last executing test programs:

3m53.67301441s ago: executing program 0 (id=70):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000280)={0x38, 0x0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8, 0x7b}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x161c}]]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
close(0x3)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0xf3a, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
getpid()
ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000100)={0x3, 0x0, [{0x2, 0x0, 0x0, 0x5}, {0x76b48f433226e54c, 0x5, 0xe, 0x0, 0xcdd, 0x2, 0x10000}, {0xc0000000, 0x0, 0x4, 0x0, 0x0, 0x1}]})

3m52.812056978s ago: executing program 0 (id=74):
r0 = socket$l2tp(0x2, 0x2, 0x73)
connect$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @local, 0x3}, 0x10)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000040)=']&,$[,-\'[\x00')
sendto$l2tp(r0, &(0x7f0000000080)="a254eb08844882752f3ca1001454924440b03453832b0a598a9459571f76b39b380afe80eee14d470edaac373266ed73065232858330884bec4a542d02231539d458ff8d2d99b30cedae55ff6714996bec290e22eda59a40d6446dc61809945fb93c78cedba689014e6e8c3c970b3283180e56e2d73a75d3fc9fc5b15ef44855", 0x80, 0x20008800, 0x0, 0x0)
r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
setsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000140)=0x7, 0x4)
recvfrom$l2tp(r0, &(0x7f0000000180)=""/92, 0x5c, 0x2000, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10)
syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) (async)
ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000280)=0x100000) (async)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x7, 0x2, 0x10000, 0x239c, 0x8, <r2=>0x0})
syz_pidfd_open(r2, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000340)=0x1)
ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000380)={0x2, 0x8, 0x0, 0x0, <r3=>0xffffffffffffffff})
ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f00000003c0)={0x0, 0x74, 0x401, 0x1})
getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f00000007c0), &(0x7f0000000800)=0x4) (async)
sched_setaffinity(r2, 0x8, &(0x7f0000000840)=0x5) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs2/custom1\x00', 0x800, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f00000008c0)) (async)
getpeername$inet(r1, &(0x7f0000000900)={0x2, 0x0, @multicast2}, &(0x7f0000000940)=0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003a80)={r1, 0x0, 0x1000, 0x1000, &(0x7f0000000980)="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", &(0x7f0000001980)=""/4096, 0xde7, 0x0, 0xfd, 0x1000, &(0x7f0000002980)="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", &(0x7f0000002a80)="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", 0x0, 0x0, 0xba5}, 0x50)
setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000003b00)=0x200, 0x4)
ioctl$VIDIOC_G_EDID(r1, 0xc0285628, &(0x7f0000003b80)={0x0, 0x37b64621, 0xa8, '\x00', &(0x7f0000003b40)=0x10}) (async)
mmap$usbmon(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x12, 0xb36a9a29f163ee17, r1, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000003bc0), 0x100, 0x0) (async)
r5 = syz_open_dev$MSR(&(0x7f0000003c00), 0x1400000, 0x0)
ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) (async)
shmget(0x2, 0x4000, 0x80, &(0x7f0000ff9000/0x4000)=nil)
write$vhost_msg_v2(r1, &(0x7f0000003dc0)={0x2, 0x0, {&(0x7f0000003c40)=""/101, 0x65, &(0x7f0000003cc0)=""/214, 0x2, 0x1}}, 0x48) (async)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000003e40)=@int=0x4, 0x4) (async)
ppoll(&(0x7f0000003e80)=[{r5, 0x100}, {r4, 0x80}, {r0, 0x2}, {r0, 0x2}, {0xffffffffffffffff, 0x1080}, {r4, 0x2004}, {r1, 0xc002}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0xb667}], 0x9, &(0x7f0000003f00)={0x0, 0x3938700}, &(0x7f0000003f40)={[0x7fffffffffffffff]}, 0x8)

3m52.569048511s ago: executing program 0 (id=77):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58)
r1 = fsmount(0xffffffffffffffff, 0x1, 0x2)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x440280, 0x0)
splice(r1, &(0x7f0000000200)=0x9, r0, &(0x7f0000000240)=0x1000, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f00000001c0)={0x1d, r3, 0x1, {0x0, 0xf0, 0x2}, 0xfd}, 0x18)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r4 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}, 0x34000041)
syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r4)
syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400fb015c291d000905", @ANYRES16], 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000300), 0x3, 0x147000)

3m49.50056295s ago: executing program 0 (id=88):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, r3, 0x0, 0x14}, [@NDA_DST_MAC={0xa, 0x1, @link_local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}}, 0x0)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/softlockup_count', 0x0, 0x0)
preadv(r4, &(0x7f0000001840)=[{&(0x7f0000001640)=""/16, 0x10}], 0x1, 0x2, 0x5)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r0, 0x20, &(0x7f00000003c0)={&(0x7f0000000380)=""/42, 0x2a, <r5=>0x0, &(0x7f0000000680)=""/4096, 0x1000}}, 0x10)
r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000440), 0x202400, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x1d, 0x1, &(0x7f0000000540)=ANY=[@ANYBLOB="811000031dcaa7d60003000000"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x88, &(0x7f00000001c0)=""/136, 0x41100, 0x0, '\x00', r3, @lsm=0x1b, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x5, 0x6, 0xf42d, 0x3}, 0x10, r5, r0, 0x5, &(0x7f0000000480)=[r0, r6], &(0x7f00000004c0)=[{0x4, 0x3, 0x7, 0xb}, {0x2, 0x4, 0x10, 0xa}, {0x2, 0x2, 0xc, 0x6}, {0x0, 0x4, 0x5, 0x8}, {0x3, 0x4, 0xf, 0x3}], 0x10, 0x8}, 0x94)
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

3m48.219732561s ago: executing program 0 (id=91):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'geneve1\x00'})
r1 = fsmount(0xffffffffffffffff, 0x1, 0x8)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x1, 0x4, 0x5, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xffffffff}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_MODE={0xa, 0x2, {0x800}}]}, 0x38}}, 0x4000000)
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r4 = dup3(r3, r2, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000100)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000880)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff8, 0x0, &(0x7f0000000300)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0})

3m45.92243833s ago: executing program 0 (id=97):
syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb10"], 0x0)
gettid()
r0 = socket(0x1d, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x894)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8f}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0x3, r5}]}, 0x40}}, 0x0)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x20, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, @ringbuf_output], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000240)='syzkaller\x00', 0x3eb, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0xc, 0x101, 0x7}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000400)=[{0x5, 0x1, 0x5}, {0x0, 0x3, 0x7, 0x8}], 0x10, 0x1}, 0x94)
sendmsg$nl_route(r0, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@newlink={0x80, 0x10, 0x100, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, 0x14, 0x8000}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0xb02d}, @IFLA_PHYS_PORT_ID={0x24, 0x22, "ee9197d34bf42cd1ee4f7041e35da14bde03532b7555c3ee119a5a520d9cc8c1"}, @IFLA_MTU={0x8, 0x4, 0x2}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_IFALIASn={0x4}, @IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r6}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x6}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20048881}, 0x1)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f00000000c0)={0x7, 0x8}, 0x10)
eventfd2(0x0, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r8=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, 0x0, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r8}}, 0x20)
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r9, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)
setsockopt$inet6_IPV6_PKTINFO(r9, 0x29, 0x32, &(0x7f0000000040)={@remote}, 0x14)
setsockopt$inet6_tcp_int(r9, 0x6, 0x6, &(0x7f00000001c0)=0x8000, 0x4)

3m45.438271518s ago: executing program 32 (id=97):
syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb10"], 0x0)
gettid()
r0 = socket(0x1d, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x894)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8f}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0x3, r5}]}, 0x40}}, 0x0)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x20, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, @ringbuf_output], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000240)='syzkaller\x00', 0x3eb, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0xc, 0x101, 0x7}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000400)=[{0x5, 0x1, 0x5}, {0x0, 0x3, 0x7, 0x8}], 0x10, 0x1}, 0x94)
sendmsg$nl_route(r0, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@newlink={0x80, 0x10, 0x100, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, 0x14, 0x8000}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0xb02d}, @IFLA_PHYS_PORT_ID={0x24, 0x22, "ee9197d34bf42cd1ee4f7041e35da14bde03532b7555c3ee119a5a520d9cc8c1"}, @IFLA_MTU={0x8, 0x4, 0x2}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_IFALIASn={0x4}, @IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r6}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x6}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20048881}, 0x1)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f00000000c0)={0x7, 0x8}, 0x10)
eventfd2(0x0, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r8=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, 0x0, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r8}}, 0x20)
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r9, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)
setsockopt$inet6_IPV6_PKTINFO(r9, 0x29, 0x32, &(0x7f0000000040)={@remote}, 0x14)
setsockopt$inet6_tcp_int(r9, 0x6, 0x6, &(0x7f00000001c0)=0x8000, 0x4)

14.894433504s ago: executing program 3 (id=840):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c4a616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000b80)={'filter\x00', 0x4, "25cf96f2"}, &(0x7f0000000bc0)=0x2c) (async)
getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000b80)={'filter\x00', 0x4, "25cf96f2"}, &(0x7f0000000bc0)=0x2c)
ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000300)=[0x81, 0xe])
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$cdc_ecm(0x5, 0x68, &(0x7f0000000040)={{0x12, 0x1, 0x51, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x56, 0x1, 0x1, 0x81, 0x80, 0x9, [{{0x9, 0x4, 0x0, 0x8, 0x3, 0x2, 0x6, 0x0, 0x1, {{0xa, 0x24, 0x6, 0x0, 0x0, "a3a12e792f"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x9541, 0x7, 0x4}, [@network_terminal={0x7, 0x24, 0xa, 0x4, 0x9, 0x4, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0xd, 0x6}, @dmm={0x7, 0x24, 0x14, 0x4194}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0xb, 0x1, 0x25}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x9, 0x2, 0x4}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x5, 0x1, 0x9, 0x8, 0x1}, 0x6d, &(0x7f0000000100)={0x5, 0xf, 0x6d, 0x6, [@ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0xef, 0x6, 0x5, 0xf000, 0x81, [0x0, 0x0, 0xc000, 0xf, 0xc0c0, 0xc0]}, @ssp_cap={0x1c, 0x10, 0xa, 0x8, 0x4, 0x283, 0x1e00, 0x5, [0x3f, 0xc000, 0x0, 0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x8, 0x9, 0xfffb}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "83438c388ae248ad72843aa1966ddb98"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xb, 0xe, 0xe1}]}, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x439}}, {0x8c, &(0x7f00000001c0)=@string={0x8c, 0x3, "903f6f2501cabac03a8ba30157f864e7cd240182a08714b29c8a52557c633075d64cf3a4389948c92896bc1aa511031c97a7ff6ae6dfc845ac1ca5e5e8699fb67c5e8afcebea1490ae7c15c79a64244ed3c9a7256faa558c8a88e1ccd7b17e971f834022b60bf92a2f8929ca5fef5f6f821618a465b3ff1c6f07fc855f85ec226f4a68c85c691459fdcc"}}]}) (async)
syz_usb_connect$cdc_ecm(0x5, 0x68, &(0x7f0000000040)={{0x12, 0x1, 0x51, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x56, 0x1, 0x1, 0x81, 0x80, 0x9, [{{0x9, 0x4, 0x0, 0x8, 0x3, 0x2, 0x6, 0x0, 0x1, {{0xa, 0x24, 0x6, 0x0, 0x0, "a3a12e792f"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x9541, 0x7, 0x4}, [@network_terminal={0x7, 0x24, 0xa, 0x4, 0x9, 0x4, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0xd, 0x6}, @dmm={0x7, 0x24, 0x14, 0x4194}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0xb, 0x1, 0x25}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x9, 0x2, 0x4}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x5, 0x1, 0x9, 0x8, 0x1}, 0x6d, &(0x7f0000000100)={0x5, 0xf, 0x6d, 0x6, [@ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0xef, 0x6, 0x5, 0xf000, 0x81, [0x0, 0x0, 0xc000, 0xf, 0xc0c0, 0xc0]}, @ssp_cap={0x1c, 0x10, 0xa, 0x8, 0x4, 0x283, 0x1e00, 0x5, [0x3f, 0xc000, 0x0, 0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x8, 0x9, 0xfffb}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "83438c388ae248ad72843aa1966ddb98"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xb, 0xe, 0xe1}]}, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x439}}, {0x8c, &(0x7f00000001c0)=@string={0x8c, 0x3, "903f6f2501cabac03a8ba30157f864e7cd240182a08714b29c8a52557c633075d64cf3a4389948c92896bc1aa511031c97a7ff6ae6dfc845ac1ca5e5e8699fb67c5e8afcebea1490ae7c15c79a64244ed3c9a7256faa558c8a88e1ccd7b17e971f834022b60bf92a2f8929ca5fef5f6f821618a465b3ff1c6f07fc855f85ec226f4a68c85c691459fdcc"}}]})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000380)={0x4, &(0x7f0000000340)=[{0xfb, 0x2, 0x4, 0x2}, {0x2, 0x40, 0x2, 0x5}, {0x8, 0x74, 0x2, 0x3}, {0x6, 0xc0, 0x10, 0xffffffbc}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000440))

12.910069352s ago: executing program 2 (id=846):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xa}, 0x94)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x34)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x10, &(0x7f0000000140)=@raw=[@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbb2}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000280), &(0x7f00000002c0)=r0}, 0x20)
preadv(r2, &(0x7f0000000b00)=[{&(0x7f0000000040)}, {&(0x7f0000000340)=""/16, 0x10}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000600)=""/200, 0xc8}, {&(0x7f00000007c0)=""/122, 0x7a}, {&(0x7f0000000840)=""/136, 0x88}, {&(0x7f0000000900)=""/156, 0x9c}, {&(0x7f00000009c0)=""/155, 0x9b}, {&(0x7f0000000a80)=""/128, 0x80}], 0xa, 0x6, 0x2)

12.476933389s ago: executing program 3 (id=848):
openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x300, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, 0x20, 0x9, 0x2, 0x25dfdbff, {0x2}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r3 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60})
epoll_create1(0x0)
accept4$alg(r2, 0x0, 0x0, 0x0)
r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec27, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0xfffffffffffffd11)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r7 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r7, &(0x7f0000002700)=""/102392, 0x18ff8)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x300)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33)

12.351623326s ago: executing program 2 (id=850):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x700, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @local}}}}}}, 0x0)

10.363322752s ago: executing program 3 (id=853):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x9, 0x4, 0x8, 0xb}, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
r3 = gettid()
timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=<r4=>0x0)
timer_settime(r4, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0)
unshare(0x42000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, &(0x7f0000000100)={'security\x00', 0x0, [0x5, 0xffffbff7, 0x20000004, 0x40, 0x4]}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
fcntl$lock(r6, 0x6, &(0x7f0000002000)={0x1})
add_key$fscrypt_v1(&(0x7f0000000180), 0x0, &(0x7f00000002c0)={0x0, "8cae5c2ba870cf8332c44080390ccfab55a54fcdb1e936e9f7cb93da03274b08aa62ae5494c2171c241f22fe0a4229b07a204683ae863556b3b5a0e2f3515ee2"}, 0x48, 0xfffffffffffffffc)
fcntl$lock(r6, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x2000000})
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000000), &(0x7f0000000100)=@tcp6, 0x1}, 0x20)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f00000005c0))
sendto$inet6(r0, &(0x7f0000000880), 0x0, 0x4000814, &(0x7f0000001000)={0xa, 0x4e24, 0x46, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, 0x1c)
ioperm(0x0, 0x8, 0x8000000000004)
r7 = gettid()
mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0)
acct(&(0x7f0000000140)='./file0\x00')
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc))

10.289073193s ago: executing program 2 (id=854):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', <r1=>0x0})
gettid()
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x200, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @local}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0)
unshare(0x64000600)
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902"], 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x201a0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x800)

8.243417135s ago: executing program 1 (id=857):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18060000000000dd09000000b60000000000000000950000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xf}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000))
ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000040)=0x9)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYRES8=r3], 0x25c}}, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2}}]}, 0x1c}}, 0x0)
r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
r8 = syz_open_dev$loop(0x0, 0x7, 0x0)
ioctl$LOOP_SET_FD(r8, 0x4c00, r7)

6.936794071s ago: executing program 1 (id=860):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x2, 0x3, 0xff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
connect$l2tp(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$kcm(0x29, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0xf36}], 0x1c)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4084004}, 0x10000)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10)
write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe020002000000000800040001000000", 0x24)
sendto$inet(r0, &(0x7f0000000280)="12f0dda7f17f60b7c78be42301125e6cb51c467f", 0x14, 0x800, &(0x7f00000001c0)={0x2, 0x4e22, @multicast2}, 0x10)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, &(0x7f0000000080)='\x00\x00\x00')

6.560784755s ago: executing program 3 (id=861):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r1=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_setup(0x952, &(0x7f0000000400)={0x0, 0x537, 0x2, 0x1, 0x3d5}, &(0x7f0000000040), &(0x7f0000000240))
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000005c0)={'wlan1\x00', &(0x7f0000000580)=@ethtool_ts_info})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = dup2(0xffffffffffffffff, r2)
r4 = syz_io_uring_setup(0x50fb, &(0x7f0000000300)={0x0, 0xaee2, 0x2000, 0x6, 0xbfdffffc}, &(0x7f0000000200)=<r5=>0x0, &(0x7f0000000280))
ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000180)={0x0, 0x6, 0x4, 0x7, 0xfc, "cfc8346b14ab2280bb7449eca09e26420c4c78", 0x6, 0x197})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
unshare(0x64000600)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100b11b700000feffff1a000000180001801400020064756d6d7930"], 0x2c}}, 0x0)
io_uring_enter(r4, 0x75fa, 0xe475, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000380)={0x0, 0xfffffc85}, &(0x7f00000003c0)=0x8)
ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r1, 0x0, 0x0, 0x8000000})
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r1, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000})
ioctl$IOCTL_STATUS_ACCEL_DEV(r3, 0x40046103, &(0x7f0000000500)={0x6, 0x100, 0x0, 0x7, 0x4, 0x5, 0x8, 0x3, 0x7, 0x1, 0x7, "82121dbf600e6c1a391279561897c80b3db1d29e19b10e072007a2139cde3f82"})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r1})
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000000)

6.525052562s ago: executing program 1 (id=862):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x69, 0xf7, 0x4a, 0x20, 0x10b8, 0x1bb4, 0x3465, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x5d, 0x0, 0x0, 0x1c, 0x53, 0xc2}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="2017cc"], 0x0, 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xffffffffffffffff, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0)

5.540429925s ago: executing program 4 (id=863):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$usbmon(&(0x7f0000000140), 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

5.398132107s ago: executing program 2 (id=864):
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0)
fsopen(&(0x7f0000000280)='proc\x00', 0x0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000380), 0x80000, 0x0)
ioctl$RTC_UIE_ON(r4, 0x7003)
ioctl$RTC_SET_TIME(r4, 0x4024700a, 0x0)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYBLOB='\x00'/15], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000001811000039c3cc81ed", @ANYBLOB="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", @ANYRESHEX=r4], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x20, 0xc, &(0x7f00000000c0)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10)
openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
write$cgroup_int(r1, &(0x7f0000000040)=0x900, 0x12)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x4, 0x0, 0x8, 0x8, r2, 0xca0, '\x00', 0x0, r1, 0x1, 0xfffffffd, 0x0, 0xf}, 0x50)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0d00000023000000040000000200000040000000", @ANYRES32=r8], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000007c0)={r9, &(0x7f0000000680), 0x0}, 0x20)

5.229035888s ago: executing program 4 (id=865):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4)
sendmmsg$inet(r0, &(0x7f0000003800)=[{{0x0, 0xc02, 0x0}}], 0x1, 0x4004441)

5.198572137s ago: executing program 5 (id=866):
r0 = getpid()
ioprio_set$pid(0x1, r0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x8a, 0x0, 0x0, 0x2000000}})

5.130508841s ago: executing program 4 (id=867):
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
socket(0x11, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0))
syz_usbip_server_init(0x4)
syz_usbip_server_init(0x1)
syz_usbip_server_init(0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_usbip_server_init(0x2)
syz_usbip_server_init(0x2)
syz_usbip_server_init(0x5)
pipe2(&(0x7f0000000080), 0x800)
syz_usbip_server_init(0x0)
syz_usbip_server_init(0x0)
syz_usbip_server_init(0x0)
r0 = syz_io_uring_setup(0x42e6, &(0x7f00000002c0)={0x0, 0x5eda, 0x10100, 0x40000006, 0x25d}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x22, 0x2000, @fd_index, 0x0, 0x7fffffff, 0x9, 0xa, 0x1, {0x2}})
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0))
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1})
io_uring_enter(r0, 0x7330, 0x0, 0x0, 0x0, 0x0)

4.517456086s ago: executing program 5 (id=868):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (fail_nth: 7)

4.465172251s ago: executing program 3 (id=869):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000900)={0x7, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x80)
sched_setscheduler(0x0, 0x1, 0x0)
recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0)

3.245908797s ago: executing program 2 (id=870):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0x4)
ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, 0x0)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2})
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x564})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

3.160972156s ago: executing program 1 (id=871):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/287], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000200"/20, @ANYBLOB, @ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000ed00"], 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48)
socket$inet(0x2, 0x2, 0x1)

3.160733999s ago: executing program 5 (id=872):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x8048040}, 0xc851)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, 0x0, &(0x7f00000000c0))

3.002013174s ago: executing program 1 (id=873):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
pipe2$watch_queue(&(0x7f0000001180)={<r1=>0xffffffffffffffff}, 0x80)
r2 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe)
keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0x0)
pipe2$watch_queue(&(0x7f0000000380)={<r3=>0xffffffffffffffff}, 0x80)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r3], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0x4}, 0x18)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'dummy0\x00'})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'vcan0\x00'})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x5, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
r10 = gettid()
r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r11, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r12}, 0x10)
r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x40, 0x0, 0x0)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r9, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r10}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)

2.944500314s ago: executing program 3 (id=874):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
prlimit64(r0, 0x0, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f0000000440)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0x10001)
write(r2, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r5 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
r6 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS64(r6, 0xc0984124, 0x0)
read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
syz_open_dev$media(&(0x7f0000000040), 0x7, 0x600002)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
socket$kcm(0x10, 0x2, 0x0)
r7 = creat(&(0x7f0000000040)='./file0\x00', 0x4b)
close(r7)
syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
write$binfmt_script(r8, &(0x7f00000003c0)={'#! ', './file0'}, 0xb)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x8010, r8, 0x0)

2.826492239s ago: executing program 5 (id=875):
socket$packet(0x11, 0x2, 0x300)
close(0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50)
r0 = open(&(0x7f0000000000)='./file1\x00', 0x14907e, 0x1a1)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)=0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000)
fallocate(r0, 0x1, 0x3, 0x15)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0)
r5 = syz_open_dev$dmmidi(&(0x7f0000000040), 0x2, 0x200)
ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r5, 0x40045731, &(0x7f00000000c0)=0x1)
socket$inet_sctp(0x2, 0x5, 0x84)

2.825555026s ago: executing program 2 (id=876):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
listen(r0, 0x90004)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet6_udp_int(r2, 0x11, 0xb, 0x0, &(0x7f0000000040))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000e40)=[{{&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000280)="62a235c48f2d2f4e8b1b6bec7f8c736800a6475008311b7f805dbc257dc56e238f", 0x21}, {&(0x7f0000000380)="a332bcc79d849b731450864134401bd6ced00fbd7ec396eb1e47c81040063dc043ca4cc1edb637b5ea9a32762728e69594df4b012e5d8b9ac76953c4ef31fb67b1d65c61f711b0fd87e4c2606c6708985cd68ffeef9b595878af901478a5783c9519c598199486966928e40f1ce0dc77eb1d589ffd32f8c36595013f3271a07387f99d7d4197ee09a10f21d19a72ad84ee0bcd532d7c96", 0x97}, {&(0x7f0000000500)="cf16af71d41f666664007229e100fe49bce139833144f62b930e197c62e3504ec484f40829de282f524d87a035556407331ce5a57eac6ccdd8d53e1563ecedb6b541e8fe3e8a11fec1e7164fb7aa0ee1688ca5e26e880825d39d39d57e058a53b3b143bb5cc714012e1fec18fa11c41d6d34f647c286183b928321f4b1fb0dc6a619102947e065293c185973ca451a4f4f10e479f7999095f06c44007ab6f3e675d8c120572c413ee96ee5e69d69fc57b5b2b47a86c9397196c8b9ef71001c588a9043b06dd2502b669a2389faa0f9fa997a92c7ec334c56d38b00b3624674c0", 0xe0}, {&(0x7f0000000440)="bb448d14f253ddef5b7279e74e1d2d99de83e82e6ebf53bb2acc1961a1fff9037ffa7f03757b9073f5f5dd76f466d23d4b586d7e87d341abdd76a5fb14f2f4599e5f1a39b7cae7678a05acf215be89bf39bdf13dd150842b51c06e8671c6ccb59db780ed7258129b8927547495", 0x6d}, {&(0x7f00000006c0)}], 0x5, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {r1, 0x0, 0xee01}}}], 0x20, 0x80}}, {{&(0x7f00000008c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000d80)=[{&(0x7f0000000800)="f50a2915e52795956f5d80ff7584b1c163bcc1f190c44647ea4894e991a254f8ad5dad613d792b794c59d7ab9fdb0d06137bf0846446408e108c0374ec459afe0847b672bb5148ca6004433b609971a1b7127005bff328f9a29824992d67498bc08bbc7a5eaf746e", 0x68}, {&(0x7f0000000a00)="ec8e30b8122598a58f50b62cd5ed6ef8520b1f447a16ca952d37af8b96210362cd2b0b1e302d4c9a1b7ef9f1a2b50c195b09f5f586682d1de806d78eabf09d0f60da4b037a2b9ba62e0b37968974cf352f232d96b72f9e", 0x57}, {0x0}, {&(0x7f0000000b00)}, {&(0x7f0000000b80)="549f4f890db7218d5341e2cf03f17d9781c6f414ea03f9877b133b42bf2661bfbde189c01351eb77604bdadaea6f772842e60c2c6282e53dfa2c5102878bfa1fad2ea8b3f65f53a3a8a9ebdf414b2739b43153e69232d68a730f4b8a7bad5ecc8f3ef18ab9e4e9ad37fcd06a5b4dc1884927343b8ca85dcdf6734a8911559ea962c0f0febed241f9ec8b04817be587e915df6eb5b6b9d43fad0b133b1cdca7d2f6eb67568ec58a3e2d2d3e2519f380db1e9c74add2ec15cbedddf42dce6d3850cecbb1825d5ea476fa", 0xc9}, {&(0x7f0000000c80)="12d809110ab066407fabea555fd4d9dd970184c86bb50f7e29faa9aefe918e71cf1a7f8f6715ff9234eb473db420f6c2f2000319d5827b5ec354da9ca2d060a4188381743df705092cad98bcf99a991fb4460d5d16184dd025929a44698f5941e0b9ae843ecc2cadf46d56d1420808577dffd092fdc972e2bf88fea67c9e2eba055643b71c832b8e77d03f601a7e4cbd2a0e2f9f18c031cdcadcc22d19756f8bb0d95fcf5f8b132775769e6c296be5cc927a185ab1a362919487feeb04b202f65692347dc4cc", 0xc6}, {&(0x7f00000007c0)="6b34d0946ab0c1856d19779532b4ad295218f91e4c24d62cdf45512f897f9b719aa72237a76e1f1b76640c5b3eb9d2bf", 0x30}], 0x7, &(0x7f0000000e00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40, 0x800}}], 0x2, 0x0)
r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
preadv(r5, &(0x7f00000016c0)=[{&(0x7f0000000600)=""/175, 0xaf}], 0x1, 0xffffffff, 0x5e)
ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x5})
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0xcc31)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$pptp(0x18, 0x1, 0x2)
openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)

2.674434854s ago: executing program 1 (id=877):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
listen(r0, 0x90004)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet6_udp_int(r2, 0x11, 0xb, 0x0, &(0x7f0000000040))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000e40)=[{{&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000280)="62a235c48f2d2f4e8b1b6bec7f8c736800a6475008311b7f805dbc257dc56e238f", 0x21}, {&(0x7f0000000380)="a332bcc79d849b731450864134401bd6ced00fbd7ec396eb1e47c81040063dc043ca4cc1edb637b5ea9a32762728e69594df4b012e5d8b9ac76953c4ef31fb67b1d65c61f711b0fd87e4c2606c6708985cd68ffeef9b595878af901478a5783c9519c598199486966928e40f1ce0dc77eb1d589ffd32f8c36595013f3271a07387f99d7d4197ee09a10f21d19a72ad84ee0bcd532d7c96", 0x97}, {&(0x7f0000000500)="cf16af71d41f666664007229e100fe49bce139833144f62b930e197c62e3504ec484f40829de282f524d87a035556407331ce5a57eac6ccdd8d53e1563ecedb6b541e8fe3e8a11fec1e7164fb7aa0ee1688ca5e26e880825d39d39d57e058a53b3b143bb5cc714012e1fec18fa11c41d6d34f647c286183b928321f4b1fb0dc6a619102947e065293c185973ca451a4f4f10e479f7999095f06c44007ab6f3e675d8c120572c413ee96ee5e69d69fc57b5b2b47a86c9397196c8b9ef71001c588a9043b06dd2502b669a2389faa0f9fa997a92c7ec334c56d38b00b3624674c0", 0xe0}, {&(0x7f0000000440)="bb448d14f253ddef5b7279e74e1d2d99de83e82e6ebf53bb2acc1961a1fff9037ffa7f03757b9073f5f5dd76f466d23d4b586d7e87d341abdd76a5fb14f2f4599e5f1a39b7cae7678a05acf215be89bf39bdf13dd150842b51c06e8671c6ccb59db780ed7258129b8927547495", 0x6d}, {&(0x7f00000006c0)}], 0x5, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {r1, 0x0, 0xee01}}}], 0x20, 0x80}}, {{&(0x7f00000008c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000d80)=[{&(0x7f0000000800)="f50a2915e52795956f5d80ff7584b1c163bcc1f190c44647ea4894e991a254f8ad5dad613d792b794c59d7ab9fdb0d06137bf0846446408e108c0374ec459afe0847b672bb5148ca6004433b609971a1b7127005bff328f9a29824992d67498bc08bbc7a5eaf746e", 0x68}, {&(0x7f0000000a00)="ec8e30b8122598a58f50b62cd5ed6ef8520b1f447a16ca952d37af8b96210362cd2b0b1e302d4c9a1b7ef9f1a2b50c195b09f5f586682d1de806d78eabf09d0f60da4b037a2b9ba62e0b37968974cf352f232d96b72f9e", 0x57}, {0x0}, {&(0x7f0000000b00)}, {&(0x7f0000000b80)="549f4f890db7218d5341e2cf03f17d9781c6f414ea03f9877b133b42bf2661bfbde189c01351eb77604bdadaea6f772842e60c2c6282e53dfa2c5102878bfa1fad2ea8b3f65f53a3a8a9ebdf414b2739b43153e69232d68a730f4b8a7bad5ecc8f3ef18ab9e4e9ad37fcd06a5b4dc1884927343b8ca85dcdf6734a8911559ea962c0f0febed241f9ec8b04817be587e915df6eb5b6b9d43fad0b133b1cdca7d2f6eb67568ec58a3e2d2d3e2519f380db1e9c74add2ec15cbedddf42dce6d3850cecbb1825d5ea476fa", 0xc9}, {&(0x7f0000000c80)="12d809110ab066407fabea555fd4d9dd970184c86bb50f7e29faa9aefe918e71cf1a7f8f6715ff9234eb473db420f6c2f2000319d5827b5ec354da9ca2d060a4188381743df705092cad98bcf99a991fb4460d5d16184dd025929a44698f5941e0b9ae843ecc2cadf46d56d1420808577dffd092fdc972e2bf88fea67c9e2eba055643b71c832b8e77d03f601a7e4cbd2a0e2f9f18c031cdcadcc22d19756f8bb0d95fcf5f8b132775769e6c296be5cc927a185ab1a362919487feeb04b202f65692347dc4cc", 0xc6}, {&(0x7f00000007c0)="6b34d0946ab0c1856d19779532b4ad295218f91e4c24d62cdf45512f897f9b719aa72237a76e1f1b76640c5b3eb9d2bf", 0x30}], 0x7, &(0x7f0000000e00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40, 0x800}}], 0x2, 0x0)
r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
preadv(r5, &(0x7f00000016c0)=[{&(0x7f0000000600)=""/175, 0xaf}], 0x1, 0xffffffff, 0x5e)
ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x5})
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0xcc31)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$pptp(0x18, 0x1, 0x2)
openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)

2.053357241s ago: executing program 4 (id=878):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket(0x2, 0x3, 0xff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
connect$l2tp(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_setup(0xd2, &(0x7f0000000400)={0x0, 0x42050, 0x4000, 0x7ffe, 0x6c}, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000003c0)={0xf1})
r2 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff)
pipe2$watch_queue(&(0x7f0000000240)={<r3=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x0)
keyctl$KEYCTL_WATCH_KEY(0x15, r2, 0xffffffffffffffff, 0x5b)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0xf36}], 0x1c)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000340)={0x4, 0xfffffffe, 0x800001}, 0x10)
write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe020002000000000800040001000000", 0x24)
sendto$inet(r0, &(0x7f0000000280)="12f0dda7f17f60b7c78b", 0xa, 0x800, &(0x7f00000001c0)={0x2, 0x4e22, @multicast2}, 0x10)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)

1.614046883s ago: executing program 5 (id=879):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r1=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_setup(0x952, &(0x7f0000000400)={0x0, 0x537, 0x2, 0x1, 0x3d5}, &(0x7f0000000040), &(0x7f0000000240))
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000005c0)={'wlan1\x00', &(0x7f0000000580)=@ethtool_ts_info})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = dup2(0xffffffffffffffff, r2)
r4 = syz_io_uring_setup(0x50fb, &(0x7f0000000300)={0x0, 0xaee2, 0x2000, 0x6, 0xbfdffffc}, &(0x7f0000000200)=<r5=>0x0, &(0x7f0000000280))
ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000180)={0x0, 0x6, 0x4, 0x7, 0xfc, "cfc8346b14ab2280bb7449eca09e26420c4c78", 0x6, 0x197})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
unshare(0x64000600)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100b11b700000feffff1a000000180001801400020064756d6d7930"], 0x2c}}, 0x0)
io_uring_enter(r4, 0x75fa, 0xe475, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000380)={0x0, 0xfffffc85}, &(0x7f00000003c0)=0x8)
ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r1, 0x0, 0x0, 0x8000000})
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r1, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000})
ioctl$IOCTL_STATUS_ACCEL_DEV(r3, 0x40046103, &(0x7f0000000500)={0x6, 0x100, 0x0, 0x7, 0x4, 0x5, 0x8, 0x3, 0x7, 0x1, 0x7, "82121dbf600e6c1a391279561897c80b3db1d29e19b10e072007a2139cde3f82"})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r1})
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000000)

608.82108ms ago: executing program 4 (id=880):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={0x0, r0}, 0x18)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, 0x0, 0x0, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r7, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000f40)={0x14, 0x2, 0x2, 0x301, 0x0, 0x0, {0x3, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4040) (fail_nth: 1)

528.9659ms ago: executing program 5 (id=881):
syz_usb_connect(0x2, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x69, 0xf7, 0x4a, 0x20, 0x10b8, 0x1bb4, 0x3465, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x5d, 0x0, 0x0, 0x1c, 0x53, 0xc2}}]}}]}}, 0x0)
syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xffffffffffffffff, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0)

0s ago: executing program 4 (id=882):
syz_usb_connect(0x7, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e01020301f8011b000100000000090400000190f19c000105f3", @ANYRESDEC=0x0], 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xfe, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x81, 0x10, 0x9, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x3, 0x6, {0x9, 0x21, 0x9, 0x5, 0x1, {0x22, 0x403}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x2, 0x3, 0x8b}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x0, 0x2, 0xe, 0x10, 0xb0}, 0x27, &(0x7f00000000c0)={0x5, 0xf, 0x27, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x60, 0xe, 0xb, 0xd, 0x1}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "2b0cc7efe4e07ad642520d4128fe9564"}]}, 0x2, [{0x2a, &(0x7f0000000100)=@string={0x2a, 0x3, "264a7116f8685ad33244cdf0ed527d96c058c8da073c36b5569ade2220bea43f82b521d71a4a7583"}}, {0xa2, &(0x7f0000000140)=@string={0xa2, 0x3, "4e882c400bf3eac361e7b7321e3bc96f62202129505e783184570697c28d6965d2449adb7b9063adaf0ba89ed5848fce9028f5d714a089423eba3cd23c30e573e4a648397aac9072e4d3088665297f78e644b640caeecd1e534275d12983a0e456cd8800ceaa9fa46dda2a952c4d1366d8b55260ebc5f0b5975e22618a0fea96260202faf5cc2cc2c58114a0b3943e03e6312a3280088a0b99572cf2553fa188"}}]}) (async)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xfe, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x81, 0x10, 0x9, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x3, 0x6, {0x9, 0x21, 0x9, 0x5, 0x1, {0x22, 0x403}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x2, 0x3, 0x8b}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x0, 0x2, 0xe, 0x10, 0xb0}, 0x27, &(0x7f00000000c0)={0x5, 0xf, 0x27, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x60, 0xe, 0xb, 0xd, 0x1}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "2b0cc7efe4e07ad642520d4128fe9564"}]}, 0x2, [{0x2a, &(0x7f0000000100)=@string={0x2a, 0x3, "264a7116f8685ad33244cdf0ed527d96c058c8da073c36b5569ade2220bea43f82b521d71a4a7583"}}, {0xa2, &(0x7f0000000140)=@string={0xa2, 0x3, "4e882c400bf3eac361e7b7321e3bc96f62202129505e783184570697c28d6965d2449adb7b9063adaf0ba89ed5848fce9028f5d714a089423eba3cd23c30e573e4a648397aac9072e4d3088665297f78e644b640caeecd1e534275d12983a0e456cd8800ceaa9fa46dda2a952c4d1366d8b55260ebc5f0b5975e22618a0fea96260202faf5cc2cc2c58114a0b3943e03e6312a3280088a0b99572cf2553fa188"}}]})

kernel console output (not intermixed with test programs):

ce) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  114.814330][ T6339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  114.881096][ T6339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  115.103855][ T5825] Bluetooth: Frame is too long (len 18, expected len 4)
[  116.195564][ T6339] team0: Port device team_slave_0 added
[  116.261460][ T6339] team0: Port device team_slave_1 added
[  116.444268][ T6550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.141'.
[  117.067786][ T6339] batman_adv: batadv0: Adding interface: batadv_slave_0
[  117.200813][ T6339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  117.260239][   T30] audit: type=1400 audit(1753502999.365:315): avc:  denied  { getopt } for  pid=6554 comm="syz.2.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  117.260277][ T6339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  117.303898][   T30] audit: type=1400 audit(1753502999.365:316): avc:  denied  { ioctl } for  pid=6554 comm="syz.2.142" path="socket:[9609]" dev="sockfs" ino=9609 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  117.343447][ T6339] batman_adv: batadv0: Adding interface: batadv_slave_1
[  117.352403][ T6339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  117.378403][ T6339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  117.512232][ T6339] hsr_slave_0: entered promiscuous mode
[  117.544101][ T6339] hsr_slave_1: entered promiscuous mode
[  118.285606][   T30] audit: type=1400 audit(1753503000.405:317): avc:  denied  { create } for  pid=6574 comm="syz.2.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  118.666356][   T30] audit: type=1400 audit(1753503000.405:318): avc:  denied  { setopt } for  pid=6574 comm="syz.2.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  118.711644][   T30] audit: type=1400 audit(1753503000.415:319): avc:  denied  { bind } for  pid=6574 comm="syz.2.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  118.829652][ T6583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.146'.
[  119.662029][ T6589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.147'.
[  120.357688][ T6587] netdevsim netdevsim1: Direct firmware load for �J��n���gkN��q>�*x(O�@ēƙ�a�W��fV!����_�)�AD�I��w�C7�;�gB�|h�V`f�?:Vm�UWX:SZ;�˩6h?Ae���i��m�/���S��6��_C?�F failed with error -2
[  120.377344][ T6587] netdevsim netdevsim1: Falling back to sysfs fallback for: �J��n���gkN��q>�*x(O�@ēƙ�a�W��fV!����_�)�AD�I��w�C7�;�gB�|h�V`f�?:Vm�UWX:SZ;�˩6h?Ae���i��m�/���S��6��_C?�F
[  120.876930][ T6593] netlink: 12 bytes leftover after parsing attributes in process `syz.3.148'.
[  121.047122][ T6593] 8021q: adding VLAN 0 to HW filter on device bond1
[  121.090040][ T6604] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=6604 comm=syz.2.151
[  121.181004][ T6605] loop6: detected capacity change from 0 to 524287999
[  121.427010][ T6596] vlan2: entered allmulticast mode
[  121.432438][ T6596] geneve1: entered allmulticast mode
[  121.446935][ T6596] bond1: (slave vlan2): Enslaving as an active interface with an up link
[  121.457333][ T6339] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  121.914186][ T6339] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  122.179551][ T6339] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  122.373888][ T6339] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  122.726124][ T6339] 8021q: adding VLAN 0 to HW filter on device bond0
[  123.096206][ T6339] 8021q: adding VLAN 0 to HW filter on device team0
[  123.583919][ T5931] bridge0: port 1(bridge_slave_0) entered blocking state
[  123.591019][ T5931] bridge0: port 1(bridge_slave_0) entered forwarding state
[  123.688461][ T5931] bridge0: port 2(bridge_slave_1) entered blocking state
[  123.695565][ T5931] bridge0: port 2(bridge_slave_1) entered forwarding state
[  123.732940][ T6636] program syz.2.153 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  123.755111][ T6636] program syz.2.153 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  123.790463][   T30] audit: type=1400 audit(1753503005.865:320): avc:  denied  { read write } for  pid=6621 comm="syz.2.153" name="sg0" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  123.823929][ T6636] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  124.083672][ T6339] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  124.113393][   T30] audit: type=1400 audit(1753503005.865:321): avc:  denied  { open } for  pid=6621 comm="syz.2.153" path="/dev/sg0" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  124.238565][   T30] audit: type=1400 audit(1753503005.885:322): avc:  denied  { ioctl } for  pid=6621 comm="syz.2.153" path="/dev/sg0" dev="devtmpfs" ino=764 ioctlcmd=0x5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  124.394804][   T30] audit: type=1400 audit(1753503005.955:323): avc:  denied  { write } for  pid=6621 comm="syz.2.153" name="snmp" dev="proc" ino=4026533113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  124.418905][   T30] audit: type=1400 audit(1753503005.955:324): avc:  denied  { create } for  pid=6621 comm="syz.2.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  124.448773][ T5825] Bluetooth: Frame is too long (len 18, expected len 4)
[  124.483680][   T30] audit: type=1400 audit(1753503005.955:325): avc:  denied  { ioctl } for  pid=6621 comm="syz.2.153" path="socket:[10659]" dev="sockfs" ino=10659 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  125.227526][ T6339] 8021q: adding VLAN 0 to HW filter on device batadv0
[  125.395835][ T6658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.158'.
[  125.406564][ T6658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.158'.
[  126.660478][   T30] audit: type=1400 audit(1753503008.765:326): avc:  denied  { create } for  pid=6670 comm="syz.3.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  127.371166][ T6679] netdevsim netdevsim4: Direct firmware load for �J��n���gkN��q>�*x(O�@ēƙ�a�W��fV!����_�)�AD�I��w�C7�;�gB�|h�V`f�?:Vm�UWX:SZ;�˩6h?Ae���i��m�/���S��6��_C?�F failed with error -2
[  127.394579][ T6339] veth0_vlan: entered promiscuous mode
[  127.407521][ T6339] veth1_vlan: entered promiscuous mode
[  127.491347][ T6679] netdevsim netdevsim4: Falling back to sysfs fallback for: �J��n���gkN��q>�*x(O�@ēƙ�a�W��fV!����_�)�AD�I��w�C7�;�gB�|h�V`f�?:Vm�UWX:SZ;�˩6h?Ae���i��m�/���S��6��_C?�F
[  127.527507][ T6339] veth0_macvtap: entered promiscuous mode
[  127.575035][ T6339] veth1_macvtap: entered promiscuous mode
[  127.654234][ T6339] batman_adv: batadv0: Interface activated: batadv_slave_0
[  127.679572][ T6692] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[  127.686257][ T6692] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  127.724145][ T6339] batman_adv: batadv0: Interface activated: batadv_slave_1
[  127.725979][ T6692] vhci_hcd vhci_hcd.0: Device attached
[  127.773833][ T6699] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(11)
[  127.780476][ T6699] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  127.810748][ T6339] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  127.824332][ T6699] vhci_hcd vhci_hcd.0: Device attached
[  127.839569][ T6339] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  127.862025][ T6692] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  127.886544][ T6339] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  127.896152][ T1205] vhci_hcd: vhci_device speed not set
[  127.912824][ T6699] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(16)
[  127.919424][ T6699] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  127.932874][ T6339] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  127.933017][ T6699] vhci_hcd vhci_hcd.0: Device attached
[  127.960930][ T1205] usb 39-1: new full-speed USB device number 2 using vhci_hcd
[  127.967809][ T6703] tipc: Started in network mode
[  127.974168][ T6703] tipc: Node identity da78cbef6556, cluster identity 4711
[  127.988686][ T6703] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  128.007843][ T6692] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(14)
[  128.014472][ T6692] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  128.056721][ T6710] syzkaller0: entered promiscuous mode
[  128.089512][ T6692] vhci_hcd vhci_hcd.0: Device attached
[  128.134574][ T6710] syzkaller0: entered allmulticast mode
[  128.345931][ T6692] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(19)
[  128.352574][ T6692] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  128.467540][ T6692] vhci_hcd vhci_hcd.0: Device attached
[  128.648140][ T6698] tipc: Resetting bearer <eth:syzkaller0>
[  128.749976][ T6692] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  128.770570][ T6697] tipc: Resetting bearer <eth:syzkaller0>
[  128.783893][ T6697] tipc: Disabling bearer <eth:syzkaller0>
[  128.831019][ T6692] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  128.894512][ T6699] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  128.961998][   T30] audit: type=1400 audit(1753503011.095:327): avc:  denied  { ioctl } for  pid=6727 comm="syz.2.169" path="socket:[10038]" dev="sockfs" ino=10038 ioctlcmd=0x8b19 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  129.002786][ T6692] vhci_hcd vhci_hcd.0: port 0 already used
[  129.037260][ T5931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.059822][ T5931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.096479][ T6693] vhci_hcd: connection reset by peer
[  129.104990][ T6700] vhci_hcd: connection closed
[  129.110286][ T6707] vhci_hcd: connection closed
[  129.119351][ T6711] vhci_hcd: connection closed
[  129.124093][   T30] audit: type=1400 audit(1753503011.225:328): avc:  denied  { execute } for  pid=6691 comm="syz.3.165" path="/31/cpu.stat" dev="tmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  129.153050][ T6718] vhci_hcd: connection closed
[  129.201009][ T6175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.233189][ T6173] vhci_hcd: stop threads
[  129.238260][ T6173] vhci_hcd: release socket
[  129.272371][ T6173] vhci_hcd: disconnect device
[  129.305765][ T6173] vhci_hcd: stop threads
[  129.317523][ T6173] vhci_hcd: release socket
[  129.342195][ T6175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.365531][ T6173] vhci_hcd: disconnect device
[  129.417812][ T6173] vhci_hcd: stop threads
[  129.656250][ T6745] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  130.079902][ T6173] vhci_hcd: release socket
[  130.086915][ T6173] vhci_hcd: disconnect device
[  130.092307][ T6173] vhci_hcd: stop threads
[  130.096608][ T6173] vhci_hcd: release socket
[  130.101866][ T6173] vhci_hcd: disconnect device
[  130.106875][ T6173] vhci_hcd: stop threads
[  130.112435][ T6173] vhci_hcd: release socket
[  130.121605][ T6173] vhci_hcd: disconnect device
[  131.142280][   T30] audit: type=1400 audit(1753503013.265:329): avc:  denied  { read } for  pid=6764 comm="syz.2.178" name="/" dev="configfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  131.209919][ T5932] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  131.212780][   T30] audit: type=1400 audit(1753503013.265:330): avc:  denied  { open } for  pid=6764 comm="syz.2.178" path="/41/file0" dev="configfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  131.403779][ T6779] process 'syz.2.180' launched './file0' with NULL argv: empty string added
[  131.412990][ T5932] usb 6-1: Using ep0 maxpacket: 32
[  131.428040][   T30] audit: type=1400 audit(1753503013.555:331): avc:  denied  { bind } for  pid=6776 comm="syz.1.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  131.431737][ T5932] usb 6-1: New USB device found, idVendor=0c72, idProduct=0011, bcdDevice= 9.75
[  131.503328][   T30] audit: type=1400 audit(1753503013.635:332): avc:  denied  { unmount } for  pid=5828 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  131.527373][ T5932] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.683020][ T5932] usb 6-1: Product: syz
[  131.687334][ T5932] usb 6-1: Manufacturer: syz
[  131.692380][ T5932] usb 6-1: SerialNumber: syz
[  131.699062][ T5932] usb 6-1: config 0 descriptor??
[  132.284502][ T5932] peak_usb 6-1:0.0 can0: unable to request usb[type=0 value=1] err=-71
[  132.292883][ T5932] peak_usb 6-1:0.0: unable to read PCAN-USB Pro FD firmware info (err -71)
[  132.326879][   T30] audit: type=1400 audit(1753503014.455:333): avc:  denied  { write } for  pid=6795 comm="syz.2.186" lport=33097 faddr=::ffff:100.1.1.1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  132.348211][ T6798] netlink: 'syz.1.187': attribute type 11 has an invalid length.
[  132.430606][ T6798] netlink: 31 bytes leftover after parsing attributes in process `syz.1.187'.
[  132.439099][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  132.448201][ T5932] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -71
[  132.470761][ T5932] usb 6-1: USB disconnect, device number 2
[  132.525238][   T30] audit: type=1400 audit(1753503014.495:334): avc:  denied  { setopt } for  pid=6795 comm="syz.2.186" lport=33097 faddr=::ffff:100.1.1.1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  132.599727][   T30] audit: type=1400 audit(1753503014.705:335): avc:  denied  { mount } for  pid=6802 comm="syz.3.189" name="/" dev="ramfs" ino=10193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  133.140617][ T1205] vhci_hcd: vhci_device speed not set
[  133.599156][   T30] audit: type=1400 audit(1753503015.725:336): avc:  denied  { execute } for  pid=6845 comm="syz.1.205" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=11306 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  134.073622][ T6870] syzkaller0: entered promiscuous mode
[  134.080482][ T6870] syzkaller0: entered allmulticast mode
[  134.434855][ T5901] usb usb40-port1: attempt power cycle
[  134.689281][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  134.689295][   T30] audit: type=1400 audit(1753503016.815:339): avc:  denied  { create } for  pid=6906 comm="syz.1.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  134.769411][   T30] audit: type=1400 audit(1753503016.835:340): avc:  denied  { write } for  pid=6906 comm="syz.1.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  135.041865][ T5901] usb usb40-port1: unable to enumerate USB device
[  136.947895][   T30] audit: type=1400 audit(1753503019.075:341): avc:  denied  { name_connect } for  pid=6961 comm="syz.5.243" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  137.594735][ T5871] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  137.903946][ T5901] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  137.944670][ T5871] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  137.961754][ T5901] hid-generic 0000:0000:0000.0004: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  138.346891][ T6984] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(11)
[  138.353529][ T6984] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  138.380321][ T6984] vhci_hcd vhci_hcd.0: Device attached
[  138.478243][ T6981] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8)
[  138.484801][ T6981] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  138.562650][ T6984] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  138.576764][ T6981] vhci_hcd vhci_hcd.0: Device attached
[  138.739479][ T6981] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(16)
[  138.742507][ T6990] fido_id[6990]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  138.746095][ T6981] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  138.780515][   T10] usb 43-2: new low-speed USB device number 2 using vhci_hcd
[  138.857849][ T6988] fido_id[6988]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  138.862386][ T6981] vhci_hcd vhci_hcd.0: Device attached
[  139.050033][ T6984] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(15)
[  139.056670][ T6984] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  139.106591][ T6984] vhci_hcd vhci_hcd.0: Device attached
[  139.151083][ T6981] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(18)
[  139.157723][ T6981] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  139.189986][ T6981] vhci_hcd vhci_hcd.0: Device attached
[  139.209575][ T7005] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.218261][ T7005] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.244365][ T6981] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  139.255729][ T6981] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  139.308693][ T6981] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  139.646696][ T6981] vhci_hcd vhci_hcd.0: port 0 already used
[  139.654756][ T7011] vhci_hcd: connection closed
[  139.656221][ T5943] vhci_hcd: stop threads
[  139.666399][ T7007] vhci_hcd: connection closed
[  139.666467][ T7000] vhci_hcd: connection closed
[  139.681759][ T6985] vhci_hcd: connection reset by peer
[  139.692292][ T5943] vhci_hcd: release socket
[  139.708452][ T5943] vhci_hcd: disconnect device
[  139.708638][ T6983] vhci_hcd: connection closed
[  139.721930][ T5943] vhci_hcd: stop threads
[  139.769219][ T5943] vhci_hcd: release socket
[  139.784157][ T5943] vhci_hcd: disconnect device
[  140.071951][ T5943] vhci_hcd: stop threads
[  140.094047][ T5943] vhci_hcd: release socket
[  140.098640][ T5943] vhci_hcd: disconnect device
[  140.111235][ T5943] vhci_hcd: stop threads
[  140.115561][ T5943] vhci_hcd: release socket
[  140.120103][ T5943] vhci_hcd: disconnect device
[  140.124992][ T5943] vhci_hcd: stop threads
[  140.129275][ T5943] vhci_hcd: release socket
[  140.150281][ T5943] vhci_hcd: disconnect device
[  140.294356][ T7005] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  140.308456][ T7005] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  140.733753][ T7005] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.742803][ T7005] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.752635][ T7005] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.768087][ T7005] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.770767][ T5901] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  140.796795][ T5901] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  140.839530][ T7039] loop6: detected capacity change from 0 to 524287999
[  141.387990][ T7048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.263'.
[  143.351989][ T7078] syz.4.272: attempt to access beyond end of device
[  143.351989][ T7078] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  144.500544][   T10] vhci_hcd: vhci_device speed not set
[  144.794487][ T5898] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  144.804232][ T5898] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  146.161021][ T1205] usb usb44-port1: attempt power cycle
[  147.195812][   T30] audit: type=1400 audit(1753503029.325:342): avc:  denied  { ioctl } for  pid=7125 comm="syz.3.285" path="socket:[12590]" dev="sockfs" ino=12590 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  147.226288][ T7126] vxcan1: tx drop: invalid sa for name 0x0000000000000001
[  147.255069][   T30] audit: type=1400 audit(1753503029.355:343): avc:  denied  { bind } for  pid=7125 comm="syz.3.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  147.288512][   T30] audit: type=1400 audit(1753503029.355:344): avc:  denied  { setopt } for  pid=7125 comm="syz.3.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  147.354349][   T30] audit: type=1400 audit(1753503029.355:345): avc:  denied  { write } for  pid=7125 comm="syz.3.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  147.381692][   T30] audit: type=1400 audit(1753503029.475:346): avc:  denied  { mounton } for  pid=7129 comm="syz.3.288" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  147.441030][ T1205] usb usb44-port1: unable to enumerate USB device
[  148.590738][ T1205] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  149.103763][ T1205] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  149.118585][ T1205] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  149.128928][ T1205] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  149.583523][ T1205] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  149.604134][ T1205] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.644867][ T1205] usb 3-1: config 0 descriptor??
[  149.820981][ T1205] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  149.856789][ T1205] hid-generic 0000:0000:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  149.917157][ T5871] usb 3-1: USB disconnect, device number 7
[  150.474731][ T7190] vxcan1: tx drop: invalid sa for name 0x0000000000000001
[  154.478810][ T7240] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  155.395840][ T7249] vxcan1: tx drop: invalid sa for name 0x0000000000000001
[  155.570505][ T1205] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  155.853078][ T1205] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  155.886276][ T1205] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  155.960192][ T1205] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  156.008733][   T10] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  156.028285][ T1205] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  156.044696][   T10] hid-generic 0000:0000:0000.0008: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  156.068424][ T1205] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.169909][   T30] audit: type=1400 audit(1753503038.295:347): avc:  denied  { mounton } for  pid=7265 comm="syz.5.317" path="/proc/61/cgroup" dev="proc" ino=12768 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[  156.192542][    C0] vkms_vblank_simulate: vblank timer overrun
[  156.210091][ T1205] usb 2-1: config 0 descriptor??
[  156.817005][ T5901] usb 2-1: USB disconnect, device number 3
[  158.132239][ T7302] netlink: 24 bytes leftover after parsing attributes in process `syz.4.324'.
[  158.422560][ T5825] Bluetooth: Frame is too long (len 18, expected len 4)
[  159.465820][ T7315] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  160.503675][ T1205] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  160.882525][ T1205] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  161.999267][ T5825] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[  162.009117][ T5825] CPU: 0 UID: 0 PID: 5825 Comm: kworker/u9:2 Not tainted 6.16.0-rc7-syzkaller-00114-g327579671a9b #0 PREEMPT(full) 
[  162.009141][ T5825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  162.009153][ T5825] Workqueue: hci0 hci_rx_work
[  162.009178][ T5825] Call Trace:
[  162.009184][ T5825]  <TASK>
[  162.009191][ T5825]  dump_stack_lvl+0x16c/0x1f0
[  162.009220][ T5825]  sysfs_warn_dup+0x7f/0xa0
[  162.009248][ T5825]  sysfs_create_dir_ns+0x24b/0x2b0
[  162.009274][ T5825]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  162.009304][ T5825]  ? find_held_lock+0x2b/0x80
[  162.009333][ T5825]  ? do_raw_spin_unlock+0x172/0x230
[  162.009357][ T5825]  kobject_add_internal+0x2c4/0x9b0
[  162.009380][ T5825]  kobject_add+0x16e/0x240
[  162.009399][ T5825]  ? __pfx_kobject_add+0x10/0x10
[  162.009418][ T5825]  ? do_raw_spin_unlock+0x172/0x230
[  162.009438][ T5825]  ? kobject_put+0xab/0x5a0
[  162.009461][ T5825]  device_add+0x288/0x1a70
[  162.009483][ T5825]  ? __pfx_dev_set_name+0x10/0x10
[  162.009506][ T5825]  ? __pfx_device_add+0x10/0x10
[  162.009527][ T5825]  ? mgmt_send_event_skb+0x2fb/0x460
[  162.009562][ T5825]  hci_conn_add_sysfs+0x17e/0x230
[  162.009581][ T5825]  le_conn_complete_evt+0x1075/0x1d70
[  162.009613][ T5825]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  162.009639][ T5825]  ? hci_event_packet+0x459/0x11c0
[  162.009670][ T5825]  hci_le_conn_complete_evt+0x23c/0x370
[  162.009704][ T5825]  hci_le_meta_evt+0x357/0x5e0
[  162.009723][ T5825]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  162.009754][ T5825]  hci_event_packet+0x682/0x11c0
[  162.009783][ T5825]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  162.009802][ T5825]  ? __pfx_hci_event_packet+0x10/0x10
[  162.009833][ T5825]  ? kcov_remote_start+0x3c9/0x6d0
[  162.009852][ T5825]  ? lockdep_hardirqs_on+0x7c/0x110
[  162.009886][ T5825]  hci_rx_work+0x2c5/0x16b0
[  162.009904][ T5825]  ? rcu_is_watching+0x12/0xc0
[  162.009931][ T5825]  process_one_work+0x9cc/0x1b70
[  162.009961][ T5825]  ? __pfx_process_one_work+0x10/0x10
[  162.009988][ T5825]  ? assign_work+0x1a0/0x250
[  162.010008][ T5825]  worker_thread+0x6c8/0xf10
[  162.010039][ T5825]  ? __kthread_parkme+0x19e/0x250
[  162.010064][ T5825]  ? __pfx_worker_thread+0x10/0x10
[  162.010082][ T5825]  kthread+0x3c2/0x780
[  162.010099][ T5825]  ? __pfx_kthread+0x10/0x10
[  162.010117][ T5825]  ? rcu_is_watching+0x12/0xc0
[  162.010138][ T5825]  ? __pfx_kthread+0x10/0x10
[  162.010154][ T5825]  ret_from_fork+0x5d4/0x6f0
[  162.010179][ T5825]  ? __pfx_kthread+0x10/0x10
[  162.010196][ T5825]  ret_from_fork_asm+0x1a/0x30
[  162.010227][ T5825]  </TASK>
[  162.257391][ T5962] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  162.269491][ T5825] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  162.283613][ T5825] Bluetooth: hci0: failed to register connection device
[  162.425281][ T5962] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  162.435533][ T5962] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  162.447799][ T5962] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  162.506542][ T5962] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  162.518682][ T5962] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.539065][ T5962] usb 5-1: config 0 descriptor??
[  162.652643][ T5871] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  162.685857][   T30] audit: type=1400 audit(1753503044.815:348): avc:  denied  { write } for  pid=7368 comm="syz.5.338" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  162.718705][ T5871] hid-generic 0000:0000:0000.000A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  162.762771][ T7373] netlink: 24 bytes leftover after parsing attributes in process `syz.5.338'.
[  162.795641][ T5871] usb 5-1: USB disconnect, device number 9
[  163.030989][ T7381] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  163.847798][ T7374] fido_id[7374]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  164.256782][ T7396] syz.3.342: attempt to access beyond end of device
[  164.256782][ T7396] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  167.594162][ T7425] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8)
[  167.600714][ T7425] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  167.763436][ T7425] vhci_hcd vhci_hcd.0: Device attached
[  167.869257][ T7429] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(11)
[  167.875881][ T7429] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  167.890650][ T7429] vhci_hcd vhci_hcd.0: Device attached
[  168.004405][ T5962] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  168.038277][ T5962] hid-generic 0000:0000:0000.000B: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  168.060185][   T10] vhci_hcd: vhci_device speed not set
[  168.120295][   T10] usb 41-1: new full-speed USB device number 2 using vhci_hcd
[  168.202508][ T7425] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  168.368746][ T7429] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(16)
[  168.375383][ T7429] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  168.677125][ T7429] vhci_hcd vhci_hcd.0: Device attached
[  168.781267][ T7429] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(19)
[  168.787903][ T7429] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  168.816580][ T7425] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(14)
[  168.823226][ T7425] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  168.843428][ T7429] vhci_hcd vhci_hcd.0: Device attached
[  168.859030][ T7425] vhci_hcd vhci_hcd.0: Device attached
[  168.899642][ T7425] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  168.998416][ T7425] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  169.010791][ T7425] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  169.452725][   T30] audit: type=1400 audit(1753503051.545:349): avc:  denied  { accept } for  pid=7465 comm="syz.5.361" lport=44622 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  169.481651][ T7429] vhci_hcd vhci_hcd.0: port 0 already used
[  169.488112][ T5825] Bluetooth: hci0: command 0x0406 tx timeout
[  169.543935][ T7451] vhci_hcd: connection closed
[  169.545706][ T6173] vhci_hcd: stop threads
[  169.545804][ T7449] vhci_hcd: connection closed
[  169.556365][ T7433] vhci_hcd: connection closed
[  169.561110][ T7447] vhci_hcd: connection closed
[  169.565042][ T7426] vhci_hcd: connection reset by peer
[  169.710258][ T6173] vhci_hcd: release socket
[  169.754774][ T6173] vhci_hcd: disconnect device
[  169.758865][ T7479] vxcan1: tx drop: invalid sa for name 0x0000000000000001
[  169.790444][ T6173] vhci_hcd: stop threads
[  169.794719][ T6173] vhci_hcd: release socket
[  169.927297][ T6173] vhci_hcd: disconnect device
[  169.933167][ T6173] vhci_hcd: stop threads
[  169.937430][ T6173] vhci_hcd: release socket
[  169.944746][ T6173] vhci_hcd: disconnect device
[  170.200753][ T6173] vhci_hcd: stop threads
[  170.224421][ T6173] vhci_hcd: release socket
[  170.257115][ T6173] vhci_hcd: disconnect device
[  170.267628][ T6173] vhci_hcd: stop threads
[  170.276745][ T6173] vhci_hcd: release socket
[  170.332198][ T6173] vhci_hcd: disconnect device
[  170.902692][ T7501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.369'.
[  171.435395][ T1205] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  171.625312][ T1205] hid-generic 0000:0000:0000.000C: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  173.004350][ T5871] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  173.081031][ T5871] hid-generic 0000:0000:0000.000D: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  173.710167][   T10] vhci_hcd: vhci_device speed not set
[  174.518282][ T7557] fido_id[7557]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  175.044121][ T7577] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7577 comm=syz.3.388
[  175.118981][ T7580] No control pipe specified
[  175.292946][   T30] audit: type=1400 audit(1753503057.415:350): avc:  denied  { map } for  pid=7587 comm="syz.2.393" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  176.183570][ T5825] Bluetooth: Frame is too long (len 18, expected len 4)
[  176.353448][ T5901] usb usb42-port1: attempt power cycle
[  176.734389][ T7607] 9pnet_fd: Insufficient options for proto=fd
[  177.501586][ T5901] usb usb42-port1: unable to enumerate USB device
[  177.625138][   T30] audit: type=1400 audit(1753503059.725:351): avc:  denied  { listen } for  pid=7614 comm="syz.1.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  178.006383][ T7632] netlink: 36 bytes leftover after parsing attributes in process `syz.2.405'.
[  179.889056][ T5825] Bluetooth: Frame is too long (len 18, expected len 4)
[  182.431646][ T7688] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  182.711556][ T7692] vxcan1: tx drop: invalid sa for name 0x0000000000000001
[  184.016074][ T7709] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  184.130246][ T7703] Bluetooth: Frame is too long (len 18, expected len 4)
[  185.010461][ T7726] netlink: 36 bytes leftover after parsing attributes in process `syz.2.426'.
[  185.015957][ T7729] netlink: 24 bytes leftover after parsing attributes in process `syz.1.428'.
[  185.668345][ T7703] Bluetooth: hci4: command 0x0406 tx timeout
[  185.717458][ T5825] Bluetooth: hci1: command 0x0406 tx timeout
[  185.718187][ T7702] Bluetooth: hci2: command 0x0406 tx timeout
[  185.729968][   T50] Bluetooth: hci3: command 0x0406 tx timeout
[  186.064463][   T30] audit: type=1400 audit(1753503068.195:352): avc:  denied  { setopt } for  pid=7746 comm="syz.1.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  186.083670][    C0] vkms_vblank_simulate: vblank timer overrun
[  186.153925][ T5901] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  186.216421][ T5901] hid-generic 0000:0000:0000.000E: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  186.446347][ T7765] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  187.527138][ T7769] syz.1.437: attempt to access beyond end of device
[  187.527138][ T7769] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  187.856660][ T5150] Bluetooth: Frame is too long (len 18, expected len 4)
[  189.740424][ T5150] Bluetooth: Frame is too long (len 18, expected len 4)
[  190.734043][ T7802] netlink: 24 bytes leftover after parsing attributes in process `syz.5.446'.
[  192.691027][ T7833] overlayfs: failed to resolve './file1': -2
[  195.381535][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  198.756189][ T7882] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  199.643701][ T7884] overlayfs: failed to resolve './file1': -2
[  200.141058][ T5150] Bluetooth: Frame is too long (len 18, expected len 4)
[  200.149386][ T5150] Bluetooth: Frame is too long (len 18, expected len 4)
[  201.722722][ T7907] binder: BINDER_SET_CONTEXT_MGR already set
[  201.728921][ T7907] binder: 7906:7907 ioctl 4018620d 200000000040 returned -16
[  202.137626][ T7916] netlink: 36 bytes leftover after parsing attributes in process `syz.1.484'.
[  203.145231][ T7930] syz.1.486: attempt to access beyond end of device
[  203.145231][ T7930] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  204.646505][ T7941] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[  204.653051][ T7941] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  204.684086][ T7941] vhci_hcd vhci_hcd.0: Device attached
[  204.697079][ T7941] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  204.700200][ T7948] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(11)
[  204.711766][ T7948] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  204.722988][ T7948] vhci_hcd vhci_hcd.0: Device attached
[  204.756643][ T7941] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(15)
[  204.763283][ T7941] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  204.813229][ T7941] vhci_hcd vhci_hcd.0: Device attached
[  204.870176][ T5871] vhci_hcd: vhci_device speed not set
[  205.040223][ T5871] usb 35-1: new full-speed USB device number 2 using vhci_hcd
[  205.099528][ T7948] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(18)
[  205.106174][ T7948] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  205.243765][ T7964] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(21)
[  205.250393][ T7964] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  205.309469][ T7948] vhci_hcd vhci_hcd.0: Device attached
[  205.380817][ T7964] vhci_hcd vhci_hcd.0: Device attached
[  205.414582][ T7941] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  205.686229][ T7941] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  205.752602][ T7948] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  206.012096][ T7948] vhci_hcd vhci_hcd.0: port 0 already used
[  206.099198][ T7966] vhci_hcd: connection closed
[  206.099376][ T7961] vhci_hcd: connection closed
[  206.108375][   T59] vhci_hcd: stop threads
[  206.131359][ T7949] vhci_hcd: connection closed
[  206.131570][ T7953] vhci_hcd: connection closed
[  206.136305][ T7946] vhci_hcd: connection reset by peer
[  206.173255][ T7702] Bluetooth: Frame is too long (len 18, expected len 4)
[  206.257001][   T30] audit: type=1400 audit(1753503088.295:353): avc:  denied  { map } for  pid=7982 comm="syz.5.500" path="socket:[14851]" dev="sockfs" ino=14851 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  206.389017][   T59] vhci_hcd: release socket
[  206.399768][   T59] vhci_hcd: disconnect device
[  206.427315][   T59] vhci_hcd: stop threads
[  206.467663][   T59] vhci_hcd: release socket
[  206.472775][   T59] vhci_hcd: disconnect device
[  206.477847][   T59] vhci_hcd: stop threads
[  206.485878][   T59] vhci_hcd: release socket
[  206.550247][ T7996] 9pnet_fd: Insufficient options for proto=fd
[  206.662243][ T7995] netlink: 24 bytes leftover after parsing attributes in process `syz.3.504'.
[  206.959565][   T59] vhci_hcd: disconnect device
[  206.964596][   T59] vhci_hcd: stop threads
[  206.969071][   T59] vhci_hcd: release socket
[  206.973612][   T59] vhci_hcd: disconnect device
[  206.979599][   T59] vhci_hcd: stop threads
[  206.984145][   T59] vhci_hcd: release socket
[  206.988628][   T59] vhci_hcd: disconnect device
[  208.172670][ T8019] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  210.410503][ T5871] vhci_hcd: vhci_device speed not set
[  211.479446][ T8061] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  212.475697][ T7702] Bluetooth: Frame is too long (len 18, expected len 4)
[  213.010574][ T5901] usb usb36-port1: attempt power cycle
[  213.703367][ T8072] netdevsim netdevsim4: Direct firmware load for �J��n���gkN��q>�*x(O�@ēƙ�a�W��fV!����_�)�AD�I��w�C7�;�gB�|h�V`f�?:Vm�UWX:SZ;�˩6h?Ae���i��m�/���S��6��_C?�F failed with error -2
[  213.722684][ T5871] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  213.724096][ T5871] hid-generic 0000:0000:0000.000F: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  213.740237][ T8072] netdevsim netdevsim4: Falling back to sysfs fallback for: �J��n���gkN��q>�*x(O�@ēƙ�a�W��fV!����_�)�AD�I��w�C7�;�gB�|h�V`f�?:Vm�UWX:SZ;�˩6h?Ae���i��m�/���S��6��_C?�F
[  213.783833][ T8078] kAFS: No cell specified
[  214.115743][ T5901] usb usb36-port1: unable to enumerate USB device
[  214.734267][ T8096] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  218.312920][ T8152] netlink: 24 bytes leftover after parsing attributes in process `syz.1.550'.
[  221.277482][ T8186] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  224.163264][ T5901] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[  224.355231][ T8210] netlink: 8 bytes leftover after parsing attributes in process `syz.5.565'.
[  224.369389][ T5901] usb 2-1: config 0 has an invalid interface number: 93 but max is 0
[  224.392326][ T8210] netlink: 8 bytes leftover after parsing attributes in process `syz.5.565'.
[  225.099528][ T5901] usb 2-1: config 0 has no interface number 0
[  225.181082][ T5901] usb 2-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65
[  225.190522][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.198627][ T5901] usb 2-1: Product: syz
[  225.213592][ T5901] usb 2-1: Manufacturer: syz
[  225.218220][ T5901] usb 2-1: SerialNumber: syz
[  225.256711][ T5901] usb 2-1: config 0 descriptor??
[  225.576034][ T5901] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in cold state, will try to load a firmware
[  225.781358][   T30] audit: type=1400 audit(1753503107.895:354): avc:  denied  { firmware_load } for  pid=5901 comm="kworker/1:4" path="/lib/firmware/dvb-usb-dib0700-1.20.fw" dev="sda1" ino=414 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[  225.820126][ T5934] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  225.950730][ T5901] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  226.026177][ T5901] dib0700: firmware download failed at 7 with -22
[  226.049644][ T5901] usb 2-1: USB disconnect, device number 4
[  226.168754][ T5934] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  226.193143][ T5934] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  226.205794][ T5934] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  226.216970][ T5934] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  226.265611][ T5934] usb 6-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  226.300102][ T5934] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  226.339502][ T5934] usb 6-1: config 0 descriptor??
[  226.912883][ T5934] usb 6-1: USB disconnect, device number 3
[  227.166001][ T7702] Bluetooth: hci0: command 0x0406 tx timeout
[  227.739336][ T8250] netlink: 24 bytes leftover after parsing attributes in process `syz.2.577'.
[  227.913726][ T8255] afs: Unknown parameter 'dy'
[  229.910130][ T1205] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  229.997427][   T10] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  230.027179][   T10] hid-generic 0000:0000:0000.0010: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  230.104472][ T1205] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  230.133022][ T1205] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  230.188820][ T1205] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  230.230129][ T1205] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  230.270095][ T1205] usb 6-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  230.300059][ T1205] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.334238][ T1205] usb 6-1: config 0 descriptor??
[  230.415106][ T8294] netdevsim netdevsim4: Direct firmware load for �J��n���gkN��q>�*x(O�@ēƙ�a�W��fV!����_�)�AD�I��w�C7�;�gB�|h�V`f�?:Vm�UWX:SZ;�˩6h?Ae���i��m�/���S��6��_C?�F failed with error -2
[  230.434834][ T8294] netdevsim netdevsim4: Falling back to sysfs fallback for: �J��n���gkN��q>�*x(O�@ēƙ�a�W��fV!����_�)�AD�I��w�C7�;�gB�|h�V`f�?:Vm�UWX:SZ;�˩6h?Ae���i��m�/���S��6��_C?�F
[  230.592413][   T10] usb 6-1: USB disconnect, device number 4
[  230.968563][ T7702] Bluetooth: Frame is too long (len 18, expected len 4)
[  231.853600][ T5962] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  232.409010][ T5962] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  232.440275][ T5962] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  232.640085][ T5962] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  232.660199][ T5962] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  232.673340][ T5962] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  233.089711][ T5962] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.177404][ T5962] usb 3-1: config 0 descriptor??
[  234.162927][   T24] usb 3-1: USB disconnect, device number 8
[  234.590275][ T5962] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[  235.000872][ T5962] usb 6-1: config 0 has an invalid interface number: 93 but max is 0
[  235.019201][ T5962] usb 6-1: config 0 has no interface number 0
[  235.072070][ T5962] usb 6-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65
[  235.084091][ T5962] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  235.120179][ T5962] usb 6-1: Product: syz
[  235.134810][ T5962] usb 6-1: Manufacturer: syz
[  235.145128][ T5962] usb 6-1: SerialNumber: syz
[  235.312479][   T24] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  235.330906][   T24] hid-generic 0000:0000:0000.0011: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  235.443087][ T5962] usb 6-1: config 0 descriptor??
[  235.667775][ T7702] Bluetooth: Frame is too long (len 18, expected len 4)
[  235.973250][ T8365] No control pipe specified
[  235.993920][ T5962] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state.
[  236.036691][ T5962] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  236.065906][ T5962] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design)
[  236.106646][ T5962] usb 6-1: media controller created
[  236.143896][ T5962] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  236.167732][ T8369] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8)
[  236.174280][ T8369] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  236.204004][   T30] audit: type=1400 audit(1753503118.335:355): avc:  denied  { append } for  pid=8337 comm="syz.5.603" name="i2c-1" dev="devtmpfs" ino=2912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  236.232085][ T8369] vhci_hcd vhci_hcd.0: Device attached
[  236.248967][ T8338] netlink: 156 bytes leftover after parsing attributes in process `syz.5.603'.
[  236.280498][ T8377] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(10)
[  236.287161][ T8377] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  236.307479][ T5962] DVB: Unable to find symbol dib7000p_attach()
[  236.317238][ T8369] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  236.330856][ T5962] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design'
[  236.360274][ T8377] vhci_hcd vhci_hcd.0: Device attached
[  236.361959][ T5962] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  236.388576][ T8381] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(16)
[  236.395218][ T8381] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  236.395741][ T5962] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design)
[  236.430129][ T5962] usb 6-1: media controller created
[  236.438664][ T5962] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  236.450261][   T24] vhci_hcd: vhci_device speed not set
[  236.460809][ T8381] vhci_hcd vhci_hcd.0: Device attached
[  236.467654][ T8369] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(15)
[  236.474264][ T8369] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  236.482507][ T5962] dib0700: the master dib7090 has to be initialized first
[  236.499945][ T5962] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design'
[  236.520153][   T24] usb 37-1: new full-speed USB device number 2 using vhci_hcd
[  236.535324][ T8369] vhci_hcd vhci_hcd.0: Device attached
[  236.557231][ T8377] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(18)
[  236.563860][ T8377] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  236.581892][ T5962] rc_core: IR keymap rc-dib0700-rc5 not found
[  236.582779][ T8377] vhci_hcd vhci_hcd.0: Device attached
[  236.592327][ T5962] Registered IR keymap rc-empty
[  236.612963][ T5962] dvb-usb: could not initialize remote control.
[  236.626275][ T8369] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  236.640782][ T5962] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected.
[  236.670824][ T8369] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  236.725093][ T7702] Bluetooth: Frame is too long (len 18, expected len 4)
[  236.736714][ T5962] usb 6-1: USB disconnect, device number 5
[  236.746348][ T8374] kvm: kvm [8371]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xffff01ff0000101a
[  236.771154][ T5962] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected.
[  236.801378][ T8374] kvm: kvm [8371]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x1000000102c
[  236.884696][ T8374] kvm: kvm [8371]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x10100001018
[  236.919311][ T8377] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  237.023760][ T8374] kvm: kvm [8371]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x1000000102c
[  237.100222][ T8369] vhci_hcd vhci_hcd.0: port 0 already used
[  237.136311][ T8390] vhci_hcd: connection closed
[  237.136517][ T8386] vhci_hcd: connection closed
[  237.141422][ T8378] vhci_hcd: connection closed
[  237.144778][ T8374] kvm: kvm [8371]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x10100001003
[  237.146193][ T8382] vhci_hcd: connection closed
[  237.150871][ T8370] vhci_hcd: connection reset by peer
[  237.180895][ T1165] vhci_hcd: stop threads
[  237.190064][ T1165] vhci_hcd: release socket
[  237.194588][ T1165] vhci_hcd: disconnect device
[  237.208053][ T1165] vhci_hcd: stop threads
[  237.220990][ T1165] vhci_hcd: release socket
[  237.258338][ T1165] vhci_hcd: disconnect device
[  237.265034][ T1165] vhci_hcd: stop threads
[  237.269426][ T1165] vhci_hcd: release socket
[  237.341050][ T1165] vhci_hcd: disconnect device
[  237.352613][ T1165] vhci_hcd: stop threads
[  237.357048][ T1165] vhci_hcd: release socket
[  237.393140][ T1165] vhci_hcd: disconnect device
[  237.428553][ T1165] vhci_hcd: stop threads
[  237.436276][ T1165] vhci_hcd: release socket
[  237.502656][ T1165] vhci_hcd: disconnect device
[  238.151786][ T8415] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  239.430324][ T5962] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[  239.452951][ T5962] hid-generic 0000:0000:0000.0012: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  240.384935][   T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  240.392524][ T7702] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection
[  240.426392][ T8435] kvm: kvm [8434]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xffff01ff0000103b
[  240.462475][ T8435] kvm: kvm [8434]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x1000000103d
[  240.490323][ T1578] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[  240.501489][ T8435] kvm: kvm [8434]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x10000001026
[  240.562246][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  240.584661][ T8446] netdevsim netdevsim1: Direct firmware load for �J��n���gkN��q>�*x(O�@ēƙ�a�W��fV!����_�)�AD�I��w�C7�;�gB�|h�V`f�?:Vm�UWX:SZ;�˩6h?Ae���i��m�/���S��6��_C?�F failed with error -2
[  240.605169][ T8446] netdevsim netdevsim1: Falling back to sysfs fallback for: �J��n���gkN��q>�*x(O�@ēƙ�a�W��fV!����_�)�AD�I��w�C7�;�gB�|h�V`f�?:Vm�UWX:SZ;�˩6h?Ae���i��m�/���S��6��_C?�F
[  240.644036][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  240.721141][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  240.744768][ T1578] usb 5-1: config 0 has an invalid interface number: 93 but max is 0
[  240.800456][   T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  240.923769][   T10] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  240.979177][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.996322][ T1578] usb 5-1: config 0 has no interface number 0
[  241.010625][ T1578] usb 5-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65
[  241.014980][ T8435] kvm: kvm [8434]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x10100001003
[  241.019736][ T1578] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.037572][ T1578] usb 5-1: Product: syz
[  241.041764][ T1578] usb 5-1: Manufacturer: syz
[  241.046362][ T1578] usb 5-1: SerialNumber: syz
[  241.085166][   T10] usb 3-1: config 0 descriptor??
[  241.090427][ T8435] kvm: kvm [8434]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x10000001004
[  241.100598][ T1578] usb 5-1: config 0 descriptor??
[  241.314940][ T1578] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state.
[  241.317612][   T10] usb 3-1: USB disconnect, device number 9
[  241.341628][ T1578] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  241.366305][ T8455] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[  241.372844][ T8455] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  241.385010][ T1578] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design)
[  241.396887][ T1578] usb 5-1: media controller created
[  241.412146][ T8455] vhci_hcd vhci_hcd.0: Device attached
[  241.622931][ T5901] vhci_hcd: vhci_device speed not set
[  241.697396][ T8459] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(11)
[  241.704020][ T8459] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  241.711701][   T24] vhci_hcd: vhci_device speed not set
[  241.719164][ T1578] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  241.744823][ T8463] netlink: 156 bytes leftover after parsing attributes in process `syz.4.629'.
[  241.756005][ T8459] vhci_hcd vhci_hcd.0: Device attached
[  241.799688][ T8455] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  241.814359][ T8455] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(15)
[  241.820988][ T8455] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  241.830222][ T5901] usb 35-1: new full-speed USB device number 3 using vhci_hcd
[  241.864823][ T8455] vhci_hcd vhci_hcd.0: Device attached
[  241.890324][ T7702] Bluetooth: Frame is too long (len 18, expected len 4)
[  241.902433][ T8459] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(18)
[  241.909048][ T8459] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  241.941700][ T8459] vhci_hcd vhci_hcd.0: Device attached
[  241.952630][ T8455] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(17)
[  241.959243][ T8455] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  241.978744][ T1578] DVB: Unable to find symbol dib7000p_attach()
[  242.016301][ T8459] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  242.021123][ T1578] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design'
[  242.036333][ T8455] vhci_hcd vhci_hcd.0: Device attached
[  242.042049][ T1578] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  242.052736][ T1578] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design)
[  242.063658][ T1578] usb 5-1: media controller created
[  242.091595][ T1578] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  242.103271][ T8455] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  242.157336][ T8459] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  242.210866][ T1578] dib0700: the master dib7090 has to be initialized first
[  242.225619][ T1578] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design'
[  242.351265][ T8471] vhci_hcd: connection closed
[  242.351806][ T8468] vhci_hcd: connection closed
[  242.351895][ T8465] vhci_hcd: connection closed
[  242.356531][ T6170] vhci_hcd: stop threads
[  242.550269][ T6170] vhci_hcd: release socket
[  242.610648][ T6170] vhci_hcd: disconnect device
[  242.648754][ T6170] vhci_hcd: stop threads
[  242.670108][ T6170] vhci_hcd: release socket
[  242.711267][ T8456] vhci_hcd: connection reset by peer
[  242.719376][ T8460] vhci_hcd: connection closed
[  242.732483][ T6170] vhci_hcd: disconnect device
[  242.783612][ T6170] vhci_hcd: stop threads
[  242.788227][ T6170] vhci_hcd: release socket
[  242.800294][ T1578] rc_core: IR keymap rc-dib0700-rc5 not found
[  242.806401][ T1578] Registered IR keymap rc-empty
[  242.820330][ T6170] vhci_hcd: disconnect device
[  242.825304][ T6170] vhci_hcd: stop threads
[  242.839215][ T1578] dvb-usb: could not initialize remote control.
[  242.850848][ T6170] vhci_hcd: release socket
[  242.861821][ T6170] vhci_hcd: disconnect device
[  242.866865][ T1578] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected.
[  242.886886][ T6170] vhci_hcd: stop threads
[  242.896989][ T6170] vhci_hcd: release socket
[  242.906931][ T6170] vhci_hcd: disconnect device
[  242.912755][ T1578] usb 5-1: USB disconnect, device number 10
[  242.953836][ T1578] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected.
[  243.047258][ T5934] usb usb38-port1: attempt power cycle
[  243.642944][ T8488] loop6: detected capacity change from 0 to 524287999
[  244.065533][ T5934] usb usb38-port1: unable to enumerate USB device
[  244.182271][ T8498] syz.1.639: attempt to access beyond end of device
[  244.182271][ T8498] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  245.590110][   T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  246.024761][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  246.079779][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  246.189682][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  246.345838][   T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  246.408711][   T10] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  246.467807][ T7702] Bluetooth: Frame is too long (len 18, expected len 4)
[  246.906189][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.919704][   T10] usb 2-1: config 0 descriptor??
[  247.282733][ T5901] vhci_hcd: vhci_device speed not set
[  247.303211][ T7702] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201'
[  247.313037][ T7702] CPU: 1 UID: 0 PID: 7702 Comm: kworker/u9:3 Not tainted 6.16.0-rc7-syzkaller-00114-g327579671a9b #0 PREEMPT(full) 
[  247.313058][ T7702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  247.313065][ T7702] Workqueue: hci4 hci_rx_work
[  247.313081][ T7702] Call Trace:
[  247.313085][ T7702]  <TASK>
[  247.313090][ T7702]  dump_stack_lvl+0x16c/0x1f0
[  247.313109][ T7702]  sysfs_warn_dup+0x7f/0xa0
[  247.313128][ T7702]  sysfs_create_dir_ns+0x24b/0x2b0
[  247.313145][ T7702]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  247.313160][ T7702]  ? find_held_lock+0x2b/0x80
[  247.313175][ T7702]  ? do_raw_spin_unlock+0x172/0x230
[  247.313188][ T7702]  kobject_add_internal+0x2c4/0x9b0
[  247.313203][ T7702]  kobject_add+0x16e/0x240
[  247.313214][ T7702]  ? __pfx_kobject_add+0x10/0x10
[  247.313227][ T7702]  ? do_raw_spin_unlock+0x172/0x230
[  247.313239][ T7702]  ? kobject_put+0xab/0x5a0
[  247.313253][ T7702]  device_add+0x288/0x1a70
[  247.313265][ T7702]  ? __pfx_dev_set_name+0x10/0x10
[  247.313279][ T7702]  ? __pfx_device_add+0x10/0x10
[  247.313291][ T7702]  ? mgmt_send_event_skb+0x2fb/0x460
[  247.313310][ T7702]  hci_conn_add_sysfs+0x17e/0x230
[  247.313322][ T7702]  le_conn_complete_evt+0x1075/0x1d70
[  247.313341][ T7702]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  247.313356][ T7702]  ? hci_event_packet+0x459/0x11c0
[  247.313375][ T7702]  hci_le_conn_complete_evt+0x23c/0x370
[  247.313394][ T7702]  hci_le_meta_evt+0x357/0x5e0
[  247.313404][ T7702]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  247.313422][ T7702]  hci_event_packet+0x682/0x11c0
[  247.313438][ T7702]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  247.313449][ T7702]  ? __pfx_hci_event_packet+0x10/0x10
[  247.313465][ T7702]  ? kcov_remote_start+0x3c9/0x6d0
[  247.313477][ T7702]  ? lockdep_hardirqs_on+0x7c/0x110
[  247.313495][ T7702]  hci_rx_work+0x2c5/0x16b0
[  247.313506][ T7702]  ? rcu_is_watching+0x12/0xc0
[  247.313521][ T7702]  process_one_work+0x9cc/0x1b70
[  247.313538][ T7702]  ? __pfx_process_one_work+0x10/0x10
[  247.313552][ T7702]  ? assign_work+0x1a0/0x250
[  247.313564][ T7702]  worker_thread+0x6c8/0xf10
[  247.313581][ T7702]  ? __pfx_worker_thread+0x10/0x10
[  247.313591][ T7702]  kthread+0x3c2/0x780
[  247.313601][ T7702]  ? __pfx_kthread+0x10/0x10
[  247.313612][ T7702]  ? rcu_is_watching+0x12/0xc0
[  247.313624][ T7702]  ? __pfx_kthread+0x10/0x10
[  247.313634][ T7702]  ret_from_fork+0x5d4/0x6f0
[  247.313648][ T7702]  ? __pfx_kthread+0x10/0x10
[  247.313658][ T7702]  ret_from_fork_asm+0x1a/0x30
[  247.313677][ T7702]  </TASK>
[  247.313690][ T7702] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  247.567393][ T7702] Bluetooth: hci4: failed to register connection device
[  248.097598][   T10] usb 2-1: USB disconnect, device number 5
[  248.821275][ T5871] usb usb36-port1: attempt power cycle
[  249.594519][ T8551] overlayfs: missing 'lowerdir'
[  249.657620][ T5871] usb usb36-port1: unable to enumerate USB device
[  250.330307][ T7702] Bluetooth: Frame is too long (len 18, expected len 4)
[  252.471221][ T7702] Bluetooth: Frame is too long (len 18, expected len 4)
[  253.700174][ T7702] Bluetooth: Frame is too long (len 18, expected len 4)
[  255.223937][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  255.337562][ T8629] syz.1.671: attempt to access beyond end of device
[  255.337562][ T8629] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  256.403461][ T8637] loop6: detected capacity change from 0 to 524287999
[  258.108883][ T8659] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  258.734961][ T8656] netdevsim netdevsim3: Direct firmware load for �J��n���gkN��q>�*x(O�@ēƙ�a�W��fV!����_�)�AD�I��w�C7�;�gB�|h�V`f�?:Vm�UWX:SZ;�˩6h?Ae���i��m�/���S��6��_C?�F failed with error -2
[  259.016233][ T8656] netdevsim netdevsim3: Falling back to sysfs fallback for: �J��n���gkN��q>�*x(O�@ēƙ�a�W��fV!����_�)�AD�I��w�C7�;�gB�|h�V`f�?:Vm�UWX:SZ;�˩6h?Ae���i��m�/���S��6��_C?�F
[  260.081128][ T8677] syz.4.686: attempt to access beyond end of device
[  260.081128][ T8677] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  261.066977][ T8684] netlink: 8 bytes leftover after parsing attributes in process `syz.5.690'.
[  261.076046][ T8684] netlink: 8 bytes leftover after parsing attributes in process `syz.5.690'.
[  261.825452][ T8699] syz.5.694: attempt to access beyond end of device
[  261.825452][ T8699] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  263.306960][ T8710] binder: BINDER_SET_CONTEXT_MGR already set
[  263.340991][ T8710] binder: 8709:8710 ioctl 4018620d 200000000040 returned -16
[  264.053127][ T8731] netlink: 24 bytes leftover after parsing attributes in process `syz.3.704'.
[  264.660250][ T8745] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  268.852864][ T8807] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  270.271900][ T8814] syz.1.724: attempt to access beyond end of device
[  270.271900][ T8814] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  270.879518][   T24] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  270.896625][   T24] hid-generic 0000:0000:0000.0013: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  273.330293][ T8846] netdevsim netdevsim1: Direct firmware load for �J��n���gkN��q>�*x(O�@ēƙ�a�W��fV!����_�)�AD�I��w�C7�;�gB�|h�V`f�?:Vm�UWX:SZ;�˩6h?Ae���i��m�/���S��6��_C?�F failed with error -2
[  273.409369][ T8846] netdevsim netdevsim1: Falling back to sysfs fallback for: �J��n���gkN��q>�*x(O�@ēƙ�a�W��fV!����_�)�AD�I��w�C7�;�gB�|h�V`f�?:Vm�UWX:SZ;�˩6h?Ae���i��m�/���S��6��_C?�F
[  275.210839][ T8865] netlink: 8 bytes leftover after parsing attributes in process `syz.5.738'.
[  275.221770][ T8865] netlink: 8 bytes leftover after parsing attributes in process `syz.5.738'.
[  275.985762][ T8864] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8)
[  275.992295][ T8864] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  276.025099][ T8869] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(11)
[  276.031737][ T8869] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  276.279263][ T8869] vhci_hcd vhci_hcd.0: Device attached
[  276.318279][ T8864] vhci_hcd vhci_hcd.0: Device attached
[  276.540487][ T5871] usb 37-2: new low-speed USB device number 3 using vhci_hcd
[  276.552206][ T8877] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  276.921908][ T8864] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(13)
[  276.928542][ T8864] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  277.145005][ T8889] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  277.412476][ T8864] vhci_hcd vhci_hcd.0: Device attached
[  277.480769][ T8864] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  277.541037][ T8864] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  277.541329][ T8892] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(15)
[  277.555721][ T8892] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  277.563343][ T8864] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(29)
[  277.569948][ T8864] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  277.586292][ T8864] vhci_hcd vhci_hcd.0: Device attached
[  277.618295][   T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0
[  277.634482][ T8869] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(19)
[  277.641089][ T8869] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  277.651986][   T10] hid-generic 0000:0000:0000.0014: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  277.688601][ T8892] vhci_hcd vhci_hcd.0: Device attached
[  277.810283][ T1578] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[  277.812149][ T8869] vhci_hcd vhci_hcd.0: Device attached
[  278.024315][ T8898] vhci_hcd: connection closed
[  278.024716][   T12] vhci_hcd: stop threads
[  278.024952][ T8893] vhci_hcd: connection closed
[  278.043738][ T8894] vhci_hcd: connection closed
[  278.049000][ T8884] vhci_hcd: connection closed
[  278.049231][ T8867] vhci_hcd: connection closed
[  278.054136][ T8870] vhci_hcd: connection reset by peer
[  278.077411][   T12] vhci_hcd: release socket
[  278.087290][   T12] vhci_hcd: disconnect device
[  278.104853][   T12] vhci_hcd: stop threads
[  278.112229][   T30] audit: type=1400 audit(1753503160.235:356): avc:  denied  { connect } for  pid=8908 comm="syz.5.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  278.134280][ T8909] tipc: Started in network mode
[  278.139230][ T8909] tipc: Node identity 4654bbb35afb, cluster identity 4711
[  278.147973][   T12] vhci_hcd: release socket
[  278.153804][   T12] vhci_hcd: disconnect device
[  278.158884][ T8909] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  278.173146][ T1578] usb 2-1: config 0 has an invalid interface number: 93 but max is 0
[  278.183120][ T8909] syzkaller0: entered promiscuous mode
[  278.190766][   T12] vhci_hcd: stop threads
[  278.196648][   T12] vhci_hcd: release socket
[  278.216898][ T8909] syzkaller0: entered allmulticast mode
[  278.217734][ T1578] usb 2-1: config 0 has no interface number 0
[  278.224489][   T12] vhci_hcd: disconnect device
[  278.260441][   T12] vhci_hcd: stop threads
[  278.404340][ T1578] usb 2-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65
[  278.406465][ T8909] tipc: Resetting bearer <eth:syzkaller0>
[  278.419821][ T1578] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  278.542631][   T12] vhci_hcd: release socket
[  278.547639][   T12] vhci_hcd: disconnect device
[  278.550693][ T8908] tipc: Resetting bearer <eth:syzkaller0>
[  278.560293][   T12] vhci_hcd: stop threads
[  278.568346][   T12] vhci_hcd: release socket
[  278.573512][   T12] vhci_hcd: disconnect device
[  278.580400][   T12] vhci_hcd: stop threads
[  278.584667][   T12] vhci_hcd: release socket
[  278.589789][ T1578] usb 2-1: Product: syz
[  278.590395][   T12] vhci_hcd: disconnect device
[  278.599891][ T8908] tipc: Disabling bearer <eth:syzkaller0>
[  278.600634][ T5898] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  278.616258][ T1578] usb 2-1: Manufacturer: syz
[  278.638695][ T1578] usb 2-1: SerialNumber: syz
[  278.669222][ T1578] usb 2-1: config 0 descriptor??
[  278.938252][ T5898] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  278.948949][ T1578] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state.
[  279.026765][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  279.057589][ T1578] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  279.078358][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  279.090378][ T1578] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design)
[  279.142103][ T1578] usb 2-1: media controller created
[  279.162212][ T1578] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  279.170652][ T5898] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  279.170701][ T5898] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  279.170722][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  279.211492][ T8924] netlink: 156 bytes leftover after parsing attributes in process `syz.1.745'.
[  279.221436][ T8921] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  279.242242][ T5898] usb 4-1: config 0 descriptor??
[  279.870512][ T5898] usb 4-1: USB disconnect, device number 5
[  280.133886][ T1578] DVB: Unable to find symbol dib7000p_attach()
[  280.645662][ T8938] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  280.791644][ T1578] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design'
[  281.121337][ T1578] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  281.177393][ T1578] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design)
[  281.188417][   T30] audit: type=1400 audit(1753503163.325:357): avc:  denied  { block_suspend } for  pid=8941 comm="syz.2.756" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  281.229539][ T8944] netlink: 24 bytes leftover after parsing attributes in process `syz.3.757'.
[  281.239904][   T30] audit: type=1400 audit(1753503163.325:358): avc:  denied  { module_load } for  pid=8941 comm="syz.2.756" path="/sys/power/wakeup_count" dev="sysfs" ino=1408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1
[  281.245668][ T1578] usb 2-1: media controller created
[  281.268341][   T30] audit: type=1400 audit(1753503163.405:359): avc:  denied  { ioctl } for  pid=8941 comm="syz.2.756" path="socket:[18611]" dev="sockfs" ino=18611 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  281.294828][   T30] audit: type=1400 audit(1753503163.405:360): avc:  denied  { write } for  pid=8941 comm="syz.2.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  281.352114][   T30] audit: type=1400 audit(1753503163.405:361): avc:  denied  { checkpoint_restore } for  pid=8941 comm="syz.2.756" capability=40  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  281.376297][   T30] audit: type=1400 audit(1753503163.425:362): avc:  denied  { create } for  pid=8946 comm="syz.5.758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  282.033985][   T30] audit: type=1400 audit(1753503163.435:363): avc:  denied  { ioctl } for  pid=8946 comm="syz.5.758" path="socket:[18169]" dev="sockfs" ino=18169 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  282.126940][ T1578] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  282.258772][ T5871] vhci_hcd: vhci_device speed not set
[  282.267380][ T5885] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[  282.277393][ T8961] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  282.825104][ T5885] hid-generic 0000:0000:0000.0015: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  282.839510][ T8959] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(14)
[  282.846138][ T8959] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  282.967238][ T8957] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[  282.973787][ T8957] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  283.039479][ T8959] vhci_hcd vhci_hcd.0: Device attached
[  283.067258][ T8961] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(13)
[  283.073878][ T8961] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  283.083828][ T1578] dib0700: the master dib7090 has to be initialized first
[  283.137909][ T8961] vhci_hcd vhci_hcd.0: Device attached
[  283.153275][ T1578] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design'
[  283.168701][ T8976] fido_id[8976]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  283.187058][ T8957] vhci_hcd vhci_hcd.0: Device attached
[  283.216053][ T8957] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10)
[  283.222687][ T8957] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  283.290297][ T5898] usb 39-3: new low-speed USB device number 3 using vhci_hcd
[  283.465175][   T30] audit: type=1400 audit(1753503165.465:364): avc:  denied  { setattr } for  pid=8974 comm="syz.5.763" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  283.491640][ T8959] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(16)
[  283.498275][ T8959] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  283.524647][ T8957] vhci_hcd vhci_hcd.0: Device attached
[  283.533466][ T8959] vhci_hcd vhci_hcd.0: Device attached
[  283.590098][ T1578] rc_core: IR keymap rc-dib0700-rc5 not found
[  283.596202][ T1578] Registered IR keymap rc-empty
[  283.611762][ T8957] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  283.628311][ T8957] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(25)
[  283.634909][ T8957] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  283.659737][ T8957] vhci_hcd vhci_hcd.0: Device attached
[  283.715659][ T8990] vhci_hcd: connection closed
[  283.715874][   T12] vhci_hcd: stop threads
[  283.733861][ T8978] vhci_hcd: connection closed
[  283.736381][ T8980] vhci_hcd: connection closed
[  283.737323][ T8960] vhci_hcd: connection closed
[  283.741522][ T8972] vhci_hcd: connection closed
[  283.747979][ T8964] vhci_hcd: connection reset by peer
[  283.768725][ T1578] dvb-usb: could not initialize remote control.
[  283.863981][ T1578] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected.
[  283.884588][ T1578] usb 2-1: USB disconnect, device number 6
[  283.928137][   T12] vhci_hcd: release socket
[  284.064112][   T12] vhci_hcd: disconnect device
[  284.071241][   T12] vhci_hcd: stop threads
[  284.075633][   T12] vhci_hcd: release socket
[  284.080392][   T12] vhci_hcd: disconnect device
[  284.085218][   T12] vhci_hcd: stop threads
[  284.089437][   T12] vhci_hcd: release socket
[  284.094159][   T12] vhci_hcd: disconnect device
[  284.098984][   T12] vhci_hcd: stop threads
[  284.103268][   T12] vhci_hcd: release socket
[  284.107694][   T12] vhci_hcd: disconnect device
[  284.112528][   T12] vhci_hcd: stop threads
[  284.116744][   T12] vhci_hcd: release socket
[  284.122058][   T12] vhci_hcd: disconnect device
[  284.126862][   T12] vhci_hcd: stop threads
[  284.131331][   T12] vhci_hcd: release socket
[  284.135770][   T12] vhci_hcd: disconnect device
[  284.176574][ T1578] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected.
[  284.341291][   T10] usb usb38-port1: attempt power cycle
[  284.498376][ T8997] netlink: 'syz.1.766': attribute type 1 has an invalid length.
[  284.567742][ T8997] netlink: 132 bytes leftover after parsing attributes in process `syz.1.766'.
[  284.643043][ T8997] netlink: 'syz.1.766': attribute type 2 has an invalid length.
[  284.690137][ T8997] netlink: 'syz.1.766': attribute type 1 has an invalid length.
[  284.745727][ T8997] netlink: 2 bytes leftover after parsing attributes in process `syz.1.766'.
[  285.114524][   T10] usb usb38-port1: unable to enumerate USB device
[  285.154721][   T30] audit: type=1400 audit(1753503167.275:365): avc:  denied  { accept } for  pid=9001 comm="syz.4.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  285.180333][ T9002] netlink: 12 bytes leftover after parsing attributes in process `syz.4.768'.
[  285.490092][   T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  285.632350][   T30] audit: type=1400 audit(1753503167.765:366): avc:  denied  { setopt } for  pid=8998 comm="syz.3.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  285.650061][   T10] usb 5-1: Using ep0 maxpacket: 8
[  285.660682][ T9000] fuse: Unknown parameter '0D4r�-wrhD�_��
[  285.660682][ T9000] �ˀq�uf�	�#::���/��dj��t��ZX8��z[a���9`VhK^}:��	�X�}q�;� ɷ|��]El����+��C������̼x����j{檧�E�J8�����2�'
[  285.661504][   T10] usb 5-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b
[  285.710135][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.729801][   T10] usb 5-1: config 0 descriptor??
[  285.744862][   T10] hso 5-1:0.0: Can't find BULK IN endpoint
[  285.871546][ T9010] netlink: 24 bytes leftover after parsing attributes in process `syz.3.771'.
[  285.880378][ T5871] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  286.122759][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  286.235534][ T5871] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  286.300979][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  286.349858][   T30] audit: type=1400 audit(1753503168.475:367): avc:  denied  { open } for  pid=9001 comm="syz.4.768" path="/dev/ttyqd" dev="devtmpfs" ino=388 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  286.425546][ T5871] usb 3-1: config 0 descriptor??
[  286.586737][   T30] audit: type=1400 audit(1753503168.525:368): avc:  denied  { append } for  pid=9001 comm="syz.4.768" name="sg0" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  286.773989][   T30] audit: type=1400 audit(1753503168.695:369): avc:  denied  { getopt } for  pid=9001 comm="syz.4.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  286.864353][ T5871] usbhid 3-1:0.0: can't add hid device: -71
[  286.870506][ T5871] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  286.897175][ T5871] usb 3-1: USB disconnect, device number 10
[  287.101857][ T1205] usb 5-1: USB disconnect, device number 11
[  287.636600][ T9019] syz.1.772: attempt to access beyond end of device
[  287.636600][ T9019] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  288.045011][ T5871] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  288.220234][ T5871] usb 3-1: Using ep0 maxpacket: 16
[  288.289799][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  288.360734][ T5871] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice=12.00
[  288.386246][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  288.414631][ T5871] usb 3-1: config 0 descriptor??
[  288.420426][ T5898] vhci_hcd: vhci_device speed not set
[  288.450240][ T9033] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  288.450267][ T9032] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8)
[  288.465025][ T9032] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  288.564394][ T9032] vhci_hcd vhci_hcd.0: Device attached
[  288.628204][ T9040] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(11)
[  288.634831][ T9040] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  288.655734][ T9040] vhci_hcd vhci_hcd.0: Device attached
[  288.666100][ T5871] usbhid 3-1:0.0: can't add hid device: -71
[  288.672222][ T5871] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  288.813122][ T1205] vhci_hcd: vhci_device speed not set
[  288.818125][ T5871] usb 3-1: USB disconnect, device number 11
[  288.822948][   T30] audit: type=1400 audit(1753503170.815:370): avc:  denied  { watch watch_reads } for  pid=9036 comm="syz.1.778" path="/164/bus" dev="overlay" ino=882 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  288.847586][    C0] vkms_vblank_simulate: vblank timer overrun
[  289.063987][ T9049] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  289.139541][ T9032] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(13)
[  289.140339][ T1205] usb 41-1: new full-speed USB device number 3 using vhci_hcd
[  289.146161][ T9032] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  289.173904][ T9032] vhci_hcd vhci_hcd.0: Device attached
[  289.239783][ T9054] FAULT_INJECTION: forcing a failure.
[  289.239783][ T9054] name failslab, interval 1, probability 0, space 0, times 0
[  289.264078][ T9054] CPU: 0 UID: 0 PID: 9054 Comm: syz.3.781 Not tainted 6.16.0-rc7-syzkaller-00114-g327579671a9b #0 PREEMPT(full) 
[  289.264103][ T9054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  289.264113][ T9054] Call Trace:
[  289.264119][ T9054]  <TASK>
[  289.264125][ T9054]  dump_stack_lvl+0x16c/0x1f0
[  289.264157][ T9054]  should_fail_ex+0x512/0x640
[  289.264181][ T9054]  ? __kmalloc_cache_noprof+0x57/0x3e0
[  289.264213][ T9054]  should_failslab+0xc2/0x120
[  289.264230][ T9054]  __kmalloc_cache_noprof+0x6a/0x3e0
[  289.264250][ T9054]  ? net_generic+0xf4/0x2a0
[  289.264266][ T9054]  ? nf_tables_newtable+0xd67/0x1b40
[  289.264292][ T9054]  nf_tables_newtable+0xd67/0x1b40
[  289.264318][ T9054]  ? __pfx___nla_validate_parse+0x10/0x10
[  289.264339][ T9054]  ? __pfx_nf_tables_newtable+0x10/0x10
[  289.264368][ T9054]  ? __nla_parse+0x40/0x60
[  289.264390][ T9054]  nfnetlink_rcv_batch+0x18ea/0x2330
[  289.264425][ T9054]  ? __pfx_nfnetlink_rcv_batch+0x10/0x10
[  289.264462][ T9054]  ? avc_has_perm_noaudit+0x149/0x3b0
[  289.264507][ T9054]  ? __nla_parse+0x40/0x60
[  289.264529][ T9054]  nfnetlink_rcv+0x3c1/0x430
[  289.264551][ T9054]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  289.264580][ T9054]  netlink_unicast+0x58a/0x850
[  289.264605][ T9054]  ? __pfx_netlink_unicast+0x10/0x10
[  289.264633][ T9054]  netlink_sendmsg+0x8d1/0xdd0
[  289.264656][ T9054]  ? __pfx_netlink_sendmsg+0x10/0x10
[  289.264686][ T9054]  ____sys_sendmsg+0xa98/0xc70
[  289.264709][ T9054]  ? copy_msghdr_from_user+0x10a/0x160
[  289.264725][ T9054]  ? __pfx_____sys_sendmsg+0x10/0x10
[  289.264758][ T9054]  ___sys_sendmsg+0x134/0x1d0
[  289.264777][ T9054]  ? __pfx____sys_sendmsg+0x10/0x10
[  289.264818][ T9054]  ? __pfx_vfs_write+0x10/0x10
[  289.264844][ T9054]  ? do_sys_openat2+0x157/0x1d0
[  289.264867][ T9054]  __sys_sendmsg+0x16d/0x220
[  289.264883][ T9054]  ? __pfx___sys_sendmsg+0x10/0x10
[  289.264917][ T9054]  do_syscall_64+0xcd/0x4c0
[  289.264940][ T9054]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  289.264958][ T9054] RIP: 0033:0x7f9d4598e9a9
[  289.264972][ T9054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  289.264989][ T9054] RSP: 002b:00007f9d4681d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  289.265006][ T9054] RAX: ffffffffffffffda RBX: 00007f9d45bb5fa0 RCX: 00007f9d4598e9a9
[  289.265018][ T9054] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006
[  289.265028][ T9054] RBP: 00007f9d4681d090 R08: 0000000000000000 R09: 0000000000000000
[  289.265037][ T9054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  289.265047][ T9054] R13: 0000000000000000 R14: 00007f9d45bb5fa0 R15: 00007ffe9d162868
[  289.265071][ T9054]  </TASK>
[  289.268999][ T9032] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(17)
[  289.538703][ T9032] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  289.554251][ T9040] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(20)
[  289.560880][ T9040] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  289.746087][ T9032] vhci_hcd vhci_hcd.0: Device attached
[  289.783220][ T9040] vhci_hcd vhci_hcd.0: Device attached
[  289.914720][ T9032] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(19)
[  289.921356][ T9032] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  290.368590][ T5962] usb usb40-port1: attempt power cycle
[  291.299539][ T9049] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  291.327767][ T9032] vhci_hcd vhci_hcd.0: Device attached
[  291.557725][ T5962] usb usb40-port1: unable to enumerate USB device
[  291.583593][ T9068] vhci_hcd: connection closed
[  291.585967][ T9042] vhci_hcd: connection closed
[  291.585977][ T9059] vhci_hcd: connection closed
[  291.586115][   T48] vhci_hcd: stop threads
[  291.621622][ T9057] vhci_hcd: connection closed
[  291.621799][ T9034] vhci_hcd: connection reset by peer
[  291.670490][   T48] vhci_hcd: release socket
[  291.671259][ T9051] vhci_hcd: connection closed
[  291.675993][ T9080] team0: Caught tx_queue_len zero misconfig
[  291.947710][   T48] vhci_hcd: disconnect device
[  291.954603][   T48] vhci_hcd: stop threads
[  291.956627][   T30] audit: type=1400 audit(1753503174.075:371): avc:  denied  { setopt } for  pid=9070 comm="syz.1.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  291.958841][   T48] vhci_hcd: release socket
[  292.284755][   T48] vhci_hcd: disconnect device
[  292.289520][   T30] audit: type=1400 audit(1753503174.125:372): avc:  denied  { unmount } for  pid=9070 comm="syz.1.784" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  292.294660][   T48] vhci_hcd: stop threads
[  292.312235][   T30] audit: type=1400 audit(1753503174.125:373): avc:  denied  { setopt } for  pid=9089 comm="syz.4.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  292.333015][   T30] audit: type=1400 audit(1753503174.195:374): avc:  denied  { write } for  pid=9089 comm="syz.4.787" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  292.390245][   T48] vhci_hcd: release socket
[  292.399120][   T48] vhci_hcd: disconnect device
[  292.404234][   T30] audit: type=1400 audit(1753503174.205:375): avc:  denied  { ioctl } for  pid=9089 comm="syz.4.787" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  292.431624][   T48] vhci_hcd: stop threads
[  292.435898][   T48] vhci_hcd: release socket
[  292.440425][   T48] vhci_hcd: disconnect device
[  292.445371][   T48] vhci_hcd: stop threads
[  292.449914][   T48] vhci_hcd: release socket
[  292.454943][   T48] vhci_hcd: disconnect device
[  292.464753][   T48] vhci_hcd: stop threads
[  292.469012][   T48] vhci_hcd: release socket
[  292.483362][   T48] vhci_hcd: disconnect device
[  293.087254][   T30] audit: type=1400 audit(1753503175.205:376): avc:  denied  { getopt } for  pid=9099 comm="syz.3.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  293.106936][   T30] audit: type=1400 audit(1753503175.205:377): avc:  denied  { connect } for  pid=9099 comm="syz.3.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  293.572187][ T5885] usb 4-1: new low-speed USB device number 6 using dummy_hcd
[  293.656060][   T30] audit: type=1400 audit(1753503175.775:378): avc:  denied  { mounton } for  pid=9105 comm="syz.1.792" path="/proc/547/task" dev="proc" ino=18929 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  293.694381][   T30] audit: type=1400 audit(1753503175.785:379): avc:  denied  { listen } for  pid=9105 comm="syz.1.792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  293.718459][ T9108] 9pnet: Could not find request transport: 	
[  293.790255][ T5885] usb 4-1: Invalid ep0 maxpacket: 32
[  293.890125][   T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  293.920242][ T5885] usb 4-1: new low-speed USB device number 7 using dummy_hcd
[  294.003030][ T9119] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  294.780290][ T5885] usb 4-1: Invalid ep0 maxpacket: 32
[  294.856361][   T24] usb 5-1: Using ep0 maxpacket: 32
[  294.877982][ T9124] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  294.959523][   T24] usb 5-1: unable to read config index 0 descriptor/start: -61
[  295.051071][   T24] usb 5-1: can't read configurations, error -61
[  295.192078][ T1205] vhci_hcd: vhci_device speed not set
[  295.261124][   T24] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  295.322398][ T5885] usb usb4-port1: attempt power cycle
[  295.660205][ T5885] usb 4-1: new low-speed USB device number 8 using dummy_hcd
[  295.900088][   T24] usb 5-1: Using ep0 maxpacket: 32
[  295.900909][ T5885] usb 4-1: Invalid ep0 maxpacket: 32
[  295.919163][   T24] usb 5-1: unable to read config index 0 descriptor/start: -61
[  295.940620][   T24] usb 5-1: can't read configurations, error -61
[  295.958135][   T24] usb usb5-port1: attempt power cycle
[  295.972803][ T9132] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8)
[  295.979336][ T9132] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  295.991761][ T9132] vhci_hcd vhci_hcd.0: Device attached
[  296.010504][ T9132] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(10)
[  296.017102][ T9132] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  296.032743][ T9132] vhci_hcd vhci_hcd.0: Device attached
[  296.039729][ T9132] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  296.050086][ T5885] usb 4-1: new low-speed USB device number 9 using dummy_hcd
[  296.063365][ T9132] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(15)
[  296.069970][ T9132] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  296.119287][ T9132] vhci_hcd vhci_hcd.0: Device attached
[  296.314312][ T5962] vhci_hcd: vhci_device speed not set
[  296.320339][   T24] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  296.324695][ T5885] usb 4-1: device descriptor read/8, error -71
[  296.353510][   T24] usb 5-1: Using ep0 maxpacket: 32
[  296.398303][   T24] usb 5-1: unable to read config index 0 descriptor/start: -61
[  296.411079][ T5962] usb 43-1: new full-speed USB device number 3 using vhci_hcd
[  296.427837][ T9132] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(17)
[  296.434447][ T9132] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  296.448151][   T24] usb 5-1: can't read configurations, error -61
[  296.461074][ T9132] vhci_hcd vhci_hcd.0: Device attached
[  296.478845][ T9132] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(19)
[  296.485445][ T9132] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  296.493455][ T9132] vhci_hcd vhci_hcd.0: Device attached
[  296.527161][ T5885] usb usb4-port1: unable to enumerate USB device
[  296.530766][ T9132] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  296.600354][   T24] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  296.626719][ T9149] vhci_hcd vhci_hcd.0: pdev(5) rhport(6) sockfd(26)
[  296.633356][ T9149] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  296.787391][ T9149] vhci_hcd vhci_hcd.0: Device attached
[  296.892472][   T10] usb usb42-port1: attempt power cycle
[  296.920955][   T24] usb 5-1: device descriptor read/8, error -71
[  297.027355][ T5885] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0
[  297.030812][   T24] usb usb5-port1: unable to enumerate USB device
[  297.113062][ T9142] vhci_hcd: connection closed
[  297.127106][ T9139] vhci_hcd: connection closed
[  297.138714][   T59] vhci_hcd: stop threads
[  297.147929][ T9146] vhci_hcd: connection closed
[  297.148315][   T59] vhci_hcd: release socket
[  297.168515][ T9135] vhci_hcd: connection closed
[  297.168901][ T9133] vhci_hcd: connection reset by peer
[  297.179225][   T59] vhci_hcd: disconnect device
[  297.179488][ T9150] vhci_hcd: connection closed
[  297.189249][   T59] vhci_hcd: stop threads
[  297.192198][ T5885] hid-generic 0000:0000:0000.0016: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  297.196664][   T59] vhci_hcd: release socket
[  297.274803][ T9161] syz.1.800: attempt to access beyond end of device
[  297.274803][ T9161] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  297.648775][   T59] vhci_hcd: disconnect device
[  297.665725][   T59] vhci_hcd: stop threads
[  297.670175][   T59] vhci_hcd: release socket
[  297.680310][   T59] vhci_hcd: disconnect device
[  297.688153][   T59] vhci_hcd: stop threads
[  297.705282][   T59] vhci_hcd: release socket
[  297.716762][   T30] audit: type=1400 audit(1753503179.845:380): avc:  denied  { write } for  pid=9163 comm="syz.2.803" name="001" dev="devtmpfs" ino=724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  297.745078][   T59] vhci_hcd: disconnect device
[  297.756652][   T59] vhci_hcd: stop threads
[  297.762864][   T59] vhci_hcd: release socket
[  297.767302][   T30] audit: type=1400 audit(1753503179.895:381): avc:  denied  { connect } for  pid=9163 comm="syz.2.803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  297.786943][   T59] vhci_hcd: disconnect device
[  297.795017][   T59] vhci_hcd: stop threads
[  297.830986][   T10] usb usb42-port1: unable to enumerate USB device
[  297.980054][   T59] vhci_hcd: release socket
[  297.988455][   T59] vhci_hcd: disconnect device
[  298.067869][   T30] audit: type=1400 audit(1753503180.195:382): avc:  denied  { connect } for  pid=9163 comm="syz.2.803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  298.098620][ T9167] hub 2-0:1.0: USB hub found
[  298.104744][ T9167] hub 2-0:1.0: 1 port detected
[  298.150607][   T30] audit: type=1400 audit(1753503180.225:383): avc:  denied  { write } for  pid=9163 comm="syz.2.803" path="socket:[19034]" dev="sockfs" ino=19034 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  298.342710][   T30] audit: type=1804 audit(1753503180.465:384): pid=9176 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.807" name="/newroot/131/file0" dev="tmpfs" ino=704 res=1 errno=0
[  298.500932][   T30] audit: type=1804 audit(1753503180.505:385): pid=9176 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.807" name="/newroot/131/file0" dev="tmpfs" ino=704 res=1 errno=0
[  301.400235][ T5885] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  301.510148][ T5901] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[  301.540684][ T5962] vhci_hcd: vhci_device speed not set
[  301.571493][ T5885] usb 4-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  301.587149][ T5885] usb 4-1: config 0 interface 0 has no altsetting 0
[  301.671560][ T5901] usb 2-1: config 0 has an invalid interface number: 93 but max is 0
[  301.681358][ T5885] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[  301.690840][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  301.700781][ T7702] Bluetooth: Frame is too long (len 18, expected len 4)
[  301.710815][ T5885] usb 4-1: config 0 descriptor??
[  301.720150][ T5901] usb 2-1: config 0 has no interface number 0
[  301.738556][ T5901] usb 2-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65
[  301.816410][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  301.844160][ T5901] usb 2-1: Product: syz
[  301.848499][ T5901] usb 2-1: Manufacturer: syz
[  301.853431][ T5901] usb 2-1: SerialNumber: syz
[  301.864492][ T5901] usb 2-1: config 0 descriptor??
[  302.265387][ T5901] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state.
[  302.284335][ T5901] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  302.303297][ T5901] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design)
[  302.350327][ T5901] usb 2-1: media controller created
[  302.475139][ T5901] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  302.627978][ T9233] netlink: 156 bytes leftover after parsing attributes in process `syz.1.816'.
[  302.686497][ T5885] konepure 0003:1E7D:2DB4.0017: hidraw0: USB HID v8.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.3-1/input0
[  302.876432][   T30] audit: type=1400 audit(1753503185.005:386): avc:  denied  { create } for  pid=9235 comm="syz.5.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  302.921462][ T5871] usb usb44-port1: attempt power cycle
[  302.930831][ T5901] DVB: Unable to find symbol dib7000p_attach()
[  302.967386][ T5901] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design'
[  302.990846][   T30] audit: type=1400 audit(1753503185.035:387): avc:  denied  { ioctl } for  pid=9235 comm="syz.5.822" path="socket:[19840]" dev="sockfs" ino=19840 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  303.022568][ T5901] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  303.087020][ T5885] usb 4-1: USB disconnect, device number 10
[  303.170703][ T5901] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design)
[  303.186453][ T5901] usb 2-1: media controller created
[  303.209563][ T5901] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  303.789535][ T5871] usb usb44-port1: unable to enumerate USB device
[  303.938653][ T5901] dib0700: the master dib7090 has to be initialized first
[  303.945873][ T5901] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design'
[  304.070061][ T5901] rc_core: IR keymap rc-dib0700-rc5 not found
[  304.076236][ T5901] Registered IR keymap rc-empty
[  304.086566][ T5901] dvb-usb: could not initialize remote control.
[  304.104821][ T5901] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected.
[  304.201748][   T30] audit: type=1400 audit(1753503186.325:388): avc:  denied  { accept } for  pid=9247 comm="syz.3.825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  304.263247][   T30] audit: type=1400 audit(1753503186.375:389): avc:  denied  { write } for  pid=9247 comm="syz.3.825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  304.285673][   T30] audit: type=1400 audit(1753503186.375:390): avc:  denied  { read } for  pid=9247 comm="syz.3.825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  304.340075][ T9254] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  304.342286][   T30] audit: type=1400 audit(1753503186.475:391): avc:  denied  { bind } for  pid=9247 comm="syz.3.825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  304.353094][ T9254] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  304.745529][ T5901] usb 2-1: USB disconnect, device number 7
[  304.855651][ T5901] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected.
[  304.933400][   T30] audit: type=1400 audit(1753503187.065:392): avc:  denied  { connect } for  pid=9256 comm="syz.1.826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  305.303298][ T9270] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(11)
[  305.309930][ T9270] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  305.567858][ T9270] vhci_hcd vhci_hcd.0: Device attached
[  305.573652][ T9266] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8)
[  305.580179][ T9266] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  305.592793][ T9266] vhci_hcd vhci_hcd.0: Device attached
[  305.605035][ T9270] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  305.616557][ T9274] netlink: 24 bytes leftover after parsing attributes in process `syz.3.829'.
[  305.622324][ T9266] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(15)
[  305.632006][ T9266] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  305.643613][ T9266] vhci_hcd vhci_hcd.0: Device attached
[  305.663843][ T9266] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(17)
[  305.670470][ T9266] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  305.682659][ T9266] vhci_hcd vhci_hcd.0: Device attached
[  305.739650][ T9270] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  305.779987][ T7702] Bluetooth: Frame is too long (len 18, expected len 4)
[  305.810184][ T5934] usb 43-2: new low-speed USB device number 4 using vhci_hcd
[  305.911133][ T9266] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(19)
[  305.917764][ T9266] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  305.959327][ T9285] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  305.984476][ T9287] syz.2.832 uses obsolete (PF_INET,SOCK_PACKET)
[  305.999416][ T9270] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  306.025619][ T9266] vhci_hcd vhci_hcd.0: Device attached
[  306.072582][ T9277] vhci_hcd: connection closed
[  306.072822][ T6173] vhci_hcd: stop threads
[  306.092625][ T9267] vhci_hcd: connection closed
[  306.093378][ T9271] vhci_hcd: connection closed
[  306.102211][ T9282] vhci_hcd: connection closed
[  306.109260][ T9279] vhci_hcd: connection closed
[  306.117198][ T6173] vhci_hcd: release socket
[  306.157421][ T6173] vhci_hcd: disconnect device
[  306.175103][ T6173] vhci_hcd: stop threads
[  306.194193][ T6173] vhci_hcd: release socket
[  306.208633][ T6173] vhci_hcd: disconnect device
[  306.240232][ T6173] vhci_hcd: stop threads
[  306.255632][ T6173] vhci_hcd: release socket
[  306.273625][ T6173] vhci_hcd: disconnect device
[  306.292758][ T6173] vhci_hcd: stop threads
[  306.337295][ T6173] vhci_hcd: release socket
[  306.367339][ T6173] vhci_hcd: disconnect device
[  306.406942][ T6173] vhci_hcd: stop threads
[  306.428723][ T6173] vhci_hcd: release socket
[  306.454096][ T5934] usb 43-2: enqueue for inactive port 1
[  306.461573][ T6173] vhci_hcd: disconnect device
[  306.504115][   T30] audit: type=1400 audit(1753503188.635:393): avc:  denied  { map } for  pid=9292 comm="syz.2.833" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  306.532538][ T5934] vhci_hcd: vhci_device speed not set
[  307.380328][ T5871] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[  308.031103][ T5962] usb usb44-port1: attempt power cycle
[  308.081814][ T5871] usb 6-1: config 0 has an invalid interface number: 93 but max is 0
[  308.204096][ T9320] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  309.005116][ T5871] usb 6-1: config 0 has no interface number 0
[  309.260575][ T5871] usb 6-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65
[  309.269694][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  309.277723][ T5871] usb 6-1: Product: syz
[  309.281988][ T5871] usb 6-1: Manufacturer: syz
[  309.286585][ T5871] usb 6-1: SerialNumber: syz
[  309.292534][ T5871] usb 6-1: config 0 descriptor??
[  309.531002][ T5962] usb usb44-port1: unable to enumerate USB device
[  309.549006][ T5871] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state.
[  309.656923][ T5871] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  309.656989][ T9325] netlink: 'syz.1.839': attribute type 21 has an invalid length.
[  309.676930][ T5871] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design)
[  309.686845][ T5871] usb 6-1: media controller created
[  309.708652][ T5871] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  309.732575][ T9325] netlink: 128 bytes leftover after parsing attributes in process `syz.1.839'.
[  309.787310][ T5871] DVB: Unable to find symbol dib7000p_attach()
[  309.810591][ T9329] netlink: 156 bytes leftover after parsing attributes in process `syz.5.836'.
[  309.848983][ T9325] netlink: 'syz.1.839': attribute type 5 has an invalid length.
[  309.856940][ T9325] netlink: 'syz.1.839': attribute type 6 has an invalid length.
[  309.860299][ T5871] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design'
[  309.908693][ T5871] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  309.917577][ T9325] netlink: 3 bytes leftover after parsing attributes in process `syz.1.839'.
[  309.929543][ T5871] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design)
[  309.943188][ T5871] usb 6-1: media controller created
[  309.976075][ T5871] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  310.129230][ T5871] dib0700: the master dib7090 has to be initialized first
[  310.140246][ T5962] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  310.161100][   T30] audit: type=1400 audit(1753503192.295:394): avc:  denied  { ioctl } for  pid=9334 comm="syz.1.843" path="socket:[20759]" dev="sockfs" ino=20759 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  310.180697][ T5871] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design'
[  310.314737][ T5962] usb 4-1: Using ep0 maxpacket: 8
[  310.321593][ T5871] rc_core: IR keymap rc-dib0700-rc5 not found
[  310.324776][ T5962] usb 4-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d
[  310.339975][ T5962] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  310.350137][ T5871] Registered IR keymap rc-empty
[  310.351822][ T5962] usb 4-1: Product: syz
[  310.359329][ T5962] usb 4-1: Manufacturer: syz
[  310.364076][ T5962] usb 4-1: SerialNumber: syz
[  310.377560][ T5871] dvb-usb: could not initialize remote control.
[  310.399131][ T5962] usb 4-1: config 0 descriptor??
[  310.570502][ T5871] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected.
[  310.586405][ T5962] gspca_main: sonixj-2.14.0 probing 0c45:614a
[  310.680245][ T9346] syz.2.844: attempt to access beyond end of device
[  310.680245][ T9346] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  311.264903][ T5962] gspca_sonixj: reg_r err -32
[  311.269669][ T5962] sonixj 4-1:0.0: probe with driver sonixj failed with error -32
[  311.770144][ T7702] Bluetooth: Frame is too long (len 18, expected len 4)
[  311.876863][ T5962] usb 4-1: USB disconnect, device number 11
[  312.071057][ T9362] netlink: 24 bytes leftover after parsing attributes in process `syz.4.849'.
[  312.089558][ T9360] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[  312.096102][ T9360] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  313.202146][ T9360] vhci_hcd vhci_hcd.0: Device attached
[  313.572304][ T5871] usb 6-1: USB disconnect, device number 6
[  313.574582][ T9372] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  313.579733][ T9366] syz_tun: entered allmulticast mode
[  313.603510][ T5962] vhci_hcd: vhci_device speed not set
[  313.653535][ T9365] syz_tun: left allmulticast mode
[  313.660451][ T9360] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(10)
[  313.667059][ T9360] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  313.702121][ T5962] usb 35-1: new full-speed USB device number 4 using vhci_hcd
[  313.713788][ T9372] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(16)
[  313.720414][ T9372] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  313.735405][ T9379] FAULT_INJECTION: forcing a failure.
[  313.735405][ T9379] name failslab, interval 1, probability 0, space 0, times 0
[  313.784929][ T5871] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected.
[  313.806093][ T9360] vhci_hcd vhci_hcd.0: Device attached
[  313.811846][ T9379] CPU: 1 UID: 0 PID: 9379 Comm: syz.4.852 Not tainted 6.16.0-rc7-syzkaller-00114-g327579671a9b #0 PREEMPT(full) 
[  313.811861][ T9379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  313.811868][ T9379] Call Trace:
[  313.811871][ T9379]  <TASK>
[  313.811876][ T9379]  dump_stack_lvl+0x16c/0x1f0
[  313.811896][ T9379]  should_fail_ex+0x512/0x640
[  313.811913][ T9379]  ? fs_reclaim_acquire+0xae/0x150
[  313.811927][ T9379]  ? tomoyo_encode2+0x100/0x3e0
[  313.811936][ T9379]  should_failslab+0xc2/0x120
[  313.811947][ T9379]  __kmalloc_noprof+0xd2/0x510
[  313.811962][ T9379]  ? d_absolute_path+0x136/0x1a0
[  313.811978][ T9379]  tomoyo_encode2+0x100/0x3e0
[  313.811989][ T9379]  tomoyo_encode+0x29/0x50
[  313.811998][ T9379]  tomoyo_realpath_from_path+0x18f/0x6e0
[  313.812012][ T9379]  tomoyo_path_number_perm+0x245/0x580
[  313.812026][ T9379]  ? tomoyo_path_number_perm+0x237/0x580
[  313.812042][ T9379]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  313.812057][ T9379]  ? find_held_lock+0x2b/0x80
[  313.812082][ T9379]  ? find_held_lock+0x2b/0x80
[  313.812094][ T9379]  ? hook_file_ioctl_common+0x145/0x410
[  313.812109][ T9379]  ? __fget_files+0x20e/0x3c0
[  313.812121][ T9379]  security_file_ioctl+0x9b/0x240
[  313.812132][ T9379]  __x64_sys_ioctl+0xb7/0x210
[  313.812147][ T9379]  do_syscall_64+0xcd/0x4c0
[  313.812157][ T9379]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  313.812168][ T9379] RIP: 0033:0x7fccb118e9a9
[  313.812177][ T9379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  313.812187][ T9379] RSP: 002b:00007fccb2002038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  313.812198][ T9379] RAX: ffffffffffffffda RBX: 00007fccb13b5fa0 RCX: 00007fccb118e9a9
[  313.812204][ T9379] RDX: 0000200000000640 RSI: 00000000c4c85512 RDI: 0000000000000003
[  313.812210][ T9379] RBP: 00007fccb2002090 R08: 0000000000000000 R09: 0000000000000000
[  313.812216][ T9379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  313.812222][ T9379] R13: 0000000000000000 R14: 00007fccb13b5fa0 R15: 00007ffddad7e678
[  313.812235][ T9379]  </TASK>
[  313.812244][ T9379] ERROR: Out of memory at tomoyo_realpath_from_path.
[  313.969881][    C1] vkms_vblank_simulate: vblank timer overrun
[  314.039152][ T9372] vhci_hcd vhci_hcd.0: Device attached
[  314.101383][ T9360] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12)
[  314.108023][ T9360] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  314.132410][ T9389] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[  314.144866][ T9360] vhci_hcd vhci_hcd.0: Device attached
[  314.153513][ T9389] tipc: Enabled bearer <udp:syz0>, priority 10
[  314.160737][ T9372] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  314.186426][ T9360] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  314.202393][ T9376] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(20)
[  314.209022][ T9376] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  314.861667][ T9372] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  314.882665][ T9376] vhci_hcd vhci_hcd.0: Device attached
[  314.927213][ T9370] vhci_hcd: connection closed
[  314.937332][ T1578] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  314.944110][ T9377] vhci_hcd: connection closed
[  314.950873][ T6170] vhci_hcd: stop threads
[  314.963365][ T6170] vhci_hcd: release socket
[  315.003370][ T6170] vhci_hcd: disconnect device
[  315.041481][ T9363] vhci_hcd: connection reset by peer
[  315.056740][ T9391] vhci_hcd: connection closed
[  315.081626][ T9385] vhci_hcd: connection closed
[  315.103823][ T6170] vhci_hcd: stop threads
[  315.235608][ T1578] usb 3-1: config index 0 descriptor too short (expected 88, got 18)
[  315.284745][ T6170] vhci_hcd: release socket
[  315.341542][   T24] tipc: Node number set to 3207515119
[  315.355369][ T6170] vhci_hcd: disconnect device
[  315.368904][ T1578] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  315.424184][ T1578] usb 3-1: config 128 has 0 interfaces, different from the descriptor's value: 1
[  315.456885][ T1578] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  315.470227][ T6170] vhci_hcd: stop threads
[  315.474502][ T6170] vhci_hcd: release socket
[  315.476049][ T1578] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  315.486767][ T6170] vhci_hcd: disconnect device
[  315.653817][ T6170] vhci_hcd: stop threads
[  315.661316][ T6170] vhci_hcd: release socket
[  315.666600][ T6170] vhci_hcd: disconnect device
[  315.681055][ T6170] vhci_hcd: stop threads
[  315.691766][ T6170] vhci_hcd: release socket
[  316.161202][ T6170] vhci_hcd: disconnect device
[  316.226171][ T9407] mmap: syz.5.856 (9407) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  316.355195][ T9411] pim6reg: entered allmulticast mode
[  316.668459][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  317.411177][ T1578] usb 3-1: string descriptor 0 read error: -71
[  317.421212][ T1578] usb 3-1: USB disconnect, device number 12
[  317.775997][ T7702] Bluetooth: Frame is too long (len 18, expected len 4)
[  318.980261][ T5962] vhci_hcd: vhci_device speed not set
[  319.030642][   T30] audit: type=1400 audit(1753503201.135:395): avc:  denied  { read } for  pid=9434 comm="syz.4.863" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  319.053821][    C1] vkms_vblank_simulate: vblank timer overrun
[  319.122836][   T30] audit: type=1400 audit(1753503201.135:396): avc:  denied  { open } for  pid=9434 comm="syz.4.863" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  319.149284][   T30] audit: type=1400 audit(1753503201.145:397): avc:  denied  { write } for  pid=9434 comm="syz.4.863" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  319.190160][ T5933] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[  319.328982][ T9444] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8)
[  319.335535][ T9444] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  319.348523][ T9444] vhci_hcd vhci_hcd.0: Device attached
[  319.389034][ T9444] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(10)
[  319.395658][ T9444] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  319.403948][ T9444] vhci_hcd vhci_hcd.0: Device attached
[  319.412773][ T9444] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  319.430465][ T9444] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(15)
[  319.437079][ T9444] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  319.511583][ T9452] syz.2.864: attempt to access beyond end of device
[  319.511583][ T9452] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  319.844959][ T9444] vhci_hcd vhci_hcd.0: Device attached
[  319.856413][ T9453] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(18)
[  319.863044][ T9453] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  319.865260][ T5933] usb 2-1: config 0 has an invalid interface number: 93 but max is 0
[  319.879023][ T5933] usb 2-1: config 0 has no interface number 0
[  319.888833][ T9453] vhci_hcd vhci_hcd.0: Device attached
[  319.893491][ T5898] vhci_hcd: vhci_device speed not set
[  319.902388][ T5933] usb 2-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65
[  319.918026][ T9456] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(21)
[  319.924641][ T9456] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  319.944988][ T5933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  319.960181][ T5898] usb 41-1: new full-speed USB device number 4 using vhci_hcd
[  320.827186][ T9444] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  320.842574][ T9444] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  320.852202][ T9444] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  320.856361][ T5933] usb 2-1: Product: syz
[  320.904092][ T5933] usb 2-1: Manufacturer: syz
[  320.908811][ T5933] usb 2-1: SerialNumber: syz
[  321.176363][ T5933] usb 2-1: config 0 descriptor??
[  321.215411][ T5933] usb 2-1: can't set config #0, error -71
[  321.250259][ T5933] usb 2-1: USB disconnect, device number 8
[  321.355486][ T9456] vhci_hcd vhci_hcd.0: Device attached
[  321.392903][ T9457] vhci_hcd: connection closed
[  321.393778][ T9454] vhci_hcd: connection closed
[  321.398656][ T9445] vhci_hcd: connection reset by peer
[  321.409042][   T36] vhci_hcd: stop threads
[  321.415972][ T9448] vhci_hcd: connection closed
[  321.416306][ T9450] vhci_hcd: connection closed
[  321.430989][ T5901] usb usb36-port1: attempt power cycle
[  321.437769][   T36] vhci_hcd: release socket
[  321.459326][   T36] vhci_hcd: disconnect device
[  321.481036][   T36] vhci_hcd: stop threads
[  321.505421][   T36] vhci_hcd: release socket
[  321.513412][   T36] vhci_hcd: disconnect device
[  321.518392][   T36] vhci_hcd: stop threads
[  321.523249][   T36] vhci_hcd: release socket
[  321.528013][   T36] vhci_hcd: disconnect device
[  321.533025][   T36] vhci_hcd: stop threads
[  321.542554][   T36] vhci_hcd: release socket
[  321.547070][   T36] vhci_hcd: disconnect device
[  321.552535][   T36] vhci_hcd: stop threads
[  321.556772][   T36] vhci_hcd: release socket
[  321.590161][   T36] vhci_hcd: disconnect device
[  322.037929][ T5901] usb usb36-port1: unable to enumerate USB device
[  324.420153][ T5885] usb 6-1: new full-speed USB device number 7 using dummy_hcd
[  324.514329][ T9511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  324.531989][ T7702] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  324.541875][ T7702] CPU: 0 UID: 0 PID: 7702 Comm: kworker/u9:3 Not tainted 6.16.0-rc7-syzkaller-00114-g327579671a9b #0 PREEMPT(full) 
[  324.541891][ T7702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  324.541898][ T7702] Workqueue: hci2 hci_rx_work
[  324.541914][ T7702] Call Trace:
[  324.541918][ T7702]  <TASK>
[  324.541923][ T7702]  dump_stack_lvl+0x16c/0x1f0
[  324.541943][ T7702]  sysfs_warn_dup+0x7f/0xa0
[  324.541966][ T7702]  sysfs_create_dir_ns+0x24b/0x2b0
[  324.541983][ T7702]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  324.541999][ T7702]  ? find_held_lock+0x2b/0x80
[  324.542016][ T7702]  ? do_raw_spin_unlock+0x172/0x230
[  324.542029][ T7702]  kobject_add_internal+0x2c4/0x9b0
[  324.542046][ T7702]  kobject_add+0x16e/0x240
[  324.542057][ T7702]  ? __pfx_kobject_add+0x10/0x10
[  324.542070][ T7702]  ? do_raw_spin_unlock+0x172/0x230
[  324.542083][ T7702]  ? kobject_put+0xab/0x5a0
[  324.542097][ T7702]  device_add+0x288/0x1a70
[  324.542110][ T7702]  ? __pfx_dev_set_name+0x10/0x10
[  324.542123][ T7702]  ? __pfx_device_add+0x10/0x10
[  324.542135][ T7702]  ? mgmt_send_event_skb+0x2fb/0x460
[  324.542155][ T7702]  hci_conn_add_sysfs+0x17e/0x230
[  324.542167][ T7702]  le_conn_complete_evt+0x1075/0x1d70
[  324.542186][ T7702]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  324.542201][ T7702]  ? hci_event_packet+0x459/0x11c0
[  324.542220][ T7702]  hci_le_conn_complete_evt+0x23c/0x370
[  324.542240][ T7702]  hci_le_meta_evt+0x357/0x5e0
[  324.542251][ T7702]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  324.542269][ T7702]  hci_event_packet+0x682/0x11c0
[  324.542285][ T7702]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  324.542296][ T7702]  ? __pfx_hci_event_packet+0x10/0x10
[  324.542312][ T7702]  ? kcov_remote_start+0x3c9/0x6d0
[  324.542324][ T7702]  ? lockdep_hardirqs_on+0x7c/0x110
[  324.542343][ T7702]  hci_rx_work+0x2c5/0x16b0
[  324.542354][ T7702]  ? rcu_is_watching+0x12/0xc0
[  324.542369][ T7702]  process_one_work+0x9cc/0x1b70
[  324.542385][ T7702]  ? __pfx_process_one_work+0x10/0x10
[  324.542400][ T7702]  ? assign_work+0x1a0/0x250
[  324.542411][ T7702]  worker_thread+0x6c8/0xf10
[  324.542427][ T7702]  ? __pfx_worker_thread+0x10/0x10
[  324.542438][ T7702]  kthread+0x3c2/0x780
[  324.542448][ T7702]  ? __pfx_kthread+0x10/0x10
[  324.542458][ T7702]  ? rcu_is_watching+0x12/0xc0
[  324.542470][ T7702]  ? __pfx_kthread+0x10/0x10
[  324.542480][ T7702]  ret_from_fork+0x5d4/0x6f0
[  324.542495][ T7702]  ? __pfx_kthread+0x10/0x10
[  324.542505][ T7702]  ret_from_fork_asm+0x1a/0x30
[  324.542523][ T7702]  </TASK>
[  324.542536][ T7702] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  324.583911][ T9511] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  324.589169][ T7702] Bluetooth: hci2: failed to register connection device
[  324.858391][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  324.867725][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  324.889107][ T7702] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[  324.899345][ T7702] CPU: 0 UID: 0 PID: 7702 Comm: kworker/u9:3 Not tainted 6.16.0-rc7-syzkaller-00114-g327579671a9b #0 PREEMPT(full) 
[  324.899372][ T7702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  324.899386][ T7702] Workqueue: hci1 hci_rx_work
[  324.899402][ T7702] Call Trace:
[  324.899410][ T7702]  <TASK>
[  324.899415][ T7702]  dump_stack_lvl+0x16c/0x1f0
[  324.899434][ T7702]  sysfs_warn_dup+0x7f/0xa0
[  324.899452][ T7702]  sysfs_create_dir_ns+0x24b/0x2b0
[  324.899469][ T7702]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  324.899485][ T7702]  ? find_held_lock+0x2b/0x80
[  324.899501][ T7702]  ? do_raw_spin_unlock+0x172/0x230
[  324.899514][ T7702]  kobject_add_internal+0x2c4/0x9b0
[  324.899528][ T7702]  kobject_add+0x16e/0x240
[  324.899539][ T7702]  ? __pfx_kobject_add+0x10/0x10
[  324.899551][ T7702]  ? do_raw_spin_unlock+0x172/0x230
[  324.899563][ T7702]  ? kobject_put+0xab/0x5a0
[  324.899577][ T7702]  device_add+0x288/0x1a70
[  324.899590][ T7702]  ? __pfx_dev_set_name+0x10/0x10
[  324.899603][ T7702]  ? __pfx_device_add+0x10/0x10
[  324.899615][ T7702]  ? mgmt_send_event_skb+0x2fb/0x460
[  324.899636][ T7702]  hci_conn_add_sysfs+0x17e/0x230
[  324.899649][ T7702]  le_conn_complete_evt+0x1075/0x1d70
[  324.899668][ T7702]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  324.899683][ T7702]  ? hci_event_packet+0x459/0x11c0
[  324.899702][ T7702]  hci_le_conn_complete_evt+0x23c/0x370
[  324.899720][ T7702]  hci_le_meta_evt+0x357/0x5e0
[  324.899730][ T7702]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  324.899748][ T7702]  hci_event_packet+0x682/0x11c0
[  324.899763][ T7702]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  324.899774][ T7702]  ? __pfx_hci_event_packet+0x10/0x10
[  324.899791][ T7702]  ? kcov_remote_start+0x3c9/0x6d0
[  324.899803][ T7702]  ? lockdep_hardirqs_on+0x7c/0x110
[  324.899821][ T7702]  hci_rx_work+0x2c5/0x16b0
[  324.899832][ T7702]  ? rcu_is_watching+0x12/0xc0
[  324.899847][ T7702]  process_one_work+0x9cc/0x1b70
[  324.899864][ T7702]  ? __pfx_process_one_work+0x10/0x10
[  324.899885][ T7702]  ? assign_work+0x1a0/0x250
[  324.899896][ T7702]  worker_thread+0x6c8/0xf10
[  324.899913][ T7702]  ? __pfx_worker_thread+0x10/0x10
[  324.899923][ T7702]  kthread+0x3c2/0x780
[  324.899934][ T7702]  ? __pfx_kthread+0x10/0x10
[  324.899945][ T7702]  ? rcu_is_watching+0x12/0xc0
[  324.899964][ T7702]  ? __pfx_kthread+0x10/0x10
[  324.899980][ T7702]  ret_from_fork+0x5d4/0x6f0
[  324.900001][ T7702]  ? __pfx_kthread+0x10/0x10
[  324.900017][ T7702]  ret_from_fork_asm+0x1a/0x30
[  324.900045][ T7702]  </TASK>
[  325.139554][ T1205] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  325.152888][ T7702] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  325.166984][ T7702] Bluetooth: hci1: failed to register connection device
[  325.177537][ T5885] usb 6-1: config 0 has an invalid interface number: 93 but max is 0
[  325.186466][ T5885] usb 6-1: config 0 has no interface number 0
[  325.230336][ T7702] ==================================================================
[  325.238424][ T7702] BUG: KASAN: slab-use-after-free in l2cap_connect_cfm+0xdb9/0xf80
[  325.246319][ T7702] Read of size 8 at addr ffff888034df9480 by task kworker/u9:3/7702
[  325.254279][ T7702] 
[  325.256590][ T7702] CPU: 1 UID: 0 PID: 7702 Comm: kworker/u9:3 Not tainted 6.16.0-rc7-syzkaller-00114-g327579671a9b #0 PREEMPT(full) 
[  325.256611][ T7702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  325.256623][ T7702] Workqueue: hci1 hci_rx_work
[  325.256642][ T7702] Call Trace:
[  325.256648][ T7702]  <TASK>
[  325.256653][ T7702]  dump_stack_lvl+0x116/0x1f0
[  325.256677][ T7702]  print_report+0xcd/0x630
[  325.256694][ T7702]  ? __virt_addr_valid+0x81/0x610
[  325.256713][ T7702]  ? __phys_addr+0xe8/0x180
[  325.256729][ T7702]  ? l2cap_connect_cfm+0xdb9/0xf80
[  325.256748][ T7702]  kasan_report+0xe0/0x110
[  325.256761][ T7702]  ? l2cap_connect_cfm+0xdb9/0xf80
[  325.256782][ T7702]  l2cap_connect_cfm+0xdb9/0xf80
[  325.256806][ T7702]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  325.256831][ T7702]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  325.256852][ T7702]  le_conn_complete_evt+0x1665/0x1d70
[  325.256880][ T7702]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  325.256900][ T7702]  ? hci_event_packet+0x459/0x11c0
[  325.256922][ T7702]  hci_le_conn_complete_evt+0x23c/0x370
[  325.256944][ T7702]  hci_le_meta_evt+0x357/0x5e0
[  325.256958][ T7702]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  325.256982][ T7702]  hci_event_packet+0x682/0x11c0
[  325.257002][ T7702]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  325.257015][ T7702]  ? __pfx_hci_event_packet+0x10/0x10
[  325.257036][ T7702]  ? kcov_remote_start+0x3c9/0x6d0
[  325.257053][ T7702]  ? lockdep_hardirqs_on+0x7c/0x110
[  325.257076][ T7702]  hci_rx_work+0x2c5/0x16b0
[  325.257090][ T7702]  ? rcu_is_watching+0x12/0xc0
[  325.257110][ T7702]  process_one_work+0x9cc/0x1b70
[  325.257128][ T7702]  ? __pfx_process_one_work+0x10/0x10
[  325.257144][ T7702]  ? assign_work+0x1a0/0x250
[  325.257157][ T7702]  worker_thread+0x6c8/0xf10
[  325.257175][ T7702]  ? __pfx_worker_thread+0x10/0x10
[  325.257189][ T7702]  kthread+0x3c2/0x780
[  325.257202][ T7702]  ? __pfx_kthread+0x10/0x10
[  325.257215][ T7702]  ? rcu_is_watching+0x12/0xc0
[  325.257231][ T7702]  ? __pfx_kthread+0x10/0x10
[  325.257246][ T7702]  ret_from_fork+0x5d4/0x6f0
[  325.257266][ T7702]  ? __pfx_kthread+0x10/0x10
[  325.257277][ T7702]  ret_from_fork_asm+0x1a/0x30
[  325.257296][ T7702]  </TASK>
[  325.257301][ T7702] 
[  325.467843][ T7702] Allocated by task 7702:
[  325.472156][ T7702]  kasan_save_stack+0x33/0x60
[  325.476829][ T7702]  kasan_save_track+0x14/0x30
[  325.481497][ T7702]  __kasan_kmalloc+0xaa/0xb0
[  325.486074][ T7702]  l2cap_chan_create+0x44/0x920
[  325.490919][ T7702]  l2cap_sock_alloc.constprop.0+0xf5/0x1d0
[  325.496718][ T7702]  l2cap_sock_new_connection_cb+0x101/0x240
[  325.502594][ T7702]  l2cap_connect_cfm+0x4c7/0xf80
[  325.507519][ T7702]  le_conn_complete_evt+0x1665/0x1d70
[  325.512881][ T7702]  hci_le_conn_complete_evt+0x23c/0x370
[  325.518418][ T7702]  hci_le_meta_evt+0x357/0x5e0
[  325.523161][ T7702]  hci_event_packet+0x682/0x11c0
[  325.528094][ T7702]  hci_rx_work+0x2c5/0x16b0
[  325.532581][ T7702]  process_one_work+0x9cc/0x1b70
[  325.537507][ T7702]  worker_thread+0x6c8/0xf10
[  325.542075][ T7702]  kthread+0x3c2/0x780
[  325.546124][ T7702]  ret_from_fork+0x5d4/0x6f0
[  325.550703][ T7702]  ret_from_fork_asm+0x1a/0x30
[  325.555453][ T7702] 
[  325.557759][ T7702] Freed by task 9485:
[  325.561717][ T7702]  kasan_save_stack+0x33/0x60
[  325.566383][ T7702]  kasan_save_track+0x14/0x30
[  325.571057][ T7702]  kasan_save_free_info+0x3b/0x60
[  325.576078][ T7702]  __kasan_slab_free+0x51/0x70
[  325.580834][ T7702]  kfree+0x2b4/0x4d0
[  325.584745][ T7702]  l2cap_chan_put+0x216/0x2c0
[  325.589406][ T7702]  l2cap_sock_cleanup_listen+0x4d/0x2a0
[  325.594935][ T7702]  l2cap_sock_release+0x5c/0x210
[  325.599870][ T7702]  __sock_release+0xb0/0x270
[  325.604447][ T7702]  sock_close+0x1c/0x30
[  325.608585][ T7702]  __fput+0x3ff/0xb70
[  325.612554][ T7702]  task_work_run+0x150/0x240
[  325.617127][ T7702]  exit_to_user_mode_loop+0xeb/0x110
[  325.622399][ T7702]  do_syscall_64+0x3f6/0x4c0
[  325.626969][ T7702]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  325.632850][ T7702] 
[  325.635158][ T7702] The buggy address belongs to the object at ffff888034df9000
[  325.635158][ T7702]  which belongs to the cache kmalloc-2k of size 2048
[  325.649191][ T7702] The buggy address is located 1152 bytes inside of
[  325.649191][ T7702]  freed 2048-byte region [ffff888034df9000, ffff888034df9800)
[  325.663139][ T7702] 
[  325.665453][ T7702] The buggy address belongs to the physical page:
[  325.671842][ T7702] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34df8
[  325.680581][ T7702] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  325.689059][ T7702] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  325.696585][ T7702] page_type: f5(slab)
[  325.700555][ T7702] raw: 00fff00000000040 ffff88801b842000 ffffea0000a68c00 dead000000000002
[  325.709129][ T7702] raw: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000
[  325.717701][ T7702] head: 00fff00000000040 ffff88801b842000 ffffea0000a68c00 dead000000000002
[  325.726352][ T7702] head: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000
[  325.735006][ T7702] head: 00fff00000000003 ffffea0000d37e01 00000000ffffffff 00000000ffffffff
[  325.743668][ T7702] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  325.752318][ T7702] page dumped because: kasan: bad access detected
[  325.758712][ T7702] page_owner tracks the page as allocated
[  325.764405][ T7702] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7837, tgid 7834 (vhost-7835), ts 194315332329, free_ts 194310380381
[  325.785743][ T7702]  post_alloc_hook+0x1c0/0x230
[  325.790503][ T7702]  get_page_from_freelist+0x1321/0x3890
[  325.796039][ T7702]  __alloc_frozen_pages_noprof+0x261/0x23f0
[  325.801924][ T7702]  alloc_pages_mpol+0x1fb/0x550
[  325.806762][ T7702]  new_slab+0x23b/0x330
[  325.810905][ T7702]  ___slab_alloc+0xd9c/0x1940
[  325.815568][ T7702]  __slab_alloc.constprop.0+0x56/0xb0
[  325.820926][ T7702]  __kmalloc_node_track_caller_noprof+0x2ee/0x510
[  325.827343][ T7702]  kmalloc_reserve+0xef/0x2c0
[  325.832016][ T7702]  __alloc_skb+0x166/0x380
[  325.836427][ T7702]  vhost_vsock_handle_tx_kick+0x3f5/0xc00
[  325.842132][ T7702]  vhost_run_work_list+0x18b/0x230
[  325.847232][ T7702]  vhost_task_fn+0x162/0x460
[  325.851803][ T7702]  ret_from_fork+0x5d4/0x6f0
[  325.856386][ T7702]  ret_from_fork_asm+0x1a/0x30
[  325.861134][ T7702] page last free pid 7837 tgid 7834 stack trace:
[  325.867437][ T7702]  __free_frozen_pages+0x7fe/0x1180
[  325.872621][ T7702]  __put_partials+0x16d/0x1c0
[  325.877284][ T7702]  qlist_free_all+0x4d/0x120
[  325.881862][ T7702]  kasan_quarantine_reduce+0x195/0x1e0
[  325.887316][ T7702]  __kasan_slab_alloc+0x69/0x90
[  325.892163][ T7702]  kmem_cache_alloc_node_noprof+0x1d5/0x3b0
[  325.898047][ T7702]  __alloc_skb+0x2b2/0x380
[  325.902456][ T7702]  vhost_vsock_handle_tx_kick+0x3f5/0xc00
[  325.908159][ T7702]  vhost_run_work_list+0x18b/0x230
[  325.913260][ T7702]  vhost_task_fn+0x162/0x460
[  325.917835][ T7702]  ret_from_fork+0x5d4/0x6f0
[  325.922413][ T7702]  ret_from_fork_asm+0x1a/0x30
[  325.927166][ T7702] 
[  325.929472][ T7702] Memory state around the buggy address:
[  325.935080][ T7702]  ffff888034df9380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  325.943124][ T7702]  ffff888034df9400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  325.951166][ T7702] >ffff888034df9480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  325.959206][ T7702]                    ^
[  325.963252][ T7702]  ffff888034df9500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  325.971294][ T7702]  ffff888034df9580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  325.979346][ T7702] ==================================================================
[  325.988435][    C1] vkms_vblank_simulate: vblank timer overrun
[  326.009392][ T7702] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  326.016608][ T7702] CPU: 1 UID: 0 PID: 7702 Comm: kworker/u9:3 Not tainted 6.16.0-rc7-syzkaller-00114-g327579671a9b #0 PREEMPT(full) 
[  326.028754][ T7702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  326.038807][ T7702] Workqueue: hci1 hci_rx_work
[  326.043482][ T7702] Call Trace:
[  326.046756][ T7702]  <TASK>
[  326.049670][ T7702]  dump_stack_lvl+0x3d/0x1f0
[  326.054270][ T7702]  panic+0x71c/0x800
[  326.058154][ T7702]  ? __pfx_panic+0x10/0x10
[  326.062562][ T7702]  ? irqentry_exit+0x3b/0x90
[  326.067140][ T7702]  ? lockdep_hardirqs_on+0x7c/0x110
[  326.072326][ T7702]  ? preempt_schedule_thunk+0x16/0x30
[  326.077682][ T7702]  ? l2cap_connect_cfm+0xdb9/0xf80
[  326.082800][ T7702]  ? preempt_schedule_common+0x44/0xc0
[  326.088271][ T7702]  ? l2cap_connect_cfm+0xdb9/0xf80
[  326.093377][ T7702]  check_panic_on_warn+0xab/0xb0
[  326.098293][ T7702]  end_report+0x107/0x170
[  326.102606][ T7702]  kasan_report+0xee/0x110
[  326.107026][ T7702]  ? l2cap_connect_cfm+0xdb9/0xf80
[  326.112128][ T7702]  l2cap_connect_cfm+0xdb9/0xf80
[  326.117056][ T7702]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  326.122508][ T7702]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  326.127968][ T7702]  le_conn_complete_evt+0x1665/0x1d70
[  326.133332][ T7702]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  326.139039][ T7702]  ? hci_event_packet+0x459/0x11c0
[  326.144143][ T7702]  hci_le_conn_complete_evt+0x23c/0x370
[  326.149683][ T7702]  hci_le_meta_evt+0x357/0x5e0
[  326.154430][ T7702]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  326.160497][ T7702]  hci_event_packet+0x682/0x11c0
[  326.165421][ T7702]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  326.170697][ T7702]  ? __pfx_hci_event_packet+0x10/0x10
[  326.176068][ T7702]  ? kcov_remote_start+0x3c9/0x6d0
[  326.181167][ T7702]  ? lockdep_hardirqs_on+0x7c/0x110
[  326.186363][ T7702]  hci_rx_work+0x2c5/0x16b0
[  326.190846][ T7702]  ? rcu_is_watching+0x12/0xc0
[  326.195598][ T7702]  process_one_work+0x9cc/0x1b70
[  326.200536][ T7702]  ? __pfx_process_one_work+0x10/0x10
[  326.205905][ T7702]  ? assign_work+0x1a0/0x250
[  326.210482][ T7702]  worker_thread+0x6c8/0xf10
[  326.215058][ T7702]  ? __pfx_worker_thread+0x10/0x10
[  326.220156][ T7702]  kthread+0x3c2/0x780
[  326.224205][ T7702]  ? __pfx_kthread+0x10/0x10
[  326.228791][ T7702]  ? rcu_is_watching+0x12/0xc0
[  326.233534][ T7702]  ? __pfx_kthread+0x10/0x10
[  326.238108][ T7702]  ret_from_fork+0x5d4/0x6f0
[  326.242699][ T7702]  ? __pfx_kthread+0x10/0x10
[  326.247263][ T7702]  ret_from_fork_asm+0x1a/0x30
[  326.252015][ T7702]  </TASK>
[  326.255213][ T7702] Kernel Offset: disabled
[  326.259517][ T7702] Rebooting in 86400 seconds..