last executing test programs:

2m57.472695047s ago: executing program 3 (id=248):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000000002044c1977dd15bb10001090224000100000000090000000103000200092101010001220200094581030000000f0000"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x3, {[@local=@item_012={0x0, 0x2, 0x5}, @local=@item_012={0x1, 0x2, 0x8, "8e"}]}}, 0x0}, 0x0)

2m55.475856582s ago: executing program 0 (id=254):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000008c0))
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r3 = dup3(r2, r1, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000a40)={@flat=@binder={0x73622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0xa, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x9}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, 0x0, 0x0)
sendmmsg$inet(r5, 0x0, 0x0, 0x2000c044)
writev(r5, &(0x7f0000000080)=[{&(0x7f0000000840)}], 0x1)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r6)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r7, 0x0)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000800)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

2m55.322587973s ago: executing program 0 (id=256):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_mr_vif\x00')
pread64(r4, &(0x7f000001a240)=""/102400, 0x19000, 0x100008)

2m54.29301567s ago: executing program 0 (id=258):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_devices(r3, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x7fff0006}]})
close_range(r5, 0xffffffffffffffff, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
setgid(0x0)
sendmsg$netlink(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1700000078000106000000000000000007"], 0x18}], 0x1, 0x0, 0x0, 0x4000000}, 0x4000880)
r7 = syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
close(0x3)
syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02)
syz_usb_disconnect(r7)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0))
write$cgroup_subtree(r1, 0x0, 0xfe33)
pipe2(&(0x7f0000000040), 0x80000)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100))
landlock_restrict_self(0xffffffffffffffff, 0x0)
pipe2$9p(&(0x7f0000000180), 0x0)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f00000003c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000000c0)="b9da06ce171c2e7cc2a25d589ccd75d0275367048f46e1d1833f0b225d71e6aeeafac6b1195e3a2a07b7e7608b3a26ff", 0x30)

2m54.291245109s ago: executing program 3 (id=259):
r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0)
r1 = socket(0xa, 0x3, 0xff)
recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0xfffffffffffffc59, &(0x7f0000002240)=""/17, 0x15}, 0x8e0f}], 0x400029c, 0x40010142, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x4, @mcast2, 0x80}], 0x1c)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000180)={0xfffffff9, 0x3, {<r3=>0x0}, {<r4=>0xffffffffffffffff}, 0x8, 0x4})
fchown(r0, r4, 0xee01)
r5 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE(r2, 0x5000940e, &(0x7f0000000d00)={{}, "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"})
r6 = syz_usb_connect(0x2, 0x80, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000001018610f4205ae06d316b6692010902240001010000000904690202ff5aa30009050402100000fa0009058202", @ANYRESHEX], 0x0)
syz_usb_control_io$printer(r6, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000780)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c})
capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x9, 0x7, 0x0, 0x9, 0xa550})
removexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_access\x00')
readv(r0, &(0x7f0000000cc0)=[{&(0x7f0000000240)=""/67, 0x43}], 0x1)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x4, [@struct={0x3, 0x6, 0x0, 0x4, 0x1, 0xaac, [{0x1, 0x5, 0x335e}, {0x0, 0x5}, {0x2, 0x0, 0x8001}, {0x9, 0x4, 0x3}, {0x10, 0x0, 0xff}, {0x7, 0x0, 0x1}]}, @const={0xc, 0x0, 0x0, 0xa, 0x2}, @fwd={0x6}]}, {0x0, [0x61, 0x0]}}, &(0x7f0000000200)=""/11, 0x88, 0xb, 0x0, 0xd183, 0x10000, @value=r2}, 0x28)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(0xffffffffffffffff, &(0x7f0000006180)={0x2020, 0x0, 0x0, <r8=>0x0, <r9=>0x0}, 0x2020)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r8, r9, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000002080)={0x5, 0xd62d, {r3}, {r4}, 0x9f9, 0x2})
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000020c0)={0x0, 0x0, <r10=>0x0}, &(0x7f0000002100)=0xc)
getgroups(0x6, &(0x7f0000002140)=[0xee01, 0x0, <r11=>0x0, 0xee01, 0xee01, 0x0])
newfstatat(0xffffffffffffff9c, &(0x7f00000068c0)='./file0\x00', &(0x7f0000006900)={0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0}, 0x2000)
syz_fuse_handle_req(r2, &(0x7f0000002280)="7be7967bc646ac86dba733b22bb5bfd25f6d78aa4f906f50bf6b42c171b924ac36c21c5b74c780d71e32c7f36f2ff4f95bc4c4e1b2a5e43ae2f1ef21245b0063fc6289abf0c9d1b674ef08b8dbebeefb50dbd03ce5a8947f7f4f5267aafa3c876d956d157f4e35c594df854ecc2636082946232017deaa1a908416982a2e024e9a6decdab7620fd896ad02ef090c8cd27ebd12eb886ac3d4c516f80cc25954a78ff02bf32d9fec83277753b488d1a9196ab5c02b2eda0e1d32029c18491db828d4d3ac46a36b349afdb148798422f4ebd232bb5cd3264542fa0e2ebde98e4b403ff980c30f31b29afcfff67a4922b4184da923215c5a27bc69f9572f8a7421097fa2251d2941950a8cfb511d893b11115ac397a20ca98a9ff7ebce178cd8357266b357cf495c9d5aa88d657da173106309e38d4dc9fa83db448ea593717ec6919ee7e28a47c76012897de5c336ebb4c2c57f128b8c2a33722d786db1d84c370718102a2b1b4d354d6116dac13ee8fb223f9d7bd47929832d0e7ef43ed834fdbdcd6b2f60b482441b8c056ecdfe119c790c1d71420e67304140b538cad7dfda4f49c766d81fa11feb7febd56bdca0b0a438fa7b9556d244ed2c8a39929234abc596b1947b4082ba20aa512061f30a336c655f1e9e8f257ce2024b389ae5791a0cec8efefbc3c23139beba2696910b10c36e18521474749488f88c284b967a7a182ee334faa6a7642527be711827845ff40011e9b7ba9162fb938cc465cb5128452f5a33742cbdec63f3f5d0a4fb63b75b58416299a9f5b984234800112506280fea8964e00db47490d98fe88ffeaf03409a23e4300c5eea875b35d2e30e579230a95bfbd9d238b10e19602a9866981e967490bb79bb8b9ef5b9a3d84c7a639532e55bf8ef9bfa01a15fd671636ecd2d5982924de10699bc260d7c269329ff7599dc95c8620bdf1ea531486d14b5c5db2a2a1a044c80b4219f3ad152806519281e39a610fbe48b98d9cdb1d806b8c93dd50cb9d1ab5aea9d4ba5c0ea4a8ff659cdd9513ad5009efd138f043a42a7724c98caff7987658797f64fb6c7e8f0e5b3a0b3990b80b360f8bb004b40b01d4094e4cdef0e62d4b4c59728c3d7ba36e0ad33c7ad578c23ef2c5facdb054987bf3cfb78ebb7069a7200e67222b2b93347a3f754d80572cb5b8fb5841ac24934d91f75b80dabc13a3470de8930bf730320b983e2bf410e71a1697782ac525c1f1f69edf440fd07835cd8a9fae878b6709b0b8449cc6004d559e546821e2179bf8bc79e1573a9c1ea1fd5462f0569e3e2345ecc41651c95a967ab45a4f2405c7edec13a19ef21558d3f514b1d9efa4660edcdf43b54452099b60183b515939168613b67bcb57b8a2567b8a657c1f0b03bb6860b403b1a852d9e062a50148ee85c2c6f65ea4b94483d31e03ec8c8cf122281c1956031d79928857316e12522a389a18aeb9b2f2e6152f84e244539ddd3e5c8052a95616b4ee58ed570e84824cbc4694c1292e64be6b29fd12eaae576ebc2a1cc298a76e67ac9cbabbfa198b943c5430a120fa7ec79e65fe48742ad6658c3aef14d58ec0851699f5a979cfa48e7f86215ba94cc77fb9fd49cfc0347121ead4865984727b42ac570c0cc9eca8c731927f763c6ac6609fa8fde098f832f467fe79ab1287a53b6765eafaed618946892e575f8f0259528f393ee067b77d64fb4110f6b9614c9f38d3e4e6bac473660df7e844184f6ce00ab37abbb278e610df4fd9320c3b4a416842608187cc9255f7d6810089d8d1c201eeac513a777a8b7e8d1c54bfbb3ad9f275bd6128736dc85d7fdacebaf647d584e4a24ade834a588bdb1c0c492ac2a12edead11bd61e40969c229d11e4670dc53883da7b30d292b4c11e362663cdbb4c85afb26133e5271e5d0e3a972904fd4c0260c2fb766981aa2978e4beab1a27a0dade1be4d3835e83995892bf3c674fdc062e36825b74b57fc7a596dc67eb599aeacc3449d809909adeea43dd84fe2d4f9cc55732ef5084c0babd1e4c3bcc1e31658945622451cc631f9e5d52bfd33b8eeae63c39df958c98894c6858b8313407ca5c0b71b2ced3f56e1eff03ac931c4c5066e7485324fda7fbea03cd0ee5fba359917e2ed948072099bb9ba9946c768e365a6d381ee6ad0794dc35516db922c587c9306a06e7d42695a90cde3a1d083bdf79a6f3b1817c3d72a5f1e840f484160f50cddac37bc60de9f8187c790d364f7aa59129ddc7ce7b4c222dde4cfeec3b643eae2b8fbfbbefe030832171f715f97e66ee7b2902f749a01ea49ac9019d26d17577a420980d0b4bb3637fedda7c7a992903611eb056434c9e822820a7b6356adc9e1fca803f7ae813b729c2b3d20b39bcfadf2e4ef4533bab13cd546a79f71a4885f8cba8944903c5cf2ef3284505914a11870f8baa901110ecb63fc725a42e447ed934287c84fa9e06fc242f2dd4dc67590fb9c5ec813ed3b7462a60bde1bc10328613e09817cff34dc97a74eff532379b0db1088e8708336dc423e722ecede6094351b24f40ed09d4257703e2165976cfabe1dc368938a514a2f2031196792de4533be8e25bbbf6e676de0ef5304eba0bf4682489ba0b7c19db301d24bb7682be0df302264ce45d2acb6c691e0b252a5255a23776a3c0a57c7fd41f973c54547976b10687cf464c0a53ff4659ec71f52360d8c520cabc0b77f62b17ed69656a45da7f5f46f266eab0668f2d6deeb94557cff25d3400981e391bf67e0058bbec1d2ec4566d516276433cd252b67c58dd43fb614d53bec1e8837b491bc820e4ad2fe40a6d0e43e8a4cf281e8fa32bd365c7da4de9a7442a917b6de87dc918a010b031184a5fcb6b82b13b4558af5aa7144321d797a053d4ee3f889598a6557f779ac05f7d6cad2666862c975f760dd32a1fe8d9dd4bd88c56618d57ab0aad7365e78279b4d2a5a737a8c0360f5061fc61763878388fde46bec4f55cd9b24fc2cce8e43c6f452276a725ad47a7ac5a15e3bbdcf3a00aba2819ae98848f2fa6d55594583d775e0c4dcd83b79ddd5a76b6fb482af82e43fa7538354a48845d683c3ecfe6db9ed309c3d587f0036266670ff69422a14eda931594c8fd647c68d22d6870e78ead4c15311c40ab130b777ebfa9674731bc9f0d7006100c3d6f7887f2cf8163936e589f7225677056c5966149e70e4e9560b15ae26bcdf0d0d4c50e077284915a8c638f58e1ba3e21bb8803d49befdf800d9d9b767e5005a5bf4fcaa22c0c0eca6be1a419a41c33b1db9e379f90ffaa4b0a0e7ebe121cc6f3bc04a4515203531156614676925385bc847fe714cc74a048663510795e7ed221f4f00d722ee88918114f5ed193883e694bcfe4875eda9aedcbf74d56e46b49956a949a401f270c8f42e0f8c4fd3f269b67a5891ca5017534730097b1627076baae73d4a49a4f8412da8afff05cae13583eb5ac234733380a6459df85dcb0b80e271dddeacd048725c89bbff0405f346783878efc80bd131e05510dbaad9b14caaa48ccd33820194db88ce65a7a590f53975cea7d15305929b33914aaea1b9388432efccc8ec28eaddc53174593d15c1e3ec37e535f4177ef8f8dfbae91fdb0bc211443f0f2c9b435ed5fff11b9bb22575c3ba7a8e6276e5c1d2aa28c9c20654f79fb82e4ce7509175a4ef6238e3b3a5696e8d80a182c513db89b8bd7f1003c03869d1ff7c4fe8deaa731a1922a99c42bd14e9821b550bf20b864244c101c1dd70fa04e5c211e391759791db3dc1003a90b7767c4600801eada1b6c4e258a96d1a61419ee04277a290719a7cf5a23a7850b1070351ad2c7bca2b8d0bdb4510aed0a8d77780c2c70a85087d086ab8af860bb8133c0a6aaf8273083c3d89fd8e4c4962a5ce390d8fa8a7d129edb3e6439f22521fec81c63184790b2011f8fc4a294b10098294dfc0bf8fdbdfcea32db1ef5efab3ef260b163dd886f69ab0d9136d98710f1e6c346d0243ba4be17ee3d10bb349fd3ed5839fa71d5fbcf0522c6f992d0e42e77294abbddb4bc9cc8f30d762be5db446af31c0b6ac9b53161f07e0c0f1ba5ef4a8eaa86dea048f36d913021f88b8a71bae6a47f9a8742a81fe2303f837a9cf1c52ec41a2b015c7dc86944cdf9754740df5bcb6a4325d83730d0a304bfadb0c9b9c8b419584c2092ffa1ab471b518d28e662a46fe15f1792064d2c449b7619829f1ea3ebd80c018a6346f3ba56bcef14d653a6193c9f9dddb4f2f52063f456c252e8b3393b082847c118c5734b691f4701e5050d6e8b15c4004bb51fe765f9c59917a076f3d18fa35dcda21de0495d23e05c85077052dc43d99bebe94512cc950bf7e8d62c784760a90a42f8ba60150c71a4d764d576495f6cb30308bb0401720c0d7187b3fdbc55495f321990eeba6144a783746e16c96786e48796ba5ae1a8d32c81cae7bee0fac5334c9c4ad29af84f8b0599166b9cf7856b41ec420ccf7a64849bda6df9875462db04879cbf2244d8ed9c203855a4e81ae8cf9347f4f82c0f5565e3c4921cfbc56b0bf99aa785bae2e61af1d1f3d7f783ffddaecdb87184ede4ef8e171300aabda0115816ea0e3a38efddc3a33d314e9b8064cacaf60a4c35f58cbe73b5bd51bac5f59e2cda5c1b225ae99d145675766d4baf971a5f830d4b295f2f148833e41e23f23b2bf8d62fe06cde5d18aca14d58afd890286dc1d6300ccd2d57f72363ee64934ca5c7468d3cb5ef0f06b03c1fff81ee068fe4bdf99d499f61e2e814249ed0ecf52ddc02c98e7026b81866ffdbe40e02c6cb9087e3af40b37c712c12b39a61037c856598d40884905f5257278c07566925245ac381bc955b2ad5bb2ab3e5c27bfd21e2e0bcd29e7e0cb068c98d7629d4965880ed9a6e23a87ad5f4f16ddc285ffa792239621f2c60d0ac7ac37deb43771a154097cf498d6cf8911ae64589b421d63a572a2c6b91648a1659bb208dede095d2b3dcd369fc0a08c500bbf9b7df4d5d401137eaa8015fd0e44ceced225dc9b54bdca416e3d67341e934e874181992cae8a7886970ef99418f2c1a39314b688eb2447a754d8357b7691a3605944b692e4d17829729d62609cdf5d4d755e384f740fb899875efef2b182ef7fd38c5f53a70af2cbfdea3570eecf7ac156f54f0d45b26a29be02fe61989a8095da9872be30f28b46740344823ce4e6feb4f864b498f51fba3ccf05bbcd799b7d0974a4f24863a67342593fa31a01e1a9766e9ca36022255edca442631096cbd13eda843658512e23242f19717909f5c785163be19545bca0d8fa1f6488e8d7488b138e0c1ecaf38e65b4f2683642e116bb0caa064e209d28fb0066cd1839eae1efc92757c54f5f8b5c0061d425d69e9d5e287739451383d463f0de424630047b1582e57645dd19786fcfdc84534c12c6c74f6c760835a2b764e5f7eb15490d6d8da43a37f79c07eb2652a47faf49a68d185f81533255863b88cb69599be8a478e9d4b82b0d19c16acf25f8c03818da56549e75c0f9af3bc77e93ed36b9620dbcb38628f1bcc32568207bf8cffc62af5610c81175351d0ffe5740d629f1bf1b15d4fe3d2f111d5df3759bb00626c13b9b7528650df084433057ec5f5dc1ab542b96753dff71304ebe45df1fc3e970948a221f06e0ef60cf69172f66d0843a353f7da55e0437fec2fd3921f00499fb51a7cde1a5e041caf30f57cb779fc3e8fe1f72d2cc8c247c3c6a52d2f121c394d2c2447d028cdfc429066d86980f2374fd7c5fd4281ecb78b9b5d729fde919e267e33f5d0486ca4f4a1e01369f55a5f1b07b52096cc02b8ad869708b2e9950b10b163c5bad976325694e8af6f330cfbaf9420b0d25556455c420cb9ec8779e5ab7769ec6600ce8d75b3fa8366a175376a02be7edcb145b6235c2d6782806398b1590d16a1f1415f47a8a4065f76f519fc2f89ad76b0656bd36728bb9a172f95efc90741d4da12ed9a6d542648e719906411f27c47c0c08e340312a9d5d3e2d4c7cab20d58283b1eb6a0cc13440b86e6a167f1294dd37e36ab7336c5bb193c57b28fa27d269e6f957b90fbc4eddcd8e25786b2c62e3ee53e84e4568876e91a1a582648e1f863cae49cb091e953601c88f76019cd8a36aedfdf74d3576f80119293c82829bb5bd54782982bff68e76c1f13ae2f6bd692351bdcdbfd2f3aec5a887186b880c1fbaf0c8b3c379e74836d34b92fadf53a362d6c2a0b55eeccb29176e48577a72467a78f83a2811a9e11ea7a2d5ccf9743ca5d9f24fcaff84babd63764d677b4463c359fe299aa8ce634d5f36e893351ba206b02def90dce4d5a6b9081cdb582c3aad5bdcf8bf4df5134d5b9dc7e6652c384abaf044760b4b34b68a736c95bd9d9575bb34bacec517c416902af9203159d73f46d7538a88b9f43d1b0dc02737341a1244e3690e844285b342e0910df854f18af4574b2e9b7c54f49ec9c0fd838160d4729728a621c7e5203cf5d128e9bc0f077cfd0810e82e691f826d19982093c982cbad670e7c9c578c3b4e58aa37e09ffdbc277562a4a00b187213a8f8d4acadbaee54cd257b4a9362ae96969b4e449834272d2306a66b090bdba60dd767e1e073370fc90e3bf6ebfe9e04daa83b928101f322ae01521f830b011f96052a0e0af6e5241051018eea60bf13e1af70e8148f5e2267aa15d767b3fe5a4d24eee2a3052c197c6a87d025a551b25a17e88d719ef32ffdb45e167ca1a8131466bcd5291122162ffcbc6552983d2a9f448378b1e0e7e1078136fd1dfd91b5cbda9a406dfd33c15193f0702955ccde066b0ea24a60df7b65e4c825b57f024f81051b35f62054ab3c9d9319edee0aefd8e8b20f9d79b7c2d853338ef6026ca990f20e6c4fb0f2d709d94528d6c78998dc3c2d0dcbacfd72e0c36a2e301cf76448707c91c79945652731a1827d894dfa7ec55bc89af1933c9a35bcd9dc351830fb24aac481468de22641abec7cd19b41b79aa01b4cce712e4d0e8533f80517ca976d33e14fe57a1cb55e07e096450c3c029cb283216cb4b2d3e354a04482e7d78f69ab8093054801f5e1815e0e4aff81452c88924589d7dcdedb5752f93d139a09c48a2ef7ea872d581f5e3f3514447dd00deaf97af31361e12f716722c60e8a921a98e74c0bef017bb05faa3a6d348a4900e63c471e1b13623e88c616e26de9b96e87394f963dc83ab3e9db73111cda35f6215380b120a92137d8c7d0786177858686477548ae7291ad6af7a5963d65d9c25bd5ab8698466182934955e1d549c013604710108066716515efe1830d886230d57e1ccbe08093c2be06770c431ee80246bc9d1d88cbe2cbfd920a193ae959d4d0a9cbfe3396031e60050bff4ea4e9d83e69ae187be82cc99adcb033537074cf4dd3ef0c1cff8f6a0e02f90868a524e739603e1fc181d85f2de812f3198e62cdbe33c4ba327b08ac4c9a69e9f10d58bd1e79157c89a0db0ac243418741fe3235571b30fb1d353eaa2ee14a3633ea830a0be5e0601723b2e2be5bd7d1e9f02a02f2bd669a3e56bb9187b75e38c781af37e399417337978dfa0eae7b7894b801a1ebf8c832c63b8c88ca567d1b242130e2cb5a64a2d75095dd9d3b500da300cc090f38385d39b5f3c89a88f5374bf9406412b9c2df57f9ea5202cc9f22cfeba4ceb5aaa7ef8bf64b398acb6ef3d28e9d7d76cbae71771d1e36dcabf481fc2c07aa01e42654e0611f165af3a476c2dbeb5831206aced53d7f483746cc85981ad116d60a16ab8b5cab96f7daf9b7a79bf0f161156d2471342120ec7b8c4702e76a70afd451d14c6bc785390a2d2b2414a30d924f8a52ac68bcb488b97bf53ba8a808d86b4796aad6af504eca486941d95b7626a6f0bb17c293368ab52646723677459d3d52a512fb170792f2debfa96969c59395b2beac24383cff96025dba1cae37da291319400672d54d07db8f029e7c9bd0e3e35f601e4aeac80f7ac199043f1bdc365d8814b8700744bff16e88351b54e04b34176ea5764362d4f629b194fa26a069d7edf2ba28632829af0d1c794a2bf7f540e5b7b6aa35150dec7bce0874ced1077cdf1a9854f6febd1455f971b28df1773cd4c7720e8a1df099d1ec9cae373deca7030546c002819d2891cf583e415df61aa7020cb1b176d95df74009dcc66f8dd15db504f6df276387df65eae9b13d4ce1eaad3f27c527331358148de983b76e4dbdf8af772cb984b8baaa1580d6727673b37ec7a04a3d0f0d9bd9c6a8a94a05a30daa972c913983bd9eeb971da0a5cb4d1436fb4a44ffa5f5f84e0c271809685fe539b4d074d7598ff35b12d9ccb0efa59cca2b1145189e8f2d8d44d3c3a701def0849ec869cc0235aeac1c1e4b01cc9664abd7ab3e631c91db5ea2481e0256e5626e1a470e0ac10dbdbb60ccddbff1ed1f8580a43711a39233b51e2b2624c0381711443f748b8219109cfefb301935ba542fb065f2225ecac756b57ac1b639d4669acb4aa9031337d5cb2d00b0f100bc0efcef98c2cf20cff87d7426e3fc05e5a69d5d464c8cd5dd2085ed8743821dff586ad34bd37b1be5740b6d94fb9553a1c24bbc4582b8cbb9d6340fe62aa4222d12fb67f7ae63760a40d58b2c66d089120f002a5e982526c6b527dab809bea73a2441cbc8191cc5dac0865617bd84f7ac897ffe70834f2cd11a1ce119c96783cafc4de669593e435ebb9bf31ba227f8864073698b501f6107d0f6d8bafa7aa7bcf6c317d5531ef248b7d52351ab785471b96fc2ef3e3141dc3b44b877ebb3c5158196a65736940d2ec7da69a89706d31b2d15f855f13efd32a4c231a9fc0a081f98356c3ef773f653b214cc1ac77666cdcf0cafb7baa223cd430c621a6b0cfa41331c010ebd7df94ce97ac553a11ad8eeaeb92552c0fc6e2ddc71b7902ee94cfbad5d47825b4a79419b38faac584b0eed19e0cfca3a909f61eee5cdfb9662c23869344a366373529d9672d24714075b252259bb7a893b9c17d9a903dc8a6cfb20240bb1ebd571732e06bef49117879ff4ff3948aaef7ca4a530bb6007450a76d249c8a7b3a7b66274e5a7f674c127a541b3abc50312ede6fdf8c12cd99e189bbbf51813b3b86f2cfcd197af71f5002db5578dffb91ee6dc91344ee2d3f776b568a8a4ba07ded4273a1a477bd0815403ba4f36671b2e8023f089daa4265986ac6fd558374d7e8fce1abfe9a60550fde908a4370dc5fb09b9950fce23171c941cdb69a6b7de1ac7440f1bf554802cc1f26cbf5d530f197e8bb6f85a37a313a2f7e8742f6d5c64748e91e2fa9cedc4ef11640ce19cbc1ded6389ee9a243ab59e05530cca56b1fc995b56c8a4608fb1c04728c3348ee34976ab3868b373834814c35a2211f28e49b9fb84854dcff7d8804291cd71520e68ab4ea3a3e44648132576e86fc2752c260b6218b0ae406baca8ac392e060e2a7c636048b8f58e2118f344b83d2b93636698f837c373fd83ba173a9abc2f76abd8ef25d214ac4fa930ac4a4207234608d5e4b19d178a66a058ff134ee8a7253d56fba54146fb613538151ef008259fc05961dedf9c8ce6464e520cfce34ed3975cdf879f1188a4a07008badfdbcc0c50e4fd42617a232fde8f6115c63b3c85e60f5c938f43d47d3033f1d783f355b489a316ad43815202dea9e6be250e7c855e9b51a7336414a498e7dd0ea999792094200441159ebaa4fbb11c5bd46fbc7201641056ae633abecb9cac118a44c4333c6142b394a33e0724ae110372134764c38aa7d7d8064cedfed1157bffff04f3ad48d1fcd9dcae809e93221290d92f9cafbcc57d410e7e99e6de6ee1157d683c719dcf0106bb8b4ca23874287711f8a61caf02a0c1d0d75077f0a5475ea67e0b4c2d5c1d3c81194d6730c0a1497b4fde35857a89f2488781abaacfd15d07805accf3c9709ae94d60225cdd56d2abcd38a2ae406fd790b966846eda0e0204f6f29bf679dc6936b10aa9a09dbe125ddb752b37b19e86b05cf7274534d9be7ae53464ba2696adc6bfb4fe8447ac16ba6a70d319c717372e35786c555656838d45ba03de596c672d1a29f586c0d5a2e0973f1bade9a940e3c1c1b18fcde7c57b178a9cd8a81f72a3b7baeb9d8f08d0d797d35cbafcf9abfedad11ac7a609779170a3d9381949cac2933ab2dde27988e19bb1019aac6beb7400e9463c98851f5b2fe18949182c35e57efe4ba71597a449fc5b85e848f769ba3f0e84c6fbce4a891486efc6aa87361fa0cf28f8434704dff87c73f77bffc110c751609cb7a9011be07bf430e7934a9098e33e545708ff6315aad73054022990777e8915a19593fe3f20af4b9678335b9e4d10aba974ca217ba2cb8b1c4bf115866a3b45fadfb535a3e44b0ff95ea601170d50165873b25590229b606f77eda927f4fd13a337b44c5a2aca44e896a3b4047bc6be624339c260dd06e355f88dffc1ba99fe4190b16eecf81418e04b137403a04122a59422f2010d99f96c27634710e7fedd65030c268c11766358408b0e01b98af185db17e426cf3f2aef4cbdef672c128fec9c12f2022fe115dbb1fa9618fcaa52886ce4dbdd3145a99fb68f60a44a9af7c89fdc788d38bcc8abdd9aa7c153bca5ca6dd191fdd80197ae729d730d9fa04e74333609d395c555f455dc7fa165f482af487230a89038b9be3891b93a7fb1ad356c8667af8748a6316acdb4dd19a6fd3e18b78ca45bdfa1ec68591aac064dc5e3081b483cc7c0179848dd0a52ed9afbe7345b0503d969b599eba72d92c2b81ff7b58b32b05d1654e10a513b095a51da6a75e371750cd90ab4b0376d1a98ea90cc645820c4fcd380bfcf2f3efa6b6b37bc53fe8ce4083fd5a766fb707b2ae585fc540f183665c7c09019fe130c1f7c36897bcd76a76f2b3d7a8f6eb0866e0ee14819586dae3a9d88974669c8096cb2e3659f7caa312dcdcacf2c95cc57ca8c784a5de80c667a09edc9125a372b9fd81a009977744bd9e3b9c257dc7578dc2b52bf420f5235d7101ae1794520adb07d92c7fd24c1cae52061b1dfc9dd58e7a28d07ce93a21231d940d5e41e00a78626d744e9a682c3256f819dab14fcc351d092bb88a1cc1384227a391287f9d9c4fe810cf7d813c4a0bf3c176969a46bb38a42a4f8503b71081a4158d48c3010c1170f28f71890ed978d7a671a9ad8a9927ff36ffe7412a224486f82f81bc5ba3b3484159695d3c38087ffdca0d4a59935b15617618992613f1829345d78127dcb414df9beb99f3ad1d627388db32617f9231f7e3dc827a161b413d42e43733c4d2c612481dbb94aa51df37115363b72a36af484170e69a24546be15d2a0a96ca8ed220c7d5fe909f06376052c697b2f2a6d3d2d0ccff385c24d4bfa5d55de2f03ddb12dd73626116501ff579f68bc5cc0406a2edaff26f1bbfb0c13bc65d2da034a3af9fc9a70d357eb78f75554c25b327def67115233bb8ffe0b6f3842d6507ff7ab009d1aaf94151bd0ecc69585997a0362c44301bbb989f6a381e3d91b1a5046298b272908dbb9c1c879ea8db6bfd26e5c6baf6eb818363dced524cf67e2508fbe0c278b187e71d624d7dc02b7cbf7f1279c30eec29", 0x2000, &(0x7f0000006ac0)={&(0x7f0000000500)={0x50, 0x0, 0xe, {0x7, 0x2b, 0x2, 0x20059022, 0x9, 0x5, 0x5, 0x0, 0x0, 0x0, 0x80, 0xb9}}, &(0x7f0000000580)={0x18, 0x0, 0xa, {0xfffffffffffffff8}}, &(0x7f00000005c0)={0x18, 0xfffffffffffffff5, 0x95, {0x8}}, &(0x7f0000000600)={0x18, 0x0, 0x8000000000000000, {0x3}}, &(0x7f00000006c0)={0x18, 0x0, 0x9, {0x3}}, &(0x7f0000000700)={0x28, 0xffffffffffffffda, 0x1ea7cda, {{0x8511, 0x4, 0x1, r3}}}, &(0x7f0000000c00)={0x60, 0x0, 0x81, {{0x7, 0xc, 0x4, 0x80, 0x5d9398cf, 0x6, 0x54, 0x8}}}, &(0x7f0000000740)={0x18, 0x0, 0x6, {0x6}}, &(0x7f0000000c80)={0x18, 0xfffffffffffffff5, 0x80, {'overlay\x00'}}, &(0x7f0000001d00)={0x20, 0x0, 0x7, {0x0, 0x1a}}, &(0x7f0000001d80)={0x78, 0xfffffffffffffffe, 0x2, {0x63, 0x9, 0x0, {0x6, 0xc, 0xffffffffffff2248, 0x1, 0x3, 0x3, 0x2, 0x3, 0x1, 0xa000, 0x2, 0x0, 0x0, 0xa689, 0xa}}}, &(0x7f0000001e00)={0x90, 0xfffffffffffffff5, 0x8, {0x3, 0x0, 0xfb3, 0x8, 0x1, 0xffff, {0x6, 0xf, 0x400, 0x6, 0x7, 0x40, 0xfffffff9, 0xe27, 0x2, 0x6000, 0x0, 0x0, 0x0, 0x183, 0x8}}}, &(0x7f0000001ec0)={0x48, 0xfffffffffffffff5, 0x9, [{0x4, 0x1000, 0x0, 0x7}, {0x2, 0x4, 0x1, 0x6, '\x00'}]}, &(0x7f00000062c0)={0x5a0, 0x0, 0x4, [{{0x0, 0x3, 0x7, 0x5, 0x96b5, 0x3dc8, {0x6, 0x8001, 0xe8dd, 0x4, 0x1ff, 0x5, 0x2, 0x0, 0x651, 0x2000, 0x4, r4, 0x0, 0xbd, 0x7fff}}, {0x6, 0x0, 0x1, 0xffffffff, '{'}}, {{0x2, 0x1, 0x47d7101b, 0x401, 0x9, 0x1, {0x6, 0x8000000000000001, 0x3, 0x6, 0x7, 0x80000001, 0x2, 0x3, 0x2, 0x2000, 0x5, r4, 0x0, 0x30, 0x5}}, {0x2, 0x227, 0x0, 0x2}}, {{0x2, 0x3, 0x800, 0x400, 0x1, 0x8, {0x5, 0x3ff, 0x800, 0x8, 0x8000, 0xfffffffffffffff9, 0x3, 0x0, 0x7, 0x1000, 0x81, r4, 0x0, 0x6, 0xe68aacba}}, {0x1, 0xffff, 0x0, 0x9}}, {{0x4, 0x0, 0x9, 0x1, 0x1, 0x8, {0x0, 0x8, 0xcfb, 0x8, 0x3, 0x3, 0x7, 0x1, 0x80, 0x8000, 0xfffff101, r4, 0x0, 0x49, 0xa}}, {0x1, 0xe434, 0x9, 0xf933, '+$%@[Q[/\\'}}, {{0x3, 0x3, 0x800, 0x5, 0x7, 0x6, {0x1, 0x9, 0x7, 0xa2, 0x100, 0xfffffffffffffffb, 0xe2d6, 0x1, 0x0, 0xc000, 0xf46, r4, 0x0, 0x3f42123a, 0x2}}, {0x5, 0xffffffffffffffff, 0x0, 0xd}}, {{0x2, 0x2, 0x9, 0x8, 0x1ff, 0x3, {0x1, 0x80000000, 0x8, 0x9, 0x5, 0x4, 0x180, 0x2, 0x7ff, 0xa000, 0x1, r4, 0x0, 0x6, 0x1000}}, {0x0, 0x1, 0x4, 0xe00, 'GPL\x00'}}, {{0x2, 0x0, 0x2, 0x7ff, 0x7, 0x0, {0x3, 0x43, 0x5, 0x8, 0x100000000, 0x3, 0x5, 0xd5e2, 0x1, 0xa000, 0x7, r4, 0x0, 0x0, 0xa5a}}, {0x5, 0x9, 0x8, 0xd, '*).\'!]!\''}}, {{0x0, 0x0, 0x81, 0x81, 0x1, 0x2, {0x6, 0x1, 0x7ff, 0x0, 0x0, 0x0, 0x1, 0x8b, 0x7cd, 0x4000, 0x80000001, r4, r9, 0x3, 0x2}}, {0x1, 0x2, 0x3, 0x3ff, '!\\&'}}, {{0x5, 0x3, 0x8, 0x20000000000000, 0x31, 0x8, {0x2, 0xfffffffffffffffc, 0x9, 0x11d, 0xbc00, 0x0, 0x95e6, 0x7, 0x2, 0x4000, 0x1, r8, r10, 0x4, 0x1}}, {0x5, 0x8, 0x2, 0x50, ':['}}]}, &(0x7f0000002180)={0xa0, 0x0, 0x380000000000, {{0x1, 0x1, 0x9, 0x6, 0x0, 0x3, {0x6, 0x2, 0x80, 0x5, 0x5, 0x4ce, 0x4, 0x278c, 0xfffffffa, 0x455809e8be75894a, 0x9, r4, r11, 0x9, 0x5}}, {0x0, 0xc}}}, &(0x7f0000006880)={0x20, 0xffffffffffffffda, 0x7, {0x3, 0x0, 0x7fffffff, 0x8}}, &(0x7f0000006980)={0x130, 0x0, 0x7, {0x0, 0x5, 0x0, '\x00', {0x800, 0xffff640d, 0x8, 0x1, r4, r12, 0xa000, '\x00', 0xfce, 0x8, 0x7fffffff, 0x2, {0xd223, 0x9}, {0xfa2, 0x6d95}, {0x8, 0x8}, {0x0, 0x1}, 0xfffffff4, 0x1, 0x0, 0x1}}}})
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r7, 0x8, 0x0, 0xf, 0x10, 0x0, 0x0, 0x0, r5}, 0x94)
ppoll(&(0x7f0000000000)=[{r13, 0xc005}, {r13, 0x2}, {r13, 0x2000}, {r13, 0xa2c6}, {r13, 0x32a}, {r13, 0x4000}, {r13, 0x280}], 0x7, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000080)={[0x23b]}, 0x8)

2m51.029280518s ago: executing program 3 (id=264):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
close(0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d000000060000000400000001000000000000", @ANYRES32], 0x50)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = semget$private(0x0, 0x6, 0x0)
semctl$IPC_RMID(r3, 0x0, 0x0)
sendmsg$NFT_BATCH(r2, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
openat(0xffffffffffffffff, 0x0, 0x1, 0x10)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x11, 0x1, 0x1, "a5ee5c0cf30f000080df48cd09ea4f1922fc336300000000008000", 0x33363248})
landlock_restrict_self(0xffffffffffffffff, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000001850000002c00000095000000000000004495e980d4ab43a654dbda1289491fde9751ca443daaa97c18e213"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70)
r7 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff)
keyctl$read(0xb, r7, &(0x7f0000003140)=""/4083, 0xff3)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000100001010000000000008000be7e8533", @ANYRES32=0x0, @ANYBLOB="00000000042004001c002b8008000800", @ANYRES32=r5, @ANYBLOB="080003001900000008000100", @ANYRES32=r6, @ANYBLOB="08001b"], 0x44}}, 0x20000000)
ioctl$SNDCTL_SEQ_CTRLRATE(0xffffffffffffffff, 0xc0045103, &(0x7f0000000080)=0x6)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000000), 0x90)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x74, r8, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x3a}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_TOKEN={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x20008011}, 0x4000)

2m49.876541382s ago: executing program 0 (id=266):
syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0xfffffffd, 0x15f}, &(0x7f00000006c0)=<r0=>0x0, &(0x7f00000001c0))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xffffeffc, 0x0, 0x4)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="5c00000013006bec9e3be35c6e17aa31076b87511d0000007ea60864160af3653c000cc004000202080003000300000007002100eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000340)=0x1)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5})
r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000340)={0x569, 0x1000, 0x49c35, 0x2, 0x6d})
connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @remote}, 0x10)
sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
syz_emit_ethernet(0x36, &(0x7f00000008c0)=ANY=[@ANYBLOB="74a2e3c6f3b45886859fcd717e54a6482faaaaaaaaaaaa429e82217abd6a080000000000000000000000000000000000002300000115c2aefa63e71585b4a86f54613b0333910c6133a9972db6fc00f960acc4d1acdab6eb3e2afeb755f8cfbe9d01aad49fdfa70b3a2db22eec2e0000000000000000edad0870ec5fe9d1d6556188fe5a8c7df2cf3b830046ec2d27672b809b454540d8eb699f51847bef8a72f4d1eba5135acf86b5c7d1a4d0136b34b4589b60ca9370393a016c95dd5beb"], 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000880), 0x88000, 0x0)
preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0xffff0000, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000100)={0x4, 0xd6, "ae50e74ba166ea39b2fe57d6c4671314f7e8a03e7e5243a96c75fb36caec7363d79c4dc9fbd8c17c7ce933d30c971a484b143eab4b1a95a3754f19595ca86bc1ac3a591757ea6081c1e110690aee705a119c00b68985398b422dc055bd01e41276899cc9a29edabda26d1c837df1fe520314251b6e09a992a74588d56e498c8bb05381644fe702340f877a522db842942ba084287e7f4910b751d3817fb021454fe4f7129d14222ff464ea8fb09335b98cd716c8781f8cc3df7f36c50915fad36fdac2d011735afa27f9ea66a8d86525be74ef7cdd1f"})

2m49.792041296s ago: executing program 3 (id=268):
syz_emit_ethernet(0xb2, &(0x7f00000194c0)={@random="f8e3db69e540", @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x7c, 0x6, 0x0, @remote, @local, {[@hopopts={0x2c, 0x1, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1]}, @dstopts={0x6c, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x40}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @dstopts={0x87, 0x6, '\x00', [@calipso={0x7, 0x28, {0x0, 0x8, 0x3, 0x0, [0xd, 0x4, 0x5, 0x6]}}, @enc_lim={0x4, 0x1, 0x2}, @pad1]}], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x18, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000055090100000000009500000000000000181100000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ff0300007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'gretap0\x00'})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x4008080)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}], 0x1, &(0x7f0000000040)}, 0x8010)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x80, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01')
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8)
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd28, 0x0, {{@in, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@loopback, 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x20008080)
connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

2m49.011593508s ago: executing program 3 (id=271):
r0 = socket(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6)
r6 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r6)
socket$inet_tcp(0x2, 0x1, 0x0)
r7 = socket(0x10, 0x3, 0x0)
bind$netlink(r7, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
write(r7, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
connect$netlink(r7, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc)
setsockopt$sock_int(r7, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4)
write(r7, &(0x7f0000000000)='\"', 0x1)
recvmmsg(r7, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x24}}, 0x1)
r8 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000000180))
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000252d010034001280090001007866726d0000000024000280080001000000000008000200030000e40800010001000000080001000100000008000300", @ANYRES32=r11], 0x5c}, 0x1, 0x0, 0x0, 0x85}, 0x4000000)

2m42.901955916s ago: executing program 3 (id=276):
fchdir(0xffffffffffffffff)
socket$inet6_udp(0xa, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r0, 0x0, 0x0)
r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000000)={0x4000000, 0xff92, 0x0, 0x1, 0x80000000})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)

2m42.635265641s ago: executing program 0 (id=277):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
setxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSPGRP(r4, 0x5410, 0xfffffffffffffffe)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000380)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10, 0x80000)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f000030e000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/233, 0xe9, 0x1, &(0x7f0000000240)=""/65, 0x41}, &(0x7f0000000300)=0x40)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
open_by_handle_at(r3, 0x0, 0x101040)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x20, 0x20, 0x20, 0x5, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x4, 0x2}]}, @func={0x2, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x0, 0x5f, 0x0]}}, 0x0, 0x3d, 0x0, 0x1}, 0x28)
socket$pppl2tp(0x18, 0x1, 0x1)
bind$unix(r3, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x0, 0x9c3fa077fa966179, 0x0, 0x25dfdbfc, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054)
ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000))
write$UHID_INPUT(r0, &(0x7f0000001040)={0xc, {"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", 0x1022}}, 0x1006)

2m41.573111236s ago: executing program 0 (id=278):
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
getpid()
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x401, 0x181, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3fd, 0x4000009, 0x200, 0xe2df, 0x9, 0x1, 0x4, 0x40000, 0x7, 0xf58, 0x6]})
bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58)
ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x1, 0x80000000})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000001000084000000000001000002000000000000050000000000000006020000000000"], 0x0, 0x3e}, 0x20)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x50)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/devices\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r4 = dup(r3)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r4)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400080000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a310000000005000100ecffffff330007801800018014000240fe8000000000000080000000000000bb060004400e1f0000050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
r5 = syz_open_procfs(0x0, &(0x7f0000019340)='net/dev\x00')
read$msr(r5, &(0x7f0000019080)=""/166, 0xa6)

2m27.54685589s ago: executing program 32 (id=276):
fchdir(0xffffffffffffffff)
socket$inet6_udp(0xa, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r0, 0x0, 0x0)
r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000000)={0x4000000, 0xff92, 0x0, 0x1, 0x80000000})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)

2m26.510546639s ago: executing program 33 (id=278):
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
getpid()
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x401, 0x181, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3fd, 0x4000009, 0x200, 0xe2df, 0x9, 0x1, 0x4, 0x40000, 0x7, 0xf58, 0x6]})
bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58)
ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x1, 0x80000000})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000001000084000000000001000002000000000000050000000000000006020000000000"], 0x0, 0x3e}, 0x20)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x50)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/devices\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r4 = dup(r3)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r4)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400080000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a310000000005000100ecffffff330007801800018014000240fe8000000000000080000000000000bb060004400e1f0000050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
r5 = syz_open_procfs(0x0, &(0x7f0000019340)='net/dev\x00')
read$msr(r5, &(0x7f0000019080)=""/166, 0xa6)

12.142480147s ago: executing program 2 (id=693):
r0 = socket$kcm(0x10, 0x2, 0x0)
socket$inet(0x2, 0x80803, 0x6)
rseq(&(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x8000, 0x5}, 0x4}, 0x20, 0x1, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000600)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$uinput_user_dev(r4, &(0x7f0000000080)={'syz1\x00', {0xf9e, 0x3, 0x4}, 0xc, [0x8, 0x6, 0x9, 0xfffffff7, 0x2, 0xfffffffc, 0x7fffffff, 0x80000001, 0x6, 0x1, 0xfd, 0x0, 0x7, 0x7, 0xf70, 0x3c00, 0xe7, 0x4007, 0x401, 0xbc5e, 0x4, 0x5, 0x8, 0xffff, 0x11, 0x12, 0x14, 0x20000000, 0x15098855, 0x6, 0x2, 0xfffffffb, 0x7fffffff, 0xc, 0xfffffff7, 0x4, 0xe79, 0x7, 0x1, 0x1, 0x1, 0x40000000, 0x401, 0x9, 0xbdc7, 0xb, 0x1, 0x9, 0x3, 0x1, 0x6, 0x2, 0x5, 0x49, 0x5, 0x9, 0x0, 0x1, 0x1000, 0x3, 0x4, 0x6, 0x7ff, 0xb8547353], [0x4, 0xffffffff, 0x1, 0x5, 0x7ffffdff, 0x1, 0x550, 0x6, 0x2, 0xfffffffc, 0x1, 0xc, 0x36, 0x4, 0x81, 0x1, 0x9, 0x98, 0x8, 0xe56d, 0xa3, 0x9, 0x7, 0x8, 0x100000, 0xd, 0x2, 0xfffffffe, 0x6e38, 0x0, 0xa, 0x6, 0x3, 0x0, 0x5, 0x7, 0x4, 0xd, 0x80, 0xfff, 0x1000004, 0x0, 0x825eb91, 0x1, 0x8, 0x1, 0x8, 0xb, 0x34f1, 0x1ff, 0x7, 0x1b2c5a97, 0x0, 0x9, 0x17, 0x0, 0x1, 0x1, 0x6, 0x6, 0xac, 0x0, 0x56, 0xcfb9], [0x3, 0xdb8, 0x9, 0xf, 0x2, 0x200006, 0x4000005, 0x5, 0x2, 0x80, 0xfffffffd, 0xc8d3, 0x31, 0x9a45, 0x0, 0xee40000, 0x1, 0x1, 0x4, 0x69d, 0xe, 0xffff, 0x1, 0x0, 0x40000007, 0x9, 0x4, 0x800, 0x7, 0x9, 0x10000, 0xfffffffd, 0x1, 0xfffffffe, 0x2, 0x0, 0x4, 0x8be, 0x9, 0x2, 0x8, 0x7, 0x6, 0x2, 0x81, 0x400, 0x1, 0x55f2, 0xdf46, 0xfffffffd, 0x7f, 0x9, 0x8000, 0x40, 0x3, 0x10002, 0xa, 0x6, 0x2, 0xfffffefe, 0xda15, 0xa, 0xffffffff, 0x10], [0x0, 0x5, 0x8, 0x246d, 0x6, 0x101, 0x7fffffff, 0x5, 0x6, 0x1, 0x1, 0x9, 0x10000, 0x2, 0xb, 0x2, 0x7, 0x1, 0x7, 0x8, 0x9, 0x1, 0x6, 0x2, 0x0, 0x208, 0xfffffffd, 0xa15, 0x61c8, 0x6, 0x7ff, 0x101, 0xff, 0x7, 0x10000009, 0x10000006, 0x7, 0x101, 0x9, 0x3000000, 0x9, 0x4000006, 0x7, 0xfffffffd, 0x0, 0x1, 0x4, 0x10000b, 0x100, 0x8, 0x3c, 0x1000, 0x3, 0x1, 0x2015, 0x8000, 0x7, 0x7d, 0x8, 0x7, 0xfffdfffc, 0xb, 0x6, 0xeff]}, 0x45c)
ioctl$UI_DEV_SETUP(r4, 0x405c5503, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = signalfd4(r1, &(0x7f0000000500)={[0x6]}, 0x8, 0x100000)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0), 0xc)
r6 = syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0x2000e7b3, 0x13500}, &(0x7f0000000280), &(0x7f0000001880))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r6, 0x21, &(0x7f0000000440)=r5, 0x1)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c030002000000053582c137153e370248078000f01700d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000)
add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r7 = userfaultfd(0x80001)
ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_REGISTER(r7, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2})
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x4a, &(0x7f0000000080)=0x474c, 0x4)
socket$inet_mptcp(0x2, 0x1, 0x106)
openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0)
timer_create(0xfffffffd, 0x0, 0x0)
r8 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101, 0x0)
ioctl$SOUND_MIXER_WRITE_VOLUME(r8, 0xc0040d07, &(0x7f0000000040)=0x121)
sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000000000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)

8.611781735s ago: executing program 2 (id=702):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000acc000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000009e000c0046723040dcf851353d80428b66c4a5c76fdd086344be5b4b365b030000000000000098b7647dd42e1f003e993562f77b29872355e30839152ef602e4e7b1a25f4123ba0b4f5889c3681c221c0b96e521524250432d6063a60098490ece73ddd10f0030be88fed0a90e3ad8f6863296818bb85f56f7ce8ea7f57bd1a124d9398abb1f83e8205bc2cc80e9577a02dd7f0018c1ac994fbb855ea542000014000000110001"], 0xf4}, 0x1, 0x0, 0x0, 0x4040854}, 0x24000840)

8.522799726s ago: executing program 2 (id=703):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000000c0)={0x18, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x18, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="200103"], 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x1, 0xff, 0x5, &(0x7f0000000000)={0x10, "a8e472bc300c8b798f2dfb038883084f2908b549ef086aeb29a5ad04544f3be5be"}})

7.701368228s ago: executing program 4 (id=711):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0)
getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d)
syz_usb_connect(0x0, 0x5f, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x202)
ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x2279, 0x0)
r4 = pidfd_getfd(r0, r1, 0x0)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x3c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0)
r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$6lowpan_control(r5, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b)
ioctl$SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0xffe, 0x0, 0x0)
write$6lowpan_control(r5, &(0x7f0000000300)='connect aa:aa:aa:aa:aa:11 1', 0x1b)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f00000006c0)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000340, 0x200000000370, 0x2000000003a0], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff00000000199b6a8994bb02671379b252b4e908f52d8a78ae81a4920053f0432fcd6ab7803c2b343a18dab88938f7f2131caa976ffcf064b8a26611b8dc4a3b92ad608a6871751c641c"]}, 0x14d)
sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x20, r6, 0x1, 0x0, 0x25dfdbff, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}]}, 0x20}}, 0x0)
syz_emit_ethernet(0x7a, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00442f00fe8000000000000000000000000000bb00000000000000000000ffff000000002421880b"], 0x0)

5.612512218s ago: executing program 5 (id=717):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = syz_io_uring_setup(0x8d2, &(0x7f0000000240)={0x0, 0x0, 0x1000, 0x6}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044})
io_uring_enter(r1, 0x2afd, 0x308b, 0xc, 0x0, 0x0)

4.967545431s ago: executing program 2 (id=718):
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0xaa, 0x210000, 0x1, 0xa, 0x0, 0x78}, 0x1c)
close(0xffffffffffffffff)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xc, 0x0, 0x3}, 0x0)
r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000140)={0x0})
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f00000002c0)={0x0, 0x0, 0x0})
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x0, 0x7f}, 0x2c)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, &(0x7f00000002c0))
getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, 0x0, &(0x7f0000000080))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r6=>0x0})
sendto$packet(r5, &(0x7f00000002c0)="0503162ed3fc140820004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @multicast}, 0x14)

4.579147726s ago: executing program 5 (id=719):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0)
ioctl$FBIOPAN_DISPLAY(r2, 0x4606, &(0x7f0000000200)={0x190, 0x640, 0x3c0, 0x280, 0x0, 0xc0e2, 0x18, 0x1, {0x5, 0x2008001}, {0x0, 0x7}, {0xed87, 0x2000}, {0x29, 0x10001}, 0x1, 0x80, 0x7e, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x8, 0xd, 0x7fff, 0x0, 0x0, 0x3, 0x5})
r3 = inotify_init1(0x800)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r4, 0x0, 0x17, 0x0, 0x0)
inotify_rm_watch(r3, 0x0)
syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
lseek(r5, 0x8, 0x1)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xe, 0xffff}, {0x9, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0x6c}, @TCA_CAKE_FLOW_MODE={0x8}]}}]}, 0x44}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000)
syz_open_procfs(0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000200)='./mnt\x00', 0x4)
r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_SET_ABSBIT(r7, 0x40045567, 0x0)
ioctl$UI_ABS_SETUP(r7, 0x401c5504, 0x0)
ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x3)
write$uinput_user_dev(r7, &(0x7f0000001740)={'syz0\x00', {0x8000}, 0x0, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0xc0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x1000, 0x10], [0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8001, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x400, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000], [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x681, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2]}, 0x45c)
ioctl$UI_DEV_CREATE(r7, 0x5501)
madvise(&(0x7f0000bde000/0x2000)=nil, 0x2000, 0xa)
syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0)

4.429836561s ago: executing program 1 (id=720):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0xfffe, 0x60}, 'syz0\x00', 0x19})
write$uinput_user_dev(r0, &(0x7f0000000e80)={'syz0\x00', {0x3f, 0x9, 0x8, 0xe}, 0x200012, [0x3, 0x8, 0x76f, 0x3, 0x8001, 0x7, 0xf, 0xfffffffd, 0x3, 0xc, 0x9, 0x1, 0x8, 0x9, 0xab47, 0xb0c, 0x8, 0x1417d221, 0x7, 0x7b, 0x5, 0xbc2f, 0x4, 0xfffffffe, 0xfffffffe, 0x3, 0xa, 0x12, 0x8, 0xd2f1, 0x7, 0x7, 0x3, 0x3, 0x3, 0x2, 0x1ff, 0x47f2, 0x80000000, 0x4, 0xfffffffd, 0x7, 0x5, 0x29e, 0x2, 0x2, 0x9, 0xdf26, 0x1, 0x40, 0x4, 0x8, 0x80, 0x3, 0x9, 0x1a, 0x17ca, 0x5, 0x5, 0x9, 0x8000, 0x80000000, 0xcd, 0xfff], [0x80000000, 0x227, 0x1ff, 0x7, 0x8, 0x5, 0x81, 0x45, 0xc322, 0x6000, 0x7, 0x2, 0xf0, 0x1, 0x4, 0x8001, 0x801, 0x7, 0xa, 0xb, 0x9e, 0xd9, 0x0, 0x1, 0x2, 0xa, 0x0, 0x5, 0x2, 0x101, 0xfff, 0xfff, 0x1, 0x403, 0x5, 0x0, 0x1020, 0x5, 0x10, 0x4, 0x7fffffff, 0x3ea1, 0xffbffffa, 0x2, 0xfffffff9, 0x1, 0x6, 0x3fc, 0x2243ccfc, 0x8455, 0x0, 0xc2, 0xffffffa8, 0xdc9b, 0x0, 0x1553e2a8, 0xff, 0x80000005, 0x1, 0x4, 0x2, 0xd5c, 0x6, 0x8], [0x1, 0x7fff, 0x1, 0x0, 0x9, 0x3, 0x8, 0x7ffffffc, 0x2, 0x7, 0x6, 0x0, 0x4, 0x440, 0x7, 0x2, 0x7, 0x8, 0xe2, 0x80000001, 0x7fffffff, 0x7, 0x401, 0x4, 0xc7, 0x4, 0x2, 0x1, 0x2, 0x80000001, 0x1, 0x10001, 0x4f68, 0x5, 0x10001, 0x5, 0xc, 0x3, 0x10003, 0x7, 0x9, 0x1, 0xc0c, 0xcd, 0x9, 0x2, 0x401, 0x0, 0xd, 0x9, 0x0, 0x10, 0x7ff, 0x0, 0x7, 0x8a, 0x5, 0x2, 0xf53e, 0x2, 0x5, 0x7f, 0xf, 0x3], [0xc51, 0x2, 0x8, 0x1, 0x9, 0x3, 0x7fff, 0x10000, 0x1, 0x406, 0x200, 0x40, 0x5, 0x40000000, 0x9, 0x8, 0x3, 0x10, 0x6, 0xd2, 0x8, 0x7, 0x400, 0x4, 0xb, 0x9, 0x1, 0x9, 0x0, 0x2, 0x1, 0x7fffffff, 0x6, 0x2, 0x3, 0xfff, 0xe79, 0x2, 0xe0, 0x2, 0x3ff, 0xfffffffa, 0x6, 0xa, 0x100, 0x9, 0x3ff, 0x8e6, 0x3, 0x200, 0x9, 0x2, 0x9, 0x0, 0xb7, 0xc, 0x0, 0x9, 0x4, 0x4, 0x3, 0xcd87, 0x8001, 0x9]}, 0x45c)

4.268952971s ago: executing program 4 (id=722):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x802}, 0x1c)

4.154235405s ago: executing program 1 (id=723):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$cec(0x0, 0x0, 0x416400)
r2 = socket(0x15, 0x5, 0x0)
getsockopt(r2, 0x200000000114, 0x271b, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
timerfd_create(0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
chdir(&(0x7f0000000540)='./cgroup\x00')
fchmodat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/file0\x00', 0xfffffe92)
mkdir(&(0x7f00000003c0)='./file0\x00', 0xffe9)
pread64(0xffffffffffffffff, &(0x7f0000000340)=""/251, 0xfb, 0xacab)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000)
r7 = socket(0x10, 0x803, 0x0)
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newtfilter={0xa4, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x78, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a0, 0xd5}}, @TCA_U32_ACT={0x60, 0x7, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xa}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4cc0, 0x3, 0x4, 0x7, 0x400000}, 0xc}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x81}, 0x800)
ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003)

3.895805792s ago: executing program 6 (id=724):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430)
r2 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0)
r3 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
recvfrom$packet(0xffffffffffffffff, &(0x7f0000000400)=""/179, 0xb3, 0x40000000, &(0x7f0000000100)={0x11, 0x16, 0x0, 0x1, 0xff, 0x6, @random="89633880f135"}, 0x14)
listen(r3, 0x8)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
fsmount(r2, 0x0, 0xf)
fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f00000004c0), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r5, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, 0x0, 0x400c044)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
cachestat(r5, &(0x7f0000000040), 0x0, 0x0)

3.81438699s ago: executing program 4 (id=725):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x8000)

3.457081753s ago: executing program 4 (id=726):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f00000000c0)="b2", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c)
shutdown(r0, 0x1)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000440)={&(0x7f000047b000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/186, 0xba, 0x1, 0x0}, &(0x7f0000000340)=0x40)

2.879657513s ago: executing program 4 (id=727):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket$packet(0x11, 0x3, 0x300)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socket(0x10, 0x3, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22, 0x400}, 0x48)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x5)
open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0)
landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0)
syz_io_uring_setup(0x416f, &(0x7f0000000780)={0x0, 0xfffffffd, 0x10100, 0x200, 0x1}, 0x0, 0x0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000))
sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)

2.55017427s ago: executing program 5 (id=728):
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x541b, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000b, 0x11, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r2 = syz_open_dev$sg(&(0x7f0000000080), 0xffff0000, 0x40)
ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
io_uring_enter(0xffffffffffffffff, 0xeb6, 0x26f7, 0x1c, &(0x7f0000000100)={[0x1]}, 0x8)
r3 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x40000, 0x0)
setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f00000011c0), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94)
r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000300))
sched_getattr(0x0, &(0x7f0000000040)={0x38}, 0x38, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x8000, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/stat\x00', 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
getdents64(r5, &(0x7f0000001f00)=""/4093, 0xffd)
syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYRESHEX=0x0], 0x0)

2.357446927s ago: executing program 6 (id=729):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)

2.27993626s ago: executing program 4 (id=730):
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xe82e, 0x100)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e21, 0x82, @rand_addr=' \x01\x00', 0x5}}, 0xb, 0xdb06, 0x9, 0x8000, 0x8, 0x1, 0x3}, &(0x7f0000000280)=0x9c)
execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48)
mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r4, 0x0)
mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)
r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0xf39, 0x7fff, 0x6, 0x400, 0xffffffffffffffff, 0x6, '\x00', 0x0, r8, 0x2, 0x1, 0x0, 0xc}, 0x50)
fsmount(r6, 0x0, 0x80)
socket(0x9, 0x4, 0x1)
sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x3, 0x0, {0x2b, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x4000)

2.162204461s ago: executing program 2 (id=731):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000bc0)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x1, @local, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000002700)="89", 0x1}], 0x1}}], 0x1, 0x24040040)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x9, 0x80000000, 0xd7c7}, &(0x7f0000000140)=0x10)

1.991891794s ago: executing program 6 (id=732):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020605000000000000000000070000000c0007800800124000080c8f0500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x20000880}, 0x20004000)

1.970708568s ago: executing program 2 (id=733):
r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000002c0)={0x18, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x8000000000000001)
r2 = fsopen(&(0x7f0000000100)='9p\x00', 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_int(r3, 0x1, 0x31, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333, 0x0, r1}, &(0x7f00000006c0)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd_index=0x4, 0x0, 0x0})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
bpf$LINK_DETACH(0x22, &(0x7f0000000000)=r6, 0x4)
syz_usb_disconnect(r0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000001900)={0x8, 0x0, [{0x7004, 0xf0, &(0x7f0000000000)=""/240}, {0x1, 0xa5, &(0x7f0000000340)=""/165}, {0x2000, 0xe0, &(0x7f0000000400)=""/224}, {0xdddd1000, 0xd6, &(0x7f0000000500)=""/214}, {0xf000, 0x3d, &(0x7f0000000100)=""/61}, {0xeeef0000, 0x1000, &(0x7f0000000800)=""/4096}, {0x5000, 0xfc, &(0x7f0000001800)=""/252}, {0x4, 0x65, &(0x7f0000000240)=""/101}]})

1.885570337s ago: executing program 1 (id=734):
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x70a, 0x183e, 0x30314142, 0x6, 0x1, [{0x8c, 0xf}, {0x4, 0x5}, {0x5, 0x5}, {0x400, 0x7fff}, {0x7fffffff, 0xffffff78}, {0x5, 0xfdfd}, {0xfffffffb, 0x10}, {0xffff, 0x1f}], 0x9, 0x2, 0x2, 0x2, 0x6}})

1.523594007s ago: executing program 1 (id=735):
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000016c0)={0x29, 0x0, [{0x2, 0x28, &(0x7f0000000080)=""/40}, {0xd100828e98ba2273, 0xef, &(0x7f00000015c0)=""/239}]})

1.220047082s ago: executing program 1 (id=736):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x8000)

1.053596016s ago: executing program 5 (id=737):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
fsopen(&(0x7f0000000100)='udf\x00', 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x1000, 0x0)
connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\t'], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)

815.59672ms ago: executing program 1 (id=738):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000080)=0x3ff)
write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
syz_emit_ethernet(0x6a, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0xc, 0x4, 0x0, 0x2, 0x5c, 0x67, 0x0, 0x6, 0x6, 0x0, @rand_addr=0x64010100, @local, {[@rr={0x7, 0xf, 0x7, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xa}, @multicast2]}, @ssrr={0x89, 0x7, 0x1e, [@multicast1]}, @lsrr={0x83, 0x3, 0x93}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x1, 0x1, 0x4e21, 0x4e22}, 0x1}, 0x3}, 0x1}}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000021d46bfffff2ac14142500000000000000000000000000000000000000009201000000000000a39b00000000f2ffffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000400000fefffffffffffffffafffffffcffffff0000000080000000003500000200010020000000480003006465666c61746500"/236], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r6 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x0, 0x3}, 0x20)
setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x180000, @empty}, 0x1c)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0x14, 0xa, 0x2, 0x0, [{@remote}, {@multicast1}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000300)="c99b5738", 0x4)
r9 = accept4(r8, 0x0, 0x0, 0x0)
sendmmsg$alg(r9, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000680)="fe55fc2733656cd94cd632f708d5edc9bbe8b3ec7b6726cb", 0x18}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0xc0)

440.032301ms ago: executing program 5 (id=739):
preadv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000080)=""/83, 0x53}], 0x1, 0xc9, 0x1)

397.78443ms ago: executing program 5 (id=740):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket$packet(0x11, 0x3, 0x300)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socket(0x10, 0x3, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22, 0x400}, 0x48)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x5)
open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0)
landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0)
syz_io_uring_setup(0x416f, &(0x7f0000000780)={0x0, 0xfffffffd, 0x10100, 0x200, 0x1}, 0x0, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)

231.723049ms ago: executing program 6 (id=741):
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20)

119.688318ms ago: executing program 6 (id=742):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0))
sendto$packet(r0, 0x0, 0x0, 0x4008000, 0x0, 0x0)

0s ago: executing program 6 (id=743):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x3, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

  175.289750][ T7131]  ___sys_sendmsg+0xfe/0x1d0
[  175.289771][ T7131]  ? __pfx____sys_sendmsg+0x10/0x10
[  175.289789][ T7131]  ? __lock_acquire+0x622/0x1c90
[  175.289832][ T7131]  __sys_sendmsg+0x16d/0x220
[  175.289854][ T7131]  ? __pfx___sys_sendmsg+0x10/0x10
[  175.289873][ T7131]  ? __pfx___schedule+0x10/0x10
[  175.289911][ T7131]  do_syscall_64+0xcd/0xfa0
[  175.289927][ T7131]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.289943][ T7131] RIP: 0033:0x7f258fd8f6c9
[  175.289956][ T7131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  175.289969][ T7131] RSP: 002b:00007f2590bc6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  175.289985][ T7131] RAX: ffffffffffffffda RBX: 00007f258ffe6090 RCX: 00007f258fd8f6c9
[  175.289993][ T7131] RDX: 0000000030004001 RSI: 0000200000000080 RDI: 0000000000000009
[  175.290002][ T7131] RBP: 00007f2590bc6090 R08: 0000000000000000 R09: 0000000000000000
[  175.290010][ T7131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  175.290018][ T7131] R13: 00007f258ffe6128 R14: 00007f258ffe6090 R15: 00007ffca25d60e8
[  175.290038][ T7131]  </TASK>
[  176.718981][ T7148] 9pnet_fd: Insufficient options for proto=fd
[  176.759677][ T7148] loop2: detected capacity change from 0 to 7
[  176.770827][ T7148] Dev loop2: unable to read RDB block 7
[  176.776425][ T7148]  loop2: unable to read partition table
[  176.782158][ T7148] loop2: partition table beyond EOD, truncated
[  176.788344][ T7148] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  177.824420][   T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  177.913978][ T5820] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  177.924093][ T5820] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  177.965650][ T5820] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  177.974149][ T5820] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  177.974410][   T10] usb 3-1: Using ep0 maxpacket: 8
[  177.988125][ T5820] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  178.022760][   T30] audit: type=1400 audit(1762835800.455:380): avc:  denied  { mounton } for  pid=7161 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  178.040270][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  178.089508][   T10] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  178.171398][   T10] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[  178.187045][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.358854][   T10] usb 3-1: Product: syz
[  178.373227][   T10] usb 3-1: Manufacturer: syz
[  178.378119][   T10] usb 3-1: SerialNumber: syz
[  178.405886][   T10] usb 3-1: config 0 descriptor??
[  178.575596][ T7171] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=28694 sclass=netlink_xfrm_socket pid=7171 comm=syz.4.317
[  178.819822][ T7161] chnl_net:caif_netlink_parms(): no params data found
[  179.489620][ T7184] comedi comedi1: pcmda12: I/O port conflict (0x3,16)
[  180.172887][ T5820] Bluetooth: hci5: command tx timeout
[  180.181857][   T30] audit: type=1400 audit(1762835801.925:381): avc:  denied  { audit_write } for  pid=7176 comm="syz.1.319" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  180.190857][ T7188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.314'.
[  180.226252][   T30] audit: type=1400 audit(1762835801.925:382): avc:  denied  { write } for  pid=7176 comm="syz.1.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  180.354575][ T7188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.314'.
[  180.431446][ T7161] bridge0: port 1(bridge_slave_0) entered blocking state
[  180.445404][ T7161] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.466842][ T7161] bridge_slave_0: entered allmulticast mode
[  180.491728][ T7161] bridge_slave_0: entered promiscuous mode
[  180.648910][ T7161] bridge0: port 2(bridge_slave_1) entered blocking state
[  180.662495][ T7161] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.670091][ T7161] bridge_slave_1: entered allmulticast mode
[  180.677631][ T7161] bridge_slave_1: entered promiscuous mode
[  180.700588][ T5824] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  180.710485][ T5824] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  180.717531][   T10] usb 2-1: new full-speed USB device number 15 using dummy_hcd
[  180.730866][ T5824] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  180.740407][ T5824] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  180.750450][ T5824] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  180.777197][ T7161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  180.820832][ T7161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  180.885914][   T10] usb 2-1: config 1 has an invalid interface number: 105 but max is 0
[  180.894887][   T10] usb 2-1: config 1 has no interface number 0
[  180.901033][   T10] usb 2-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid maxpacket 30768, setting to 64
[  180.914290][   T10] usb 2-1: config 1 interface 105 has no altsetting 0
[  180.925225][   T10] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=31.6d
[  180.934545][   T10] usb 2-1: New USB device strings: Mfr=107, Product=102, SerialNumber=146
[  180.943100][   T10] usb 2-1: Product: syz
[  180.948303][ T7161] team0: Port device team_slave_0 added
[  180.955256][   T10] usb 2-1: Manufacturer: syz
[  180.959946][   T10] usb 2-1: SerialNumber: syz
[  180.972248][ T7191] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  180.993876][ T7161] team0: Port device team_slave_1 added
[  181.049084][ T7161] batman_adv: batadv0: Adding interface: batadv_slave_0
[  181.065904][ T7161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  181.114674][ T7161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  181.130631][ T7161] batman_adv: batadv0: Adding interface: batadv_slave_1
[  181.144480][ T7161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  181.194383][ T7161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  181.334449][ T5821] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  181.356093][ T7161] hsr_slave_0: entered promiscuous mode
[  181.365203][ T7161] hsr_slave_1: entered promiscuous mode
[  181.371338][ T7161] debugfs: 'hsr0' already exists in 'hsr'
[  181.391954][ T7191] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  181.404358][ T7161] Cannot create hsr debugfs directory
[  181.484433][ T5821] usb 5-1: Using ep0 maxpacket: 8
[  181.497628][ T5821] usb 5-1: unable to get BOS descriptor or descriptor too short
[  181.528778][ T5821] usb 5-1: config 2 has an invalid interface number: 153 but max is 0
[  181.554375][ T5821] usb 5-1: config 2 has no interface number 0
[  181.573658][ T5821] usb 5-1: config 2 interface 153 has no altsetting 0
[  181.608134][   T10] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71
[  181.620718][   T10] aqc111 2-1:1.105: probe with driver aqc111 failed with error -71
[  181.634151][   T10] usb 2-1: USB disconnect, device number 15
[  181.636298][ T5821] usb 5-1: New USB device found, idVendor=1199, idProduct=683b, bcdDevice=95.ac
[  181.674675][ T7188] delete_channel: no stack
[  181.683003][ T5882] usb 3-1: USB disconnect, device number 20
[  181.701879][ T5821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.764401][ T5821] usb 5-1: Product: syz
[  181.768583][ T5821] usb 5-1: Manufacturer: syz
[  181.773160][ T5821] usb 5-1: SerialNumber: syz
[  181.851546][ T7194] chnl_net:caif_netlink_parms(): no params data found
[  182.254578][ T5824] Bluetooth: hci5: command tx timeout
[  182.464557][ T7194] bridge0: port 1(bridge_slave_0) entered blocking state
[  182.484425][ T7194] bridge0: port 1(bridge_slave_0) entered disabled state
[  182.491898][ T7194] bridge_slave_0: entered allmulticast mode
[  182.516440][ T7194] bridge_slave_0: entered promiscuous mode
[  182.543894][ T7194] bridge0: port 2(bridge_slave_1) entered blocking state
[  182.579540][ T7194] bridge0: port 2(bridge_slave_1) entered disabled state
[  182.600349][ T7194] bridge_slave_1: entered allmulticast mode
[  182.628033][ T7194] bridge_slave_1: entered promiscuous mode
[  182.727905][ T7194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  182.766015][ T7161] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  182.815707][ T5824] Bluetooth: hci6: command tx timeout
[  182.847294][ T7161] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  182.901897][ T7194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  182.945207][ T7161] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  182.956311][ T7161] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  183.208880][ T7194] team0: Port device team_slave_0 added
[  183.416860][ T7194] team0: Port device team_slave_1 added
[  183.456696][ T7194] batman_adv: batadv0: Adding interface: batadv_slave_0
[  183.465008][ T7194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  183.530911][ T7194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  183.568097][ T7194] batman_adv: batadv0: Adding interface: batadv_slave_1
[  183.581456][ T7194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  183.687085][ T7194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  183.811903][ T7194] hsr_slave_0: entered promiscuous mode
[  183.830370][ T7194] hsr_slave_1: entered promiscuous mode
[  183.837826][ T7194] debugfs: 'hsr0' already exists in 'hsr'
[  183.843638][ T7194] Cannot create hsr debugfs directory
[  183.866808][ T5821] hub 5-1:2.153: bad descriptor, ignoring hub
[  183.886398][ T5821] hub 5-1:2.153: probe with driver hub failed with error -5
[  183.914846][ T5821] sierra 5-1:2.153: Sierra USB modem converter detected
[  183.976444][ T5821] usb 5-1: USB disconnect, device number 19
[  183.985524][ T5821] sierra 5-1:2.153: device disconnected
[  184.313657][ T7161] 8021q: adding VLAN 0 to HW filter on device bond0
[  184.340665][ T5828] Bluetooth: hci5: command tx timeout
[  184.544995][ T7161] 8021q: adding VLAN 0 to HW filter on device team0
[  184.600152][ T7227] could not allocate digest TFM handle cryptd(blake2b-160)
[  184.623274][   T30] audit: type=1400 audit(1762835807.055:383): avc:  denied  { open } for  pid=7235 comm="syz.2.329" path="/dev/ttyq9" dev="devtmpfs" ino=384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  184.669136][ T5906] bridge0: port 1(bridge_slave_0) entered blocking state
[  184.676284][ T5906] bridge0: port 1(bridge_slave_0) entered forwarding state
[  184.755084][ T7238] FAULT_INJECTION: forcing a failure.
[  184.755084][ T7238] name failslab, interval 1, probability 0, space 0, times 0
[  184.768374][ T7238] CPU: 0 UID: 0 PID: 7238 Comm: syz.2.329 Not tainted syzkaller #0 PREEMPT(full) 
[  184.768398][ T7238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  184.768408][ T7238] Call Trace:
[  184.768413][ T7238]  <TASK>
[  184.768418][ T7238]  dump_stack_lvl+0x16c/0x1f0
[  184.768447][ T7238]  should_fail_ex+0x512/0x640
[  184.768465][ T7238]  ? kmem_cache_alloc_noprof+0x62/0x6e0
[  184.768490][ T7238]  should_failslab+0xc2/0x120
[  184.768507][ T7238]  kmem_cache_alloc_noprof+0x75/0x6e0
[  184.768528][ T7238]  ? find_held_lock+0x2b/0x80
[  184.768545][ T7238]  ? alloc_empty_file+0x55/0x1e0
[  184.768568][ T7238]  ? alloc_empty_file+0x55/0x1e0
[  184.768585][ T7238]  alloc_empty_file+0x55/0x1e0
[  184.768605][ T7238]  path_openat+0xda/0x2cb0
[  184.768627][ T7238]  ? __pfx_path_openat+0x10/0x10
[  184.768648][ T7238]  do_filp_open+0x20b/0x470
[  184.768663][ T7238]  ? __pfx_do_filp_open+0x10/0x10
[  184.768694][ T7238]  ? alloc_fd+0x471/0x7d0
[  184.768714][ T7238]  do_sys_openat2+0x11b/0x1d0
[  184.768732][ T7238]  ? __pfx_do_sys_openat2+0x10/0x10
[  184.768753][ T7238]  ? __x64_sys_openat+0x103/0x210
[  184.768772][ T7238]  ? __x64_sys_openat+0x12e/0x210
[  184.768793][ T7238]  __x64_sys_openat+0x174/0x210
[  184.768811][ T7238]  ? __pfx___x64_sys_openat+0x10/0x10
[  184.768839][ T7238]  do_syscall_64+0xcd/0xfa0
[  184.768856][ T7238]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.768870][ T7238] RIP: 0033:0x7f8ce118df10
[  184.768889][ T7238] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44
[  184.768903][ T7238] RSP: 002b:00007f8cdf3f5b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  184.768918][ T7238] RAX: ffffffffffffffda RBX: 0000000000000402 RCX: 00007f8ce118df10
[  184.768928][ T7238] RDX: 0000000000000402 RSI: 00007f8cdf3f5c10 RDI: 00000000ffffff9c
[  184.768937][ T7238] RBP: 00007f8cdf3f5c10 R08: 0000000000000000 R09: 00236e6f6d627375
[  184.768946][ T7238] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd
[  184.768955][ T7238] R13: 00007f8ce13e6128 R14: 00007f8ce13e6090 R15: 00007ffd6a8b8638
[  184.768975][ T7238]  </TASK>
[  184.836024][ T5906] bridge0: port 2(bridge_slave_1) entered blocking state
[  184.980006][ T5828] Bluetooth: hci6: command tx timeout
[  184.983017][ T5906] bridge0: port 2(bridge_slave_1) entered forwarding state
[  185.594670][ T5821] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  185.800742][ T5828] Bluetooth: hci3: command 0x0406 tx timeout
[  185.842459][ T5828] Bluetooth: hci1: command 0x0406 tx timeout
[  185.843071][ T5809] Bluetooth: hci0: command 0x0406 tx timeout
[  185.848608][ T5823] Bluetooth: hci2: command 0x0406 tx timeout
[  185.854719][ T5826] Bluetooth: hci4: command 0x0405 tx timeout
[  185.866457][ T5821] usb 5-1: Using ep0 maxpacket: 16
[  185.873613][ T5821] usb 5-1: config 0 descriptor has 1 excess byte, ignoring
[  185.881320][ T5821] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024
[  185.894583][ T5821] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024
[  185.937083][ T5821] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  185.958671][ T5821] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[  185.998316][ T5821] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  186.012770][ T5821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.022285][ T5821] usb 5-1: Product: syz
[  186.026630][ T5821] usb 5-1: Manufacturer: syz
[  186.031228][ T5821] usb 5-1: SerialNumber: syz
[  186.039413][ T5821] usb 5-1: config 0 descriptor??
[  186.091694][ T7229] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  186.164499][ T5821] mcba_usb 5-1:0.0 can0: couldn't setup read URBs
[  186.171678][ T7246] netlink: 'syz.2.332': attribute type 33 has an invalid length.
[  186.179615][ T5821] mcba_usb 5-1:0.0 can0: couldn't start device: -90
[  186.188237][ T7246] netlink: 36 bytes leftover after parsing attributes in process `syz.2.332'.
[  186.202662][ T7194] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  186.241783][ T7194] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  186.288391][ T7194] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  186.430140][   T52] Bluetooth: hci5: command tx timeout
[  186.437668][ T5821] mcba_usb 5-1:0.0: probe with driver mcba_usb failed with error -90
[  186.575647][ T7194] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  186.689197][ T5821] usb 5-1: USB disconnect, device number 20
[  187.054694][   T52] Bluetooth: hci6: command tx timeout
[  187.778735][ T7194] 8021q: adding VLAN 0 to HW filter on device bond0
[  187.821343][ T7194] 8021q: adding VLAN 0 to HW filter on device team0
[  187.851546][   T66] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.859076][   T66] bridge0: port 1(bridge_slave_0) entered forwarding state
[  187.897639][ T4486] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.904774][ T4486] bridge0: port 2(bridge_slave_1) entered forwarding state
[  187.999431][ T7161] 8021q: adding VLAN 0 to HW filter on device batadv0
[  188.162489][ T7270] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=28694 sclass=netlink_xfrm_socket pid=7270 comm=syz.4.335
[  189.367539][   T52] Bluetooth: hci6: command tx timeout
[  192.355826][ T7194] 8021q: adding VLAN 0 to HW filter on device batadv0
[  192.443294][ T7161] veth0_vlan: entered promiscuous mode
[  192.462745][ T7161] veth1_vlan: entered promiscuous mode
[  192.474430][    T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  192.521821][ T7161] veth0_macvtap: entered promiscuous mode
[  192.556621][ T7161] veth1_macvtap: entered promiscuous mode
[  192.625690][    T9] usb 3-1: Using ep0 maxpacket: 32
[  192.630872][ T7161] batman_adv: batadv0: Interface activated: batadv_slave_0
[  192.633641][ T7161] batman_adv: batadv0: Interface activated: batadv_slave_1
[  192.661553][ T5906] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  192.706896][    T9] usb 3-1: config 0 has an invalid interface number: 85 but max is 0
[  192.718855][   T50] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  192.736592][    T9] usb 3-1: config 0 has no interface number 0
[  192.745301][   T50] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  192.757857][    T9] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  192.905386][   T50] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  192.914918][    T9] usb 3-1: config 0 interface 85 has no altsetting 0
[  192.923952][    T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  192.936406][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.949030][    T9] usb 3-1: Product: syz
[  192.954047][    T9] usb 3-1: Manufacturer: syz
[  193.408523][    T9] usb 3-1: SerialNumber: syz
[  193.421105][    T9] usb 3-1: config 0 descriptor??
[  193.470020][ T5906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  193.505120][ T5906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  193.568200][ T4486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  193.578620][ T4486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  193.721785][   T30] audit: type=1400 audit(1762835816.155:384): avc:  denied  { mount } for  pid=7161 comm="syz-executor" name="/" dev="gadgetfs" ino=8400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  193.769024][ T7194] veth0_vlan: entered promiscuous mode
[  193.806101][ T7194] veth1_vlan: entered promiscuous mode
[  193.852623][ T7194] veth0_macvtap: entered promiscuous mode
[  193.878846][ T7194] veth1_macvtap: entered promiscuous mode
[  193.906142][   T30] audit: type=1400 audit(1762835816.345:385): avc:  denied  { write } for  pid=7307 comm="syz.5.315" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  193.944195][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  193.950743][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  193.968902][ T7194] batman_adv: batadv0: Interface activated: batadv_slave_0
[  193.983567][ T7194] batman_adv: batadv0: Interface activated: batadv_slave_1
[  194.009395][ T5906] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  194.028525][ T5906] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  194.058495][ T5906] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  194.067964][    T9] appletouch 3-1:0.85: Geyser mode initialized.
[  194.097423][ T7313] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  194.100785][    T9] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input12
[  194.108507][   T30] audit: type=1400 audit(1762835816.535:386): avc:  denied  { load_policy } for  pid=7312 comm="syz.5.341" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  194.165028][ T7313] SELinux: failed to load policy
[  194.172560][ T5906] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  194.271757][ T7283] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7283 comm=syz.2.337
[  194.396721][ T7318] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  194.668159][ T5906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  194.693778][ T5821] usb 3-1: USB disconnect, device number 21
[  194.699856][    C1] appletouch 3-1:0.85: atp_complete: usb_submit_urb failed with result -19
[  194.713752][ T5906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  194.790977][ T5821] appletouch 3-1:0.85: input: appletouch disconnected
[  195.554535][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.730863][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  195.899989][ T7322] could not allocate digest TFM handle cryptd(blake2b-160)
[  195.964889][   T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  196.684605][   T10] usb 6-1: Using ep0 maxpacket: 16
[  196.713970][   T10] usb 6-1: config 0 descriptor has 1 excess byte, ignoring
[  196.738306][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024
[  196.750503][   T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024
[  196.760999][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  196.773617][   T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[  196.800575][   T10] usb 6-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  196.900948][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.921491][   T10] usb 6-1: Product: syz
[  196.937024][   T10] usb 6-1: Manufacturer: syz
[  196.941776][   T10] usb 6-1: SerialNumber: syz
[  197.094072][   T10] usb 6-1: config 0 descriptor??
[  197.100024][ T7332] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  197.664595][ T7356] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  197.723155][   T10] mcba_usb 6-1:0.0 can0: couldn't setup read URBs
[  197.759765][   T10] mcba_usb 6-1:0.0 can0: couldn't start device: -90
[  197.922314][   T10] mcba_usb 6-1:0.0: probe with driver mcba_usb failed with error -90
[  197.971367][   T10] usb 6-1: USB disconnect, device number 2
[  198.045073][ T7365] loop6: detected capacity change from 0 to 2560
[  198.058147][ T7365] buffer_io_error: 11 callbacks suppressed
[  198.058157][ T7365] Buffer I/O error on dev loop6, logical block 0, async page read
[  198.159503][ T7365] Buffer I/O error on dev loop6, logical block 0, async page read
[  198.165237][ T7363] batman_adv: batadv0: Adding interface: gretap1
[  198.224239][ T7365] Buffer I/O error on dev loop6, logical block 0, async page read
[  198.236843][ T7363] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  198.301219][ T7365] Buffer I/O error on dev loop6, logical block 0, async page read
[  198.331849][ T7363] batman_adv: batadv0: Interface activated: gretap1
[  198.348903][ T7365] Buffer I/O error on dev loop6, logical block 0, async page read
[  198.375759][ T7371] netlink: 'syz.6.350': attribute type 14 has an invalid length.
[  198.380356][ T7365] Buffer I/O error on dev loop6, logical block 0, async page read
[  198.403421][ T7365] Buffer I/O error on dev loop6, logical block 0, async page read
[  198.421611][ T7376] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=28694 sclass=netlink_xfrm_socket pid=7376 comm=syz.4.351
[  198.459843][ T7365] Buffer I/O error on dev loop6, logical block 0, async page read
[  198.510699][ T7365] ldm_validate_partition_table(): Disk read failed.
[  198.534685][ T7365] Buffer I/O error on dev loop6, logical block 0, async page read
[  198.542608][ T7365] Buffer I/O error on dev loop6, logical block 0, async page read
[  198.595652][ T7365] Dev loop6: unable to read RDB block 0
[  198.607685][ T7365]  loop6: unable to read partition table
[  198.624511][ T7365] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³˜) failed (rc=-5)
[  198.668985][ T7379] overlayfs: failed to resolve './file1': -2
[  198.983649][ T7386] netlink: 'syz.4.355': attribute type 33 has an invalid length.
[  199.078481][ T7389] loop6: detected capacity change from 0 to 2560
[  199.092247][ T7389] ldm_validate_partition_table(): Disk read failed.
[  199.100157][ T7389] Dev loop6: unable to read RDB block 0
[  199.107484][ T7389]  loop6: unable to read partition table
[  199.113869][ T7389] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³˜) failed (rc=-5)
[  199.150967][ T7386] netlink: 36 bytes leftover after parsing attributes in process `syz.4.355'.
[  199.882968][   T30] audit: type=1400 audit(1762835822.315:387): avc:  denied  { read } for  pid=7391 comm="syz.5.356" dev="sockfs" ino=15560 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  199.909110][ T5890] libceph: connect (1)[c::]:6789 error -101
[  200.054443][ T7392] ceph: No mds server is up or the cluster is laggy
[  200.110274][ T5890] libceph: mon0 (1)[c::]:6789 connect error
[  200.174342][   T30] audit: type=1400 audit(1762835822.605:388): avc:  denied  { accept } for  pid=7393 comm="syz.4.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  200.936391][   T30] audit: type=1400 audit(1762835823.375:389): avc:  denied  { getopt } for  pid=7410 comm="syz.2.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  200.989127][ T7413] FAULT_INJECTION: forcing a failure.
[  200.989127][ T7413] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  201.002811][ T7413] CPU: 0 UID: 0 PID: 7413 Comm: syz.2.360 Not tainted syzkaller #0 PREEMPT(full) 
[  201.002833][ T7413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  201.002842][ T7413] Call Trace:
[  201.002848][ T7413]  <TASK>
[  201.002854][ T7413]  dump_stack_lvl+0x16c/0x1f0
[  201.002884][ T7413]  should_fail_ex+0x512/0x640
[  201.002905][ T7413]  _copy_from_user+0x2e/0xd0
[  201.002926][ T7413]  copy_msghdr_from_user+0x98/0x160
[  201.002951][ T7413]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  201.002977][ T7413]  ? kfree+0x252/0x6d0
[  201.003006][ T7413]  ___sys_sendmsg+0xfe/0x1d0
[  201.003030][ T7413]  ? __pfx____sys_sendmsg+0x10/0x10
[  201.003075][ T7413]  ? __pfx___might_resched+0x10/0x10
[  201.003103][ T7413]  __sys_sendmmsg+0x200/0x420
[  201.003128][ T7413]  ? __pfx___sys_sendmmsg+0x10/0x10
[  201.003159][ T7413]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  201.003188][ T7413]  ? fput+0x9b/0xd0
[  201.003210][ T7413]  ? ksys_write+0x1ac/0x250
[  201.003225][ T7413]  ? __pfx_ksys_write+0x10/0x10
[  201.003246][ T7413]  __x64_sys_sendmmsg+0x9c/0x100
[  201.003268][ T7413]  ? lockdep_hardirqs_on+0x7c/0x110
[  201.003294][ T7413]  do_syscall_64+0xcd/0xfa0
[  201.003311][ T7413]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.003328][ T7413] RIP: 0033:0x7f8ce118f6c9
[  201.003343][ T7413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  201.003359][ T7413] RSP: 002b:00007f8cdf3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  201.003375][ T7413] RAX: ffffffffffffffda RBX: 00007f8ce13e6090 RCX: 00007f8ce118f6c9
[  201.003386][ T7413] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 000000000000000a
[  201.003403][ T7413] RBP: 00007f8cdf3f6090 R08: 0000000000000000 R09: 0000000000000000
[  201.003413][ T7413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  201.003426][ T7413] R13: 00007f8ce13e6128 R14: 00007f8ce13e6090 R15: 00007ffd6a8b8638
[  201.003450][ T7413]  </TASK>
[  202.202432][   T30] audit: type=1326 audit(1762835824.635:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7427 comm="syz.1.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c39b8f6c9 code=0x7ffc0000
[  202.241602][ T7431] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.363'.
[  202.456120][   T30] audit: type=1326 audit(1762835824.635:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7427 comm="syz.1.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c39b8f6c9 code=0x7ffc0000
[  203.018083][   T30] audit: type=1326 audit(1762835824.635:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7427 comm="syz.1.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f7c39b8f6c9 code=0x7ffc0000
[  203.041384][    C0] vkms_vblank_simulate: vblank timer overrun
[  203.293556][   T30] audit: type=1326 audit(1762835824.635:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7427 comm="syz.1.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c39b8f6c9 code=0x7ffc0000
[  203.458633][   T30] audit: type=1326 audit(1762835824.635:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7427 comm="syz.1.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c39b8f6c9 code=0x7ffc0000
[  203.827320][   T30] audit: type=1326 audit(1762835824.635:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7427 comm="syz.1.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f7c39b8f6c9 code=0x7ffc0000
[  203.946465][   T30] audit: type=1326 audit(1762835824.635:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7427 comm="syz.1.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c39b8f6c9 code=0x7ffc0000
[  205.314015][ T7445] orangefs_mount: mount request failed with -4
[  205.506835][   T30] kauditd_printk_skb: 27 callbacks suppressed
[  205.506852][   T30] audit: type=1326 audit(1762835827.945:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7459 comm="syz.4.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f258fd8f6c9 code=0x7ffc0000
[  205.568059][ T7460] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.372'.
[  205.645395][ T5821] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  205.893057][ T5821] usb 3-1: Using ep0 maxpacket: 8
[  205.923443][ T5821] usb 3-1: config 2 has an invalid interface number: 31 but max is 0
[  205.931970][ T5821] usb 3-1: config 2 has no interface number 0
[  205.938391][   T30] audit: type=1326 audit(1762835827.945:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7459 comm="syz.4.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f258fd8f6c9 code=0x7ffc0000
[  205.959694][ T5821] usb 3-1: config 2 interface 31 has no altsetting 0
[  206.007613][ T5821] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[  206.026370][ T5821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.054618][ T5821] usb 3-1: Product: syz
[  206.054765][   T30] audit: type=1326 audit(1762835827.945:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7459 comm="syz.4.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f258fd8f6c9 code=0x7ffc0000
[  206.064391][ T5821] usb 3-1: Manufacturer: syz
[  206.363820][ T5821] usb 3-1: SerialNumber: syz
[  206.679783][   T30] audit: type=1326 audit(1762835827.945:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7459 comm="syz.4.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f258fd8f6c9 code=0x7ffc0000
[  206.815260][ T7466] could not allocate digest TFM handle cryptd(blake2b-160)
[  206.832277][   T30] audit: type=1326 audit(1762835827.945:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7459 comm="syz.4.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f258fd8f6c9 code=0x7ffc0000
[  206.863114][ T7470] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  206.896777][   T30] audit: type=1326 audit(1762835827.945:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7459 comm="syz.4.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f258fd8f6c9 code=0x7ffc0000
[  207.294632][ T5931] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  207.580786][   T30] audit: type=1326 audit(1762835827.945:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7459 comm="syz.4.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f258fd8f6c9 code=0x7ffc0000
[  207.714676][ T5931] usb 2-1: Using ep0 maxpacket: 16
[  208.069560][ T5931] usb 2-1: config 0 descriptor has 1 excess byte, ignoring
[  208.090269][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024
[  208.119545][   T30] audit: type=1326 audit(1762835827.945:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7459 comm="syz.4.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f258fd8f6c9 code=0x7ffc0000
[  208.150094][ T5931] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024
[  208.204229][   T30] audit: type=1326 audit(1762835827.945:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7459 comm="syz.4.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f258fd8f6c9 code=0x7ffc0000
[  208.212423][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  208.241212][ T5931] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[  208.253912][   T30] audit: type=1326 audit(1762835827.945:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7459 comm="syz.4.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f258fd8f6c9 code=0x7ffc0000
[  208.261330][ T7491] netlink: 'syz.6.379': attribute type 33 has an invalid length.
[  208.290381][ T5931] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  208.299876][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.308054][ T5931] usb 2-1: Product: syz
[  208.308811][ T7491] netlink: 36 bytes leftover after parsing attributes in process `syz.6.379'.
[  208.353336][ T5931] usb 2-1: Manufacturer: syz
[  208.364397][ T5931] usb 2-1: SerialNumber: syz
[  208.392803][ T5931] usb 2-1: config 0 descriptor??
[  208.405159][ T7466] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  208.437685][ T5931] mcba_usb 2-1:0.0 can0: couldn't setup read URBs
[  208.448717][ T5821] ch9200 3-1:2.31: probe with driver ch9200 failed with error -22
[  208.489043][ T5931] mcba_usb 2-1:0.0 can0: couldn't start device: -90
[  208.505866][ T5821] usb 3-1: USB disconnect, device number 22
[  208.615075][ T5931] mcba_usb 2-1:0.0: probe with driver mcba_usb failed with error -90
[  209.046816][ T5821] usb 2-1: USB disconnect, device number 16
[  209.415887][ T7497] block nbd4: shutting down sockets
[  211.381826][ T5875] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  211.779370][ T7535] netlink: 12 bytes leftover after parsing attributes in process `syz.6.388'.
[  212.075217][ T5875] usb 5-1: Using ep0 maxpacket: 16
[  212.092101][ T7530] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  212.105361][ T5875] usb 5-1: config 0 descriptor has 1 excess byte, ignoring
[  212.204485][ T5875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024
[  212.217496][ T5875] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024
[  212.227124][ T7515] could not allocate digest TFM handle cryptd(blake2b-160)
[  212.227926][ T5875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  212.439853][ T5875] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[  212.459974][ T5875] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  212.583171][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.691990][ T5875] usb 5-1: Product: syz
[  212.747471][ T5875] usb 5-1: Manufacturer: syz
[  212.833665][ T5875] usb 5-1: SerialNumber: syz
[  212.861895][ T5875] usb 5-1: config 0 descriptor??
[  212.926219][    C0] raw-gadget.0 gadget.4: ignoring, device is not running
[  212.971683][ T5875] usb 5-1: can't set config #0, error -32
[  213.212046][ T5875] usb 5-1: USB disconnect, device number 21
[  213.933285][ T7569] loop6: detected capacity change from 0 to 2560
[  213.942357][ T7569] buffer_io_error: 32 callbacks suppressed
[  213.942386][ T7569] Buffer I/O error on dev loop6, logical block 0, async page read
[  213.957910][ T7569] Buffer I/O error on dev loop6, logical block 0, async page read
[  213.966422][ T7569] Buffer I/O error on dev loop6, logical block 0, async page read
[  213.974997][ T7569] Buffer I/O error on dev loop6, logical block 0, async page read
[  213.983435][ T7569] Buffer I/O error on dev loop6, logical block 0, async page read
[  213.991850][ T7569] Buffer I/O error on dev loop6, logical block 0, async page read
[  214.000602][ T7569] Buffer I/O error on dev loop6, logical block 0, async page read
[  214.009240][ T7569] Buffer I/O error on dev loop6, logical block 0, async page read
[  214.017560][ T7569] ldm_validate_partition_table(): Disk read failed.
[  214.024540][ T7569] Buffer I/O error on dev loop6, logical block 0, async page read
[  214.033021][ T7569] Buffer I/O error on dev loop6, logical block 0, async page read
[  214.041915][ T7569] Dev loop6: unable to read RDB block 0
[  214.049312][ T7569]  loop6: unable to read partition table
[  214.055977][ T7569] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³˜) failed (rc=-5)
[  214.229744][ T5182] ldm_validate_partition_table(): Disk read failed.
[  214.240238][ T7571] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.393'.
[  214.294058][ T5182] Dev loop6: unable to read RDB block 0
[  214.323074][ T5182]  loop6: unable to read partition table
[  214.487064][ T5182] ldm_validate_partition_table(): Disk read failed.
[  214.531603][ T5182] Dev loop6: unable to read RDB block 0
[  214.555680][ T5182]  loop6: unable to read partition table
[  215.173533][   T30] kauditd_printk_skb: 22 callbacks suppressed
[  215.173551][   T30] audit: type=1400 audit(1762835837.565:456): avc:  denied  { write } for  pid=7584 comm="syz.6.397" path="socket:[15906]" dev="sockfs" ino=15906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  215.537617][ T7599] netlink: 36 bytes leftover after parsing attributes in process `syz.4.399'.
[  216.376819][ T7610] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  217.001126][ T7618] loop6: detected capacity change from 0 to 2560
[  217.013093][ T7618] ldm_validate_partition_table(): Disk read failed.
[  217.022173][ T7618] Dev loop6: unable to read RDB block 0
[  217.029551][ T7618]  loop6: unable to read partition table
[  217.035961][ T7618] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³˜) failed (rc=-5)
[  218.721898][ T7648] loop6: detected capacity change from 0 to 2560
[  218.729641][ T7648] ldm_validate_partition_table(): Disk read failed.
[  218.736637][ T7648] Dev loop6: unable to read RDB block 0
[  218.742523][ T7648]  loop6: unable to read partition table
[  218.748359][ T7648] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³˜) failed (rc=-5)
[  219.061853][ T5829] buffer_io_error: 85 callbacks suppressed
[  219.061864][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read
[  219.082473][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read
[  219.101041][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read
[  219.143027][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read
[  219.202886][   T30] audit: type=1326 audit(1762835841.635:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7645 comm="syz.2.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ce118f6c9 code=0x7ffc0000
[  219.232448][ T7649] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.407'.
[  219.337983][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read
[  219.441627][   T30] audit: type=1326 audit(1762835841.635:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7645 comm="syz.2.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ce118f6c9 code=0x7ffc0000
[  219.625706][   T30] audit: type=1326 audit(1762835841.635:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7645 comm="syz.2.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f8ce118f6c9 code=0x7ffc0000
[  219.727267][   T30] audit: type=1326 audit(1762835841.635:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7645 comm="syz.2.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ce118f6c9 code=0x7ffc0000
[  220.235652][   T30] audit: type=1326 audit(1762835841.635:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7645 comm="syz.2.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f8ce118f6c9 code=0x7ffc0000
[  220.259241][   T30] audit: type=1326 audit(1762835841.635:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7645 comm="syz.2.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ce118f6c9 code=0x7ffc0000
[  221.197784][   T30] audit: type=1326 audit(1762835841.665:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7645 comm="syz.2.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f8ce118f6c9 code=0x7ffc0000
[  221.236076][ T7673] netlink: 16 bytes leftover after parsing attributes in process `syz.5.412'.
[  221.294619][ T7673] netlink: 16 bytes leftover after parsing attributes in process `syz.5.412'.
[  221.384199][   T30] audit: type=1326 audit(1762835841.665:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7645 comm="syz.2.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ce118f6c9 code=0x7ffc0000
[  221.616764][ T7683] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  221.669967][   T30] audit: type=1326 audit(1762835841.665:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7645 comm="syz.2.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f8ce118f6c9 code=0x7ffc0000
[  221.977019][   T30] audit: type=1326 audit(1762835841.665:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7645 comm="syz.2.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ce118f6c9 code=0x7ffc0000
[  222.009012][ T7689] netlink: 16 bytes leftover after parsing attributes in process `syz.6.415'.
[  222.207857][ T7689] netlink: 16 bytes leftover after parsing attributes in process `syz.6.415'.
[  223.634421][   T30] audit: type=1326 audit(1762835841.665:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7645 comm="syz.2.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8ce118f6c9 code=0x7ffc0000
[  223.693178][   T30] audit: type=1326 audit(1762835841.665:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7645 comm="syz.2.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ce118f6c9 code=0x7ffc0000
[  223.727356][   T30] audit: type=1326 audit(1762835841.665:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7645 comm="syz.2.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8ce118f6c9 code=0x7ffc0000
[  223.841010][   T30] audit: type=1326 audit(1762835841.665:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7645 comm="syz.2.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ce118f6c9 code=0x7ffc0000
[  224.391937][ T7712] loop6: detected capacity change from 0 to 2560
[  224.400877][ T7712] Buffer I/O error on dev loop6, logical block 0, async page read
[  224.409217][ T7712] Buffer I/O error on dev loop6, logical block 0, async page read
[  224.417528][ T7712] Buffer I/O error on dev loop6, logical block 0, async page read
[  224.425943][ T7712] Buffer I/O error on dev loop6, logical block 0, async page read
[  224.434203][ T7712] Buffer I/O error on dev loop6, logical block 0, async page read
[  224.447732][ T7712] Buffer I/O error on dev loop6, logical block 0, async page read
[  224.456201][ T7712] Buffer I/O error on dev loop6, logical block 0, async page read
[  224.464366][ T7712] Buffer I/O error on dev loop6, logical block 0, async page read
[  224.472482][ T7712] ldm_validate_partition_table(): Disk read failed.
[  224.479391][ T7712] Buffer I/O error on dev loop6, logical block 0, async page read
[  224.487747][ T7712] Buffer I/O error on dev loop6, logical block 0, async page read
[  224.496888][ T7712] Dev loop6: unable to read RDB block 0
[  224.504035][ T7712]  loop6: unable to read partition table
[  224.510500][ T7712] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³˜) failed (rc=-5)
[  225.271384][ T7727] Failed to get privilege flags for destination (handle=0x2:0x25)
[  225.307971][ T5182] ldm_validate_partition_table(): Disk read failed.
[  225.357963][ T5182] Dev loop6: unable to read RDB block 0
[  225.615135][ T5912] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  225.650308][ T5182]  loop6: unable to read partition table
[  225.656428][ T5912] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  225.656465][ T5912] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  225.656494][ T5912] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  226.591619][ T7749] netlink: 16 bytes leftover after parsing attributes in process `syz.4.427'.
[  226.646325][ T7749] netlink: 16 bytes leftover after parsing attributes in process `syz.4.427'.
[  226.774551][ T5954] usb 6-1: new low-speed USB device number 3 using dummy_hcd
[  226.775764][ T7753] FAULT_INJECTION: forcing a failure.
[  226.775764][ T7753] name failslab, interval 1, probability 0, space 0, times 0
[  226.795856][ T7753] CPU: 0 UID: 0 PID: 7753 Comm: syz.6.426 Not tainted syzkaller #0 PREEMPT(full) 
[  226.795881][ T7753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  226.795889][ T7753] Call Trace:
[  226.795893][ T7753]  <TASK>
[  226.795897][ T7753]  dump_stack_lvl+0x16c/0x1f0
[  226.795918][ T7753]  should_fail_ex+0x512/0x640
[  226.795931][ T7753]  ? kmem_cache_alloc_noprof+0x62/0x6e0
[  226.795949][ T7753]  should_failslab+0xc2/0x120
[  226.795961][ T7753]  kmem_cache_alloc_noprof+0x75/0x6e0
[  226.795975][ T7753]  ? copy_time_ns+0x346/0x510
[  226.795989][ T7753]  ? copy_net_ns+0x31f/0x690
[  226.796004][ T7753]  ? copy_fs_struct+0x49/0x340
[  226.796021][ T7753]  ? copy_fs_struct+0x49/0x340
[  226.796034][ T7753]  copy_fs_struct+0x49/0x340
[  226.796049][ T7753]  __do_sys_setns+0x50e/0x1920
[  226.796063][ T7753]  ? fput+0x9b/0xd0
[  226.796075][ T7753]  ? __pfx___do_sys_setns+0x10/0x10
[  226.796088][ T7753]  ? ksys_write+0x1ac/0x250
[  226.796102][ T7753]  do_syscall_64+0xcd/0xfa0
[  226.796113][ T7753]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.796123][ T7753] RIP: 0033:0x7fb9f138f6c9
[  226.796132][ T7753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  226.796142][ T7753] RSP: 002b:00007fb9f222f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000134
[  226.796152][ T7753] RAX: ffffffffffffffda RBX: 00007fb9f15e6180 RCX: 00007fb9f138f6c9
[  226.796158][ T7753] RDX: 0000000000000000 RSI: 0000000024020000 RDI: 0000000000000006
[  226.796164][ T7753] RBP: 00007fb9f222f090 R08: 0000000000000000 R09: 0000000000000000
[  226.796170][ T7753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  226.796176][ T7753] R13: 00007fb9f15e6218 R14: 00007fb9f15e6180 R15: 00007fff143e9bb8
[  226.796194][ T7753]  </TASK>
[  227.306002][ T5954] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  227.390161][ T7762] netlink: 16 bytes leftover after parsing attributes in process `syz.6.429'.
[  227.399207][ T5954] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  227.419506][ T7762] netlink: 16 bytes leftover after parsing attributes in process `syz.6.429'.
[  227.421746][ T5954] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  227.928267][ T5954] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  227.942840][ T5954] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  227.979638][ T5954] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  228.024113][ T5954] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  228.183339][ T5954] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  228.362806][ T5954] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  228.395926][ T5954] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  228.478596][ T5954] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  228.486412][ T5954] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  228.530734][ T5954] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  228.612070][ T5954] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  228.681964][ T5954] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  228.857789][ T5954] usb 6-1: string descriptor 0 read error: -22
[  228.917929][ T5875] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  229.064560][ T5954] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  229.134776][ T5875] usb 5-1: Using ep0 maxpacket: 32
[  229.161916][ T5954] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.176909][ T5875] usb 5-1: config 0 has an invalid interface number: 210 but max is 0
[  229.207028][ T5875] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  229.247616][ T5954] usb 6-1: can't set config #168, error -71
[  229.281887][ T5954] usb 6-1: USB disconnect, device number 3
[  229.300650][ T5875] usb 5-1: config 0 has no interface number 0
[  229.308460][ T7785] FAULT_INJECTION: forcing a failure.
[  229.308460][ T7785] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  230.450704][   T30] kauditd_printk_skb: 11 callbacks suppressed
[  230.450724][   T30] audit: type=1400 audit(1762835852.245:482): avc:  denied  { setopt } for  pid=7781 comm="syz.1.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  230.578278][ T5875] usb 5-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=3b.9f
[  230.588470][ T7785] CPU: 0 UID: 0 PID: 7785 Comm: syz.2.432 Not tainted syzkaller #0 PREEMPT(full) 
[  230.588494][ T7785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  230.588504][ T7785] Call Trace:
[  230.588510][ T7785]  <TASK>
[  230.588517][ T7785]  dump_stack_lvl+0x16c/0x1f0
[  230.588548][ T7785]  should_fail_ex+0x512/0x640
[  230.588572][ T7785]  _copy_from_user+0x2e/0xd0
[  230.588594][ T7785]  memdup_user+0x6b/0xe0
[  230.588612][ T7785]  strndup_user+0x78/0xe0
[  230.588629][ T7785]  __x64_sys_mount+0x136/0x310
[  230.588650][ T7785]  ? __pfx___x64_sys_mount+0x10/0x10
[  230.588678][ T7785]  do_syscall_64+0xcd/0xfa0
[  230.588695][ T7785]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  230.588712][ T7785] RIP: 0033:0x7f8ce118f6c9
[  230.588727][ T7785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  230.588742][ T7785] RSP: 002b:00007f8ce1f43038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  230.588758][ T7785] RAX: ffffffffffffffda RBX: 00007f8ce13e5fa0 RCX: 00007f8ce118f6c9
[  230.588769][ T7785] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000
[  230.588779][ T7785] RBP: 00007f8ce1f43090 R08: 0000200000000500 R09: 0000000000000000
[  230.588789][ T7785] R10: 0000000000000400 R11: 0000000000000246 R12: 0000000000000001
[  230.588798][ T7785] R13: 00007f8ce13e6038 R14: 00007f8ce13e5fa0 R15: 00007ffd6a8b8638
[  230.588822][ T7785]  </TASK>
[  230.751112][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.759536][ T5875] usb 5-1: Product: syz
[  230.763704][ T5875] usb 5-1: Manufacturer: syz
[  230.768371][ T5875] usb 5-1: SerialNumber: syz
[  230.792355][ T5875] usb 5-1: config 0 descriptor??
[  230.799936][ T5875] mct_u232 5-1:0.210: MCT U232 converter detected
[  230.806936][ T5875] mct_u232 ttyUSB0: expected endpoint missing
[  231.275126][ T5875] usb 5-1: USB disconnect, device number 22
[  231.282020][ T5875] mct_u232 5-1:0.210: device disconnected
[  231.392957][ T7804] syz.5.434 (7804): /proc/7792/oom_adj is deprecated, please use /proc/7792/oom_score_adj instead.
[  231.731725][ T7818] loop6: detected capacity change from 0 to 2560
[  231.744729][ T7818] buffer_io_error: 27 callbacks suppressed
[  231.750584][ T7818] Buffer I/O error on dev loop6, logical block 0, async page read
[  231.760042][ T7818] Buffer I/O error on dev loop6, logical block 0, async page read
[  231.768872][ T7818] Buffer I/O error on dev loop6, logical block 0, async page read
[  231.778270][ T7818] Buffer I/O error on dev loop6, logical block 0, async page read
[  231.787317][ T7818] Buffer I/O error on dev loop6, logical block 0, async page read
[  231.796989][ T7818] Buffer I/O error on dev loop6, logical block 0, async page read
[  231.806162][ T7818] Buffer I/O error on dev loop6, logical block 0, async page read
[  231.815593][ T7818] Buffer I/O error on dev loop6, logical block 0, async page read
[  231.824727][ T7818] ldm_validate_partition_table(): Disk read failed.
[  231.831937][ T7818] Buffer I/O error on dev loop6, logical block 0, async page read
[  231.841506][ T7818] Buffer I/O error on dev loop6, logical block 0, async page read
[  231.851391][ T7818] Dev loop6: unable to read RDB block 0
[  231.861190][ T7818]  loop6: unable to read partition table
[  231.868539][ T7818] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³˜) failed (rc=-5)
[  232.044383][ T5954] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  232.239569][ T5954] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  232.292665][ T5954] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  232.391382][ T5954] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  232.407812][ T5954] usb 7-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  232.423071][ T5954] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  232.435916][ T5954] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.464577][ T5954] usb 7-1: Product: syz
[  232.519293][ T5954] usb 7-1: Manufacturer: syz
[  232.564732][ T5954] usb 7-1: SerialNumber: syz
[  232.690465][ T7835] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  233.353268][ T7841] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  233.623767][ T5954] cdc_ncm 7-1:1.0: failed GET_NTB_PARAMETERS
[  233.630195][ T5954] cdc_ncm 7-1:1.0: bind() failure
[  233.637640][ T5954] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found
[  233.654452][ T5954] cdc_ncm 7-1:1.1: bind() failure
[  233.714395][    T9] usb 2-1: new full-speed USB device number 17 using dummy_hcd
[  233.791029][ T5954] usb 7-1: USB disconnect, device number 2
[  233.902188][ T7848] loop6: detected capacity change from 0 to 2560
[  233.913690][ T7848] ldm_validate_partition_table(): Disk read failed.
[  233.922416][ T7848] Dev loop6: unable to read RDB block 0
[  233.929592][ T7848]  loop6: unable to read partition table
[  233.936442][ T7848] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³˜) failed (rc=-5)
[  234.101172][    T9] usb 2-1: not running at top speed; connect to a high speed hub
[  234.185539][    T9] usb 2-1: config 1 has an invalid descriptor of length 173, skipping remainder of the config
[  234.203045][    T9] usb 2-1: config 1 interface 0 altsetting 247 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  234.227882][    T9] usb 2-1: config 1 interface 0 has no altsetting 0
[  234.238018][    T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  234.251484][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.271483][    T9] usb 2-1: Product: й
[  234.276114][    T9] usb 2-1: Manufacturer: �
[  234.280892][    T9] usb 2-1: SerialNumber: syz
[  234.521706][    T9] usb 2-1: bad CDC descriptors
[  234.538627][    T9] usb 2-1: USB disconnect, device number 17
[  234.625456][ T7850] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  237.074585][ T7858] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  240.727880][   T30] audit: type=1400 audit(1762835863.135:483): avc:  denied  { create } for  pid=7892 comm="syz.1.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  240.788138][ T7896] FAULT_INJECTION: forcing a failure.
[  240.788138][ T7896] name failslab, interval 1, probability 0, space 0, times 0
[  240.823081][   T30] audit: type=1400 audit(1762835863.135:484): avc:  denied  { connect } for  pid=7892 comm="syz.1.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  240.880317][ T7896] CPU: 1 UID: 0 PID: 7896 Comm: syz.1.457 Not tainted syzkaller #0 PREEMPT(full) 
[  240.880335][ T7896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  240.880341][ T7896] Call Trace:
[  240.880346][ T7896]  <TASK>
[  240.880350][ T7896]  dump_stack_lvl+0x16c/0x1f0
[  240.880371][ T7896]  should_fail_ex+0x512/0x640
[  240.880384][ T7896]  ? __kvmalloc_node_noprof+0x12e/0x9c0
[  240.880397][ T7896]  should_failslab+0xc2/0x120
[  240.880410][ T7896]  __kvmalloc_node_noprof+0x141/0x9c0
[  240.880421][ T7896]  ? page_pool_create_percpu+0x34e/0xc90
[  240.880434][ T7896]  ? page_pool_create_percpu+0x34e/0xc90
[  240.880443][ T7896]  page_pool_create_percpu+0x34e/0xc90
[  240.880455][ T7896]  bpf_test_run_xdp_live+0x191/0x770
[  240.880470][ T7896]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  240.880488][ T7896]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  240.880512][ T7896]  ? _copy_from_user+0x59/0xd0
[  240.880525][ T7896]  ? bpf_test_init.isra.0+0x51/0x130
[  240.880539][ T7896]  bpf_prog_test_run_xdp+0xd38/0x1660
[  240.880556][ T7896]  ? __fget_files+0x204/0x3c0
[  240.880567][ T7896]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  240.880582][ T7896]  ? __might_fault+0x20/0x190
[  240.880599][ T7896]  ? fput+0x9b/0xd0
[  240.880611][ T7896]  ? __bpf_prog_get+0x97/0x2a0
[  240.880624][ T7896]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  240.880638][ T7896]  __sys_bpf+0x1035/0x4980
[  240.880655][ T7896]  ? __pfx___sys_bpf+0x10/0x10
[  240.880672][ T7896]  ? find_held_lock+0x2b/0x80
[  240.880688][ T7896]  ? find_held_lock+0x2b/0x80
[  240.880704][ T7896]  ? __mutex_unlock_slowpath+0x161/0x7b0
[  240.880722][ T7896]  ? fput+0x9b/0xd0
[  240.880734][ T7896]  ? ksys_write+0x1ac/0x250
[  240.880743][ T7896]  ? __pfx_ksys_write+0x10/0x10
[  240.880755][ T7896]  __x64_sys_bpf+0x78/0xc0
[  240.880764][ T7896]  ? lockdep_hardirqs_on+0x7c/0x110
[  240.880780][ T7896]  do_syscall_64+0xcd/0xfa0
[  240.880790][ T7896]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.880801][ T7896] RIP: 0033:0x7f7c39b8f6c9
[  240.880810][ T7896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  240.880820][ T7896] RSP: 002b:00007f7c3aa44038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  240.880831][ T7896] RAX: ffffffffffffffda RBX: 00007f7c39de6090 RCX: 00007f7c39b8f6c9
[  240.880837][ T7896] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a
[  240.880843][ T7896] RBP: 00007f7c3aa44090 R08: 0000000000000000 R09: 0000000000000000
[  240.880849][ T7896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  240.880855][ T7896] R13: 00007f7c39de6128 R14: 00007f7c39de6090 R15: 00007ffd8cc5c718
[  240.880868][ T7896]  </TASK>
[  240.880872][ T7896] page_pool_create_percpu() gave up with errno -12
[  240.912196][   T30] audit: type=1400 audit(1762835863.195:485): avc:  denied  { write } for  pid=7892 comm="syz.1.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  241.237325][ T7898] netlink: 'syz.4.459': attribute type 33 has an invalid length.
[  241.279500][ T7898] netlink: 36 bytes leftover after parsing attributes in process `syz.4.459'.
[  241.497506][ T7907] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  242.207701][ T7913] loop6: detected capacity change from 0 to 2560
[  242.216586][ T7913] buffer_io_error: 32 callbacks suppressed
[  242.216614][ T7913] Buffer I/O error on dev loop6, logical block 0, async page read
[  242.230852][ T7913] Buffer I/O error on dev loop6, logical block 0, async page read
[  242.239522][ T7913] Buffer I/O error on dev loop6, logical block 0, async page read
[  242.247992][ T7913] Buffer I/O error on dev loop6, logical block 0, async page read
[  242.256787][ T7913] Buffer I/O error on dev loop6, logical block 0, async page read
[  242.265302][ T7913] Buffer I/O error on dev loop6, logical block 0, async page read
[  242.273712][ T7913] Buffer I/O error on dev loop6, logical block 0, async page read
[  242.282349][ T7913] Buffer I/O error on dev loop6, logical block 0, async page read
[  242.290631][ T7913] ldm_validate_partition_table(): Disk read failed.
[  242.297610][ T7913] Buffer I/O error on dev loop6, logical block 0, async page read
[  242.306018][ T7913] Buffer I/O error on dev loop6, logical block 0, async page read
[  242.314477][ T7913] Dev loop6: unable to read RDB block 0
[  242.321757][ T7913]  loop6: unable to read partition table
[  242.328271][ T7913] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³˜) failed (rc=-5)
[  243.876774][   T52] block nbd4: Receive control failed (result -32)
[  243.891058][ T7921] block nbd4: shutting down sockets
[  244.094417][ T5931] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  244.303385][ T5931] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  244.368707][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  244.394804][ T5931] usb 2-1: Product: syz
[  244.425743][ T5931] usb 2-1: Manufacturer: syz
[  244.452322][   T30] audit: type=1400 audit(1762835866.825:486): avc:  denied  { checkpoint_restore } for  pid=7934 comm="syz.4.468" capability=40  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  244.498812][ T5931] usb 2-1: SerialNumber: syz
[  244.695310][ T5133] block nbd2: Receive control failed (result -32)
[  244.705672][ T5931] usb 2-1: config 0 descriptor??
[  244.712772][ T7929] block nbd2: shutting down sockets
[  244.722051][ T5931] gspca_main: 055f:c230 too many config
[  244.916971][ T7931] syzkaller0: entered promiscuous mode
[  244.939898][ T7931] syzkaller0: entered allmulticast mode
[  244.957206][   T30] audit: type=1400 audit(1762835867.395:487): avc:  denied  { connect } for  pid=7939 comm="syz.2.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  244.998492][ T7941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  245.008630][ T7941] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  245.058944][ T5882] usb 2-1: USB disconnect, device number 18
[  245.061957][   T30] audit: type=1400 audit(1762835867.415:488): avc:  denied  { accept } for  pid=7939 comm="syz.2.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  245.306440][   T30] audit: type=1400 audit(1762835867.425:489): avc:  denied  { getopt } for  pid=7939 comm="syz.2.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  245.587868][ T7953] loop6: detected capacity change from 0 to 2560
[  245.595506][ T7953] ldm_validate_partition_table(): Disk read failed.
[  245.602353][ T7953] Dev loop6: unable to read RDB block 0
[  245.608298][ T7953]  loop6: unable to read partition table
[  245.614128][ T7953] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³˜) failed (rc=-5)
[  245.650796][ T5890] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  245.804368][ T5890] usb 6-1: Using ep0 maxpacket: 32
[  245.813112][ T5890] usb 6-1: config 0 has an invalid interface number: 85 but max is 0
[  245.830696][ T5890] usb 6-1: config 0 has no interface number 0
[  245.843161][ T5890] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  245.865593][ T5890] usb 6-1: config 0 interface 85 has no altsetting 0
[  245.882098][ T5890] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  245.898478][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  245.915065][ T5890] usb 6-1: Product: syz
[  245.923456][ T5890] usb 6-1: Manufacturer: syz
[  245.933312][ T5890] usb 6-1: SerialNumber: syz
[  245.947432][ T5890] usb 6-1: config 0 descriptor??
[  246.580005][ T5890] appletouch 6-1:0.85: Geyser mode initialized.
[  246.598004][ T5890] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input13
[  246.664432][ T5954] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  246.816592][ T5954] usb 5-1: device descriptor read/64, error -71
[  246.865363][ T7945] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7945 comm=syz.5.471
[  247.149459][ T5954] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  247.298070][ T7969] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  247.374347][ T5954] usb 5-1: device descriptor read/64, error -71
[  247.515921][ T5954] usb usb5-port1: attempt power cycle
[  247.542135][    T9] usb 6-1: USB disconnect, device number 4
[  247.565308][    T9] appletouch 6-1:0.85: input: appletouch disconnected
[  248.044268][ T7973] netlink: 'syz.1.477': attribute type 33 has an invalid length.
[  248.070981][ T7973] netlink: 36 bytes leftover after parsing attributes in process `syz.1.477'.
[  248.194371][ T5954] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  248.216237][ T5954] usb 5-1: device descriptor read/8, error -71
[  248.369409][ T7977] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.478'.
[  248.388852][   T30] audit: type=1326 audit(1762835870.795:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7975 comm="syz.1.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c39b8f6c9 code=0x7ffc0000
[  248.474716][   T30] audit: type=1326 audit(1762835870.795:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7975 comm="syz.1.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c39b8f6c9 code=0x7ffc0000
[  248.504558][ T5954] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  248.591281][ T5954] usb 5-1: device descriptor read/8, error -71
[  248.604522][   T30] audit: type=1326 audit(1762835870.795:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7975 comm="syz.1.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f7c39b8f6c9 code=0x7ffc0000
[  248.679439][   T30] audit: type=1326 audit(1762835870.795:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7975 comm="syz.1.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c39b8f6c9 code=0x7ffc0000
[  248.725023][ T5954] usb usb5-port1: unable to enumerate USB device
[  248.786422][ T7987] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  248.796943][ T7987] SELinux: failed to load policy
[  248.894731][ T5890] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  249.114388][ T5890] usb 7-1: Using ep0 maxpacket: 8
[  249.115813][   T30] audit: type=1326 audit(1762835870.795:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7975 comm="syz.1.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c39b8f6c9 code=0x7ffc0000
[  249.119560][ T7990] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  249.149831][ T7990] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  249.178927][ T5890] usb 7-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  249.189222][ T5890] usb 7-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  249.286077][   T30] audit: type=1326 audit(1762835870.795:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7975 comm="syz.1.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f7c39b8f6c9 code=0x7ffc0000
[  249.325432][ T5890] usb 7-1: Product: syz
[  249.329743][ T5890] usb 7-1: Manufacturer: syz
[  249.334867][ T5890] usb 7-1: SerialNumber: syz
[  249.340781][ T7990] vhci_hcd vhci_hcd.0: Device attached
[  249.397715][ T5954] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  249.408270][ T5890] usb 7-1: config 0 descriptor??
[  249.467991][ T5821] usb 37-1: new high-speed USB device number 2 using vhci_hcd
[  249.525476][ T5890] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  250.089160][ T5954] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e
[  250.098652][ T5954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  250.114396][ T5954] usb 3-1: Product: syz
[  250.118633][ T5954] usb 3-1: Manufacturer: syz
[  250.129780][   T30] audit: type=1326 audit(1762835870.795:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7975 comm="syz.1.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c39b8f6c9 code=0x7ffc0000
[  250.130152][ T5954] usb 3-1: SerialNumber: syz
[  250.530015][ T5954] usb 3-1: config 0 descriptor??
[  250.565056][ T5890] input: gspca_zc3xx as /devices/platform/dummy_hcd.6/usb7/7-1/input/input14
[  250.611595][   T30] audit: type=1326 audit(1762835870.795:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7975 comm="syz.1.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c39b8f6c9 code=0x7ffc0000
[  250.702200][ T8001] could not allocate digest TFM handle cryptd(blake2b-160)
[  250.862631][ T5875] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  250.891431][   T30] audit: type=1326 audit(1762835870.795:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7975 comm="syz.1.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f7c39b8f6c9 code=0x7ffc0000
[  251.924375][   T30] audit: type=1326 audit(1762835870.795:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7975 comm="syz.1.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c39b8f6c9 code=0x7ffc0000
[  251.928922][ T7983] netlink: 8 bytes leftover after parsing attributes in process `syz.6.480'.
[  251.988227][ T5954] mos7840 3-1:0.0: required endpoints missing
[  252.083403][ T7991] vhci_hcd: connection reset by peer
[  252.098363][ T5875] usb 2-1: Using ep0 maxpacket: 16
[  252.124398][   T50] vhci_hcd: stop threads
[  252.129626][   T50] vhci_hcd: release socket
[  252.195884][ T5875] usb 2-1: config 0 descriptor has 1 excess byte, ignoring
[  252.214171][ T5954] usb 3-1: USB disconnect, device number 23
[  252.223630][   T50] vhci_hcd: disconnect device
[  252.233604][ T5875] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024
[  252.238895][ T8018] netlink: 'syz.4.486': attribute type 33 has an invalid length.
[  252.266020][ T5875] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024
[  252.325392][ T8018] netlink: 36 bytes leftover after parsing attributes in process `syz.4.486'.
[  252.335537][ T5875] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  252.379411][ T5875] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[  252.406199][ T5890] usb 7-1: USB disconnect, device number 3
[  252.445567][ T5875] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  252.530205][ T5875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.564450][ T5875] usb 2-1: Product: syz
[  252.568650][ T5875] usb 2-1: Manufacturer: syz
[  252.573252][ T5875] usb 2-1: SerialNumber: syz
[  252.696533][ T5875] usb 2-1: config 0 descriptor??
[  252.702768][ T8004] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  252.811900][ T5875] mcba_usb 2-1:0.0 can0: couldn't setup read URBs
[  252.985185][ T5931] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  253.310720][ T5875] mcba_usb 2-1:0.0 can0: couldn't start device: -90
[  253.500708][ T5875] mcba_usb 2-1:0.0: probe with driver mcba_usb failed with error -90
[  253.535223][ T5875] usb 2-1: USB disconnect, device number 19
[  253.558139][ T5931] usb 6-1: config 220 has an invalid interface number: 76 but max is 2
[  253.587139][ T5931] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  253.685581][ T5931] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  253.731743][ T5931] usb 6-1: config 220 has no interface number 2
[  253.744413][ T5931] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  253.767917][ T5931] usb 6-1: config 220 interface 0 has no altsetting 0
[  253.782915][ T5931] usb 6-1: config 220 interface 76 has no altsetting 0
[  253.823133][ T5931] usb 6-1: config 220 interface 1 has no altsetting 0
[  253.884197][ T5931] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  253.925366][ T5931] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.992664][ T5931] usb 6-1: Product: syz
[  254.001308][ T5931] usb 6-1: Manufacturer: syz
[  254.023039][ T5931] usb 6-1: SerialNumber: syz
[  254.264563][ T8044] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  254.664614][ T5821] vhci_hcd: vhci_device speed not set
[  255.377440][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  255.383888][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  256.547526][ T5133] block nbd6: Receive control failed (result -32)
[  256.562703][ T8052] block nbd6: shutting down sockets
[  257.855505][ T5931] usb 6-1: selecting invalid altsetting 0
[  257.900595][ T5931] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  257.935319][ T5931] uvcvideo 6-1:220.0: No valid video chain found.
[  257.975586][ T5931] usb 6-1: selecting invalid altsetting 0
[  257.981360][ T5931] usbtest 6-1:220.1: probe with driver usbtest failed with error -22
[  257.995063][ T5931] usb 6-1: USB disconnect, device number 5
[  258.580997][ T8094] 9pnet: Found fid 0 not clunked
[  258.596916][   T30] kauditd_printk_skb: 18 callbacks suppressed
[  258.596933][   T30] audit: type=1400 audit(1762835881.035:518): avc:  denied  { create } for  pid=8093 comm="syz.1.505" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  258.783884][   T30] audit: type=1400 audit(1762835881.105:519): avc:  denied  { unlink } for  pid=5810 comm="syz-executor" name="file2" dev="tmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  258.898946][ T8107] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  259.917099][ T8112] netlink: 20 bytes leftover after parsing attributes in process `syz.2.509'.
[  260.632840][ T8116] syzkaller0: entered promiscuous mode
[  260.679730][ T8116] syzkaller0: entered allmulticast mode
[  260.868400][ T8121] netlink: 'syz.5.512': attribute type 33 has an invalid length.
[  260.876383][ T8121] netlink: 36 bytes leftover after parsing attributes in process `syz.5.512'.
[  260.960824][ T8126] netlink: 'syz.2.513': attribute type 33 has an invalid length.
[  261.054510][ T8126] netlink: 36 bytes leftover after parsing attributes in process `syz.2.513'.
[  261.375358][ T5875] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  261.720910][ T5875] usb 2-1: device descriptor read/64, error -71
[  262.014474][ T5821] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  262.051660][ T5875] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  262.280726][ T8146] loop6: detected capacity change from 0 to 2560
[  262.289643][ T8146] buffer_io_error: 32 callbacks suppressed
[  262.289672][ T8146] Buffer I/O error on dev loop6, logical block 0, async page read
[  262.303929][ T8146] Buffer I/O error on dev loop6, logical block 0, async page read
[  262.312467][ T8146] Buffer I/O error on dev loop6, logical block 0, async page read
[  262.320917][ T8146] Buffer I/O error on dev loop6, logical block 0, async page read
[  262.341582][ T8146] Buffer I/O error on dev loop6, logical block 0, async page read
[  262.350555][ T8146] Buffer I/O error on dev loop6, logical block 0, async page read
[  262.359064][ T8146] Buffer I/O error on dev loop6, logical block 0, async page read
[  262.367918][ T8146] Buffer I/O error on dev loop6, logical block 0, async page read
[  262.376132][ T8146] ldm_validate_partition_table(): Disk read failed.
[  262.390392][ T8146] Buffer I/O error on dev loop6, logical block 0, async page read
[  262.399007][ T8146] Buffer I/O error on dev loop6, logical block 0, async page read
[  262.408347][ T8146] Dev loop6: unable to read RDB block 0
[  262.416487][ T8146]  loop6: unable to read partition table
[  262.423645][ T8146] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³˜) failed (rc=-5)
[  262.505023][ T5875] usb 2-1: device descriptor read/64, error -71
[  262.677534][ T5875] usb usb2-port1: attempt power cycle
[  262.684372][ T5821] usb 3-1: Using ep0 maxpacket: 8
[  262.691074][ T5821] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  262.699717][ T5821] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  262.716538][ T5821] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  262.738032][ T5821] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  262.753257][ T5821] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  262.780802][ T5821] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  262.801687][ T5821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  262.840072][ T5182] ldm_validate_partition_table(): Disk read failed.
[  262.866495][ T5182] Dev loop6: unable to read RDB block 0
[  262.881219][ T5182]  loop6: unable to read partition table
[  263.117475][ T5875] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  263.155173][ T5875] usb 2-1: device descriptor read/8, error -71
[  264.076046][ T8160] netlink: 40 bytes leftover after parsing attributes in process `syz.2.517'.
[  264.090826][   T10] IPVS: starting estimator thread 0...
[  264.097111][ T8160] usbtmc 3-1:16.0: simple usb_control_msg failed -32
[  264.107759][   T10] usb 3-1: USB disconnect, device number 24
[  264.315133][ T5875] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  264.315169][ T8162] IPVS: using max 53 ests per chain, 127200 per kthread
[  264.566701][ T5875] usb 2-1: device not accepting address 23, error -71
[  264.574234][ T5875] usb usb2-port1: unable to enumerate USB device
[  264.591903][ T8169] syzkaller0: entered promiscuous mode
[  264.611588][ T8169] syzkaller0: entered allmulticast mode
[  265.588638][ T8179] loop6: detected capacity change from 0 to 2560
[  265.600921][ T8179] ldm_validate_partition_table(): Disk read failed.
[  265.609057][ T8179] Dev loop6: unable to read RDB block 0
[  265.797056][ T8180] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  265.824462][ T8179]  loop6: unable to read partition table
[  265.831201][ T8179] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³˜) failed (rc=-5)
[  267.262670][ T8186] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  267.781796][   T10] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  267.801879][ T8195] netlink: 16 bytes leftover after parsing attributes in process `syz.4.531'.
[  268.010063][ T8195] netlink: 16 bytes leftover after parsing attributes in process `syz.4.531'.
[  268.034466][   T10] usb 7-1: Using ep0 maxpacket: 16
[  268.478575][   T10] usb 7-1: config 0 descriptor has 1 excess byte, ignoring
[  268.493165][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024
[  268.507233][   T10] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024
[  268.517403][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  268.527618][   T10] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[  268.537965][ T8204] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  268.714787][   T10] usb 7-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  268.744612][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  268.783318][   T10] usb 7-1: Product: syz
[  268.803560][   T10] usb 7-1: Manufacturer: syz
[  268.863522][   T10] usb 7-1: SerialNumber: syz
[  268.942143][   T10] usb 7-1: config 0 descriptor??
[  268.942742][ T5133] Bluetooth: hci2: unexpected event for opcode 0x1004
[  269.186463][ T8192] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  269.292153][   T10] mcba_usb 7-1:0.0 can0: couldn't setup read URBs
[  269.320497][   T10] mcba_usb 7-1:0.0 can0: couldn't start device: -90
[  269.475132][   T10] mcba_usb 7-1:0.0: probe with driver mcba_usb failed with error -90
[  269.666005][ T5931] usb 7-1: USB disconnect, device number 4
[  270.526502][ T8227] netlink: 'syz.5.537': attribute type 33 has an invalid length.
[  270.535183][ T8227] netlink: 36 bytes leftover after parsing attributes in process `syz.5.537'.
[  271.288531][ T8239] loop6: detected capacity change from 0 to 2560
[  271.297685][ T8239] buffer_io_error: 43 callbacks suppressed
[  271.297715][ T8239] Buffer I/O error on dev loop6, logical block 0, async page read
[  271.312249][ T8239] Buffer I/O error on dev loop6, logical block 0, async page read
[  271.320640][ T8239] Buffer I/O error on dev loop6, logical block 0, async page read
[  271.329502][ T8239] Buffer I/O error on dev loop6, logical block 0, async page read
[  271.343616][ T8239] Buffer I/O error on dev loop6, logical block 0, async page read
[  271.352593][ T8239] Buffer I/O error on dev loop6, logical block 0, async page read
[  271.361471][ T8239] Buffer I/O error on dev loop6, logical block 0, async page read
[  271.370103][ T8239] Buffer I/O error on dev loop6, logical block 0, async page read
[  271.378429][ T8239] ldm_validate_partition_table(): Disk read failed.
[  271.385864][ T8239] Buffer I/O error on dev loop6, logical block 0, async page read
[  271.394807][ T8239] Buffer I/O error on dev loop6, logical block 0, async page read
[  271.403704][ T8239] Dev loop6: unable to read RDB block 0
[  271.411458][ T8239]  loop6: unable to read partition table
[  271.418007][ T8239] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³˜) failed (rc=-5)
[  272.104787][ T8243] tipc: Started in network mode
[  272.110082][ T8243] tipc: Node identity d6d4eea195fe, cluster identity 4711
[  272.188557][ T8247] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=28694 sclass=netlink_xfrm_socket pid=8247 comm=syz.2.543
[  272.234097][ T8243] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  272.264996][ T8248] syzkaller0: entered promiscuous mode
[  272.270521][ T8248] syzkaller0: entered allmulticast mode
[  272.436326][ T8256] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64
[  273.079706][ T5133] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  273.088557][ T5133] Bluetooth: hci2: Injecting HCI hardware error event
[  273.097709][   T52] Bluetooth: hci2: hardware error 0x00
[  273.423456][ T5890] tipc: Node number set to 1126887073
[  273.686866][ T8256] audit: out of memory in audit_log_start
[  273.854894][ T8242] tipc: Resetting bearer <eth:syzkaller0>
[  273.933815][   T30] audit: type=1400 audit(1762835896.335:520): avc:  denied  { bind } for  pid=8262 comm="syz.1.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  273.990801][ T8242] tipc: Disabling bearer <eth:syzkaller0>
[  274.142315][   T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  274.306368][   T10] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  274.321021][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  274.351487][   T10] usb 6-1: config 0 descriptor??
[  274.371627][   T10] cp210x 6-1:0.0: cp210x converter detected
[  274.598962][ T8281] loop6: detected capacity change from 0 to 2560
[  274.609144][ T8281] ldm_validate_partition_table(): Disk read failed.
[  274.616850][ T8281] Dev loop6: unable to read RDB block 0
[  274.623920][ T8281]  loop6: unable to read partition table
[  274.630245][ T8281] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³˜) failed (rc=-5)
[  274.681397][ T8275] syzkaller0: entered promiscuous mode
[  275.022779][ T8275] syzkaller0: entered allmulticast mode
[  275.306694][   T10] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32
[  275.740413][   T10] usb 6-1: cp210x converter now attached to ttyUSB0
[  275.774641][   T52] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  276.244866][   T10] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  277.547277][   T10] usb 7-1: Using ep0 maxpacket: 32
[  277.556719][   T10] usb 7-1: config 0 has an invalid interface number: 196 but max is 0
[  277.565703][   T10] usb 7-1: config 0 has no interface number 0
[  277.571853][   T10] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  277.583360][   T10] usb 7-1: config 0 interface 196 has no altsetting 0
[  277.596217][   T10] usb 7-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[  277.618702][ T5882] usb 6-1: USB disconnect, device number 6
[  277.628182][ T5882] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  277.642897][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  277.742905][   T10] usb 7-1: Product: syz
[  277.770733][   T10] usb 7-1: Manufacturer: syz
[  277.798495][   T10] usb 7-1: SerialNumber: syz
[  277.806180][ T5882] cp210x 6-1:0.0: device disconnected
[  277.815283][   T10] usb 7-1: config 0 descriptor??
[  277.820907][ T8287] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  278.264696][ T8301] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=28694 sclass=netlink_xfrm_socket pid=8301 comm=syz.5.556
[  278.441512][   T10] ipheth 7-1:0.196: ipheth_enable_ncm: usb_control_msg: -71
[  278.469528][   T10] ipheth 7-1:0.196: Apple iPhone USB Ethernet device attached
[  278.499879][   T10] usb 7-1: USB disconnect, device number 5
[  278.936370][   T30] audit: type=1400 audit(1762835901.365:521): avc:  denied  { connect } for  pid=8310 comm="syz.1.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  279.003188][   T30] audit: type=1400 audit(1762835901.405:522): avc:  denied  { write } for  pid=8310 comm="syz.1.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  279.103040][   T10] ipheth 7-1:0.196: Apple iPhone USB Ethernet now disconnected
[  279.298571][   T30] audit: type=1400 audit(1762835901.735:523): avc:  denied  { setopt } for  pid=8310 comm="syz.1.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  279.557171][ T5875] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  279.734542][ T5875] usb 5-1: Using ep0 maxpacket: 16
[  279.894909][ T8330] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  279.989289][ T5875] usb 5-1: config 0 descriptor has 1 excess byte, ignoring
[  280.002098][ T5875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024
[  280.083209][ T5875] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024
[  280.179912][ T5875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  280.223321][ T8332] syzkaller0: entered promiscuous mode
[  280.230255][ T5875] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[  280.282762][ T8332] syzkaller0: entered allmulticast mode
[  280.339492][ T5875] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  280.357609][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  280.389899][ T5875] usb 5-1: Product: syz
[  280.400623][ T5875] usb 5-1: Manufacturer: syz
[  280.413243][ T5875] usb 5-1: SerialNumber: syz
[  280.463370][ T5875] usb 5-1: config 0 descriptor??
[  280.495163][ T8320] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  280.580251][ T5875] mcba_usb 5-1:0.0 can0: couldn't setup read URBs
[  280.615974][ T5875] mcba_usb 5-1:0.0 can0: couldn't start device: -90
[  280.797413][ T5875] mcba_usb 5-1:0.0: probe with driver mcba_usb failed with error -90
[  282.060582][ T5890] usb 5-1: USB disconnect, device number 27
[  282.849706][ T8352] FAULT_INJECTION: forcing a failure.
[  282.849706][ T8352] name failslab, interval 1, probability 0, space 0, times 0
[  283.184976][ T8352] CPU: 1 UID: 0 PID: 8352 Comm: syz.4.568 Not tainted syzkaller #0 PREEMPT(full) 
[  283.185003][ T8352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  283.185014][ T8352] Call Trace:
[  283.185021][ T8352]  <TASK>
[  283.185028][ T8352]  dump_stack_lvl+0x16c/0x1f0
[  283.185062][ T8352]  should_fail_ex+0x512/0x640
[  283.185080][ T8352]  ? kmem_cache_alloc_node_noprof+0x65/0x770
[  283.185107][ T8352]  should_failslab+0xc2/0x120
[  283.185128][ T8352]  kmem_cache_alloc_node_noprof+0x78/0x770
[  283.185153][ T8352]  ? copy_process+0x4b5/0x76a0
[  283.185182][ T8352]  ? copy_process+0x4b5/0x76a0
[  283.185201][ T8352]  copy_process+0x4b5/0x76a0
[  283.185234][ T8352]  ? __pfx_copy_process+0x10/0x10
[  283.185261][ T8352]  ? lockdep_init_map_type+0x5c/0x280
[  283.185280][ T8352]  ? lockdep_init_map_type+0x5c/0x280
[  283.185297][ T8352]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  283.185323][ T8352]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  283.185344][ T8352]  vhost_task_create+0x1d2/0x370
[  283.185364][ T8352]  ? __pfx_vhost_task_create+0x10/0x10
[  283.185389][ T8352]  ? __pfx_vhost_task_fn+0x10/0x10
[  283.185419][ T8352]  kvm_mmu_post_init_vm+0x1b7/0x380
[  283.185440][ T8352]  kvm_arch_vcpu_ioctl_run+0x66/0x1920
[  283.185459][ T8352]  ? kvm_vcpu_ioctl+0x14c5/0x1690
[  283.185489][ T8352]  kvm_vcpu_ioctl+0x5eb/0x1690
[  283.185515][ T8352]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  283.185539][ T8352]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  283.185563][ T8352]  ? do_vfs_ioctl+0x128/0x14f0
[  283.185588][ T8352]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  283.185612][ T8352]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  283.185642][ T8352]  ? hook_file_ioctl_common+0x145/0x410
[  283.185672][ T8352]  ? selinux_file_ioctl+0x180/0x270
[  283.185689][ T8352]  ? selinux_file_ioctl+0xb4/0x270
[  283.185709][ T8352]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  283.185734][ T8352]  __x64_sys_ioctl+0x18e/0x210
[  283.185760][ T8352]  do_syscall_64+0xcd/0xfa0
[  283.185778][ T8352]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  283.185794][ T8352] RIP: 0033:0x7f258fd8f6c9
[  283.185809][ T8352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  283.185825][ T8352] RSP: 002b:00007f2590be7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  283.185841][ T8352] RAX: ffffffffffffffda RBX: 00007f258ffe5fa0 RCX: 00007f258fd8f6c9
[  283.185852][ T8352] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007
[  283.185862][ T8352] RBP: 00007f2590be7090 R08: 0000000000000000 R09: 0000000000000000
[  283.185872][ T8352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  283.185881][ T8352] R13: 00007f258ffe6038 R14: 00007f258ffe5fa0 R15: 00007ffca25d60e8
[  283.185905][ T8352]  </TASK>
[  284.500718][ T8368] bridge0: port 2(bridge_slave_1) entered disabled state
[  284.509053][ T8368] bridge0: port 1(bridge_slave_0) entered disabled state
[  284.734686][ T8374] nbd: socks must be embedded in a SOCK_ITEM attr
[  284.792322][ T8376] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.573'.
[  284.899074][ T8378] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=8378 comm=syz.6.574
[  284.914009][ T8376] ksmbd: Unknown IPC event: 3, ignore.
[  284.994657][   T30] audit: type=1400 audit(1762835907.345:524): avc:  denied  { accept } for  pid=8375 comm="syz.4.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  285.228753][ T8379] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.573'.
[  286.327242][ T8379] ksmbd: Unknown IPC event: 3, ignore.
[  287.672439][ T8409] netlink: 24 bytes leftover after parsing attributes in process `syz.4.582'.
[  287.755429][ T8411] evm: overlay not supported
[  287.767467][   T30] audit: type=1400 audit(1762835910.185:525): avc:  denied  { name_bind } for  pid=8402 comm="syz.6.578" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1
[  287.926327][ T8409] IPVS: Error connecting to the multicast addr
[  288.047241][   T30] audit: type=1400 audit(1762835910.485:526): avc:  denied  { getopt } for  pid=8408 comm="syz.4.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  288.629000][ T8421] netlink: 16 bytes leftover after parsing attributes in process `syz.1.583'.
[  288.676693][ T8421] netlink: 16 bytes leftover after parsing attributes in process `syz.1.583'.
[  289.331208][ T8429] bridge0: port 2(bridge_slave_1) entered disabled state
[  289.339151][ T8429] bridge0: port 1(bridge_slave_0) entered disabled state
[  289.425310][   T10] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  289.531278][ T8429] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  289.563978][ T8429] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  289.588913][   T10] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  289.608096][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  289.633169][   T10] usb 5-1: Product: syz
[  289.642395][   T10] usb 5-1: Manufacturer: syz
[  289.653560][   T10] usb 5-1: SerialNumber: syz
[  289.726128][   T10] usb 5-1: config 0 descriptor??
[  289.763463][   T30] audit: type=1400 audit(1762835912.185:527): avc:  denied  { map } for  pid=8437 comm="syz.5.590" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  289.795374][   T10] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  289.813354][   T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  289.880869][   T10] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  289.906285][   T10] usb 5-1: media controller created
[  289.940136][ T8429] batman_adv: batadv0: Interface deactivated: gretap1
[  290.002996][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  290.016342][ T8432] geneve2: entered promiscuous mode
[  290.063491][ T5906] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  290.088394][ T5906] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20002 - 0
[  290.119196][ T5906] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  290.142475][   T10] DVB: Unable to find symbol mt352_attach()
[  290.157446][ T5906] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20002 - 0
[  290.214631][ T5906] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  290.231417][   T10] DVB: Unable to find symbol nxt6000_attach()
[  290.244212][ T5906] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20002 - 0
[  290.258976][   T10] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  290.292321][ T5906] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  290.309011][   T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input15
[  290.330378][ T5906] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20002 - 0
[  290.349813][   T10] dvb-usb: schedule remote query interval to 1000 msecs.
[  290.364967][   T10] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  290.418193][   T10] dvb-usb: bulk message failed: -22 (7/0)
[  290.434417][   T10] dvb-usb: bulk message failed: -22 (7/0)
[  290.450084][   T10] usb 5-1: USB disconnect, device number 28
[  290.821414][   T30] audit: type=1400 audit(1762835913.255:528): avc:  denied  { read write } for  pid=8455 comm="syz.4.595" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  290.869282][   T30] audit: type=1400 audit(1762835913.255:529): avc:  denied  { open } for  pid=8455 comm="syz.4.595" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  290.874545][ T5829] udevd[5829]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory
[  290.985475][   T10] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  291.036403][ T5829] udevd[5829]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory
[  291.407779][   T30] audit: type=1326 audit(1762835913.845:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8476 comm="syz.5.601" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a2cb8f6c9 code=0x0
[  292.674437][   T30] audit: type=1400 audit(1762835915.105:531): avc:  denied  { listen } for  pid=8498 comm="syz.6.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  294.070964][ T8525] netlink: 'syz.5.617': attribute type 1 has an invalid length.
[  294.080642][ T8527] kAFS: No cell specified
[  294.086723][ T8527] netlink: 12 bytes leftover after parsing attributes in process `syz.2.614'.
[  294.172140][ T8525] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  294.181871][ T8528] netlink: 56 bytes leftover after parsing attributes in process `syz.2.614'.
[  294.206867][   T30] audit: type=1400 audit(1762835916.625:532): avc:  denied  { append } for  pid=8529 comm="syz.4.615" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  295.943601][   T30] audit: type=1400 audit(1762835918.365:533): avc:  denied  { getopt } for  pid=8555 comm="syz.6.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  296.218538][ T8569] netlink: 8 bytes leftover after parsing attributes in process `syz.5.627'.
[  296.274726][   T30] audit: type=1400 audit(1762835918.685:534): avc:  denied  { create } for  pid=8555 comm="syz.6.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  296.284501][ T8569] netlink: 28 bytes leftover after parsing attributes in process `syz.5.627'.
[  296.422981][ T8569] netlink: 8 bytes leftover after parsing attributes in process `syz.5.627'.
[  296.440495][ T8569] netlink: 28 bytes leftover after parsing attributes in process `syz.5.627'.
[  296.449476][   T30] audit: type=1400 audit(1762835918.875:535): avc:  denied  { setopt } for  pid=8571 comm="syz.2.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  296.863091][   T30] audit: type=1400 audit(1762835919.295:536): avc:  denied  { read } for  pid=8584 comm="syz.4.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  297.047559][ T8587] tipc: Started in network mode
[  297.052463][ T8587] tipc: Node identity 465a9d3ce51, cluster identity 4711
[  297.059896][ T8587] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  297.069599][ T8587] syzkaller0: entered promiscuous mode
[  297.081566][ T8587] syzkaller0: entered allmulticast mode
[  297.121005][ T8587] tipc: Resetting bearer <eth:syzkaller0>
[  297.131814][ T8586] tipc: Resetting bearer <eth:syzkaller0>
[  297.147277][ T8586] tipc: Disabling bearer <eth:syzkaller0>
[  297.406301][ T8591] vlan2: entered promiscuous mode
[  297.411667][ T8591] vlan2: entered allmulticast mode
[  297.496433][ T8591] hsr_slave_1: entered allmulticast mode
[  297.685614][ T8600] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  297.724636][ T8600] block device autoloading is deprecated and will be removed.
[  297.735032][ T8602] loop4: detected capacity change from 0 to 2560
[  297.805266][ T8600] buffer_io_error: 27 callbacks suppressed
[  297.805276][ T8600] Buffer I/O error on dev loop4, logical block 0, lost async page write
[  297.821540][ T5829] Buffer I/O error on dev loop4, logical block 256, lost async page write
[  297.833075][ T5829] Buffer I/O error on dev loop4, logical block 257, lost async page write
[  297.971144][ T8604] block device autoloading is deprecated and will be removed.
[  297.994194][ T5829] Buffer I/O error on dev loop4, logical block 258, lost async page write
[  298.020861][ T5829] Buffer I/O error on dev loop4, logical block 259, lost async page write
[  298.041959][ T8600] Buffer I/O error on dev loop4, logical block 1, lost async page write
[  298.058232][ T8600] Buffer I/O error on dev loop4, logical block 2, lost async page write
[  298.069936][ T5829] Buffer I/O error on dev loop4, logical block 260, lost async page write
[  298.097991][ T8600] Buffer I/O error on dev loop4, logical block 3, lost async page write
[  298.115758][ T8600] Buffer I/O error on dev loop4, logical block 4, lost async page write
[  298.268912][ T8612] netlink: 24 bytes leftover after parsing attributes in process `syz.1.641'.
[  299.815282][ T8633] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  299.918815][ T8633] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  299.994718][ T5875] usb 7-1: new full-speed USB device number 6 using dummy_hcd
[  299.995698][ T8633] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  300.127016][ T8636] tipc: Started in network mode
[  300.131946][ T8636] tipc: Node identity ac1414aa, cluster identity 4711
[  300.145788][ T5875] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  300.151791][ T8636] tipc: Enabled bearer <udp:s>, priority 10
[  300.156384][ T5875] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  300.392383][ T5875] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  300.496615][ T5875] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  300.958593][ T5875] usb 7-1: GET_CAPABILITIES returned 0
[  300.989341][ T5875] usbtmc 7-1:16.0: can't read capabilities
[  301.098435][   T30] audit: type=1400 audit(1762835923.445:537): avc:  denied  { lock } for  pid=8644 comm="syz.5.652" path="/dev/video1" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  301.265552][   T48] tipc: Node number set to 2886997162
[  301.500736][ T5875] usb 7-1: USB disconnect, device number 6
[  302.302044][ T8668] netlink: 200 bytes leftover after parsing attributes in process `syz.4.656'.
[  302.720187][   T30] audit: type=1400 audit(1762835925.155:538): avc:  denied  { write } for  pid=8671 comm="syz.6.658" path="socket:[21557]" dev="sockfs" ino=21557 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  302.792800][ T8672] tipc: Started in network mode
[  302.802342][ T8672] tipc: Node identity ac1414aa, cluster identity 4711
[  302.814124][ T8672] tipc: Enabled bearer <udp:syz2>, priority 10
[  302.825162][ T8672] tipc: Enabled bearer <ib:wg1>, priority 0
[  302.872809][   T30] audit: type=1400 audit(1762835925.295:539): avc:  denied  { setopt } for  pid=8671 comm="syz.6.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  303.019770][   T30] audit: type=1400 audit(1762835925.455:540): avc:  denied  { setopt } for  pid=8658 comm="syz.4.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  303.504533][   T30] audit: type=1400 audit(1762835925.915:541): avc:  denied  { read write } for  pid=8682 comm="syz.1.659" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  303.614644][ T5133] Bluetooth: hci5: command 0x0406 tx timeout
[  304.036342][   T10] tipc: Node number set to 2886997162
[  304.056636][   T30] audit: type=1400 audit(1762835925.915:542): avc:  denied  { open } for  pid=8682 comm="syz.1.659" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  304.090019][   T30] audit: type=1400 audit(1762835926.475:543): avc:  denied  { setopt } for  pid=8684 comm="syz.5.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  304.504458][   T48] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  304.655293][   T48] usb 6-1: Using ep0 maxpacket: 16
[  304.661711][   T48] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  304.695505][   T48] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  304.724344][   T48] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  304.774456][   T48] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576
[  304.819282][   T48] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  304.904708][   T48] usb 6-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40
[  304.913907][   T48] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  304.922348][   T48] usb 6-1: SerialNumber: syz
[  304.937413][ T8689] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  304.949524][   T48] cdc_acm 6-1:1.0: Control and data interfaces are not separated!
[  304.980138][   T48] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -12
[  305.214357][ T5954] usb 3-1: new full-speed USB device number 25 using dummy_hcd
[  305.370237][ T5954] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  305.384056][ T5954] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  305.414021][ T5954] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  305.448749][ T5954] usb 3-1: config 0 descriptor??
[  305.471675][ T8702] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  305.657973][ T8708] netlink: 27 bytes leftover after parsing attributes in process `syz.4.665'.
[  305.805373][   T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  305.850179][   T30] audit: type=1400 audit(1762835928.285:544): avc:  denied  { module_request } for  pid=8712 comm="syz.4.668" kmod="netdev-vxcan1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  305.925516][ T5954] elan 0003:04F3:0755.0003: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0
[  305.984581][   T10] usb 2-1: Using ep0 maxpacket: 16
[  305.998441][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  306.050236][   T10] usb 2-1: config 0 has no interfaces?
[  306.092380][   T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77
[  306.126407][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  306.158352][ T5954] usb 3-1: USB disconnect, device number 25
[  306.162310][   T10] usb 2-1: Product: syz
[  306.191046][   T10] usb 2-1: Manufacturer: syz
[  306.201650][   T10] usb 2-1: SerialNumber: syz
[  306.218100][   T10] usb 2-1: config 0 descriptor??
[  306.403366][   T10] usb 6-1: USB disconnect, device number 7
[  306.498415][ T5931] usb 2-1: USB disconnect, device number 24
[  306.600133][   T30] audit: type=1400 audit(1762835929.015:545): avc:  denied  { append } for  pid=8726 comm="syz.6.671" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  307.396657][ T8740] binder: 8738:8740 ioctl 4018620d 0 returned -22
[  307.426614][ T8744] tipc: Enabled bearer <udp:s>, priority 10
[  307.508873][ T8747] binder: 8738:8747 ioctl c018620c 0 returned -14
[  308.222836][ T5931] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  308.446087][ T5931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  308.467341][ T5931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  308.501152][ T5931] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  308.624537][ T5931] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  308.686174][ T5931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.704874][ T5875] tipc: Node number set to 2739576124
[  308.715698][ T5931] usb 3-1: config 0 descriptor??
[  308.954575][ T5875] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  309.105335][ T5875] usb 7-1: Using ep0 maxpacket: 32
[  309.127855][ T5875] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  309.206436][ T5875] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  309.239960][ T5931] plantronics 0003:047F:FFFF.0004: reserved main item tag 0xd
[  309.305433][ T5875] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[  309.324926][ T5931] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  309.381519][ T5875] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  309.452092][ T5875] usb 7-1: config 0 descriptor??
[  309.499634][ T8781] input: syz0 as /devices/virtual/input/input17
[  309.507891][ T5931] usb 3-1: USB disconnect, device number 26
[  311.224060][    T9] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  311.347689][ T5875] usb 7-1: string descriptor 0 read error: -71
[  311.385048][ T5875] usbhid 7-1:0.0: can't add hid device: -71
[  311.391010][ T5875] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  311.452797][ T5875] usb 7-1: USB disconnect, device number 7
[  311.479992][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  311.726160][   T30] audit: type=1326 audit(1762835934.165:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8806 comm="syz.1.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c39b8f6c9 code=0x7ffc0000
[  311.766186][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  311.823114][    T9] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  311.949453][   T30] audit: type=1326 audit(1762835934.195:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8806 comm="syz.1.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c39b8f6c9 code=0x7ffc0000
[  311.986604][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  312.067675][    T9] usb 5-1: config 0 descriptor??
[  312.086396][ T8823] input: syz1 as /devices/virtual/input/input18
[  312.185009][ T8823] netlink: 'syz.6.688': attribute type 1 has an invalid length.
[  312.258632][ T8824] netlink: 52 bytes leftover after parsing attributes in process `syz.6.688'.
[  312.610879][    T9] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0
[  312.674617][    T9] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0
[  312.727351][    T9] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0
[  312.757547][    T9] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0
[  312.801868][    T9] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0
[  312.934604][    T9] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0
[  312.941623][    T9] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0
[  313.027751][    T9] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0
[  313.420083][    T9] cp2112 0003:10C4:EA90.0005: Part Number: 0x82 Device Version: 0xFE
[  313.828016][ T8848] netlink: 'syz.2.693': attribute type 10 has an invalid length.
[  313.835907][ T8848] netlink: 40 bytes leftover after parsing attributes in process `syz.2.693'.
[  313.845480][ T8848] batadv0: entered promiscuous mode
[  313.850777][ T8848] batadv0: entered allmulticast mode
[  313.865156][ T8848] 8021q: adding VLAN 0 to HW filter on device batadv0
[  313.910485][ T8848] bridge0: port 3(batadv0) entered blocking state
[  314.068069][ T8805] cp2112 0003:10C4:EA90.0005: Multi-message I2C transactions not supported
[  314.085572][ T8848] bridge0: port 3(batadv0) entered disabled state
[  314.115053][    T9] cp2112 0003:10C4:EA90.0005: error reading lock byte: -71
[  314.159182][    T9] usb 5-1: USB disconnect, device number 29
[  314.390540][ T5912] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  314.399803][ T5912] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  314.745953][   T30] audit: type=1400 audit(1762835937.185:548): avc:  denied  { connect } for  pid=8856 comm="syz.1.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  315.194944][    T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  315.698553][    T9] usb 6-1: Using ep0 maxpacket: 16
[  315.740622][    T9] usb 6-1: config index 0 descriptor too short (expected 83, got 18)
[  315.759087][    T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  315.966900][    T9] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  316.117455][    T9] usb 6-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=4f.75
[  316.127514][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  316.157778][    T9] usb 6-1: Product: syz
[  316.166096][    T9] usb 6-1: Manufacturer: syz
[  316.175897][    T9] usb 6-1: SerialNumber: syz
[  316.200757][    T9] usb 6-1: config 0 descriptor??
[  316.505657][ T8866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  316.515894][ T8866] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  316.874588][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  316.884022][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  316.934594][    T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  317.010728][ T8886] netlink: 32 bytes leftover after parsing attributes in process `syz.6.704'.
[  317.089510][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  317.111010][ T8886] netlink: 152 bytes leftover after parsing attributes in process `syz.6.704'.
[  317.121566][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  317.142021][ T8886] netlink: 152 bytes leftover after parsing attributes in process `syz.6.704'.
[  317.151165][    T9] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  317.170706][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  317.192194][    T9] usb 3-1: config 0 descriptor??
[  317.735594][    T9] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0
[  317.744157][    T9] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0
[  317.777281][    T9] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0
[  317.808921][    T9] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0
[  317.809417][ T8907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.712'.
[  317.885254][    T9] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0
[  318.094295][   T30] audit: type=1400 audit(1762835940.485:549): avc:  denied  { read } for  pid=8899 comm="syz.4.711" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  318.096527][    T9] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0
[  318.124112][    T9] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0
[  318.293188][   T30] audit: type=1400 audit(1762835940.485:550): avc:  denied  { open } for  pid=8899 comm="syz.4.711" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  318.436230][    T9] cp2112 0003:10C4:EA90.0006: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0
[  318.537347][  T910] usb 6-1: USB disconnect, device number 8
[  318.567739][    T9] cp2112 0003:10C4:EA90.0006: error requesting version
[  318.582598][ T8903] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  318.589973][ T8903] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  318.664527][ T8903] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  318.671073][ T8903] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  318.684008][    T9] cp2112 0003:10C4:EA90.0006: probe with driver cp2112 failed with error -32
[  318.711943][ T8903] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  318.719285][ T8903] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  318.750240][ T8903] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  318.797984][ T8903] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  318.826785][ T8903] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  318.834014][ T8903] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  318.850675][ T8903] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  318.859512][ T8903] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  318.892419][ T8903] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  319.194332][   T48] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  319.395355][   T48] usb 2-1: config 0 has no interfaces?
[  319.400895][   T48] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  319.435516][   T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  319.478585][   T48] usb 2-1: config 0 descriptor??
[  319.971039][ T8926] pim6reg: entered allmulticast mode
[  319.988151][ T8926] pim6reg: left allmulticast mode
[  320.002356][   T30] audit: type=1326 audit(1762835942.365:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8920 comm="syz.6.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f138f6c9 code=0x7ffc0000
[  320.039360][   T30] audit: type=1326 audit(1762835942.365:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8920 comm="syz.6.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f138f6c9 code=0x7ffc0000
[  320.110910][   T30] audit: type=1326 audit(1762835942.365:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8920 comm="syz.6.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb9f138df10 code=0x7ffc0000
[  320.150508][   T48] usb 3-1: USB disconnect, device number 27
[  320.162888][    T9] usb 2-1: USB disconnect, device number 25
[  320.276635][   T30] audit: type=1326 audit(1762835942.375:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8920 comm="syz.6.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f138f6c9 code=0x7ffc0000
[  320.303156][   T30] audit: type=1326 audit(1762835942.375:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8920 comm="syz.6.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb9f138f6c9 code=0x7ffc0000
[  320.330323][   T30] audit: type=1326 audit(1762835942.375:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8920 comm="syz.6.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f138f6c9 code=0x7ffc0000
[  320.363241][   T30] audit: type=1326 audit(1762835942.375:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8920 comm="syz.6.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f138f6c9 code=0x7ffc0000
[  320.516549][   T30] audit: type=1326 audit(1762835942.375:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8920 comm="syz.6.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fb9f138f6c9 code=0x7ffc0000
[  320.670978][   T52] Bluetooth: hci0: command 0x0406 tx timeout
[  320.734707][ T5133] Bluetooth: hci1: command 0x0406 tx timeout
[  320.740864][   T52] Bluetooth: hci3: command 0x0406 tx timeout
[  320.808279][ T8934] netlink: 8 bytes leftover after parsing attributes in process `syz.5.719'.
[  320.817581][ T8934] netlink: 4 bytes leftover after parsing attributes in process `syz.5.719'.
[  320.826496][   T52] Bluetooth: hci4: command 0x0405 tx timeout
[  320.832626][ T8934] netlink: 'syz.5.719': attribute type 6 has an invalid length.
[  320.842442][ T8934] netlink: 'syz.5.719': attribute type 5 has an invalid length.
[  320.867189][ T8937] input: syz0 as /devices/virtual/input/input22
[  320.894647][ T5133] Bluetooth: hci5: command 0x0406 tx timeout
[  320.900762][   T52] Bluetooth: hci6: command 0x0405 tx timeout
[  322.734346][   T52] Bluetooth: hci0: command 0x0406 tx timeout
[  322.814379][   T52] Bluetooth: hci3: command 0x0406 tx timeout
[  322.820408][   T52] Bluetooth: hci1: command 0x0406 tx timeout
[  322.884944][ T8973] program syz.5.728 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  322.916122][   T52] Bluetooth: hci4: command 0x0405 tx timeout
[  322.974555][   T52] Bluetooth: hci6: command 0x0405 tx timeout
[  322.980629][   T52] Bluetooth: hci5: command 0x0406 tx timeout
[  323.715697][  T910] usb 3-1: new full-speed USB device number 28 using dummy_hcd
[  324.028369][   T30] kauditd_printk_skb: 33 callbacks suppressed
[  324.028384][   T30] audit: type=1400 audit(1762835946.415:592): avc:  denied  { create } for  pid=8976 comm="syz.4.730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  324.066275][  T910] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  324.078448][  T910] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  324.278395][  T910] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  324.314352][  T910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  324.482892][ T9003] netlink: 156 bytes leftover after parsing attributes in process `syz.1.738'.
[  324.562478][ T9003] netlink: 64 bytes leftover after parsing attributes in process `syz.1.738'.
[  324.608129][  T910] usb 3-1: GET_CAPABILITIES returned 0
[  324.617469][  T910] usbtmc 3-1:16.0: can't read capabilities
[  325.013038][  T910] usb 3-1: USB disconnect, device number 28
[  325.055568][   T52] Bluetooth: hci6: command 0x0405 tx timeout
[  325.134630][   T31] INFO: task syz.0.278:7003 blocked for more than 143 seconds.
[  325.142193][   T31]       Not tainted syzkaller #0
[  325.164297][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  325.173040][   T31] task:syz.0.278       state:D stack:27624 pid:7003  tgid:7001  ppid:5805   task_flags:0x400040 flags:0x00080002
[  325.309728][   T31] Call Trace:
[  325.321490][   T31]  <TASK>
[  325.326943][   T31]  __schedule+0x1190/0x5de0
[  325.336746][   T31]  ? check_path.constprop.0+0x24/0x50
[  325.348578][   T31]  ? __pfx___schedule+0x10/0x10
[  325.353583][   T31]  ? find_held_lock+0x2b/0x80
[  325.358654][   T31]  ? schedule+0x2d7/0x3a0
[  325.363021][   T31]  ? comedi_open+0xe0/0x5a0
[  325.368732][   T31]  schedule+0xe7/0x3a0
[  325.381720][   T31]  schedule_preempt_disabled+0x13/0x30
[  325.406957][   T31]  __mutex_lock+0x818/0x1060
[  325.421052][   T31]  ? comedi_open+0xe0/0x5a0
[  325.443599][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  325.467255][   T31]  ? __pfx_comedi_open+0x10/0x10
[  325.490004][   T31]  ? comedi_open+0xe0/0x5a0
[  325.507447][   T31]  ? __pfx_comedi_open+0x10/0x10
[  325.542241][   T31]  comedi_open+0xe0/0x5a0
[  325.560390][   T31]  ? __pfx_comedi_open+0x10/0x10
[  325.574522][   T31]  chrdev_open+0x234/0x6a0
[  325.587594][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  325.601341][   T31]  ? fsnotify_open_perm_and_set_mode+0x17c/0xa60
[  325.627182][   T31]  do_dentry_open+0x982/0x1530
[  325.643213][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  325.661515][   T31]  vfs_open+0x82/0x3f0
[  325.681261][   T31]  path_openat+0x1de4/0x2cb0
[  325.694781][   T31]  ? __pfx_path_openat+0x10/0x10
[  325.699918][   T31]  ? __lock_acquire+0xb8a/0x1c90
[  325.716657][   T31]  do_filp_open+0x20b/0x470
[  325.727729][   T31]  ? __pfx_do_filp_open+0x10/0x10
[  325.758327][   T31]  ? alloc_fd+0x471/0x7d0
[  325.775067][   T31]  do_sys_openat2+0x11b/0x1d0
[  325.796206][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[  325.801438][   T31]  __x64_sys_openat+0x174/0x210
[  325.831091][   T31]  ? __pfx___x64_sys_openat+0x10/0x10
[  325.837169][   T31]  do_syscall_64+0xcd/0xfa0
[  325.841739][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  325.850893][   T31] RIP: 0033:0x7f76e158f6c9
[  325.856717][   T31] RSP: 002b:00007f76e23b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  325.865404][   T31] RAX: ffffffffffffffda RBX: 00007f76e17e6090 RCX: 00007f76e158f6c9
[  325.873529][   T31] RDX: 0000000000002000 RSI: 0000200000000040 RDI: 00000000ffffff9c
[  325.882105][   T31] RBP: 00007f76e1611f91 R08: 0000000000000000 R09: 0000000000000000
[  325.890445][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  325.899001][   T31] R13: 00007f76e17e6128 R14: 00007f76e17e6090 R15: 00007fff3efd6a78
[  325.907219][   T31]  </TASK>
[  325.919030][   T31] 
[  325.919030][   T31] Showing all locks held in the system:
[  325.949771][   T31] 1 lock held by khungtaskd/31:
[  325.958464][   T31]  #0: ffffffff8e3c4720 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0
[  325.989538][   T31] 1 lock held by udevd/5182:
[  326.000730][   T31]  #0: ffff8880b843a398 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130
[  326.013654][   T31] 2 locks held by getty/5569:
[  326.018609][   T31]  #0: ffff88814cde20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  326.028920][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0
[  326.039267][   T31] 2 locks held by kworker/u8:7/5906:
[  326.044981][   T31]  #0: ffff88801ef4c148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  326.055772][   T31]  #1: ffffc90003b77d00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  326.068660][   T31] 1 lock held by syz.3.276/6991:
[  326.073635][   T31] 1 lock held by syz.0.278/7003:
[  326.079415][   T31]  #0: ffff88814c8f30f8 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_open+0xe0/0x5a0
[  326.089038][   T31] 
[  326.091390][   T31] =============================================
[  326.091390][   T31] 
[  326.100721][   T31] NMI backtrace for cpu 0
[  326.100732][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  326.100748][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  326.100757][   T31] Call Trace:
[  326.100762][   T31]  <TASK>
[  326.100767][   T31]  dump_stack_lvl+0x116/0x1f0
[  326.100794][   T31]  nmi_cpu_backtrace+0x27b/0x390
[  326.100813][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  326.100837][   T31]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[  326.100857][   T31]  watchdog+0xf3f/0x1170
[  326.100879][   T31]  ? rcu_is_watching+0x12/0xc0
[  326.100899][   T31]  ? __pfx_watchdog+0x10/0x10
[  326.100915][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  326.100939][   T31]  ? __kthread_parkme+0x19e/0x250
[  326.100960][   T31]  ? __pfx_watchdog+0x10/0x10
[  326.100978][   T31]  kthread+0x3c5/0x780
[  326.100992][   T31]  ? __pfx_kthread+0x10/0x10
[  326.101008][   T31]  ? rcu_is_watching+0x12/0xc0
[  326.101025][   T31]  ? __pfx_kthread+0x10/0x10
[  326.101040][   T31]  ret_from_fork+0x675/0x7d0
[  326.101053][   T31]  ? __pfx_kthread+0x10/0x10
[  326.101067][   T31]  ret_from_fork_asm+0x1a/0x30
[  326.101097][   T31]  </TASK>
[  326.101102][   T31] Sending NMI from CPU 0 to CPUs 1:
[  326.223520][    C1] NMI backtrace for cpu 1
[  326.223533][    C1] CPU: 1 UID: 0 PID: 6991 Comm: syz.3.276 Not tainted syzkaller #0 PREEMPT(full) 
[  326.223549][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  326.223557][    C1] RIP: 0010:c6xdigio_write_data.isra.0+0xbb/0x110
[  326.223582][    C1] Code: 31 ed 41 83 c5 01 eb 19 e8 52 c2 f5 f8 83 c5 01 bf 14 00 00 00 89 ee e8 83 bd f5 f8 83 fd 14 74 20 e8 39 c2 f5 f8 44 89 ea ec <89> c3 44 89 e6 81 e3 80 00 00 00 89 df e8 a3 bc f5 f8 44 39 e3 74
[  326.223595][    C1] RSP: 0018:ffffc900033b7a80 EFLAGS: 00000246
[  326.223607][    C1] RAX: 00000000000800e9 RBX: 0000000000000080 RCX: ffffc9000c979000
[  326.223616][    C1] RDX: 0000000000000402 RSI: ffffffff88c72697 RDI: 0000000000000005
[  326.223625][    C1] RBP: 000000000000000d R08: 0000000000000005 R09: 0000000000000014
[  326.223633][    C1] R10: 000000000000000d R11: 0000000000000000 R12: 0000000000000080
[  326.223641][    C1] R13: 0000000000000402 R14: 0000000000000050 R15: 000000000000a497
[  326.223650][    C1] FS:  00007f4cbc6f26c0(0000) GS:ffff888124b08000(0000) knlGS:0000000000000000
[  326.223664][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  326.223673][    C1] CR2: 00007fb9f15b4198 CR3: 000000007dc2b000 CR4: 00000000003526f0
[  326.223681][    C1] Call Trace:
[  326.223686][    C1]  <TASK>
[  326.223693][    C1]  c6xdigio_encoder_insn_read+0x289/0x470
[  326.223714][    C1]  parse_insn+0xf4c/0x1970
[  326.223734][    C1]  ? __pfx_parse_insn+0x10/0x10
[  326.223751][    C1]  ? __might_fault+0xe3/0x190
[  326.223770][    C1]  ? do_insn_ioctl+0xda/0x4e0
[  326.223784][    C1]  do_insn_ioctl+0x152/0x4e0
[  326.223797][    C1]  comedi_unlocked_ioctl+0x1618/0x2f00
[  326.223812][    C1]  ? futex_wake+0x1ad/0x530
[  326.223827][    C1]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  326.223842][    C1]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  326.223859][    C1]  ? do_vfs_ioctl+0x128/0x14f0
[  326.223877][    C1]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  326.223893][    C1]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  326.223913][    C1]  ? hook_file_ioctl_common+0x145/0x410
[  326.223932][    C1]  ? selinux_file_ioctl+0x180/0x270
[  326.223946][    C1]  ? selinux_file_ioctl+0xb4/0x270
[  326.223960][    C1]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  326.223973][    C1]  __x64_sys_ioctl+0x18e/0x210
[  326.223991][    C1]  do_syscall_64+0xcd/0xfa0
[  326.224005][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  326.224018][    C1] RIP: 0033:0x7f4cbb78f6c9
[  326.224028][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  326.224039][    C1] RSP: 002b:00007f4cbc6f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  326.224051][    C1] RAX: ffffffffffffffda RBX: 00007f4cbb9e5fa0 RCX: 00007f4cbb78f6c9
[  326.224060][    C1] RDX: 0000200000000000 RSI: 000000008028640c RDI: 0000000000000004
[  326.224068][    C1] RBP: 00007f4cbb811f91 R08: 0000000000000000 R09: 0000000000000000
[  326.224075][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  326.224083][    C1] R13: 00007f4cbb9e6038 R14: 00007f4cbb9e5fa0 R15: 00007ffdfd70c7e8
[  326.224097][    C1]  </TASK>