last executing test programs:

2m43.50645821s ago: executing program 4 (id=1262):
r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x3, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f00000000c0)={0x2000000, 0x2e, 0x1016})

2m43.308683846s ago: executing program 4 (id=1266):
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x200000, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYBLOB])

2m43.14978277s ago: executing program 4 (id=1267):
syz_io_uring_setup(0xb39, &(0x7f00000001c0)={0x0, 0xfad6, 0x0, 0x2}, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
r0 = socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xb, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94)
r1 = syz_io_uring_setup(0xcf, &(0x7f0000000200)={0x0, 0x0, 0x80, 0x0, 0x2d2}, &(0x7f0000000000)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x3c}}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
syz_io_uring_submit(r2, r3, 0x0)
io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0)

2m41.764233974s ago: executing program 4 (id=1271):
r0 = socket$netlink(0x10, 0x3, 0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r1}, 0x10)
unlinkat(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000100001002125131818be22bb0587347638001000000007ebff09140000001100010000000000000000000200000a"], 0x28}, 0x1, 0x0, 0x0, 0x1c800}, 0x48004)

2m41.456584508s ago: executing program 4 (id=1273):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4002}, 0x20041085)
r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x48800, 0x0)
readv(r1, &(0x7f0000000940)=[{0x0}], 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = dup(0xffffffffffffffff)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000280)=0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = syz_open_dev$MSR(&(0x7f0000000100), 0xfffffffffffefffc, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
poll(&(0x7f0000000240)=[{r3, 0x11a2}], 0x1, 0x63d5)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
write$binfmt_script(r5, &(0x7f0000000200), 0xfffffd9d)

2m39.691876683s ago: executing program 4 (id=1276):
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', <r2=>0x0})
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1805b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054)
accept4(r0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=unix'])
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000080022000000000000000000850000002700000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r5)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m23.497474151s ago: executing program 32 (id=1276):
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', <r2=>0x0})
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1805b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054)
accept4(r0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=unix'])
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000080022000000000000000000850000002700000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r5)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

10.916322442s ago: executing program 1 (id=1687):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4002}, 0x20041085)
readv(0xffffffffffffffff, &(0x7f0000000940)=[{0x0}], 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x9, 0x141101)
r2 = dup(r1)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000280)=0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = syz_open_dev$MSR(&(0x7f0000000100), 0xfffffffffffefffc, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
poll(&(0x7f0000000240)=[{r3, 0x11a2}], 0x1, 0x63d5)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
write$binfmt_script(r5, &(0x7f0000000200), 0xfffffd9d)

9.387765029s ago: executing program 5 (id=1693):
io_submit(0x0, 0xfffffffffffffcf9, 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f00000002c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
connect$bt_sco(r0, &(0x7f0000000b00)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00', 0x7c2})
openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80400)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="330300000000040000001d0000000c000180080003"], 0x20}, 0x1, 0x0, 0x0, 0x40847}, 0x0)

8.943207682s ago: executing program 1 (id=1695):
openat$vsock(0xffffffffffffff9c, 0x0, 0x50402, 0x0)
io_setup(0x3fe, &(0x7f0000000100)=<r0=>0x0)
r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x63c, 0x1, 0x2800, 0xd59f83, 0x19f2, 0x42, 0x4, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xba2, 0xd, 0x23, {0x8, 0xffffffff}, 0xd0, 0x9}})
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000340)={{}, 0x0, [0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x5, 0x8, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x37, 0x0, 0x2, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]})
r2 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0)
write$binfmt_elf64(r2, &(0x7f0000000540)=ANY=[], 0xfebe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$IOMMU_VFIO_IOAS$CLEAR(r6, 0x3b88, &(0x7f0000000140)={0xc})
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r7 = syz_open_dev$vim2m(&(0x7f0000000380), 0x7f, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x0, 0x0, 0x34565348, 0x0, 0x0, [{}, {}, {}, {0x0, 0xffffffc0}, {}, {}, {}, {0x1}]}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="1800000076000d0b00000000000000000300000000000000aeff906820a9919de9f659fb8a941638ea42b45952c37c9f5260f2bee474c91795e298c27f43aab99681d673009942ddd6e836f3cf83bf8b27457d47d596cd"], 0x18}}, 0x0)
r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r9 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f0000001ac0)={r8, 0x0, {0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}})
io_getevents(r0, 0x1, 0x0, 0x0, 0x0)
migrate_pages(0x0, 0x8, 0x0, &(0x7f0000000100)=0x2)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)

8.829628114s ago: executing program 2 (id=1697):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000023ed2449810000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(0xffffffffffffffff, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x8016, 0x0, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x8100, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0xfdef)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x21, 0x2, 0xa)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
openat$dlm_control(0xffffffffffffff9c, 0x0, 0x111001, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f000027b000/0x4000)=nil, 0x4000}})
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000063f943ff00000000000000008500000041000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/bus/input/handlers\x00', 0x0, 0x0)
preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x0)

7.47796398s ago: executing program 5 (id=1698):
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040), &(0x7f00000000c0)=0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0)
ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, 0x0)
ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f0000000200)={0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x0, 0x0})
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00')
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x84)

7.221154528s ago: executing program 1 (id=1699):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0)
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES16=r2, @ANYRES8=r1], 0x34}, 0x1, 0x0, 0x0, 0x480e1}, 0x50)
sendmsg$nl_route(r0, 0x0, 0x0)
r3 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r3, 0x0, 0x27, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x4)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10)
fanotify_init(0x208, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x99)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r9=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r8, r9, 0x25, 0x8, @void}, 0x10)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r10, 0x84, 0x6e, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0x10d8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffff8}], 0x1c)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$KVM_SET_IRQCHIP(r11, 0x8208ae63, &(0x7f0000000580)={0x0, 0x0, @pic={0x0, 0x80, 0x3, 0x9c, 0xc, 0xe4, 0xe2, 0x4, 0x4, 0x40, 0xe1, 0xb, 0x9, 0x8, 0xff, 0x7}})
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r12}}, 0x24}}, 0x0)

7.160046632s ago: executing program 0 (id=1700):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x4002}, 0x20041085)
readv(0xffffffffffffffff, &(0x7f0000000940)=[{0x0}], 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x9, 0x141101)
r2 = dup(r1)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000280)=0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = syz_open_dev$MSR(&(0x7f0000000100), 0xfffffffffffefffc, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
poll(&(0x7f0000000240)=[{r3, 0x11a2}], 0x1, 0x63d5)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
write$binfmt_script(r5, &(0x7f0000000200), 0xfffffd9d)

6.648619133s ago: executing program 1 (id=1701):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0)
ioctl$TIOCMIWAIT(r3, 0x545c, 0x0)
ioctl$TIOCVHANGUP(r3, 0x5437, 0x0)
r4 = semget$private(0x0, 0x0, 0x80)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x8000)
semctl$IPC_RMID(r4, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x10000, 0x28)
ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
openat$dsp1(0xffffff9c, 0x0, 0x2, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000180)={<r6=>0x0}, &(0x7f00000001c0)=0xc)
sched_setscheduler(r6, 0x6, &(0x7f0000000240)=0x7fff)
socket$packet(0x11, 0x2, 0x300)

6.648086113s ago: executing program 5 (id=1702):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xfffffffffffffffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
read$FUSE(r2, &(0x7f00000005c0)={0x2020}, 0x2020)
connect$can_bcm(r0, &(0x7f0000000080), 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x9}, {0x1, 0x6}}}, 0x24}}, 0x40044)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd608a964600140600007db9df6c0000000000000000000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0)

6.456084241s ago: executing program 2 (id=1703):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$ax25(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48)
r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
bind$ax25(r1, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @bcast, @default, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast]}, 0x48)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0)
r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa)
add_key$user(&(0x7f0000000200), 0x0, &(0x7f0000000280), 0x0, r3)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000100)={0x27, 0xa, 0x1, "3258c54601cccfcf1e009200090000000000001300deffffff00000000b28d00", 0x32435750})
sendmsg$netlink(r0, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000007a000107000000000000000007"], 0x18}], 0x1}, 0x0)

5.611567274s ago: executing program 1 (id=1704):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18)
getdents64(r0, &(0x7f0000000300)=""/154, 0x9a)
lseek(r0, 0xa809, 0x0)
r1 = syz_usb_connect$uac1(0x5, 0xa5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029300030100000009040000000101"], 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1e0000000c000000090000000180000084000400", @ANYRES32, @ANYBLOB="ff0f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000000000000020000000100ffffffffffffffff000000000000beb52e5254306dc9cc611d70d0b2dc4fce511e450995dc5fcad7d201bd8f285fe7e52b53d2742b91a0da8f7150b0d1036b6ca5e04a0f840110c14520a0d4cd3d32695c74735848d6a8752d8808eeda24dea8651411c84966e571d246fdb29ff780cc5b63e805"], 0x50)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000080071000040"])
syz_usb_control_io$uac1(r1, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000008c254e69a35c404a93356b9bf979f8f850b0e1b2bf1e22047da54434dfd79d7a2a6ff4d58d2fbfd02000ea96074af70822f3b093b2e80f01175e0a00e67bb0b9f0ac6569d02432f6e2229d222173fd3728ee137eb17bf9ed365b5a5b4c4fe7b321a31835fc15efd6467a6ce0b2a98ff085c2935274a2c6995a3eb8e7e91c45785bd9e1"]}, 0x0)
syz_usb_connect$uac1(0x5, 0xa2, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xef, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x90, 0x3, 0x1, 0x9, 0xc0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0xdf}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x202, 0x4, 0x6, 0x7, 0x0, 0x2}, @mixer_unit={0x7, 0x24, 0x4, 0x5, 0xfe, "9ba7"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x93, 0x10, 0x4}, @as_header={0x7, 0x24, 0x1, 0x6, 0x8, 0x1001}, @as_header={0x7, 0x24, 0x1, 0x3, 0x7, 0x4}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x1, 0x2, 0xff}]}, {{0x9, 0x5, 0x1, 0x9, 0x440, 0x6, 0x8, 0x7, {0x7, 0x25, 0x1, 0x80, 0x1, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xeb, 0x8, 0x6, {0x7, 0x25, 0x1, 0x80, 0x6, 0xff}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x7, 0x8, 0x6, 0x0, 0x12}, 0x25, &(0x7f0000000080)={0x5, 0xf, 0x25, 0x3, [@wireless={0xb, 0x10, 0x1, 0x4, 0x1b, 0x0, 0x5, 0xc8, 0xf5}, @wireless={0xb, 0x10, 0x1, 0x8, 0x81, 0x7, 0x3, 0x6, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x8, 0x6, 0x2}]}, 0x7, [{0x83, &(0x7f00000002c0)=@string={0x83, 0x3, "34d88c23a1032fafc1a6702593290cbb01aac76f26a362a62d4532712fc64aae52055068e7477cd508a754debc519560a682e350027c481f648eacbac763dee090b01861a3d384922a81c7165a2840a8fcdf115f75e8f1a9f91d35fdabb73d34aa332889b58fc2bf837154f69ad6a395fd6d618a435fad3527aee45a4c0d7a1838"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x80a}}, {0x6f, &(0x7f0000000700)=@string={0x6f, 0x3, "55693e8de6284cc5ecad873a5998346504372a0f16c5e20ac64a2042277a0ae57a868469d75f461c7abb50264ea7d3bd400b34ed01cea48603b7186abbc05acfb2580addefafa967acfa606e21f4c7a7ff3de39d460356a52f6607eb7f53b466f666836da0bf7c26149517aff5"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x83e}}, {0xa9, &(0x7f0000000780)=@string={0xa9, 0x3, "c5c4b7569a4b3d7d22281477637976a9101f55f897eee1e8dac446859d11cd69c8c383f8176817908c34c3361845cca52e30c005b9831c86fabe1a5d88c131eecfdc7622528b6d7d229074118f091f178c924a185fff5084b3827ea674ec394cda6313e80ce696c9ef36f95b2de87b847a37e997ed74a5a9aa1e1342e76a50e1244db88e467669b6ebccb406c1083a41a941526d4ebc03eea3f47eafd46c1147f089358783eab2"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x801}}, {0x29, &(0x7f0000000540)=@string={0x29, 0x3, "64aabd1f035182f324dfdb17887ad101e6e1d8be84d9a16738a3bad48e0af4dc770c7392b82e9d"}}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYRES8, @ANYRES32, @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
connect$unix(r7, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)

4.994710009s ago: executing program 2 (id=1705):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000"], 0x7c}}, 0x0) (fail_nth: 3)

4.839343605s ago: executing program 2 (id=1706):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = socket$kcm(0xa, 0x2, 0x11)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3d, &(0x7f00000002c0), 0x8)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r2, 0x800455c9, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a053103000000000075e1412900010000800009040002010300010009210000000122f804090581034000040000"], 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000540)="2d45c0bf21f43df32cb41a6f7aa9053937ee74c3503de32bb97a576be132ee08e8a637752037ba96cfd5", 0x2a}], 0x1, 0x3, 0x0, 0xb)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendto$packet(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0)
socket(0x1e, 0x4, 0x0)
ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002)

4.807891783s ago: executing program 3 (id=1707):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$sock_int(r0, 0x1, 0x22, 0x0, 0x0)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
recvmmsg(r0, &(0x7f0000004400)=[{{&(0x7f0000000700)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f00000046c0)=[{&(0x7f0000000100)=""/15, 0xf}, {&(0x7f0000000340)=""/8, 0x8}, {&(0x7f00000011c0)=""/71, 0x47}, {&(0x7f0000000500)=""/62, 0x3e}, {&(0x7f0000001240)=""/112, 0x70}, {&(0x7f00000012c0)=""/35, 0x23}, {&(0x7f0000001300)=""/36, 0x24}, {&(0x7f0000001340)=""/111, 0x6f}, {&(0x7f00000013c0)=""/245, 0xf5}, {&(0x7f00000045c0)=""/198, 0xc6}, {&(0x7f0000001e40)=""/114, 0x72}, {&(0x7f0000001ec0)=""/64, 0x40}], 0xc, &(0x7f0000001580)=""/225, 0xe1}, 0x7}, {{&(0x7f0000001680)=@alg, 0x80, &(0x7f0000001b80)=[{&(0x7f00000018c0)=""/193, 0xc1}, {&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001740)=""/53, 0x35}, {&(0x7f00000019c0)=""/176, 0xb0}, {&(0x7f0000001780)=""/63, 0x3f}, {&(0x7f0000000840)=""/203, 0xcb}], 0x6, &(0x7f0000001500)=""/45, 0x2d}, 0xfff000}, {{&(0x7f0000001c40)=@generic, 0x80, &(0x7f0000003f00)=[{&(0x7f0000004780)=""/197, 0xc5}, {&(0x7f0000001d80)=""/118, 0x76}, {&(0x7f0000000680)=""/28, 0x1c}, {&(0x7f0000000780)=""/158, 0x9e}, {&(0x7f0000001f00)=""/4096, 0x1000}, {&(0x7f0000004880)=""/4096, 0x1000}], 0x6}, 0x9}, {{&(0x7f0000003f80)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f00000042c0)=[{&(0x7f0000004000)=""/110, 0x6e}, {&(0x7f0000004080)=""/128, 0x80}, {&(0x7f0000001cc0)=""/151, 0x97}, {&(0x7f00000041c0)=""/103, 0x67}, {&(0x7f0000004240)=""/8, 0x8}, {&(0x7f0000004280)=""/6, 0x6}], 0x6, &(0x7f0000004340)=""/169, 0xa9}, 0x4}], 0x4, 0x0, 0x0)

4.694734769s ago: executing program 3 (id=1708):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffffff, 0x0, 0x151)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
sendmmsg$sock(r2, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r3)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, 0x0, 0x800)
fallocate(0xffffffffffffffff, 0x0, 0x400000000000000, 0x7)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000001dd80)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRESOCT=r2], 0x44}}, 0x0)
r7 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', <r8=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r8})
sendmmsg(r2, &(0x7f000001dc00)=[{{&(0x7f00000000c0)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)="89218fb59921e4ee933358bf0562d819a73753d4b99868e78a1ec3b2a42a634e844994e553f445d5daab4f0e9230ddae251bc0f89ffb13441eb8308b8f686bbf4c958fdaf49472", 0x47}], 0x1, &(0x7f0000000240)=[{0x90, 0x111, 0x6, "6d9348cd96387f57e59967c0226738a079f0a2829fa22b3e68277ad4baa8beda06f843cdf3520b64de3ffce17b096b8efc3647bb0a9c6c9c8edd5c55b8d3a12504502100b7374d78991a389d951aea0eb28dc0105da278284588f9f03d361875566ae5b5d30d487b8c6df199309eb1db7f161fcba9aa6aacbe23ec1167bef776"}], 0x90}}, {{&(0x7f0000000300)=@ll={0x11, 0xf5, r6, 0x1, 0x5, 0x6, @remote}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000380)="fabb284c50b7e5e921cf08dde4154c7f81a3aa13ab6e58a7a9e3597bfaa361c2953b16e033439baffef3f5146eaf9ebe", 0x30}, {&(0x7f00000003c0)="79481fadda022789f82b7870d784835d0a1a8221aa293186c58f86de01566170764530d0279cf7a985d329f7d9b7f758f5e92df4c37905362f7583ef4352615dc5e5c350989c2a45470f2885e86dee", 0x4f}, {&(0x7f0000000440)="f8d799b819d1855571b858cd86ed20afaa5b9ba0e733de27d1b45b9fc395af36c890f439a40235c8718d74804846bf31dcc05da91a63b96f4657122f0e3b6f3645f4b17542a5b715c46b445c4837f19be32d649a8fff8bc2bc9a1053fed972a8c6cf863afe003dec07fe9b4df8", 0x6d}], 0x3, &(0x7f0000000500)=[{0xf8, 0x119, 0x7fff, "28afab5b779b64bd8d730bd52036be1b34d9209ace8354061e7414f77d1c456ef8bb153eac5dac4c5e9e60241984c403e063286c68cef5844cacbe08046e22d75a5c580c0682d1443aab8542b67cf910e788f260d3c4055fd87b2a19deb08b8d819e9f6b9b65699a974bcc2fc8321ba39e2f04b35d3cd0b55700b031b2e470096c2e9b783a2693eb911c08cf73af50098130d5a2816ada07b2f37d2d3d503061748738778f38c90ab07d12e1c6e07e7984262188ddbf13ea5778511bbc99de618777b78cc7444e73f3d5b53ec166723eb6c6392d7dfb22be11128fddbd6e409d24c4"}, {0xf0, 0x118, 0xe5, "0f3d36b68a7e4fee77cdad441dc83a4b6b951aed69f12284c9f6c59ec0abba28c53141a58312a0cc0115356786c69f6886b7d71377ceb09f247028c42bc41909340f8e630f531b71d410c640ff40c23d952dd1d52c64afac42abd4531d000b6721e62fd49b6abdf405f225ca170363e676b43834d9a946bce5d468b65f40655e322e3794490ec3430f4df3124670908bc757ba7e62484e0c3ac4ab6b6f5fcf71a17158e677bb261529ba748a4881404b33d4678b4a57c42b940b8e7782030b3fa692d2eacd6848b7d4c0b336513bd8a09775d17a0f4f7ca139182186"}, {0x90, 0x107, 0x9, "dc5fe179b83be5dec3a9d361ab6033310417b43b9096670196163cc68b4573bf80825b72c538f01433ab7bd2d3e6ec520f44281cd0e20d8f55afccb4dbda1f46b27f2ee45a7f0d0702cd58d36db0dbc807514244baed7c4a31e3c5ceefc8af5afb153ab36fb387e85e295d33e8000bd523a2acd210042d063e5e"}, {0x50, 0x109, 0x8000000, "e99303ec951586a7947cb232d7c46e6794e9737f5bc39a6f59172ecc6752a9f3a57ba5f4d3e00b73c775b7b61e1501688bef19edd0df0737e7faecf73fa0c0d9"}], 0x2c8}}, {{&(0x7f0000000900)=@qipcrtr={0x2a, 0x3, 0x4000}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000980)="04bc79811aaddeff447f51f0f6a5354bfdb5081e7c79c61001fc883187115aed613fe615eaadca2abffcdd434ba4c1e91bdfdcd8c7e130eaaddeb211cfe4f8594b9b1b2c04bbcc093f424113f2578c27f57b0845ea6a4c3a500682f509c91474cfa0880e44466b7aac5d9fee817940d6b76fcdd7e27079659feabd4c6050f5380c2e07c26d1770f96ccc6cc7658240413a7ad5c68ea0ebb73f3c24bd21171e5dcf809beba6520eefcd4783beb8eb6dd5d53bcbe2f521224bf2d477362823668fc8a16e6123", 0xc5}], 0x1, &(0x7f0000000ac0)=[{0x70, 0x3a, 0x1, "99cec3911313915bddf1d2592717be622e4288177a31e6703f7ba6b7253a6d52017c22d224d550aeceb63850e61f7dee1edd30cc9d06e670d1c356a28d10af518f6fed8a3d4dea98b6b1e44c34dd06e0a0d335c00a4e816b70fcff78"}], 0x70}}, {{&(0x7f0000000b40)=@xdp={0x2c, 0x3, r8, 0x21}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000000bc0)="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", 0x1000}, {&(0x7f000001b700)="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", 0x1000}, {&(0x7f0000001bc0)="30af2ea436923797085c26056d69950c2bc0c84ecf482713b75db4dcd74dbc7a2fc840330703185ba7b0314a2f8c9145e588c781949edfa4b98102e94d89e6a512b75934d4ff87290a458904332a26b445f3dbca64c2bfc2bf193438543851d77530263be4fc2427195d48f0179234d19c47330e634a2123b32593b980a0970f8948d13c99f90ea7e3df3a7d3a8774f1004349bfe6bf01df50350e581c573d5c41cf995e3cd4247c9dca8debd75e2484b95086ecb2a91f7cacac37c4b0a946aa728ad97e221334ac396a7187044eefd06ef343afb30e490681c8915c9ce15036b09978479ccac14faa35a423a7131b2db305336ed8950df12e4e7272d35d", 0xfe}, {&(0x7f0000001cc0)="5e5a0eabe043b462dc465767cfe9ddfadb9212333d159add40079cb073b4c0bfc972c7db", 0x24}, {&(0x7f0000001dc0)="30a72330ab55da3190b00a1baff010205ef28712b9d323d7b4cf17d9e73928985b0bdf854d9b4f0b635d00bb7d97df2f8a8df54129a05ea90f8cda2ba901c05c68b37ae2", 0x44}], 0x5, &(0x7f000001de00)=ANY=[@ANYBLOB="30b9de0000000000150100000000000064370ffd137c14ceecc9f6ed78ba1401a6ee5f0604c8a361f500000000000000900000000000000086000000090000003f7e78d24f8a4d01412eba474b761a927d420d21af64f9c163629ef0198d56e6aefabe7dc5439f42667cac296229d0b26901210ace970a90c051ccb6b52949ac53be70c58a018225f892a797a1df156e9ac5692e0c"], 0xc0}}, {{&(0x7f0000001f80)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x7, @empty, 0x5}}, 0x80, &(0x7f00000021c0)=[{&(0x7f0000002000)="2302cc49032956d4f05bdb2d0f87aad4662074b5d7dbc6895ea7b32837c3a9dc1ea4c19ad4dff935aabc76655366ad5aae30fc3f834a26ae6d942c642328c83c76d1faedc0e80ce532eba06885fece8170577da0d840f4fa82a55d42cfaf3cb5621ba9925f9e3099d014996a4b79149e70b1ad570edf40b99c74b3011838f79a78edffd8482163c6d608bbc96edaf7883278c12dfb924707a3306d62ddb5e2ca970ad26b4e766aa47410fd17ad803efd28cfbc7e38903574e8eaeeea6daa7f635a83877f7ca1b7caa729535631fa924f6435337142effe940f4613920d2f", 0xde}, {&(0x7f0000002100)="13badd3364318798374233661d406a410cbdc9e73157dce358f9d6fc12", 0x1d}, {&(0x7f0000002140)="215e51bfbdaba7fe98770a5b2e48d6cbbefd48aeb6814393c319e6e07d63d12530687a11adb1dce6e0c56b7a6f7143a615b7d4ad4df52ffc5b6be9d41e6adf14b75d0f7802f9cc27db159cb1f9", 0x4d}], 0x3, &(0x7f0000002240)=[{0x68, 0xff, 0x0, "8711688c558e85e28f6bff4719bf1b6510f77e5f245d0adb93ebd8beadfd8bd90110a09d2250ee951fe124ef17439ab338f3eadde03a3fcac781560b561f42b71a744c5b09491ecc69e27e852c8d9faf4c3d10db1a3747"}, {0x28, 0x11, 0x3ff, "a43635e4c4125487eb662ee09b782d09c84470be5179"}, {0xd8, 0x0, 0x4, "b014b418feb61db6d40ca9ea195bd0458b01a42ca842ec670550707ed237f152f2bf402a1eacb13e2d5b753993e7a240eff5ba21cd6bf4a4ae2da9f4be78c4dcda4c441893d9337b242a7fd8a939355140f26fa360c8df179118ee64395d3141bb002c15a57a7013aed1fcb6d91842c93c7a26cb5725fb9970df3ff285e9892052813bcd2e89c5aaf646334e9bc63309b7bca639481decdb59f044092c281b9bc35d42414586efa93c0f2428bf0d314eb412bee71e9bc011315b9c45d91dc981a3"}, {0x80, 0x110, 0x4, "cf01668cee7ca598e1a1d61ffe4e7cd7e1f0b4a292d514365c6eeafe576e0f7c7aab6917bc6f2d7e3dff535f338892a77180e8d3361e684784f1bf8cf0426574f558d2238dc996e295c0ef222282148f8e6bce5d3882e32ad011a9e63de0a6f2ba21e03c6069c08e792f39beaafd"}, {0x80, 0x118, 0x9, "31a02815f11da789cdbfd76fe87c632ab9edee59588eb06042707885a710af0ea2d59de1794945401db52a18b71279abff5e8cd0d1f8f76d876664288d3ae376fe2494107a3b6d3b5bb4481d9b30f24e711c89c4dc26b1b16ceb647231ce53eb2403cca1c56ab47b6fcf3152970b8f36"}, {0x38, 0x10f, 0x6, "e8acc48ac0e0eac29c27cd0c95731d423b35c51eeb3a3a06d22b472c609bc45e86"}, {0x90, 0x118, 0xfffffc9d, "3ffa8f367dadd2e459fac300670eac9ecb99ff379e931c95819a079827726f87abc0b29ab774739da33477a7648fc17d3f769f8d6f481b0e235f9f6e6092efa9c5b3295cd06ea067775a38b400bedca8d0c51772442dd3e3011ba0ed8a99a53145d83a07df41c66e9094d9345d6fcfee8e6feb23007a194870c1fa0342a8"}, {0x68, 0x101, 0x0, "a199da8cfaac803921f4f8960258d277c334c18d9509e728261bdded7fabbd1ebd2fdda7b2f5a4de018f38094e857b30bb3bd772634f6fb6d35ec2e4cc651b320729bde4425eedeb3774e05e6745ff7007ca0e5176b1"}], 0x398}}, {{&(0x7f0000002680)=@un=@abs={0x0, 0x0, 0x4e24}, 0x80, &(0x7f000001d980)=[{&(0x7f000001c700)="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", 0x1000}, {&(0x7f000001d700)="f3df572983ae1d65b7847df4fdbb6c11532edd856d09ba9dd5edacfd08014b5125df3789b3a8d54d8aaf438bc875c716aed4754f99c7df3cceb5", 0x3a}, {&(0x7f000001d740)="50f208c563c62116b9947f92e217867244978db9a58e2f57191b276686db0c70d83ec6d66ea7aad8d600df4cf9027ed65471095ba71d754e7b3d16be2de9085b42886165176e3d2524e9a21224e015a02245ec010c66ef02a4453ce0e0645b3d6eed4708b8705f0225b4ca9ce45412987b4ae235e7a6e67126d39da7b1332345acf2b154121a691d42d46da297663236bc58412c6555ff6c4f45f8723f1523bce589f45e657daf16d30fd459bdc8dfa01ae98a879258d4b474ae1547cf8749e7afa4d89d5762559091102d35d7776e7defcfc2b1de69c510b2e35e9164343ef6855480a5f3b06e016a03a7bf", 0xec}, {&(0x7f000001d840)="e96eb12b9a09fffdccd394672ddbf9c49ab0a2fef68742881c0a4b360640f50278d4ae75bc783e8dc438b579b483b9e441a76c6c51de58288c1fb3734f30ba220967ef0e7562178e6f42148ee260f53ee4b2796f49bfd3c8af4ff1d8df685d2048f945b7df143e1c6e601039d0858d034e987ab7c855f24ea7f33257496150d5c272ed4e6efb6d712d1f1854cfef83fd4fd5e9f6413c1bf456a11b1fff8f34d70a86015ec26013bade89a3c7b6e1ed40", 0xb0}, {&(0x7f000001d900)="d64dce3b04e8d091134f4b7d70df7e42cebf7e786a87c37c7c02a6b478713835e3434cda7d13cf016043a0360f3a10ad57f0fbf75cca829c05bcdb4e46293581eac6230e7e837ea3fec713da2a8826cf", 0x50}], 0x5, &(0x7f000001da00)=[{0x80, 0x1, 0xbfea, "26b9435534b3a36036c0af0326f32762bff88d0b98e1b462b62f94e8360d0ea25514a2c23be19d6dfe3177b69faeb9bf9b2e63c53246bd8861fb2dc32355b915eeadeccb37458f9f3d25ebbdb4acc82744bf0e6d908f8bbf8d033a49703a010b1ba53554d503dfa31ce80c00"}, {0xb0, 0x111, 0xd9, "dd246dc1ae0138c3bc15a645472dfe654ed16e5a52c0de449e5fb1696f94b7d94de897901992e76675319d39dec82bb6eb97f68d62ccf052e3b3bd3ea82e0d72f3b3a6bbdfccc54b8730dd7a903b8d196056b94cf4bb1a6acbea324ca4e66ca81276c37bbc2cc2026a0b65159e9ff03e9d220e85038276ae501c237acdc876163edd369710121b2db0db2d8376131483cc6ed73ac0a0780efe"}, {0x10, 0x1, 0x5}, {0xb0, 0x10b, 0x4, "a80ee93a2e9d12d805cfc081bed9b2741f402ed133706d3cf42e5eb34b9d643035ee7d5fb1ab1731d480531fedabb89fccacbd7a37ea866e56aabfaf87482a77dbc592008306b31d1fb0be845a33fa8d8b7c9426d5cc4da7b4517812b57e10691b3669c9984677299d0fae26d4a416885bbbe1c54310520ccb302704722760b9616d9742aa08df895f4ac77bb34e0c99ef01fc3c799b4426dd83b8a7"}], 0x1f0}}], 0x6, 0x4000881)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x11, &(0x7f0000000080)=0x5, 0xfffffffffffffd31)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0)

4.250623198s ago: executing program 0 (id=1709):
r0 = getpid()
process_vm_readv(r0, 0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000a00)=""/115, 0x73}, {&(0x7f0000000a80)=""/53, 0x35}, {&(0x7f0000000ac0)=""/16, 0x10}, {&(0x7f0000000b00)=""/109, 0x6d}, {&(0x7f0000003b40)=""/4096, 0x1000}, {&(0x7f0000000b80)=""/26, 0x1a}, {&(0x7f0000004b40)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/42, 0x2a}, {&(0x7f0000000c00)=""/171, 0xab}], 0x9, 0x0)

3.248372824s ago: executing program 0 (id=1710):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000023ed2449810000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(0xffffffffffffffff, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x8016, 0x0, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x8100, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0xfdef)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x21, 0x2, 0xa)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
openat$dlm_control(0xffffffffffffff9c, 0x0, 0x111001, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f000027b000/0x4000)=nil, 0x4000}})
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000063f943ff00000000000000008500000041000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffff", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/bus/input/handlers\x00', 0x0, 0x0)
preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x0)

3.208995307s ago: executing program 3 (id=1711):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = socket(0x25, 0x1, 0x0)
r3 = epoll_create1(0x0)
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_emit_ethernet(0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r6=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0000002071a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010071ec7c45f2fe0000000085000000a3000000b700000000000000950001000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050505f8e6fb0fd7ddcb12b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c20500000000000000ccea"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$FBIOGET_CON2FBMAP(r4, 0x460f, &(0x7f0000000100)={0x36, 0x2})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00'})
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000000)={0x40002000})
sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, 0x0, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}}, 0x2000c094)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r7=>0x0})
socket$tipc(0x1e, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="70fff7110000000800030058752a5832e52c5c60acd3be0c8d6a049ba01c8115b44c833219053d74dc738ccd7d5f070fbcc15e0a6d38e9303b7393a809a5b963e7aa220c0ea934f1c7a83cf5a65bb09622d0f877b2d1f72cb1ddb04f70bdff0746034e70d944bb5c1bacff11f2158479c0f4c7f17a32b215b10b0895178416b7bdce7a2d7e74260014c954d0", @ANYRES32=r7, @ANYBLOB="0a0006"], 0x34}, 0x1, 0x0, 0x0, 0x4045}, 0x0)

2.7714559s ago: executing program 5 (id=1712):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0x14, &(0x7f0000003480)={0x0, 0x0, 0x4, 0x0, 0x0}, 0x20)
r1 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9)
add_key$fscrypt_provisioning(&(0x7f0000000080), &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000002c0)={0x1, 0x0, @d}, 0x18, r1)
io_uring_enter(0xffffffffffffffff, 0x35a5, 0x0, 0x1f, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0040d07, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000008f}, 0x0)
sched_setscheduler(0x0, 0x5, &(0x7f0000000280)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000000c0)=0x40)
ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, &(0x7f0000000240))
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)=@udp6}, 0x20)
close(0x3)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES8, @ANYBLOB="01000800000000020000540000000e0001006e657464657673696d0000000f0002006e"], 0x34}}, 0x8008)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x4, 0x0, 0x0, 0x0, 0x1a0}, {@in=@rand_addr=0x4, 0x0, 0x33}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, 0x0, 0x0, 0x2, 0x1}}, 0xf0}}, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
fsopen(&(0x7f00000003c0)='anon_inodefs\x00', 0x1)

2.689025851s ago: executing program 3 (id=1713):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000023ed2449810000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(0xffffffffffffffff, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x8016, 0x0, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x8100, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0xfdef)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x21, 0x2, 0xa)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
openat$dlm_control(0xffffffffffffff9c, 0x0, 0x111001, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f000027b000/0x4000)=nil, 0x4000}})
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000063f943ff00000000000000008500000041000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/bus/input/handlers\x00', 0x0, 0x0)
preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x0)

2.268754167s ago: executing program 5 (id=1714):
socket$nl_generic(0x11, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b00010000000009040800010300", @ANYBLOB="8fcf"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x4)
r2 = dup(r1)
write$UHID_INPUT(r2, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)

2.001948681s ago: executing program 1 (id=1715):
socket$nl_generic(0x11, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b00010000000009040800010300", @ANYBLOB="8fcf"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x4)
r2 = dup(r1)
write$UHID_INPUT(r2, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)

1.534818823s ago: executing program 2 (id=1716):
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x290}}, 0x4048010)

1.105198148s ago: executing program 3 (id=1717):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002240)='/proc/consoles\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f00000042c0)={0x2020}, 0x2020)
rseq(&(0x7f0000000540), 0x20, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0), 0x0, 0x10, 0x1, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
epoll_create1(0x80000)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r6=>0x0})
bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6, 0x3, {0x0, 0xff, 0x4}, 0x2}, 0x18)
setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f38437", 0x7}], 0x1}, 0x48005)
ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x3, r2})
close_range(r0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7a, &(0x7f0000004540)={@link_local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "9a83c9", 0x4, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be}}}}}}}, 0x0)

510.684923ms ago: executing program 3 (id=1718):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000080)=0xb, 0x4)
bind$bt_hci(r0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000004400)=[{{&(0x7f0000000700)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f00000046c0)=[{&(0x7f0000000100)=""/15, 0xf}, {&(0x7f0000000340)=""/8, 0x8}, {&(0x7f00000011c0)=""/71, 0x47}, {&(0x7f0000000500)=""/62, 0x3e}, {&(0x7f0000001240)=""/112, 0x70}, {&(0x7f00000012c0)=""/35, 0x23}, {&(0x7f0000001300)=""/36, 0x24}, {&(0x7f0000001340)=""/111, 0x6f}, {&(0x7f00000013c0)=""/245, 0xf5}, {&(0x7f00000045c0)=""/198, 0xc6}, {&(0x7f0000001e40)=""/114, 0x72}, {&(0x7f0000001ec0)=""/64, 0x40}], 0xc, &(0x7f0000001580)=""/225, 0xe1}, 0x7}, {{&(0x7f0000001680)=@alg, 0x80, &(0x7f0000001b80)=[{&(0x7f00000018c0)=""/193, 0xc1}, {&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001740)=""/53, 0x35}, {&(0x7f00000019c0)=""/176, 0xb0}, {&(0x7f0000001780)=""/63, 0x3f}, {&(0x7f0000000840)=""/203, 0xcb}], 0x6, &(0x7f0000001500)=""/45, 0x2d}, 0xfff000}, {{&(0x7f0000001c40)=@generic, 0x80, &(0x7f0000003f00)=[{&(0x7f0000004780)=""/197, 0xc5}, {&(0x7f0000001d80)=""/118, 0x76}, {&(0x7f0000000680)=""/28, 0x1c}, {&(0x7f0000000780)=""/158, 0x9e}, {&(0x7f0000001f00)=""/4096, 0x1000}, {&(0x7f0000004880)=""/4096, 0x1000}], 0x6}, 0x9}, {{&(0x7f0000003f80)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f00000042c0)=[{&(0x7f0000004000)=""/110, 0x6e}, {&(0x7f0000004080)=""/128, 0x80}, {&(0x7f0000001cc0)=""/151, 0x97}, {&(0x7f00000041c0)=""/103, 0x67}, {&(0x7f0000004240)=""/8, 0x8}, {&(0x7f0000004280)=""/6, 0x6}], 0x6, &(0x7f0000004340)=""/169, 0xa9}, 0x4}], 0x4, 0x0, 0x0)

478.370593ms ago: executing program 0 (id=1719):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = socket$pppoe(0x18, 0x1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_DEL(r2, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002d80)={&(0x7f0000000180)=ANY=[@ANYBLOB="3800000002090108000000000000000000000097537e59ab9045537358000100010000001400018008000100ac1414aa08000200ac1e0101"], 0x38}, 0x1, 0x0, 0x0, 0x24004000}, 0x0)
connect$pppoe(r1, &(0x7f00000004c0)={0x18, 0x0, {0x2, @empty, 'vlan0\x00'}}, 0x1e)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0))
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$PPPIOCSFLAGS1(r5, 0x4004743a, &(0x7f0000000300))
pwritev(r3, &(0x7f00000002c0)=[{&(0x7f0000000440)='\x00\x00\x00\x00\x00', 0x5}], 0x1, 0xfffffffe, 0x0)
r6 = dup2(r5, r0)
ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000040)=0x1)
ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x5)
preadv(r6, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/248, 0xf8}], 0x1, 0x0, 0x5)
r7 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0.,:/', 0x0)
syz_clone3(&(0x7f0000001580)={0x804400, &(0x7f0000000140), &(0x7f0000000340)=<r8=>0x0, &(0x7f0000000380), {0x28}, &(0x7f0000000500)=""/30, 0x1e, &(0x7f0000000540)=""/4096, &(0x7f0000001540)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, {r6}}, 0x58)
syz_pidfd_open(r8, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001680)=ANY=[@ANYBLOB="240000004a00010000000000000000000a00000079b58aa074a5e97b10614d29373b81ea3341527dee6ed1c028b3f672312371f93d007336926de321fa484aa15b5e99cccd74e18687b054be684546ee900abaad166fe8c8e5d8bcf121b09722c7bf324dbd658589cd8fbcd329ff5cf6f325ec8027ca12b142ec0fd86de413c53e15f63e07cf0d587975cb1d77539702ee3743d8c95f5902b32e7f4c742c8516f0d9b636a44e124d49307d9efe2f2e474f37a9d45333e42fdba46a19d14ed677a124b5116937d993f73bd8e0a4271fa7c6b03751e957e85239d3f7ba09752a", @ANYRES32=0x0, @ANYBLOB="000000000812020000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001600)=ANY=[@ANYBLOB="1b000000000000efffffff0006d6e84ea48c3943b034b11df87943114dcbdfaf9100000000000000", @ANYRES32=r6, @ANYBLOB='\x00\x00(\x00'/20, @ANYRES32=0x0, @ANYRESOCT=r9, @ANYBLOB="00000000050000000100"/28], 0x50)
r10 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'bridge_slave_1\x00', <r11=>0x0})
sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r4, @ANYRES32=r11], 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="1b00000000000000000000000300000000000000", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000b170aa48ec19f53fbe33c41ee34f649280f32c47a3b43c869eec6d875fc63d48503720e4dfc20351f682a1b599bcd64766f19a27065324294e376b1b6fd8b5211bd141e9b8bc40f5be8f72729944dba5a21b81e01e9015c74e2d3f50347c9c9f28262736e82772021772962d1223990deaafc7a852be38419f70c26f41e4e04e568cf064bb7ffa95313e2f9001e6985d7da914eec7ca87e5a2e0f7e44d020f6e3d2c0a7ad392f697f4e2e3d67cd304a41c25a968daa377e6e741584cbbcb82e6c69a995b21f7d1db2440b32848af247a8a67fdabc15d9bd3de1b3e95b1f3bb7f3b04d20b5318d47ff409a9f004"], 0x50)

198.843295ms ago: executing program 0 (id=1720):
r0 = getpid()
process_vm_readv(r0, &(0x7f00000009c0), 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000a00)=""/115, 0x73}, {&(0x7f0000000a80)=""/53, 0x35}, {&(0x7f0000000ac0)=""/16, 0x10}, {&(0x7f0000000b00)=""/109, 0x6d}, {&(0x7f0000003b40)=""/4096, 0x1000}, {&(0x7f0000000b80)=""/26, 0x1a}, {&(0x7f0000004b40)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/42, 0x2a}, {&(0x7f0000000c00)=""/171, 0xab}], 0x9, 0x0)

76.593193ms ago: executing program 0 (id=1721):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$KDSKBMODE(r1, 0x4b45, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, 0x0, 0x0)
r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb)
setsockopt$ax25_SO_BINDTODEVICE(r6, 0x101, 0x19, &(0x7f0000000040)=@bpq0, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtaction={0x5c, 0x30, 0xcac229faa96ee7df, 0x0, 0x20000, {}, [{0x48, 0x1, [@m_ife={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @dev}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x5c}, 0x1, 0x500}, 0x4090)
ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000100)=""/4103)
epoll_create1(0x0)

11.796314ms ago: executing program 2 (id=1722):
r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card0/oss_mixer\x00', 0x298f3cc22e12b39a, 0x0)
write$proc_mixer(r0, &(0x7f00000007c0)=[{'PHONEOUT', @val={' \'', 'Mic Capture'}}, {'PHONEOUT', @void}], 0x35)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002240)='/proc/consoles\x00', 0x0, 0x0)
read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020)
lseek(r2, 0xfffffffffffffffa, 0x1)
dup3(r1, r0, 0x0)

0s ago: executing program 5 (id=1723):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xfffffffffffffffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
read$FUSE(r2, &(0x7f00000005c0)={0x2020}, 0x2020)
connect$can_bcm(r0, &(0x7f0000000080), 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x9}, {0x1, 0x6}}}, 0x24}}, 0x40044)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd608a964600140600007db9df6c0000000000000000000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0)

kernel console output (not intermixed with test programs):

roduct=0080, bcdDevice=15.18
[  400.405850][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  400.427845][ T5870] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input29
[  400.450086][ T5869] usb 5-1: Product: syz
[  400.465848][ T5869] usb 5-1: Manufacturer: syz
[  400.473230][ T5870] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  400.521661][ T5870] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  400.541672][ T5870] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  400.569542][ T5870] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  400.683606][ T5869] usb 5-1: SerialNumber: syz
[  400.746712][ T5869] kl5kusb105 5-1:1.91: KL5KUSB105D / PalmConnect converter detected
[  400.761657][ T5870] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  400.777605][ T5869] usb 5-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0
[  400.789862][ T5870] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  401.081653][ T5870] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  401.092131][ T5869] usb 5-1: USB disconnect, device number 22
[  401.111703][ T5867] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  401.121870][ T5870] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  401.132882][ T5869] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0
[  401.142244][ T5870] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  401.179180][ T5870] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  401.225156][ T5870] mceusb 2-1:0.0: Registered  with mce emulator interface version 1
[  401.272864][ T5867] usb 3-1: Using ep0 maxpacket: 16
[  401.302875][ T5869] kl5kusb105 5-1:1.91: device disconnected
[  401.333980][ T5870] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  401.344381][ T5867] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  401.357291][ T5870] usb 2-1: USB disconnect, device number 27
[  401.364791][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  402.022337][ T5867] usb 3-1: config 0 descriptor??
[  402.048036][ T5867] gspca_main: sonixj-2.14.0 probing 0471:0327
[  403.297057][T10139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1079'.
[  404.121650][ T5867] gspca_sonixj: reg_r err -110
[  404.126523][ T5867] sonixj 3-1:0.0: probe with driver sonixj failed with error -110
[  404.494184][T10145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1080'.
[  405.698354][ T5867] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  405.704655][   T30] audit: type=1400 audit(1742254889.825:767): avc:  denied  { relabelfrom } for  pid=10156 comm="syz.0.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  405.737899][ T6671] usb 3-1: USB disconnect, device number 19
[  405.794202][   T30] audit: type=1400 audit(1742254889.825:768): avc:  denied  { relabelto } for  pid=10156 comm="syz.0.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  405.895723][ T5867] usb 2-1: Using ep0 maxpacket: 32
[  405.927871][ T5867] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  405.952681][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  405.982779][ T5867] usb 2-1: Product: syz
[  405.986980][ T5867] usb 2-1: Manufacturer: syz
[  405.988882][ T5869] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  406.005287][ T5867] usb 2-1: SerialNumber: syz
[  406.022458][ T5867] usb 2-1: config 0 descriptor??
[  406.163343][ T5869] usb 5-1: Using ep0 maxpacket: 16
[  406.183054][ T5869] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  406.200092][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  406.259803][T10148] =======================================================
[  406.259803][T10148] WARNING: The mand mount option has been deprecated and
[  406.259803][T10148]          and is ignored by this kernel. Remove the mand
[  406.259803][T10148]          option from the mount to silence this warning.
[  406.259803][T10148] =======================================================
[  406.294739][    C1] vkms_vblank_simulate: vblank timer overrun
[  406.348422][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  406.412516][T10148] exFAT-fs (nullb0): invalid boot record signature
[  406.425521][ T5869] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  406.467027][T10148] exFAT-fs (nullb0): failed to read boot sector
[  406.489609][ T5869] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  406.510272][T10148] exFAT-fs (nullb0): failed to recognize exfat type
[  406.523377][ T5867] peak_usb 2-1:0.0 can0: unable to request usb[type=0 value=1] err=-71
[  406.530898][ T5869] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  406.545812][ T5867] peak_usb 2-1:0.0: unable to read PCAN-USB Pro firmware info (err -71)
[  406.551137][ T5869] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  406.579536][ T5869] usb 5-1: Manufacturer: syz
[  406.593022][ T5869] usb 5-1: config 0 descriptor??
[  406.597662][   T30] audit: type=1326 audit(1742254891.075:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10162 comm="syz.2.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2681f8d169 code=0x7ffc0000
[  406.629904][   T30] audit: type=1326 audit(1742254891.075:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10162 comm="syz.2.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2681f8d169 code=0x7ffc0000
[  406.656310][ T5867] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -71
[  406.692897][ T5867] usb 2-1: USB disconnect, device number 28
[  406.804076][T10150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  406.813932][T10150] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  406.931988][ T5869] rc_core: IR keymap rc-hauppauge not found
[  406.991325][ T5869] Registered IR keymap rc-empty
[  407.046203][ T5869] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  407.142114][ T5869] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  407.237425][ T5869] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  407.542661][ T5869] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input30
[  407.619733][ T5869] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  407.661686][ T5869] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  407.687728][T10181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1090'.
[  407.696886][ T5869] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  407.797865][ T5834] Bluetooth: hci5: command 0x1003 tx timeout
[  407.804661][ T5823] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  407.888363][ T5869] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  407.925829][ T5869] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  408.027632][T10187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1092'.
[  408.252069][ T5869] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  408.321949][ T5869] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  408.351809][ T5869] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  408.363750][   T30] audit: type=1326 audit(1742254892.835:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10189 comm="syz.0.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa18558d169 code=0x7ffc0000
[  408.423129][ T5869] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  408.433707][T10190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1093'.
[  408.447600][ T5869] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  408.471985][   T30] audit: type=1326 audit(1742254892.835:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10189 comm="syz.0.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fa18558d169 code=0x7ffc0000
[  408.525915][ T5869] mceusb 5-1:0.0: Registered  with mce emulator interface version 1
[  408.536710][ T5869] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  408.557224][ T5869] usb 5-1: USB disconnect, device number 23
[  408.573832][   T30] audit: type=1326 audit(1742254892.835:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10189 comm="syz.0.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa18558d169 code=0x7ffc0000
[  408.651830][   T30] audit: type=1326 audit(1742254892.845:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10189 comm="syz.0.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7fa18558d169 code=0x7ffc0000
[  409.005654][ T5869] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  409.225093][   T30] audit: type=1326 audit(1742254892.845:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10189 comm="syz.0.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa18558d169 code=0x7ffc0000
[  409.251986][ T5869] usb 5-1: Using ep0 maxpacket: 16
[  409.255293][   T30] audit: type=1326 audit(1742254892.875:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10189 comm="syz.0.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fa18558d169 code=0x7ffc0000
[  409.402135][ T5869] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  409.464145][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  409.488295][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  409.509212][ T5869] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  409.528351][ T5869] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  409.558829][ T5869] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  409.568209][ T5869] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  409.579403][ T5869] usb 5-1: Manufacturer: syz
[  409.589269][ T5869] usb 5-1: config 0 descriptor??
[  410.510546][T10183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  410.541007][T10183] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  410.760499][T10222] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1101'.
[  410.769869][ T5869] rc_core: IR keymap rc-hauppauge not found
[  410.796847][ T5869] Registered IR keymap rc-empty
[  410.809410][ T5869] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  410.852353][ T5869] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  410.892318][ T5869] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  410.916854][ T5869] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input31
[  410.948290][ T5869] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  411.011891][ T5869] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  411.060578][ T5869] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  411.202921][ T5869] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  411.631689][ T5869] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  411.651928][ T5869] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  411.671613][   T52] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  411.679257][ T5869] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  411.716865][ T5869] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  411.806309][T10238] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1105'.
[  411.854030][ T5869] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  411.880175][   T52] usb 4-1: Using ep0 maxpacket: 16
[  411.931094][   T52] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[  412.109172][   T52] usb 4-1: config 0 has no interface number 0
[  412.115980][ T5869] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  412.139362][   T52] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  412.185040][ T5869] mceusb 5-1:0.0: Registered  with mce emulator interface version 1
[  412.221309][   T52] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  412.255034][ T5869] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  412.300086][   T52] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  412.312395][   T52] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  412.323208][ T5869] usb 5-1: USB disconnect, device number 24
[  412.331290][   T52] usb 4-1: Product: syz
[  412.342844][   T52] usb 4-1: SerialNumber: syz
[  412.476772][   T52] usb 4-1: config 0 descriptor??
[  412.487826][   T52] cm109 4-1:0.8: invalid payload size 0, expected 4
[  412.542828][   T52] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input32
[  413.051918][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[  413.967194][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  413.968078][ T5869] usb 4-1: USB disconnect, device number 21
[  413.974166][    C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  414.611891][ T5869] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  414.783502][T10265] fuse: Bad value for 'rootmode'
[  415.314716][T10270] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1113'.
[  416.882583][T10286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1118'.
[  418.374948][T10306] fuse: Bad value for 'fd'
[  418.380053][T10307] fuse: Bad value for 'fd'
[  419.048117][T10315] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1127'.
[  419.232079][ T1202] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  419.921706][ T1202] usb 1-1: Using ep0 maxpacket: 16
[  419.928002][ T1202] usb 1-1: config 0 has an invalid interface number: 8 but max is 0
[  419.936190][ T1202] usb 1-1: config 0 has no interface number 0
[  419.943917][ T1202] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  419.969008][ T1202] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  420.000501][ T1202] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  420.041467][ T1202] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  420.127170][ T1202] usb 1-1: Product: syz
[  420.131371][ T1202] usb 1-1: SerialNumber: syz
[  420.152671][T10328] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1132'.
[  420.167257][ T1202] usb 1-1: config 0 descriptor??
[  420.287720][T10331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1131'.
[  420.334294][ T1202] cm109 1-1:0.8: invalid payload size 0, expected 4
[  420.412519][ T1202] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input33
[  420.692539][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[  420.714941][T10338] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1134'.
[  420.753003][T10338] libceph: resolve '0.' (ret=-3): failed
[  421.390437][   T30] kauditd_printk_skb: 23 callbacks suppressed
[  421.390796][   T30] audit: type=1326 audit(1742254905.865:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10322 comm="syz.1.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158a78d169 code=0x7ffc0000
[  421.443041][   T30] audit: type=1326 audit(1742254905.895:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10322 comm="syz.1.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158a78d169 code=0x7ffc0000
[  421.455773][   T30] audit: type=1326 audit(1742254905.905:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10322 comm="syz.1.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f158a78d169 code=0x7ffc0000
[  421.576943][   T30] audit: type=1326 audit(1742254906.015:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10322 comm="syz.1.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158a78d169 code=0x7ffc0000
[  421.577175][   T30] audit: type=1326 audit(1742254906.015:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10322 comm="syz.1.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158a78d169 code=0x7ffc0000
[  421.577324][   T30] audit: type=1326 audit(1742254906.015:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10322 comm="syz.1.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f158a78d169 code=0x7ffc0000
[  421.586544][   T30] audit: type=1326 audit(1742254906.065:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10322 comm="syz.1.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158a78d169 code=0x7ffc0000
[  421.606892][   T30] audit: type=1326 audit(1742254906.085:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10322 comm="syz.1.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158a78d169 code=0x7ffc0000
[  421.635357][   T30] audit: type=1326 audit(1742254906.115:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10322 comm="syz.1.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f158a78d169 code=0x7ffc0000
[  421.659144][   T30] audit: type=1326 audit(1742254906.115:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10322 comm="syz.1.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158a78d169 code=0x7ffc0000
[  421.932473][T10353] fuse: Bad value for 'fd'
[  422.120985][T10357] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1139'.
[  422.396791][T10363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1141'.
[  423.801094][T10324] delete_channel: no stack
[  424.368399][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  424.375952][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  424.383367][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  424.390480][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  424.397679][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  424.405242][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  424.412347][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  424.419542][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  424.426707][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  424.433852][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  424.690123][    C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  424.699513][ T5867] usb 1-1: USB disconnect, device number 20
[  424.724676][ T5867] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  425.481810][ T5870] usb 3-1: new full-speed USB device number 20 using dummy_hcd
[  425.881927][T10403] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1152'.
[  425.956481][ T5870] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  425.966803][ T5870] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  425.979341][ T5870] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  426.142580][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  426.242162][ T5870] usb 3-1: config 0 descriptor??
[  426.677649][ T5870] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  426.687355][ T5870] dvb-usb: bulk message failed: -22 (3/0)
[  426.910733][ T5870] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  426.927990][ T5870] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  426.952852][ T5870] usb 3-1: media controller created
[  426.959572][ T5870] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  426.979403][ T5870] dvb-usb: bulk message failed: -22 (6/0)
[  427.144552][T10419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1156'.
[  427.325049][ T5870] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  427.422988][ T5870] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input34
[  427.474445][ T5870] dvb-usb: schedule remote query interval to 150 msecs.
[  427.494069][ T5870] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  427.653431][ T5870] dvb-usb: bulk message failed: -22 (1/0)
[  427.685297][ T5870] dvb-usb: error while querying for an remote control event.
[  427.799317][T10426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1158'.
[  427.882790][ T1202] usb 3-1: USB disconnect, device number 20
[  428.188703][ T1202] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  428.309979][T10436] netlink: 'syz.3.1161': attribute type 12 has an invalid length.
[  428.487334][   T52] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  428.673614][   T52] usb 1-1: Using ep0 maxpacket: 16
[  428.697013][   T52] usb 1-1: config 0 has an invalid interface number: 8 but max is 0
[  428.727751][   T52] usb 1-1: config 0 has no interface number 0
[  428.755005][   T52] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  428.793245][   T52] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  428.827845][   T52] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  428.852922][   T52] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  428.931246][   T52] usb 1-1: Product: syz
[  428.936044][   T52] usb 1-1: SerialNumber: syz
[  428.952942][   T52] usb 1-1: config 0 descriptor??
[  428.963146][   T52] cm109 1-1:0.8: invalid payload size 0, expected 4
[  428.980733][   T52] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input35
[  429.170013][    C1] cm109 1-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[  429.493991][T10451] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1164'.
[  430.591967][    C0] cm109_urb_ctl_callback: 1371 callbacks suppressed
[  430.591989][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  430.592353][ T5868] usb 1-1: USB disconnect, device number 21
[  430.598612][    C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  430.750094][ T5868] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  431.038106][T10472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1170'.
[  431.750197][T10477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1171'.
[  432.881363][T10492] SELinux: failed to load policy
[  434.002856][T10500] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1174'.
[  435.319415][ T5898] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  435.531665][ T5898] usb 1-1: Using ep0 maxpacket: 16
[  435.545959][ T5898] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  435.558044][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  435.614166][ T5898] usb 1-1: config 0 descriptor??
[  435.650660][ T5898] gspca_main: sonixj-2.14.0 probing 0471:0327
[  436.531671][ T5868] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  436.604325][T10528] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1186'.
[  437.002040][ T5868] usb 3-1: Using ep0 maxpacket: 16
[  437.011952][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  437.035141][ T5868] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  437.052051][T10536] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1190'.
[  437.071318][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  437.103841][ T5868] usb 3-1: config 0 descriptor??
[  437.839340][ T5898] gspca_sonixj: reg_r err -110
[  437.844623][ T5898] sonixj 1-1:0.0: probe with driver sonixj failed with error -110
[  438.602594][T10548] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1192'.
[  438.725308][ T5868] usbhid 3-1:0.0: can't add hid device: -71
[  438.731440][ T5868] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  438.776839][ T5868] usb 3-1: USB disconnect, device number 21
[  438.963129][T10554] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1191'.
[  439.520990][T10556] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1194'.
[  439.655699][T10556] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1194'.
[  439.803668][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  439.809991][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  440.480707][T10566] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1194'.
[  440.981994][ T5868] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  441.662314][ T5868] usb 4-1: Using ep0 maxpacket: 8
[  441.668948][ T5868] usb 4-1: config 0 has no interfaces?
[  441.682258][ T5868] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[  441.709443][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  441.729317][ T5868] usb 4-1: config 0 descriptor??
[  441.782893][T10581] can: request_module (can-proto-4) failed.
[  442.009406][ T5898] usb 4-1: USB disconnect, device number 22
[  442.048602][   T52] usb 3-1: new full-speed USB device number 22 using dummy_hcd
[  442.592243][   T52] usb 3-1: too many configurations: 48, using maximum allowed: 8
[  442.700131][   T52] usb 3-1: unable to read config index 0 descriptor/start: -61
[  442.701731][ T5867] usb 1-1: USB disconnect, device number 22
[  442.741851][   T52] usb 3-1: can't read configurations, error -61
[  442.990515][   T52] usb 3-1: new full-speed USB device number 23 using dummy_hcd
[  443.174422][T10597] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1206'.
[  443.186187][   T52] usb 3-1: too many configurations: 48, using maximum allowed: 8
[  443.207738][   T52] usb 3-1: unable to read config index 0 descriptor/start: -61
[  443.226023][   T52] usb 3-1: can't read configurations, error -61
[  443.276526][   T52] usb usb3-port1: attempt power cycle
[  443.285221][T10597] libceph: resolve '0.' (ret=-3): failed
[  444.132115][   T52] usb 3-1: new full-speed USB device number 24 using dummy_hcd
[  444.173842][   T52] usb 3-1: too many configurations: 48, using maximum allowed: 8
[  444.333728][   T52] usb 3-1: unable to read config index 0 descriptor/start: -61
[  444.342187][   T52] usb 3-1: can't read configurations, error -61
[  444.353944][T10618] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1213'.
[  444.365352][T10618] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10618 comm=syz.1.1213
[  444.456120][ T8031] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  444.486940][   T52] usb 3-1: new full-speed USB device number 25 using dummy_hcd
[  445.221688][ T8031] usb 4-1: Using ep0 maxpacket: 16
[  445.228208][ T8031] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  445.238108][ T8031] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  445.363650][   T52] usb 3-1: device not accepting address 25, error -71
[  445.831726][T10633] netlink: 'syz.2.1216': attribute type 1 has an invalid length.
[  446.378030][ T8031] usb 4-1: config 0 descriptor??
[  446.385813][   T52] usb usb3-port1: unable to enumerate USB device
[  446.394455][ T8031] gspca_main: sonixj-2.14.0 probing 0471:0327
[  447.105360][T10640] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1219'.
[  447.127441][   T30] kauditd_printk_skb: 7 callbacks suppressed
[  447.127457][   T30] audit: type=1400 audit(1742254931.575:817): avc:  denied  { create } for  pid=10637 comm="syz.2.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  448.673205][T10661] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1223'.
[  448.727028][T10661] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10661 comm=syz.0.1223
[  449.157285][   T52] usb 4-1: USB disconnect, device number 23
[  450.126578][T10676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1226'.
[  450.238140][T10679] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1227'.
[  451.375549][T10684] FAULT_INJECTION: forcing a failure.
[  451.375549][T10684] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  451.486441][T10684] CPU: 0 UID: 0 PID: 10684 Comm: syz.3.1228 Not tainted 6.14.0-rc7-syzkaller #0
[  451.486466][T10684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  451.486476][T10684] Call Trace:
[  451.486482][T10684]  <TASK>
[  451.486489][T10684]  dump_stack_lvl+0x16c/0x1f0
[  451.486517][T10684]  should_fail_ex+0x50a/0x650
[  451.486548][T10684]  _copy_to_user+0x32/0xd0
[  451.486568][T10684]  simple_read_from_buffer+0xd0/0x160
[  451.486596][T10684]  proc_fail_nth_read+0x198/0x270
[  451.486620][T10684]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  451.486645][T10684]  ? rw_verify_area+0xcf/0x680
[  451.486667][T10684]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  451.486690][T10684]  vfs_read+0x1df/0xbf0
[  451.486715][T10684]  ? __fget_files+0x1fc/0x3a0
[  451.486730][T10684]  ? __pfx___mutex_lock+0x10/0x10
[  451.486749][T10684]  ? __pfx_vfs_read+0x10/0x10
[  451.486785][T10684]  ? __fget_files+0x206/0x3a0
[  451.486805][T10684]  ksys_read+0x12b/0x250
[  451.486827][T10684]  ? __pfx_ksys_read+0x10/0x10
[  451.486853][T10684]  do_syscall_64+0xcd/0x250
[  451.486873][T10684]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.486892][T10684] RIP: 0033:0x7f277bd8bb7c
[  451.486904][T10684] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  451.486919][T10684] RSP: 002b:00007f277cb46030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  451.486936][T10684] RAX: ffffffffffffffda RBX: 00007f277bfa5fa0 RCX: 00007f277bd8bb7c
[  451.486946][T10684] RDX: 000000000000000f RSI: 00007f277cb460a0 RDI: 0000000000000005
[  451.486954][T10684] RBP: 00007f277cb46090 R08: 0000000000000000 R09: 0000000000000000
[  451.486962][T10684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  451.486971][T10684] R13: 0000000000000000 R14: 00007f277bfa5fa0 R15: 00007ffd10c02ab8
[  451.486994][T10684]  </TASK>
[  454.042254][ T5867] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  454.402401][ T5867] usb 4-1: Using ep0 maxpacket: 16
[  454.430008][ T5867] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  454.962388][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  454.975913][ T5867] usb 4-1: config 0 descriptor??
[  454.993107][ T5867] gspca_main: sonixj-2.14.0 probing 0471:0327
[  455.983716][   T30] audit: type=1400 audit(1742254940.435:818): avc:  denied  { getopt } for  pid=10723 comm="syz.4.1242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  456.328030][ T5867] gspca_sonixj: reg_r err -110
[  456.332954][ T5867] sonixj 4-1:0.0: probe with driver sonixj failed with error -110
[  457.532188][   T30] audit: type=1400 audit(1742254941.985:819): avc:  denied  { map } for  pid=10744 comm="syz.4.1246" path="socket:[24728]" dev="sockfs" ino=24728 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  459.056650][ T8031] usb 4-1: USB disconnect, device number 24
[  459.261705][ T5867] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  459.952013][ T5867] usb 1-1: Using ep0 maxpacket: 32
[  459.961100][ T5867] usb 1-1: string descriptor 0 read error: -22
[  459.981812][ T5867] usb 1-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=b2.bf
[  460.021624][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  460.052036][ T5867] usb 1-1: config 0 descriptor??
[  460.341224][ T8031] usb 1-1: USB disconnect, device number 23
[  462.707274][T10818] fuse: Bad value for 'fd'
[  463.301736][T10794] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  464.261692][T10794] usb 1-1: Using ep0 maxpacket: 16
[  464.282906][T10794] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  464.298432][T10794] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  464.324177][T10845] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10845 comm=syz.4.1271
[  464.338874][T10794] usb 1-1: config 0 descriptor??
[  464.502581][T10794] gspca_main: sonixj-2.14.0 probing 0471:0327
[  466.437489][T10880] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  466.456747][   T30] audit: type=1326 audit(1742254950.935:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10862 comm="syz.2.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2681f8d169 code=0x7ffc0000
[  466.485898][   T30] audit: type=1326 audit(1742254950.935:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10862 comm="syz.2.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2681f8d169 code=0x7ffc0000
[  466.709508][   T30] audit: type=1326 audit(1742254950.935:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10862 comm="syz.2.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f2681f8d169 code=0x7ffc0000
[  467.045904][   T30] audit: type=1326 audit(1742254950.935:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10862 comm="syz.2.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2681f8d169 code=0x7ffc0000
[  467.158437][ T5867] usb 1-1: USB disconnect, device number 24
[  467.372275][   T30] audit: type=1326 audit(1742254950.935:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10862 comm="syz.2.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f2681f8d169 code=0x7ffc0000
[  467.503911][   T30] audit: type=1326 audit(1742254950.935:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10862 comm="syz.2.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2681f8d169 code=0x7ffc0000
[  467.879806][   T30] audit: type=1326 audit(1742254950.935:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10862 comm="syz.2.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f2681f8d169 code=0x7ffc0000
[  467.941951][   T30] audit: type=1326 audit(1742254950.935:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10862 comm="syz.2.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2681f8d169 code=0x7ffc0000
[  467.968357][   T30] audit: type=1326 audit(1742254950.935:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10862 comm="syz.2.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f2681f8d169 code=0x7ffc0000
[  468.231711][T10862] delete_channel: no stack
[  468.241982][   T30] audit: type=1326 audit(1742254950.965:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10862 comm="syz.2.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2681f8d169 code=0x7ffc0000
[  469.343880][T10910] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1282'.
[  469.493276][T10912] netlink: 'syz.1.1284': attribute type 5 has an invalid length.
[  470.078354][T10919] rdma_rxe: rxe_newlink: failed to add syz_tun
[  470.300656][T10920] infiniband syz1: set active
[  470.306012][T10920] infiniband syz1: added syz_tun
[  470.424743][T10920] RDS/IB: syz1: added
[  470.429671][T10920] smc: adding ib device syz1 with port count 1
[  470.460208][T10920] smc:    ib device syz1 port 1 has pnetid 
[  470.741913][ T5867] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  470.921836][ T5867] usb 2-1: Using ep0 maxpacket: 16
[  470.935958][ T5867] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  471.027951][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  471.134687][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  471.204423][ T5867] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  471.224420][ T5867] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  471.267596][ T5867] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  471.304332][ T5867] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  471.379261][ T5867] usb 2-1: Manufacturer: syz
[  471.387107][ T5867] usb 2-1: config 0 descriptor??
[  471.474405][T10940] dccp_invalid_packet: P.Data Offset(10) too large
[  471.608625][T10927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  471.631957][T10927] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  472.452592][ T5867] rc_core: IR keymap rc-hauppauge not found
[  472.458546][ T5867] Registered IR keymap rc-empty
[  472.468550][ T5867] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  472.516332][ T5867] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  472.553031][ T5867] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  472.822334][T10957] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1295'.
[  472.838914][ T5867] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input36
[  473.387692][ T5867] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  473.621684][ T5867] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  473.641732][ T5867] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  473.677453][ T5867] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  473.711729][ T5867] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  473.762191][ T5867] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  473.799445][ T5867] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  473.839979][ T5867] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  473.971734][ T5867] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  474.016941][ T5867] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  474.142715][ T5867] mceusb 2-1:0.0: Registered  with mce emulator interface version 1
[  474.171306][ T5867] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  474.234747][ T5867] usb 2-1: USB disconnect, device number 29
[  474.429933][   T30] kauditd_printk_skb: 5 callbacks suppressed
[  474.430342][   T30] audit: type=1400 audit(1742254958.885:835): avc:  denied  { ioctl } for  pid=10975 comm="syz.0.1305" path="socket:[25036]" dev="sockfs" ino=25036 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  474.758386][   T30] audit: type=1400 audit(1742254958.885:836): avc:  denied  { write } for  pid=10975 comm="syz.0.1305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  476.503441][T11000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1311'.
[  476.512905][ T8031] usb 1-1: new full-speed USB device number 25 using dummy_hcd
[  476.704232][ T8031] usb 1-1: unable to get BOS descriptor or descriptor too short
[  476.722791][ T8031] usb 1-1: not running at top speed; connect to a high speed hub
[  476.740370][ T8031] usb 1-1: config 1 has an invalid interface number: 91 but max is 0
[  476.752142][ T8031] usb 1-1: config 1 has no interface number 0
[  476.899907][ T8031] usb 1-1: config 1 interface 91 has no altsetting 0
[  476.909378][ T8031] usb 1-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=15.18
[  476.918736][ T8031] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  476.941670][ T8031] usb 1-1: Product: syz
[  476.945862][ T8031] usb 1-1: Manufacturer: syz
[  476.950450][ T8031] usb 1-1: SerialNumber: syz
[  477.021436][T11017] netlink: 'syz.2.1315': attribute type 1 has an invalid length.
[  477.045091][ T8031] kl5kusb105 1-1:1.91: KL5KUSB105D / PalmConnect converter detected
[  477.471347][ T8031] usb 1-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0
[  477.500256][ T8031] usb 1-1: USB disconnect, device number 25
[  477.526964][ T8031] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0
[  477.550121][ T8031] kl5kusb105 1-1:1.91: device disconnected
[  477.606467][ T5867] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  477.761855][ T5867] usb 4-1: Using ep0 maxpacket: 8
[  477.768576][ T5867] usb 4-1: config 0 has an invalid interface number: 163 but max is 0
[  477.785011][ T5867] usb 4-1: config 0 has no interface number 0
[  477.801773][ T5867] usb 4-1: config 0 interface 163 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  477.823216][ T5867] usb 4-1: config 0 interface 163 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  477.844994][ T5867] usb 4-1: config 0 interface 163 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  477.887028][ T5867] usb 4-1: config 0 interface 163 altsetting 0 endpoint 0xD has invalid maxpacket 512, setting to 64
[  477.919742][ T5867] usb 4-1: config 0 interface 163 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[  477.951567][ T5867] usb 4-1: config 0 interface 163 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  477.962976][ T5867] usb 4-1: config 0 interface 163 altsetting 0 has a duplicate endpoint with address 0xD, skipping
[  477.975735][ T5867] usb 4-1: config 0 interface 163 altsetting 0 has a duplicate endpoint with address 0x6, skipping
[  477.987116][ T5867] usb 4-1: config 0 interface 163 altsetting 0 endpoint 0xE has invalid maxpacket 1024, setting to 64
[  478.061206][ T5867] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=65.57
[  478.076173][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  478.094494][ T5867] usb 4-1: Product: syz
[  478.098691][ T5867] usb 4-1: Manufacturer: syz
[  478.131986][ T5867] usb 4-1: SerialNumber: syz
[  478.139522][ T5867] usb 4-1: config 0 descriptor??
[  478.152684][T11010] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  478.307728][   T30] audit: type=1326 audit(1742254962.785:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11015 comm="syz.1.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158a78d169 code=0x7ffc0000
[  478.344541][T11015] delete_channel: no stack
[  478.349722][   T30] audit: type=1326 audit(1742254962.815:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11015 comm="syz.1.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f158a78d169 code=0x7ffc0000
[  478.460763][ T5867] dvb_usb_dtv5100 4-1:0.163: probe with driver dvb_usb_dtv5100 failed with error -71
[  478.607146][   T30] audit: type=1326 audit(1742254962.815:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11015 comm="syz.1.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158a78d169 code=0x7ffc0000
[  478.764746][ T5867] usb 4-1: USB disconnect, device number 25
[  478.871084][   T30] audit: type=1326 audit(1742254962.815:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11015 comm="syz.1.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158a78d169 code=0x7ffc0000
[  478.936196][   T30] audit: type=1326 audit(1742254962.815:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11015 comm="syz.1.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f158a78d169 code=0x7ffc0000
[  479.017340][   T30] audit: type=1326 audit(1742254962.815:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11015 comm="syz.1.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158a78d169 code=0x7ffc0000
[  479.060757][   T30] audit: type=1326 audit(1742254962.815:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11015 comm="syz.1.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158a78d169 code=0x7ffc0000
[  479.112145][   T30] audit: type=1326 audit(1742254962.825:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11015 comm="syz.1.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f158a78d169 code=0x7ffc0000
[  479.205012][T11035] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1321'.
[  479.500888][T11033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1323'.
[  481.981918][T11061] netlink: 'syz.0.1329': attribute type 1 has an invalid length.
[  482.921076][ T5834] Bluetooth: hci5: command 0x1003 tx timeout
[  482.931761][ T5823] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  483.175942][T11069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1331'.
[  483.669232][ T8031] usb 1-1: new full-speed USB device number 26 using dummy_hcd
[  484.124718][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  484.134726][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  484.153911][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  484.162689][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  484.170184][ T5834] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  484.231950][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  484.243358][ T8031] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  484.271278][ T8031] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  484.272739][ T5823] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  484.289776][ T5823] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  484.297931][ T5823] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  484.306629][ T5823] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  484.314191][ T5823] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  484.325866][ T5823] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  484.360392][T11076] lo speed is unknown, defaulting to 1000
[  484.466148][ T8031] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  484.580129][T11083] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1335'.
[  485.228496][ T8031] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  485.245879][ T8031] usb 1-1: Product: syz
[  485.255726][ T8031] usb 1-1: Manufacturer: syz
[  485.287140][ T8031] usb 1-1: SerialNumber: syz
[  485.866135][T11095] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1337'.
[  486.210067][T11076] chnl_net:caif_netlink_parms(): no params data found
[  486.351909][ T5834] Bluetooth: hci5: command tx timeout
[  486.582926][T11105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1338'.
[  486.595313][ T8031] usb 1-1: cannot find UAC_HEADER
[  486.682169][ T8031] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[  486.785212][ T6981] udevd[6981]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  487.527058][T11076] bridge0: port 1(bridge_slave_0) entered blocking state
[  487.564073][T11076] bridge0: port 1(bridge_slave_0) entered disabled state
[  487.571317][T11076] bridge_slave_0: entered allmulticast mode
[  487.597861][T11076] bridge_slave_0: entered promiscuous mode
[  487.608522][T11076] bridge0: port 2(bridge_slave_1) entered blocking state
[  487.616768][T11076] bridge0: port 2(bridge_slave_1) entered disabled state
[  487.627510][T11076] bridge_slave_1: entered allmulticast mode
[  487.634496][T11076] bridge_slave_1: entered promiscuous mode
[  487.828470][T11076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  488.431617][ T5834] Bluetooth: hci5: command tx timeout
[  488.553182][T11076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  488.637176][T11123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1343'.
[  488.654476][T11076] team0: Port device team_slave_0 added
[  488.664173][T11076] team0: Port device team_slave_1 added
[  488.705055][T11076] batman_adv: batadv0: Adding interface: batadv_slave_0
[  488.728180][T11076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  488.779819][T11076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  488.842675][T11076] batman_adv: batadv0: Adding interface: batadv_slave_1
[  488.859585][T11076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  488.885538][    C0] vkms_vblank_simulate: vblank timer overrun
[  489.392785][T11076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  489.462253][ T5871] usb 1-1: USB disconnect, device number 26
[  490.519887][ T5834] Bluetooth: hci5: command tx timeout
[  491.481683][T11146] netlink: 'syz.0.1345': attribute type 1 has an invalid length.
[  491.759205][T11148] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1347'.
[  491.854988][T11076] hsr_slave_0: entered promiscuous mode
[  491.880411][T11076] hsr_slave_1: entered promiscuous mode
[  491.898181][T11076] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  491.914351][T11076] Cannot create hsr debugfs directory
[  492.312652][T11150] vlan2: entered allmulticast mode
[  492.643195][ T5834] Bluetooth: hci5: command tx timeout
[  495.838267][T11076] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  496.300457][T11076] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  496.632694][T11076] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  496.921662][T11194] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1357'.
[  497.404550][T11195] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1358'.
[  497.459755][T11076] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  498.764194][T11076] 8021q: adding VLAN 0 to HW filter on device bond0
[  498.887310][T11076] 8021q: adding VLAN 0 to HW filter on device team0
[  498.920869][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  498.928026][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  498.990488][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  498.997729][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  499.445672][T11076] 8021q: adding VLAN 0 to HW filter on device batadv0
[  499.511112][T11224] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1365'.
[  499.944705][T11212] vcan0: tx drop: invalid sa for name 0x0000000000000003
[  499.999978][T11224] libceph: resolve '0.' (ret=-3): failed
[  500.180507][T11076] veth0_vlan: entered promiscuous mode
[  500.202669][T11076] veth1_vlan: entered promiscuous mode
[  500.307005][T11076] veth0_macvtap: entered promiscuous mode
[  500.376911][T11076] veth1_macvtap: entered promiscuous mode
[  500.397860][T11076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  500.531604][T11076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.699409][T11076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  500.781766][T11076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.813100][T11236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1366'.
[  500.827753][T11076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  500.853697][T11241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1369'.
[  500.871850][T11076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.887479][T11076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  500.927355][   T30] kauditd_printk_skb: 7 callbacks suppressed
[  500.927371][   T30] audit: type=1400 audit(1742254985.405:852): avc:  denied  { name_connect } for  pid=11244 comm="syz.0.1368" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1
[  500.932935][T11076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.954890][    C0] vkms_vblank_simulate: vblank timer overrun
[  501.006313][T11245] syz.0.1368 (11245) used greatest stack depth: 20304 bytes left
[  501.047141][T11076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  501.076899][T11076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  501.109925][T11076] batman_adv: batadv0: Interface activated: batadv_slave_0
[  501.154072][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  501.209335][T11076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  501.256706][T11076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  501.324317][   T30] audit: type=1326 audit(1742254985.805:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11250 comm="syz.1.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158a78d169 code=0x7ffc0000
[  501.330638][T11076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  501.386379][T11253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1372'.
[  501.404543][   T30] audit: type=1326 audit(1742254985.835:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11250 comm="syz.1.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158a78d169 code=0x7ffc0000
[  501.435251][T11076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  501.475238][   T30] audit: type=1326 audit(1742254985.835:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11250 comm="syz.1.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f158a78d169 code=0x7ffc0000
[  501.478283][T11076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  501.552852][   T30] audit: type=1326 audit(1742254985.835:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11250 comm="syz.1.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158a78d169 code=0x7ffc0000
[  501.559783][T11076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  501.629089][   T30] audit: type=1326 audit(1742254985.835:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11250 comm="syz.1.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7f158a78d169 code=0x7ffc0000
[  501.654062][T11076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  501.691031][   T30] audit: type=1326 audit(1742254985.835:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11250 comm="syz.1.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158a78d169 code=0x7ffc0000
[  501.697037][T11076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  501.751769][   T30] audit: type=1326 audit(1742254985.835:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11250 comm="syz.1.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f158a78d169 code=0x7ffc0000
[  501.776012][   T30] audit: type=1326 audit(1742254985.835:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11250 comm="syz.1.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158a78d169 code=0x7ffc0000
[  501.800055][   T30] audit: type=1326 audit(1742254985.835:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11250 comm="syz.1.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f158a78d169 code=0x7ffc0000
[  501.810251][T11076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  501.851559][T11076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  501.912350][T11076] batman_adv: batadv0: Interface activated: batadv_slave_1
[  501.962773][T11076] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  502.011656][T11076] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  502.039488][T11076] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  502.072496][T11257] fuse: Bad value for 'fd'
[  502.077091][T11076] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  502.372751][ T4288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  502.380581][ T4288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  504.013520][ T4288] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  504.063098][ T4288] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  504.459891][T11280] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1379'.
[  505.072526][T11283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1381'.
[  507.161874][ T8031] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  507.322129][ T8031] usb 6-1: Using ep0 maxpacket: 16
[  507.333137][ T8031] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  507.335992][T11309] fuse: Bad value for 'fd'
[  507.363838][ T8031] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  507.381929][ T6671] usb 2-1: new full-speed USB device number 30 using dummy_hcd
[  507.409787][ T8031] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  507.440113][ T8031] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  507.469724][ T8031] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  507.508428][ T8031] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  507.518799][ T8031] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  507.541572][ T8031] usb 6-1: Manufacturer: syz
[  507.573294][ T6671] usb 2-1: unable to get BOS descriptor or descriptor too short
[  507.695575][   T30] kauditd_printk_skb: 19 callbacks suppressed
[  507.695589][   T30] audit: type=1400 audit(1742254992.175:881): avc:  denied  { connect } for  pid=11312 comm="syz.0.1388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  507.728778][ T6671] usb 2-1: not running at top speed; connect to a high speed hub
[  507.737387][ T8031] usb 6-1: config 0 descriptor??
[  508.384221][ T6671] usb 2-1: config 1 has an invalid interface number: 91 but max is 0
[  508.399067][ T6671] usb 2-1: config 1 has no interface number 0
[  508.406492][ T6671] usb 2-1: config 1 interface 91 has no altsetting 0
[  508.413323][   T30] audit: type=1400 audit(1742254992.175:882): avc:  denied  { write } for  pid=11312 comm="syz.0.1388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  508.472401][   T30] audit: type=1400 audit(1742254992.185:883): avc:  denied  { read } for  pid=11312 comm="syz.0.1388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  508.496247][ T6671] usb 2-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=15.18
[  508.518075][T11324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1389'.
[  508.518860][ T6671] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  508.571825][ T6671] usb 2-1: Product: syz
[  508.576489][ T6671] usb 2-1: Manufacturer: syz
[  508.581189][ T6671] usb 2-1: SerialNumber: syz
[  508.600397][T11295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  508.739476][T11295] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  508.751718][T11326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1391'.
[  508.762949][T11326] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1391'.
[  508.920238][ T6671] kl5kusb105 2-1:1.91: KL5KUSB105D / PalmConnect converter detected
[  508.933993][T11326] ubi31: attaching mtd0
[  508.943449][T11326] ubi31: scanning is finished
[  508.948122][T11326] ubi31: empty MTD device detected
[  509.021597][ T8031] rc_core: IR keymap rc-hauppauge not found
[  509.027583][ T8031] Registered IR keymap rc-empty
[  509.040210][ T6671] usb 2-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0
[  509.059450][ T8031] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  509.064188][T11326] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  509.080999][T11326] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  509.105245][T11326] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  509.140308][ T6671] usb 2-1: USB disconnect, device number 30
[  509.147070][ T8031] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  509.154849][T11326] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  509.183560][ T8031] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  509.193367][T11326] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  509.196247][ T6671] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0
[  509.212230][T11326] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  509.212253][T11326] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1152755236
[  509.258759][T11326] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  509.262371][ T8031] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input37
[  509.292449][ T6671] kl5kusb105 2-1:1.91: device disconnected
[  509.323543][ T8031] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  509.331377][T11331] ubi31: background thread "ubi_bgt31d" started, PID 11331
[  509.354570][ T8031] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  509.392061][ T8031] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  509.427415][ T8031] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  509.464107][ T8031] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  509.539441][ T8031] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  509.582029][ T8031] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  509.608908][ T8031] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  509.661869][ T8031] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  509.669096][   T30] audit: type=1400 audit(1742254994.145:884): avc:  denied  { ioctl } for  pid=11340 comm="syz.5.1395" path="socket:[27010]" dev="sockfs" ino=27010 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  509.721827][ T8031] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  509.752629][ T8031] mceusb 6-1:0.0: Registered  with mce emulator interface version 1
[  509.784306][ T8031] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  509.837263][ T8031] usb 6-1: USB disconnect, device number 2
[  512.136011][T11367] dccp_invalid_packet: P.Data Offset(10) too large
[  512.715248][T11337] delete_channel: no stack
[  513.193505][T11381] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1403'.
[  513.891592][ T5867] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  513.922347][   T30] audit: type=1400 audit(1742254998.395:885): avc:  denied  { ioctl } for  pid=11388 comm="syz.2.1406" path="socket:[27229]" dev="sockfs" ino=27229 ioctlcmd=0x4942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  514.071922][ T5867] usb 6-1: Using ep0 maxpacket: 16
[  514.082656][ T5867] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  514.131686][ T5867] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  514.195512][ T5867] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  514.256369][ T5867] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  514.302090][ T5867] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  514.347933][ T5867] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  514.361190][ T5867] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  514.474595][ T5867] usb 6-1: Manufacturer: syz
[  514.495837][ T5867] usb 6-1: config 0 descriptor??
[  514.744443][T11379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  514.786746][T11379] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  514.981744][ T5867] rc_core: IR keymap rc-hauppauge not found
[  515.049370][ T5867] Registered IR keymap rc-empty
[  515.075903][ T5867] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  515.111715][ T5867] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  515.253204][ T5867] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  515.295378][ T5867] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input38
[  515.331025][ T5867] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  515.379523][ T5867] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  515.411853][ T5867] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  515.470451][ T5867] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  515.551698][ T5867] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  515.619915][ T5867] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  515.722132][ T5867] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  515.883609][ T5867] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  516.112211][ T5867] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  516.272288][ T5867] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  516.559759][ T5867] mceusb 6-1:0.0: Registered  with mce emulator interface version 1
[  516.593084][ T5867] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  516.620617][ T5867] usb 6-1: USB disconnect, device number 3
[  517.372468][T11420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1414'.
[  519.079984][T11435] dccp_invalid_packet: P.Data Offset(10) too large
[  521.595980][ T5871] usb 2-1: new full-speed USB device number 31 using dummy_hcd
[  521.856992][ T5871] usb 2-1: unable to get BOS descriptor or descriptor too short
[  522.100219][ T5871] usb 2-1: not running at top speed; connect to a high speed hub
[  522.116320][ T5871] usb 2-1: config 1 has an invalid interface number: 91 but max is 0
[  522.125275][ T5871] usb 2-1: config 1 has no interface number 0
[  522.131370][ T5871] usb 2-1: config 1 interface 91 has no altsetting 0
[  522.140595][ T5871] usb 2-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=15.18
[  523.141225][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  523.150077][ T5871] usb 2-1: Product: syz
[  523.154582][ T5871] usb 2-1: Manufacturer: syz
[  523.159269][ T5871] usb 2-1: SerialNumber: syz
[  523.188953][ T5871] usb 2-1: can't set config #1, error -71
[  523.272702][ T5871] usb 2-1: USB disconnect, device number 31
[  523.342062][T11470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1427'.
[  523.757844][T11480] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1429'.
[  525.813447][T11496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1433'.
[  525.895134][T11495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1432'.
[  525.904171][   T30] audit: type=1326 audit(1742255010.365:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11493 comm="syz.1.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158a78d169 code=0x7ffc0000
[  526.052354][   T30] audit: type=1326 audit(1742255010.365:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11493 comm="syz.1.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158a78d169 code=0x7ffc0000
[  527.048332][   T30] audit: type=1326 audit(1742255010.365:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11493 comm="syz.1.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f158a78d169 code=0x7ffc0000
[  527.072781][   T30] audit: type=1326 audit(1742255010.365:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11493 comm="syz.1.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158a78d169 code=0x7ffc0000
[  527.131213][   T30] audit: type=1326 audit(1742255010.365:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11493 comm="syz.1.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158a78d169 code=0x7ffc0000
[  527.342226][   T30] audit: type=1326 audit(1742255010.365:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11493 comm="syz.1.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7f158a78d169 code=0x7ffc0000
[  527.386020][   T30] audit: type=1326 audit(1742255010.365:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11493 comm="syz.1.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158a78d169 code=0x7ffc0000
[  527.424394][   T30] audit: type=1326 audit(1742255010.365:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11493 comm="syz.1.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f158a78d169 code=0x7ffc0000
[  527.461739][   T30] audit: type=1326 audit(1742255010.365:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11493 comm="syz.1.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158a78d169 code=0x7ffc0000
[  527.485523][   T30] audit: type=1326 audit(1742255010.365:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11493 comm="syz.1.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f158a78d169 code=0x7ffc0000
[  528.622232][T11518] Invalid source name
[  528.626252][T11518] UBIFS error (pid: 11518): cannot open "/dev/sg0", error -22
[  528.647746][T11518] tipc: Started in network mode
[  528.680277][T11518] tipc: Node identity 12acc4aa6035, cluster identity 4711
[  528.700228][T11518] tipc: Enabled bearer <eth:xfrm0>, priority 10
[  528.860803][T10794] usb 2-1: new full-speed USB device number 32 using dummy_hcd
[  529.056491][ T5868] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  529.076475][T10794] usb 2-1: unable to get BOS descriptor or descriptor too short
[  529.096373][T10794] usb 2-1: not running at top speed; connect to a high speed hub
[  529.123132][T10794] usb 2-1: config 1 has an invalid interface number: 91 but max is 0
[  529.131233][T10794] usb 2-1: config 1 has no interface number 0
[  529.190898][T10794] usb 2-1: config 1 interface 91 has no altsetting 0
[  529.203354][T10794] usb 2-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=15.18
[  529.221596][T10794] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  529.239882][T10794] usb 2-1: Product: syz
[  529.244209][T10794] usb 2-1: Manufacturer: syz
[  529.248810][T10794] usb 2-1: SerialNumber: syz
[  529.302946][T10794] kl5kusb105 2-1:1.91: KL5KUSB105D / PalmConnect converter detected
[  529.347081][T10794] usb 2-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0
[  529.361690][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  529.371472][ T5868] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  529.381469][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  529.400733][ T5868] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  529.414233][ T5868] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  529.431134][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  529.450897][ T5868] usb 4-1: Product: syz
[  529.546314][ T5871] usb 2-1: USB disconnect, device number 32
[  529.593467][ T5868] usb 4-1: Manufacturer: syz
[  529.594704][ T5871] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0
[  529.609546][ T5868] usb 4-1: SerialNumber: syz
[  529.627039][ T5868] usb 4-1: config 0 descriptor??
[  529.637875][ T5868] ums-isd200 4-1:0.0: USB Mass Storage device detected
[  529.640928][ T5871] kl5kusb105 2-1:1.91: device disconnected
[  529.775182][ T5834] Bluetooth: hci5: link tx timeout
[  529.781403][ T5834] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  529.800821][ T5823] Bluetooth: hci5: link tx timeout
[  529.808287][ T5823] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  529.813920][   T52] tipc: Node number set to 1922679978
[  529.817183][ T5823] Bluetooth: hci5: link tx timeout
[  529.831865][ T5823] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  529.842842][ T5868] scsi host1: usb-storage 4-1:0.0
[  529.846756][ T5823] Bluetooth: hci5: link tx timeout
[  529.861881][ T5823] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  529.869905][ T5823] Bluetooth: hci5: link tx timeout
[  529.870323][ T5868] usb 4-1: USB disconnect, device number 26
[  529.875543][ T5823] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  529.903256][ T5823] Bluetooth: hci5: link tx timeout
[  529.909160][ T5823] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  529.929161][T11546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1444'.
[  530.019975][ T5823] Bluetooth: hci5: link tx timeout
[  530.025217][ T5823] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  530.059656][ T5823] Bluetooth: hci5: link tx timeout
[  530.171586][ T5823] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  530.179429][ T5823] Bluetooth: hci5: link tx timeout
[  530.184655][ T5823] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  532.282394][T10794] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  532.337273][ T5823] Bluetooth: hci5: command 0x0406 tx timeout
[  532.570393][T10794] usb 2-1: Using ep0 maxpacket: 16
[  532.619023][T10794] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[  532.637290][T10794] usb 2-1: config 0 has no interface number 0
[  532.859954][T10794] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  532.892710][T10794] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  532.904666][T10794] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  532.921973][T10794] usb 2-1: Product: syz
[  532.941556][T10794] usb 2-1: SerialNumber: syz
[  532.949540][T10794] usb 2-1: config 0 descriptor??
[  533.022957][T10794] usbhid 2-1:0.8: couldn't find an input interrupt endpoint
[  533.760325][ T5868] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  533.901700][ T5868] usb 3-1: device descriptor read/64, error -71
[  534.441627][ T5868] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  534.453968][T11592] FAULT_INJECTION: forcing a failure.
[  534.453968][T11592] name failslab, interval 1, probability 0, space 0, times 0
[  534.467171][T11592] CPU: 1 UID: 0 PID: 11592 Comm: syz.0.1456 Not tainted 6.14.0-rc7-syzkaller #0
[  534.467196][T11592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  534.467206][T11592] Call Trace:
[  534.467211][T11592]  <TASK>
[  534.467218][T11592]  dump_stack_lvl+0x16c/0x1f0
[  534.467244][T11592]  should_fail_ex+0x50a/0x650
[  534.467269][T11592]  ? fs_reclaim_acquire+0xae/0x150
[  534.467295][T11592]  should_failslab+0xc2/0x120
[  534.467315][T11592]  __kmalloc_node_noprof+0xd1/0x510
[  534.467334][T11592]  ? __kvmalloc_node_noprof+0xad/0x1a0
[  534.467362][T11592]  __kvmalloc_node_noprof+0xad/0x1a0
[  534.467389][T11592]  io_alloc_cache_init+0x33/0x170
[  534.467413][T11592]  io_uring_setup+0x58e/0x2200
[  534.467434][T11592]  ? __pfx_io_uring_setup+0x10/0x10
[  534.467455][T11592]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  534.467482][T11592]  ? __fget_files+0x206/0x3a0
[  534.467505][T11592]  ? ksys_write+0x1ba/0x250
[  534.467521][T11592]  ? __pfx_ksys_write+0x10/0x10
[  534.467541][T11592]  __x64_sys_io_uring_setup+0x98/0x140
[  534.467559][T11592]  do_syscall_64+0xcd/0x250
[  534.467582][T11592]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  534.467604][T11592] RIP: 0033:0x7fa18558d169
[  534.467618][T11592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  534.467634][T11592] RSP: 002b:00007fa186434fc8 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9
[  534.467651][T11592] RAX: ffffffffffffffda RBX: 00007fa1857a5fa0 RCX: 00007fa18558d169
[  534.467662][T11592] RDX: 0000000000000000 RSI: 0000400000000280 RDI: 0000000000000a94
[  534.467672][T11592] RBP: 0000400000000280 R08: 0000000000000000 R09: 0000000000000000
[  534.467682][T11592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  534.467691][T11592] R13: 0000000000000000 R14: 0000000000000a94 R15: 0000000000000000
[  534.467713][T11592]  </TASK>
[  534.822634][ T5868] usb 3-1: device descriptor read/64, error -71
[  534.931607][T10794] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  534.931822][ T5868] usb usb3-port1: attempt power cycle
[  535.343011][ T5868] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  535.850359][T10794] usb 4-1: Using ep0 maxpacket: 16
[  535.919749][ T5868] usb 3-1: device descriptor read/8, error -71
[  536.073009][   T52] usb 2-1: USB disconnect, device number 33
[  536.090373][T11604] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1459'.
[  536.113846][T10794] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  536.130525][T10794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  536.150426][T10794] usb 4-1: config 0 descriptor??
[  536.173724][T10794] gspca_main: sonixj-2.14.0 probing 0471:0327
[  536.212388][ T5868] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  536.239337][ T5868] usb 3-1: device descriptor read/8, error -71
[  536.363842][ T5868] usb usb3-port1: unable to enumerate USB device
[  537.152125][T10794] gspca_sonixj: reg_r err -110
[  537.181371][T10794] sonixj 4-1:0.0: probe with driver sonixj failed with error -110
[  539.690831][T10794] usb 4-1: USB disconnect, device number 27
[  539.816380][ T5868] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  539.945532][T11656] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1473'.
[  540.003889][ T5868] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  540.021551][ T5868] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  540.042919][ T5868] usb 3-1: config 1 has no interface number 0
[  540.054557][ T5868] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  540.092978][ T5868] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  540.122454][ T5868] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  540.137242][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  540.170248][ T5868] usb 3-1: Product: syz
[  540.181870][ T5868] usb 3-1: Manufacturer: syz
[  540.211691][T10794] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  540.349755][ T5868] usb 3-1: SerialNumber: syz
[  540.372787][T10794] usb 2-1: config 1 has an invalid descriptor of length 199, skipping remainder of the config
[  540.384215][T10794] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  540.400784][T10794] usb 2-1: config 1 has no interface number 0
[  540.408532][T10794] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  540.428000][T10794] usb 2-1: config 1 interface 1 has no altsetting 0
[  540.440169][T10794] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  540.450911][T10794] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  540.547233][T10794] usb 2-1: Product: syz
[  540.569968][T10794] usb 2-1: Manufacturer: syz
[  540.627383][T10794] usb 2-1: SerialNumber: syz
[  542.664983][T11664] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1470'.
[  542.674133][   T26] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  542.831477][T10794] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71
[  542.891805][   T26] usb 1-1: device descriptor read/64, error -71
[  543.042313][T10794] usb 2-1: USB disconnect, device number 34
[  543.238979][ T5868] cdc_ncm 3-1:1.1: bind() failure
[  543.255520][ T5868] usb 3-1: USB disconnect, device number 30
[  543.378331][   T26] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  544.450147][T11691] fuse: Bad value for 'fd'
[  544.501922][   T26] usb 1-1: device descriptor read/64, error -71
[  544.650200][   T26] usb usb1-port1: attempt power cycle
[  544.698749][T11699] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1484'.
[  545.011864][   T26] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  545.191869][   T52] usb 3-1: new full-speed USB device number 31 using dummy_hcd
[  545.251918][   T26] usb 1-1: device not accepting address 29, error -71
[  545.349549][   T52] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[  545.382105][   T52] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  545.464267][   T52] usb 3-1: config 0 descriptor??
[  545.513068][T11721] dccp_invalid_packet: P.Data Offset(10) too large
[  545.657686][   T30] kauditd_printk_skb: 22 callbacks suppressed
[  545.657698][   T30] audit: type=1400 audit(1742255030.135:918): avc:  denied  { write } for  pid=11723 comm="syz.0.1492" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  545.894580][   T52] acrux 0003:1A34:0802.0005: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.2-1/input0
[  546.603792][   T52] acrux 0003:1A34:0802.0005: no inputs found
[  546.711345][   T52] acrux 0003:1A34:0802.0005: Failed to enable force feedback support, error: -19
[  546.884277][   T52] usb 3-1: USB disconnect, device number 31
[  548.090856][T11753] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1499'.
[  556.891638][ T5898] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  557.081356][ T5898] usb 3-1: Using ep0 maxpacket: 8
[  557.092915][ T5898] usb 3-1: config 0 has an invalid interface number: 163 but max is 0
[  557.101135][ T5898] usb 3-1: config 0 has no interface number 0
[  557.108559][T11833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1519'.
[  557.249832][T11821] tipc: Started in network mode
[  557.265840][ T5898] usb 3-1: config 0 interface 163 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  557.277127][ T5898] usb 3-1: config 0 interface 163 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  557.303141][ T5898] usb 3-1: config 0 interface 163 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  557.314240][ T5898] usb 3-1: config 0 interface 163 altsetting 0 endpoint 0xD has invalid maxpacket 512, setting to 64
[  557.329913][ T5898] usb 3-1: config 0 interface 163 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[  557.329963][T11821] tipc: Node identity ac14140f, cluster identity 4711
[  557.828870][ T5898] usb 3-1: config 0 interface 163 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  557.840114][ T5898] usb 3-1: config 0 interface 163 altsetting 0 has a duplicate endpoint with address 0xD, skipping
[  557.850974][ T5898] usb 3-1: config 0 interface 163 altsetting 0 has a duplicate endpoint with address 0x6, skipping
[  557.854120][T11821] tipc: New replicast peer: 255.255.255.255
[  557.862102][ T5898] usb 3-1: config 0 interface 163 altsetting 0 endpoint 0xE has invalid maxpacket 1024, setting to 64
[  557.881163][T11821] tipc: Enabled bearer <udp:syz2>, priority 10
[  557.904788][ T5898] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=65.57
[  557.921634][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  557.968164][ T5898] usb 3-1: Product: syz
[  558.001903][ T5898] usb 3-1: Manufacturer: syz
[  558.006565][ T5898] usb 3-1: SerialNumber: syz
[  558.082544][ T5898] usb 3-1: config 0 descriptor??
[  558.090120][T11818] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  558.211234][   T30] audit: type=1326 audit(1742255042.685:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11839 comm="syz.3.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277bd8d169 code=0x7ffc0000
[  558.281787][   T30] audit: type=1326 audit(1742255042.695:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11839 comm="syz.3.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277bd8d169 code=0x7ffc0000
[  558.332127][T11840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1522'.
[  558.351303][   T30] audit: type=1326 audit(1742255042.695:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11839 comm="syz.3.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f277bd8d169 code=0x7ffc0000
[  558.443271][   T30] audit: type=1326 audit(1742255042.705:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11839 comm="syz.3.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277bd8d169 code=0x7ffc0000
[  558.524477][   T30] audit: type=1326 audit(1742255042.705:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11839 comm="syz.3.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277bd8d169 code=0x7ffc0000
[  558.620221][ T5898] dvb_usb_dtv5100 3-1:0.163: probe with driver dvb_usb_dtv5100 failed with error -110
[  558.645616][   T30] audit: type=1326 audit(1742255042.725:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11839 comm="syz.3.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f277bd8d169 code=0x7ffc0000
[  558.781828][   T30] audit: type=1400 audit(1742255042.735:925): avc:  denied  { unmount } for  pid=11076 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  558.832139][ T5898] usb 3-1: USB disconnect, device number 32
[  558.881801][   T30] audit: type=1326 audit(1742255042.745:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11839 comm="syz.3.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277bd8d169 code=0x7ffc0000
[  558.935009][   T30] audit: type=1326 audit(1742255042.745:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11839 comm="syz.3.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277bd8d169 code=0x7ffc0000
[  558.984319][   T30] audit: type=1326 audit(1742255042.745:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11839 comm="syz.3.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f277bd8d169 code=0x7ffc0000
[  559.008513][T10794] tipc: Node number set to 2886997007
[  559.416699][ T5868] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  560.073286][ T5868] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  560.098565][ T5868] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  560.151769][ T5868] usb 1-1: config 1 has no interface number 0
[  560.173513][ T5868] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  560.355645][ T5868] usb 1-1: config 1 interface 1 has no altsetting 0
[  560.364382][ T5868] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  560.377455][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  560.391596][ T5868] usb 1-1: Product: syz
[  560.395854][ T5868] usb 1-1: Manufacturer: syz
[  560.400525][ T5868] usb 1-1: SerialNumber: syz
[  561.058621][ T5871] usb 3-1: new full-speed USB device number 33 using dummy_hcd
[  561.354024][ T5871] usb 3-1: unable to get BOS descriptor or descriptor too short
[  561.364692][ T5871] usb 3-1: not running at top speed; connect to a high speed hub
[  561.380009][ T5871] usb 3-1: config 1 has an invalid interface number: 91 but max is 0
[  561.402965][ T5871] usb 3-1: config 1 has no interface number 0
[  561.471842][ T5871] usb 3-1: config 1 interface 91 has no altsetting 0
[  561.494811][ T5871] usb 3-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=15.18
[  561.521848][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  561.529929][ T5871] usb 3-1: Product: syz
[  561.534704][ T5871] usb 3-1: Manufacturer: syz
[  561.539574][ T5871] usb 3-1: SerialNumber: syz
[  561.556334][ T5871] kl5kusb105 3-1:1.91: KL5KUSB105D / PalmConnect converter detected
[  561.567109][ T5871] usb 3-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0
[  562.401815][ T5871] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  562.539390][T10794] usb 3-1: USB disconnect, device number 33
[  562.555152][T10794] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0
[  562.621569][ T5871] usb 2-1: Using ep0 maxpacket: 16
[  562.628692][T10794] kl5kusb105 3-1:1.91: device disconnected
[  562.640134][ T5871] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  562.681720][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  562.731736][ T6671] usb 1-1: USB disconnect, device number 31
[  562.771730][T11889] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1534'.
[  563.303551][ T5871] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  563.321580][ T5871] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  563.491553][ T5871] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  563.523764][ T5871] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  563.551017][ T5871] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  563.570399][ T5871] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  563.593279][ T5871] usb 2-1: Manufacturer: syz
[  563.617881][ T5871] usb 2-1: config 0 descriptor??
[  563.837594][T11876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  563.868133][T11876] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  564.244085][T11902] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1539'.
[  564.821907][ T5871] rc_core: IR keymap rc-hauppauge not found
[  564.858387][ T5871] Registered IR keymap rc-empty
[  564.889590][ T5871] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  564.964881][ T5871] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  565.095286][ T5871] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  565.134621][T11908] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  565.296515][ T5871] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input39
[  565.467957][ T5871] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  565.531615][ T5871] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  565.571697][ T5871] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  565.642695][ T5871] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  565.713062][ T5871] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  565.752028][ T5871] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  565.858980][ T5871] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  565.895849][ T5871] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  565.977908][ T5871] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  566.124675][ T5871] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  566.259188][ T5871] mceusb 2-1:0.0: Registered  with mce emulator interface version 1
[  566.377917][ T5871] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  566.521177][ T5871] usb 2-1: USB disconnect, device number 35
[  566.783966][   T30] kauditd_printk_skb: 23 callbacks suppressed
[  566.783979][   T30] audit: type=1326 audit(1742255051.255:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11897 comm="syz.2.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2681f8d169 code=0x7ffc0000
[  566.868185][   T30] audit: type=1326 audit(1742255051.255:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11897 comm="syz.2.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2681f8d169 code=0x7ffc0000
[  566.931196][   T30] audit: type=1326 audit(1742255051.255:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11897 comm="syz.2.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f2681f8d169 code=0x7ffc0000
[  566.971667][T10794] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  567.026141][   T30] audit: type=1326 audit(1742255051.255:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11897 comm="syz.2.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2681f8d169 code=0x7ffc0000
[  567.090266][   T30] audit: type=1326 audit(1742255051.255:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11897 comm="syz.2.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2681f8d169 code=0x7ffc0000
[  567.266931][T10794] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  567.290353][T10794] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  567.311625][T10794] usb 4-1: config 1 has no interface number 0
[  567.317879][T10794] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  567.331601][   T30] audit: type=1326 audit(1742255051.295:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11897 comm="syz.2.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f2681f8d169 code=0x7ffc0000
[  567.382188][T10794] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  567.411783][   T30] audit: type=1326 audit(1742255051.295:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11897 comm="syz.2.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2681f8d169 code=0x7ffc0000
[  567.493004][T10794] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  568.084453][T10794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  568.092995][T10794] usb 4-1: Product: syz
[  568.097179][T10794] usb 4-1: Manufacturer: syz
[  568.102236][   T30] audit: type=1326 audit(1742255051.295:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11897 comm="syz.2.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2681f8d169 code=0x7ffc0000
[  568.126151][T10794] usb 4-1: SerialNumber: syz
[  568.466861][   T30] audit: type=1326 audit(1742255051.295:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11897 comm="syz.2.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f2681f8d169 code=0x7ffc0000
[  568.585969][   T30] audit: type=1326 audit(1742255051.295:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11897 comm="syz.2.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2681f8d169 code=0x7ffc0000
[  569.567922][T11945] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1548'.
[  569.571075][T11946] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1547'.
[  570.058760][T11952] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1549'.
[  570.682122][T10794] cdc_ncm 4-1:1.1: bind() failure
[  570.726433][T10794] usb 4-1: USB disconnect, device number 28
[  572.721559][ T5868] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  572.871652][ T5868] usb 3-1: Using ep0 maxpacket: 16
[  573.044155][T11992] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1562'.
[  573.531670][ T5868] usb 3-1: unable to read config index 0 descriptor/start: -61
[  573.564070][ T5868] usb 3-1: can't read configurations, error -61
[  573.881652][ T5868] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  574.052096][ T5868] usb 3-1: Using ep0 maxpacket: 16
[  574.089802][ T5868] usb 3-1: unable to read config index 0 descriptor/start: -61
[  574.177748][ T5868] usb 3-1: can't read configurations, error -61
[  574.293010][ T5868] usb usb3-port1: attempt power cycle
[  574.415411][ T5898] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  574.593000][ T5898] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  574.615646][ T5898] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  574.632586][ T5898] usb 1-1: config 1 has no interface number 0
[  574.679673][ T5898] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  574.691101][ T5898] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  574.731731][ T5868] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  574.775196][ T5868] usb 3-1: Using ep0 maxpacket: 16
[  574.829132][ T5868] usb 3-1: unable to read config index 0 descriptor/start: -61
[  574.873244][ T5898] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  574.891898][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  574.920392][ T5898] usb 1-1: Product: syz
[  574.931522][ T5898] usb 1-1: Manufacturer: syz
[  574.951605][ T5898] usb 1-1: SerialNumber: syz
[  574.991817][ T5868] usb 3-1: can't read configurations, error -61
[  575.040953][T12010] fuse: Bad value for 'fd'
[  575.697797][ T5868] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  576.011698][ T5868] usb 3-1: device not accepting address 37, error -71
[  576.137664][ T5868] usb usb3-port1: unable to enumerate USB device
[  577.752122][ T5898] cdc_ncm 1-1:1.1: bind() failure
[  577.773358][ T5898] usb 1-1: USB disconnect, device number 32
[  578.033317][   T30] kauditd_printk_skb: 6 callbacks suppressed
[  578.033333][   T30] audit: type=1326 audit(1742255062.515:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12037 comm="syz.2.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2681f8d169 code=0x7ffc0000
[  578.062784][    C0] vkms_vblank_simulate: vblank timer overrun
[  578.108011][   T30] audit: type=1326 audit(1742255062.515:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12037 comm="syz.2.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2681f8d169 code=0x7ffc0000
[  578.144182][   T30] audit: type=1326 audit(1742255062.565:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12037 comm="syz.2.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f2681f8d169 code=0x7ffc0000
[  578.211103][T12039] overlayfs: failed to resolve './file0': -2
[  578.273790][T12042] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1577'.
[  578.810240][   T30] audit: type=1326 audit(1742255062.565:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12037 comm="syz.2.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2681f8d169 code=0x7ffc0000
[  579.006511][   T30] audit: type=1326 audit(1742255062.615:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12037 comm="syz.2.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2681f8d169 code=0x7ffc0000
[  579.089109][   T30] audit: type=1326 audit(1742255062.615:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12037 comm="syz.2.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2681f8d169 code=0x7ffc0000
[  579.121734][ T6671] usb 3-1: new full-speed USB device number 38 using dummy_hcd
[  579.197580][   T30] audit: type=1326 audit(1742255062.615:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12037 comm="syz.2.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2681f8d169 code=0x7ffc0000
[  579.251592][   T30] audit: type=1326 audit(1742255062.615:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12037 comm="syz.2.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2681f8bad0 code=0x7ffc0000
[  579.301862][   T30] audit: type=1326 audit(1742255062.615:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12037 comm="syz.2.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f2681f8e997 code=0x7ffc0000
[  579.361934][ T6671] usb 3-1: unable to get BOS descriptor or descriptor too short
[  579.376514][   T30] audit: type=1326 audit(1742255062.615:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12037 comm="syz.2.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2681f8d169 code=0x7ffc0000
[  579.380466][ T6671] usb 3-1: not running at top speed; connect to a high speed hub
[  579.399855][    C0] vkms_vblank_simulate: vblank timer overrun
[  579.572108][ T6671] usb 3-1: config 4 has an invalid interface number: 132 but max is 0
[  579.587948][ T6671] usb 3-1: config 4 has no interface number 0
[  579.607732][ T6671] usb 3-1: config 4 interface 132 altsetting 8 endpoint 0xB has invalid maxpacket 1024, setting to 64
[  579.853194][ T6671] usb 3-1: config 4 interface 132 altsetting 8 has a duplicate endpoint with address 0xC, skipping
[  580.040670][T12066] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1584'.
[  580.071568][ T6671] usb 3-1: config 4 interface 132 altsetting 8 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  580.125541][ T6671] usb 3-1: config 4 interface 132 altsetting 8 has a duplicate endpoint with address 0xC, skipping
[  580.138913][T12066] libceph: resolve '0.' (ret=-3): failed
[  580.143850][ T6671] usb 3-1: config 4 interface 132 altsetting 8 has a duplicate endpoint with address 0x7, skipping
[  580.163331][ T6671] usb 3-1: config 4 interface 132 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[  580.184070][ T6671] usb 3-1: config 4 interface 132 altsetting 8 has a duplicate endpoint with address 0x7, skipping
[  580.206363][ T6671] usb 3-1: config 4 interface 132 altsetting 8 has a duplicate endpoint with address 0x8, skipping
[  580.232404][ T6671] usb 3-1: config 4 interface 132 altsetting 8 has a duplicate endpoint with address 0x7, skipping
[  580.253647][ T6671] usb 3-1: config 4 interface 132 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[  580.310646][ T6671] usb 3-1: config 4 interface 132 altsetting 8 has a duplicate endpoint with address 0xC, skipping
[  580.368002][ T6671] usb 3-1: config 4 interface 132 altsetting 8 endpoint 0xF has invalid maxpacket 1024, setting to 64
[  580.429925][ T6671] usb 3-1: config 4 interface 132 has no altsetting 0
[  580.624873][ T6671] usb 3-1: New USB device found, idVendor=7392, idProduct=7618, bcdDevice=5b.12
[  580.694499][ T6671] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  580.727759][ T6671] usb 3-1: Product: 㰊
[  580.741852][ T6671] usb 3-1: Manufacturer: 
[  580.751815][ T6671] usb 3-1: SerialNumber: 牄⍔쎘䁧಻뤫歋䍤慨镀汤캎֐ᓀ횘뻄﷞㠄俳뿆嫽䙠籣ᖜꗠנ땏ꬍ焷㖬숤비ᓨ䫰뚥ᆥ撽ⶶ悓軫宱≚怒䷾飥碹謕舘ᔧ猲།
[  580.809438][T12048] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  580.843754][T12048] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  581.744624][ T6671] usb 3-1: USB disconnect, device number 38
[  583.392121][   T30] kauditd_printk_skb: 24 callbacks suppressed
[  583.393141][   T30] audit: type=1400 audit(1742255067.865:1002): avc:  denied  { write } for  pid=12086 comm="syz.0.1591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  586.232193][T12128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1600'.
[  587.396385][T12147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1605'.
[  588.225634][T12158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1608'.
[  588.537269][   T30] audit: type=1400 audit(1742255072.965:1003): avc:  denied  { getopt } for  pid=12148 comm="syz.3.1606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  588.611418][T12163] fuse: Bad value for 'fd'
[  590.102120][T12181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1614'.
[  590.657290][T12191] netlink: 'syz.0.1616': attribute type 1 has an invalid length.
[  593.363895][   T30] audit: type=1400 audit(1742255077.815:1004): avc:  denied  { sys_ptrace } for  pid=12198 comm="syz.3.1621" capability=19  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[  594.651705][ T5867] usb 2-1: new full-speed USB device number 36 using dummy_hcd
[  594.764604][T12230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1628'.
[  594.874062][ T5867] usb 2-1: unable to get BOS descriptor or descriptor too short
[  594.892523][ T5867] usb 2-1: not running at top speed; connect to a high speed hub
[  594.925961][ T5867] usb 2-1: config 1 has an invalid interface number: 91 but max is 0
[  595.012958][ T5867] usb 2-1: config 1 has no interface number 0
[  595.052879][ T5867] usb 2-1: config 1 interface 91 has no altsetting 0
[  595.090706][ T5867] usb 2-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=15.18
[  595.106495][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  595.122504][ T5867] usb 2-1: Product: syz
[  595.126727][ T5867] usb 2-1: Manufacturer: syz
[  595.131349][ T5867] usb 2-1: SerialNumber: syz
[  595.155897][ T5867] kl5kusb105 2-1:1.91: KL5KUSB105D / PalmConnect converter detected
[  595.175254][ T5867] usb 2-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0
[  595.359138][ T5867] usb 2-1: USB disconnect, device number 36
[  595.383074][ T5867] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0
[  595.418509][ T5867] kl5kusb105 2-1:1.91: device disconnected
[  595.871853][ T6671] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  596.041567][ T6671] usb 6-1: Using ep0 maxpacket: 16
[  596.060434][ T6671] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  596.075029][ T6671] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  596.086477][ T6671] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  596.149487][ T6671] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  596.191737][ T6671] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  596.314107][ T6671] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  596.324944][ T6671] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  596.342485][ T6671] usb 6-1: Manufacturer: syz
[  596.354986][ T6671] usb 6-1: config 0 descriptor??
[  596.616511][T12239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  596.642087][T12239] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  596.804426][ T6671] rc_core: IR keymap rc-hauppauge not found
[  596.841533][ T6671] Registered IR keymap rc-empty
[  596.854606][ T6671] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  597.062522][ T6671] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  597.134472][ T6671] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  597.269195][ T6671] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input40
[  597.319378][ T6671] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  597.362361][ T6671] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  598.155076][ T6671] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  598.245429][ T6671] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  598.295140][ T6671] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  598.372342][ T6671] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  598.436728][T12280] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1640'.
[  598.491742][ T6671] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  598.650526][ T6671] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  599.361616][ T6671] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  599.491708][ T6671] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  599.522132][ T6671] mceusb 6-1:0.0: Registered  with mce emulator interface version 1
[  599.623928][ T6671] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  600.055097][ T6671] usb 6-1: USB disconnect, device number 4
[  601.546154][T12304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1648'.
[  603.891578][   T52] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  604.101559][   T52] usb 4-1: Using ep0 maxpacket: 8
[  604.246578][T12334] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1656'.
[  604.500145][   T52] usb 4-1: config 0 has an invalid interface number: 246 but max is 0
[  604.541789][   T52] usb 4-1: config 0 has no interface number 0
[  604.575291][   T52] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3
[  604.788466][   T52] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  604.829535][   T52] usb 4-1: Product: syz
[  604.850658][   T52] usb 4-1: Manufacturer: syz
[  604.875160][   T52] usb 4-1: SerialNumber: syz
[  605.052228][   T52] usb 4-1: config 0 descriptor??
[  605.164818][   T52] msi2500 4-1:0.246: Registered as swradio24
[  605.170854][   T52] msi2500 4-1:0.246: SDR API is still slightly experimental and functionality changes may follow
[  605.260680][T12337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1655'.
[  605.297675][T12348] netlink: del zone limit has 4 unknown bytes
[  606.268450][T12360] dccp_invalid_packet: P.Data Offset(10) too large
[  606.361680][T12362] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1661'.
[  606.833690][ T5898] usb 4-1: USB disconnect, device number 29
[  607.324546][T12367] fuse: Bad value for 'fd'
[  607.823054][ T5870] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  607.941918][ T5834] Bluetooth: hci5: link tx timeout
[  607.949128][ T5834] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa
[  607.957721][ T5834] Bluetooth: hci5: link tx timeout
[  607.969246][ T5834] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa
[  607.977544][ T5834] Bluetooth: hci5: link tx timeout
[  607.983073][ T5834] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa
[  607.992043][ T5834] Bluetooth: hci5: link tx timeout
[  607.997382][ T5834] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa
[  608.005579][ T5834] Bluetooth: hci5: link tx timeout
[  608.010976][ T5834] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa
[  608.019298][ T5834] Bluetooth: hci5: link tx timeout
[  608.024639][ T5834] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa
[  608.032899][ T5834] Bluetooth: hci5: link tx timeout
[  608.038301][ T5834] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa
[  608.062024][ T5870] usb 1-1: Using ep0 maxpacket: 16
[  608.100275][ T5870] usb 1-1: config 0 has an invalid interface number: 143 but max is 0
[  608.125204][T12385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1666'.
[  608.156356][ T5870] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  608.188253][T12362] team0 (unregistering): Port device team_slave_0 removed
[  608.221522][ T5870] usb 1-1: config 0 has no interface number 0
[  608.221864][T12362] team0 (unregistering): Port device team_slave_1 removed
[  608.240369][ T5870] usb 1-1: config 0 interface 143 has no altsetting 0
[  608.273377][ T5870] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  608.326878][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  608.359593][ T5870] usb 1-1: Product: syz
[  608.369390][ T5870] usb 1-1: SerialNumber: syz
[  608.382047][ T5870] usb 1-1: config 0 descriptor??
[  610.033790][ T5834] Bluetooth: hci5: command 0x0406 tx timeout
[  610.401550][ T5898] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  610.691601][ T5898] usb 3-1: Using ep0 maxpacket: 16
[  610.698386][ T5898] usb 3-1: config 0 has an invalid interface number: 143 but max is 0
[  611.252143][ T5898] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  611.431873][ T5867] usb 1-1: USB disconnect, device number 33
[  611.441160][ T5898] usb 3-1: config 0 has no interface number 0
[  611.564827][ T5898] usb 3-1: config 0 interface 143 has no altsetting 0
[  611.635756][ T5898] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  611.646391][T12420] fuse: Bad value for 'fd'
[  611.655833][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  611.664314][ T5898] usb 3-1: Product: syz
[  611.668581][ T5898] usb 3-1: SerialNumber: syz
[  611.763061][ T5898] usb 3-1: config 0 descriptor??
[  614.928475][ T5868] usb 3-1: USB disconnect, device number 39
[  616.506863][T12477] FAULT_INJECTION: forcing a failure.
[  616.506863][T12477] name failslab, interval 1, probability 0, space 0, times 0
[  616.589997][T12477] CPU: 0 UID: 0 PID: 12477 Comm: syz.3.1691 Not tainted 6.14.0-rc7-syzkaller #0
[  616.590020][T12477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  616.590029][T12477] Call Trace:
[  616.590034][T12477]  <TASK>
[  616.590040][T12477]  dump_stack_lvl+0x16c/0x1f0
[  616.590066][T12477]  should_fail_ex+0x50a/0x650
[  616.590090][T12477]  ? fs_reclaim_acquire+0xae/0x150
[  616.590114][T12477]  ? cm_alloc_id_priv+0x99/0x4a0
[  616.590130][T12477]  should_failslab+0xc2/0x120
[  616.590148][T12477]  __kmalloc_cache_noprof+0x68/0x410
[  616.590173][T12477]  ? find_held_lock+0x2d/0x110
[  616.590193][T12477]  ? __pfx_cma_ib_req_handler+0x10/0x10
[  616.590214][T12477]  cm_alloc_id_priv+0x99/0x4a0
[  616.590230][T12477]  ? __pfx_cm_alloc_id_priv+0x10/0x10
[  616.590248][T12477]  ? mark_held_locks+0x9f/0xe0
[  616.590272][T12477]  ? __pfx_cma_ib_req_handler+0x10/0x10
[  616.590290][T12477]  ib_cm_insert_listen+0x25/0x1c0
[  616.590311][T12477]  rdma_listen+0x50a/0xe30
[  616.590330][T12477]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  616.590360][T12477]  ? __pfx_rdma_listen+0x10/0x10
[  616.590389][T12477]  cma_listen_on_dev+0x4dc/0x810
[  616.590411][T12477]  rdma_listen+0x98c/0xe30
[  616.590432][T12477]  ? __pfx_rdma_listen+0x10/0x10
[  616.590451][T12477]  ? __pfx_ucma_get_ctx+0x10/0x10
[  616.590471][T12477]  ? __might_fault+0xe3/0x190
[  616.590496][T12477]  ucma_listen+0x174/0x220
[  616.590517][T12477]  ? __pfx_ucma_listen+0x10/0x10
[  616.590542][T12477]  ? __pfx_ucma_listen+0x10/0x10
[  616.590562][T12477]  ucma_write+0x1f9/0x330
[  616.590582][T12477]  ? __pfx_ucma_write+0x10/0x10
[  616.590600][T12477]  ? bpf_lsm_file_permission+0x9/0x10
[  616.590617][T12477]  ? security_file_permission+0x71/0x210
[  616.590642][T12477]  ? rw_verify_area+0xcf/0x680
[  616.590665][T12477]  ? __pfx_ucma_write+0x10/0x10
[  616.590684][T12477]  vfs_write+0x24c/0x1150
[  616.590709][T12477]  ? __fget_files+0x1fc/0x3a0
[  616.590724][T12477]  ? __pfx_lock_release+0x10/0x10
[  616.590745][T12477]  ? __pfx_vfs_write+0x10/0x10
[  616.590770][T12477]  ? lock_acquire+0x2f/0xb0
[  616.590790][T12477]  ? __fget_files+0x40/0x3a0
[  616.590808][T12477]  ? __fget_files+0x206/0x3a0
[  616.590831][T12477]  ksys_write+0x207/0x250
[  616.590845][T12477]  ? __pfx_ksys_write+0x10/0x10
[  616.590867][T12477]  do_syscall_64+0xcd/0x250
[  616.590890][T12477]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  616.590913][T12477] RIP: 0033:0x7f277bd8d169
[  616.590926][T12477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  616.590941][T12477] RSP: 002b:00007f277cb46038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  616.590957][T12477] RAX: ffffffffffffffda RBX: 00007f277bfa5fa0 RCX: 00007f277bd8d169
[  616.590967][T12477] RDX: 0000000000000010 RSI: 0000400000004b40 RDI: 0000000000000003
[  616.590976][T12477] RBP: 00007f277cb46090 R08: 0000000000000000 R09: 0000000000000000
[  616.590984][T12477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  616.590993][T12477] R13: 0000000000000000 R14: 00007f277bfa5fa0 R15: 00007ffd10c02ab8
[  616.591015][T12477]  </TASK>
[  616.591078][T12477] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -12
[  617.014806][   T30] audit: type=1400 audit(1742255101.485:1005): avc:  denied  { append } for  pid=12480 comm="syz.5.1693" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  618.733469][T12507] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1699'.
[  618.764408][T12507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1699'.
[  619.061654][ T5834] Bluetooth: hci5: command 0x0406 tx timeout
[  620.742369][   T30] audit: type=1400 audit(1742255105.225:1006): avc:  denied  { mounton } for  pid=12527 comm="syz.1.1704" path="/345/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1
[  621.041615][ T5867] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  621.248929][ T5867] usb 2-1: Using ep0 maxpacket: 16
[  621.270243][ T5867] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  621.287208][ T5867] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  621.330292][ T5867] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  621.341745][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  621.360637][ T5867] usb 2-1: Product: syz
[  621.372257][ T5867] usb 2-1: Manufacturer: syz
[  621.400662][ T5867] usb 2-1: SerialNumber: syz
[  621.431683][   T26] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  621.545602][T12538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1708'.
[  621.644363][T12528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  621.653268][T12528] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  621.781269][   T26] usb 3-1: Using ep0 maxpacket: 16
[  622.560603][   T26] usb 3-1: too many configurations: 117, using maximum allowed: 8
[  622.613406][   T26] usb 3-1: unable to read config index 0 descriptor/start: -61
[  622.635570][   T26] usb 3-1: can't read configurations, error -61
[  622.782750][   T26] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  622.951746][   T26] usb 3-1: Using ep0 maxpacket: 16
[  623.156835][   T26] usb 3-1: too many configurations: 117, using maximum allowed: 8
[  623.172381][   T26] usb 3-1: unable to read config index 0 descriptor/start: -61
[  623.180075][   T26] usb 3-1: can't read configurations, error -61
[  623.195414][   T26] usb usb3-port1: attempt power cycle
[  623.345870][   T30] audit: type=1400 audit(1742255107.825:1007): avc:  denied  { getopt } for  pid=12550 comm="syz.5.1712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  623.545941][   T26] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  623.602266][   T26] usb 3-1: Using ep0 maxpacket: 16
[  623.622086][   T26] usb 3-1: too many configurations: 117, using maximum allowed: 8
[  623.662236][   T26] usb 3-1: unable to read config index 0 descriptor/start: -61
[  623.719051][   T26] usb 3-1: can't read configurations, error -61
[  623.887887][ T5867] usb 2-1: cannot find UAC_HEADER
[  623.901092][ T5867] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[  623.911938][ T5867] usb 2-1: USB disconnect, device number 37
[  623.941954][   T30] audit: type=1400 audit(1742255108.425:1008): avc:  denied  { unmount } for  pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  624.061634][   T26] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  624.095788][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  624.103607][   T26] usb 3-1: Using ep0 maxpacket: 16
[  624.111925][   T52] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  624.144093][   T26] usb 3-1: too many configurations: 117, using maximum allowed: 8
[  624.311669][   T52] usb 6-1: Using ep0 maxpacket: 16
[  624.348315][   T52] usb 6-1: config 0 has an invalid interface number: 8 but max is 0
[  624.369057][   T52] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  624.384849][   T26] usb 3-1: unable to read config index 0 descriptor/start: -71
[  624.413217][   T26] usb 3-1: can't read configurations, error -71
[  624.425557][   T52] usb 6-1: config 0 has no interface number 0
[  624.447273][   T26] usb usb3-port1: unable to enumerate USB device
[  624.453950][   T52] usb 6-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  624.493365][   T52] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  624.502854][ T6671] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  624.695126][   T52] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  624.741819][   T52] usb 6-1: Product: syz
[  624.756181][   T52] usb 6-1: SerialNumber: syz
[  624.820904][ T6671] usb 2-1: Using ep0 maxpacket: 16
[  624.835772][   T52] usb 6-1: config 0 descriptor??
[  624.901759][ T6671] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[  624.909956][ T6671] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  624.990946][T12575] vcan0: tx drop: invalid sa for name 0x0000000000000003
[  624.998211][ T6671] usb 2-1: config 0 has no interface number 0
[  624.998324][ T6671] usb 2-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  625.323098][ T6671] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  625.333560][ T6671] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  625.353916][   T52] usbhid 6-1:0.8: couldn't find an input interrupt endpoint
[  625.363914][ T6671] usb 2-1: Product: syz
[  625.368088][ T6671] usb 2-1: SerialNumber: syz
[  625.374213][   T52] usb 6-1: USB disconnect, device number 5
[  625.403004][ T6671] usb 2-1: config 0 descriptor??
[  625.548396][T12580] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1719'.
[  625.597865][T12580] libceph: resolve '0.' (ret=-3): failed
[  625.686089][ T6671] usbhid 2-1:0.8: couldn't find an input interrupt endpoint
[  625.695306][ T6671] usb 2-1: USB disconnect, device number 38
[  625.981709][   T31] INFO: task syz.4.1276:10880 blocked for more than 143 seconds.
[  625.993964][   T31]       Not tainted 6.14.0-rc7-syzkaller #0
[  626.015868][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  626.074566][   T31] task:syz.4.1276      state:D stack:24656 pid:10880 tgid:10876 ppid:5817   task_flags:0x400740 flags:0x00004006
[  626.086831][   T31] Call Trace:
[  626.090186][   T31]  <TASK>
[  626.094088][   T31]  __schedule+0xf43/0x5890
[  626.098750][   T31]  ? __pfx___lock_acquire+0x10/0x10
[  626.104058][   T31]  ? find_held_lock+0x2d/0x110
[  626.668279][   T31]  ? __pfx___schedule+0x10/0x10
[  626.675216][   T31]  ? schedule+0x298/0x350
[  626.679569][   T31]  ? __pfx_lock_release+0x10/0x10
[  626.684665][   T31]  ? finish_task_switch.isra.0+0x217/0xcc0
[  626.690500][   T31]  ? lock_acquire+0x2f/0xb0
[  626.695386][   T31]  ? schedule+0x1fd/0x350
[  626.699744][   T31]  schedule+0xe7/0x350
[  626.722986][   T31]  schedule_timeout+0x244/0x280
[  626.735381][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  626.740936][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  626.746317][   T31]  __wait_for_common+0x3e1/0x600
[  626.751410][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  626.766614][   T31]  ? __pfx___wait_for_common+0x10/0x10
[  626.772292][   T31]  ? preempt_schedule_thunk+0x1a/0x30
[  626.784334][   T31]  wait_for_completion_state+0x1c/0x40
[  626.789940][   T31]  do_coredump+0x86f/0x4410
[  626.794618][   T31]  ? __pfx___lock_acquire+0x10/0x10
[  626.799918][   T31]  ? __pfx_do_coredump+0x10/0x10
[  626.805018][   T31]  ? find_held_lock+0x2d/0x110
[  626.809823][   T31]  ? finish_task_switch.isra.0+0x212/0xcc0
[  626.816012][   T31]  ? __pfx_lock_release+0x10/0x10
[  626.821047][   T31]  ? rcu_is_watching+0x12/0xc0
[  626.825912][   T31]  ? finish_task_switch.isra.0+0x160/0xcc0
[  626.831933][   T31]  ? finish_task_switch.isra.0+0x217/0xcc0
[  626.837746][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  626.844015][   T31]  ? __schedule+0xf4b/0x5890
[  626.849169][   T31]  ? __pfx___schedule+0x10/0x10
[  626.854338][   T31]  ? irqentry_exit+0x3b/0x90
[  626.859030][   T31]  ? proc_coredump_connector+0x2d2/0x4f0
[  626.864727][   T31]  ? __pfx_proc_coredump_connector+0x10/0x10
[  626.870734][   T31]  get_signal+0x230b/0x26c0
[  626.875343][   T31]  ? __pfx_force_sigsegv+0x10/0x10
[  626.880470][   T31]  ? __pfx_get_signal+0x10/0x10
[  626.885363][   T31]  ? __asan_memset+0x23/0x50
[  626.889967][   T31]  arch_do_signal_or_restart+0x90/0x7e0
[  626.895620][   T31]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  626.901900][   T31]  ? rcu_is_watching+0x12/0xc0
[  626.906671][   T31]  syscall_exit_to_user_mode+0x150/0x2a0
[  626.912385][   T31]  do_syscall_64+0xda/0x250
[  626.916905][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  626.922878][   T31] RIP: 0033:0x7f4bc524e750
[  626.927303][   T31] RSP: 002b:00007f4bc616d3f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  626.935904][   T31] RAX: 0000000000000000 RBX: 00007f4bc55a5fa8 RCX: 00007f4bc538d169
[  626.943899][   T31] RDX: 00007f4bc616d400 RSI: 00007f4bc616d530 RDI: 000000000000000b
[  626.952503][   T31] RBP: 00007f4bc55a5fa0 R08: 0000000000000000 R09: 0000000000000000
[  626.960503][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4bc55a5fac
[  626.968519][   T31] R13: 0000000000000000 R14: 00007fff06114ad0 R15: 00007fff06114bb8
[  626.976596][   T31]  </TASK>
[  626.979647][   T31] 
[  626.979647][   T31] Showing all locks held in the system:
[  626.987554][   T31] 1 lock held by khungtaskd/31:
[  627.001696][   T31]  #0: ffffffff8e1bd140 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390
[  627.011687][   T31] 2 locks held by kworker/u8:4/67:
[  627.016836][   T31] 2 locks held by getty/5586:
[  627.021532][   T31]  #0: ffff8880373fa0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  627.031301][   T31]  #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480
[  627.041736][   T31] 
[  627.044061][   T31] =============================================
[  627.044061][   T31] 
[  627.055707][   T31] NMI backtrace for cpu 0
[  627.055720][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-rc7-syzkaller #0
[  627.055738][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  627.055747][   T31] Call Trace:
[  627.055752][   T31]  <TASK>
[  627.055760][   T31]  dump_stack_lvl+0x116/0x1f0
[  627.055786][   T31]  nmi_cpu_backtrace+0x27b/0x390
[  627.055803][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  627.055826][   T31]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[  627.055845][   T31]  watchdog+0xf62/0x12b0
[  627.055874][   T31]  ? __pfx_watchdog+0x10/0x10
[  627.055896][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  627.055918][   T31]  ? __kthread_parkme+0x148/0x220
[  627.055935][   T31]  ? __pfx_watchdog+0x10/0x10
[  627.055960][   T31]  kthread+0x3af/0x750
[  627.055980][   T31]  ? __pfx_kthread+0x10/0x10
[  627.056003][   T31]  ? __pfx_kthread+0x10/0x10
[  627.056029][   T31]  ret_from_fork+0x45/0x80
[  627.056050][   T31]  ? __pfx_kthread+0x10/0x10
[  627.056069][   T31]  ret_from_fork_asm+0x1a/0x30
[  627.056098][   T31]  </TASK>
[  627.056104][   T31] Sending NMI from CPU 0 to CPUs 1:
[  627.167173][    C1] NMI backtrace for cpu 1
[  627.167186][    C1] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.14.0-rc7-syzkaller #0
[  627.167200][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  627.167209][    C1] Workqueue: bat_events batadv_nc_worker
[  627.167231][    C1] RIP: 0010:mark_lock+0x0/0xc60
[  627.167250][    C1] Code: 86 00 e9 18 fe ff ff 48 c7 c7 30 9b 62 90 e8 f7 a4 86 00 e9 a9 fe ff ff 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <55> 48 89 e5 41 57 41 56 41 89 d6 48 ba 00 00 00 00 00 fc ff df 41
[  627.167265][    C1] RSP: 0018:ffffc900001278e8 EFLAGS: 00000046
[  627.167279][    C1] RAX: 0000000000000001 RBX: ffff88801c2f0af0 RCX: 0000000000000000
[  627.167287][    C1] RDX: 0000000000000008 RSI: ffff88801c2f0b40 RDI: ffff88801c2f0000
[  627.167295][    C1] RBP: dffffc0000000000 R08: 0000000000000004 R09: 0000000000000000
[  627.167303][    C1] R10: ffffffff96ec6daf R11: 0000000000000002 R12: ffffed100385e15d
[  627.167311][    C1] R13: ffff88801c2f0000 R14: 0000000000000005 R15: ffff88801c2f0b40
[  627.167319][    C1] FS:  0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  627.167331][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  627.167340][    C1] CR2: 00007f213a379178 CR3: 000000002a05c000 CR4: 00000000003526f0
[  627.167348][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  627.167355][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  627.167363][    C1] Call Trace:
[  627.167367][    C1]  <NMI>
[  627.167373][    C1]  ? nmi_cpu_backtrace+0x1d8/0x390
[  627.167387][    C1]  ? nmi_cpu_backtrace_handler+0xc/0x20
[  627.167404][    C1]  ? nmi_handle+0x1ac/0x5d0
[  627.167422][    C1]  ? __pfx_mark_lock+0x10/0x10
[  627.167438][    C1]  ? default_do_nmi+0x6a/0x160
[  627.167450][    C1]  ? exc_nmi+0x170/0x1e0
[  627.167462][    C1]  ? end_repeat_nmi+0xf/0x53
[  627.167482][    C1]  ? __pfx_mark_lock+0x10/0x10
[  627.167498][    C1]  ? __pfx_mark_lock+0x10/0x10
[  627.167514][    C1]  ? __pfx_mark_lock+0x10/0x10
[  627.167529][    C1]  </NMI>
[  627.167533][    C1]  <TASK>
[  627.167538][    C1]  __lock_acquire+0x9f1/0x3c40
[  627.167557][    C1]  ? __pfx___lock_acquire+0x10/0x10
[  627.167573][    C1]  ? __pfx_register_lock_class+0x10/0x10
[  627.167590][    C1]  ? __pfx___lock_acquire+0x10/0x10
[  627.167608][    C1]  lock_acquire.part.0+0x11b/0x380
[  627.167624][    C1]  ? batadv_nc_worker+0x164/0x1060
[  627.167641][    C1]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  627.167658][    C1]  ? rcu_is_watching+0x12/0xc0
[  627.167671][    C1]  ? trace_lock_acquire+0x14e/0x1f0
[  627.167685][    C1]  ? batadv_nc_worker+0x164/0x1060
[  627.167702][    C1]  ? lock_acquire+0x2f/0xb0
[  627.167717][    C1]  ? batadv_nc_worker+0x164/0x1060
[  627.167734][    C1]  batadv_nc_worker+0x16a/0x1060
[  627.167750][    C1]  ? batadv_nc_worker+0x164/0x1060
[  627.167769][    C1]  ? __pfx_batadv_nc_worker+0x10/0x10
[  627.167786][    C1]  ? rcu_is_watching+0x12/0xc0
[  627.167798][    C1]  ? trace_lock_acquire+0x14e/0x1f0
[  627.167812][    C1]  ? process_one_work+0x921/0x1ba0
[  627.167829][    C1]  ? lock_acquire+0x2f/0xb0
[  627.167844][    C1]  ? process_one_work+0x921/0x1ba0
[  627.167861][    C1]  process_one_work+0x9c5/0x1ba0
[  627.167879][    C1]  ? __pfx_batadv_nc_worker+0x10/0x10
[  627.167896][    C1]  ? __pfx_process_one_work+0x10/0x10
[  627.167914][    C1]  ? assign_work+0x1a0/0x250
[  627.167929][    C1]  worker_thread+0x6c8/0xf00
[  627.167948][    C1]  ? __pfx_worker_thread+0x10/0x10
[  627.167964][    C1]  kthread+0x3af/0x750
[  627.167979][    C1]  ? __pfx_kthread+0x10/0x10
[  627.167993][    C1]  ? lock_acquire+0x2f/0xb0
[  627.168009][    C1]  ? __pfx_kthread+0x10/0x10
[  627.168023][    C1]  ret_from_fork+0x45/0x80
[  627.168039][    C1]  ? __pfx_kthread+0x10/0x10
[  627.168053][    C1]  ret_from_fork_asm+0x1a/0x30
[  627.168071][    C1]  </TASK>
[  627.168779][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  627.538335][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-rc7-syzkaller #0
[  627.547076][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  627.557109][   T31] Call Trace:
[  627.560371][   T31]  <TASK>
[  627.563289][   T31]  dump_stack_lvl+0x3d/0x1f0
[  627.567869][   T31]  panic+0x71d/0x800
[  627.571744][   T31]  ? __pfx_panic+0x10/0x10
[  627.576141][   T31]  ? preempt_schedule_thunk+0x1a/0x30
[  627.581505][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  627.587469][   T31]  ? preempt_schedule_thunk+0x1a/0x30
[  627.592830][   T31]  ? watchdog+0xdcc/0x12b0
[  627.597244][   T31]  ? watchdog+0xdbf/0x12b0
[  627.601647][   T31]  watchdog+0xddd/0x12b0
[  627.605877][   T31]  ? __pfx_watchdog+0x10/0x10
[  627.610543][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  627.615728][   T31]  ? __kthread_parkme+0x148/0x220
[  627.620732][   T31]  ? __pfx_watchdog+0x10/0x10
[  627.625394][   T31]  kthread+0x3af/0x750
[  627.629446][   T31]  ? __pfx_kthread+0x10/0x10
[  627.634034][   T31]  ? __pfx_kthread+0x10/0x10
[  627.638605][   T31]  ret_from_fork+0x45/0x80
[  627.643004][   T31]  ? __pfx_kthread+0x10/0x10
[  627.647573][   T31]  ret_from_fork_asm+0x1a/0x30
[  627.652327][   T31]  </TASK>
[  627.655511][   T31] Kernel Offset: disabled
[  627.659810][   T31] Rebooting in 86400 seconds..