"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", 0x1000}}, 0x1006)
gettid()
r2 = getpid()
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
rt_sigqueueinfo(r2, 0xa, &(0x7f0000000140)={0x0, 0x95, 0xf7fffffd})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x88)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
ioctl$FUSE_DEV_IOC_CLONE(r6, 0xe503, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private2}]}}}, @IFLA_MASTER={0x8, 0x3, r5}]}, 0x50}}, 0x0)

4.109693621s ago: executing program 8 (id=2979):
syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbb5a01f3c2f13608060001"], 0x0)
syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount$binderfs(0x0, 0x0, 0x0, 0x4000, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000100], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108)
socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffffc, 0x10000, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x17, 0x0, 0x1, [@nested={0x4, 0x13}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

4.027994424s ago: executing program 5 (id=2980):
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'netpci0\x00'}})
mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x2000001, 0x13, 0xffffffffffffffff, 0x517a3000)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r1, 0x40000000af01, 0x0)
r2 = socket$packet(0x11, 0x0, 0x300)
r3 = dup(r2)
ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r3})
ioctl$VHOST_NET_SET_BACKEND(r1, 0xaf02, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x8000000004)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0)={<r5=>0x0}, 0x0)
kcmp$KCMP_EPOLL_TFD(r5, 0x0, 0x7, r1, &(0x7f0000000280)={r3, r0, 0x1ff})
r6 = socket$inet(0x10, 0x3, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x103, 0x0, 0x0)
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="4c0000001200ff09ff3a150099a283ff04b8008000f0ffff0000000600401500240036001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab", 0x42}, {&(0x7f0000000080)}], 0x2}, 0x0)
r7 = socket$inet(0x2, 0x3, 0x30)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="18080000000000000000000000000000181100", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000035090100000000009500000000000000cf49000000000000560800000000e2008500000000000000b7000000000000009500000000000000f0cc29cd8b2ff378e1645042e0f30e320c60993f4c3db05d22d1a05a700eb257b291b94a6860820c0b1eec96b2c2e3c1e83a9752bfa743cdef4ac21412fe70a14b91bc9206ea40efb1a83c6d294db5e178eb37f0afec7b50522344429d1b230000000000"], &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
getsockopt$inet_mreqsrc(r7, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c)

3.836431243s ago: executing program 4 (id=2981):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000500)={'gre0\x00', <r3=>0x0, 0x40, 0x700, 0x1, 0xa, {{0x40, 0x4, 0x2, 0x2e, 0x100, 0x66, 0x0, 0x3b, 0x5c95f178f7111e7e, 0x0, @private=0xa010102, @private=0xa010102, {[@generic={0x83, 0xc, "4dc41bc84027d4ff45a1"}, @cipso={0x86, 0x7d, 0x1, [{0x1, 0xe, "a0e82698ac70354992eddd71"}, {0x2, 0xf, "2df65db792093eb26ce816a606"}, {0x5, 0x9, "30f61c42ebf089"}, {0x7, 0x11, "2ea79f380d4464574c3bca294aa3a9"}, {0x6, 0x7, "355dcf730e"}, {0x6, 0x5, "9faa74"}, {0x5, 0x12, "d6be80a77b8ea51fdbfb4f67ae398e53"}, {0x7, 0xc, "92f1dabdb6e9f4128468"}, {0x7, 0x10, "4bf98482c7af92c475ac121f6ca2"}, {0x0, 0x6, "7f99b9de"}]}, @generic={0x44, 0x6, "0f01ead4"}, @lsrr={0x83, 0x13, 0xd7, [@loopback, @dev={0xac, 0x14, 0x14, 0x13}, @multicast2, @broadcast]}, @ssrr={0x89, 0x1b, 0x1f, [@local, @multicast1, @dev={0xac, 0x14, 0x14, 0x18}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @empty]}, @timestamp_prespec={0x44, 0x2c, 0xfc, 0x3, 0x3, [{@private=0xa010100, 0x6}, {@dev={0xac, 0x14, 0x14, 0x35}, 0xb7b}, {@empty, 0x2}, {@multicast1, 0x800}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8000}]}]}}}}})
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r4, @ANYBLOB="05", @ANYRES16=r4, @ANYRES16, @ANYRES16], 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f0000000300)=[{&(0x7f0000000100)="df", 0x1}], 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e000000ff0000004a0b00000000010083f00000", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="8400000003000000010000000d000000000080006b7f2db60debfd", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00'], 0x50)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7])
openat$cgroup_devices(r7, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007", @ANYRES64=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, 0x25, r4}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r9}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

3.162076585s ago: executing program 8 (id=2982):
r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/66, 0x42}], 0x1)

3.105255078s ago: executing program 8 (id=2983):
ioctl$VIDIOC_G_MODULATOR(0xffffffffffffffff, 0xc0445636, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000200)=0x7)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcf\xcb\x92\xf1\x83\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x1bR\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o', 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

2.669357757s ago: executing program 9 (id=2984):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080))
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r3, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f)
r4 = openat$cgroup_pressure(r2, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0)
ppoll(&(0x7f0000000180)=[{r3}], 0x1, 0x0, 0x0, 0x0)
write$cgroup_pressure(r4, &(0x7f0000000340)={'some', 0x20, 0x4, 0x20, 0xffffa}, 0x2f)
close(r4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000002000010300000000000000000a0000000000000000000000080018"], 0x24}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0)
sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="93c1c59000de5f10f8254a78e3bab21747eeb83a1755a3e593e4be010ca2be668dcd46939146be4c0793911273c00299fd4ae7a89a95602d88e0fd", @ANYBLOB="ca03d7f60bf7323ecf3dd1d8610c5f30330e6ca18d9917d15a55efe2f3b855e7fa2b0da33fe2fc17181960b70ce74399834830d7c30eade3cc332c06ec9bf9748465937c6f44e7bfd298b748e8daf6ed34d79097edbecd3e2a7b77f04a5168aa031300ee30060556985e551b2563eb3fb11d70046ce2e8d64d88ec70e5ef97dbab8cd442ebe60995364574cc68ba4641ea24c2bbcd402c0d9d6ad05c4df88067d10a7c5b8154c13551600285ef9e63e9cc27446792ff7d95f5d28a59788330"], 0x1c}, 0x1, 0x0, 0x0, 0x2400c050}, 0x40000)

2.558826775s ago: executing program 3 (id=2985):
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
syz_open_dev$dri(0x0, 0xd21, 0x4000)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_open_dev$usbmon(0x0, 0x0, 0x200400)
syz_open_dev$vbi(0x0, 0x0, 0x2)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f0000000240), 0x0, 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x4004510d, &(0x7f0000000000))
ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r1, @ANYRES32=r0], 0x18}, 0x1, 0x0, 0x0, 0x20000001}, 0x404c010)
recvmmsg(r3, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000340)=""/113, 0x71}, {0x0}, {&(0x7f0000000280)=""/98, 0x62}, {&(0x7f00000003c0)=""/100, 0x64}, {0x0}], 0x8}, 0x4db}, {{0x0, 0x0, 0x0}, 0x2}], 0x6, 0x20000, 0x0)

2.203208851s ago: executing program 5 (id=2986):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140), 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000340)={0x1f, 0xffff, 0x1}, 0x6)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r3 = accept$alg(r1, 0x0, 0x0)
write$binfmt_script(r3, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x10, 0x2, 0x0)
io_setup(0x6, &(0x7f0000000180))
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc005}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newtfilter={0x1dc, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r7, {0x6, 0xf}, {}, {0x4, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0x1b0, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xd, 0xffee}}, @TCA_FW_INDEV={0x14, 0x3, 'bond_slave_1\x00'}, @TCA_FW_ACT={0x158, 0x4, [@m_skbedit={0x154, 0x12, 0x0, 0x0, {{0xc}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xfd70}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x5}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xb9b6}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x10}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x3, 0xb}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x4, 0x5, 0x0, 0x80000000, 0x9}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xffffff7f}]}, {0xd0, 0x6, "ae208a2aebced6c4ba69286f08e8afd43f8977d890bf33b03523c2043571ef268d0f20c26eea6eb3b67033764411d462afbfc7178b5d498984f64c6a633b00a8f3a73917fb410ed0a4e1c80f9c214d1308c2bc23e00502301345c73b3236f5619128310d183f9435ba1b04540fc7487ee659cbff100869842ea273411295a961c0b2fb4ca16a9498618dcae37cdcde73640b125d7b5dc4704c92b000b216ace9c999e9c35bc467e7a5e6f72be8f8352c2da39b96e9033019e60682665d096ff605676ee5eba483929a6b1cf3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_FW_INDEV={0x14, 0x3, 'team_slave_1\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0xfff2, 0xa}}, @TCA_FW_MASK={0x8, 0x5, 0x1ff}, @TCA_FW_INDEV={0x14, 0x3, 'geneve1\x00'}]}}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x24000004}, 0x880)

1.968073599s ago: executing program 8 (id=2987):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r1, 0x81, 0x2, &(0x7f00000004c0)='P\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000780)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x8, 0x2, 0x0, 0x9915, 0x2, 0x3e, 0x5, 0xfe, 0x40, 0x2, 0x7ff, 0x4, 0x38, 0x1, 0x9, 0xf33, 0x2}, [{0x4, 0x8, 0x9, 0x7, 0x2a2, 0x1, 0x2, 0x100}]}, 0x78)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x7, 0x3})
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
syz_usb_connect$uac1(0x1, 0xd2, &(0x7f0000000800)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc0, 0x3, 0x1, 0x4, 0x40, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x2}, [@processing_unit={0xd, 0x24, 0x7, 0x6, 0x1, 0x5, "df8806f0b0c1"}, @processing_unit={0x8, 0x24, 0x7, 0x4, 0x0, 0x6, "db"}, @selector_unit={0xa, 0x24, 0x5, 0x4, 0x76, "69ed4bb831"}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x302, 0x4, 0x3, 0x9}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x0, 0x4, 0xa, 0x5, 0x3, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x0, 0x4f, 0x8, "6636fd5e0a34"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x40, 0x35, 0x2, 'do%'}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x8, 0x2, 0x10, 0x5, "beeb2d"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x80, 0x7, 0x7, {0x7, 0x25, 0x1, 0x0, 0xb, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x3, 0x7, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x49, 0x6, 0x4c, {0x7, 0x25, 0x1, 0x80, 0x40}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x340, 0xd, 0x8f, 0x1, 0xff, 0x69}, 0x5, &(0x7f0000000200)={0x5, 0xf, 0x5}, 0x1, [{0x9c, &(0x7f00000005c0)=@string={0x9c, 0x3, "b973ce35a737e3104c419789a299d8c32abd79b7f37cf344a02c945593553127abc3872a627f572eecbf388b080840b434702bfde0893f9d3db722e532bee7db04a9b2dcf838bf4e5484fe5631c93c89ac233b395e9faabbe490d477d9e0a75baaee2a7cdbef547a6511557814958f97dac404509d6c1562f39a90f5498f401f938ec12100287affb957bc62a322ba86776aa9d6e2a6b6ee8eec"}}]})
ioctl$KVM_CAP_X2APIC_API(r3, 0x4068aea3, &(0x7f0000000240)={0x81, 0x0, 0x3})
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x800)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x400)

1.94247603s ago: executing program 5 (id=2988):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000e6ff000000000b4624fca0d877c97217c6a1837dd8d23cdb9331a29d01a4f1eb1d9c691e47459504a57a7a1f34beebfec9748bc3453516b9edc59dbb8743499f409357e83352ead7532c52fddc06dd81", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000740), 0x10, &(0x7f0000000800)={&(0x7f0000000780)={0x6, 0x20, 0x6, {}, {}, {0x1, 0x0, 0x0, 0x1}, 0x1, @can={{0x3}, 0x0, 0x1, 0x0, 0x0, "796c8968b18e31ff"}}, 0x48}, 0x1, 0x0, 0x0, 0x40801}, 0x4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8d4}, 0x0)
prctl$PR_SET_NAME(0x4, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000010c0)=[{{&(0x7f0000000480)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000500)="5ed2a018285b67cf3f6271ab54f585a283822450d16968c9828008a34c00c8415d4711339e656eb8c891c0b5290f493707f9ca58e8f7aeb757a0d963d7946ee134026793841063f79a35059db031330e1c8227aedfc03ecc6a0c5779e8f5c2f4a88ffec490", 0x65}, {&(0x7f0000000580)="b4636afaa73c7adaace8e270b6d859dc3ae6d48d0971b3cafa3116a2b673b625f2b3b5212f2e3dbcfe4e97be21a693dd0d505385bf250c42a462c2dd403314965555da4daa5a731a40e91982af30324bae80d532f740a4ad8ca1874f1c25fff9e179ad67f5da89db5263700ef3f8b20439a7bf9b3f6d33d3de451098403a65e428c92f49030fc3e7a201066a4dea0dbf53e6665c", 0x94}, {&(0x7f0000000640)="60608d9627a745e794479643c4d078ab895fa96c2042a5b4d4e0478ee238f129fa8ad0a21d9a4e08dce287e73699d628f7c5c643f7b3619b09453464eed1d4fd1afe8eec33f028d0a6d0c711964edc98e76fb80f7634b9ad00d7a5bb328d34f6ccf6fc55896de7fec1c06989b14cbf123e34e47f11f96c4d2825346aa12126e880468c59e38a9852a22842c28c6e579cba1f9b12212c5c32cb358c3cb46e338ebc490994bcbab5d8357a0ff44571dcc27660eca858e2e5ad8fb58a14c54b74ceffde851e303b9cf6d00735c31fd237d4fb96c0f4", 0xd4}], 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r7, @ANYBLOB="00120536084bf2a86000d934ba9dfad9323e8028ea2a17b600000800dd00480406000e09f1c7550712c8ded315cb34ed1518d91245d645ee58e62e1500f8814cd620a6a7a2d76da51580bd4645ca176bad658ce021c19569c4b92d037df1046c6fe6b0612751312b9c0990f54c475a3b420dae2647a3d687fe55f5ac10163078df670d241948827f20ee318d8863081d575980fe6fd3946695c7b66bbce38eba92b13a3de10d1edd97b0568d76843b9823a57e89bb14452386442143751a03ffc27e63bf0f8e8acf36bb05e4045bb1313cd646f9965daeb2", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRESHEX=r0, @ANYRES32=r0, @ANYRES32, @ANYRES32=r7, @ANYRES32], 0x88, 0x200408a0}}, {{&(0x7f0000000a00)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000c00), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r6, @ANYRES32=r5, @ANYBLOB="34000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32=r2, @ANYRES32=r5, @ANYRES32, @ANYRES32=r7, @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYBLOB="d7d328939e200000001c00000000000100000700", @ANYRESDEC=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xc8}}], 0x2, 0x20000810)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, 0x0, 0x8)
r9 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000001400010029bd7000fcdbdf25100604000100d8ae"], 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x4008)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r10, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r10, &(0x7f0000000000)=ANY=[@ANYRESDEC=r4], 0x8)

1.168815595s ago: executing program 5 (id=2989):
syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbb5a01f3c2f13608060001"], 0x0)
syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount$binderfs(0x0, 0x0, 0x0, 0x4000, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/12], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000100], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108)
socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffffc, 0x10000, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x17, 0x0, 0x1, [@nested={0x4, 0x13}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

1.149260093s ago: executing program 3 (id=2990):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r4, &(0x7f0000000000)=""/172, 0xac)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1400000000000000040000000100ba2f", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x18, 0x200408cc}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="f7fa4386b2176422", @ANYRESHEX=r3, @ANYRES32=r0, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000280)=0xa, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)

1.113973897s ago: executing program 9 (id=2991):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000fb000000000000000000e500020000000000e500fcff00000000060000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x8}, 0x94)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f0000000040)=0x2d7, 0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4008000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)

294.614473ms ago: executing program 4 (id=2992):
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x406}}}, 0x7)
mkdir(&(0x7f0000000180)='./file0\x00', 0xc4)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006180)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50)
write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1004cc80, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50)
r4 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40)
read$FUSE(r4, 0x0, 0x0)
r5 = socket(0x26, 0x1, 0x8)
getsockopt(r5, 0x1, 0x8, 0x0, &(0x7f0000001ffc))

224.131522ms ago: executing program 5 (id=2993):
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setgroups(0x0, 0x0)
setreuid(0xffffffffffffffff, 0xee01)
msgrcv(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1000)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r4 = accept$alg(r3, 0x0, 0x0)
write$binfmt_script(r4, &(0x7f0000000600), 0xfec8)
recvmmsg(r4, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140), 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0xfffffffffffffe63, 0x200ff0f}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680})

165.089561ms ago: executing program 9 (id=2994):
r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60)
r1 = syz_io_uring_setup(0x7009, &(0x7f0000000240)={0x0, 0x421, 0x400, 0x2, 0x8e}, &(0x7f0000000100), &(0x7f00000001c0))
r2 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0x200fad6, 0x10, 0x0, 0x0, 0x0, r1}, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000002a00)=<r4=>0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000d1de95"], &(0x7f0000000180)='syzkaller\x00'}, 0x94)
r6 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6)
r7 = socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
sendmsg$nl_route(r7, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_REG(r8, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={0x0}, 0x1, 0x0, 0x0, 0xd8}, 0x8000)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffa, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3})
io_uring_enter(r2, 0xdb4, 0x0, 0x0, 0x0, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x0, 0x9, "00000000020000000000002100", "00004702", "0300", "97ad3700", ["fdffffff84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff", "0000efffffffffffbfff00"]})
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x5, 0x0, 0xffffffff, 0x1000006, 'U\x00', "1575a859", "0725eade", '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]})
syz_init_net_socket$bt_hci(0x1f, 0x2, 0x1)

0s ago: executing program 4 (id=2995):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r0, 0x2f, 0x0, @void}, 0x10)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x141842, 0x8)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r1)
sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="4d37000400d04477e9d3bf742098fbc30f7a81d5e9b99b24e1b0981b0f55a5c43cdb590810f08e4e1824cc537bf0026601fdb6a5beef8bc5fc6e", @ANYRES16=r2, @ANYBLOB="000327bd7000fedbdf25030000000800030005000000080002000900000008000200080000000500050000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4040080}, 0x4)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="3b1c1b2098f0bc154c9778a922", 0xd)
sched_setaffinity(0x0, 0x0, 0x0)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf506e0000000000b7020000000000008500000085000000b70000000000000095000000000000000ba121fc66f4c42809fde9099370b71910ca3240f2e58abe655cebe64eb24c114263790200000000000000b384f35d87e7c6329208c9dd7fc0572cc2d7365846ceb5b7a9fc4dd342e1300237a7d708c35d61f10ffdf842203a8d528ac474f3dff026fa807e072414dc2bed06da0298df3e91970e85c6682c143aadcefef14e2c4f54e72f2f8d6e2747a9e99279257d834a7b8399e8f9c8c87643fdaa14d91e70b7c636d0717007df94256ed7bee2f8f1a97e10842e3db3acdee6c9da544599430de9f8e586a86a028919415de4"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
fanotify_init(0x200, 0x0)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x1)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000e40)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x0, 0x270, 0xd0, 0x340, 0x0, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x1, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560)
r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000080)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000000)={@my=0x0})
socket$nl_route(0x10, 0x3, 0x0)

kernel console output (not intermixed with test programs):

le to find symbol cx22700_attach()
[ 1032.397931][T17312] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1032.489224][ T5896] DVB: Unable to find symbol tda10046_attach()
[ 1032.533700][ T5896] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[ 1032.955612][ T5896] usb 6-1: USB disconnect, device number 29
[ 1033.058310][T12041] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1033.127878][T12041] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1033.136396][T12041] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1033.229786][T12010] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1033.302168][   T55] usb 10-1: new high-speed USB device number 36 using dummy_hcd
[ 1033.472055][   T55] usb 10-1: Using ep0 maxpacket: 32
[ 1033.646592][   T55] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1033.658911][   T55] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1033.668772][   T55] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1033.677326][   T55] usb 10-1: Product: syz
[ 1033.681844][   T55] usb 10-1: Manufacturer: syz
[ 1033.687473][   T55] usb 10-1: SerialNumber: syz
[ 1033.725623][   T55] usb 10-1: config 0 descriptor??
[ 1033.748368][T17343] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 1035.512265][ T5896] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[ 1035.902528][ T5896] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[ 1035.911823][ T5896] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1035.967895][ T5896] usb 6-1: Product: syz
[ 1036.007012][ T5896] usb 6-1: Manufacturer: syz
[ 1036.024076][ T5896] usb 6-1: SerialNumber: syz
[ 1036.064988][ T5896] usb 6-1: config 0 descriptor??
[ 1036.070197][ T7958] usb 10-1: USB disconnect, device number 36
[ 1036.429704][T17377] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5126 sclass=netlink_route_socket pid=17377 comm=syz.5.2565
[ 1036.445955][T17377] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check.
[ 1036.705069][   T55] usb 6-1: USB disconnect, device number 30
[ 1037.942276][   T55] usb 9-1: new full-speed USB device number 42 using dummy_hcd
[ 1038.125845][   T55] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[ 1038.149535][   T55] usb 9-1: config 0 has no interface number 0
[ 1038.171037][   T55] usb 9-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[ 1038.255987][   T55] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1038.287160][   T55] usb 9-1: config 0 descriptor??
[ 1038.308947][   T55] usb 9-1: selecting invalid altsetting 1
[ 1038.421759][   T55] dvb_ttusb_budget: ttusb_init_controller: error
[ 1038.428746][   T55] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[ 1039.632216][   T55] DVB: Unable to find symbol cx22700_attach()
[ 1039.908083][   T55] DVB: Unable to find symbol tda10046_attach()
[ 1039.938464][   T55] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[ 1039.977876][   T55] usb 9-1: USB disconnect, device number 42
[ 1040.391982][   T10] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[ 1040.522114][   T55] usb 9-1: new high-speed USB device number 43 using dummy_hcd
[ 1040.544819][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1040.556878][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1040.568644][   T10] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[ 1040.578814][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1040.592919][   T10] usb 6-1: config 0 descriptor??
[ 1040.703509][ T5896] usb 10-1: new high-speed USB device number 37 using dummy_hcd
[ 1040.714582][   T55] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1040.724225][   T55] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1040.732014][ T7958] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[ 1040.732896][   T55] usb 9-1: Product: syz
[ 1040.807313][   T55] usb 9-1: Manufacturer: syz
[ 1040.827163][   T55] usb 9-1: SerialNumber: syz
[ 1040.993722][ T5896] usb 10-1: config 0 has an invalid interface number: 1 but max is 0
[ 1041.003147][ T5896] usb 10-1: config 0 has no interface number 0
[ 1041.044862][ T5896] usb 10-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1041.066976][ T5896] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1041.098877][ T7958] usb 4-1: Using ep0 maxpacket: 16
[ 1041.119430][ T5896] usb 10-1: Product: syz
[ 1041.123961][ T7958] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1041.132510][ T5896] usb 10-1: Manufacturer: syz
[ 1041.141354][ T5896] usb 10-1: SerialNumber: syz
[ 1041.146448][ T7958] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1041.160125][ T7958] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1041.170269][ T5896] usb 10-1: config 0 descriptor??
[ 1041.181643][   T55] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[ 1041.194869][ T7958] usb 4-1: string descriptor 0 read error: -22
[ 1041.195458][   T55] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71
[ 1041.201198][ T7958] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1041.213870][   T55] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1041.221570][ T7958] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1041.245957][ T7958] usb 4-1: 0:2 : does not exist
[ 1041.271262][   T55] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71
[ 1041.304598][   T55] usb 9-1: USB disconnect, device number 43
[ 1041.610789][ T5896] usb 10-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[ 1041.723090][ T5896] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1041.754013][ T5896] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[ 1041.824829][ T5896] usb 10-1: media controller created
[ 1041.996419][T17434] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2579'.
[ 1042.314446][ T5896] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1042.912616][T17439] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null.
[ 1042.963202][ T5896] i2c i2c-1: ec100: i2c rd failed=-32 reg=33
[ 1043.018766][T17439] overlayfs: overlapping lowerdir path
[ 1043.229094][T17421] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 1043.279778][   T10] hid-led 0003:27B8:01ED.000D: probe with driver hid-led failed with error -71
[ 1043.312527][ T7958] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5)
[ 1043.326244][ T7958] usb 4-1: Warning! Unlikely big volume range (=16302), cval->res is probably wrong.
[ 1043.367497][   T10] usb 6-1: USB disconnect, device number 31
[ 1043.373789][ T7958] usb 4-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/16302/1
[ 1044.012159][ T5896] usb 10-1: USB disconnect, device number 37
[ 1044.033385][ T7958] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5)
[ 1044.059676][ T7958] usb 4-1: 5:0: failed to get current value for ch 1 (-22)
[ 1044.165462][ T7958] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5)
[ 1044.252022][ T7958] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5)
[ 1044.295805][ T7958] usb 4-1: USB disconnect, device number 50
[ 1044.389820][T17454] SQUASHFS error: Failed to read block 0x0: -5
[ 1044.397329][T17454] unable to read squashfs_super_block
[ 1045.248887][   T30] audit: type=1400 audit(1761123434.711:896): avc:  denied  { ioctl } for  pid=17457 comm="syz.9.2587" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x7040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[ 1045.972068][   T30] audit: type=1400 audit(1761123435.431:897): avc:  denied  { create } for  pid=17469 comm="syz.4.2590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[ 1046.589416][T17482] Bluetooth: hci0: expected 2 bytes, got 7 bytes
[ 1046.659130][   T30] audit: type=1400 audit(1761123436.121:898): avc:  denied  { wake_alarm } for  pid=17480 comm="syz.3.2593" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1051.917116][   T30] audit: type=1400 audit(1761123441.381:899): avc:  denied  { read } for  pid=17527 comm="syz.9.2603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[ 1052.872359][   T55] usb 9-1: new high-speed USB device number 44 using dummy_hcd
[ 1053.624823][   T55] usb 9-1: Using ep0 maxpacket: 16
[ 1053.780597][   T55] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1053.816154][   T55] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1053.986831][   T55] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1054.032732][   T55] usb 9-1: string descriptor 0 read error: -22
[ 1054.039797][   T55] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1054.057764][   T55] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1054.079093][   T55] usb 9-1: 0:2 : does not exist
[ 1054.286568][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.294691][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 1055.623976][T17537] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null.
[ 1055.689235][T17537] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 1055.732547][   T55] usb 9-1: 5:0: cannot get min/max values for control 2 (id 5)
[ 1055.820386][   T55] usb 9-1: Warning! Unlikely big volume range (=16302), cval->res is probably wrong.
[ 1055.837502][   T55] usb 9-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/16302/1
[ 1055.850984][   T55] usb 9-1: 5:0: cannot get min/max values for control 3 (id 5)
[ 1055.866562][   T55] usb 9-1: 5:0: failed to get current value for ch 1 (-22)
[ 1055.999476][   T55] usb 9-1: 5:0: cannot get min/max values for control 3 (id 5)
[ 1056.020977][   T55] usb 9-1: 5:0: cannot get min/max values for control 2 (id 5)
[ 1056.034566][   T55] usb 9-1: USB disconnect, device number 44
[ 1056.341965][ T5952] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[ 1056.514035][ T5952] usb 4-1: config index 0 descriptor too short (expected 23569, got 27)
[ 1056.575443][ T5952] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1056.686841][ T5952] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[ 1056.702875][ T5952] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[ 1056.711478][ T5952] usb 4-1: Manufacturer: syz
[ 1056.757827][ T5952] usb 4-1: config 0 descriptor??
[ 1056.893601][T17577] FAULT_INJECTION: forcing a failure.
[ 1056.893601][T17577] name failslab, interval 1, probability 0, space 0, times 0
[ 1056.907401][T17577] CPU: 0 UID: 0 PID: 17577 Comm: syz.8.2617 Not tainted syzkaller #0 PREEMPT(full) 
[ 1056.907430][T17577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1056.907438][T17577] Call Trace:
[ 1056.907443][T17577]  <TASK>
[ 1056.907448][T17577]  dump_stack_lvl+0x16c/0x1f0
[ 1056.907472][T17577]  should_fail_ex+0x512/0x640
[ 1056.907487][T17577]  ? __kmalloc_noprof+0xca/0x880
[ 1056.907501][T17577]  should_failslab+0xc2/0x120
[ 1056.907518][T17577]  __kmalloc_noprof+0xdd/0x880
[ 1056.907530][T17577]  ? do_raw_spin_lock+0x12c/0x2b0
[ 1056.907547][T17577]  ? sock_kmalloc+0x111/0x170
[ 1056.907562][T17577]  ? sock_kmalloc+0x111/0x170
[ 1056.907572][T17577]  sock_kmalloc+0x111/0x170
[ 1056.907584][T17577]  hash_alloc_result+0xd7/0x150
[ 1056.907600][T17577]  hash_sendmsg+0x6d6/0xfa0
[ 1056.907621][T17577]  ____sys_sendmsg+0xa98/0xc70
[ 1056.907633][T17577]  ? copy_msghdr_from_user+0x10a/0x160
[ 1056.907648][T17577]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1056.907667][T17577]  ___sys_sendmsg+0x134/0x1d0
[ 1056.907684][T17577]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1056.907697][T17577]  ? __lock_acquire+0x622/0x1c90
[ 1056.907731][T17577]  __sys_sendmsg+0x16d/0x220
[ 1056.907746][T17577]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1056.907772][T17577]  do_syscall_64+0xcd/0xfa0
[ 1056.907789][T17577]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1056.907801][T17577] RIP: 0033:0x7f2a4178efc9
[ 1056.907813][T17577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1056.907823][T17577] RSP: 002b:00007f2a4258d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1056.907835][T17577] RAX: ffffffffffffffda RBX: 00007f2a419e6090 RCX: 00007f2a4178efc9
[ 1056.907843][T17577] RDX: 000000000405c080 RSI: 0000200000000140 RDI: 0000000000000009
[ 1056.907850][T17577] RBP: 00007f2a4258d090 R08: 0000000000000000 R09: 0000000000000000
[ 1056.907857][T17577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1056.907864][T17577] R13: 00007f2a419e6128 R14: 00007f2a419e6090 R15: 00007ffc97f030a8
[ 1056.907880][T17577]  </TASK>
[ 1057.628742][ T5952] rc_core: IR keymap rc-hauppauge not found
[ 1057.649081][ T5952] Registered IR keymap rc-empty
[ 1057.683456][ T5952] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[ 1057.709022][ T5952] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input20
[ 1057.754503][   T30] audit: type=1400 audit(1761123447.221:900): avc:  denied  { setopt } for  pid=17569 comm="syz.3.2616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 1057.834543][    C1] igorplugusb 4-1:0.0: receive overflow, at least 3 lost
[ 1057.841672][T17586] rc rc0: two consecutive events of type space
[ 1058.127489][   T30] audit: type=1400 audit(1761123447.581:901): avc:  denied  { create } for  pid=17589 comm="syz.9.2620" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=blk_file permissive=1
[ 1058.182811][ T7958] usb 4-1: USB disconnect, device number 51
[ 1058.702736][   T30] audit: type=1400 audit(1761123448.081:902): avc:  denied  { map } for  pid=17593 comm="syz.4.2622" path="socket:[70952]" dev="sockfs" ino=70952 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[ 1059.244382][ T7958] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[ 1059.441936][ T7958] usb 6-1: Using ep0 maxpacket: 16
[ 1059.674341][ T7958] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1059.689166][ T7958] usb 6-1: config 0 has no interfaces?
[ 1059.708640][ T7958] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[ 1059.731073][ T7958] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[ 1059.764595][ T7958] usb 6-1: Product: syz
[ 1059.771027][ T7958] usb 6-1: Manufacturer: syz
[ 1059.782691][ T7958] usb 6-1: SerialNumber: syz
[ 1059.795549][ T7958] usb 6-1: config 0 descriptor??
[ 1060.295654][ T7958] usb 6-1: USB disconnect, device number 32
[ 1061.058263][T17630] syzkaller0: entered promiscuous mode
[ 1061.102588][T17630] syzkaller0: entered allmulticast mode
[ 1061.152304][ T7958] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[ 1061.180813][T17636] syzkaller0: entered promiscuous mode
[ 1061.186673][T17636] syzkaller0: entered allmulticast mode
[ 1061.303657][ T7958] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[ 1061.337108][ T7958] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[ 1061.359732][ T7958] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[ 1061.376400][ T7958] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1061.389997][ T7958] usb 4-1: Product: syz
[ 1061.402174][ T5896] usb 9-1: new high-speed USB device number 45 using dummy_hcd
[ 1061.410366][ T7958] usb 4-1: Manufacturer: syz
[ 1061.425110][ T7958] usb 4-1: SerialNumber: syz
[ 1061.433383][ T7958] usb 4-1: config 0 descriptor??
[ 1061.447787][T17627] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1061.456879][T17627] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1061.583875][ T5952] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[ 1061.650929][ T5896] usb 9-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73
[ 1061.661431][ T5896] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1061.712130][ T5896] usb 9-1: Product: syz
[ 1061.716650][ T5896] usb 9-1: Manufacturer: syz
[ 1061.717890][T17627] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1061.721306][ T5896] usb 9-1: SerialNumber: syz
[ 1061.731205][T17627] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1061.773271][ T5896] usb 9-1: config 0 descriptor??
[ 1061.779454][ T5952] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[ 1061.794116][ T5952] usb 6-1: config 0 has no interface number 0
[ 1061.810296][ T5952] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1061.830397][ T5952] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1061.855979][ T5952] usb 6-1: Product: syz
[ 1061.867209][ T5952] usb 6-1: Manufacturer: syz
[ 1061.875431][ T5952] usb 6-1: SerialNumber: syz
[ 1061.899055][ T5952] usb 6-1: config 0 descriptor??
[ 1062.071744][T17650] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2638'.
[ 1062.112752][ T5952] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[ 1062.130032][ T5952] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1062.176014][ T5952] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[ 1062.217698][ T5952] usb 6-1: media controller created
[ 1062.308880][ T5952] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1062.378994][T17653] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2636'.
[ 1062.617892][ T5896] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[ 1062.628866][ T5896] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9
[ 1062.642446][ T5896] asix 9-1:0.0: probe with driver asix failed with error -71
[ 1062.752521][ T5896] usb 9-1: USB disconnect, device number 45
[ 1062.945864][T17659] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2640'.
[ 1062.955885][T17659] FAULT_INJECTION: forcing a failure.
[ 1062.955885][T17659] name failslab, interval 1, probability 0, space 0, times 0
[ 1062.969775][T17659] CPU: 0 UID: 0 PID: 17659 Comm: syz.9.2640 Not tainted syzkaller #0 PREEMPT(full) 
[ 1062.969803][T17659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1062.969822][T17659] Call Trace:
[ 1062.969829][T17659]  <TASK>
[ 1062.969837][T17659]  dump_stack_lvl+0x16c/0x1f0
[ 1062.969870][T17659]  should_fail_ex+0x512/0x640
[ 1062.969894][T17659]  ? kmem_cache_alloc_node_noprof+0x65/0x770
[ 1062.969921][T17659]  should_failslab+0xc2/0x120
[ 1062.969950][T17659]  kmem_cache_alloc_node_noprof+0x78/0x770
[ 1062.969973][T17659]  ? __alloc_skb+0x2b2/0x380
[ 1062.970052][T17659]  ? __alloc_skb+0x2b2/0x380
[ 1062.970066][T17659]  __alloc_skb+0x2b2/0x380
[ 1062.970080][T17659]  ? __pfx___alloc_skb+0x10/0x10
[ 1062.970094][T17659]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1062.970130][T17659]  netlink_ack+0x15d/0xb80
[ 1062.970170][T17659]  netlink_rcv_skb+0x332/0x420
[ 1062.970194][T17659]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1062.970212][T17659]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1062.970234][T17659]  ? netlink_deliver_tap+0x1ae/0xd30
[ 1062.970258][T17659]  netlink_unicast+0x5aa/0x870
[ 1062.970293][T17659]  ? __pfx_netlink_unicast+0x10/0x10
[ 1062.970333][T17659]  netlink_sendmsg+0x8c8/0xdd0
[ 1062.970353][T17659]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1062.970375][T17659]  ____sys_sendmsg+0xa98/0xc70
[ 1062.970388][T17659]  ? copy_msghdr_from_user+0x10a/0x160
[ 1062.970412][T17659]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1062.970439][T17659]  ? __pfx__kstrtoull+0x10/0x10
[ 1062.970466][T17659]  ___sys_sendmsg+0x134/0x1d0
[ 1062.970487][T17659]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1062.970510][T17659]  ? find_held_lock+0x2b/0x80
[ 1062.970530][T17659]  __sys_sendmmsg+0x200/0x420
[ 1062.970557][T17659]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1062.970595][T17659]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1062.970625][T17659]  ? fput+0x9b/0xd0
[ 1062.970636][T17659]  ? ksys_write+0x1ac/0x250
[ 1062.970650][T17659]  ? __pfx_ksys_write+0x10/0x10
[ 1062.970667][T17659]  __x64_sys_sendmmsg+0x9c/0x100
[ 1062.970682][T17659]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1062.970701][T17659]  do_syscall_64+0xcd/0xfa0
[ 1062.970724][T17659]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1062.970746][T17659] RIP: 0033:0x7fd42758efc9
[ 1062.970764][T17659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1062.970775][T17659] RSP: 002b:00007fd4284e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1062.970787][T17659] RAX: ffffffffffffffda RBX: 00007fd4277e5fa0 RCX: 00007fd42758efc9
[ 1062.970795][T17659] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003
[ 1062.970802][T17659] RBP: 00007fd4284e7090 R08: 0000000000000000 R09: 0000000000000000
[ 1062.970809][T17659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1062.970816][T17659] R13: 00007fd4277e6038 R14: 00007fd4277e5fa0 R15: 00007ffefe8c9ed8
[ 1062.970837][T17659]  </TASK>
[ 1063.493040][   T30] audit: type=1400 audit(1761123452.911:904): avc:  denied  { write } for  pid=17665 comm="syz.4.2643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[ 1063.519490][   T30] audit: type=1400 audit(1761123452.911:903): avc:  denied  { write } for  pid=17665 comm="syz.4.2643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[ 1063.540138][ T5952] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[ 1063.700553][T17675] FAULT_INJECTION: forcing a failure.
[ 1063.700553][T17675] name failslab, interval 1, probability 0, space 0, times 0
[ 1063.778302][ T5952] usb 6-1: USB disconnect, device number 33
[ 1063.804721][T17675] CPU: 1 UID: 0 PID: 17675 Comm: syz.9.2645 Not tainted syzkaller #0 PREEMPT(full) 
[ 1063.804751][T17675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1063.804763][T17675] Call Trace:
[ 1063.804771][T17675]  <TASK>
[ 1063.804781][T17675]  dump_stack_lvl+0x16c/0x1f0
[ 1063.804818][T17675]  should_fail_ex+0x512/0x640
[ 1063.804844][T17675]  ? kmem_cache_alloc_node_noprof+0x65/0x770
[ 1063.804873][T17675]  should_failslab+0xc2/0x120
[ 1063.804903][T17675]  kmem_cache_alloc_node_noprof+0x78/0x770
[ 1063.804928][T17675]  ? __alloc_skb+0x2b2/0x380
[ 1063.804961][T17675]  ? __alloc_skb+0x2b2/0x380
[ 1063.804993][T17675]  __alloc_skb+0x2b2/0x380
[ 1063.805018][T17675]  ? __pfx___alloc_skb+0x10/0x10
[ 1063.805043][T17675]  ? genl_rcv_msg+0x490/0x800
[ 1063.805063][T17675]  ? genl_rcv_msg+0x4bb/0x800
[ 1063.805092][T17675]  netlink_ack+0x15d/0xb80
[ 1063.805133][T17675]  netlink_rcv_skb+0x332/0x420
[ 1063.805163][T17675]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1063.805187][T17675]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1063.805231][T17675]  ? netlink_deliver_tap+0x1ae/0xd30
[ 1063.805264][T17675]  genl_rcv+0x28/0x40
[ 1063.805284][T17675]  netlink_unicast+0x5aa/0x870
[ 1063.805318][T17675]  ? __pfx_netlink_unicast+0x10/0x10
[ 1063.805359][T17675]  netlink_sendmsg+0x8c8/0xdd0
[ 1063.805393][T17675]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1063.805433][T17675]  ____sys_sendmsg+0xa98/0xc70
[ 1063.805457][T17675]  ? copy_msghdr_from_user+0x10a/0x160
[ 1063.805483][T17675]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1063.805519][T17675]  ___sys_sendmsg+0x134/0x1d0
[ 1063.805550][T17675]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1063.805576][T17675]  ? __lock_acquire+0x622/0x1c90
[ 1063.805641][T17675]  __sys_sendmsg+0x16d/0x220
[ 1063.805671][T17675]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1063.805720][T17675]  do_syscall_64+0xcd/0xfa0
[ 1063.805743][T17675]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1063.805764][T17675] RIP: 0033:0x7fd42758efc9
[ 1063.805781][T17675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1063.805800][T17675] RSP: 002b:00007fd4284e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1063.805821][T17675] RAX: ffffffffffffffda RBX: 00007fd4277e5fa0 RCX: 00007fd42758efc9
[ 1063.805835][T17675] RDX: 0000000000004814 RSI: 0000200000001080 RDI: 0000000000000003
[ 1063.805849][T17675] RBP: 00007fd4284e7090 R08: 0000000000000000 R09: 0000000000000000
[ 1063.805862][T17675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1063.805875][T17675] R13: 00007fd4277e6038 R14: 00007fd4277e5fa0 R15: 00007ffefe8c9ed8
[ 1063.805907][T17675]  </TASK>
[ 1065.762041][ T5896] usb 9-1: new high-speed USB device number 46 using dummy_hcd
[ 1065.806288][T17695] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2650'.
[ 1065.922689][ T5896] usb 9-1: Using ep0 maxpacket: 8
[ 1065.929238][ T5896] usb 9-1: config 0 has an invalid interface number: 31 but max is 0
[ 1065.942168][ T5896] usb 9-1: config 0 has no interface number 0
[ 1065.959466][ T5896] usb 9-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[ 1065.972188][ T5896] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1066.026117][ T5896] usb 9-1: Product: syz
[ 1066.036229][ T5896] usb 9-1: Manufacturer: syz
[ 1066.041948][ T5896] usb 9-1: SerialNumber: syz
[ 1066.060731][ T5896] usb 9-1: config 0 descriptor??
[ 1066.273260][T17694] binder: BINDER_SET_CONTEXT_MGR already set
[ 1066.279317][T17694] binder: 17693:17694 ioctl 4018620d 200000000040 returned -16
[ 1066.289311][ T5896] uvcvideo 9-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[ 1066.298777][   T10] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[ 1066.308752][ T5896] uvcvideo 9-1:0.31: Entity type for entity Output 6 was not initialized!
[ 1066.322157][ T5896] uvcvideo 9-1:0.31: Failed to create links for entity 5
[ 1066.331998][ T5896] uvcvideo 9-1:0.31: Failed to register entities (-22).
[ 1066.344850][ T5896] usb 9-1: USB disconnect, device number 46
[ 1066.400805][ T7958] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71
[ 1066.442706][   T10] usb 6-1: device descriptor read/64, error -71
[ 1066.460629][ T7958] dm9601 4-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet, 06:00:00:00:00:00
[ 1066.486182][ T7958] usb 4-1: USB disconnect, device number 52
[ 1066.495079][ T7958] dm9601 4-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet
[ 1066.812142][   T10] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[ 1066.952020][   T10] usb 6-1: device descriptor read/64, error -71
[ 1067.093221][   T10] usb usb6-port1: attempt power cycle
[ 1067.200333][T17714] FAULT_INJECTION: forcing a failure.
[ 1067.200333][T17714] name failslab, interval 1, probability 0, space 0, times 0
[ 1067.248104][T17714] CPU: 1 UID: 0 PID: 17714 Comm: syz.9.2657 Not tainted syzkaller #0 PREEMPT(full) 
[ 1067.248132][T17714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1067.248144][T17714] Call Trace:
[ 1067.248151][T17714]  <TASK>
[ 1067.248160][T17714]  dump_stack_lvl+0x16c/0x1f0
[ 1067.248198][T17714]  should_fail_ex+0x512/0x640
[ 1067.248223][T17714]  ? __kmalloc_cache_noprof+0x5f/0x780
[ 1067.248248][T17714]  should_failslab+0xc2/0x120
[ 1067.248278][T17714]  __kmalloc_cache_noprof+0x72/0x780
[ 1067.248302][T17714]  ? alloc_pipe_info+0x10e/0x590
[ 1067.248335][T17714]  ? alloc_pipe_info+0x10e/0x590
[ 1067.248364][T17714]  alloc_pipe_info+0x10e/0x590
[ 1067.248395][T17714]  splice_direct_to_actor+0x77d/0xa30
[ 1067.248425][T17714]  ? __pfx_direct_splice_actor+0x10/0x10
[ 1067.248455][T17714]  ? find_held_lock+0x2b/0x80
[ 1067.248476][T17714]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 1067.248501][T17714]  ? get_pid_task+0xfc/0x250
[ 1067.248534][T17714]  do_splice_direct+0x174/0x240
[ 1067.248560][T17714]  ? __pfx_do_splice_direct+0x10/0x10
[ 1067.248588][T17714]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 1067.248616][T17714]  ? bpf_lsm_file_permission+0x9/0x10
[ 1067.248641][T17714]  ? security_file_permission+0x71/0x210
[ 1067.248679][T17714]  ? rw_verify_area+0xcf/0x6c0
[ 1067.248704][T17714]  do_sendfile+0xb06/0xe50
[ 1067.248734][T17714]  ? __pfx_do_sendfile+0x10/0x10
[ 1067.248758][T17714]  ? __fget_files+0x20e/0x3c0
[ 1067.248792][T17714]  __x64_sys_sendfile64+0x1d8/0x220
[ 1067.248822][T17714]  ? ksys_write+0x1ac/0x250
[ 1067.248847][T17714]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 1067.248883][T17714]  do_syscall_64+0xcd/0xfa0
[ 1067.248902][T17714]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1067.248921][T17714] RIP: 0033:0x7fd42758efc9
[ 1067.248937][T17714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1067.248957][T17714] RSP: 002b:00007fd4284e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 1067.248976][T17714] RAX: ffffffffffffffda RBX: 00007fd4277e5fa0 RCX: 00007fd42758efc9
[ 1067.248989][T17714] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007
[ 1067.248999][T17714] RBP: 00007fd4284e7090 R08: 0000000000000000 R09: 0000000000000000
[ 1067.249010][T17714] R10: 000000040000f63c R11: 0000000000000246 R12: 0000000000000001
[ 1067.249022][T17714] R13: 00007fd4277e6038 R14: 00007fd4277e5fa0 R15: 00007ffefe8c9ed8
[ 1067.249050][T17714]  </TASK>
[ 1067.431974][   T10] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[ 1067.877396][   T10] usb 6-1: device descriptor read/8, error -71
[ 1068.480108][T17726] FAULT_INJECTION: forcing a failure.
[ 1068.480108][T17726] name failslab, interval 1, probability 0, space 0, times 0
[ 1068.493580][T17726] CPU: 1 UID: 0 PID: 17726 Comm: syz.3.2661 Not tainted syzkaller #0 PREEMPT(full) 
[ 1068.493610][T17726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1068.493624][T17726] Call Trace:
[ 1068.493632][T17726]  <TASK>
[ 1068.493641][T17726]  dump_stack_lvl+0x16c/0x1f0
[ 1068.493679][T17726]  should_fail_ex+0x512/0x640
[ 1068.493705][T17726]  ? fs_reclaim_acquire+0xae/0x150
[ 1068.493737][T17726]  should_failslab+0xc2/0x120
[ 1068.493767][T17726]  __kmalloc_noprof+0xdd/0x880
[ 1068.493791][T17726]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[ 1068.493827][T17726]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[ 1068.493855][T17726]  tomoyo_realpath_from_path+0xc2/0x6e0
[ 1068.493887][T17726]  ? tomoyo_profile+0x47/0x60
[ 1068.493911][T17726]  tomoyo_path_number_perm+0x245/0x580
[ 1068.493936][T17726]  ? tomoyo_path_number_perm+0x237/0x580
[ 1068.493966][T17726]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1068.493995][T17726]  ? find_held_lock+0x2b/0x80
[ 1068.494045][T17726]  ? find_held_lock+0x2b/0x80
[ 1068.494064][T17726]  ? hook_file_ioctl_common+0x145/0x410
[ 1068.494094][T17726]  ? __fget_files+0x20e/0x3c0
[ 1068.494127][T17726]  security_file_ioctl+0x9b/0x240
[ 1068.494158][T17726]  __x64_sys_ioctl+0xb7/0x210
[ 1068.494185][T17726]  do_syscall_64+0xcd/0xfa0
[ 1068.494208][T17726]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1068.494231][T17726] RIP: 0033:0x7f032938efc9
[ 1068.494248][T17726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1068.494267][T17726] RSP: 002b:00007f032a274038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1068.494287][T17726] RAX: ffffffffffffffda RBX: 00007f03295e5fa0 RCX: 00007f032938efc9
[ 1068.494302][T17726] RDX: 0000200000000100 RSI: 000000008050640a RDI: 0000000000000003
[ 1068.494316][T17726] RBP: 00007f032a274090 R08: 0000000000000000 R09: 0000000000000000
[ 1068.494328][T17726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1068.494341][T17726] R13: 00007f03295e6038 R14: 00007f03295e5fa0 R15: 00007ffd73b3da08
[ 1068.494372][T17726]  </TASK>
[ 1068.494382][T17726] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1068.621997][   T10] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[ 1068.850017][   T10] usb 6-1: device descriptor read/8, error -71
[ 1068.860890][T17722] openvswitch: netlink: Missing valid actions attribute.
[ 1068.868095][T17722] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1068.963174][   T10] usb usb6-port1: unable to enumerate USB device
[ 1069.243217][   T30] audit: type=1400 audit(1761123458.701:905): avc:  denied  { map } for  pid=17728 comm="syz.3.2662" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[ 1069.742390][   T10] usb 9-1: new high-speed USB device number 47 using dummy_hcd
[ 1069.891932][   T10] usb 9-1: Using ep0 maxpacket: 16
[ 1069.898964][   T10] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1069.908344][   T10] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1069.924018][   T10] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1070.014929][   T10] usb 9-1: string descriptor 0 read error: -22
[ 1070.021264][   T10] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1070.044734][T17750] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2667'.
[ 1070.071977][   T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1070.162500][   T10] usb 9-1: 0:2 : does not exist
[ 1070.977812][   T10] usb 9-1: 5:0: cannot get min/max values for control 2 (id 5)
[ 1070.985650][   T10] usb 9-1: Warning! Unlikely big volume range (=16302), cval->res is probably wrong.
[ 1071.007313][   T10] usb 9-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/16302/1
[ 1071.148358][   T10] usb 9-1: 5:0: cannot get min/max values for control 3 (id 5)
[ 1071.162030][ T5952] usb 10-1: new high-speed USB device number 38 using dummy_hcd
[ 1071.164878][   T10] usb 9-1: 5:0: failed to get current value for ch 1 (-22)
[ 1071.683522][ T5952] usb 10-1: config 0 interface 0 has no altsetting 0
[ 1071.699325][ T5952] usb 10-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[ 1071.711834][ T5952] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1071.751412][ T5952] usb 10-1: config 0 descriptor??
[ 1071.767321][   T10] usb 9-1: 5:0: cannot get min/max values for control 3 (id 5)
[ 1071.919782][   T10] usb 9-1: 5:0: cannot get min/max values for control 2 (id 5)
[ 1071.934532][   T10] usb 9-1: USB disconnect, device number 47
[ 1071.963636][T17767] comedi: valid board names for 8255 driver are:
[ 1071.969991][T17767]  8255
[ 1071.973001][T17767] comedi: valid board names for vmk80xx driver are:
[ 1071.979636][T17767]  vmk80xx
[ 1071.982828][T17767] comedi: valid board names for usbduxsigma driver are:
[ 1071.989765][T17767]  usbduxsigma
[ 1071.993271][T17767] comedi: valid board names for usbduxfast driver are:
[ 1072.000116][T17767]  usbduxfast
[ 1072.003483][T17767] comedi: valid board names for usbdux driver are:
[ 1072.009986][T17767]  usbdux
[ 1072.013814][T17767] comedi: valid board names for ni6501 driver are:
[ 1072.020334][T17767]  ni6501
[ 1072.023337][T17767] comedi: valid board names for dt9812 driver are:
[ 1072.029841][T17767]  dt9812
[ 1072.032846][T17767] comedi: valid board names for ni_labpc_cs driver are:
[ 1072.039786][T17767]  ni_labpc_cs
[ 1072.043237][T17767] comedi: valid board names for ni_daq_700 driver are:
[ 1072.050094][T17767]  ni_daq_700
[ 1072.053420][T17767] comedi: valid board names for labpc_pci driver are:
[ 1072.060401][T17767]  labpc_pci
[ 1072.063662][T17767] comedi: valid board names for adl_pci9118 driver are:
[ 1072.070601][T17767]  pci9118dg
[ 1072.073866][T17767]  pci9118hg
[ 1072.077062][T17767]  pci9118hr
[ 1072.080260][T17767] comedi: valid board names for 8255_pci driver are:
[ 1072.086980][T17767]  8255_pci
[ 1072.090086][T17767] comedi: valid board names for s526 driver are:
[ 1072.096493][T17767]  s526
[ 1072.099253][T17767] comedi: valid board names for multiq3 driver are:
[ 1072.105926][T17767]  multiq3
[ 1072.108946][T17767] comedi: valid board names for pcmuio driver are:
[ 1072.115495][T17767]  pcmuio48
[ 1072.118602][T17767]  pcmuio96
[ 1072.121709][T17767] comedi: valid board names for pcmmio driver are:
[ 1072.128343][T17767]  pcmmio
[ 1072.131277][T17767] comedi: valid board names for pcmda12 driver are:
[ 1072.137923][T17767]  pcmda12
[ 1072.140939][T17767] comedi: valid board names for pcmad driver are:
[ 1072.147417][T17767]  pcmad12
[ 1072.150437][T17767]  pcmad16
[ 1072.153500][T17767] comedi: valid board names for ni_labpc driver are:
[ 1072.160386][T17767]  lab-pc-1200
[ 1072.163854][T17767]  lab-pc-1200ai
[ 1072.167395][T17767]  lab-pc+
[ 1072.170414][T17767] comedi: valid board names for atmio16 driver are:
[ 1072.177058][T17767]  atmio16
[ 1072.180074][T17767]  atmio16d
[ 1072.183267][T17767] comedi: valid board names for ni_at_ao driver are:
[ 1072.189933][T17767]  at-ao-6
[ 1072.192987][T17767]  at-ao-10
[ 1072.196088][T17767] comedi: valid board names for ni_at_a2150 driver are:
[ 1072.203176][T17767]  ni_at_a2150
[ 1072.206547][T17767] comedi: valid board names for adq12b driver are:
[ 1072.213079][T17767]  adq12b
[ 1072.216011][T17767] comedi: valid board names for mpc624 driver are:
[ 1072.222589][T17767]  mpc624
[ 1072.225525][T17767] comedi: valid board names for c6xdigio driver are:
[ 1072.232222][T17767]  c6xdigio
[ 1072.235330][T17767] comedi: valid board names for aio_iiro_16 driver are:
[ 1072.242340][T17767]  aio_iiro_16
[ 1072.245715][T17767] comedi: valid board names for aio_aio12_8 driver are:
[ 1072.252732][T17767]  aio_aio12_8
[ 1072.256106][T17767]  aio_ai12_8
[ 1072.259391][T17767]  aio_ao12_4
[ 1072.262988][T17767] comedi: valid board names for fl512 driver are:
[ 1072.269409][T17767]  fl512
[ 1072.272311][T17767] comedi: valid board names for dmm32at driver are:
[ 1072.278896][T17767]  dmm32at
[ 1072.281999][T17767] comedi: valid board names for dt282x driver are:
[ 1072.288500][T17767]  dt2821
[ 1072.291437][T17767]  dt2821-f
[ 1072.294581][T17767]  dt2821-g
[ 1072.297689][T17767]  dt2823
[ 1072.300619][T17767]  dt2824-pgh
[ 1072.303966][T17767]  dt2824-pgl
[ 1072.307241][T17767]  dt2825
[ 1072.310171][T17767]  dt2827
[ 1072.313163][T17767]  dt2828
[ 1072.316097][T17767]  dt2829
[ 1072.319023][T17767]  dt21-ez
[ 1072.322083][T17767]  dt23-ez
[ 1072.325124][T17767]  dt24-ez
[ 1072.328140][T17767]  dt24-ez-pgl
[ 1072.331532][T17767] comedi: valid board names for dt2817 driver are:
[ 1072.338078][T17767]  dt2817
[ 1072.341012][T17767] comedi: valid board names for dt2815 driver are:
[ 1072.347616][T17767]  dt2815
[ 1072.350548][T17767] comedi: valid board names for dt2814 driver are:
[ 1072.357079][T17767]  dt2814
[ 1072.360006][T17767] comedi: valid board names for dt2811 driver are:
[ 1072.366777][T17767]  dt2811-pgh
[ 1072.370058][T17767]  dt2811-pgl
[ 1072.373388][T17767] comedi: valid board names for dt2801 driver are:
[ 1072.379876][T17767]  dt2801
[ 1072.382841][T17767] comedi: valid board names for das6402 driver are:
[ 1072.389415][T17767]  das6402-12
[ 1072.392713][T17767]  das6402-16
[ 1072.395984][T17767] comedi: valid board names for das1800 driver are:
[ 1072.402645][T17767]  das-1701st
[ 1072.405920][T17767]  das-1701st-da
[ 1072.409450][T17767]  das-1702st
[ 1072.412765][T17767]  das-1702st-da
[ 1072.416297][T17767]  das-1702hr
[ 1072.419567][T17767]  das-1702hr-da
[ 1072.423182][T17767]  das-1701ao
[ 1072.426455][T17767]  das-1702ao
[ 1072.429722][T17767]  das-1801st
[ 1072.433023][T17767]  das-1801st-da
[ 1072.436559][T17767]  das-1802st
[ 1072.439834][T17767]  das-1802st-da
[ 1072.443405][T17767]  das-1802hr
[ 1072.446678][T17767]  das-1802hr-da
[ 1072.450210][T17767]  das-1801hc
[ 1072.453530][T17767]  das-1802hc
[ 1072.456800][T17767]  das-1801ao
[ 1072.460069][T17767]  das-1802ao
[ 1072.463385][T17767] comedi: valid board names for das800 driver are:
[ 1072.470100][T17767]  das-800
[ 1072.473148][T17767]  cio-das800
[ 1072.476421][T17767]  das-801
[ 1072.479430][T17767]  cio-das801
[ 1072.482766][T17767]  das-802
[ 1072.485778][T17767]  cio-das802
[ 1072.489048][T17767]  cio-das802/16
[ 1072.492628][T17767] comedi: valid board names for isa-das08 driver are:
[ 1072.499377][T17767]  isa-das08
[ 1072.502613][T17767]  das08-pgm
[ 1072.505797][T17767]  das08-pgh
[ 1072.508982][T17767]  das08-pgl
[ 1072.512199][T17767]  das08-aoh
[ 1072.515384][T17767]  das08-aol
[ 1072.518566][T17767]  das08-aom
[ 1072.521750][T17767]  das08/jr-ao
[ 1072.525237][T17767]  das08jr-16-ao
[ 1072.528773][T17767]  pc104-das08
[ 1072.532160][T17767]  das08jr/16
[ 1072.535436][T17767] comedi: valid board names for das16m1 driver are:
[ 1072.542070][T17767]  das16m1
[ 1072.545087][T17767] comedi: valid board names for dac02 driver are:
[ 1072.551489][T17767]  dac02
[ 1072.554371][T17767] comedi: valid board names for rti802 driver are:
[ 1072.560866][T17767]  rti802
[ 1072.563834][T17767] comedi: valid board names for rti800 driver are:
[ 1072.570531][T17767]  rti800
[ 1072.573497][T17767]  rti815
[ 1072.576420][T17767] comedi: valid board names for pcm3724 driver are:
[ 1072.583046][T17767]  pcm3724
[ 1072.586056][T17767] comedi: valid board names for pcl818 driver are:
[ 1072.592592][T17767]  pcl818l
[ 1072.595605][T17767]  pcl818h
[ 1072.598613][T17767]  pcl818hd
[ 1072.601707][T17767]  pcl818hg
[ 1072.604841][T17767]  pcl818
[ 1072.607766][T17767]  pcl718
[ 1072.610687][T17767]  pcm3718
[ 1072.613744][T17767] comedi: valid board names for pcl816 driver are:
[ 1072.620231][T17767]  pcl816
[ 1072.623216][T17767]  pcl814b
[ 1072.626228][T17767] comedi: valid board names for pcl812 driver are:
[ 1072.632761][T17767]  pcl812
[ 1072.635686][T17767]  pcl812pg
[ 1072.638781][T17767]  acl8112pg
[ 1072.642116][T17767]  acl8112dg
[ 1072.645305][T17767]  acl8112hg
[ 1072.648490][T17767]  a821pgl
[ 1072.651497][T17767]  a821pglnda
[ 1072.654822][T17767]  a821pgh
[ 1072.657832][T17767]  a822pgl
[ 1072.660841][T17767]  a822pgh
[ 1072.663914][T17767]  a823pgl
[ 1072.666929][T17767]  a823pgh
[ 1072.669939][T17767]  pcl813
[ 1072.673168][T17767]  pcl813b
[ 1072.676187][T17767]  acl8113
[ 1072.679196][T17767]  iso813
[ 1072.682341][T17767]  acl8216
[ 1072.685355][T17767]  a826pg
[ 1072.688279][T17767] comedi: valid board names for pcl730 driver are:
[ 1072.694821][T17767]  pcl730
[ 1072.697748][T17767]  iso730
[ 1072.700668][T17767]  acl7130
[ 1072.703719][T17767]  pcm3730
[ 1072.706729][T17767]  pcl725
[ 1072.709651][T17767]  p8r8dio
[ 1072.712729][T17767]  acl7225b
[ 1072.715825][T17767]  p16r16dio
[ 1072.719004][T17767]  pcl733
[ 1072.721962][T17767]  pcl734
[ 1072.724889][T17767]  opmm-1616-xt
[ 1072.728334][T17767]  pearl-mm-p
[ 1072.731601][T17767]  ir104-pbf
[ 1072.734830][T17767] comedi: valid board names for pcl726 driver are:
[ 1072.741321][T17767]  pcl726
[ 1072.744281][T17767]  pcl727
[ 1072.747202][T17767]  pcl728
[ 1072.750120][T17767]  acl6126
[ 1072.753179][T17767]  acl6128
[ 1072.756189][T17767] comedi: valid board names for pcl724 driver are:
[ 1072.763241][T17767]  pcl724
[ 1072.766171][T17767]  pcl722
[ 1072.769099][T17767]  pcl731
[ 1072.772077][T17767]  acl7122
[ 1072.775302][T17767]  acl7124
[ 1072.778316][T17767]  pet48dio
[ 1072.781411][T17767]  pcmio48
[ 1072.784468][T17767]  onyx-mm-dio
[ 1072.787825][T17767] comedi: valid board names for pcl711 driver are:
[ 1072.794363][T17767]  pcl711
[ 1072.797290][T17767]  pcl711b
[ 1072.800295][T17767]  acl8112hg
[ 1072.803517][T17767]  acl8112dg
[ 1072.806706][T17767] comedi: valid board names for amplc_pc263 driver are:
[ 1072.813686][T17767]  pc263
[ 1072.816520][T17767] comedi: valid board names for amplc_pc236 driver are:
[ 1072.823487][T17767]  pc36at
[ 1072.826414][T17767] comedi: valid board names for amplc_dio200 driver are:
[ 1072.833457][T17767]  pc212e
[ 1072.836380][T17767]  pc214e
[ 1072.839298][T17767]  pc215e
[ 1072.842741][T17767]  pc218e
[ 1072.845668][T17767]  pc272e
[ 1072.848589][T17767] comedi: valid board names for comedi_parport driver are:
[ 1072.855834][T17767]  comedi_parport
[ 1072.859450][T17767] comedi: valid board names for comedi_test driver are:
[ 1072.866412][T17767]  comedi_test
[ 1072.869783][T17767] comedi: valid board names for comedi_bond driver are:
[ 1072.876729][T17767]  comedi_bond
[ 1072.910335][ T5952]  (null): keene_cmd_main failed (-110)
[ 1072.927681][   T30] audit: type=1400 audit(1761123462.381:906): avc:  denied  { setattr } for  pid=17756 comm="syz.9.2669" name="secretmem" dev="secretmem" ino=71787 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1072.927729][ T5952] video4linux radio48: keene_cmd_main failed (-32)
[ 1072.983155][ T5952] radio-keene 10-1:0.0: V4L2 device registered as radio48
[ 1073.335142][T17757] netlink: 256 bytes leftover after parsing attributes in process `syz.9.2669'.
[ 1073.361322][   T55] usb 10-1: USB disconnect, device number 38
[ 1073.620439][   T30] audit: type=1400 audit(1761123462.921:907): avc:  denied  { getopt } for  pid=17779 comm="syz.3.2675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[ 1073.645521][   T30] audit: type=1400 audit(1761123462.921:908): avc:  denied  { setopt } for  pid=17779 comm="syz.3.2675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[ 1073.712011][ T5952] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[ 1073.742003][   T10] usb 9-1: new high-speed USB device number 48 using dummy_hcd
[ 1073.873805][ T5952] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[ 1073.883185][ T5952] usb 6-1: config 0 has no interface number 0
[ 1073.892144][   T10] usb 9-1: Using ep0 maxpacket: 8
[ 1073.898869][   T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1073.913917][ T5952] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1073.940575][ T5952] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1073.953110][ T5952] usb 6-1: Product: syz
[ 1073.957506][ T5952] usb 6-1: Manufacturer: syz
[ 1073.967659][ T5952] usb 6-1: SerialNumber: syz
[ 1074.011199][   T10] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1074.027152][ T5952] usb 6-1: config 0 descriptor??
[ 1074.074291][   T10] usb 9-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00
[ 1074.125553][   T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1075.382506][ T5952] dvb_usb_ec168 6-1:0.1: probe with driver dvb_usb_ec168 failed with error -110
[ 1075.447877][   T10] usb 9-1: config 0 descriptor??
[ 1075.709304][   T10] usb 9-1: can't set config #0, error -71
[ 1075.727086][   T10] usb 9-1: USB disconnect, device number 48
[ 1076.364741][T17800] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2674'.
[ 1076.695843][T17806] openvswitch: netlink: Missing valid actions attribute.
[ 1076.701968][ T7958] usb 10-1: new high-speed USB device number 39 using dummy_hcd
[ 1076.703153][T17806] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1077.253975][ T7958] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1077.268926][ T7958] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1077.279452][ T7958] usb 10-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[ 1077.290930][ T7958] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1077.311697][ T7958] usb 10-1: config 0 descriptor??
[ 1078.082077][ T5952] usb 6-1: USB disconnect, device number 38
[ 1079.904917][   T10] usb 9-1: new high-speed USB device number 49 using dummy_hcd
[ 1080.152201][   T10] usb 9-1: Using ep0 maxpacket: 8
[ 1080.168678][   T10] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1080.223714][   T10] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1080.315597][   T10] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1080.416241][   T10] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1080.550069][   T10] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1080.618924][   T30] audit: type=1400 audit(1761123470.041:909): avc:  denied  { execute_no_trans } for  pid=17827 comm="syz.3.2686" path="/574/file0" dev="tmpfs" ino=3087 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[ 1080.681783][   T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1081.105400][   T10] usb 9-1: can't set config #16, error -71
[ 1081.140777][   T10] usb 9-1: USB disconnect, device number 49
[ 1081.285998][ T7958] hid-led 0003:27B8:01ED.000E: probe with driver hid-led failed with error -71
[ 1081.314840][ T7958] usb 10-1: USB disconnect, device number 39
[ 1081.442026][ T5952] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[ 1081.571355][T17847] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1081.623543][   T10] usb 9-1: new high-speed USB device number 50 using dummy_hcd
[ 1081.741436][ T5942] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[ 1081.802290][   T10] usb 9-1: Using ep0 maxpacket: 8
[ 1081.837661][   T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1081.879055][   T10] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1081.925027][   T10] usb 9-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00
[ 1081.967104][   T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1082.229617][   T10] usb 9-1: config 0 descriptor??
[ 1082.527597][T17842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1082.542325][ T5942] usb 6-1: Using ep0 maxpacket: 16
[ 1082.571472][T17842] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1082.647002][ T5942] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1082.657834][ T5942] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1082.671738][ T5942] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1082.684971][ T5942] usb 6-1: string descriptor 0 read error: -22
[ 1082.695229][ T5942] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1082.706405][ T5942] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1082.744191][ T5942] usb 6-1: 0:2 : does not exist
[ 1082.944577][   T10] gembird 0003:11FF:3331.000F: unknown main item tag 0x1
[ 1082.958507][   T10] gembird 0003:11FF:3331.000F: hidraw0: USB HID v0.00 Device [HID 11ff:3331] on usb-dummy_hcd.8-1/input0
[ 1083.561176][   T30] audit: type=1400 audit(1761123473.001:910): avc:  denied  { write } for  pid=17859 comm="syz.4.2695" lport=47492 faddr=::ffff:100.1.1.2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[ 1083.776561][ T5942] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5)
[ 1083.820516][ T5942] usb 6-1: Warning! Unlikely big volume range (=16302), cval->res is probably wrong.
[ 1083.934371][ T5942] usb 6-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/16302/1
[ 1083.952724][ T5942] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5)
[ 1083.966721][ T5942] usb 6-1: 5:0: failed to get current value for ch 1 (-22)
[ 1084.158981][ T5942] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5)
[ 1084.176776][ T5942] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5)
[ 1084.644871][ T5942] usb 6-1: USB disconnect, device number 39
[ 1084.660677][ T7958] usb 9-1: USB disconnect, device number 50
[ 1085.112524][ T7958] usb 9-1: new high-speed USB device number 51 using dummy_hcd
[ 1085.400931][T17887] netlink: 'syz.9.2702': attribute type 23 has an invalid length.
[ 1085.422204][ T7958] usb 9-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[ 1085.431362][ T7958] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1085.448745][ T7958] usb 9-1: Product: syz
[ 1085.458546][ T7958] usb 9-1: Manufacturer: syz
[ 1085.473078][ T7958] usb 9-1: SerialNumber: syz
[ 1085.491329][ T7958] usb 9-1: config 0 descriptor??
[ 1085.509471][ T7958] i2c-tiny-usb 9-1:0.0: version 6d.cc found at bus 009 address 051
[ 1085.910368][ T7958]  (null): failure reading functionality
[ 1085.922529][ T7958] i2c i2c-1: connected i2c-tiny-usb device
[ 1086.192129][T17889] binder: 17875:17889 ioctl 4018620d 0 returned -22
[ 1088.345002][T17906] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2708'.
[ 1089.241693][ T5942] usb 9-1: USB disconnect, device number 51
[ 1089.742340][ T5952] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[ 1089.782388][   T55] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[ 1089.912716][ T5952] usb 4-1: device descriptor read/64, error -71
[ 1089.952200][   T55] usb 6-1: Using ep0 maxpacket: 8
[ 1090.020706][   T55] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1090.037283][   T55] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1090.068985][   T55] usb 6-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00
[ 1090.078577][   T55] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1090.196643][   T30] audit: type=1326 audit(1761123479.601:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17921 comm="syz.8.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4178efc9 code=0x7ffc0000
[ 1090.221048][   T55] usb 6-1: config 0 descriptor??
[ 1090.234054][   T30] audit: type=1326 audit(1761123479.601:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17921 comm="syz.8.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4178efc9 code=0x7ffc0000
[ 1090.428878][   T30] audit: type=1326 audit(1761123479.601:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17921 comm="syz.8.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f2a4178efc9 code=0x7ffc0000
[ 1090.453426][   T30] audit: type=1326 audit(1761123479.601:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17921 comm="syz.8.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4178efc9 code=0x7ffc0000
[ 1090.494903][ T5952] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[ 1090.505288][T17918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1090.505434][   T30] audit: type=1326 audit(1761123479.601:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17921 comm="syz.8.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4178efc9 code=0x7ffc0000
[ 1090.542134][   T30] audit: type=1326 audit(1761123479.601:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17921 comm="syz.8.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2a4178d810 code=0x7ffc0000
[ 1090.566305][   T30] audit: type=1326 audit(1761123479.601:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17921 comm="syz.8.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4178efc9 code=0x7ffc0000
[ 1090.572390][T17918] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1090.590976][   T30] audit: type=1326 audit(1761123479.601:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17921 comm="syz.8.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f2a4178efc9 code=0x7ffc0000
[ 1090.597436][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1090.664990][ T5952] usb 4-1: device descriptor read/64, error -71
[ 1090.755857][   T30] audit: type=1326 audit(1761123479.611:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17921 comm="syz.8.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4178efc9 code=0x7ffc0000
[ 1090.779300][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1090.820667][   T30] audit: type=1326 audit(1761123479.611:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17921 comm="syz.8.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f2a4178efc9 code=0x7ffc0000
[ 1090.821029][ T5952] usb usb4-port1: attempt power cycle
[ 1090.844213][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1090.897941][T17931] FAULT_INJECTION: forcing a failure.
[ 1090.897941][T17931] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1090.911395][T17931] CPU: 0 UID: 0 PID: 17931 Comm: syz.9.2713 Not tainted syzkaller #0 PREEMPT(full) 
[ 1090.911413][T17931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1090.911425][T17931] Call Trace:
[ 1090.911432][T17931]  <TASK>
[ 1090.911440][T17931]  dump_stack_lvl+0x16c/0x1f0
[ 1090.911477][T17931]  should_fail_ex+0x512/0x640
[ 1090.911506][T17931]  _copy_from_user+0x2e/0xd0
[ 1090.911522][T17931]  copy_from_sockptr_offset.constprop.0+0x153/0x1a0
[ 1090.911538][T17931]  ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10
[ 1090.911557][T17931]  do_ipv6_setsockopt+0x86e/0x44b0
[ 1090.911584][T17931]  ? __pfx_do_ipv6_setsockopt+0x10/0x10
[ 1090.911608][T17931]  ? avc_has_perm_noaudit+0x117/0x3b0
[ 1090.911637][T17931]  ? avc_has_perm_noaudit+0x149/0x3b0
[ 1090.911656][T17931]  ? avc_has_perm+0x144/0x1f0
[ 1090.911668][T17931]  ? __pfx_avc_has_perm+0x10/0x10
[ 1090.911679][T17931]  ? get_pid_task+0x106/0x250
[ 1090.911694][T17931]  ? proc_fail_nth_write+0x9f/0x220
[ 1090.911718][T17931]  ? sock_has_perm+0x259/0x2f0
[ 1090.911742][T17931]  ? __pfx_sock_has_perm+0x10/0x10
[ 1090.911767][T17931]  ? selinux_netlbl_socket_setsockopt+0x183/0x470
[ 1090.911795][T17931]  ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10
[ 1090.911816][T17931]  ? ipv6_setsockopt+0xcb/0x170
[ 1090.911828][T17931]  ipv6_setsockopt+0xcb/0x170
[ 1090.911857][T17931]  udpv6_setsockopt+0x7d/0xd0
[ 1090.911881][T17931]  ? __pfx_sock_common_setsockopt+0x10/0x10
[ 1090.911905][T17931]  do_sock_setsockopt+0xf3/0x1d0
[ 1090.911927][T17931]  __sys_setsockopt+0x1a0/0x230
[ 1090.911958][T17931]  __x64_sys_setsockopt+0xbd/0x160
[ 1090.911983][T17931]  ? do_syscall_64+0x91/0xfa0
[ 1090.912002][T17931]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1090.912025][T17931]  do_syscall_64+0xcd/0xfa0
[ 1090.912045][T17931]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1090.912063][T17931] RIP: 0033:0x7fd42758efc9
[ 1090.912079][T17931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1090.912097][T17931] RSP: 002b:00007fd4284a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1090.912117][T17931] RAX: ffffffffffffffda RBX: 00007fd4277e6180 RCX: 00007fd42758efc9
[ 1090.912130][T17931] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 000000000000000a
[ 1090.912142][T17931] RBP: 00007fd4284a5090 R08: 0000000000000510 R09: 0000000000000000
[ 1090.912155][T17931] R10: 0000200000000d40 R11: 0000000000000246 R12: 0000000000000001
[ 1090.912168][T17931] R13: 00007fd4277e6218 R14: 00007fd4277e6180 R15: 00007ffefe8c9ed8
[ 1090.912199][T17931]  </TASK>
[ 1091.159002][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1091.331040][   T55] gembird 0003:11FF:3331.0010: unknown main item tag 0x1
[ 1091.411954][ T5952] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[ 1091.443321][   T55] gembird 0003:11FF:3331.0010: hidraw0: USB HID v0.00 Device [HID 11ff:3331] on usb-dummy_hcd.5-1/input0
[ 1091.483473][ T5952] usb 4-1: device descriptor read/8, error -71
[ 1091.772203][ T5952] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[ 1091.793688][   T55] usb 9-1: new high-speed USB device number 52 using dummy_hcd
[ 1091.801753][ T5952] usb 4-1: device descriptor read/8, error -71
[ 1091.913419][ T5952] usb usb4-port1: unable to enumerate USB device
[ 1091.953182][   T55] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[ 1091.961258][   T55] usb 9-1: config 0 has no interface number 0
[ 1091.969301][   T55] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1091.980624][   T55] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1091.988837][   T55] usb 9-1: Product: syz
[ 1091.993314][   T55] usb 9-1: Manufacturer: syz
[ 1091.997981][   T55] usb 9-1: SerialNumber: syz
[ 1092.005247][   T55] usb 9-1: config 0 descriptor??
[ 1092.215569][   T55] usb 9-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[ 1092.228737][   T55] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1092.239391][   T55] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[ 1092.247519][   T55] usb 9-1: media controller created
[ 1092.262331][   T55] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1092.469890][T17944] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2715'.
[ 1092.498956][   T10] usb 6-1: USB disconnect, device number 40
[ 1092.660547][T17950] syzkaller0: entered promiscuous mode
[ 1092.673956][T17950] syzkaller0: entered allmulticast mode
[ 1093.338261][   T55] i2c i2c-1: ec100: i2c rd failed=-110 reg=33
[ 1093.418597][   T55] usb 9-1: USB disconnect, device number 52
[ 1093.582062][ T5952] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[ 1093.627655][   T55] IPVS: starting estimator thread 0...
[ 1093.632646][T17966] FAULT_INJECTION: forcing a failure.
[ 1093.632646][T17966] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1093.647709][T17966] CPU: 0 UID: 0 PID: 17966 Comm: syz.9.2723 Not tainted syzkaller #0 PREEMPT(full) 
[ 1093.647727][T17966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1093.647735][T17966] Call Trace:
[ 1093.647739][T17966]  <TASK>
[ 1093.647744][T17966]  dump_stack_lvl+0x16c/0x1f0
[ 1093.647768][T17966]  should_fail_ex+0x512/0x640
[ 1093.647785][T17966]  _copy_from_user+0x2e/0xd0
[ 1093.647801][T17966]  move_addr_to_kernel+0x65/0x170
[ 1093.647815][T17966]  __copy_msghdr+0x386/0x470
[ 1093.647831][T17966]  copy_msghdr_from_user+0xc1/0x160
[ 1093.647846][T17966]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 1093.647869][T17966]  ___sys_sendmsg+0xfe/0x1d0
[ 1093.647885][T17966]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1093.647899][T17966]  ? __lock_acquire+0x622/0x1c90
[ 1093.647932][T17966]  __sys_sendmsg+0x16d/0x220
[ 1093.647948][T17966]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1093.647980][T17966]  do_syscall_64+0xcd/0xfa0
[ 1093.647992][T17966]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1093.648004][T17966] RIP: 0033:0x7fd42758efc9
[ 1093.648015][T17966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1093.648026][T17966] RSP: 002b:00007fd4284e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1093.648037][T17966] RAX: ffffffffffffffda RBX: 00007fd4277e5fa0 RCX: 00007fd42758efc9
[ 1093.648047][T17966] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003
[ 1093.648055][T17966] RBP: 00007fd4284e7090 R08: 0000000000000000 R09: 0000000000000000
[ 1093.648062][T17966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1093.648069][T17966] R13: 00007fd4277e6038 R14: 00007fd4277e5fa0 R15: 00007ffefe8c9ed8
[ 1093.648084][T17966]  </TASK>
[ 1093.711954][ T5952] usb 6-1: device descriptor read/64, error -71
[ 1093.716382][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1093.722494][T17967] IPVS: using max 35 ests per chain, 84000 per kthread
[ 1093.984040][ T5952] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[ 1094.142245][ T5952] usb 6-1: device descriptor read/64, error -71
[ 1094.265898][ T5952] usb usb6-port1: attempt power cycle
[ 1094.578802][T17983] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2726'.
[ 1094.621973][ T5952] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[ 1094.664851][ T5952] usb 6-1: device descriptor read/8, error -71
[ 1094.942419][ T5952] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[ 1095.103016][ T5952] usb 6-1: device descriptor read/8, error -71
[ 1095.111929][   T10] usb 10-1: new high-speed USB device number 40 using dummy_hcd
[ 1095.215096][ T5952] usb usb6-port1: unable to enumerate USB device
[ 1095.379273][   T10] usb 10-1: Using ep0 maxpacket: 16
[ 1095.436460][T17997] input: syz1 as /devices/virtual/input/input21
[ 1095.484474][T17997] binder: BINDER_SET_CONTEXT_MGR already set
[ 1095.490475][T17997] binder: 17994:17997 ioctl 4018620d 200000000040 returned -16
[ 1095.503533][T17997] binder: 17994:17997 ioctl c0306201 0 returned -14
[ 1095.550788][   T10] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1095.584702][   T10] usb 10-1: config 13 has an invalid interface number: 50 but max is 0
[ 1095.598642][   T10] usb 10-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config
[ 1095.619402][   T10] usb 10-1: config 13 has no interface number 0
[ 1095.635872][   T10] usb 10-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16
[ 1095.655308][   T10] usb 10-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1095.690725][   T10] usb 10-1: config 13 interface 50 has no altsetting 0
[ 1095.721529][   T10] usb 10-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32
[ 1095.731424][   T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1095.739713][   T10] usb 10-1: Product: syz
[ 1095.748344][   T10] usb 10-1: Manufacturer: syz
[ 1095.758116][   T10] usb 10-1: SerialNumber: syz
[ 1095.794743][T17975] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[ 1096.115811][T18004] FAULT_INJECTION: forcing a failure.
[ 1096.115811][T18004] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1096.174765][T17997] syz.4.2729 (17997): drop_caches: 2
[ 1096.199470][T18004] CPU: 1 UID: 0 PID: 18004 Comm: syz.8.2733 Not tainted syzkaller #0 PREEMPT(full) 
[ 1096.199500][T18004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1096.199513][T18004] Call Trace:
[ 1096.199523][T18004]  <TASK>
[ 1096.199534][T18004]  dump_stack_lvl+0x16c/0x1f0
[ 1096.199571][T18004]  should_fail_ex+0x512/0x640
[ 1096.199603][T18004]  _copy_to_user+0x32/0xd0
[ 1096.199632][T18004]  simple_read_from_buffer+0xcb/0x170
[ 1096.199651][T18004]  proc_fail_nth_read+0x197/0x240
[ 1096.199669][T18004]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1096.199686][T18004]  ? rw_verify_area+0xcf/0x6c0
[ 1096.199700][T18004]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1096.199729][T18004]  vfs_read+0x1e4/0xcf0
[ 1096.199758][T18004]  ? __pfx___mutex_lock+0x10/0x10
[ 1096.199780][T18004]  ? __pfx_vfs_read+0x10/0x10
[ 1096.199800][T18004]  ? __fget_files+0x20e/0x3c0
[ 1096.199815][T18004]  ? __up_read+0x180/0x750
[ 1096.199836][T18004]  ksys_read+0x12a/0x250
[ 1096.199851][T18004]  ? __pfx_ksys_read+0x10/0x10
[ 1096.199877][T18004]  ? __x64_sys_quotactl_fd+0x378/0x540
[ 1096.199911][T18004]  do_syscall_64+0xcd/0xfa0
[ 1096.199931][T18004]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1096.199943][T18004] RIP: 0033:0x7f2a4178d9dc
[ 1096.199955][T18004] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1096.199966][T18004] RSP: 002b:00007f2a425ae030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1096.199977][T18004] RAX: ffffffffffffffda RBX: 00007f2a419e5fa0 RCX: 00007f2a4178d9dc
[ 1096.199985][T18004] RDX: 000000000000000f RSI: 00007f2a425ae0a0 RDI: 0000000000000004
[ 1096.199994][T18004] RBP: 00007f2a425ae090 R08: 0000000000000000 R09: 0000000000000000
[ 1096.200006][T18004] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001
[ 1096.200019][T18004] R13: 00007f2a419e6038 R14: 00007f2a419e5fa0 R15: 00007ffc97f030a8
[ 1096.200050][T18004]  </TASK>
[ 1098.446748][   T10] usb 10-1: Quirk or no altset; falling back to MIDI 1.0
[ 1098.454445][   T10] usb 10-1: MIDIStreaming interface descriptor not found
[ 1098.483191][ T5896] usb 6-1: new high-speed USB device number 45 using dummy_hcd
[ 1098.562497][   T10] usb 10-1: USB disconnect, device number 40
[ 1098.712010][ T5896] usb 6-1: Using ep0 maxpacket: 16
[ 1098.727555][ T5896] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1098.775149][ T5896] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1098.802872][ T5896] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1098.818950][T18037] ntfs3(loop9): try to read out of volume at offset 0x0
[ 1098.846768][ T5896] usb 6-1: string descriptor 0 read error: -22
[ 1098.858153][ T5896] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1098.872261][ T5896] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1098.955001][ T5896] usb 6-1: 0:2 : does not exist
[ 1099.587152][   T30] kauditd_printk_skb: 24 callbacks suppressed
[ 1099.587194][   T30] audit: type=1400 audit(1761123488.951:945): avc:  denied  { bind } for  pid=18011 comm="syz.3.2737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1100.240747][T18044] FAULT_INJECTION: forcing a failure.
[ 1100.240747][T18044] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1100.281077][T18044] CPU: 0 UID: 0 PID: 18044 Comm: syz.9.2742 Not tainted syzkaller #0 PREEMPT(full) 
[ 1100.281105][T18044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1100.281117][T18044] Call Trace:
[ 1100.281124][T18044]  <TASK>
[ 1100.281132][T18044]  dump_stack_lvl+0x16c/0x1f0
[ 1100.281192][T18044]  should_fail_ex+0x512/0x640
[ 1100.281223][T18044]  _copy_from_iter+0x29f/0x1720
[ 1100.281258][T18044]  ? __pfx__copy_from_iter+0x10/0x10
[ 1100.281284][T18044]  ? trace_kmalloc+0x2b/0xd0
[ 1100.281314][T18044]  ? rcu_is_watching+0x12/0xc0
[ 1100.281335][T18044]  ? kfree+0x252/0x6d0
[ 1100.281364][T18044]  file_tty_write.constprop.0+0x487/0x9b0
[ 1100.281411][T18044]  vfs_write+0x7d3/0x11d0
[ 1100.281439][T18044]  ? __pfx_tty_write+0x10/0x10
[ 1100.281471][T18044]  ? __pfx_vfs_write+0x10/0x10
[ 1100.281494][T18044]  ? find_held_lock+0x2b/0x80
[ 1100.281535][T18044]  ksys_write+0x12a/0x250
[ 1100.281560][T18044]  ? __pfx_ksys_write+0x10/0x10
[ 1100.281595][T18044]  do_syscall_64+0xcd/0xfa0
[ 1100.281618][T18044]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1100.281640][T18044] RIP: 0033:0x7fd42758efc9
[ 1100.281658][T18044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1100.281677][T18044] RSP: 002b:00007fd4284e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1100.281698][T18044] RAX: ffffffffffffffda RBX: 00007fd4277e5fa0 RCX: 00007fd42758efc9
[ 1100.281712][T18044] RDX: 000000000000ff3e RSI: 0000200000001640 RDI: 0000000000000004
[ 1100.281726][T18044] RBP: 00007fd4284e7090 R08: 0000000000000000 R09: 0000000000000000
[ 1100.281743][T18044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1100.281756][T18044] R13: 00007fd4277e6038 R14: 00007fd4277e5fa0 R15: 00007ffefe8c9ed8
[ 1100.281789][T18044]  </TASK>
[ 1100.656918][ T5896] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5)
[ 1100.671444][ T5896] usb 6-1: Warning! Unlikely big volume range (=16302), cval->res is probably wrong.
[ 1100.695657][ T5896] usb 6-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/16302/1
[ 1100.733832][ T5896] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5)
[ 1100.798282][ T5896] usb 6-1: 5:0: failed to get current value for ch 1 (-22)
[ 1100.823762][ T5896] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5)
[ 1100.835831][ T5896] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5)
[ 1100.889960][ T5896] usb 6-1: USB disconnect, device number 45
[ 1100.979217][   T30] audit: type=1400 audit(1761123490.391:946): avc:  denied  { execute } for  pid=18058 comm="syz.3.2746" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[ 1101.301996][   T55] usb 10-1: new high-speed USB device number 41 using dummy_hcd
[ 1101.608329][   T55] usb 10-1: device descriptor read/64, error -71
[ 1101.650703][   T30] audit: type=1400 audit(1761123491.111:947): avc:  denied  { append } for  pid=18058 comm="syz.3.2746" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1101.674394][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1101.730691][T18072] loop6: detected capacity change from 0 to 63
[ 1102.186079][   T55] usb 10-1: new high-speed USB device number 42 using dummy_hcd
[ 1102.482694][   T55] usb 10-1: device descriptor read/64, error -71
[ 1102.872387][   T55] usb usb10-port1: attempt power cycle
[ 1103.115982][T18083] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2750'.
[ 1103.273202][   T55] usb 10-1: new high-speed USB device number 43 using dummy_hcd
[ 1103.354498][   T55] usb 10-1: device descriptor read/8, error -71
[ 1103.631949][   T55] usb 10-1: new high-speed USB device number 44 using dummy_hcd
[ 1103.672434][   T55] usb 10-1: device descriptor read/8, error -71
[ 1103.711994][ T5896] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[ 1103.786610][   T55] usb usb10-port1: unable to enumerate USB device
[ 1103.862068][ T5896] usb 4-1: Using ep0 maxpacket: 8
[ 1103.875933][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1103.970931][ T5896] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1104.098961][ T5896] usb 4-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00
[ 1104.252322][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1104.362118][ T5896] usb 4-1: config 0 descriptor??
[ 1104.725537][T18090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1104.734244][T18090] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1104.950342][ T5896] gembird 0003:11FF:3331.0011: unknown main item tag 0x1
[ 1105.030142][ T5896] gembird 0003:11FF:3331.0011: hidraw0: USB HID v0.00 Device [HID 11ff:3331] on usb-dummy_hcd.3-1/input0
[ 1105.950270][   T55] usb 10-1: new high-speed USB device number 45 using dummy_hcd
[ 1106.508206][   T30] audit: type=1400 audit(1761123495.971:948): avc:  denied  { watch watch_reads } for  pid=18127 comm="syz.5.2760" path="/syzcgroup/cpu/syz5/cgroup.procs" dev="cgroup" ino=352 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1
[ 1106.942097][ T5896] usb 6-1: new high-speed USB device number 46 using dummy_hcd
[ 1107.187676][   T55] usb 10-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1107.234430][ T5952] usb 4-1: USB disconnect, device number 58
[ 1107.246915][   T55] usb 10-1: config 0 interface 0 has no altsetting 0
[ 1107.341979][T18139] FAULT_INJECTION: forcing a failure.
[ 1107.341979][T18139] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1107.355488][T18139] CPU: 0 UID: 0 PID: 18139 Comm: syz.3.2763 Not tainted syzkaller #0 PREEMPT(full) 
[ 1107.355517][T18139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1107.355528][T18139] Call Trace:
[ 1107.355534][T18139]  <TASK>
[ 1107.355541][T18139]  dump_stack_lvl+0x16c/0x1f0
[ 1107.355575][T18139]  should_fail_ex+0x512/0x640
[ 1107.355603][T18139]  _copy_from_user+0x2e/0xd0
[ 1107.355628][T18139]  copy_from_sockptr_offset.constprop.0+0x136/0x170
[ 1107.355653][T18139]  ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10
[ 1107.355680][T18139]  ? __local_bh_enable_ip+0xa4/0x120
[ 1107.355703][T18139]  l2cap_sock_setsockopt+0x1203/0x1d90
[ 1107.355731][T18139]  ? __pfx_l2cap_sock_setsockopt+0x10/0x10
[ 1107.355756][T18139]  ? find_held_lock+0x2b/0x80
[ 1107.355777][T18139]  ? selinux_socket_setsockopt+0x6a/0x80
[ 1107.355802][T18139]  ? __pfx_l2cap_sock_setsockopt+0x10/0x10
[ 1107.355824][T18139]  do_sock_setsockopt+0xf3/0x1d0
[ 1107.355838][T18139]  __sys_setsockopt+0x1a0/0x230
[ 1107.355855][T18139]  __x64_sys_setsockopt+0xbd/0x160
[ 1107.355869][T18139]  ? do_syscall_64+0x91/0xfa0
[ 1107.355880][T18139]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1107.355891][T18139]  do_syscall_64+0xcd/0xfa0
[ 1107.355903][T18139]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1107.355921][T18139] RIP: 0033:0x7f032938efc9
[ 1107.355932][T18139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1107.355943][T18139] RSP: 002b:00007f032a253038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1107.355955][T18139] RAX: ffffffffffffffda RBX: 00007f03295e6090 RCX: 00007f032938efc9
[ 1107.355963][T18139] RDX: 0000000000000001 RSI: 0000000000000006 RDI: 000000000000000a
[ 1107.355970][T18139] RBP: 00007f032a253090 R08: 000000000000000c R09: 0000000000000000
[ 1107.355977][T18139] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001
[ 1107.355984][T18139] R13: 00007f03295e6128 R14: 00007f03295e6090 R15: 00007ffd73b3da08
[ 1107.356000][T18139]  </TASK>
[ 1107.555493][ T5896] usb 6-1: Using ep0 maxpacket: 32
[ 1107.858556][ T5896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1107.872169][ T5896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1107.888075][   T55] usb 10-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00
[ 1108.187013][ T5896] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[ 1108.200904][   T55] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1108.254431][   T55] usb 10-1: config 0 descriptor??
[ 1108.255336][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1108.298994][ T5896] usb 6-1: config 0 descriptor??
[ 1108.362999][T18141] mmap: syz.4.2764 (18141): VmData 37597184 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data.
[ 1109.322651][ T5896] savu 0003:1E7D:2D5A.0012: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0
[ 1109.466988][   T55] usb 10-1: can't set config #0, error -71
[ 1109.483488][   T55] usb 10-1: USB disconnect, device number 45
[ 1109.492265][   T10] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[ 1109.553806][   T30] audit: type=1326 audit(1761123499.021:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18150 comm="syz.8.2768" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2a4178efc9 code=0x0
[ 1109.649565][ T5896] usb 6-1: USB disconnect, device number 46
[ 1109.688034][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1109.707737][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1109.722852][   T10] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[ 1109.734875][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1110.260547][   T10] usb 4-1: config 0 descriptor??
[ 1110.614988][T18170] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[ 1110.626101][T18170] cramfs: wrong magic
[ 1110.632156][   T30] audit: type=1400 audit(1761123500.071:950): avc:  denied  { append } for  pid=18166 comm="syz.8.2773" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[ 1110.662000][ T5896] usb 10-1: new high-speed USB device number 46 using dummy_hcd
[ 1110.899572][ T5896] usb 10-1: Using ep0 maxpacket: 16
[ 1110.936887][ T5896] usb 10-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[ 1111.468304][ T5896] usb 10-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[ 1111.776653][ T5896] usb 10-1: Product: syz
[ 1111.780949][ T5896] usb 10-1: Manufacturer: syz
[ 1111.794244][ T5896] usb 10-1: SerialNumber: syz
[ 1111.801395][ T5896] usb 10-1: config 0 descriptor??
[ 1113.512172][   T10] hid-led 0003:27B8:01ED.0013: probe with driver hid-led failed with error -71
[ 1113.581912][T18173] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2774'.
[ 1113.653350][   T30] audit: type=1400 audit(1761123503.061:951): avc:  denied  { map } for  pid=18171 comm="syz.4.2774" path="socket:[74270]" dev="sockfs" ino=74270 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1113.678776][   T10] usb 4-1: USB disconnect, device number 59
[ 1113.692953][ T5896] usb 10-1: USB disconnect, device number 46
[ 1113.882308][T18195] openvswitch: netlink: Missing valid actions attribute.
[ 1113.889376][T18195] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1115.772691][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 1116.071952][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 1116.921262][T18217] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2785'.
[ 1118.392161][T18230] nbd1: detected capacity change from 0 to 549764202496
[ 1118.422310][   T55] usb 9-1: new high-speed USB device number 53 using dummy_hcd
[ 1118.485001][ T5817] block nbd1: Receive control failed (result -32)
[ 1118.641958][   T55] usb 9-1: Using ep0 maxpacket: 16
[ 1118.650728][   T55] usb 9-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[ 1118.667367][   T55] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[ 1118.691702][   T55] usb 9-1: Product: syz
[ 1118.705472][   T55] usb 9-1: Manufacturer: syz
[ 1119.229421][   T55] usb 9-1: SerialNumber: syz
[ 1119.247662][   T55] usb 9-1: config 0 descriptor??
[ 1120.323418][   T55] usb 9-1: USB disconnect, device number 53
[ 1120.448575][T18255] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2793'.
[ 1121.161946][ T5896] usb 9-1: new high-speed USB device number 54 using dummy_hcd
[ 1121.301940][ T5896] usb 9-1: device descriptor read/64, error -71
[ 1121.552256][ T5896] usb 9-1: new high-speed USB device number 55 using dummy_hcd
[ 1121.702013][ T5896] usb 9-1: device descriptor read/64, error -71
[ 1121.835702][ T5896] usb usb9-port1: attempt power cycle
[ 1122.292043][ T5896] usb 9-1: new high-speed USB device number 56 using dummy_hcd
[ 1122.332793][ T5896] usb 9-1: device descriptor read/8, error -71
[ 1123.102079][ T5896] usb 9-1: new high-speed USB device number 57 using dummy_hcd
[ 1123.230752][ T5896] usb 9-1: device descriptor read/8, error -71
[ 1123.341951][   T10] usb 10-1: new high-speed USB device number 47 using dummy_hcd
[ 1123.402652][ T5896] usb usb9-port1: unable to enumerate USB device
[ 1123.525010][   T10] usb 10-1: no configurations
[ 1123.529705][   T10] usb 10-1: can't read configurations, error -22
[ 1123.703207][   T10] usb 10-1: new high-speed USB device number 48 using dummy_hcd
[ 1123.873109][   T10] usb 10-1: no configurations
[ 1123.878131][   T10] usb 10-1: can't read configurations, error -22
[ 1123.888195][   T10] usb usb10-port1: attempt power cycle
[ 1124.591988][   T10] usb 10-1: new high-speed USB device number 49 using dummy_hcd
[ 1124.624930][   T10] usb 10-1: no configurations
[ 1124.665506][   T10] usb 10-1: can't read configurations, error -22
[ 1124.856214][   T10] usb 10-1: new high-speed USB device number 50 using dummy_hcd
[ 1124.895644][   T10] usb 10-1: no configurations
[ 1124.915112][   T10] usb 10-1: can't read configurations, error -22
[ 1124.949710][   T10] usb usb10-port1: unable to enumerate USB device
[ 1125.029302][T18300] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2806'.
[ 1126.121795][   T30] audit: type=1400 audit(1761123515.581:952): avc:  denied  { bind } for  pid=18309 comm="syz.9.2809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1126.154442][T18311] netlink: 52 bytes leftover after parsing attributes in process `syz.9.2809'.
[ 1127.201948][   T10] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[ 1127.511904][   T10] usb 6-1: Using ep0 maxpacket: 16
[ 1128.146819][   T30] audit: type=1400 audit(1761123516.991:953): avc:  denied  { ioctl } for  pid=18322 comm="syz.3.2813" path="socket:[73681]" dev="sockfs" ino=73681 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1
[ 1128.344105][   T10] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1128.414831][   T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1128.445395][   T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1129.287565][   T10] usb 6-1: string descriptor 0 read error: -22
[ 1129.296671][   T10] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1129.306371][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1129.326365][   T10] usb 6-1: 0:2 : does not exist
[ 1129.360461][T18345] binder: BINDER_SET_CONTEXT_MGR already set
[ 1129.366634][T18345] binder: 18343:18345 ioctl 4018620d 200000000040 returned -16
[ 1129.541537][   T30] audit: type=1326 audit(1761123519.001:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18344 comm="syz.3.2819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032938efc9 code=0x7ffc0000
[ 1129.576761][   T30] audit: type=1326 audit(1761123519.031:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18344 comm="syz.3.2819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f032938efc9 code=0x7ffc0000
[ 1130.112882][   T30] audit: type=1326 audit(1761123519.031:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18344 comm="syz.3.2819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032938efc9 code=0x7ffc0000
[ 1130.136356][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1130.142810][   T30] audit: type=1326 audit(1761123519.031:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18344 comm="syz.3.2819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032938efc9 code=0x7ffc0000
[ 1130.166696][   T30] audit: type=1326 audit(1761123519.031:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18344 comm="syz.3.2819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f032938d810 code=0x7ffc0000
[ 1130.212141][   T30] audit: type=1326 audit(1761123519.031:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18344 comm="syz.3.2819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032938efc9 code=0x7ffc0000
[ 1130.313443][   T30] audit: type=1326 audit(1761123519.031:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18344 comm="syz.3.2819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f032938efc9 code=0x7ffc0000
[ 1130.351937][   T30] audit: type=1326 audit(1761123519.031:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18344 comm="syz.3.2819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032938efc9 code=0x7ffc0000
[ 1130.508239][   T10] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5)
[ 1130.527093][   T10] usb 6-1: Warning! Unlikely big volume range (=16302), cval->res is probably wrong.
[ 1130.537536][   T10] usb 6-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/16302/1
[ 1130.548903][   T10] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5)
[ 1130.560861][   T10] usb 6-1: 5:0: failed to get current value for ch 1 (-22)
[ 1130.579532][   T10] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5)
[ 1130.590927][   T10] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5)
[ 1130.601191][   T10] usb 6-1: USB disconnect, device number 47
[ 1130.630132][T18365] ntfs3(loop8): try to read out of volume at offset 0x0
[ 1130.684202][   T55] usb 10-1: new high-speed USB device number 51 using dummy_hcd
[ 1130.850783][   T55] usb 10-1: config 0 has an invalid interface number: 1 but max is 0
[ 1130.864158][   T55] usb 10-1: config 0 has no interface number 0
[ 1130.886046][   T55] usb 10-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1130.903065][   T55] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1130.921339][   T55] usb 10-1: Product: syz
[ 1130.930707][   T55] usb 10-1: Manufacturer: syz
[ 1130.942142][   T55] usb 10-1: SerialNumber: syz
[ 1130.954279][   T55] usb 10-1: config 0 descriptor??
[ 1131.179050][ T5808] bridge0: port 3(syz_tun) entered disabled state
[ 1131.204192][ T5808] syz_tun (unregistering): left allmulticast mode
[ 1131.210730][ T5808] syz_tun (unregistering): left promiscuous mode
[ 1131.217897][ T5808] bridge0: port 3(syz_tun) entered disabled state
[ 1131.260570][T18372] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1131.271587][T18372] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1131.280651][T18372] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1131.288908][T18372] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1131.296916][T18372] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1131.304616][   T55] usb 10-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[ 1131.332610][   T55] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1131.347120][   T55] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[ 1131.358188][   T55] usb 10-1: media controller created
[ 1131.822704][   T55] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1132.150583][T18370] chnl_net:caif_netlink_parms(): no params data found
[ 1132.238128][T18386] syz_tun: entered allmulticast mode
[ 1132.622536][   T55] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[ 1132.704778][T18370] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1132.813581][T18370] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1132.825329][T18370] bridge_slave_0: entered allmulticast mode
[ 1132.832925][   T55] usb 10-1: USB disconnect, device number 51
[ 1132.833484][T18370] bridge_slave_0: entered promiscuous mode
[ 1132.847439][T18385] syz_tun: left allmulticast mode
[ 1132.864095][T18370] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1132.871339][T18370] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1132.879674][T18370] bridge_slave_1: entered allmulticast mode
[ 1132.887919][T18370] bridge_slave_1: entered promiscuous mode
[ 1133.107965][T18370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1133.137835][T18370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1133.219016][T18399] Bluetooth: MGMT ver 1.23
[ 1133.226740][T18370] team0: Port device team_slave_0 added
[ 1133.326903][T18372] Bluetooth: hci0: command tx timeout
[ 1133.389761][T18402] MINIX-fs: unable to read superblock
[ 1134.464074][T18370] team0: Port device team_slave_1 added
[ 1134.625189][T18370] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1134.632765][T18401] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1134.649069][T18401] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[ 1134.653691][T18370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1134.721899][T18370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1134.822708][T18370] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1134.829676][T18370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1134.985856][T18370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1135.089990][T18370] hsr_slave_0: entered promiscuous mode
[ 1135.098310][T18370] hsr_slave_1: entered promiscuous mode
[ 1135.102062][ T7958] usb 10-1: new high-speed USB device number 52 using dummy_hcd
[ 1135.114461][T18370] debugfs: 'hsr0' already exists in 'hsr'
[ 1135.169333][T18370] Cannot create hsr debugfs directory
[ 1135.245810][ T7958] usb 10-1: device descriptor read/64, error -71
[ 1135.339665][T18370] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1135.410202][T18370] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1135.501663][ T7958] usb 10-1: new high-speed USB device number 53 using dummy_hcd
[ 1135.749441][T18370] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1135.791928][ T7958] usb 10-1: device descriptor read/64, error -71
[ 1135.876984][T18370] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1135.912269][ T7958] usb usb10-port1: attempt power cycle
[ 1136.096329][T18370] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1136.107699][T18370] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1136.118386][T18370] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1136.131080][T18370] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1136.236900][T18370] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1136.253867][T18370] 8021q: adding VLAN 0 to HW filter on device team0
[ 1136.266991][T12008] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1136.271988][ T7958] usb 10-1: new high-speed USB device number 54 using dummy_hcd
[ 1136.274183][T12008] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1136.293796][ T7958] usb 10-1: device descriptor read/8, error -71
[ 1136.306688][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1136.313862][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1136.458898][T18370] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1136.494003][T18370] veth0_vlan: entered promiscuous mode
[ 1136.505972][T18370] veth1_vlan: entered promiscuous mode
[ 1136.533290][T18370] veth0_macvtap: entered promiscuous mode
[ 1136.542185][ T7958] usb 10-1: new high-speed USB device number 55 using dummy_hcd
[ 1136.543048][T18370] veth1_macvtap: entered promiscuous mode
[ 1136.566470][T18370] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1136.580185][T18370] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1136.587569][ T7958] usb 10-1: device descriptor read/8, error -71
[ 1136.599394][T12011] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1136.609087][T12011] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1136.620387][T12011] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1136.632407][ T6598] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1136.702456][ T7958] usb usb10-port1: unable to enumerate USB device
[ 1136.703697][T12038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1136.718187][T12038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1136.743211][ T6598] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1136.753725][ T6598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1137.025413][T18372] Bluetooth: hci3: Opcode 0x1003 failed: -110
[ 1138.801667][T18463] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[ 1138.818067][T18463] overlayfs: overlapping lowerdir path
[ 1139.141958][T17919] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[ 1139.322725][T17919] usb 4-1: Using ep0 maxpacket: 16
[ 1139.379108][T17919] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[ 1139.421931][T17919] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[ 1139.434095][T17919] usb 4-1: Product: syz
[ 1139.459350][T17919] usb 4-1: Manufacturer: syz
[ 1139.512060][T17919] usb 4-1: SerialNumber: syz
[ 1139.536990][T17919] usb 4-1: config 0 descriptor??
[ 1139.815268][T17919] usb 4-1: USB disconnect, device number 60
[ 1140.832907][T17919] usb 6-1: new high-speed USB device number 48 using dummy_hcd
[ 1140.972115][T17919] usb 6-1: device descriptor read/64, error -71
[ 1141.283293][T17919] usb 6-1: new high-speed USB device number 49 using dummy_hcd
[ 1141.421938][T17919] usb 6-1: device descriptor read/64, error -71
[ 1141.613953][T17919] usb usb6-port1: attempt power cycle
[ 1142.442678][T17919] usb 6-1: new high-speed USB device number 50 using dummy_hcd
[ 1142.472515][T17919] usb 6-1: device descriptor read/8, error -71
[ 1142.806106][T18520] openvswitch: netlink: Missing valid actions attribute.
[ 1142.813413][T18520] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1143.427750][T17919] usb 6-1: new high-speed USB device number 51 using dummy_hcd
[ 1144.093427][T17919] usb 6-1: device not accepting address 51, error -71
[ 1144.120810][T17919] usb usb6-port1: unable to enumerate USB device
[ 1147.932085][T16915] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[ 1148.082116][T16915] usb 4-1: device descriptor read/64, error -71
[ 1148.322229][T16915] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[ 1148.451936][T16915] usb 4-1: device descriptor read/64, error -71
[ 1148.562364][T16915] usb usb4-port1: attempt power cycle
[ 1148.961932][T16915] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[ 1149.003341][T16915] usb 4-1: device descriptor read/8, error -71
[ 1149.525064][T16915] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[ 1149.700753][T18586] Process accounting resumed
[ 1149.706432][T16915] usb 4-1: device descriptor read/8, error -71
[ 1149.846898][T16915] usb usb4-port1: unable to enumerate USB device
[ 1151.242139][   T55] usb 10-1: new high-speed USB device number 56 using dummy_hcd
[ 1151.391919][ T5952] usb 9-1: new high-speed USB device number 58 using dummy_hcd
[ 1151.413762][   T55] usb 10-1: Using ep0 maxpacket: 8
[ 1151.423584][   T55] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1151.442021][   T55] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1151.501966][   T30] kauditd_printk_skb: 12 callbacks suppressed
[ 1151.501986][   T30] audit: type=1326 audit(1761123540.931:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18632 comm="syz.3.2886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111a38efc9 code=0x7ffc0000
[ 1151.505144][   T55] usb 10-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00
[ 1151.531647][   T30] audit: type=1326 audit(1761123540.931:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18632 comm="syz.3.2886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111a38efc9 code=0x7ffc0000
[ 1151.531697][   T30] audit: type=1326 audit(1761123540.931:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18632 comm="syz.3.2886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f111a38efc9 code=0x7ffc0000
[ 1151.531736][   T30] audit: type=1326 audit(1761123540.931:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18632 comm="syz.3.2886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111a38efc9 code=0x7ffc0000
[ 1151.531778][   T30] audit: type=1326 audit(1761123540.931:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18632 comm="syz.3.2886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111a38efc9 code=0x7ffc0000
[ 1151.531879][   T30] audit: type=1326 audit(1761123540.931:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18632 comm="syz.3.2886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f111a38d810 code=0x7ffc0000
[ 1151.531920][   T30] audit: type=1326 audit(1761123540.931:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18632 comm="syz.3.2886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111a38efc9 code=0x7ffc0000
[ 1151.531962][   T30] audit: type=1326 audit(1761123540.931:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18632 comm="syz.3.2886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111a38efc9 code=0x7ffc0000
[ 1151.532004][   T30] audit: type=1326 audit(1761123540.941:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18632 comm="syz.3.2886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f111a38efc9 code=0x7ffc0000
[ 1151.532039][   T30] audit: type=1326 audit(1761123540.941:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18632 comm="syz.3.2886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111a38efc9 code=0x7ffc0000
[ 1151.612185][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1151.659389][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1151.671977][   T55] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1151.780879][ T5952] usb 9-1: config 4 has an invalid interface number: 28 but max is 0
[ 1152.025703][ T5952] usb 9-1: config 4 has no interface number 0
[ 1152.053347][ T5952] usb 9-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= a.3a
[ 1152.062666][ T5952] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1152.071148][   T55] usb 10-1: config 0 descriptor??
[ 1152.076813][ T5952] usb 9-1: Product: syz
[ 1152.081569][ T5952] usb 9-1: Manufacturer: syz
[ 1152.090089][ T5952] usb 9-1: SerialNumber: syz
[ 1152.250506][ T5952] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:4.28/input/input23
[ 1152.295096][T18620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1152.332242][T18620] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1152.780869][   T55] gembird 0003:11FF:3331.0014: unknown main item tag 0x1
[ 1152.797425][   T55] gembird 0003:11FF:3331.0014: hidraw0: USB HID v0.00 Device [HID 11ff:3331] on usb-dummy_hcd.9-1/input0
[ 1153.023912][   T55] usb 10-1: USB disconnect, device number 56
[ 1154.248030][ T5170] bcm5974 9-1:4.28: could not read from device
[ 1154.273307][ T5170] bcm5974 9-1:4.28: could not read from device
[ 1154.283553][ T5952] usb 9-1: USB disconnect, device number 58
[ 1154.292935][ T5170] bcm5974 9-1:4.28: could not read from device
[ 1154.322425][ T5170] bcm5974 9-1:4.28: could not read from device
[ 1154.593950][T18669] openvswitch: netlink: Missing valid actions attribute.
[ 1154.601113][T18669] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1155.282100][T17919] usb 6-1: new high-speed USB device number 52 using dummy_hcd
[ 1155.481976][T18435] usb 10-1: new high-speed USB device number 57 using dummy_hcd
[ 1155.612026][T17919] usb 6-1: Using ep0 maxpacket: 16
[ 1155.620166][T17919] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1155.629272][T17919] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1155.633425][T18435] usb 10-1: config 0 has an invalid interface number: 1 but max is 0
[ 1155.640006][T17919] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1155.678390][T18435] usb 10-1: config 0 has no interface number 0
[ 1155.680777][T17919] usb 6-1: string descriptor 0 read error: -22
[ 1155.692827][T17919] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1155.706201][T17919] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1155.713363][T18435] usb 10-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1155.721393][T17919] usb 6-1: 0:2 : does not exist
[ 1155.730280][T18435] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1155.761314][T18435] usb 10-1: Product: syz
[ 1155.771493][T18435] usb 10-1: Manufacturer: syz
[ 1155.776589][T18435] usb 10-1: SerialNumber: syz
[ 1155.785172][T18435] usb 10-1: config 0 descriptor??
[ 1155.997043][T18435] usb 10-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[ 1156.041627][T18435] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1156.207580][T18672] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2897'.
[ 1156.298835][T18435] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[ 1156.348448][T18435] usb 10-1: media controller created
[ 1156.536457][T18435] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1156.555721][T17919] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5)
[ 1156.572078][T17919] usb 6-1: Warning! Unlikely big volume range (=16302), cval->res is probably wrong.
[ 1156.581768][T17919] usb 6-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/16302/1
[ 1156.600153][T17919] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5)
[ 1156.619569][T17919] usb 6-1: 5:0: failed to get current value for ch 1 (-22)
[ 1156.622385][T18435] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[ 1156.784098][T17919] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5)
[ 1156.798520][T17919] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5)
[ 1156.819294][T18435] usb 10-1: USB disconnect, device number 57
[ 1157.316361][T17919] usb 6-1: USB disconnect, device number 52
[ 1157.851362][T18698] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2904'.
[ 1157.852058][T17919] usb 10-1: new high-speed USB device number 58 using dummy_hcd
[ 1157.992004][T18435] usb 6-1: new high-speed USB device number 53 using dummy_hcd
[ 1158.042331][T17919] usb 10-1: Using ep0 maxpacket: 8
[ 1158.049186][T17919] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1158.060761][T17919] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1158.074926][T17919] usb 10-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00
[ 1158.088092][T17919] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1158.108700][T17919] usb 10-1: config 0 descriptor??
[ 1158.131954][T18435] usb 6-1: device descriptor read/64, error -71
[ 1158.322803][T18690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1158.345212][T18690] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1158.402836][T18435] usb 6-1: new high-speed USB device number 54 using dummy_hcd
[ 1158.607766][T17919] gembird 0003:11FF:3331.0015: unknown main item tag 0x1
[ 1158.625776][T17919] gembird 0003:11FF:3331.0015: hidraw0: USB HID v0.00 Device [HID 11ff:3331] on usb-dummy_hcd.9-1/input0
[ 1158.682048][T18435] usb 6-1: device descriptor read/64, error -71
[ 1159.150223][ T7958] usb 10-1: USB disconnect, device number 58
[ 1159.182112][T13671] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[ 1159.253386][T18435] usb usb6-port1: attempt power cycle
[ 1159.331923][T13671] usb 4-1: Using ep0 maxpacket: 16
[ 1159.340835][T13671] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[ 1159.396942][T13671] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[ 1159.420814][T13671] usb 4-1: Product: syz
[ 1159.430946][T13671] usb 4-1: Manufacturer: syz
[ 1159.437313][T13671] usb 4-1: SerialNumber: syz
[ 1159.445529][T13671] usb 4-1: config 0 descriptor??
[ 1159.631936][T18435] usb 6-1: new high-speed USB device number 55 using dummy_hcd
[ 1159.662015][T17919] usb 9-1: new high-speed USB device number 59 using dummy_hcd
[ 1159.669801][T13671] usb 4-1: USB disconnect, device number 65
[ 1159.675967][T18435] usb 6-1: device descriptor read/8, error -71
[ 1159.827625][T17919] usb 9-1: config 2 interface 0 has no altsetting 0
[ 1159.840048][T17919] usb 9-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47
[ 1159.850586][T17919] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1159.858966][T17919] usb 9-1: Product: syz
[ 1159.863652][T17919] usb 9-1: Manufacturer: syz
[ 1159.868398][T17919] usb 9-1: SerialNumber: syz
[ 1159.932030][T18435] usb 6-1: new high-speed USB device number 56 using dummy_hcd
[ 1159.962701][T18435] usb 6-1: device descriptor read/8, error -71
[ 1160.001961][T16915] usb 10-1: new high-speed USB device number 59 using dummy_hcd
[ 1160.083026][T18716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1160.092054][T18716] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1160.092297][T18435] usb usb6-port1: unable to enumerate USB device
[ 1160.104097][T18716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1160.115185][T18716] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1160.130899][T17919] ims_pcu 9-1:2.0: Zero length descriptor
[ 1160.138447][T17919] ims_pcu 9-1:2.0: probe with driver ims_pcu failed with error -22
[ 1160.148504][T17919] usb 9-1: USB disconnect, device number 59
[ 1160.152170][T16915] usb 10-1: Using ep0 maxpacket: 8
[ 1160.161223][T16915] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 7
[ 1160.176309][T16915] usb 10-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[ 1160.186614][T16915] usb 10-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[ 1160.195459][T16915] usb 10-1: Product: syz
[ 1160.199898][T16915] usb 10-1: Manufacturer: syz
[ 1160.205891][T16915] usb 10-1: SerialNumber: syz
[ 1160.572144][T13671] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[ 1160.601964][T16915] usb 10-1: Invalid connection information received from device
[ 1160.826555][T13671] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[ 1160.935935][T13671] usb 4-1: config 0 has no interface number 0
[ 1160.947345][T13671] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1160.965646][T13671] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1160.973752][T13671] usb 4-1: Product: syz
[ 1160.977914][T13671] usb 4-1: Manufacturer: syz
[ 1160.985458][T13671] usb 4-1: SerialNumber: syz
[ 1160.985816][T16915] usb 10-1: USB disconnect, device number 59
[ 1160.992365][T13671] usb 4-1: config 0 descriptor??
[ 1161.203799][T13671] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[ 1161.220039][T13671] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1161.230498][T13671] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[ 1161.239078][T13671] usb 4-1: media controller created
[ 1161.260878][T13671] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1161.282114][T17919] usb 6-1: new high-speed USB device number 57 using dummy_hcd
[ 1161.351930][ T7958] usb 9-1: new full-speed USB device number 60 using dummy_hcd
[ 1161.404243][T18724] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2912'.
[ 1161.451929][T17919] usb 6-1: Using ep0 maxpacket: 16
[ 1161.459191][T17919] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1161.467849][T17919] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1161.480839][T17919] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1161.495027][T17919] usb 6-1: string descriptor 0 read error: -22
[ 1161.501748][T13671] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[ 1161.503428][ T7958] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[ 1161.507940][T17919] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1161.516723][ T7958] usb 9-1: config 0 has no interface number 0
[ 1161.533680][ T7958] usb 9-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[ 1161.542200][T17919] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1161.569508][ T7958] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1161.587988][T13671] usb 4-1: USB disconnect, device number 66
[ 1161.598087][T17919] usb 6-1: 0:2 : does not exist
[ 1161.599092][ T7958] usb 9-1: config 0 descriptor??
[ 1161.618600][ T7958] usb 9-1: selecting invalid altsetting 1
[ 1161.625044][ T7958] dvb_ttusb_budget: ttusb_init_controller: error
[ 1161.638321][ T7958] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[ 1161.729817][ T7958] DVB: Unable to find symbol cx22700_attach()
[ 1161.770335][ T7958] DVB: Unable to find symbol tda10046_attach()
[ 1161.780692][ T7958] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[ 1161.973767][ T7958] usb 9-1: USB disconnect, device number 60
[ 1162.060768][T13671] usb 10-1: new high-speed USB device number 60 using dummy_hcd
[ 1162.327690][T13671] usb 10-1: device descriptor read/64, error -71
[ 1162.449721][T18752] Bluetooth: hci3: Frame reassembly failed (-84)
[ 1162.518825][T17919] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5)
[ 1162.530414][T17919] usb 6-1: Warning! Unlikely big volume range (=16302), cval->res is probably wrong.
[ 1162.546313][T12045] Bluetooth: hci3: Frame reassembly failed (-84)
[ 1162.555361][T17919] usb 6-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/16302/1
[ 1162.563087][T18752] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 1162.578342][T17919] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5)
[ 1163.093792][T13671] usb 10-1: new high-speed USB device number 61 using dummy_hcd
[ 1163.109494][T17919] usb 6-1: 5:0: failed to get current value for ch 1 (-22)
[ 1163.145945][T17919] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5)
[ 1163.170236][T17919] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5)
[ 1163.186496][T17919] usb 6-1: USB disconnect, device number 57
[ 1163.286431][T13671] usb 10-1: device descriptor read/64, error -71
[ 1163.406835][T13671] usb usb10-port1: attempt power cycle
[ 1163.976540][T13671] usb 10-1: new high-speed USB device number 62 using dummy_hcd
[ 1164.034691][T13671] usb 10-1: device descriptor read/8, error -71
[ 1164.161216][T18771] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[ 1164.182024][T18771] cramfs: wrong magic
[ 1164.338589][T13671] usb 10-1: new high-speed USB device number 63 using dummy_hcd
[ 1164.472479][T13671] usb 10-1: device descriptor read/8, error -71
[ 1164.522041][ T5817] Bluetooth: hci3: command 0x1003 tx timeout
[ 1164.529793][T18372] Bluetooth: hci3: Opcode 0x1003 failed: -110
[ 1164.612986][T13671] usb usb10-port1: unable to enumerate USB device
[ 1164.619492][T18372] Bluetooth: hci0: command tx timeout
[ 1164.982755][T18778] openvswitch: netlink: Missing valid actions attribute.
[ 1164.990009][T18778] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1165.762114][T17919] usb 10-1: new high-speed USB device number 64 using dummy_hcd
[ 1166.002117][T17919] usb 10-1: Using ep0 maxpacket: 8
[ 1166.074582][T17919] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1166.160680][T17919] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1166.174639][T17919] usb 10-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00
[ 1166.222501][T17919] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1166.266892][   T30] kauditd_printk_skb: 6 callbacks suppressed
[ 1166.266908][   T30] audit: type=1400 audit(1761123555.731:990): avc:  denied  { read } for  pid=18792 comm="syz.3.2930" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[ 1166.653916][T17919] usb 10-1: config 0 descriptor??
[ 1166.667719][T18799] binder: 18792:18799 ioctl c0306201 0 returned -14
[ 1166.736749][   T30] audit: type=1400 audit(1761123555.731:991): avc:  denied  { open } for  pid=18792 comm="syz.3.2930" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[ 1166.889331][T18777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1166.944481][T18777] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1167.001932][T13671] usb 9-1: new high-speed USB device number 61 using dummy_hcd
[ 1167.152033][T13671] usb 9-1: Using ep0 maxpacket: 16
[ 1167.164197][T13671] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1167.173672][T13671] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1167.194159][T13671] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1167.246016][T17919] gembird 0003:11FF:3331.0016: unknown main item tag 0x1
[ 1167.259305][T13671] usb 9-1: string descriptor 0 read error: -22
[ 1167.266047][T13671] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1167.276185][T17919] gembird 0003:11FF:3331.0016: hidraw0: USB HID v0.00 Device [HID 11ff:3331] on usb-dummy_hcd.9-1/input0
[ 1167.297709][T13671] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1167.333881][T13671] usb 9-1: 0:2 : does not exist
[ 1167.507569][T16915] usb 10-1: USB disconnect, device number 64
[ 1168.516483][T13671] usb 9-1: 5:0: cannot get min/max values for control 2 (id 5)
[ 1168.527708][T13671] usb 9-1: Warning! Unlikely big volume range (=16302), cval->res is probably wrong.
[ 1168.547698][T13671] usb 9-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/16302/1
[ 1168.568342][T13671] usb 9-1: 5:0: cannot get min/max values for control 3 (id 5)
[ 1168.615633][T13671] usb 9-1: 5:0: failed to get current value for ch 1 (-22)
[ 1168.831728][T13671] usb 9-1: 5:0: cannot get min/max values for control 3 (id 5)
[ 1168.869133][T13671] usb 9-1: 5:0: cannot get min/max values for control 2 (id 5)
[ 1168.885376][T13671] usb 9-1: USB disconnect, device number 61
[ 1169.756278][ T5952] usb 10-1: new high-speed USB device number 65 using dummy_hcd
[ 1169.804927][T18829] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[ 1169.815695][T18829] cramfs: wrong magic
[ 1169.854332][   T30] audit: type=1400 audit(1761123559.311:992): avc:  denied  { shutdown } for  pid=18831 comm="syz.5.2938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 1169.904775][ T5952] usb 10-1: device descriptor read/64, error -71
[ 1171.442107][ T5952] usb 10-1: new high-speed USB device number 66 using dummy_hcd
[ 1171.582380][ T5952] usb 10-1: device descriptor read/64, error -71
[ 1171.709564][ T5952] usb usb10-port1: attempt power cycle
[ 1172.901951][T13671] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[ 1173.807248][T13671] usb 4-1: Using ep0 maxpacket: 32
[ 1173.831446][T13671] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1173.844880][T13671] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1173.854285][T13671] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1173.862930][T13671] usb 4-1: Product: syz
[ 1173.867100][T13671] usb 4-1: Manufacturer: syz
[ 1173.902083][ T7958] usb 6-1: new high-speed USB device number 58 using dummy_hcd
[ 1174.074120][ T7958] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[ 1174.110656][T13671] usb 4-1: SerialNumber: syz
[ 1174.118901][T13671] usb 4-1: config 0 descriptor??
[ 1174.130369][T18849] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1174.311918][ T5952] usb 10-1: new high-speed USB device number 68 using dummy_hcd
[ 1174.354060][T13671] usb 4-1: USB disconnect, device number 67
[ 1174.462980][ T5952] usb 10-1: Using ep0 maxpacket: 32
[ 1174.557625][ T5952] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1174.588336][ T5952] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1174.622708][ T5952] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1174.640592][ T5952] usb 10-1: Product: syz
[ 1174.649462][ T5952] usb 10-1: Manufacturer: syz
[ 1174.833932][ T5952] usb 10-1: SerialNumber: syz
[ 1174.846447][ T5952] usb 10-1: config 0 descriptor??
[ 1174.852773][T18867] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22
[ 1176.527690][ T7958] usb 6-1: config 0 has no interface number 0
[ 1176.535672][T16915] usb 10-1: USB disconnect, device number 68
[ 1176.699646][ T7958] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1176.728351][ T7958] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1176.860610][ T7958] usb 6-1: Product: syz
[ 1176.962624][ T7958] usb 6-1: Manufacturer: syz
[ 1176.967265][ T7958] usb 6-1: SerialNumber: syz
[ 1176.985807][ T7958] usb 6-1: config 0 descriptor??
[ 1176.999644][ T7958] usb 6-1: can't set config #0, error -71
[ 1177.015752][ T7958] usb 6-1: USB disconnect, device number 58
[ 1177.216537][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.227282][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 1177.292383][T13671] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[ 1177.552289][T13671] usb 4-1: Using ep0 maxpacket: 8
[ 1177.592221][T13671] usb 4-1: config 0 has an invalid interface number: 31 but max is 0
[ 1177.600345][T13671] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1177.616283][T13671] usb 4-1: config 0 has no interface number 0
[ 1177.627796][T13671] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[ 1177.637305][T13671] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1177.645451][T13671] usb 4-1: Product: syz
[ 1177.649935][T13671] usb 4-1: Manufacturer: syz
[ 1177.657065][T13671] usb 4-1: SerialNumber: syz
[ 1177.664655][T13671] usb 4-1: config 0 descriptor??
[ 1177.675178][T13671] uvcvideo 4-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[ 1177.705038][T13671] uvcvideo 4-1:0.31: No valid video chain found.
[ 1177.877215][T18893] binder: BINDER_SET_CONTEXT_MGR already set
[ 1177.912360][T18893] binder: 18892:18893 ioctl 4018620d 200000000040 returned -16
[ 1177.959430][ T7958] usb 4-1: USB disconnect, device number 68
[ 1179.583172][T18928] netlink: 5 bytes leftover after parsing attributes in process `syz.8.2961'.
[ 1179.583943][T18918] netlink: 9 bytes leftover after parsing attributes in process `syz.8.2961'.
[ 1179.703315][T18928] 0{X功: renamed from gretap0 (while UP)
[ 1180.116313][T18928] 0{X功: entered allmulticast mode
[ 1180.137453][T18928] A link change request failed with some changes committed already. Interface 
30{X功 may have been left with an inconsistent configuration, please check.
[ 1180.162057][T18918] 0{X功: entered promiscuous mode
[ 1180.169230][T18918] 0{X功: left allmulticast mode
[ 1181.052959][T18957] syzkaller0: entered promiscuous mode
[ 1181.072244][T18957] syzkaller0: entered allmulticast mode
[ 1181.362074][ T5952] usb 10-1: new high-speed USB device number 69 using dummy_hcd
[ 1182.065593][T18965] overlayfs: failed to resolve './file1': -2
[ 1182.107763][T18966] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns
[ 1182.116768][T18966] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer.
[ 1182.222420][   T30] audit: type=1400 audit(1761123571.691:993): avc:  denied  { create } for  pid=18964 comm="syz.4.2975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[ 1182.292267][ T5952] usb 10-1: Using ep0 maxpacket: 8
[ 1182.349355][T18976] openvswitch: netlink: Missing valid actions attribute.
[ 1182.356636][T18976] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1182.767285][ T5952] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 7
[ 1182.791615][ T5952] usb 10-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[ 1182.802396][ T5952] usb 10-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[ 1182.813798][ T5952] usb 10-1: Product: syz
[ 1182.819902][ T5952] usb 10-1: Manufacturer: syz
[ 1182.830973][ T5952] usb 10-1: SerialNumber: syz
[ 1183.101030][   T30] audit: type=1400 audit(1761123572.561:994): avc:  denied  { ioctl } for  pid=18974 comm="syz.3.2978" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[ 1183.151122][ T5952] usb 10-1: Invalid connection information received from device
[ 1183.329613][T18986] openvswitch: netlink: Missing valid actions attribute.
[ 1183.336901][T18986] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1183.784641][ T5952] usb 10-1: USB disconnect, device number 69
[ 1185.856910][T13671] usb 9-1: new high-speed USB device number 62 using dummy_hcd
[ 1186.188551][T19019] openvswitch: netlink: Missing valid actions attribute.
[ 1186.195853][T19019] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1186.641253][T13671] usb 9-1: Using ep0 maxpacket: 16
[ 1186.649018][T13671] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1186.660096][T13671] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1186.669226][T13671] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1186.687068][T13671] usb 9-1: config 0 descriptor??
[ 1186.946875][   T30] audit: type=1400 audit(1761123576.411:995): avc:  denied  { read write } for  pid=19022 comm="syz.4.2992" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[ 1186.992755][   T30] audit: type=1400 audit(1761123576.431:996): avc:  denied  { open } for  pid=19022 comm="syz.4.2992" path="/271/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[ 1187.552584][T16915] usb 10-1: new high-speed USB device number 70 using dummy_hcd
[ 1187.884083][T13671] mcp2221 0003:04D8:00DD.0017: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.8-1/input0
[ 1188.144578][    C1] ==================================================================
[ 1188.152695][    C1] BUG: KASAN: slab-out-of-bounds in mcp2221_raw_event+0x1070/0x10a0
[ 1188.160710][    C1] Read of size 1 at addr ffff888057d83fff by task syz.4.2995/19033
[ 1188.168611][    C1] 
[ 1188.170946][    C1] CPU: 1 UID: 0 PID: 19033 Comm: syz.4.2995 Not tainted syzkaller #0 PREEMPT(full) 
[ 1188.170986][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1188.171004][    C1] Call Trace:
[ 1188.171014][    C1]  <IRQ>
[ 1188.171024][    C1]  dump_stack_lvl+0x116/0x1f0
[ 1188.171068][    C1]  print_report+0xcd/0x630
[ 1188.171110][    C1]  ? __virt_addr_valid+0x81/0x610
[ 1188.171139][    C1]  ? __phys_addr+0xe8/0x180
[ 1188.171170][    C1]  ? mcp2221_raw_event+0x1070/0x10a0
[ 1188.171213][    C1]  kasan_report+0xe0/0x110
[ 1188.171257][    C1]  ? mcp2221_raw_event+0x1070/0x10a0
[ 1188.171304][    C1]  mcp2221_raw_event+0x1070/0x10a0
[ 1188.171346][    C1]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1188.171392][    C1]  __hid_input_report.constprop.0+0x314/0x450
[ 1188.171424][    C1]  ? __pfx_mcp2221_raw_event+0x10/0x10
[ 1188.171469][    C1]  hid_irq_in+0x35e/0x870
[ 1188.171516][    C1]  __usb_hcd_giveback_urb+0x38b/0x610
[ 1188.171566][    C1]  usb_hcd_giveback_urb+0x39b/0x450
[ 1188.171616][    C1]  dummy_timer+0x1809/0x3a00
[ 1188.171668][    C1]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1188.171718][    C1]  ? __pfx_dummy_timer+0x10/0x10
[ 1188.171752][    C1]  ? __pfx_dummy_timer+0x10/0x10
[ 1188.171783][    C1]  ? mark_held_locks+0x49/0x80
[ 1188.171813][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1188.171848][    C1]  ? __pfx_dummy_timer+0x10/0x10
[ 1188.171873][    C1]  __hrtimer_run_queues+0x202/0xad0
[ 1188.171918][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[ 1188.171962][    C1]  ? read_tsc+0x9/0x20
[ 1188.171994][    C1]  hrtimer_run_softirq+0x17d/0x350
[ 1188.172034][    C1]  handle_softirqs+0x219/0x8e0
[ 1188.172058][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[ 1188.172084][    C1]  __irq_exit_rcu+0x109/0x170
[ 1188.172107][    C1]  irq_exit_rcu+0x9/0x30
[ 1188.172128][    C1]  sysvec_apic_timer_interrupt+0xa4/0xc0
[ 1188.172165][    C1]  </IRQ>
[ 1188.172175][    C1]  <TASK>
[ 1188.172183][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1188.172215][    C1] RIP: 0010:__sanitizer_cov_trace_pc+0x17/0x70
[ 1188.172242][    C1] Code: 02 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 34 24 65 48 8b 15 b8 a5 e7 11 65 8b 05 c9 a5 e7 11 <a9> 00 01 ff 00 74 1d f6 c4 01 74 43 a9 00 00 0f 00 75 3c a9 00 00
[ 1188.172272][    C1] RSP: 0018:ffffc9000359f830 EFLAGS: 00000246
[ 1188.172296][    C1] RAX: 0000000080000000 RBX: 0000000000000000 RCX: ffffc900158f8000
[ 1188.172314][    C1] RDX: ffff888030f5c900 RSI: ffffffff81857f9a RDI: 0000000000000000
[ 1188.172333][    C1] RBP: ffff888030f5c900 R08: 0000000000000001 R09: 0000000000000000
[ 1188.172352][    C1] R10: ffffc9000359f928 R11: 0000000000000001 R12: ffff888036edc988
[ 1188.172370][    C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888073ff6500
[ 1188.172394][    C1]  ? pid_vnr+0x1a/0x220
[ 1188.172429][    C1]  pid_vnr+0x1a/0x220
[ 1188.172462][    C1]  __unix_dgram_recvmsg+0x5d4/0xc30
[ 1188.172505][    C1]  ? __pfx___unix_dgram_recvmsg+0x10/0x10
[ 1188.172543][    C1]  ? __lock_acquire+0xb8a/0x1c90
[ 1188.172585][    C1]  ? iovec_from_user+0xbb/0x140
[ 1188.172626][    C1]  unix_dgram_recvmsg+0xd0/0x110
[ 1188.172673][    C1]  ____sys_recvmsg+0x5f9/0x6b0
[ 1188.172707][    C1]  ? __pfx_____sys_recvmsg+0x10/0x10
[ 1188.172742][    C1]  ? kfree+0x252/0x6d0
[ 1188.172776][    C1]  ___sys_recvmsg+0x114/0x1a0
[ 1188.172815][    C1]  ? __pfx____sys_recvmsg+0x10/0x10
[ 1188.172865][    C1]  ? __pfx___might_resched+0x10/0x10
[ 1188.172896][    C1]  do_recvmmsg+0x2fe/0x750
[ 1188.172938][    C1]  ? __pfx_do_recvmmsg+0x10/0x10
[ 1188.172978][    C1]  ? lock_acquire+0x179/0x350
[ 1188.173012][    C1]  ? do_futex+0x122/0x350
[ 1188.173054][    C1]  ? __x64_sys_futex+0x1e0/0x4c0
[ 1188.173091][    C1]  __x64_sys_recvmmsg+0x22a/0x280
[ 1188.173134][    C1]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[ 1188.173180][    C1]  do_syscall_64+0xcd/0xfa0
[ 1188.173208][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1188.173236][    C1] RIP: 0033:0x7f0c9cd8efc9
[ 1188.173258][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1188.173286][    C1] RSP: 002b:00007f0c9dc38038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1188.173312][    C1] RAX: ffffffffffffffda RBX: 00007f0c9cfe6090 RCX: 00007f0c9cd8efc9
[ 1188.173332][    C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000007
[ 1188.173350][    C1] RBP: 00007f0c9ce11f91 R08: 0000000000000000 R09: 0000000000000000
[ 1188.173368][    C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[ 1188.173386][    C1] R13: 00007f0c9cfe6128 R14: 00007f0c9cfe6090 R15: 00007ffe15367658
[ 1188.173413][    C1]  </TASK>
[ 1188.173423][    C1] 
[ 1188.616244][    C1] Allocated by task 18355:
[ 1188.620645][    C1]  kasan_save_stack+0x33/0x60
[ 1188.625343][    C1]  kasan_save_track+0x14/0x30
[ 1188.630024][    C1]  __kasan_slab_alloc+0x89/0x90
[ 1188.634874][    C1]  kmem_cache_alloc_noprof+0x250/0x6e0
[ 1188.640328][    C1]  __kernfs_new_node+0xd2/0x8e0
[ 1188.645167][    C1]  kernfs_new_node+0x13c/0x1e0
[ 1188.649922][    C1]  __kernfs_create_file+0x53/0x350
[ 1188.655030][    C1]  sysfs_add_file_mode_ns+0x207/0x3c0
[ 1188.660402][    C1]  internal_create_group+0x578/0xf30
[ 1188.665672][    C1]  internal_create_groups+0x9d/0x150
[ 1188.670943][    C1]  kobject_add_internal+0x311/0x9b0
[ 1188.676134][    C1]  kobject_add+0x16e/0x240
[ 1188.680542][    C1]  blk_register_queue+0x89/0x4e0
[ 1188.685476][    C1]  __add_disk+0x74a/0xf00
[ 1188.689801][    C1]  add_disk_fwnode+0x13f/0x5d0
[ 1188.694564][    C1]  loop_add+0x903/0xb70
[ 1188.698723][    C1]  loop_control_ioctl+0x13e/0x630
[ 1188.703748][    C1]  __x64_sys_ioctl+0x18e/0x210
[ 1188.708501][    C1]  do_syscall_64+0xcd/0xfa0
[ 1188.712988][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1188.718869][    C1] 
[ 1188.721177][    C1] The buggy address belongs to the object at ffff888057d83f00
[ 1188.721177][    C1]  which belongs to the cache kernfs_node_cache of size 176
[ 1188.735739][    C1] The buggy address is located 79 bytes to the right of
[ 1188.735739][    C1]  allocated 176-byte region [ffff888057d83f00, ffff888057d83fb0)
[ 1188.750306][    C1] 
[ 1188.752620][    C1] The buggy address belongs to the physical page:
[ 1188.759020][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57d83
[ 1188.767767][    C1] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 1188.775298][    C1] page_type: f5(slab)
[ 1188.779275][    C1] raw: 00fff00000000000 ffff88814040b8c0 0000000000000000 0000000000000001
[ 1188.787850][    C1] raw: 0000000000000000 0000000000110011 00000000f5000000 0000000000000000
[ 1188.796412][    C1] page dumped because: kasan: bad access detected
[ 1188.802811][    C1] page_owner tracks the page as allocated
[ 1188.808506][    C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5896, tgid 5896 (kworker/0:6), ts 1098922776827, free_ts 1098901989994
[ 1188.828038][    C1]  post_alloc_hook+0x1c0/0x230
[ 1188.832811][    C1]  get_page_from_freelist+0x10a3/0x3a30
[ 1188.838348][    C1]  __alloc_frozen_pages_noprof+0x25f/0x2470
[ 1188.844235][    C1]  alloc_pages_mpol+0x1fb/0x550
[ 1188.849084][    C1]  new_slab+0x24a/0x360
[ 1188.853227][    C1]  ___slab_alloc+0xdc4/0x1ae0
[ 1188.857892][    C1]  __slab_alloc.constprop.0+0x63/0x110
[ 1188.863336][    C1]  kmem_cache_alloc_noprof+0x43f/0x6e0
[ 1188.868783][    C1]  __kernfs_new_node+0xd2/0x8e0
[ 1188.873624][    C1]  kernfs_new_node+0x13c/0x1e0
[ 1188.878377][    C1]  __kernfs_create_file+0x53/0x350
[ 1188.883485][    C1]  sysfs_add_file_mode_ns+0x207/0x3c0
[ 1188.888856][    C1]  sysfs_merge_group+0x1aa/0x340
[ 1188.893785][    C1]  dpm_sysfs_add+0x237/0x280
[ 1188.898367][    C1]  device_add+0x9a6/0x1aa0
[ 1188.902776][    C1]  usb_new_device+0xd07/0x1a60
[ 1188.907533][    C1] page last free pid 5896 tgid 5896 stack trace:
[ 1188.913839][    C1]  __free_frozen_pages+0x7df/0x1160
[ 1188.919028][    C1]  rcu_core+0x79c/0x1530
[ 1188.923279][    C1]  handle_softirqs+0x219/0x8e0
[ 1188.928035][    C1]  __irq_exit_rcu+0x109/0x170
[ 1188.932698][    C1]  irq_exit_rcu+0x9/0x30
[ 1188.936941][    C1]  sysvec_apic_timer_interrupt+0xa4/0xc0
[ 1188.942580][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1188.948556][    C1] 
[ 1188.950863][    C1] Memory state around the buggy address:
[ 1188.956479][    C1]  ffff888057d83e80: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc
[ 1188.964555][    C1]  ffff888057d83f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1188.972631][    C1] >ffff888057d83f80: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc
[ 1188.980698][    C1]                                                                 ^
[ 1188.988677][    C1]  ffff888057d84000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1188.996732][    C1]  ffff888057d84080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1189.004780][    C1] ==================================================================
[ 1189.012830][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1189.020012][    C1] CPU: 1 UID: 0 PID: 19033 Comm: syz.4.2995 Not tainted syzkaller #0 PREEMPT(full) 
[ 1189.029407][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1189.039450][    C1] Call Trace:
[ 1189.042714][    C1]  <IRQ>
[ 1189.045545][    C1]  dump_stack_lvl+0x3d/0x1f0
[ 1189.050144][    C1]  vpanic+0x640/0x6f0
[ 1189.054140][    C1]  panic+0xca/0xd0
[ 1189.057881][    C1]  ? __pfx_panic+0x10/0x10
[ 1189.062308][    C1]  ? end_report+0x4c/0x170
[ 1189.066738][    C1]  ? rcu_is_watching+0x12/0xc0
[ 1189.071512][    C1]  ? lock_release+0x201/0x2f0
[ 1189.076202][    C1]  check_panic_on_warn+0xab/0xb0
[ 1189.081151][    C1]  end_report+0x107/0x170
[ 1189.085487][    C1]  kasan_report+0xee/0x110
[ 1189.089908][    C1]  ? mcp2221_raw_event+0x1070/0x10a0
[ 1189.095205][    C1]  mcp2221_raw_event+0x1070/0x10a0
[ 1189.100324][    C1]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1189.106144][    C1]  __hid_input_report.constprop.0+0x314/0x450
[ 1189.112257][    C1]  ? __pfx_mcp2221_raw_event+0x10/0x10
[ 1189.117731][    C1]  hid_irq_in+0x35e/0x870
[ 1189.122065][    C1]  __usb_hcd_giveback_urb+0x38b/0x610
[ 1189.127451][    C1]  usb_hcd_giveback_urb+0x39b/0x450
[ 1189.132664][    C1]  dummy_timer+0x1809/0x3a00
[ 1189.137265][    C1]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1189.143082][    C1]  ? __pfx_dummy_timer+0x10/0x10
[ 1189.148023][    C1]  ? __pfx_dummy_timer+0x10/0x10
[ 1189.152968][    C1]  ? mark_held_locks+0x49/0x80
[ 1189.157743][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1189.163557][    C1]  ? __pfx_dummy_timer+0x10/0x10
[ 1189.168494][    C1]  __hrtimer_run_queues+0x202/0xad0
[ 1189.173700][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[ 1189.179427][    C1]  ? read_tsc+0x9/0x20
[ 1189.183500][    C1]  hrtimer_run_softirq+0x17d/0x350
[ 1189.188645][    C1]  handle_softirqs+0x219/0x8e0
[ 1189.193413][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[ 1189.198698][    C1]  __irq_exit_rcu+0x109/0x170
[ 1189.203363][    C1]  irq_exit_rcu+0x9/0x30
[ 1189.207601][    C1]  sysvec_apic_timer_interrupt+0xa4/0xc0
[ 1189.213243][    C1]  </IRQ>
[ 1189.216160][    C1]  <TASK>
[ 1189.219074][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1189.225046][    C1] RIP: 0010:__sanitizer_cov_trace_pc+0x17/0x70
[ 1189.231192][    C1] Code: 02 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 34 24 65 48 8b 15 b8 a5 e7 11 65 8b 05 c9 a5 e7 11 <a9> 00 01 ff 00 74 1d f6 c4 01 74 43 a9 00 00 0f 00 75 3c a9 00 00
[ 1189.250798][    C1] RSP: 0018:ffffc9000359f830 EFLAGS: 00000246
[ 1189.256859][    C1] RAX: 0000000080000000 RBX: 0000000000000000 RCX: ffffc900158f8000
[ 1189.264817][    C1] RDX: ffff888030f5c900 RSI: ffffffff81857f9a RDI: 0000000000000000
[ 1189.272776][    C1] RBP: ffff888030f5c900 R08: 0000000000000001 R09: 0000000000000000
[ 1189.280743][    C1] R10: ffffc9000359f928 R11: 0000000000000001 R12: ffff888036edc988
[ 1189.288705][    C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888073ff6500
[ 1189.296676][    C1]  ? pid_vnr+0x1a/0x220
[ 1189.300837][    C1]  pid_vnr+0x1a/0x220
[ 1189.304818][    C1]  __unix_dgram_recvmsg+0x5d4/0xc30
[ 1189.310106][    C1]  ? __pfx___unix_dgram_recvmsg+0x10/0x10
[ 1189.315834][    C1]  ? __lock_acquire+0xb8a/0x1c90
[ 1189.320783][    C1]  ? iovec_from_user+0xbb/0x140
[ 1189.325639][    C1]  unix_dgram_recvmsg+0xd0/0x110
[ 1189.330581][    C1]  ____sys_recvmsg+0x5f9/0x6b0
[ 1189.335345][    C1]  ? __pfx_____sys_recvmsg+0x10/0x10
[ 1189.340631][    C1]  ? kfree+0x252/0x6d0
[ 1189.344711][    C1]  ___sys_recvmsg+0x114/0x1a0
[ 1189.349421][    C1]  ? __pfx____sys_recvmsg+0x10/0x10
[ 1189.354629][    C1]  ? __pfx___might_resched+0x10/0x10
[ 1189.359909][    C1]  do_recvmmsg+0x2fe/0x750
[ 1189.364330][    C1]  ? __pfx_do_recvmmsg+0x10/0x10
[ 1189.369275][    C1]  ? lock_acquire+0x179/0x350
[ 1189.373962][    C1]  ? do_futex+0x122/0x350
[ 1189.378322][    C1]  ? __x64_sys_futex+0x1e0/0x4c0
[ 1189.383278][    C1]  __x64_sys_recvmmsg+0x22a/0x280
[ 1189.388342][    C1]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[ 1189.393911][    C1]  do_syscall_64+0xcd/0xfa0
[ 1189.398427][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1189.404317][    C1] RIP: 0033:0x7f0c9cd8efc9
[ 1189.408721][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1189.428326][    C1] RSP: 002b:00007f0c9dc38038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1189.436740][    C1] RAX: ffffffffffffffda RBX: 00007f0c9cfe6090 RCX: 00007f0c9cd8efc9
[ 1189.444697][    C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000007
[ 1189.452668][    C1] RBP: 00007f0c9ce11f91 R08: 0000000000000000 R09: 0000000000000000
[ 1189.460627][    C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[ 1189.468582][    C1] R13: 00007f0c9cfe6128 R14: 00007f0c9cfe6090 R15: 00007ffe15367658
[ 1189.476559][    C1]  </TASK>
[ 1189.479790][    C1] Kernel Offset: disabled
[ 1189.484096][    C1] Rebooting in 86400 seconds..