last executing test programs:

4m16.914771637s ago: executing program 32 (id=53):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
write$P9_RSTATu(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="3002fffd7d00000005bf000000000000000000000000000000000000000000000000000000000000000000000000000000001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b920000003800704a86cec602007dfa673effeb09b5351f5bde05"], 0x230)

4m14.199783068s ago: executing program 1 (id=64):
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$fuse(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x80000, &(0x7f0000000700)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}})
openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x1c76e3, 0x40)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090900fdff1f00000000010000000000000009410000004c00180000006062726f6164636173742d6c696e6b0000000000000000000000000000000000000000000000000000000000000002000000000000000000181e51670000000000000000"], 0x68}}, 0x0)
r2 = syz_pidfd_open(0x0, 0x0)
setns(r2, 0x24020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x8000, &(0x7f0000000200)={0x7, 0x0, 0x80000}, 0x20)

4m14.116760922s ago: executing program 0 (id=65):
socket$inet_smc(0x2b, 0x1, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
ioprio_set$uid(0x3, 0x0, 0x0)
sendfile(r1, r1, 0x0, 0x200000)
r3 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000400), 0x0, 0xfffffffffffffffe)
r4 = request_key(&(0x7f0000000200)='big_key\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000004c0)='\x00', 0xfffffffffffffff8)
keyctl$dh_compute(0x17, &(0x7f0000000500)={r3, 0x0, r4}, &(0x7f0000000640)=""/72, 0x48, &(0x7f0000000600)={&(0x7f00000005c0)={'tgr128-generic\x00'}})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
ioctl$IMGETDEVINFO(r5, 0x80044944, 0x0)
write$binfmt_script(r5, &(0x7f00000008c0)={'#! ', './file1/../file0', [{0x20, 'cgroup.stat\x00'}, {0x20, '\x00\xd2D\xb2K\x94\xad\x14\xdf\\\t\x9d#\xefEY\x86\x97\x01\xa3\xa6\b\x008/\xea\xf9W\x11\xbd\x0e\xe6\xb8\x8d\x03\xca\xf0\x881\x7f\x04\xc5*`b3\xe8%5\xeexZ\bii\v\xea\t\xfd\xbc\xc2\xbf?g\x8d\xe05\xcd\x0e_\xf3\x03\x84`W\x85\x00\x10\xab\xd1W\xf0\x92\x86\x86\x05\x00\x00\x00\xaa\xb1.n\xbf\xc8\xd1\xa5\r\xc7\x04O\xde\xd3w\xe1\xdd\x11g3\x15}\xe0\xc5V\xc3\x97J\x10\x17\xd9\x1c\xf9\xfc:>\x0ea\x81*\x15\x14\xfe\xec\x1d@~\x0f9\xce\xb0\xa5\xe3\x12\x04\xef\x12\xd2J$)7/R8\x0eS\xa7\x14\xfdz\x80g\xd5\x9d\x8e{\xeb\xc9\x19\xf4\xf3k\v\xd0\xeaP\xd8p\xf4\n\xe0\x81\x9c\x9a\xd4o\xc2\xb3\xbc\xd2\x8d3\x87\f\xe1C\xb6\x8ct\x97\xeb\xe9\\\x9c\xb8bs#\xf7*\x1c\xb4g\x9d\xaa,\x97\x9fy\x81\xe7\x90\x9c\x06\xbe[\xdbt\xb3\x84\x98\x87$\xbc\xf8?R\xdae\xa0\x10E\"U\x99\x9f\x92\r\x94&i\x13'}, {0x20, '\a(\x0fx\xc0\x8b\x94\xfd\xa1\xf1\x06~\xcd\n\xf6q\xca\xd37I\xd4\x85\'\xbe\xfc\xc3\xb9\x1dJ\xf7\xb5\xaa\xb5\xaac\xc0[\x98\x99&\x06\xbckB\x83\xe6\xe3\xcf_\xd4!\x10t\xb6\xcb\xc2\xf1\xeb\xa7p\x83\xb7\xfb\x99\xad\xf4\x13\xe2\xb9\xe7\x81\xe9\xad\x8de\xf0\xb42,\xa7\r\x0e\xe3\xdf\xfd\x86\xd0)\xcf\xa0\xbf\xef\xcdeu\xa4\x9f8\xc8d8\x9a\xf7 %t\x90\xc4\x93\xe2[\xc1#\x9e\x93\x01m!\x7f\x1aG\xa4\x80\xf6\x81\xbc\xb4\x94\xfb\xcf\xfaF\xe8t\xd1\xda\xc5p\x13!C\xd2+e\x85v\x06%\x1fk[\xc1\xd2cP\xe9Ek\xed\x0ftVbw\x9c#\b\xf641\x17\xf4\xa6\xb9\xe5Gf\xd4\xdb\x02&iX6L'}, {0x20, '\xb9,\xec\x89]\xab\xc9\xf3\xe5\xda\xb7El O\xeb,\xc9\xae\xcc[N\xd0o\xe7\x03\x1f\x84\xc4\xb6T\x18\xac\f\x10\x18c\xb8g\xb1\x97\xa9{\xd4A]\x1d\xeb\xeb\xdaO}\xd6\xbd$\xac\xfa\xae\xb3\x8f\xe0\xf7\xac\xb7\x12\xce\f\x83\x02G\xc7\xe9\xe1\xea\xfd\xcf\xaf\\\xea\xdd\x91\xc6\r\x00\x00\xd8\xa9\xaa\xd66R\x94\x05\x8e\xc9\xe7;\xeb\x87\xeb^~\xf9dY\x8cl\x01\xcd\xc9\xfd\x0e\xfeI\xe9\x16\xc5_<\xff ]}Y\x85\f\xcb4'}, {}]}, 0x25a)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000440)={0x40, 0x18, 0x1, "8e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000540)={0x0, 0xb3765c6765b39a42, 0x1, "d0"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x24, &(0x7f00000002c0)={0x40, 0x15, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}})

4m13.573464944s ago: executing program 1 (id=66):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff})
sendmmsg(r0, &(0x7f0000006200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000006400)=[{0x10, 0x1, 0x2}], 0x10}}], 0x2, 0x1e80)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00CL', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = msgget(0x2, 0x40)
msgrcv(r3, &(0x7f0000000340)={0x0, ""/228}, 0xec, 0x2, 0x3000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r2}, 0x10)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={<r4=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r4, 0x1, 0x1d, &(0x7f00000001c0), 0x4)

4m11.208056567s ago: executing program 1 (id=70):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r0)
sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x24, r1, 0x1, 0x70bd29, 0xa5dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000801}, 0x40400d4)

4m11.063703329s ago: executing program 33 (id=70):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r0)
sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x24, r1, 0x1, 0x70bd29, 0xa5dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000801}, 0x40400d4)

4m10.806135366s ago: executing program 0 (id=73):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00')
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32)
bind$inet(r1, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) (rerun: 32)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) (async)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x20002, 0x0) (async)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async)
sendfile(r2, r1, 0x0, 0x20000023893) (async)
r5 = syz_io_uring_setup(0x10b, &(0x7f0000000580)={0x0, 0xd736, 0x4000, 0x3, 0x34a}, &(0x7f00000003c0)=<r6=>0x0, &(0x7f0000000340)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f00000002c0)=0x9, 0x0, 0x4) (async, rerun: 64)
syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80, 0x6000}) (async, rerun: 64)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'})
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r9 = getpid()
sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) (async)
r10 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000040)=<r11=>0x0)
prlimit64(r11, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
kcmp$KCMP_EPOLL_TFD(r9, r11, 0x7, r2, &(0x7f0000000080)={r0, r2})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000500)='io_uring_defer\x00', r8, 0x0, 0x10000}, 0x18) (async)
r12 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000020435504000000000000010902240001000050000904000002030000000921010000012205000905810300040000ff5490e270b689724c300b346ed1fb26e67544390cdb31e84b0c5ad3d3e1a8ca1eab93898f80b6f22a937664192de672279ae4ac46356f626a907ed81c12b19972f86345b553c62634079d8244a1d3933d18cc5f0c85ec99a114518cb0b6d63c6871722fc35456504379ccee46fad2c14d"], 0x0)
syz_usb_control_io$hid(r12, 0x0, 0x0) (async)
syz_usb_control_io$hid(r12, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0022090000000b8e000000"], 0x0}, 0x0)
io_uring_enter(r5, 0x1c3a, 0xe176, 0x22, 0x0, 0x0)
mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6002, &(0x7f0000000040)=0x3, 0x4, 0x0) (async)
read$FUSE(r0, &(0x7f000000ae80)={0x2020}, 0x2020)

4m10.616036883s ago: executing program 0 (id=74):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
ftruncate(r0, 0xc17a)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000ad1000/0x1000)=nil, 0x1000}})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r2)
sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x24, r3, 0x1, 0x70bd29, 0xa5dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x2c000881}, 0x40400d4)

4m10.413749591s ago: executing program 0 (id=75):
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$fuse(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x80000, &(0x7f0000000700)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}})
openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x1c76e3, 0x40)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x8000, &(0x7f0000000200)={0x7, 0x0, 0x80000}, 0x20)

4m10.286539201s ago: executing program 0 (id=76):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x6}]}], {0x14, 0x10}}, 0x78}, 0x1, 0x0, 0x0, 0x890}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0)
getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r4=>0x0})
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x55)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r5, 0x0, 0x0}, 0x10)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030000004c000180380004001400ffbd1ae8000eac14140c0000000000000000200002000a004e200000000700000000000000000000ffff64010101de0100000d0001007564703a73"], 0x60}}, 0x0)

4m9.502329029s ago: executing program 2 (id=79):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$unix(0x1, 0x2, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x71d241, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x40001)
syz_io_uring_setup(0x10f, &(0x7f0000000340)={0x0, 0xfec9, 0x10000, 0x0, 0xa}, &(0x7f0000000240), 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/tty/drivers\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, 0x0)
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
dup3(0xffffffffffffffff, r0, 0x80000)
r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
dup3(0xffffffffffffffff, r2, 0x0)
sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="b105ca1be850c2da591bbad0b0bc5acf4f400000008201999d00539b24746f9110fb354204d5a3a9fbce3d54a1b640fe3cd3370768592a2401ffda169cada3c3e57a205c478f5ae16ddd5388a2dcbce3024e85fbf623c7ab87180bae7d043bb0717b3ea1b2241dcd", 0x68}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='syzkaller\x00', 0x1}, 0x94)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0)

4m9.320076833s ago: executing program 0 (id=80):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
poll(&(0x7f0000001380)=[{r0, 0x60c1}], 0x1, 0x80)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3, 0x1}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0)

4m8.938376043s ago: executing program 34 (id=80):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
poll(&(0x7f0000001380)=[{r0, 0x60c1}], 0x1, 0x80)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3, 0x1}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0)

4m8.933936649s ago: executing program 2 (id=82):
r0 = socket$packet(0x11, 0x3, 0x300)
dup(r0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r1, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0})
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000340))
r3 = dup(r2)
ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r3})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000240)={0x0, 0xa6ff, &(0x7f00000001c0)={&(0x7f0000000500)={0x14, 0x19, 0xa, 0x201}, 0x14}}, 0x0)

4m8.608659793s ago: executing program 2 (id=84):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000240)={'gretap0\x00', 0x0, 0x7810, 0x10, 0x5, 0xe, {{0x11, 0x4, 0x3, 0x2, 0x44, 0x64, 0x0, 0xf8, 0x4, 0x0, @rand_addr=0x64010101, @empty, {[@rr={0x7, 0x7, 0xe3, [@empty]}, @cipso={0x86, 0x13, 0xffffffffffffffff, [{0x2, 0xd, "77259934fafe79fd38d05b"}]}, @generic={0x88, 0x12, "4b8c8a4e659ae2dd6164aca9cfa5cb58"}, @timestamp_addr={0x44, 0x4, 0x6b, 0x1, 0x4}]}}}}})
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240))
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000080}, 0x20044894)

4m8.513353477s ago: executing program 2 (id=85):
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$fuse(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x80000, &(0x7f0000000700)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}})
openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x1c76e3, 0x40)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x8000, &(0x7f0000000200)={0x7, 0x0, 0x80000}, 0x20)

4m8.386036965s ago: executing program 2 (id=86):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'wlan0\x00', 0xc201})
socket$kcm(0x2, 0x3, 0x2)
ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0)
getpid()
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x3, 0x0, 0x3, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)

4m8.003739703s ago: executing program 3 (id=88):
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000000)='\'\x00')
syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaa", @ANYBLOB='\\'], 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0)
ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000180)={0x1, 0x14, 0x4, 0xfffd, 0x67, 0x40, &(0x7f0000000480)="c9ea87d1c0e550f1a28fbc590fe3489fc3b1fa4828b551545d337b76b362d12de25d965d8ebc69c08ff64b72f94c9fde5b730f488f9a6f961aead38ece4e5a72e772805d1e5192819db1d15a6571e6c30246899c933f27eb61a36c978d828f5b691493d08ade57"})
r0 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000080)="bc5d", 0x2, r0)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, 0x0, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
add_key$user(0x0, 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001030000000000000000"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r6, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf2507"], 0x118}], 0x1, 0x0, 0x0, 0x48085}, 0x0)

4m7.985168622s ago: executing program 2 (id=89):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xb0, 0x3ff, 0x34325241, 0x0, [], [0x2b8, 0x200000], [0x0, 0x9, 0x0, 0x3]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000280)="66b9800000c00f326635010000000f3064660f38828e4258660f086766c744240012e93bf96766c7442402010000006766c744240600000000670f011c2466b9800000c00f326635002000000f300f01df66b80500000066b900200000a90a000f01c40f019f09000f01c2", 0x6b}], 0x1, 0x7d, 0x0, 0x0)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000000)={0x3000, 0x4000})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x7, 0x800, 0x100, 0x0, 0x5700000000000000, 0x401, 0x6, 0xfffffffffffffff7, 0x0, 0x13f, 0x100000001, 0xba25, 0xfff, 0x3, 0xfffffffffffffe00, 0x4], 0xeeef0000, 0x1c0080})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4m7.728731235s ago: executing program 35 (id=89):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xb0, 0x3ff, 0x34325241, 0x0, [], [0x2b8, 0x200000], [0x0, 0x9, 0x0, 0x3]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000280)="66b9800000c00f326635010000000f3064660f38828e4258660f086766c744240012e93bf96766c7442402010000006766c744240600000000670f011c2466b9800000c00f326635002000000f300f01df66b80500000066b900200000a90a000f01c40f019f09000f01c2", 0x6b}], 0x1, 0x7d, 0x0, 0x0)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000000)={0x3000, 0x4000})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x7, 0x800, 0x100, 0x0, 0x5700000000000000, 0x401, 0x6, 0xfffffffffffffff7, 0x0, 0x13f, 0x100000001, 0xba25, 0xfff, 0x3, 0xfffffffffffffe00, 0x4], 0xeeef0000, 0x1c0080})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4m7.724366686s ago: executing program 3 (id=91):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000100)=0x1, 0x4)
syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
write(r0, &(0x7f0000000080)="861a", 0xfff7)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002a2b8d240bb2170200b87010203010902240001a00800040904c81e010103f70909050803ff030406090221072501", @ANYRES8=r2], 0x0)

4m6.032058388s ago: executing program 3 (id=92):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000240)={'gretap0\x00', 0x0, 0x7810, 0x10, 0x5, 0xe, {{0x11, 0x4, 0x3, 0x2, 0x44, 0x64, 0x0, 0xf8, 0x4, 0x0, @rand_addr=0x64010101, @empty, {[@rr={0x7, 0x7, 0xe3, [@empty]}, @cipso={0x86, 0x13, 0xffffffffffffffff, [{0x2, 0xd, "77259934fafe79fd38d05b"}]}, @generic={0x88, 0x12, "4b8c8a4e659ae2dd6164aca9cfa5cb58"}, @timestamp_addr={0x44, 0x4, 0x6b, 0x1, 0x4}]}}}}})
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240))
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x24000080}, 0x20044894)

4m5.99608817s ago: executing program 3 (id=93):
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$fuse(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x80000, &(0x7f0000000700)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}})
openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x1c76e3, 0x40)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x8000, &(0x7f0000000200)={0x7, 0x0, 0x80000}, 0x20)

4m5.90461349s ago: executing program 3 (id=94):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x8)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x1c8, 0x0, 0x1acc02, 0x148, 0x0, 0x10, 0x3b8, 0x2a8, 0x2a8, 0x3b8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x40000, 0x70, 0x98, 0x0, {0x0, 0x5803}}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x600}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x228)

4m5.133236876s ago: executing program 3 (id=95):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x96c7)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/kexec_loaded', 0x210c00, 0x114)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r4 = socket(0x10, 0x803, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'vlan1\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0xe8, 0x24, 0x4ee4e6a52ff56541, 0x70bda7, 0xffffffff, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x4d, 0x3}}, @TCA_STAB={0x30, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xce, 0x9d, 0x3, 0x2, 0x0, 0x184, 0xff, 0x5}}, {0xe, 0x2, [0x2, 0x1, 0x0, 0x6, 0x5]}}]}, @TCA_STAB={0x84, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x1, 0x0, 0x3, 0x1, 0xd6, 0x2, 0x2}}, {0x8, 0x2, [0x3, 0x7fff]}}, {{0x1c, 0x1, {0x7, 0x7, 0x7, 0x3, 0x0, 0xc4a, 0x7, 0xa}}, {0x18, 0x2, [0x0, 0x80, 0x5, 0x1000, 0xe350, 0x179c, 0x6f, 0x7, 0x7, 0x2]}}, {{0x1c, 0x1, {0x21, 0x6, 0x8000, 0x1, 0x2, 0x5, 0x6, 0x4}}, {0xc, 0x2, [0x9, 0x7, 0x0, 0x7fff]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x86ec}]}, 0xe8}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xffe0, 0x5}, {}, {0x1, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x20040054)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0)
r8 = socket$l2tp(0x2, 0x2, 0x73)
recvfrom(r8, &(0x7f0000000200)=""/84, 0x54, 0x1, &(0x7f0000000300)=@in6={0xa, 0x4e20, 0x800, @private0}, 0x80)
pread64(r2, &(0x7f0000000100)=""/78, 0x4e, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8923, &(0x7f0000000040)={'bond0\x00', 0x102e})
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@ccm_128={{0x304}, "0600", "c7e0263773934a6ccd3b843739b73a9f", "0202004d", "5460b4c38a406346"}, 0x1f)

4m4.984909059s ago: executing program 36 (id=95):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x96c7)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/kexec_loaded', 0x210c00, 0x114)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r4 = socket(0x10, 0x803, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'vlan1\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0xe8, 0x24, 0x4ee4e6a52ff56541, 0x70bda7, 0xffffffff, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x4d, 0x3}}, @TCA_STAB={0x30, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xce, 0x9d, 0x3, 0x2, 0x0, 0x184, 0xff, 0x5}}, {0xe, 0x2, [0x2, 0x1, 0x0, 0x6, 0x5]}}]}, @TCA_STAB={0x84, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x1, 0x0, 0x3, 0x1, 0xd6, 0x2, 0x2}}, {0x8, 0x2, [0x3, 0x7fff]}}, {{0x1c, 0x1, {0x7, 0x7, 0x7, 0x3, 0x0, 0xc4a, 0x7, 0xa}}, {0x18, 0x2, [0x0, 0x80, 0x5, 0x1000, 0xe350, 0x179c, 0x6f, 0x7, 0x7, 0x2]}}, {{0x1c, 0x1, {0x21, 0x6, 0x8000, 0x1, 0x2, 0x5, 0x6, 0x4}}, {0xc, 0x2, [0x9, 0x7, 0x0, 0x7fff]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x86ec}]}, 0xe8}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xffe0, 0x5}, {}, {0x1, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x20040054)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0)
r8 = socket$l2tp(0x2, 0x2, 0x73)
recvfrom(r8, &(0x7f0000000200)=""/84, 0x54, 0x1, &(0x7f0000000300)=@in6={0xa, 0x4e20, 0x800, @private0}, 0x80)
pread64(r2, &(0x7f0000000100)=""/78, 0x4e, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8923, &(0x7f0000000040)={'bond0\x00', 0x102e})
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@ccm_128={{0x304}, "0600", "c7e0263773934a6ccd3b843739b73a9f", "0202004d", "5460b4c38a406346"}, 0x1f)

3m57.155760992s ago: executing program 6 (id=71):
r0 = syz_usb_connect(0x6, 0x2d, &(0x7f0000000000)=ANY=[], 0x0)
mq_open(0x0, 0x42, 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1)
close(0xffffffffffffffff)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4)
setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e21, @local}}, 0x0, 0x20000000005, 0x21}, 0xd8)
sendto$inet(r2, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r3 = syz_io_uring_setup(0x5d2, &(0x7f0000000600)={0x0, 0x3597, 0x80, 0x1, 0x21e}, &(0x7f0000000400)=<r4=>0x0, &(0x7f0000000340)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@random="3a9aeda12998", @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fa0008", 0x18, 0x3a, 0x0, @remote, @loopback, {[], @mld={0x83, 0x0, 0x0, 0x9, 0xc034, @mcast1}}}}}}, 0x0)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x1, 0x8, 0x1})
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_enter(r3, 0x6efc, 0x3900, 0xb, 0x0, 0x0)

3m56.492076792s ago: executing program 6 (id=97):
socket$inet_smc(0x2b, 0x1, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
ioprio_set$uid(0x3, 0x0, 0x0)
sendfile(r1, r1, 0x0, 0x200000)
r3 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000400), 0x0, 0xfffffffffffffffe)
r4 = request_key(&(0x7f0000000200)='big_key\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000004c0)='\x00', 0xfffffffffffffff8)
keyctl$dh_compute(0x17, &(0x7f0000000500)={r3, 0x0, r4}, &(0x7f0000000640)=""/72, 0x48, &(0x7f0000000600)={&(0x7f00000005c0)={'tgr128-generic\x00'}})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
ioctl$IMGETDEVINFO(r5, 0x80044944, &(0x7f0000000540)={0x34})
write$binfmt_script(r5, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000440)={0x40, 0x18, 0x1, "8e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000540)={0x0, 0xb3765c6765b39a42, 0x1, "d0"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x24, &(0x7f00000002c0)={0x40, 0x15, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}})

3m54.985649521s ago: executing program 6 (id=99):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000240)={'gretap0\x00', 0x0, 0x7810, 0x10, 0x5, 0xe, {{0x11, 0x4, 0x3, 0x2, 0x44, 0x64, 0x0, 0xf8, 0x4, 0x0, @rand_addr=0x64010101, @empty, {[@rr={0x7, 0x7, 0xe3, [@empty]}, @cipso={0x86, 0x13, 0xffffffffffffffff, [{0x2, 0xd, "77259934fafe79fd38d05b"}]}, @generic={0x88, 0x12, "4b8c8a4e659ae2dd6164aca9cfa5cb58"}, @timestamp_addr={0x44, 0x4, 0x6b, 0x1, 0x4}]}}}}})
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240))
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x24000080}, 0x20044894)

3m54.786449592s ago: executing program 6 (id=100):
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$fuse(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x80000, &(0x7f0000000700)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}})
openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x8000, &(0x7f0000000200)={0x7, 0x0, 0x80000}, 0x20)

3m54.481134489s ago: executing program 6 (id=102):
r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000406a05690000000000000109022d000100050089090400de0103000000092100006601220300060000000000000002090502031000100d02"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/oops_count', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = eventfd(0x3)
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000000)={0x7c, 0x3020, 0x0, r3})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0))
mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x400000000000, 0x0)
mq_getsetattr(0xffffffffffffffff, &(0x7f0000000140)={0x1, 0xc, 0x7, 0x6ae}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x4)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
openat$sequencer2(0xffffff9c, 0x0, 0x2000, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(0x0, r5)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14}}, 0x98}}, 0x0)
sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000080)={0x0, 0x4, 0x3, {0x3, 0x11, '<'}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r7 = syz_usb_connect(0x4, 0x1906, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x2b, 0xb5, 0xd, 0x8, 0x17cc, 0x815, 0x4309, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x18f4, 0x4, 0x4, 0x70, 0xe0, 0xf, [{{0x9, 0x4, 0x86, 0x7, 0x10, 0xcf, 0x78, 0x46, 0xd0, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "742bd78182"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x10000, 0x3, 0x9, 0xfb}, [@mbim={0xc, 0x24, 0x1b, 0xeaf, 0x1, 0x0, 0x7, 0x2, 0xf}, @dmm={0x7, 0x24, 0x14, 0x2, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0xfffd, 0x3, 0x2}, @country_functional={0xa, 0x24, 0x7, 0x3, 0x8001, [0x8, 0x2]}, @mbim_extended={0x8, 0x24, 0x1c, 0xd, 0x9, 0x6}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0x9, 0x99, 0x1}]}], [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x7, 0x7, 0x1, [@generic={0x82, 0xc, "3883766118fa54270c9a4f1879fbb727dc8818491212dbcf06e5e11848b351f58259b922af588e21689df0de4773f5605053579c387864430714ce35992952b3d72a6d2194ce7a5755796856726763505aa18ae8f0636df6804f2cee00e75bbb5f67f80d059ed8f30c3226956371ee689a638633ad1457d4187ae893a0451617"}, @generic={0x1d, 0x5, "e7d61736611869423d40cbb700ca9d077850fa51f76b5aa2d10b55"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x8, 0x4, 0x6, 0x9, [@generic={0x90, 0xd, "d4bf9516d42f9c585836deeb04e065e12027d4cdeaf74e30f4c8a7f8f1d3266db2cb307e0936b44650961058e27f00f322571fa8aa7203b6bd1df1ccd93a5213ff100db8f917909fccb243e6798e2c480f24015cad8c4081d2aebb543f7399973961229fec32ceb29bc0fbfa454267e48ee08578d082c392954686ea81d67748913b5b7ef265287c0c48377b2639"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x3, 0xc0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xd9, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0xcc}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0xf, 0x6d, 0xff, [@generic={0x6e, 0x23, "b1366aeb131eaf5dca6eba8f88e88d073a12571ca99987b043c7c78a7388c231be8bc7ae771bfced1353f73c678ce2a4f895d1639490b8e27117d66ae1ca26a74ef41620ff6ea4aa808d9f759976d5a36a52a6c51d354139593a20488afaf924547ddb28300e0cb07b683e01"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0xfd, 0x5, 0x7, [@generic={0xd8, 0x24, "ab0e413e125d5f8f91a34e364ef94a0a9455fc8971a89228e82b3dc12b78269cc24a3e85edb93ede434c1420c8dbfdcf95aff7096513c683422f36c28d4af462809601ead919f42795a078340f5e7bc4a555ea4c964a2d1b50e1c3e38157458343187ddae2331779397dae7173570eb5d6bcc332ba9f47cfba757c526e07757ab7884ea04c2b87f29b0b3972905285947f8a0da91314f42a824e1df2659dd171be75f5a8df456e15d3afc027978dbd7fd7a5693d2fe43751e9c146b6bf52b3fdf97ec6a1d64df2e6cdab80ff91e18aba1f37aadcc201"}]}}, {{0x9, 0x5, 0xa, 0x2, 0x8, 0x0, 0x2, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xc2, 0x8}]}}, {{0x9, 0x5, 0x9, 0x4, 0x200, 0x40, 0x4, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x6}, @generic={0xcd, 0xf, "53968d998f91a93d4ccdf85564c8a8064451dd8aa9068183c150618562f11f6b9937da880dddd011850510a90183ebd36d2d3b474ed3a4e5c569d92b14f501815a75b724848c6fffced0c0e33602ab71cd68319a143f110df3e9d937076224169e2709da987164f86f3657d14f8ddc6805c34b857caaef8d5bd24b3eafed4effbb64d0d9fdf3485013dd262077101ad2fdf62265336369d9bf85aabd54883b08e71ee8c5cd7753537649b20addc079c37d3a5812dd22e1dffb05830380ce8d9cb4db719f886aa2cb4607a8"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0x4, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0xffff}]}}, {{0x9, 0x5, 0xd, 0x10, 0x400, 0x2, 0xd, 0x8, [@generic={0xf1, 0x8, "fb40a348e361648898ea4493e020dff329b1276d65e4426edd096641b9172ef9d43e44174b94cafe918c58929e04481c782916c95c58444dd37b96d512955403136dc439bcc2cbb130162aea26e8106ed88096337419ecae2f83bdfa439c52a8b313715dbf4a478e9dfa84d2c0724b85bb5d5ec257c91aa696c12603ef5bace195f46389da7271daee8204b605477846c88dfacb5b6db3684fdb2066676a743559fab3de614eac1687d2cac1246a1a57b340f62429725b4944f1a7d1b07e5891712631786034310a5593550baaf79c919df6d56cc887dd6734d7b225fa17ce98b9e9b6600c95995e20fc7909017451"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x6d, 0x2}]}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x9, 0xf, 0x3, [@generic={0x9c, 0xf, "e25b2a9283458e157d2f0a5019ef7c8882652a6a60eaf1d4de7cb9e2a20beab9ccbb73098a994c74b8b299eb3a886e7260f7eb306b4fa1f98bff9443ff5345532b9fe6de8bfb91956142df4a3b9a9e607bbddfb9370fed9e3205c0f4d4b03ee3e4406630f10b0d8519ff8ff89fde7f7fa8eda498f264484bd9b3d38f9dbf3cc4c23563b8a2acd429c07760269470a9c944013fb189f94c593d8d"}]}}, {{0x9, 0x5, 0xf, 0x1, 0x40, 0x79, 0x4, 0x6f, [@generic={0xb6, 0x30, "ad339b65a8778002dc750e8478d1f34bdc68c046a6c741713b0b51ae3fb783785e247b1ca382f0db58deeb9e1d6fb88032c31332746a6a886d5576971b18417a6b3cbe4fec9097468403a12c16c406ce628bdfc1d6c625776e595f7b5fa176bd076d46ff7b9017013d74f44e4ae6f96f03576bee22e55ffd467a0c1a7c972488645015aebd7f02f1414d5b2d4d199270b6327355fa2222b9d47e4e84b7178a92863c117c5cc019c9dbd38929b35250a87a22f3bd"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x7f, 0x6, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x4}]}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0x9, 0x9, 0xdd, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x5}]}}, {{0x9, 0x5, 0x5, 0xc, 0x20, 0xd, 0x5, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x2}]}}, {{0x9, 0x5, 0xe, 0x8, 0x3ff, 0x2, 0x66, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5}]}}, {{0x9, 0x5, 0x7, 0x10, 0x10, 0x9, 0xae, 0x1, [@generic={0x1e, 0x22, "bc3f3276f0352f253e4f22ad4feb708c6854d79f7762daad6a724493"}]}}]}}, {{0x9, 0x4, 0xbc, 0x0, 0xe, 0x87, 0x15, 0x9b, 0x3, [@uac_as={[@format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x2, 0x4, 0x5, 0x9, "af6677", "1550dc"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x80, 0x3, 0x9, 0x5, 'q<', 'X'}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x40, 0x3, 0xfa, 0x3c}]}, @uac_control={{0xa, 0x24, 0x1, 0x2, 0x8}, [@input_terminal={0xc, 0x24, 0x2, 0x6, 0x203, 0x4, 0x7, 0x1000, 0x8, 0xd3}]}], [{{0x9, 0x5, 0xc, 0x3, 0x40, 0x9, 0x3, 0x8, [@generic={0x69, 0x21, "affed848e2fa4ec790efc1866a69cd6d83f6852243e6a193683d7b47a0cc295adcee121b1ef3de24917336af3c40bbe74735b33c853a25d3da90b8b035dbb78cd60344f1857319b6a1568980de09734eca03a8426d78032a5b9cc3afe18e95a78f45ef4e29c59d"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x3, 0x6d, 0x4, [@generic={0x9e, 0x4, "81f0cb0a3868ee19c3f1e9179ca0089030092cb94d7b5c40e853aa86429f7af8072ef6b882f408f65f36c076b6c73523772100da00f70c989519beadbd59aa197ad46a6686e61bd62f8fe6fb900d249fc25a5e80be61d8ccbb8810982c55d89571e5e8a6a9e779c4765c5fce64bcec550b7f2e287607bca5d464022c14ae4a2e5699a3fc039ee3de68b20fdb0192f4fe7ab1356ea0ebeb609efb975d"}]}}, {{0x9, 0x5, 0x4, 0x8, 0x5f7, 0x80, 0x2, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x49}]}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0x3, 0x90, 0x90, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xd, 0xe52}]}}, {{0x9, 0x5, 0x4, 0x1, 0x200, 0x57, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x10, 0x9}]}}, {{0x9, 0x5, 0x3, 0x8, 0x40, 0x8, 0x4, 0x8, [@generic={0x65, 0x31, "9fea528a3eea9119cd5e403122310c29c1d40c6701341ec3529c43b86890c455ffdae0a6e4dc5a98dcf7aeecc7e402bf8a268c15e76c0b7171c557968ff183b1de7bc73bbe4ec2042a964aa7ebe687ee20c1242cda63f844b05f4d616ab8548ebff065"}]}}, {{0x9, 0x5, 0x2, 0x4, 0x20, 0x0, 0x6, 0xfb, [@generic={0x5a, 0x22, "317be275e80db7b04e03c86e16e6e98e888714e627d726822f8037b07952c98727021a6b9a8792b99850922f70d76611beeb0618ef7ffb9143ddb9628e6692ab390fb51b6afca3b51b5dc0ba49202723aad2749bbf0ae4ca"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0x9, 0x88, 0xff, [@generic={0xf6, 0x22, "e324862b960aa6c71f999c05792c694d262cf10536f2bf0f86e0343a189042e9378ad39c24ac3fc32c9d3ac40125de14ad983951fd562f02427d95079d1491a686b69939872e65cff183b86e5bad0cc176a81d1353c0a7ecd1403220af5de44dee26e1182f6f7773d8d6541e108cb890eb04131266820c2cdd13c49a029c98e9b7ea0cac4dea31ffc26ccca877399fe9ff839acf238cef765e760bcf3bea52ca57dd5d100c7eb68b60eeb3f08794b49c3c0f3af2f48302f413e40c79bb2c571199f7b6f61a8c4c7d079896a85dc3de49cbff2fd1126757f6a9bf6eb86b6e55b3c5b2183a01e1bd0c065bf22f4e08b118f7208dc3"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0xfff}]}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0xae, 0x69, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xe, 0xc}]}}, {{0x9, 0x5, 0x80, 0xc, 0x400, 0x81, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0x1000}]}}, {{0x9, 0x5, 0xf, 0x1, 0x208, 0x3, 0xc, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5}]}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0x5, 0xff, 0xa3, [@generic={0x76, 0x22, "3f04606fbcbc33dc6b9aae41a1c215c7e5e42dde22b085b92b6ac0a8b4c650bd44b85aa986a94996cf3e848d46f14f73173812ca22fca713798d33103b09d11dfc1179e4401196a095e5ff7e7eda7c40250e3ae6802aae85094fbbf562d4a68e741a22416e4a8677a017007d8be6e55039c2230f"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0x5, 0x8, 0x4, [@generic={0x100, 0x21, "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"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x3, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x103, 0xf7, 0x2}]}}]}}, {{0x9, 0x4, 0x7e, 0x3, 0xa, 0x5d, 0xd9, 0x57, 0xd, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x2, 0xf2, 0x2}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xffff, 0x1ff, 0x8, "0087d4b123ecb6"}, @as_header={0x7, 0x24, 0x1, 0x3, 0x3, 0x3}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x3, 0x1, 0xec, 0x0, "3d600007d64b"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x3, 0x1, 0xff, 0x6, 'm', "1bba43"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x6, 0x7283, 0x2, "e6f816"}]}], [{{0x9, 0x5, 0xb, 0x4, 0x200, 0x9, 0x1, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x8000}]}}, {{0x9, 0x5, 0x6, 0x8, 0x8, 0xae, 0x12, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0xe}, @generic={0xfb, 0x23, "91e1456bef6d1e874abebdc1b6794b21aee9f4f5dd79453136b02d069458b6d2e2b81949c3d752ce3a0fcb16ef7bec71642c891f662950c24cab5dbb52e7e94865587ba7cc98fa60224ab5391131f588c4de033d023ee02d7a7c6d7d7fa3299b7055da54a9866bf36eb0a30e5ca30a8e83bb55db58d7e3fc80be1bddd3d7bf75364f510592c5da81dd3841d5f070c80dc044ed54857241269d9d411f9650b936e3d4d6a53464aa19962c45faaf5b1f778a39c9236c165fba572254975ecdd67f144b0678764bdcd660aec6aa6698241093d14e876a003cba4cf347261130656e0a5f355f45e135c85b8a89c81719d913ec29d18b4eff8aadee"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0x6, 0x9, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x76b}]}}, {{0x9, 0x5, 0x3, 0xc, 0x8, 0x1, 0x8, 0x3, [@generic={0x11, 0x6, "fbc0a125c1dcdde0f2a7ba91697ef1"}, @generic={0xcf, 0x9, "49ea04c5050de3e5700a6b8c35f7933baa515b3c40d6edfbb751895394f2ae51affb6ddcdfac951f6c741b969c780f03b03a8007f541e58c0133c4e1078a64ea1fe12059b96cfe68831f4f3989dc6c8c0e1236a53b3bf61749e2c11700739f175761f65f5a9aea8d3d36dd365b63fdfd82c0669c910520dd90ec9a3bab1396d423825b159043a934780df00d0947bf94e1d97223838682959934c2452edc4b209064983ca10d47b987eb47bdf92e8fb43a5a904c6e4f817b11c2abb44e1416082d4cafa44328b0d47c5e12329b"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0x2, 0x47, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xf8, 0x1}]}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0xfe, 0x4, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x2}]}}, {{0x9, 0x5, 0x5, 0x10, 0x30, 0x0, 0x3, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xc, 0x3}]}}, {{0x9, 0x5, 0x3, 0x4, 0x3ff, 0x8, 0x35, 0x61, [@generic={0x72, 0x24, "5c65690d1e4914937943dabbb2d0db2944af3042bc2944d95fa8e856b4b7b0e1fe74a31ba36f43980ab578cd38d7829e410654cdca4c48bda0ba67b247bb29473b3a962e934ed7caeaff47e6d1bf36a6a1c19fc232dc970a681eb065607eab68810e08e6613712e25ed41ce55c43c734"}]}}, {{0x9, 0x5, 0x2, 0x1, 0x8, 0x2, 0x2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x41, 0x9, 0x15}]}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0x3, 0x2, 0x1, [@generic={0x47, 0x21, "f844abd257d0e1a556da0f9979d876871dc4b0a72d06d44a87cf8e486e5c9ee48ce448e49469a3f3bce2d1c13b551f6466c5d12d1e32cc39a5a12c4912c5b466909bace491"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x1}]}}]}}, {{0x9, 0x4, 0xde, 0x0, 0xf, 0xff, 0x2, 0x64, 0x8, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "b2ca47f38a"}, {0x5, 0x24, 0x0, 0x600}, {0xd, 0x24, 0xf, 0x1, 0x82b, 0x6, 0x507d, 0x1}, [@country_functional={0x12, 0x24, 0x7, 0x4, 0x9, [0x101, 0xfff8, 0xb5, 0x9, 0x3, 0x8]}, @mdlm={0x15, 0x24, 0x12, 0x400}, @mbim={0xc, 0x24, 0x1b, 0x1, 0x4b7, 0x1, 0x7, 0x480, 0x6}, @acm={0x4, 0x24, 0x2, 0x3}, @mdlm_detail={0xeb, 0x24, 0x13, 0x8, "94623d7fd8f5702d20b0b1dfce2304d0dcc342b5eb27f52d0aa4fbf12e3949ebd8aeaabc73b8713c3b7219f4b0e5c7308c0b6f52a28ee8909dd28ddf1fd1da2075e3ac904fa0410ca922d0f46505b834536bf3339c615e3d78bb6d6fbecfffce74885f2bf1a1ae5682642f92bcaaa14c7511dec54ded4ec674c4a241a7f9e7fd8e2c4bf544728022fed4d1a784564e76b9b5eb0a1e5e162bf925ceb0356dae75218b8fabfe9cfa21b99cf802e0cb89e4c149345aec7152467335585f8e8cb2c08a5408c700b4c6e6c048bd712ed53d2bdd7373c4e6860863fd7952fe7cf2111530973fc7ae623e"}]}], [{{0x9, 0x5, 0x7, 0x8, 0x20, 0x5, 0xfa, 0x3, [@generic={0x74, 0xf, "d3352d61697f23db1bbda41ad0204a52d1349e0586fd2e5a364d54c615ef972fe75ecb4e90ad3d4bb8d41e27938a55327bd28c8c4fc8c978b4256a11e472dc6998adaf36027bda82728aad29767a5635f2daa22bb36306f63b5df23ba31c65b36aa1569e552db606013a282ff9eb4d576d51"}]}}, {{0x9, 0x5, 0x8, 0x8, 0x3ff, 0xb, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x7ff}]}}, {{0x9, 0x5, 0x3, 0x8, 0x10, 0x0, 0x8, 0x1, [@generic={0xd4, 0x5, "4ec7837d0ac50442e21083d31adb8e8b6d361ef2e20b1233bf7539086e46713b1eada2fd9b632c7e38d0b5c62d73a0603ebdd7eec6c5954b4abbbbc049a69eeba7f22958172ea9a0d730a34b82c513a96111761aeca444bd0fbf83946c7667ac5bc1461d20f75130bf6f8f97d9c1d0df902fa3a634d207b39fd5a2cfda0dfeb49a4212748154d0f29faa5ddb5548793ac2b6656d694e2eeb69689736954b9ffc557a054911a16e773d769b48ed9c321f9dded9c19cfef57d6dd38fb0f3c8000010535f13c26fa81922ddde49119e3d248bd6"}, @generic={0xcc, 0x7, "e45d1d4b2e4bafc5c7da0b3b173a6849a7d835fb428e81e61355fd5dbcca0148f932d71d6e2383ef367cb464e5faeefa8e439ab9c4cc55077d6e8728231b6edb3652844f483c018fc2ae9ee0a70c547911310a4e11fb20dff7d65888d57fc5ac060d25bc005221c811e0b5c7795b320a037831787cdb1785659d1dfeb5b103d4aaf649ffb724be91a9b5e19b078368226c4990564c0ef4ba2208d381029bbd68caa0c952d4e2960eaa6b267b5bef550a94e17332e134e1fcab91975d6f8d97b97b7d26a81aaed8c83c63"}]}}, {{0x9, 0x5, 0x80, 0x8, 0x0, 0x8, 0x0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0xbdc}, @generic={0x55, 0xb, "b5d0a24e1af590113c5163974393258d68945dd4306fbc933af287245ba261fd0d4c9eea2155858c7a19b66617c87b06104839fd8d6cff3273cc435e89c3b1d0309a7c7b6f0b242af26e4ffd1c50caf88482fc"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0x8, 0x10, 0x80, [@generic={0xd3, 0x30, "c287a8c4d1d78b255bdd848bc0f3cec7f8a22ada9001926abb96b7be6cff003a6c722ef8146ab212a06efc7130bbc6a5ab11cbde87111e88260a55c3c040fe46be3a04fe4239517bc04fe22908e082943bc4c4e9fc34708dbf0ec02babd78e18b226fde4e66effa8344fd0617592c852f08a4e910f8b10fbf1c1bad72fbe3681dd2327a9a0198153ce2c24f48ad19b30b893f9594c63cd0a4aa7972c96ff897ac8fedf303058ad06723796cd6db111a7c516d54e6a62fd1da0fefee3c52da59cf694b02966b92b9c1f119a47f7f23cfbed"}, @generic={0x4, 0x24, 'CU'}]}}, {{0x9, 0x5, 0x9, 0x8, 0x200, 0xff, 0x3, 0xf2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xf9, 0x9}]}}, {{0x9, 0x5, 0x1, 0x2, 0x20, 0xa, 0x4, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x8}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x6, 0x7, 0x3, [@generic={0x7e, 0x0, "c4c40f63ebb7a80d554049426547e21693acad724b817dc6c736ba5096b7debaf7ddd0821e5c846cc1c4f0bff1f79d5351359e4bce3a58a14d51bac75a1c0b90c0b8104ddb603519c71e7e6195ae555b1d89ef421fe0d2237d50485d58309fda22e220cbf9267d1861aaca11ad64f6d9ec27a6606be949ec4f70f7d1"}, @generic={0x6a, 0x10, "37bfb2297f77c3b0bd2e7b39e68b848dc9f1fb8bfbdfb4a0e5db987ea8a99f5526ea4d4eea17a83e23b171e954c71052e0e8876c639d03f4b5aa5f8c09bb0c52800dfcbc8afc44b590072429b04d5ed74f205c5a9e2eae24f94a62bb13e40aeb321b2af003b6f775"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x40, 0xee, 0x6, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x4}]}}, {{0x9, 0x5, 0x80, 0xc, 0x3ff, 0x3, 0x8, 0x5, [@generic={0xf7, 0x8, "56e487a33687aafe3598a03ba489a0251f16fb8f0c21a36f8006f41708f545ddb60aec50f191a8010150b5ab72bc84740f27edbbc5026e1ecd08aa5e273d8f10f28d68f24b9f1f779fd70e92effacbb80c75e245cefa65c5a8cfe515fe55c7d12cbb548cbb121c7165ec59ba471b3dbf9bb94c15c6de21b055ae816dad497598b0d31dc99f14c744a684fcf7083fa8caa3ca6a182516d35d9f70ecb2b88f47f6aea6abb5b48c093778207784cfdcdfa3448bf53abec5adf59d79da0c4e90d08442d91d295aa0b0da989590d0b27fad63ef401d3914d5d779b3622eb8b618666117ac3f5386ffb26a0fe7c41272cf533e0329efeebd"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0xa, 0x4}]}}, {{0x9, 0x5, 0x4, 0xc, 0x8, 0x3, 0xb, 0x3, [@generic={0x12, 0x6, "ecc53ce7a87062f8de2037cacf41f136"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x1}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x2, 0x8, 0x53, [@generic={0xce, 0xe, "46835ec22ad4fb9d7d54e2d9969361e721cbeebcf2bf14829d433e2fc7f1d2491a8e1ad553910c432bf5797baa8bd2f28e5b4b9a8f2488df21c0ccabba292e8d5c33345e70379649658a2ded36173de8e0dd12de04003de354a1e251bf7c69eeec85d2c91cfa002a00c00508d675c100455a634dd1616d7df4f2af458df94342ba216409e30986f54755b5f63ad1c32ad266c750e8956eae54259538c0c39e3bb2dcffa0a2d3e6757b8d7f5fb33db54bd132133df153a43c96d99b472139e7e7d6d6922dec5cc04dab829764"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x10, 0xb6, 0x0, 0x4b, [@generic={0x6d, 0x3, "d0c6d849c71d7abddef53bcef5428dedb34749f480e138e3a87d0e0149603149a20347db7c1f68a786ef5013178edc695eec90303338fa80fe472c605c153b193adc2840f4cf437cb78d461a165eb7018a7439db07e8e879c5e8da71fa1380218c44cbd2377662cec81105"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x40, 0x2}]}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x26, 0xf, 0x81, [@generic={0xf8, 0x2, "be149d48fcc06700c32e033f25d715e523b2df59ecf0d4781c8648a3344398c61555618a25b912f05b638c00a94c6a9a603d11d6c5933ad03fc149e3741ebc40b41d5ddecbce17044ecb225e876e8c726f2e3ff4cd9bc1a7a62adaefdbb9e816bcf0ae5abaae556838effd793fad518f8662cabb78b59eb2f0e5916780bf50232a197b95bbae0700f3baa6aa3e08deb59905ca3780607f3a8ba0b6d4ec9f8368df00283b703ad965fbfc6c9b5075d3f72ecc3592f7ff0211ae96d3825f8f75813e9b0c6b383424e87bbe0999aeabcd09c4b6e9dcf4656ee5bacb45061e7c7113cbd33ac173dafe7aaabcc566902e242021beb2c2f795"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x1, 0x10, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x291e}]}}]}}]}}]}}, &(0x7f0000001ec0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xfb, 0x8, 0x4, 0x20, 0x1}, 0x61, &(0x7f0000001a40)={0x5, 0xf, 0x61, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "1bf36d3d948e1ca6676f3b6d26cb07c2"}, @ssp_cap={0x20, 0x10, 0xa, 0x40, 0x5, 0x3, 0xf00f, 0x4, [0xf, 0xffc0cf, 0xcf, 0xff3ebf, 0x30]}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "77f11113009a1e891618b486e5055a5f"}, @ss_container_id={0x14, 0x10, 0x4, 0xce, "22d756aa0df67b3c9a0bfd81d472ee91"}]}, 0x7, [{0xe5, &(0x7f0000001ac0)=@string={0xe5, 0x3, "a82616ac9ef681800e0f0087cf4e437021b1816aa40f14538668ea5c39823e8ce632eec196ccddc9944eebced0403c150ba2addbec1364854eea56055d42de3217a3a127ec850d1c7adc763c441f09a45201f004cd0cc8e6591bd7c0daab0701837b2d91e89a81e8fa0c99752f237f212fc88943fe338776e1bdbc200532bb256e6624edef003d53a7dd2228444cc3b1adafe1a3b94d77deff0ff5c3540349e76bea66343790913ef1b5323b1463b5fe76f3a0df80b827ed7dd4565c5f875263f272a55166bdbc995928312a45eef483ae7a59eb875d73bccd79f97c4815bcc056f13a"}}, {0xf1, &(0x7f0000001bc0)=@string={0xf1, 0x3, "ee11142022367b2d57a06c0d41fccddb67fa3673d58166cc2c4b9188a8d33f22695031f72b9b8b8f7d675f10f3a00365663bd95406a54cc0573cf4ec43de7f0d8ffd432d50ec68a65eaea5e4b1b82b6bf2a87d493a90f4bcf269cb3cb0484065c6d270f7e0039e1b3d37bf981c82c74a755a225f1b5ebbb69bf264a155308319975f9fa2e06917c515889917ea7f5b26f546d36418261ffde400d1c0bc7ecda9cbcc17c65ab9708b4a294d57e8930bb8eac6a5fd6a1c037a12c35990fc96278b0c6d1bb55d3390706fb372ad47a22f2f3a4c663b09509b324075e42c412d265a2260bb64695b44419b2b0297d877b4"}}, {0x4, &(0x7f0000001cc0)=@lang_id={0x4, 0x3, 0x423}}, {0xf4, &(0x7f0000001d00)=@string={0xf4, 0x3, "75255d660ba1beb558d7a1f243dd19c4b577316e1c8b468fbe24d3e9d786a56bbe2cc47410ca375aca2bef163bd8c22f2556073c975d6da590f5d037dd40699f040c1b660de723453daae335ca3ffcc3b1694ff5866267952543842933ab4cda47375eaab18b0f780c91fca021903a01b26ea66647adc914d8b5635ed6a27741c4634d6b3612034859845ba92f6aa12bd74c74cf456444d7a00049fcdc62a8a3ab47775aadb65d25bb4432a1345862350986adadacd0e352f8b5231c239c98a3a3edcb75446ea02733c73de1428a25a7cc14b35d5e095f0de42844dc90083b91f3ebe00495e224182947e6dc6b2dd0bd6109"}}, {0x4, &(0x7f0000001e00)=@lang_id={0x4, 0x3, 0x415}}, {0x4, &(0x7f0000001e40)=@lang_id={0x4, 0x3, 0x3c01}}, {0x4, &(0x7f0000001e80)=@lang_id={0x4, 0x3, 0x1093}}]})
syz_clone(0x0, &(0x7f00000023c0)="b9c3f8b580a686ee4b799891e7af81e117c35e919fdf5665bf343b6be0768c8a4b17358d71c9142d7ecb4f5e729da623b9c4670c44ebb28dd5a34aad91130df754c84d4facae32d368aa8295a6e2072ced059eb8c41a8e3158ce8417ef098386b861f2a26f6d87c025b3c8a114b5ac865f28955e6ec9938136d4ce19ad05cbc14ad41c8418ef2d6398d45113b0b66c48326d8cd18a237668a8fb499de31e1e5b04b1cf23afcf02d50cd819b9af23e3c6ad2d19502fbd5605504fb568cb79ec820f916cb8c6e7849e08587f0557271c756c01", 0xd2, &(0x7f00000024c0), &(0x7f0000002500), &(0x7f0000002540)="1fd89903834fa35d1b99c471e69bfc37")
syz_usb_control_io$uac1(r7, &(0x7f0000002040)={0x14, &(0x7f0000001f40)={0x40, 0x22, 0x8d, {0x8d, 0xb, "cc65464627012f9fde65a5ac1d858173560ffe3a3ba3e1b1cda4f5c9f124d79e814c76c22b262197fc59a2541a06ffb927fa7ccc35ed4e7f6606ee6a5ae012b6a45f7ee0fcbd19a3a39f665c5a56a73a64a760aed9a37ab344a0a77e6676724304d122875c674d44f64e3987d0336509ad8ef96132f4a92474400c39786a8333d9624e7b2af868cc38b8ad"}}, &(0x7f0000002000)={0x0, 0x3, 0x18, @string={0x18, 0x3, "2e9ae844080751512c2913d8224fcd398e6c31291554"}}}, &(0x7f0000002340)={0x44, &(0x7f0000002080)={0x0, 0x17, 0xdd, "5527583ffd40c19a31b5098de222f76c84ca2445a7cd501a8c02cb84f108195efdabfe028a2ab4bd33c9bba7f81e7f6954a57795da276293fc5938839191a0ce62a927672dd636f934b4039846e4250ad01e2a98d6b696b4a24d2508d4dc57d2e8ae60609a6d7b19c6de0ed11b2413859303eba8bb03c651242ed4d0576be8a1239f375c00f9aa12ace572a8ac20b3b7b3a8e73c97a4b1354a11c02aaceb197a7a243b2d051997d03f28556adfd930a2625940aae5b781bd55818eaca62d602935408acf63013601c48b81282f7eb6146769a4a14b3edc62b8c1bf1a15"}, &(0x7f0000002180)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000021c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000002200)={0x20, 0x81, 0x2, "b422"}, &(0x7f0000002240)={0x20, 0x82, 0x3, "d9affd"}, &(0x7f0000002280)={0x20, 0x83, 0x1, 'E'}, &(0x7f00000022c0)={0x20, 0x84, 0x1, "01"}, &(0x7f0000002300)={0x20, 0x85, 0x3, "83a697"}})

3m53.96893537s ago: executing program 6 (id=105):
r0 = socket$kcm(0xa, 0x5, 0x0)
lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
read$FUSE(0xffffffffffffffff, &(0x7f0000004480)={0x2020}, 0x2020)
r2 = socket$inet6(0xa, 0x2, 0x3a)
r3 = dup(r2)
bind$unix(r3, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x8, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0x35}, @local, {[], @echo_reply={0x81, 0x0, 0x0, 0x240}}}}}}, 0x0)
fchown(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
sendmsg$kcm(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007ffffffff5000000b8"], 0xd0}, 0x480c4)

3m53.416002907s ago: executing program 37 (id=105):
r0 = socket$kcm(0xa, 0x5, 0x0)
lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
read$FUSE(0xffffffffffffffff, &(0x7f0000004480)={0x2020}, 0x2020)
r2 = socket$inet6(0xa, 0x2, 0x3a)
r3 = dup(r2)
bind$unix(r3, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x8, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0x35}, @local, {[], @echo_reply={0x81, 0x0, 0x0, 0x240}}}}}}, 0x0)
fchown(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
sendmsg$kcm(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007ffffffff5000000b8"], 0xd0}, 0x480c4)

49.548153133s ago: executing program 7 (id=735):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e20, 0x4, @empty, 0x7}, 0x1c)
listen(r0, 0x8)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
setresgid(0xee00, 0xee01, 0x0)
setresgid(0x0, 0xffffffffffffffff, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10)
accept(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x100, r1, &(0x7f0000000340)="4e8e3e21710e0e71faee415ce683f9fa87c30d9c07d1bbcf788004f80e655d54eee6278c9cbf6698af821350ecf74c3d84f9364e3864592c4d1d99237ce65b1ed5673221c20de80789490630256abe9c26ebc64b1506c2454d854c74602c8d6d5b811fe15dd75e8ca3f6c0078b660ca9de9fedab53bdd9b2", 0x78, 0x100000000, 0x0, 0x1}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x2, 0x1ff, r1, &(0x7f0000000440)="73378810a268dad7e2d9eb314ac75465394b231bb0c138a1f7501ef8e04a7e713775805fd258a0c5930f2e34007b361056e5b5157409656bdaea19c1e802a4dbc33424b3e3c6202b16756e13f30668c8798e603f26101e73429fcd00d7ba9f6d3df2bedbad207215c1943806b9c4cfce0a9d02a9a320c8ce623ba8128dd43c65b3cace749113fcabb281655a406f59b3ef8998916e52c67de11eab1f99763916fac1", 0xa2, 0x80}])
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000200)='./bus\x00')
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000180)=0x2000000)
socket$nl_generic(0x10, 0x3, 0x10)

46.907214321s ago: executing program 7 (id=746):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c01002010000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb0000fff720000001000000003b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="64010102000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000004000000000000000000000000000000000000000080000004000000000000000000004000000000000000000000000000000000000000000000000025bd70000000000002000001000000000000000008001f0004000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c", @ANYRES32=0x0, @ANYBLOB="3214"], 0x14c}}, 0x4810)

46.628130683s ago: executing program 7 (id=747):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000004400050020010000000000000000000000000000000000022b0000000a000000fc0100000000000000000000000000000000000004"], 0xfc}}, 0x0)
r1 = socket(0x2, 0x3, 0xff)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x800, @local}, 0x10)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)
sendmsg$key(r1, &(0x7f0000000400)={0xb00, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x18}}, 0x4808)

46.12188471s ago: executing program 7 (id=749):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socket$unix(0x1, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r3 = io_uring_setup(0x4d6b, &(0x7f0000000f00)={0x0, 0xdc0, 0x8, 0xffffffff, 0x300})
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8010, r2, 0x7a8f3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000e80)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240), 0x0}, 0x20)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = openat$vsock(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
process_madvise(r8, &(0x7f0000001740)=[{&(0x7f00000002c0)="8e68aaf149ae1382fd6f64720bda14345a33f089227c9090857ab7750554a6c322125b3c8721f38287c245e4a4a791d6312cf0e3fe759bb84aa3c36fa6f547dbbf415d415a703691a6da8ff208458fb8961e51b9fe69a56d54666803f084ef6938bcf161a8a12e3f9ababec0888e1ab2db0b53e033b69e9d8542d238dafa89b587ea6a4261cb95d563cda2866f3eb4ff3d3e8af6c0ae103699dd769765d331866ce4103b6de1e18dbab6a14f", 0xac}, {&(0x7f0000000380)="3f46ec5a0234f18a3098dbf8eba147f18895238c4ae324976ae00aff44ec6c75278ada848359f02826e5123d9bc54b1213267dbc831ac488d2c00af40670bd895163635adcf6ebaab1e7d4c7df6eaaf45e7fe53f2c797814d5", 0x59}, {&(0x7f0000000180)="35de892bea1aaba99eb7c2372f2bac6db926a099625ad332101d85fb0accb0603d75e5de1c5c205a07ad3f61aca798a8cfe578de71cf05d276df5f7585316d857692f5549c3a6f2508436509bbfbe2d8b0dfbd45c5", 0x55}, {&(0x7f0000000440)="00a135153628aee76f85387d883eac62482784267e404c1d6b95a31fc85b9c6752291c420ad69171d2c0c9f90e2c6e1c3b758451c55487373c145654946b2af2e48192f9f1", 0x45}, {&(0x7f00000004c0)="b4fa4a49a1358839eb3b7082f4d88cd0c4fcad5f1ab017ffc00f428b028bb4b5e48117bb3e32d25e8e6126dc968cce68934fc4f114ac680cc46cac936e29e884c3092dc8c4ff58ff4e04834c2e7b377fac01f2dcc8ed6de5", 0x58}, {&(0x7f0000000540)="ce562c00481434cf23b70b7821a41d0276f0f21858f0e567723b9e2c2679081cd4d33d44ea52907c61cf6feb5ac1486ab0c1f83cfcb6421f77cc57ecad87cf53b5ec27606604ca976f39aa40cb46c87975b65cefae4fe7b544db9d64a2fd23ca448afd8b8ceb1025f99400e486e3074e1023389df76fa2c0ea0a4237abf426adee7e001ca9d32d15890aac9eeb0693da6faac3f73ea5da357c0d50aaf52c25a1a08df500433ff115e6a23fb03c32d13fde5bf6ddcfe2e49325418dd7cf2b73d0930e3ebcb1682eddb75f5e9d8375e8991d0f86e5a4de0a672af9d9f71d70a288a4", 0xe1}, {&(0x7f0000000640)="1fd32f74f00190a36d03f3ad84698c5bf5b094821f5fb2654b0f9fd99ee49ad5e2f47c2abeef", 0x26}, {&(0x7f00000006c0)="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", 0x7c0}, {&(0x7f00000016c0)}], 0x9, 0x2, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002840)=@newtaction={0x4c, 0x1e, 0x109, 0x0, 0xfffffffc, {}, [{0x38, 0x1, [@m_mirred={0x34, 0x0, 0x0, 0x0, {{0xb, 0x9}, {0x4, 0xe}, {0x6, 0x6, "eb21"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x0)
r9 = syz_io_uring_setup(0x3ff8, &(0x7f0000000140)={0x0, 0xfec7, 0x10000, 0x0, 0xa}, &(0x7f0000000240), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/consoles\x00', 0x0, 0x0)
socket(0x2, 0x80805, 0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), r10)
r11 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82)
dup(r11)

45.336135357s ago: executing program 7 (id=751):
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0), 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet6(0xa, 0x3, 0x6)
syz_emit_ethernet(0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0xf000)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x1000040, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3c}, 0x1c)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x1d, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000540)="64b61d9b104c99176403699c7d94", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
io_uring_setup(0x5053, &(0x7f0000000140)={0x0, 0xfffffffc, 0x3681, 0x0, 0x23b})
open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)=0x20)

44.689253398s ago: executing program 7 (id=754):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000180)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x2, r2})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fce5ffff000000000900000018100000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r4 = socket(0x1d, 0x2, 0x6)
getsockopt$nfc_llcp(r4, 0x6a, 0x0, 0x0, 0xfffffffffffffe82)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000fcffffff000000008000000085000000a800000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703"], &(0x7f0000000000)='GPL\x00', 0xd60, 0x0, 0x0, 0x0, 0x11}, 0x94)
r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x98, 0x80, 0xa4, 0x20, 0x6d0, 0x622, 0x3f5a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xa6, 0x0, 0x2, 0xf4, 0xab, 0xe0, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
syz_usb_control_io(r6, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, r1})

29.611603797s ago: executing program 38 (id=754):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000180)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x2, r2})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fce5ffff000000000900000018100000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r4 = socket(0x1d, 0x2, 0x6)
getsockopt$nfc_llcp(r4, 0x6a, 0x0, 0x0, 0xfffffffffffffe82)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000fcffffff000000008000000085000000a800000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703"], &(0x7f0000000000)='GPL\x00', 0xd60, 0x0, 0x0, 0x0, 0x11}, 0x94)
r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x98, 0x80, 0xa4, 0x20, 0x6d0, 0x622, 0x3f5a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xa6, 0x0, 0x2, 0xf4, 0xab, 0xe0, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
syz_usb_control_io(r6, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, r1})

11.800664514s ago: executing program 4 (id=838):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @local}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000010}], 0x1, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0xca02})
close(r0)
socket$netlink(0x10, 0x3, 0x0)
preadv(r1, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x3}], 0x3e8, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
rseq(0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0}, 0x94)
r3 = syz_io_uring_setup(0x53f, &(0x7f0000000440)={0x0, 0x807734, 0x400, 0xfffffff8, 0xfe}, &(0x7f00000000c0)=<r4=>0x0, &(0x7f0000000080)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1})
io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
write$binfmt_misc(r7, &(0x7f0000000000), 0xfffffecc)
ptrace(0x10, r6)
syz_emit_ethernet(0x76, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x40, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, [], "17c1ff07000000000000e55800000000"}}}}}}}, 0x0)
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r6, 0x0, 0x0)

10.057293281s ago: executing program 4 (id=843):
syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa", @ANYBLOB='\\'], 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0)
ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000180)={0x1, 0x14, 0x4, 0xfffd, 0x50, 0x40, &(0x7f0000000480)="c9ea87d1c0e550f1a28fbc590fe3489fc3b1fa4828b551545d337b76b362d12de25d965d8ebc69c08ff64b72f94c9fde5b730f488f9a6f961aead38ece4e5a72e772805d1e5192819db1d15a6571e6c3"})
r0 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000080)="bc5d", 0x2, r0)
r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x400000000000000)

9.220610101s ago: executing program 4 (id=845):
r0 = syz_usb_connect(0x6, 0x2d, &(0x7f0000000000)=ANY=[], 0x0)
mq_open(0x0, 0x42, 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
close(0xffffffffffffffff)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, 0x0, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e21, @local}}, 0x0, 0x20000000005, 0x21}, 0xd8)
sendto$inet(r2, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r3 = syz_io_uring_setup(0x5d2, &(0x7f0000000600)={0x0, 0x3597, 0x80, 0x1, 0x21e}, &(0x7f0000000400)=<r4=>0x0, &(0x7f0000000340)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@random="3a9aeda12998", @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fa0008", 0x18, 0x3a, 0x0, @remote, @loopback, {[], @mld={0x83, 0x0, 0x0, 0x9, 0xc034, @mcast1}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x1, 0x8, 0x1})
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_enter(r3, 0x6efc, 0x3900, 0xb, 0x0, 0x0)

7.535984522s ago: executing program 8 (id=848):
syz_open_dev$vbi(&(0x7f0000000100), 0x1, 0x2)
r0 = socket$tipc(0x1e, 0x5, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000440), 0x4)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x303}, '\x00', "8e083700daf38a6d66e9b5e9c2f101d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28)
shutdown(r3, 0x1)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000000), 0xf5817a55)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000180)=[{0x80000006, 0x0, 0x12, 0xf9}]}, 0x10)
close_range(r6, r0, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x12, 0xffffffffffffffff, 0x386f1000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000001900)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x700, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x7, 0x4, 0x0, @empty, @private}}}})
connect$unix(r8, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r9, &(0x7f0000001bc0)=[{{&(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000001940)="088a6986f5304e6b10210efc85a215fbbbd900daef30f9f32d37c72bb21d46a71601b2c97fff44b5acd19dcef4f8f2ba95cff6b8b7771ff4f1cdbfac0fc0f0b37e3f663e297d6035a604e2639ace638571df5310dec3e902bdf78130c21b44114f252ae309c96d15750fca5968155c1e59bde15aab8abe16423ed98b6ebae4f41ac8d2accfba2ff8b0fffb945883d60688d87e09e81bba40b25cb9eaf31db82a280587b1a85dc4300ce2a19ccc5bcc7fafa53e2f068fe3c4d98e691e244f649f94c9236622b359afe70ad6cb0f9d2c1cc624352138bce5588859c18d868379529f90894d61e6d2c810db7265dccf62cd2f39d094a2e5bc98b2a758c9f9b9ecbddb50ef41cde5f25568017e275553c24bea2369200d3c0862c0cb93b1041c261db8a2c6f31bd1ae82a33973c43f5993262e2e56172b0ebf1f943141dbe8fcaf0134a2dfddd9a6fddf2af5cd5e4121134d9121625915346592b7fa28edf5", 0x15d}, {&(0x7f0000000640)="241ac6d7b8175b28524576b2db95ba02b2d4001484b92679621f329ec1917e587a5b071b19a23a9dc697209dba717cf78a6114722fc61139666988ee110696fa7de33acd11b89987ee937d342b864ed84cca2088c25fffba9c027141b06e424ac86db5338e4e9eba7efb1a7aa280cf2de5449f1b337bc800888a065cebc80522c8bcf6e115f763e7ff2d20d0396efcf5ddc19be9f780", 0x96}], 0x2, 0x0, 0x0, 0x2000c000}}, {{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000380)="20c0874a7627081e679fe07196148f5378d054614cd328fec0b634bc45826adb2d50895610", 0x25}, {&(0x7f00000003c0)="6989f2244be0ad6c8d037cbb4e951ac2ee54ff26f4debd64322188896f726a62198d2c4a8f9e62da2e753e2a14b644", 0x2f}, {&(0x7f0000000700)="a8f4c30b9fa7994a573b0017aca3d908f6eaea2dfbab8b38e688c92603966c79990967a642a8df1bdfac13498882ecd204500c0e4d0174353e77e893219d4cf959c44fd7e1766b7930aabe8396e438dc9dc02df297f11f31a87f7b6bd23132d3dc95fa27d96e876a2456bdbef8d494ebcd662a9bb07d55cffa405af43455b731827d3394a1f4b8400e640de3c8c1e3e744e2cca1d63cf0edd07b30b9ed3908", 0x9f}, {&(0x7f0000000480)="b3aaad10e0b778ee9752b3b8127df3ede508cf13c0ef24b948df748e2efe3fd51d7378", 0x23}, {&(0x7f00000004c0)="55c6419fe4067e51bd2b5d71507f17bab5c094d40011ed600b22e76724bfbcb32e5f", 0x22}, {&(0x7f00000007c0)='/7', 0x2}, {&(0x7f0000000800)="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", 0x1000}, {&(0x7f0000001800)="9d4615b5dd3ccbf8a5d074a7cc81a2a497550e8b1c6f53e5d1ad923855a49f05cef82e9e971cb1a47dbd5545a23c46a6ed366b3dd7678663cc85e4b463394d5e2cc6ecbbe33ead2352a4a9b3b4893630497447a8dc1704362119530dff3508744a781e08291b3eccd0b2cae17bf1767a34be68940f4d1207d877cb53", 0x7c}], 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000600001c0000000000000001000000020000009719d69c75626725785f74184d822a0e4181f73266eaf30833c3baaa8b0faf004c0200000000000000918365e53c5525a20435388ffeb70df88a628ed698d0974851f1b4a17ec2d0948a7faca4def89080cf14f7511e0525559b87651a7996582612b3c40a9603e0e600bfd877ebb26c52e07f9199fffcc93f0d2c56bb1ffd49299e4180deb246a07cce5c5c65e85343edcf21cb230c0725a8fee10fd2e32995a769f224f1efb881169d6ad3553bd75dd38795b39053e8e01cf6d2fe4c876245bcd7313c488f", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=r7, @ANYRES32=r2, @ANYRES32], 0x68, 0x800}}], 0x2, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendfile(r3, r4, 0x0, 0xffffffff004)
syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaa8aaaaaaaabb08004500001c000000000002907800000000e00003009100907800000000"], 0x0)
syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)

7.286820418s ago: executing program 1 (id=794):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58)
r3 = accept$alg(r2, 0x0, 0x0)
sendmmsg$inet(r3, 0x0, 0x0, 0x8058)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
close_range(r1, 0xffffffffffffffff, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00'})

5.426466846s ago: executing program 8 (id=854):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bbr\x00', 0x4)
bind$inet6(r0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x24, r2, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000240)=':', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c)

5.416422051s ago: executing program 4 (id=855):
r0 = socket(0x28, 0x5, 0x0)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket(0x10, 0x3, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
exit(0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=@ipv6_newnexthop={0x30, 0x68, 0x5, 0xfffffffd, 0x0, {0x2}, [@NHA_BLACKHOLE={0x4}, @NHA_GROUP={0x14, 0x2, [{0x1, 0x3}, {0x80000000, 0x9}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc001}, 0x8000)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071120b000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2a, '\x00', 0x0, @sk_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xeaebf8747da83363}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x44, 0x17, 0xa, 0x1907, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x20000040)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r4=>r1, {0x2}}, './file0\x00'})
socket$nl_rdma(0x10, 0x3, 0x14)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x7c}}, 0x8050)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r5, &(0x7f00000000c0)={0x28, 0x0, 0x2710, @my=0x0}, 0x10)
r6 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r6, &(0x7f00000001c0)={0x28, 0x0, 0x0, @host}, 0x10)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)

5.396415354s ago: executing program 1 (id=856):
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(0x0, 0x0, 0x0)
openat$pidfd(0xffffffffffffff9c, 0x0, 0x2400, 0x0)
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) (fail_nth: 2)
sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f04000000000000000000850000000f000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
waitid(0x2, 0x0, 0x0, 0x4, 0x0)

4.664116673s ago: executing program 8 (id=857):
openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xdf07, 0x2, 0x6})
syz_emit_ethernet(0x66, &(0x7f0000000180)=ANY=[@ANYRES32=r0], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
sched_setaffinity(0x0, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_dev$I2C(&(0x7f00000002c0), 0x0, 0x0)
bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4)
syz_open_dev$video4linux(0x0, 0x100000007, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
semget$private(0x0, 0x0, 0x280)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xb, &(0x7f0000000200)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/ipv6_route\x00')
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x101002)
io_submit(0x0, 0x0, 0x0)
lseek(r2, 0x10001, 0x0)

3.551856829s ago: executing program 8 (id=860):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', <r2=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)={'batadv0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)={0x34, r1, 0x1, 0xf0bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x20004804)
r4 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f00000003c0)=0x5, 0x4)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10)

3.495953299s ago: executing program 4 (id=861):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x18)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8)
close(r2)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="15000000100000000800"/20, @ANYRES32, @ANYBLOB="c0ffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000d9a0000000500000000000000"], 0x50)
r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000180)={0x40, 0xe, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r4, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x9, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x6, 0x1, 0x1}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x0}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r6=>r5, {0x28d61306, 0x9}}, './file0\x00'})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0)
r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$sock_linger(r9, 0x1, 0xd, &(0x7f00000000c0)={0x60000}, 0x8)
close_range(r8, 0xffffffffffffffff, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r7, &(0x7f0000000680), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={0x0, 0xf, 0x8}, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000080)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @map_val={0x18, 0x1, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x2}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @map_val={0x18, 0x4, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000000180)='syzkaller\x00', 0x80, 0xe2, &(0x7f0000000240)=""/226, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0x9, 0xe9ed, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r7, r3, r10, r2], 0x0, 0x10, 0x6}, 0x94)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x0}, 0x10)

3.48611716s ago: executing program 9 (id=862):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000001280)=ANY=[@ANYBLOB="0180c200000effffffffffff86dd60ecff8000071100fc000000000000000000000000000011ff02000000000000000000000000000100004e220018cf907803000000000000000000000000000049defc71eb512479fa4277a8f44ab02ea82cfd0caea86a"], 0x0)

3.444100708s ago: executing program 8 (id=863):
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000)
r2 = dup3(r1, r0, 0x0)
recvmmsg(r2, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f00000085"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r4}, 0x10)
getrlimit(0xd, &(0x7f0000000040))
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRESOCT=r1, @ANYRES16=r0, @ANYRES64=r0, @ANYRESDEC=0x0, @ANYRES8=r1, @ANYRES64=r1, @ANYRESOCT=r3, @ANYRESDEC=r1, @ANYBLOB="4b982cb1c239f4e31735954b7a1ebbe1f2ab524af80b5cf9ef502ffab5873d4eb74a298dd5aed94f87379034a6f9b0e4c577b626192f94c4b3f5d65db3b39552d4bac71652a83a3e40180394aaa49507313283401e7ee172d96f6a9530aae1e7896642a112e03b601b357b50f394ba9fd848d515d099f80e2b340b2f6cb54885a94a6f3ca38b799c3ac018d1d3a2089d", @ANYRES64=r1], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5, <r6=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x10000002}, 0x18)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000fc0)={'bridge_slave_0\x00', <r9=>0x0})
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000340)={{0x6c, @private=0xa010100, 0x4e20, 0x2, 'lblc\x00', 0x1e, 0x3, 0x1c}, {@loopback, 0x4e24, 0x4, 0xfff, 0x7fff, 0x6}}, 0x44)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r9, @ANYBLOB="8000c6000a000200aaaaaaaaaabb0000060005"], 0x30}}, 0x0)

3.363453383s ago: executing program 9 (id=865):
r0 = syz_open_dev$video(&(0x7f0000000180), 0x101, 0xab02)
set_mempolicy(0x4003, &(0x7f0000000200)=0x7, 0x3)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.self_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
write$cgroup_int(r2, &(0x7f0000000540), 0xfffffdd8)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00001c012bdc92da3780a18500009fd31edbfa15fc5f0bb5cedfe435428830236f31d682c5638e30c8b268da4dda53b23c843216b50261a1c3015a8ee9fd1a412718d3fdc8ce850c7c38c757fefd51839786c34f737caca2ee49537d727b3b241846f54200faebc259852fed2642187a4ec1265e7a9e1602bf4fbcfa8f46fe6251e4c9c81cd3e7bd96b712aca6ab85", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000040)={0x8, {0x400, 0xa2b, 0x5, 0xf}})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_MARK={0x8}]}, {0xfffffffffffffe4b}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='contention_end\x00', r6}, 0x18)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=@newtaction={0x5c, 0x30, 0xb, 0x5, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8890}, 0x40)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
open(&(0x7f00000001c0)='.\x00', 0x141400, 0x0)

2.436055003s ago: executing program 9 (id=866):
r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a00030100000009040000000101"], 0x0)
io_uring_setup(0x797c, &(0x7f00000000c0)={0x0, 0x2cbe, 0x80, 0x0, 0x56}) (async)
r1 = io_uring_setup(0x797c, &(0x7f00000000c0)={0x0, 0x2cbe, 0x80, 0x0, 0x56})
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x7f) (async)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x7f)
syz_usb_connect(0x0, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) (async)
r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io(r3, 0x0, 0x0) (async)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0) (async)
syz_usb_control_io(r3, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x800) (async)
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x800)
ioctl$int_in(r4, 0x5452, &(0x7f0000000340)=0xfffffffffbfffffe)
close_range(r1, 0xffffffffffffffff, 0x0)
syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003040000000403070479bac4f27f17d12c5401984199d193c4e3b9f86c24"], 0x0, 0x0, 0x0}, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x200000, 0x3}, 0x10)
r6 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10)
sendmsg$tipc(r6, &(0x7f0000000140)={0x0, 0x20d302, 0x0}, 0x0)
r7 = dup3(0xffffffffffffffff, r6, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r7, 0x0, 0x0)
setsockopt$TIPC_GROUP_LEAVE(r7, 0x10f, 0x88)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000001c0)={r7, 0x0, 0xfffffffffffff000, 0xfffffffffffff000})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0xfffffffe}, 0x94)
r9 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0)
r10 = fsmount(r9, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r8, r10, 0x1, 0x0, @void}, 0x10)
mmap$snddsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x110, r10, 0x9000) (async)
mmap$snddsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x110, r10, 0x9000)
ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000080)) (async)
ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000080))
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) (async)
r11 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$FS_IOC_READ_VERITY_METADATA(r11, 0x2284, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00031300000013030d"]}, 0x0)

2.371230718s ago: executing program 8 (id=867):
syz_usb_connect(0x0, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0)
r0 = gettid()
timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x23, 0x0, @tid=r0}, &(0x7f0000000040))
timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r1, 0x400455c8, 0x4)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x32)

1.9720862s ago: executing program 5 (id=868):
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2})
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r5, @ANYBLOB="08009e00"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x2}]}}}]}, 0x3c}}, 0x0)

1.690278229s ago: executing program 5 (id=869):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002"], 0x7c}}, 0x0)
r1 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x80000001, @loopback}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001"], 0x190)
fanotify_mark(0xffffffffffffffff, 0x400, 0x40001031, r0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
pipe(&(0x7f0000005880)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fsetxattr$security_selinux(r2, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r3 = socket$netlink(0x10, 0x3, 0x4)
writev(r3, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f0000000040)="abd9", 0x2}], 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
accept4(r6, 0x0, 0x0, 0x0)
connect$llc(r5, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="48bd00"}, 0x10)
r7 = syz_init_net_socket$llc(0x1a, 0x802, 0x0)
bind$llc(r7, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10)
dup3(r5, r7, 0x0)

1.306119533s ago: executing program 5 (id=870):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TCFLSH(r1, 0x80045438, 0x300000000000000)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
recvmmsg(r0, &(0x7f000000c800)=[{{0x0, 0x0, &(0x7f0000002e40)}, 0x8}, {{0x0, 0x0, 0x0}, 0x24c9ddb}, {{0x0, 0x0, 0x0}, 0x68}, {{0x0, 0x0, 0x0}, 0xfff}], 0x4, 0x40000000, 0x0) (async)
recvmmsg(r0, &(0x7f000000c800)=[{{0x0, 0x0, &(0x7f0000002e40)}, 0x8}, {{0x0, 0x0, 0x0}, 0x24c9ddb}, {{0x0, 0x0, 0x0}, 0x68}, {{0x0, 0x0, 0x0}, 0xfff}], 0x4, 0x40000000, 0x0)

1.035981951s ago: executing program 5 (id=871):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200101, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0)
close(r0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[], 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0)
syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12011940110000402505a8a426000102030109021b0001010510b709041df4020701010d090501020048c7600e1639ed20abd9f478a716092fb624e2292c68f2201c1281e66881a9d9719d1de4af0385ad4cd7b2958df1f77e467d130b5cb5ad332f670118164f592aea860501756906e6ba0abaf3ab04f2eb04000000ddcb524dbbee24fe5b103f0e221d13cf7b5f3d233ebc4bf73e4e2745c75d"], 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00')
ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r2])

851.907987ms ago: executing program 1 (id=872):
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2})
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x2, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1})
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
setuid(0xee00)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
r2 = landlock_create_ruleset(&(0x7f0000000200)={0x0, 0x6, 0x2}, 0x18, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000002c0)={{0x1, 0x1, 0x18, <r3=>r2}, './file0\x00'})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2)
io_setup(0x10000, &(0x7f0000000800))
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x4f, 0x0, 0x0)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000023d000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, 0x0, 0x0, 0x1c3, 0x0, 0x0, 0x42, 0x2e})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5})
ppoll(&(0x7f00000000c0)=[{r0, 0x2004}], 0x1, 0x0, &(0x7f0000000140)={[0x555]}, 0x8)

455.567764ms ago: executing program 4 (id=873):
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socket$igmp6(0xa, 0x3, 0x2) (async)
socket$igmp6(0xa, 0x3, 0x2)
pipe(&(0x7f00000000c0)={<r1=>0xffffffffffffffff})
read$FUSE(r1, &(0x7f0000002200)={0x2020}, 0x2020) (async)
read$FUSE(r1, &(0x7f0000002200)={0x2020}, 0x2020)
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100025bd7000fcdbdf256700000008003d6f4e0119e3aa371566cdb90100420000000800c400400000004100c50022a80e857184a8fc16fe1b83063dfa02bd599d457a6885dba489db2b30b2585557fba4faa24006db256a500801573190bd126c0d"], 0x68}, 0x1, 0x0, 0x0, 0x24004080}, 0x11)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
r7 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r6}, &(0x7f0000000180)=<r8=>0x0, &(0x7f00000001c0)=<r9=>0x0)
socket$inet(0x2, 0x4000000805, 0x0) (async)
r10 = socket$inet(0x2, 0x4000000805, 0x0)
connect$inet(r10, &(0x7f00000002c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) (async)
connect$inet(r10, &(0x7f00000002c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10)
sendto$inet(r10, &(0x7f0000000280)='V', 0x1, 0x0, &(0x7f0000000380)={0x2, 0x0, @private=0xa010101}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f0000000100)=0xc)
syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r5, 0x0, 0x0, 0x0, {}, 0x1}) (async)
syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r5, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r7, 0x2ded, 0x4000, 0x0, 0x0, 0x0) (async)
io_uring_enter(r7, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
socket(0x1e, 0x1, 0x0)

428.469668ms ago: executing program 9 (id=874):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32, @ANYBLOB="0c009985f2330fd547793c000800a0003a0900080500390104000000080026"], 0x40}}, 0x0)

272.336228ms ago: executing program 9 (id=875):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000001280)=ANY=[@ANYBLOB="0180c200000effffffffffff86dd60ecff8000071100fc000000000000000000000000000011ff02000000000000000000000000000100004e220018cf907803000000000000000000000000000049defc71eb512479fa4277a8f44ab02ea82cfd0caea86a"], 0x0)

234.924304ms ago: executing program 9 (id=876):
mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)
mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xa, 0x59032, 0xffffffffffffffff, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = socket(0xa, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000340)=@gettaction={0x34, 0x32, 0x301, 0x0, 0x2, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0x34}}, 0x4000000)
r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
clock_settime(0x0, &(0x7f0000000240)={0x77359400})
clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfefffffffffffff7, 0x9, 0x0, 0xae, 0x9, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x101, 0x9, 0x2, 0x5, 0x3, 0x8, 0x8})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xffff1000, 0x2000, &(0x7f0000000000/0x2000)=nil})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00'}, 0x94)

190.579976ms ago: executing program 5 (id=877):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="00040000", @ANYRES16=r1, @ANYBLOB="000300000000000000250f00000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x400}}, 0x44050)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x200000, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)="df", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r3 = socket$igmp6(0xa, 0x3, 0x2)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000140)={@loopback, 0x80, r5})
sendmmsg(r0, &(0x7f0000003980)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000e00)="befc5e1ecb6761b3f74a2a328f3ae5d1c707bfb0c082dbb4bac7028eab4259666126069dd61c0cb28410aa7d63cf203cb1fdda8c004ad34d09553f7222b84a8eec20904d7f8fa12df0570b95ba6ee4c698aa7e23c1784fb4211f7006ec3675a607fae9d5dee6470303ee0f92c00eeb644f2ef2660a44247cd50ba4fed0a4adfc5a9e48c9aa1cbcda7696a52ad701766cb564903a6b69cc8c59cffb2b00d23a7600b97d9d6db01e56594eea2ee44836558d411d0140b45b9812b57229c8ffefc9cd79ed5d3f594b574726ec04f965b763c6afab5b2aa10538c7700c29b36ab6ab491ad8861d3a2fdcc8772a1d87973ede849f95868b4313d4fa18a586ce9e9696cc2b03516664c092a9554f4d6a9caeacb43ed75ea6e5c071b5618ffbadc36400366ff50b21795584455b633a752671208cdf29e676e1fec5eb1b9e2877dbb783b18ddffdce5cf23d2e70dbed3b888d4c0131cbf04bd506bbd2d83bef7fddaa7a16541ac468f062249b53adb100d1b71656c67ccff20134e391d2456ebe9efcdeeaed5ebec149cba5fd2a0acf704f55c515130507170a1d9b73e54149e6da982e9f5367edab3dd309e5002dfe2817e3cb168603fdaff3909e9129db4cf6a0e6e14b8514549c8dad3e81bed32789f7c7aa8f33c0305ab671f3b463694dd94699e0a29f2be31e6d5d52b9bb7180e13d7abfa590bcedfba727672b266884445880bb5f597abcb178757321586077c6fbbe3e5c0e0531d18f2a166497d355e58c38f457d8d09f99e76fd852227daf209c98e4b1613527a7bb43c9f73b73ba5f8b5ff1f1d7503eae969106bab97f31bee84239603f0c6ebe8b213219f5f1c3f0c2b54c485f509657ad88fe06fd0acb2a64af7281d605db4744a51cec9de158f35a37193c5c6453ecfeb4b9f33c50a83ededbaedcc5795f099596d5fb3c9c2c88bbdd42e5a6618497b8370ef27f7bfcb8cba130d91d772965faf2f529550719349dbdebc5ff5ce2e4f6f7948da1bb9b5ae204350f3eeb1f99c00a824926bca3cb37f42249d8fc6a4c1691e7895a8e404e4fb34f4433d9974debf9b721b4e772531bb37a78232d299e19fd81b615544dcd7aad0dfd7d5abb700d11882994822876b6c58bb8496c448b1de7723d519bccbb9deffea30234fb409f1f36495f4c311ad748e2ff8ae75362d6980c402158fa519d6ae491865edc82c26a8c1e5f3f4ed0547f0f64639073d27e1ecb8769435c5f9e6e698b20bdf67c181e3d5f95f8b88e8e65e6e176e226549cc8eb7750d8567f647ac4f86643da35eac39fd49264c784f6628c3bbcc248bbfcd2c445d729d8b51507de74b196ad59", 0x3b5}], 0x1}}], 0x1, 0x84004)

0s ago: executing program 5 (id=878):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r2=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, <r3=>0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, r3, r4, 0x3, 0x180000, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x412f, 0x3ff, 0x1000, 0x7f, 0x6, 0x2, "fe1d00003413000000000020b42717e47f00"}})

kernel console output (not intermixed with test programs):

issive=1
[  232.978662][   T30] audit: type=1400 audit(1751278459.969:1292): avc:  denied  { map } for  pid=8609 comm="syz.7.537" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  233.002338][   T30] audit: type=1400 audit(1751278459.969:1293): avc:  denied  { execute } for  pid=8609 comm="syz.7.537" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  233.515028][   T30] audit: type=1400 audit(1751278461.199:1294): avc:  denied  { ioctl } for  pid=8621 comm="syz.5.542" path="socket:[23351]" dev="sockfs" ino=23351 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  233.602723][ T8625] tipc: Invalid UDP bearer configuration
[  233.603029][ T8625] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  233.908508][ T5923] usb 9-1: new full-speed USB device number 15 using dummy_hcd
[  234.041883][ T8629] netlink: 96 bytes leftover after parsing attributes in process `syz.7.544'.
[  234.296089][ T5923] usb 9-1: config 0 has an invalid interface number: 189 but max is 0
[  234.314890][ T5923] usb 9-1: config 0 has no interface number 0
[  234.321139][ T5923] usb 9-1: config 0 interface 189 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  234.368473][ T5923] usb 9-1: config 0 interface 189 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[  234.410915][ T5923] usb 9-1: config 0 interface 189 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64
[  234.439758][ T5923] usb 9-1: config 0 interface 189 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  234.442246][   T30] audit: type=1400 audit(1751278462.139:1295): avc:  denied  { name_bind } for  pid=8642 comm="syz.5.548" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  234.450464][ T8631] could not allocate digest TFM handle tgr128-generic
[  234.471665][    C0] vkms_vblank_simulate: vblank timer overrun
[  234.505670][ T5923] usb 9-1: config 0 interface 189 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  234.531816][   T30] audit: type=1400 audit(1751278462.189:1296): avc:  denied  { shutdown } for  pid=8642 comm="syz.5.548" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  234.564468][   T30] audit: type=1400 audit(1751278462.229:1297): avc:  denied  { read } for  pid=8639 comm="syz.9.547" lport=12 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  234.685290][ T5923] usb 9-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02
[  234.712647][ T5923] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.723130][ T5923] usb 9-1: Product: syz
[  234.728853][ T5923] usb 9-1: Manufacturer: syz
[  234.734119][ T5923] usb 9-1: SerialNumber: syz
[  234.748555][ T8651] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  234.799716][ T5923] usb 9-1: config 0 descriptor??
[  234.815855][ T8613] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  234.835993][ T5923] ums-alauda 9-1:0.189: USB Mass Storage device detected
[  234.911319][ T5923] scsi host1: usb-storage 9-1:0.189
[  235.128255][ T8613] syz_tun: entered allmulticast mode
[  235.142942][ T5872] usb 9-1: USB disconnect, device number 15
[  235.221801][ T8659] veth0_to_team: entered promiscuous mode
[  235.227652][ T8659] veth0_to_team: entered allmulticast mode
[  235.261564][ T8612] syz_tun: left allmulticast mode
[  236.833459][ T8670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  236.863745][ T8670] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  237.055932][ T5816] Bluetooth: hci0: command 0x0406 tx timeout
[  237.798519][   T30] audit: type=1400 audit(1751278465.499:1298): avc:  denied  { append } for  pid=8680 comm="syz.8.556" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  238.284836][ T5923] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[  238.485458][ T5923] usb 8-1: Using ep0 maxpacket: 32
[  238.870870][   T30] audit: type=1400 audit(1751278466.559:1299): avc:  denied  { open } for  pid=8694 comm="syz.5.560" path="/dev/ptyqf" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  238.903495][ T5818] Bluetooth: hci2: Unable to find connection with handle 0x0000
[  238.913522][   T30] audit: type=1400 audit(1751278466.559:1300): avc:  denied  { ioctl } for  pid=8694 comm="syz.5.560" path="/dev/ptyqf" dev="devtmpfs" ino=134 ioctlcmd=0x541c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  238.943349][ T5923] usb 8-1: config 0 interface 0 has no altsetting 0
[  238.953080][ T5923] usb 8-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00
[  238.971641][ T5923] usb 8-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[  238.989228][ T5923] usb 8-1: Product: syz
[  239.002238][ T5923] usb 8-1: config 0 descriptor??
[  239.293715][ T5872] usb 10-1: new high-speed USB device number 24 using dummy_hcd
[  239.302075][ T5864] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  239.484973][ T5864] usb 5-1: Using ep0 maxpacket: 32
[  239.501116][ T5872] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  239.533573][ T5864] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  239.541892][ T5923] usbhid 8-1:0.0: can't add hid device: -71
[  239.541988][ T5923] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  239.544409][ T5923] usb 8-1: USB disconnect, device number 13
[  239.654846][ T5872] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  239.663218][ T8703] could not allocate digest TFM handle tgr128-generic
[  239.670730][ T5872] usb 10-1: Product: syz
[  239.675137][ T5864] usb 5-1: config 0 has no interface number 0
[  239.681213][ T5872] usb 10-1: Manufacturer: syz
[  239.690836][ T5864] usb 5-1: config 0 interface 184 has no altsetting 0
[  239.697780][ T5872] usb 10-1: SerialNumber: syz
[  239.707987][ T5864] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  239.719475][ T5872] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  239.774545][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  239.799929][   T30] audit: type=1400 audit(1751278467.499:1301): avc:  denied  { firmware_load } for  pid=5882 comm="kworker/1:6" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[  239.802712][ T5864] usb 5-1: Product: syz
[  239.866675][ T5864] usb 5-1: Manufacturer: syz
[  239.871552][ T5864] usb 5-1: SerialNumber: syz
[  239.879567][ T5882] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  239.941207][ T5864] usb 5-1: config 0 descriptor??
[  239.959357][ T5864] smsc75xx v1.0.0
[  240.093093][    C1] usb 10-1: ath: unknown panic pattern!
[  241.039406][ T5882] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive
[  241.048792][   T30] audit: type=1400 audit(1751278468.689:1302): avc:  denied  { map_create } for  pid=8711 comm="syz.5.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  241.118501][ T5864] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  241.160534][ T5882] ath9k_htc: Failed to initialize the device
[  241.211319][ T5864] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  241.239597][   T30] audit: type=1400 audit(1751278468.699:1303): avc:  denied  { map_read map_write } for  pid=8711 comm="syz.5.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  241.259789][ T5882] usb 10-1: ath9k_htc: USB layer deinitialized
[  241.271731][ T5864] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[  241.289802][   T30] audit: type=1400 audit(1751278468.699:1304): avc:  denied  { prog_load } for  pid=8711 comm="syz.5.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  241.314307][   T30] audit: type=1400 audit(1751278468.699:1305): avc:  denied  { bpf } for  pid=8711 comm="syz.5.564" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  241.332333][ T5864] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61
[  241.347486][ T5864] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  241.358536][ T5864] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61
[  241.372705][ T5864] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -61
[  241.394841][   T30] audit: type=1400 audit(1751278468.699:1306): avc:  denied  { perfmon } for  pid=8711 comm="syz.5.564" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  241.426551][ T5816] Bluetooth: hci5: sending frame failed (-49)
[  241.434090][ T5818] Bluetooth: hci5: Opcode 0x1003 failed: -49
[  241.442001][   T30] audit: type=1400 audit(1751278468.719:1307): avc:  denied  { connect } for  pid=8711 comm="syz.5.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  241.466309][   T30] audit: type=1400 audit(1751278468.729:1308): avc:  denied  { name_connect } for  pid=8711 comm="syz.5.564" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  241.489233][   T30] audit: type=1400 audit(1751278468.779:1309): avc:  denied  { write } for  pid=8711 comm="syz.5.564" lport=37051 faddr=fc01:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  241.516391][   T30] audit: type=1400 audit(1751278468.779:1310): avc:  denied  { name_connect } for  pid=8711 comm="syz.5.564" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  241.550544][ T5864] usb 10-1: USB disconnect, device number 24
[  242.327496][ T5923] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[  242.555260][ T5923] usb 9-1: Using ep0 maxpacket: 8
[  242.622136][ T5923] usb 9-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  242.721367][ T5923] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 15
[  242.832432][ T5923] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  242.991493][ T5923] usb 9-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8
[  243.078633][ T5923] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.090619][ T5923] usb 9-1: Product: syz
[  243.101294][ T5923] usb 9-1: Manufacturer: syz
[  243.114566][ T8744] netlink: 4 bytes leftover after parsing attributes in process `syz.9.573'.
[  243.125530][ T5923] usb 9-1: SerialNumber: syz
[  243.151706][ T8744] netlink: 'syz.9.573': attribute type 1 has an invalid length.
[  243.165276][ T5923] usb 9-1: config 0 descriptor??
[  243.178543][  T974] usb 5-1: USB disconnect, device number 27
[  243.194572][ T8744] netlink: 12 bytes leftover after parsing attributes in process `syz.9.573'.
[  243.241706][ T5923] powermate 9-1:0.0: probe with driver powermate failed with error -22
[  244.941638][   T30] kauditd_printk_skb: 61 callbacks suppressed
[  244.941652][   T30] audit: type=1400 audit(1751278472.639:1372): avc:  denied  { create } for  pid=8766 comm="syz.5.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  244.968439][   T30] audit: type=1400 audit(1751278472.669:1373): avc:  denied  { write } for  pid=8766 comm="syz.5.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  245.000839][   T30] audit: type=1400 audit(1751278472.699:1374): avc:  denied  { ioctl } for  pid=8735 comm="syz.8.571" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  245.026170][    C1] vkms_vblank_simulate: vblank timer overrun
[  245.471005][   T30] audit: type=1400 audit(1751278473.169:1375): avc:  denied  { mounton } for  pid=8778 comm="syz.4.581" path="/64" dev="tmpfs" ino=357 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  245.492939][    C1] vkms_vblank_simulate: vblank timer overrun
[  245.623113][   T30] audit: type=1400 audit(1751278473.319:1376): avc:  denied  { create } for  pid=8774 comm="syz.9.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  245.652257][   T30] audit: type=1400 audit(1751278473.339:1377): avc:  denied  { create } for  pid=8781 comm="syz.4.582" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  245.673435][    C1] vkms_vblank_simulate: vblank timer overrun
[  245.683613][ T8782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.582'.
[  245.757133][   T30] audit: type=1400 audit(1751278473.349:1378): avc:  denied  { map } for  pid=8781 comm="syz.4.582" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=23802 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  245.838904][   T30] audit: type=1400 audit(1751278473.349:1379): avc:  denied  { read write } for  pid=8781 comm="syz.4.582" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=23802 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  245.864683][    C1] vkms_vblank_simulate: vblank timer overrun
[  245.875934][   T30] audit: type=1400 audit(1751278473.349:1380): avc:  denied  { write } for  pid=8774 comm="syz.9.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  245.896962][   T30] audit: type=1400 audit(1751278473.489:1381): avc:  denied  { read write } for  pid=8784 comm="syz.5.583" name="vbi2" dev="devtmpfs" ino=966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  246.053895][ T8735] delete_channel: no stack
[  246.060088][ T5864] usb 9-1: USB disconnect, device number 16
[  246.830759][ T8798] FAULT_INJECTION: forcing a failure.
[  246.830759][ T8798] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  246.866513][ T8798] CPU: 0 UID: 0 PID: 8798 Comm: syz.9.588 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) 
[  246.866546][ T8798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  246.866557][ T8798] Call Trace:
[  246.866563][ T8798]  <TASK>
[  246.866570][ T8798]  dump_stack_lvl+0x16c/0x1f0
[  246.866601][ T8798]  should_fail_ex+0x512/0x640
[  246.866629][ T8798]  should_fail_alloc_page+0xe7/0x130
[  246.866657][ T8798]  prepare_alloc_pages+0x3c2/0x610
[  246.866679][ T8798]  __alloc_frozen_pages_noprof+0x18b/0x23f0
[  246.866708][ T8798]  ? __lock_acquire+0x622/0x1c90
[  246.866741][ T8798]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  246.866772][ T8798]  ? is_bpf_text_address+0x8a/0x1a0
[  246.866793][ T8798]  ? bpf_ksym_find+0x127/0x1c0
[  246.866817][ T8798]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  246.866842][ T8798]  ? is_bpf_text_address+0x94/0x1a0
[  246.866862][ T8798]  ? kernel_text_address+0x8d/0x100
[  246.866881][ T8798]  ? __kernel_text_address+0xd/0x40
[  246.866898][ T8798]  ? unwind_get_return_address+0x59/0xa0
[  246.866929][ T8798]  ? iovec_from_user+0x108/0x140
[  246.866953][ T8798]  __alloc_pages_noprof+0xb/0x1b0
[  246.866974][ T8798]  ___kmalloc_large_node+0x84/0x1e0
[  246.866995][ T8798]  ? iovec_from_user+0x108/0x140
[  246.867018][ T8798]  __kmalloc_large_node_noprof+0x1c/0x70
[  246.867037][ T8798]  __kmalloc_noprof.cold+0xc/0x61
[  246.867069][ T8798]  iovec_from_user+0x108/0x140
[  246.867096][ T8798]  __import_iovec+0x88/0x650
[  246.867123][ T8798]  ? __fget_files+0x20e/0x3c0
[  246.867148][ T8798]  import_iovec+0x109/0x140
[  246.867181][ T8798]  __do_sys_vmsplice+0x200/0x1180
[  246.867212][ T8798]  ? __pfx___do_sys_vmsplice+0x10/0x10
[  246.867238][ T8798]  ? get_pid_task+0x106/0x250
[  246.867267][ T8798]  ? find_held_lock+0x2b/0x80
[  246.867293][ T8798]  ? find_held_lock+0x2b/0x80
[  246.867314][ T8798]  ? ksys_write+0x190/0x250
[  246.867349][ T8798]  ? __fget_files+0x20e/0x3c0
[  246.867376][ T8798]  ? fput+0x70/0xf0
[  246.867403][ T8798]  ? ksys_write+0x1ac/0x250
[  246.867422][ T8798]  ? __pfx_ksys_write+0x10/0x10
[  246.867451][ T8798]  ? do_syscall_64+0xcd/0x4c0
[  246.867475][ T8798]  do_syscall_64+0xcd/0x4c0
[  246.867502][ T8798]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  246.867519][ T8798] RIP: 0033:0x7f264fb8e929
[  246.867534][ T8798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  246.867551][ T8798] RSP: 002b:00007f26509c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  246.867569][ T8798] RAX: ffffffffffffffda RBX: 00007f264fdb5fa0 RCX: 00007f264fb8e929
[  246.867581][ T8798] RDX: 100000000000022d RSI: 00002000000003c0 RDI: 0000000000000003
[  246.867591][ T8798] RBP: 00007f26509c6090 R08: 0000000000000000 R09: 0000000000000000
[  246.867602][ T8798] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001
[  246.867612][ T8798] R13: 0000000000000000 R14: 00007f264fdb5fa0 R15: 00007ffd0ca2fd68
[  246.867636][ T8798]  </TASK>
[  248.044955][  T974] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[  248.185622][ T8809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  248.217660][ T8809] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  248.249910][  T974] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  248.460363][  T974] usb 9-1: config 0 interface 0 has no altsetting 0
[  248.673947][  T974] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  248.860085][  T974] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  249.215748][  T974] usb 9-1: Product: syz
[  249.442998][  T974] usb 9-1: Manufacturer: syz
[  249.451126][  T974] usb 9-1: SerialNumber: syz
[  249.474025][  T974] usb 9-1: config 0 descriptor??
[  249.678387][ T8812] could not allocate digest TFM handle tgr128-generic
[  249.751031][ T8825] FAULT_INJECTION: forcing a failure.
[  249.751031][ T8825] name failslab, interval 1, probability 0, space 0, times 0
[  249.775189][ T5864] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[  249.788282][ T8825] CPU: 1 UID: 0 PID: 8825 Comm: syz.4.595 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) 
[  249.788316][ T8825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  249.788329][ T8825] Call Trace:
[  249.788337][ T8825]  <TASK>
[  249.788346][ T8825]  dump_stack_lvl+0x16c/0x1f0
[  249.788383][ T8825]  should_fail_ex+0x512/0x640
[  249.788408][ T8825]  ? __kmalloc_node_noprof+0xc5/0x500
[  249.788440][ T8825]  should_failslab+0xc2/0x120
[  249.788468][ T8825]  __kmalloc_node_noprof+0xd8/0x500
[  249.788495][ T8825]  ? find_held_lock+0x2b/0x80
[  249.788518][ T8825]  ? qdisc_alloc+0xbb/0xc50
[  249.788553][ T8825]  qdisc_alloc+0xbb/0xc50
[  249.788582][ T8825]  ? _raw_read_unlock+0x28/0x50
[  249.788611][ T8825]  qdisc_create+0x71/0xfc0
[  249.788640][ T8825]  tc_modify_qdisc+0x12bb/0x2130
[  249.788673][ T8825]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  249.788721][ T8825]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  249.788747][ T8825]  rtnetlink_rcv_msg+0x3c9/0xe90
[  249.788780][ T8825]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  249.788816][ T8825]  ? ref_tracker_free+0x37c/0x830
[  249.788846][ T8825]  netlink_rcv_skb+0x158/0x420
[  249.788864][ T8825]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  249.788893][ T8825]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  249.788922][ T8825]  ? netlink_deliver_tap+0x1ae/0xd30
[  249.788958][ T8825]  netlink_unicast+0x53d/0x7f0
[  249.788980][ T8825]  ? __pfx_netlink_unicast+0x10/0x10
[  249.789006][ T8825]  netlink_sendmsg+0x8d1/0xdd0
[  249.789029][ T8825]  ? __pfx_netlink_sendmsg+0x10/0x10
[  249.789059][ T8825]  ____sys_sendmsg+0xa95/0xc70
[  249.789080][ T8825]  ? copy_msghdr_from_user+0x10a/0x160
[  249.789106][ T8825]  ? __pfx_____sys_sendmsg+0x10/0x10
[  249.789144][ T8825]  ___sys_sendmsg+0x134/0x1d0
[  249.789173][ T8825]  ? __pfx____sys_sendmsg+0x10/0x10
[  249.789197][ T8825]  ? __lock_acquire+0x622/0x1c90
[  249.789259][ T8825]  __sys_sendmsg+0x16d/0x220
[  249.789285][ T8825]  ? __pfx___sys_sendmsg+0x10/0x10
[  249.789330][ T8825]  do_syscall_64+0xcd/0x4c0
[  249.789361][ T8825]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  249.789382][ T8825] RIP: 0033:0x7f494b18e929
[  249.789398][ T8825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  249.789414][ T8825] RSP: 002b:00007f494c00b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  249.789433][ T8825] RAX: ffffffffffffffda RBX: 00007f494b3b5fa0 RCX: 00007f494b18e929
[  249.789446][ T8825] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000003
[  249.789457][ T8825] RBP: 00007f494c00b090 R08: 0000000000000000 R09: 0000000000000000
[  249.789468][ T8825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  249.789479][ T8825] R13: 0000000000000000 R14: 00007f494b3b5fa0 R15: 00007ffefbf3f8f8
[  249.789505][ T8825]  </TASK>
[  250.193508][  T974] usb 9-1: can't set config #0, error -71
[  250.203587][  T974] usb 9-1: USB disconnect, device number 17
[  250.285116][ T5864] usb 8-1: Using ep0 maxpacket: 8
[  250.296003][ T5864] usb 8-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  250.306324][ T5864] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 15
[  250.315347][ T5864] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  250.343835][ T5864] usb 8-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8
[  250.352996][ T5864] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  250.361080][ T5864] usb 8-1: Product: syz
[  250.365589][ T5864] usb 8-1: Manufacturer: syz
[  250.370899][ T5864] usb 8-1: SerialNumber: syz
[  250.378040][ T5864] usb 8-1: config 0 descriptor??
[  250.387088][ T5864] powermate 8-1:0.0: probe with driver powermate failed with error -22
[  250.391185][   T30] kauditd_printk_skb: 14 callbacks suppressed
[  250.391199][   T30] audit: type=1400 audit(1751278478.089:1396): avc:  denied  { read write } for  pid=8827 comm="syz.8.597" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  250.432904][   T30] audit: type=1400 audit(1751278478.109:1397): avc:  denied  { open } for  pid=8827 comm="syz.8.597" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  250.596428][   T30] audit: type=1400 audit(1751278478.299:1398): avc:  denied  { set_context_mgr } for  pid=8831 comm="syz.8.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  250.734310][ T5923] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  250.985996][ T5923] usb 5-1: Using ep0 maxpacket: 8
[  251.017331][ T5923] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  251.102177][ T8842] netlink: 'syz.9.599': attribute type 3 has an invalid length.
[  251.162770][ T5923] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 15
[  251.221646][ T5923] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  251.449347][ T5923] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8
[  251.466361][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  251.495928][ T5923] usb 5-1: Product: syz
[  251.514217][ T5923] usb 5-1: Manufacturer: syz
[  251.519356][ T5923] usb 5-1: SerialNumber: syz
[  251.519379][   T30] audit: type=1400 audit(1751278479.199:1399): avc:  denied  { listen } for  pid=8846 comm="syz.5.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  251.530362][ T5923] usb 5-1: config 0 descriptor??
[  251.563049][ T8848] fuse: Bad value for 'user_id'
[  251.577818][ T8848] fuse: Bad value for 'user_id'
[  251.628214][   T30] audit: type=1400 audit(1751278479.199:1400): avc:  denied  { accept } for  pid=8846 comm="syz.5.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  251.628937][ T5923] powermate 5-1:0.0: probe with driver powermate failed with error -22
[  251.655030][   T30] audit: type=1400 audit(1751278479.259:1401): avc:  denied  { read write } for  pid=8846 comm="syz.5.601" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  251.741963][ T8851] kAFS: No cell specified
[  252.115028][ T5923] usb 10-1: new low-speed USB device number 25 using dummy_hcd
[  253.406587][   T30] audit: type=1400 audit(1751278479.259:1402): avc:  denied  { open } for  pid=8846 comm="syz.5.601" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  253.430018][   T30] audit: type=1400 audit(1751278479.259:1403): avc:  denied  { mounton } for  pid=8846 comm="syz.5.601" path="/122/file0" dev="tmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  253.668767][   T30] audit: type=1400 audit(1751278481.279:1404): avc:  denied  { mounton } for  pid=8855 comm="syz.5.603" path="/proc/402/task" dev="proc" ino=23945 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  253.828161][ T5923] usb 10-1: config 0 has an invalid interface number: 1 but max is 0
[  253.846554][ T5923] usb 10-1: config 0 has no interface number 0
[  253.848694][ T8818] delete_channel: no stack
[  253.853504][ T5923] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  253.873026][ T5923] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  253.884048][ T5923] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  253.895156][ T5923] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.909592][  T974] usb 8-1: USB disconnect, device number 14
[  253.925057][ T5923] usb 10-1: config 0 descriptor??
[  253.930817][ T8851] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22
[  253.945223][ T5923] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  253.958320][   T30] audit: type=1400 audit(1751278481.299:1405): avc:  denied  { mount } for  pid=8855 comm="syz.5.603" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  254.503461][ T5865] usb 10-1: USB disconnect, device number 25
[  254.512895][ T8854] delete_channel: no stack
[  254.526940][ T5864] usb 5-1: USB disconnect, device number 28
[  254.573016][ T8868] tipc: Invalid UDP bearer configuration
[  254.573061][ T8868] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  254.974823][  T974] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  255.164892][ T8881] netlink: 8 bytes leftover after parsing attributes in process `syz.5.611'.
[  255.454593][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  255.461050][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  255.545320][ T5865] usb 8-1: new full-speed USB device number 15 using dummy_hcd
[  255.603218][  T974] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  255.615547][  T974] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  255.639080][  T974] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  255.649146][  T974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  255.661741][  T974] usb 5-1: config 0 descriptor??
[  255.863777][ T5865] usb 8-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d
[  255.873300][ T5865] usb 8-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3
[  255.890883][ T5865] usb 8-1: Product: syz
[  255.899789][ T5865] usb 8-1: Manufacturer: syz
[  255.904528][ T5865] usb 8-1: SerialNumber: syz
[  255.910291][   T30] kauditd_printk_skb: 9 callbacks suppressed
[  255.910305][   T30] audit: type=1400 audit(1751278483.609:1413): avc:  denied  { setopt } for  pid=8882 comm="syz.9.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  255.946625][   T30] audit: type=1400 audit(1751278483.639:1414): avc:  denied  { read } for  pid=8882 comm="syz.9.612" path="socket:[24003]" dev="sockfs" ino=24003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  255.984557][   T30] audit: type=1400 audit(1751278483.679:1415): avc:  denied  { sys_module } for  pid=8882 comm="syz.9.612" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  256.005547][    C0] vkms_vblank_simulate: vblank timer overrun
[  256.049008][   T30] audit: type=1400 audit(1751278483.709:1416): avc:  denied  { listen } for  pid=8882 comm="syz.9.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  256.057138][ T5865] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state.
[  256.075795][   T30] audit: type=1400 audit(1751278483.709:1417): avc:  denied  { accept } for  pid=8882 comm="syz.9.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  256.098952][   T30] audit: type=1400 audit(1751278483.789:1418): avc:  denied  { create } for  pid=8887 comm="syz.5.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  256.131756][  T974] hid (null): global environment stack underflow
[  256.148780][  T974] hid-steam 0003:28DE:1142.0005: global environment stack underflow
[  256.153497][   T30] audit: type=1400 audit(1751278483.789:1419): avc:  denied  { write } for  pid=8887 comm="syz.5.613" path="socket:[24960]" dev="sockfs" ino=24960 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  256.191576][  T974] hid-steam 0003:28DE:1142.0005: item 0 4 1 11 parsing failed
[  256.208436][  T974] hid-steam 0003:28DE:1142.0005: steam_probe:parse of hid interface failed
[  256.220014][  T974] hid-steam 0003:28DE:1142.0005: probe with driver hid-steam failed with error -22
[  256.406291][  T974] usb 5-1: USB disconnect, device number 29
[  256.487240][   T30] audit: type=1400 audit(1751278484.179:1420): avc:  denied  { create } for  pid=8887 comm="syz.5.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  256.658468][ T8893] netlink: 2 bytes leftover after parsing attributes in process `syz.7.610'.
[  256.988840][   T30] audit: type=1400 audit(1751278484.179:1421): avc:  denied  { read } for  pid=8887 comm="syz.5.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  257.060596][   T30] audit: type=1400 audit(1751278484.719:1422): avc:  denied  { write } for  pid=8887 comm="syz.5.613" path="socket:[24257]" dev="sockfs" ino=24257 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  257.657272][  T974] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[  257.696200][ T8904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  257.716284][ T8904] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  257.736882][ T8904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  257.753530][ T8904] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  257.957523][  T974] usb 9-1: Using ep0 maxpacket: 8
[  257.967024][  T974] usb 9-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  257.977665][  T974] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 15
[  257.986825][  T974] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  258.002535][  T974] usb 9-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8
[  258.012042][  T974] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.020183][  T974] usb 9-1: Product: syz
[  258.024405][  T974] usb 9-1: Manufacturer: syz
[  258.029267][  T974] usb 9-1: SerialNumber: syz
[  258.035649][  T974] usb 9-1: config 0 descriptor??
[  258.043427][  T974] powermate 9-1:0.0: probe with driver powermate failed with error -22
[  258.093443][ T5865] vp7045: USB control message 'in' went wrong.
[  258.112212][ T5865] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  258.145494][ T5865] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19)
[  258.165539][ T5865] usb 8-1: USB disconnect, device number 15
[  259.948878][ T8925] tmpfs: Cannot disable swap on remount
[  260.205331][ T5922] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[  260.753990][ T8932] FAULT_INJECTION: forcing a failure.
[  260.753990][ T8932] name failslab, interval 1, probability 0, space 0, times 0
[  260.794840][ T5922] usb 8-1: Using ep0 maxpacket: 32
[  260.882292][ T5922] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  260.894412][ T5922] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  260.896173][ T8932] CPU: 1 UID: 0 PID: 8932 Comm: syz.4.625 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) 
[  260.896197][ T8932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  260.896205][ T8932] Call Trace:
[  260.896211][ T8932]  <TASK>
[  260.896217][ T8932]  dump_stack_lvl+0x16c/0x1f0
[  260.896246][ T8932]  should_fail_ex+0x512/0x640
[  260.896265][ T8932]  ? __kmalloc_noprof+0xbf/0x510
[  260.896287][ T8932]  ? lsm_blob_alloc+0x68/0x90
[  260.896301][ T8932]  should_failslab+0xc2/0x120
[  260.896323][ T8932]  __kmalloc_noprof+0xd2/0x510
[  260.896347][ T8932]  lsm_blob_alloc+0x68/0x90
[  260.896362][ T8932]  security_prepare_creds+0x30/0x270
[  260.896387][ T8932]  prepare_creds+0x56f/0x7d0
[  260.896405][ T8932]  ovl_setup_cred_for_create+0x25/0x300
[  260.896427][ T8932]  ovl_create_or_link+0x64e/0x820
[  260.896448][ T8932]  ? inode_init_owner+0x2d6/0x3e0
[  260.896472][ T8932]  ovl_create_object+0x266/0x300
[  260.896490][ T8932]  ? __pfx_ovl_create_object+0x10/0x10
[  260.896510][ T8932]  ? __pfx_ovl_permission+0x10/0x10
[  260.896523][ T8932]  ? bpf_lsm_inode_permission+0x9/0x10
[  260.896543][ T8932]  ? security_inode_permission+0xbf/0x260
[  260.896567][ T8932]  vfs_symlink+0x403/0x680
[  260.896587][ T8932]  do_symlinkat+0x261/0x310
[  260.896610][ T8932]  ? __pfx_do_symlinkat+0x10/0x10
[  260.896630][ T8932]  ? getname_flags.part.0+0x1c5/0x550
[  260.896651][ T8932]  __x64_sys_symlink+0x75/0x90
[  260.896672][ T8932]  do_syscall_64+0xcd/0x4c0
[  260.896695][ T8932]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  260.896710][ T8932] RIP: 0033:0x7f494b18e929
[  260.896723][ T8932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  260.896738][ T8932] RSP: 002b:00007f494bfea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058
[  260.896753][ T8932] RAX: ffffffffffffffda RBX: 00007f494b3b6080 RCX: 00007f494b18e929
[  260.896763][ T8932] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000200000000040
[  260.896772][ T8932] RBP: 00007f494bfea090 R08: 0000000000000000 R09: 0000000000000000
[  260.896781][ T8932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  260.896789][ T8932] R13: 0000000000000001 R14: 00007f494b3b6080 R15: 00007ffefbf3f8f8
[  260.896810][ T8932]  </TASK>
[  260.956484][   T30] kauditd_printk_skb: 17 callbacks suppressed
[  260.956498][   T30] audit: type=1400 audit(1751278488.659:1440): avc:  denied  { unmount } for  pid=6580 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  260.967487][ T5922] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  261.169496][ T8915] delete_channel: no stack
[  261.203829][   T30] audit: type=1400 audit(1751278488.899:1441): avc:  denied  { read } for  pid=8942 comm="syz.8.630" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  261.235193][  T974] usb 9-1: USB disconnect, device number 18
[  261.343599][   T30] audit: type=1400 audit(1751278488.899:1442): avc:  denied  { open } for  pid=8942 comm="syz.8.630" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  261.924912][   T30] audit: type=1400 audit(1751278488.929:1443): avc:  denied  { firmware_load } for  pid=13 comm="kworker/u8:1" path="/lib/firmware/regulatory.db.p7s" dev="sda1" ino=449 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[  261.963363][ T5922] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  262.018365][ T5922] usb 8-1: config 0 descriptor??
[  262.067518][ T5922] hub 8-1:0.0: USB hub found
[  262.092315][   T30] audit: type=1400 audit(1751278488.929:1444): avc:  denied  { firmware_load } for  pid=6174 comm="kworker/u8:8" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[  262.162723][   T30] audit: type=1400 audit(1751278489.029:1445): avc:  denied  { ioctl } for  pid=8946 comm="syz.4.629" path="socket:[25052]" dev="sockfs" ino=25052 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  262.192032][   T30] audit: type=1400 audit(1751278489.129:1446): avc:  denied  { block_suspend } for  pid=8942 comm="syz.8.630" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  262.221065][   T30] audit: type=1400 audit(1751278489.209:1447): avc:  denied  { create } for  pid=8938 comm="syz.5.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  262.242364][   T30] audit: type=1400 audit(1751278489.209:1448): avc:  denied  { connect } for  pid=8938 comm="syz.5.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  262.270170][ T5922] hub 8-1:0.0: 1 port detected
[  262.278385][   T30] audit: type=1400 audit(1751278489.209:1449): avc:  denied  { write } for  pid=8938 comm="syz.5.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  262.445880][ T8943] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  262.456932][ T8943] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  262.526089][ T8943] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  262.555572][ T8943] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  262.634596][ T8943] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  262.648178][ T8943] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  263.364787][ T8968] bridge0: port 2(bridge_slave_1) entered disabled state
[  263.374311][ T5818] Bluetooth: hci3: command 0x0406 tx timeout
[  263.385902][ T5864] usb 9-1: new full-speed USB device number 19 using dummy_hcd
[  263.389141][ T5923] hub 8-1:0.0: activate --> -90
[  263.544922][ T5864] usb 9-1: device descriptor read/64, error -71
[  263.633863][ T5922] hub 8-1:0.0: hub_ext_port_status failed (err = -71)
[  263.643333][ T5882] usb 8-1: USB disconnect, device number 16
[  263.804923][ T5864] usb 9-1: new full-speed USB device number 20 using dummy_hcd
[  263.904373][ T8979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  263.920035][ T8979] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  263.931248][ T8952] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  263.984901][ T5864] usb 9-1: device descriptor read/64, error -71
[  264.019122][ T8981] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  264.102780][ T5864] usb usb9-port1: attempt power cycle
[  264.334965][ T5923] usb 10-1: new high-speed USB device number 26 using dummy_hcd
[  264.377420][ T8985] netlink: 24 bytes leftover after parsing attributes in process `syz.7.639'.
[  264.494798][ T5923] usb 10-1: Using ep0 maxpacket: 16
[  264.849774][ T5818] Bluetooth: hci2: command 0x0406 tx timeout
[  264.849851][ T5864] usb 9-1: new full-speed USB device number 21 using dummy_hcd
[  264.855877][ T5816] Bluetooth: hci4: command 0x0406 tx timeout
[  264.885102][ T5864] usb 9-1: device descriptor read/8, error -71
[  264.886031][ T5923] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  264.915134][ T5923] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  264.925244][ T5923] usb 10-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00
[  264.934392][ T5923] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  264.947338][ T5923] usb 10-1: config 0 descriptor??
[  265.138432][ T5864] usb 9-1: new full-speed USB device number 22 using dummy_hcd
[  265.354991][ T5882] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[  265.386888][ T5864] usb 9-1: device descriptor read/8, error -71
[  265.445199][ T5816] Bluetooth: hci3: command 0x0406 tx timeout
[  265.462767][ T8998] loop8: detected capacity change from 0 to 1
[  265.472010][ T8998] Dev loop8: unable to read RDB block 1
[  265.479859][ T8998]  loop8: unable to read partition table
[  265.493754][ T8998] loop8: partition table beyond EOD, truncated
[  265.501931][ T5864] usb usb9-port1: unable to enumerate USB device
[  265.510660][ T8998] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  265.549317][ T5882] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[  265.560686][ T5882] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  265.571747][ T5882] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  265.644317][ T5882] usb 8-1: New USB device found, idVendor=1b1c, idProduct=1c0c, bcdDevice= 0.00
[  265.653514][ T5882] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  265.665364][ T5882] usb 8-1: config 0 descriptor??
[  265.666923][ T5923] hid-picolcd 0003:04D8:F002.0006: unknown main item tag 0x0
[  265.857405][ T5923] hid-picolcd 0003:04D8:F002.0006: No report with id 0xf4 found
[  266.023480][ T5923] hid-picolcd 0003:04D8:F002.0006: No report with id 0xf3 found
[  266.045272][ T5923] usb 10-1: USB disconnect, device number 26
[  266.776282][ T5882] corsair-psu 0003:1B1C:1C0C.0007: item fetching failed at offset 0/3
[  266.785269][ T5882] corsair-psu 0003:1B1C:1C0C.0007: probe with driver corsair-psu failed with error -22
[  266.952274][ T5816] Bluetooth: hci4: command 0x0406 tx timeout
[  266.958465][ T5818] Bluetooth: hci2: command 0x0406 tx timeout
[  267.907363][ T9018] 9pnet_fd: Insufficient options for proto=fd
[  267.922112][   T30] kauditd_printk_skb: 7 callbacks suppressed
[  267.922152][   T30] audit: type=1400 audit(1751278495.589:1457): avc:  denied  { read } for  pid=9014 comm="syz.4.646" dev="sockfs" ino=24528 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  268.045176][   T30] audit: type=1400 audit(1751278495.749:1458): avc:  denied  { getopt } for  pid=8988 comm="syz.7.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  268.056774][ T5923] usb 8-1: USB disconnect, device number 17
[  268.165515][ T9020] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  268.192329][    C0] vkms_vblank_simulate: vblank timer overrun
[  268.200403][ T9020] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  268.572261][   T30] audit: type=1400 audit(1751278496.269:1459): avc:  denied  { mount } for  pid=9021 comm="syz.9.649" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  268.606200][ T9027] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32854 sclass=netlink_route_socket pid=9027 comm=syz.5.648
[  269.119563][   T30] audit: type=1400 audit(1751278496.819:1460): avc:  denied  { create } for  pid=9021 comm="syz.9.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  269.145507][ T5948] usb 9-1: new high-speed USB device number 23 using dummy_hcd
[  269.305485][ T5948] usb 9-1: Using ep0 maxpacket: 8
[  269.618533][ T5948] usb 9-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  269.644908][ T5948] usb 9-1: config 0 interface 0 has no altsetting 0
[  269.651603][ T5948] usb 9-1: New USB device found, idVendor=057e, idProduct=201e, bcdDevice= 0.00
[  269.725050][ T5948] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  269.811866][   T30] audit: type=1400 audit(1751278497.509:1461): avc:  denied  { create } for  pid=9042 comm="syz.4.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  269.840050][   T30] audit: type=1400 audit(1751278497.539:1462): avc:  denied  { write } for  pid=9042 comm="syz.4.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  269.873374][ T5948] usb 9-1: config 0 descriptor??
[  269.934334][   T30] audit: type=1400 audit(1751278497.629:1463): avc:  denied  { unmount } for  pid=6322 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  270.582912][ T9050] input: syz1 as /devices/virtual/input/input30
[  270.651238][   T30] audit: type=1400 audit(1751278498.279:1464): avc:  denied  { write } for  pid=9048 comm="syz.4.657" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  270.697739][ T5948] usbhid 9-1:0.0: can't add hid device: -71
[  270.703828][ T5948] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  270.738122][ T5948] usb 9-1: USB disconnect, device number 23
[  270.774948][   T30] audit: type=1400 audit(1751278498.299:1465): avc:  denied  { read } for  pid=5169 comm="acpid" name="event4" dev="devtmpfs" ino=3277 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  271.117910][   T30] audit: type=1400 audit(1751278498.299:1466): avc:  denied  { open } for  pid=5169 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3277 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  272.915206][ T9084] FAULT_INJECTION: forcing a failure.
[  272.915206][ T9084] name failslab, interval 1, probability 0, space 0, times 0
[  272.975059][ T9084] CPU: 1 UID: 0 PID: 9084 Comm: syz.8.666 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) 
[  272.975086][ T9084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  272.975096][ T9084] Call Trace:
[  272.975102][ T9084]  <TASK>
[  272.975109][ T9084]  dump_stack_lvl+0x16c/0x1f0
[  272.975145][ T9084]  should_fail_ex+0x512/0x640
[  272.975167][ T9084]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[  272.975193][ T9084]  should_failslab+0xc2/0x120
[  272.975217][ T9084]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[  272.975239][ T9084]  ? __alloc_skb+0x2b2/0x380
[  272.975264][ T9084]  __alloc_skb+0x2b2/0x380
[  272.975286][ T9084]  ? __pfx___alloc_skb+0x10/0x10
[  272.975310][ T9084]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[  272.975332][ T9084]  netlink_alloc_large_skb+0x69/0x130
[  272.975351][ T9084]  netlink_sendmsg+0x6a1/0xdd0
[  272.975372][ T9084]  ? __pfx_netlink_sendmsg+0x10/0x10
[  272.975399][ T9084]  ____sys_sendmsg+0xa95/0xc70
[  272.975417][ T9084]  ? copy_msghdr_from_user+0x10a/0x160
[  272.975441][ T9084]  ? __pfx_____sys_sendmsg+0x10/0x10
[  272.975469][ T9084]  ___sys_sendmsg+0x134/0x1d0
[  272.975491][ T9084]  ? __pfx____sys_sendmsg+0x10/0x10
[  272.975511][ T9084]  ? __lock_acquire+0x622/0x1c90
[  272.975562][ T9084]  __sys_sendmsg+0x16d/0x220
[  272.975594][ T9084]  ? __pfx___sys_sendmsg+0x10/0x10
[  272.975628][ T9084]  do_syscall_64+0xcd/0x4c0
[  272.975654][ T9084]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  272.975672][ T9084] RIP: 0033:0x7eff84f8e929
[  272.975685][ T9084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  272.975701][ T9084] RSP: 002b:00007eff82df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  272.975717][ T9084] RAX: ffffffffffffffda RBX: 00007eff851b5fa0 RCX: 00007eff84f8e929
[  272.975728][ T9084] RDX: 000000000000c0c4 RSI: 0000200000000000 RDI: 0000000000000005
[  272.975738][ T9084] RBP: 00007eff82df6090 R08: 0000000000000000 R09: 0000000000000000
[  272.975747][ T9084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  272.975757][ T9084] R13: 0000000000000000 R14: 00007eff851b5fa0 R15: 00007ffe7ca8d018
[  272.975781][ T9084]  </TASK>
[  273.210003][   T30] kauditd_printk_skb: 3 callbacks suppressed
[  273.210020][   T30] audit: type=1400 audit(1751278500.909:1470): avc:  denied  { create } for  pid=9085 comm="syz.4.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  273.830757][   T30] audit: type=1400 audit(1751278500.939:1471): avc:  denied  { ioctl } for  pid=9085 comm="syz.4.667" path="socket:[25667]" dev="sockfs" ino=25667 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  273.855457][    C0] vkms_vblank_simulate: vblank timer overrun
[  273.862079][   T30] audit: type=1400 audit(1751278501.089:1472): avc:  denied  { create } for  pid=9086 comm="syz.9.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  274.008204][   T30] audit: type=1400 audit(1751278501.089:1473): avc:  denied  { getopt } for  pid=9086 comm="syz.9.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  274.036471][   T30] audit: type=1400 audit(1751278501.739:1474): avc:  denied  { read } for  pid=9092 comm="syz.7.670" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  274.176589][   T30] audit: type=1400 audit(1751278501.739:1475): avc:  denied  { open } for  pid=9092 comm="syz.7.670" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  274.262611][   T30] audit: type=1400 audit(1751278501.829:1476): avc:  denied  { append } for  pid=9096 comm="syz.8.669" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  274.386221][ T5923] usb 8-1: new high-speed USB device number 18 using dummy_hcd
[  274.471431][   T30] audit: type=1400 audit(1751278501.839:1477): avc:  denied  { ioctl } for  pid=9092 comm="syz.7.670" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  274.585167][ T5923] usb 8-1: Using ep0 maxpacket: 8
[  274.633301][ T5923] usb 8-1: config 11 has an invalid interface number: 5 but max is 0
[  274.701816][ T5923] usb 8-1: config 11 has no interface number 0
[  274.762530][ T5923] usb 8-1: config 11 interface 5 altsetting 64 endpoint 0xA has an invalid bInterval 18, changing to 7
[  274.859303][ T5923] usb 8-1: config 11 interface 5 altsetting 64 endpoint 0xA has invalid maxpacket 1120, setting to 1024
[  274.967852][ T5923] usb 8-1: config 11 interface 5 altsetting 64 has an invalid descriptor for endpoint zero, skipping
[  275.070654][ T5923] usb 8-1: config 11 interface 5 altsetting 64 endpoint 0x4 has an invalid bInterval 196, changing to 11
[  275.163465][ T5923] usb 8-1: config 11 interface 5 altsetting 64 endpoint 0x4 has invalid wMaxPacketSize 0
[  275.210752][ T5923] usb 8-1: config 11 interface 5 altsetting 64 has an invalid descriptor for endpoint zero, skipping
[  275.324598][ T9120] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(10)
[  275.331221][ T9120] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  275.349099][ T5923] usb 8-1: config 11 interface 5 has no altsetting 0
[  275.361741][ T5923] usb 8-1: New USB device found, idVendor=05ac, idProduct=020e, bcdDevice=7d.57
[  275.372258][ T9120] vhci_hcd vhci_hcd.0: Device attached
[  275.390054][ T5923] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.452822][ T5923] usb 8-1: Product: syz
[  275.452834][ T9121] vhci_hcd: connection closed
[  275.452844][ T5923] usb 8-1: Manufacturer: syz
[  275.468428][ T5923] usb 8-1: SerialNumber: syz
[  275.478185][ T8764] vhci_hcd: stop threads
[  275.544902][  T974] vhci_hcd: vhci_device speed not set
[  276.255117][ T8764] vhci_hcd: release socket
[  276.265838][   T30] audit: type=1400 audit(1751278503.259:1478): avc:  denied  { mount } for  pid=9123 comm="syz.4.676" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  276.327374][ T8764] vhci_hcd: disconnect device
[  276.493058][ T5923] appletouch 8-1:11.5: Could not find int-in endpoint
[  276.515863][ T5923] appletouch 8-1:11.5: probe with driver appletouch failed with error -5
[  276.956426][  T974] usb 51-1: new full-speed USB device number 3 using vhci_hcd
[  277.008617][ T5923] usbhid 8-1:11.5: couldn't find an input interrupt endpoint
[  277.016152][  T974] usb 51-1: enqueue for inactive port 0
[  277.025991][ T5923] usb 8-1: USB disconnect, device number 18
[  277.104903][  T974] vhci_hcd: vhci_device speed not set
[  277.414991][ T5948] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  278.345107][ T5948] usb 5-1: Using ep0 maxpacket: 8
[  278.423440][ T5948] usb 5-1: config 0 has an invalid interface number: 151 but max is 1
[  278.452703][ T5948] usb 5-1: config 0 has no interface number 1
[  278.473524][ T5948] usb 5-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  278.671034][   T30] audit: type=1400 audit(1751278506.359:1479): avc:  denied  { mount } for  pid=9149 comm="syz.5.684" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  278.896062][   T30] audit: type=1400 audit(1751278506.359:1480): avc:  denied  { watch } for  pid=9149 comm="syz.5.684" path="/142/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  278.953019][ T5948] usb 5-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83
[  278.964895][ T5948] usb 5-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024
[  278.976618][ T5948] usb 5-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[  278.984544][ T9155] loop8: detected capacity change from 0 to 1
[  278.986942][ T5948] usb 5-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  278.986992][ T5948] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89
[  279.035668][ T9155] Dev loop8: unable to read RDB block 1
[  279.168166][ T9155]  loop8: unable to read partition table
[  279.176827][ T5948] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  279.188740][ T5948] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  279.203662][ T5948] usb 5-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7
[  279.215161][ T9155] loop8: partition table beyond EOD, truncated
[  279.221377][ T9155] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  279.233438][ T5948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  279.254792][ T5948] usb 5-1: Product: syz
[  279.259071][ T5948] usb 5-1: Manufacturer: syz
[  279.265052][   T30] audit: type=1400 audit(1751278506.949:1481): avc:  denied  { unmount } for  pid=6129 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  279.314582][ T5948] usb 5-1: SerialNumber: syz
[  279.330605][ T5948] usb 5-1: config 0 descriptor??
[  279.651885][ T9134] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  279.673123][ T5948] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  279.691899][ T5948] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  279.730618][ T5948] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -12
[  279.890996][ T5948] usb 5-1: USB disconnect, device number 30
[  280.558924][ T9172] vlan1: entered promiscuous mode
[  280.574715][ T9172] vlan1: entered allmulticast mode
[  280.662400][ T9172] veth0_vlan: entered allmulticast mode
[  280.683196][   T30] audit: type=1400 audit(1751278508.379:1482): avc:  denied  { read } for  pid=9175 comm="syz.4.691" path="socket:[25568]" dev="sockfs" ino=25568 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  281.183606][ T9174] bridge0: port 1(bridge_slave_0) entered disabled state
[  281.192573][ T9174] bridge0: port 2(bridge_slave_1) entered disabled state
[  281.216928][   T30] audit: type=1400 audit(1751278508.909:1483): avc:  denied  { sqpoll } for  pid=9175 comm="syz.4.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  281.305323][ T5948] usb 9-1: new full-speed USB device number 24 using dummy_hcd
[  281.328538][   T30] audit: type=1400 audit(1751278509.029:1484): avc:  denied  { setopt } for  pid=9180 comm="syz.7.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  281.489935][   T30] audit: type=1400 audit(1751278509.189:1485): avc:  denied  { ioctl } for  pid=9184 comm="syz.7.694" path="socket:[26626]" dev="sockfs" ino=26626 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  281.503096][ T9185] netlink: 20 bytes leftover after parsing attributes in process `syz.7.694'.
[  281.518414][ T5948] usb 9-1: device descriptor read/64, error -71
[  281.650492][ T9185] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  281.768702][ T9185] batman_adv: batadv0: Removing interface: batadv_slave_0
[  281.804836][ T5948] usb 9-1: new full-speed USB device number 25 using dummy_hcd
[  282.010811][ T9185] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  282.050698][ T5882] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  282.088048][ T9185] batman_adv: batadv0: Removing interface: batadv_slave_1
[  282.309071][ T5882] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  282.396747][ T5882] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  282.467304][ T5882] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  282.480624][ T9185] bond0: (slave batadv0): Releasing backup interface
[  282.524854][ T5948] usb 9-1: device descriptor read/64, error -71
[  282.531376][ T5882] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  282.573412][ T5882] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  282.589042][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  282.636037][ T5948] usb usb9-port1: attempt power cycle
[  282.659628][ T5882] usb 5-1: Product: syz
[  282.668654][ T5882] usb 5-1: Manufacturer: syz
[  282.692059][ T5882] cdc_wdm 5-1:1.0: skipping garbage
[  282.757093][ T5882] cdc_wdm 5-1:1.0: skipping garbage
[  282.915418][ T5882] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  282.927941][ T5882] cdc_wdm 5-1:1.0: Unknown control protocol
[  283.075258][ T5948] usb 9-1: new full-speed USB device number 26 using dummy_hcd
[  283.134075][ T5948] usb 9-1: device descriptor read/8, error -71
[  283.154498][ T9210] could not allocate digest TFM handle tgr128-generic
[  283.164346][ T9217] netlink: 8 bytes leftover after parsing attributes in process `syz.7.705'.
[  283.193001][ T9217] netlink: 4 bytes leftover after parsing attributes in process `syz.7.705'.
[  283.303373][   T30] audit: type=1400 audit(1751278510.989:1486): avc:  denied  { bind } for  pid=9223 comm="syz.7.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  283.337648][   T30] audit: type=1400 audit(1751278510.989:1487): avc:  denied  { setopt } for  pid=9223 comm="syz.7.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  283.384899][ T5948] usb 9-1: new full-speed USB device number 27 using dummy_hcd
[  283.426453][ T5948] usb 9-1: device descriptor read/8, error -71
[  283.535245][ T5948] usb usb9-port1: unable to enumerate USB device
[  285.912717][ T9250] netlink: 'syz.5.714': attribute type 2 has an invalid length.
[  285.922826][ T9250] netlink: 5356 bytes leftover after parsing attributes in process `syz.5.714'.
[  285.981144][ T5882] usb 5-1: USB disconnect, device number 31
[  285.995187][ T9250] GUP no longer grows the stack in syz.5.714 (9250): 200000003000-20000000a000 (200000002000)
[  286.005817][ T9250] CPU: 1 UID: 0 PID: 9250 Comm: syz.5.714 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) 
[  286.005835][ T9250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  286.005842][ T9250] Call Trace:
[  286.005847][ T9250]  <TASK>
[  286.005852][ T9250]  dump_stack_lvl+0x16c/0x1f0
[  286.005875][ T9250]  gup_vma_lookup+0x1d2/0x220
[  286.005895][ T9250]  __get_user_pages+0x271/0x3b80
[  286.005913][ T9250]  ? __lock_acquire+0xb8a/0x1c90
[  286.005933][ T9250]  ? __pfx___get_user_pages+0x10/0x10
[  286.005945][ T9250]  ? find_held_lock+0x2b/0x80
[  286.005962][ T9250]  __gup_longterm_locked+0x20d/0x1840
[  286.005974][ T9250]  ? __lock_acquire+0xb8a/0x1c90
[  286.005997][ T9250]  ? __pfx___gup_longterm_locked+0x10/0x10
[  286.006015][ T9250]  pin_user_pages_remote+0xed/0x140
[  286.006026][ T9250]  ? __pfx_pin_user_pages_remote+0x10/0x10
[  286.006039][ T9250]  ? copy_page_from_iter+0x141/0x180
[  286.006057][ T9250]  process_vm_rw_core.constprop.0+0x41b/0x9a0
[  286.006079][ T9250]  ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10
[  286.006095][ T9250]  ? iovec_from_user+0xbb/0x140
[  286.006116][ T9250]  ? iovec_from_user+0xbb/0x140
[  286.006132][ T9250]  process_vm_rw+0x2ff/0x360
[  286.006147][ T9250]  ? __pfx_process_vm_rw+0x10/0x10
[  286.006179][ T9250]  ? xfd_validate_state+0x61/0x180
[  286.006196][ T9250]  __x64_sys_process_vm_writev+0xe2/0x1c0
[  286.006211][ T9250]  ? do_syscall_64+0x91/0x4c0
[  286.006227][ T9250]  ? lockdep_hardirqs_on+0x7c/0x110
[  286.006242][ T9250]  do_syscall_64+0xcd/0x4c0
[  286.006258][ T9250]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  286.006268][ T9250] RIP: 0033:0x7f9fccd8e929
[  286.006278][ T9250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  286.006289][ T9250] RSP: 002b:00007f9fcdbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000137
[  286.006300][ T9250] RAX: ffffffffffffffda RBX: 00007f9fccfb5fa0 RCX: 00007f9fccd8e929
[  286.006307][ T9250] RDX: 0000000000000002 RSI: 0000200000001a00 RDI: 00000000000001f9
[  286.006313][ T9250] RBP: 00007f9fcce10b39 R08: 0000000000000002 R09: 0000000000000000
[  286.006319][ T9250] R10: 0000200000001dc0 R11: 0000000000000246 R12: 0000000000000000
[  286.006325][ T9250] R13: 0000000000000000 R14: 00007f9fccfb5fa0 R15: 00007ffe12b32038
[  286.006339][ T9250]  </TASK>
[  286.811058][ T9262] FAULT_INJECTION: forcing a failure.
[  286.811058][ T9262] name failslab, interval 1, probability 0, space 0, times 0
[  286.824265][ T9262] CPU: 0 UID: 0 PID: 9262 Comm: syz.9.716 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) 
[  286.824290][ T9262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  286.824301][ T9262] Call Trace:
[  286.824307][ T9262]  <TASK>
[  286.824314][ T9262]  dump_stack_lvl+0x16c/0x1f0
[  286.824346][ T9262]  should_fail_ex+0x512/0x640
[  286.824369][ T9262]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[  286.824396][ T9262]  should_failslab+0xc2/0x120
[  286.824422][ T9262]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[  286.824444][ T9262]  ? __alloc_skb+0x2b2/0x380
[  286.824472][ T9262]  __alloc_skb+0x2b2/0x380
[  286.824494][ T9262]  ? __pfx___alloc_skb+0x10/0x10
[  286.824519][ T9262]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[  286.824542][ T9262]  netlink_alloc_large_skb+0x69/0x130
[  286.824561][ T9262]  netlink_sendmsg+0x6a1/0xdd0
[  286.824582][ T9262]  ? __pfx_netlink_sendmsg+0x10/0x10
[  286.824609][ T9262]  ____sys_sendmsg+0xa95/0xc70
[  286.824628][ T9262]  ? copy_msghdr_from_user+0x10a/0x160
[  286.824652][ T9262]  ? __pfx_____sys_sendmsg+0x10/0x10
[  286.824682][ T9262]  ___sys_sendmsg+0x134/0x1d0
[  286.824707][ T9262]  ? __pfx____sys_sendmsg+0x10/0x10
[  286.824730][ T9262]  ? __lock_acquire+0x622/0x1c90
[  286.824781][ T9262]  __sys_sendmsg+0x16d/0x220
[  286.824802][ T9262]  ? __pfx___sys_sendmsg+0x10/0x10
[  286.824841][ T9262]  do_syscall_64+0xcd/0x4c0
[  286.824868][ T9262]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  286.824886][ T9262] RIP: 0033:0x7f264fb8e929
[  286.824907][ T9262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  286.824924][ T9262] RSP: 002b:00007f26509a5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  286.824941][ T9262] RAX: ffffffffffffffda RBX: 00007f264fdb6080 RCX: 00007f264fb8e929
[  286.824951][ T9262] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000007
[  286.824962][ T9262] RBP: 00007f26509a5090 R08: 0000000000000000 R09: 0000000000000000
[  286.824972][ T9262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  286.824982][ T9262] R13: 0000000000000000 R14: 00007f264fdb6080 R15: 00007ffd0ca2fd68
[  286.825004][ T9262]  </TASK>
[  287.441339][ T9268] dummy0 speed is unknown, defaulting to 1000
[  287.448815][   T30] audit: type=1400 audit(1751278515.139:1488): avc:  denied  { write } for  pid=9267 comm="syz.4.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  287.495935][ T9268] dummy0 speed is unknown, defaulting to 1000
[  287.559988][ T9268] dummy0 speed is unknown, defaulting to 1000
[  287.572682][ T9268] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  287.647488][ T9268] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  287.676639][   T30] audit: type=1400 audit(1751278515.379:1489): avc:  denied  { bind } for  pid=9266 comm="syz.5.719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  287.824985][ T9268] dummy0 speed is unknown, defaulting to 1000
[  287.844977][   T30] audit: type=1400 audit(1751278515.399:1490): avc:  denied  { write } for  pid=9266 comm="syz.5.719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  287.909132][ T9268] dummy0 speed is unknown, defaulting to 1000
[  287.954057][ T9268] dummy0 speed is unknown, defaulting to 1000
[  287.983757][ T9268] dummy0 speed is unknown, defaulting to 1000
[  288.017331][ T9268] dummy0 speed is unknown, defaulting to 1000
[  288.069470][ T9268] dummy0 speed is unknown, defaulting to 1000
[  288.372356][   T30] audit: type=1400 audit(1751278516.069:1491): avc:  denied  { connect } for  pid=9280 comm="syz.5.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  288.446366][ T9283] netlink: 16 bytes leftover after parsing attributes in process `syz.5.721'.
[  288.457065][ T9283] use of bytesused == 0 is deprecated and will be removed in the future,
[  288.466229][ T9283] use the actual size instead.
[  289.512506][ T9279] netlink: 16 bytes leftover after parsing attributes in process `syz.8.722'.
[  289.602255][   T30] audit: type=1400 audit(1751278517.299:1492): avc:  denied  { create } for  pid=9290 comm="syz.5.725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  289.625025][ T9291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  289.633676][ T9291] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  289.718031][ T9296] loop8: detected capacity change from 0 to 1
[  289.726141][ T9296] Dev loop8: unable to read RDB block 1
[  289.732285][ T9296]  loop8: unable to read partition table
[  289.743036][ T9296] loop8: partition table beyond EOD, truncated
[  289.749461][ T9296] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  289.758989][   T30] audit: type=1400 audit(1751278517.449:1493): avc:  denied  { ioctl } for  pid=9290 comm="syz.5.725" path="socket:[27034]" dev="sockfs" ino=27034 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  289.795396][ T5882] usb 8-1: new low-speed USB device number 19 using dummy_hcd
[  289.804827][  T974] usb 9-1: new high-speed USB device number 28 using dummy_hcd
[  289.835280][   T30] audit: type=1400 audit(1751278517.519:1494): avc:  denied  { connect } for  pid=9295 comm="syz.9.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  289.984955][ T5882] usb 8-1: Invalid ep0 maxpacket: 64
[  290.008773][  T974] usb 9-1: Using ep0 maxpacket: 8
[  290.133109][ T5882] usb 8-1: new low-speed USB device number 20 using dummy_hcd
[  290.152331][  T974] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[  290.173588][  T974] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  290.336701][  T974] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  290.520717][  T974] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  290.532513][  T974] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  290.547020][  T974] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  290.556677][  T974] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  290.625030][ T5882] usb 8-1: Invalid ep0 maxpacket: 64
[  290.650122][ T5882] usb usb8-port1: attempt power cycle
[  290.801295][  T974] usb 9-1: usb_control_msg returned -32
[  290.807024][  T974] usbtmc 9-1:16.0: can't read capabilities
[  291.041012][   T30] audit: type=1400 audit(1751278518.739:1495): avc:  denied  { read } for  pid=9314 comm="syz.9.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  291.060601][ T5882] usb 8-1: new low-speed USB device number 21 using dummy_hcd
[  291.205292][ T9316] netlink: 'syz.4.731': attribute type 10 has an invalid length.
[  291.214874][   T30] audit: type=1400 audit(1751278518.829:1496): avc:  denied  { create } for  pid=9311 comm="syz.4.731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  291.278505][ T5882] usb 8-1: Invalid ep0 maxpacket: 64
[  291.398623][   T30] audit: type=1400 audit(1751278518.849:1497): avc:  denied  { ioctl } for  pid=9311 comm="syz.4.731" path="socket:[27213]" dev="sockfs" ino=27213 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  291.476324][ T5882] usb 8-1: new low-speed USB device number 22 using dummy_hcd
[  291.507752][ T5882] usb 8-1: Invalid ep0 maxpacket: 64
[  291.516790][ T5882] usb usb8-port1: unable to enumerate USB device
[  293.050638][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  293.050655][   T30] audit: type=1400 audit(1751278520.419:1499): avc:  denied  { watch watch_reads } for  pid=9321 comm="syz.5.734" path="/156" dev="tmpfs" ino=837 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  293.091595][ T5872] usb 9-1: USB disconnect, device number 28
[  293.398317][ T9333] loop8: detected capacity change from 0 to 1
[  293.407383][ T9333] Dev loop8: unable to read RDB block 1
[  293.413224][ T9333]  loop8: unable to read partition table
[  293.420968][ T9333] loop8: partition table beyond EOD, truncated
[  293.428420][ T9333] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  293.569384][   T30] audit: type=1400 audit(1751278521.269:1500): avc:  denied  { read write } for  pid=9340 comm="syz.9.740" name="mouse0" dev="devtmpfs" ino=965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  293.605279][   T30] audit: type=1400 audit(1751278521.269:1501): avc:  denied  { open } for  pid=9340 comm="syz.9.740" path="/dev/input/mouse0" dev="devtmpfs" ino=965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  293.679528][   T30] audit: type=1400 audit(1751278521.299:1502): avc:  denied  { mount } for  pid=9340 comm="syz.9.740" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  294.912568][   T30] audit: type=1400 audit(1751278522.609:1503): avc:  denied  { unmount } for  pid=6322 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  295.190203][ T5948] usb 9-1: new high-speed USB device number 29 using dummy_hcd
[  295.396635][ T5948] usb 9-1: Using ep0 maxpacket: 32
[  295.410492][ T5948] usb 9-1: config 0 has an invalid interface number: 184 but max is 0
[  295.421985][ T5948] usb 9-1: config 0 has no interface number 0
[  295.457515][ T5948] usb 9-1: config 0 interface 184 has no altsetting 0
[  295.848141][ T9354] could not allocate digest TFM handle crct10dif-pclmul
[  295.863475][ T5948] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  295.867221][   T30] audit: type=1400 audit(1751278523.559:1504): avc:  denied  { nlmsg_write } for  pid=9365 comm="syz.7.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  295.873421][ T5948] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  295.902355][ T5882] usb 10-1: new high-speed USB device number 27 using dummy_hcd
[  295.903835][ T5948] usb 9-1: Product: syz
[  295.929157][   T30] audit: type=1400 audit(1751278523.559:1505): avc:  denied  { write } for  pid=9365 comm="syz.7.747" laddr=172.20.20.170 lport=255 faddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  295.956929][ T5948] usb 9-1: Manufacturer: syz
[  295.969087][ T5948] usb 9-1: SerialNumber: syz
[  296.067071][ T5948] usb 9-1: config 0 descriptor??
[  296.074091][ T5948] smsc75xx v1.0.0
[  296.106441][ T5882] usb 10-1: unable to get BOS descriptor or descriptor too short
[  296.118679][ T5882] usb 10-1: config 1 has an invalid interface number: 83 but max is 0
[  296.127202][ T5882] usb 10-1: config 1 has no interface number 0
[  296.133597][ T5882] usb 10-1: config 1 interface 83 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  296.144801][ T5882] usb 10-1: config 1 interface 83 has no altsetting 0
[  296.154137][ T5882] usb 10-1: string descriptor 0 read error: -22
[  296.161223][ T5882] usb 10-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=a2.c5
[  296.171154][ T5882] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  296.191473][ T9372] netlink: 'syz.7.749': attribute type 9 has an invalid length.
[  296.197544][ T5882] usb 10-1: probing VID:PID(2201:012C)   
[  296.199904][ T9372] netlink: 'syz.7.749': attribute type 7 has an invalid length.
[  296.207610][ T5882] usb 10-1: vub300 testing UNKNOWN EndPoint(0) 08
[  296.213050][ T9372] netlink: 'syz.7.749': attribute type 8 has an invalid length.
[  296.219682][ T5882] usb 10-1: vub300 ignoring EndPoint(0) 08
[  296.236615][ T5882] usb 10-1: Could not find two sets of bulk-in/out endpoint pairs
[  296.275586][   T30] audit: type=1400 audit(1751278523.949:1506): avc:  denied  { write } for  pid=9370 comm="syz.7.749" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  296.491501][ T5882] vub300 10-1:1.83: probe with driver vub300 failed with error -22
[  297.126436][ T9381] loop8: detected capacity change from 0 to 1
[  297.140799][ T9381] Dev loop8: unable to read RDB block 1
[  297.146533][ T9381]  loop8: unable to read partition table
[  297.152263][ T9381] loop8: partition table beyond EOD, truncated
[  297.161620][ T5948] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  297.172833][ T5948] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  297.182265][ T9381] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  297.342111][ T9386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  297.369643][ T9386] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  297.406971][ T9386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  297.435337][ T9386] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  297.593754][ T5948] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  297.605335][ T5948] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32
[  297.618510][ T5948] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  297.630511][ T5948] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32
[  297.641503][ T5948] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -32
[  298.629618][  T880] usb 10-1: USB disconnect, device number 27
[  298.776954][ T9396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  298.783155][ T5825] usb 9-1: USB disconnect, device number 29
[  298.809907][ T9396] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  298.871655][ T9396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  298.880740][ T9396] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  299.128229][   T30] audit: type=1400 audit(1751278526.739:1507): avc:  denied  { write } for  pid=9397 comm="syz.9.758" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  300.700758][ T9411] Bluetooth: hci0: invalid length 0, exp 2 for type 0
[  300.794793][   T30] audit: type=1400 audit(1751278528.479:1508): avc:  denied  { name_bind } for  pid=9412 comm="syz.5.763" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1
[  300.899766][   T30] audit: type=1400 audit(1751278528.479:1509): avc:  denied  { name_connect } for  pid=9412 comm="syz.5.763" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1
[  301.091518][ T9419] loop8: detected capacity change from 0 to 1
[  301.123300][ T9419] Dev loop8: unable to read RDB block 1
[  301.143457][ T9419]  loop8: unable to read partition table
[  301.175012][ T9419] loop8: partition table beyond EOD, truncated
[  301.186290][ T9419] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  302.935071][  T880] usb 9-1: new high-speed USB device number 30 using dummy_hcd
[  303.174935][  T880] usb 9-1: Using ep0 maxpacket: 32
[  303.197479][  T880] usb 9-1: config 0 has an invalid interface number: 184 but max is 0
[  303.230976][  T880] usb 9-1: config 0 has no interface number 0
[  303.257429][  T880] usb 9-1: config 0 interface 184 has no altsetting 0
[  303.280510][  T880] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  303.301657][  T880] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  303.314215][  T880] usb 9-1: Product: syz
[  303.334658][  T880] usb 9-1: Manufacturer: syz
[  303.427665][  T880] usb 9-1: SerialNumber: syz
[  303.661458][ T5825] usb 5-1: new low-speed USB device number 32 using dummy_hcd
[  303.712631][  T880] usb 9-1: config 0 descriptor??
[  303.724271][  T880] smsc75xx v1.0.0
[  303.821122][ T5825] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[  303.833028][ T5825] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  303.843409][ T5825] usb 5-1: config 0 has no interface number 0
[  303.849690][ T5825] usb 5-1: config 0 interface 55 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  303.862708][ T5825] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  303.871788][ T5825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  303.885633][ T5825] usb 5-1: config 0 descriptor??
[  303.906213][ T5825] ldusb 5-1:0.55: Interrupt in endpoint not found
[  304.084403][ T9436] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  304.153695][   T30] audit: type=1400 audit(1751278531.849:1510): avc:  denied  { map } for  pid=9433 comm="syz.4.770" path="socket:[27557]" dev="sockfs" ino=27557 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  304.340388][  T880] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  304.359139][  T880] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  304.831508][  T880] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32
[  304.842412][  T880] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32
[  304.852065][  T880] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32
[  304.861738][  T880] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -32
[  306.084162][ T5825] usb 9-1: USB disconnect, device number 30
[  306.244611][  T880] usb 5-1: USB disconnect, device number 32
[  306.389892][ T9466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  306.447373][ T9466] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  306.813036][ T5882] usb 10-1: new low-speed USB device number 28 using dummy_hcd
[  306.908211][   T12] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x86
[  306.990716][ T9465] !
: renamed from dummy0 (while UP)
[  306.999360][ T5882] usb 10-1: config 0 has an invalid interface number: 55 but max is 0
[  307.009903][ T5882] usb 10-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  307.033923][ T5882] usb 10-1: config 0 has no interface number 0
[  307.043149][ T5882] usb 10-1: config 0 interface 55 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  307.063074][ T5882] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  307.158907][ T5882] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  307.172115][ T5882] usb 10-1: config 0 descriptor??
[  307.184866][ T5882] ldusb 10-1:0.55: Interrupt in endpoint not found
[  307.914908][ T5882] usb 9-1: new high-speed USB device number 31 using dummy_hcd
[  308.078522][ T5882] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  308.089065][ T5882] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  308.101360][ T5882] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[  308.111264][ T5882] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  308.124440][ T5882] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  308.141231][ T5882] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  308.152926][ T5882] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  308.165979][ T5882] usb 9-1: Product: syz
[  308.170380][ T5882] usb 9-1: Manufacturer: syz
[  308.180668][ T5882] cdc_wdm 9-1:1.0: skipping garbage
[  308.187314][ T5882] cdc_wdm 9-1:1.0: skipping garbage
[  308.194073][ T5882] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device
[  308.202976][ T5882] cdc_wdm 9-1:1.0: Unknown control protocol
[  308.934063][    C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[  308.940725][    C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[  308.947452][    C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[  308.954073][    C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[  308.960415][    C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[  308.965984][ T5923] usb 9-1: USB disconnect, device number 31
[  308.967017][    C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[  308.967037][    C1] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  309.202739][ T5923] usb 10-1: USB disconnect, device number 28
[  309.370497][ T9466] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  309.532758][ T9488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  309.544033][ T9488] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  310.475046][ T5882] usb 9-1: new high-speed USB device number 32 using dummy_hcd
[  310.809191][ T9502] kvm: pic: level sensitive irq not supported
[  310.812098][ T9502] kvm: pic: level sensitive irq not supported
[  310.822221][ T9502] kvm: pic: single mode not supported
[  310.834620][ T9502] kvm: pic: non byte read
[  310.845457][ T9502] kvm: pic: single mode not supported
[  310.845468][ T9502] kvm: pic: level sensitive irq not supported
[  310.874849][ T5882] usb 9-1: Using ep0 maxpacket: 8
[  310.925200][ T5882] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  310.934639][ T5882] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  310.987331][ T5882] pvrusb2: Hardware description: Terratec Grabster AV400
[  310.994427][ T5882] pvrusb2: **********
[  311.021324][ T5882] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  311.051708][ T5882] pvrusb2: Important functionality might not be entirely working.
[  311.071955][ T5882] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  311.111964][ T5882] pvrusb2: **********
[  311.179501][ T2335] pvrusb2: Invalid write control endpoint
[  311.360728][ T9519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  311.410821][  T880] usb 10-1: new high-speed USB device number 29 using dummy_hcd
[  311.457759][ T2335] pvrusb2: Invalid write control endpoint
[  311.467517][ T9519] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  311.476700][   T30] audit: type=1400 audit(1751278539.179:1511): avc:  denied  { append } for  pid=9495 comm="syz.8.786" name="i2c-1" dev="devtmpfs" ino=3301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  311.484326][ T2335] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  312.133492][ T2335] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  312.141372][ T2335] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  312.151434][ T2335] pvrusb2: Device being rendered inoperable
[  312.159863][ T9523] pvrusb2: Attempted to execute control transfer when device not ok
[  312.252742][ T2335] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  312.268103][ T2335] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  312.304250][   T30] audit: type=1400 audit(1751278539.999:1512): avc:  denied  { connect } for  pid=9524 comm="syz.4.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  312.306805][ T2335] pvrusb2: Attached sub-driver cx25840
[  312.332212][ T9525] netlink: 132 bytes leftover after parsing attributes in process `syz.4.793'.
[  312.343181][ T2335] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  312.356110][  T880] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  312.377574][  T880] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  312.388288][  T880] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  312.399559][ T2335] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  312.417370][  T880] usb 10-1: config 0 descriptor??
[  312.811849][   T30] audit: type=1400 audit(1751278540.509:1513): avc:  denied  { create } for  pid=9531 comm="syz.4.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  312.847946][  T880] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor
[  312.878639][  T880] input: HID 0926:3333 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0926:3333.0008/input/input33
[  312.886373][   T30] audit: type=1400 audit(1751278540.519:1514): avc:  denied  { ioctl } for  pid=9531 comm="syz.4.796" path="socket:[27824]" dev="sockfs" ino=27824 ioctlcmd=0x89e5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  313.055810][ T5818] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  313.064900][ T5864] usb 5-1: new full-speed USB device number 33 using dummy_hcd
[  313.089918][ T5818] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  313.104109][  T880] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.9-1/input0
[  313.107397][ T5818] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  313.133940][ T5818] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  313.166355][ T5818] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  313.205558][   T30] audit: type=1400 audit(1751278540.909:1515): avc:  denied  { mounton } for  pid=9535 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  313.257144][ T9535] !
 speed is unknown, defaulting to 1000
[  313.324898][  T880] usb 9-1: USB disconnect, device number 32
[  313.347589][ T5864] usb 5-1: config 5 has an invalid interface number: 123 but max is 0
[  313.358953][ T5864] usb 5-1: config 5 has no interface number 0
[  313.376874][ T5864] usb 5-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B
[  313.442258][ T5864] usb 5-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid maxpacket 11110, setting to 64
[  313.446532][   T13] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.525648][ T5864] usb 5-1: config 5 interface 123 has no altsetting 0
[  313.559564][   T13] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.561469][ T5864] usb 5-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[  313.571434][ T9507] input: syz1 as /devices/virtual/input/input32
[  313.590440][   T30] audit: type=1400 audit(1751278541.289:1516): avc:  denied  { read } for  pid=9537 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  313.623188][ T5923] usb 10-1: USB disconnect, device number 29
[  313.629097][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  313.645991][ T5864] usb 5-1: Product: syz
[  313.651300][ T5864] usb 5-1: Manufacturer: syz
[  313.661591][ T5864] usb 5-1: SerialNumber: syz
[  313.677070][ T9534] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22
[  313.710030][   T13] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.784848][  T880] usb 9-1: new high-speed USB device number 33 using dummy_hcd
[  313.824323][   T13] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.933209][ T5864] comedi comedi0: driver 'ni6501' has successfully auto-configured 'ni6501'.
[  313.946464][ T9535] chnl_net:caif_netlink_parms(): no params data found
[  313.949543][ T5864] usb 5-1: USB disconnect, device number 33
[  313.986264][  T880] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  314.001124][  T880] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  314.031703][  T880] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[  314.051299][  T880] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  314.065018][  T880] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  314.081895][  T880] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  314.101574][  T880] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  314.132418][  T880] usb 9-1: Product: syz
[  314.154838][  T880] usb 9-1: Manufacturer: syz
[  314.187307][  T880] cdc_wdm 9-1:1.0: skipping garbage
[  314.192579][  T880] cdc_wdm 9-1:1.0: skipping garbage
[  314.210862][  T880] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device
[  314.224905][  T880] cdc_wdm 9-1:1.0: Unknown control protocol
[  314.228956][ T9535] bridge0: port 1(bridge_slave_0) entered blocking state
[  314.249405][ T9535] bridge0: port 1(bridge_slave_0) entered disabled state
[  314.259768][ T9535] bridge_slave_0: entered allmulticast mode
[  314.267175][ T9535] bridge_slave_0: entered promiscuous mode
[  314.286817][ T9535] bridge0: port 2(bridge_slave_1) entered blocking state
[  314.299795][ T9535] bridge0: port 2(bridge_slave_1) entered disabled state
[  314.314999][ T9535] bridge_slave_1: entered allmulticast mode
[  314.322345][ T9535] bridge_slave_1: entered promiscuous mode
[  314.406763][ T9535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  314.439422][ T9535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  314.531634][   T30] audit: type=1400 audit(1751278542.229:1517): avc:  denied  { append } for  pid=9548 comm="syz.9.799" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  314.763025][   T30] audit: type=1400 audit(1751278542.259:1518): avc:  denied  { execstack } for  pid=9548 comm="syz.9.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  314.916827][ T9535] team0: Port device team_slave_0 added
[  314.927740][ T9535] team0: Port device team_slave_1 added
[  315.008721][ T5865] usb 9-1: USB disconnect, device number 33
[  315.074851][   T30] audit: type=1400 audit(1751278542.669:1519): avc:  denied  { write } for  pid=9558 comm="syz.9.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  315.126642][ T9562] input: syz0 as /devices/virtual/input/input34
[  315.273052][   T13] bridge_slave_1: left allmulticast mode
[  315.291849][   T13] bridge_slave_1: left promiscuous mode
[  315.294089][ T5818] Bluetooth: hci0: command tx timeout
[  315.321570][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
Stopping sshd: [  315.351597][   T13] bridge_slave_0: left allmulticast mode
[  315.357474][   T13] bridge_slave_0: left promiscuous mode
[  315.783488][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
stopped /usr/sbin/sshd (pid 5582)
OK
Stopping crond: stopped /usr/sbin/crond (pid 5553)
OK
[  316.086692][ T5865] usb 5-1: new high-speed USB device number 34 using dummy_hcd
Stopping dhcpcd...
[  316.178401][ T9573] Bluetooth: hci0: Opcode 0x0c03 failed: -4
no /sbin/dhcpcd found; none killed
[  316.260511][ T5865] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  316.284677][ T5865] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  316.304034][ T5865] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  316.315381][ T5865] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  316.326558][   T30] audit: type=1400 audit(1751278544.019:1520): avc:  denied  { ioctl } for  pid=9584 comm="syz.9.807" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  316.385103][ T5865] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  316.394195][ T5865] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  316.416030][ T5865] usb 5-1: Product: syz
[  316.420447][ T5865] usb 5-1: Manufacturer: syz
Stopping network: [  316.440060][ T5865] cdc_wdm 5-1:1.0: skipping garbage
[  316.447374][ T5865] cdc_wdm 5-1:1.0: skipping garbage
[  316.453924][ T5865] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  316.460360][ T5865] cdc_wdm 5-1:1.0: Unknown control protocol
[  316.493053][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  316.514557][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  316.545703][   T13] bond0 (unregistering): Released all slaves
[  316.568252][ T9535] batman_adv: batadv0: Adding interface: batadv_slave_0
[  316.586973][ T9535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  316.651106][ T9535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  316.901556][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  316.908576][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  317.073830][    C1] cdc_wdm 5-1:1.0: unknown notification 78 received: index 38784 len 26308
[  317.131012][ T9535] batman_adv: batadv0: Adding interface: batadv_slave_1
[  317.153874][ T9535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  317.187638][ T9535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  317.290964][   T30] audit: type=1400 audit(1751278544.989:1521): avc:  denied  { read write } for  pid=9598 comm="ip" path="/dev/console" dev="rootfs" ino=40 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1
[  317.700972][ T9605] netlink: 24 bytes leftover after parsing attributes in process `syz.5.811'.
[  317.828421][ T9535] hsr_slave_0: entered promiscuous mode
[  317.836127][ T9535] hsr_slave_1: entered promiscuous mode
[  317.843378][ T9535] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  317.852438][ T9535] Cannot create hsr debugfs directory
[  317.899610][ T5865] usb 5-1: USB disconnect, device number 34
[  317.944142][   T13] hsr_slave_0: left promiscuous mode
[  317.964801][   T13] hsr_slave_1: left promiscuous mode
[  317.989034][   T13] veth1_macvtap: left promiscuous mode
[  317.995436][   T13] veth0_macvtap: left promiscuous mode
[  318.001437][   T13] veth1_vlan: left promiscuous mode
[  318.012868][   T13] veth0_vlan: left promiscuous mode
[  318.440526][   T30] audit: type=1400 audit(1751278546.139:1522): avc:  denied  { write } for  pid=9616 comm="syz.9.814" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  318.794850][ T5865] usb 10-1: new high-speed USB device number 30 using dummy_hcd
[  318.936000][   T13] team0 (unregistering): Port device team_slave_1 removed
[  319.031305][   T13] team0 (unregistering): Port device team_slave_0 removed
[  319.066523][ T5865] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  319.424119][ T9624] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  319.786028][ T5865] usb 10-1: config 0 interface 0 has no altsetting 0
[  319.796745][ T5865] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  319.806202][ T5865] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  319.814540][ T5865] usb 10-1: Product: syz
[  319.822892][ T5865] usb 10-1: Manufacturer: syz
[  319.829881][ T5865] usb 10-1: SerialNumber: syz
[  319.836993][ T5865] usb 10-1: config 0 descriptor??
[  319.846662][ T5865] usb 10-1: selecting invalid altsetting 0
[  320.090140][ T9634] trusted_key: encrypted_key: insufficient parameters specified
[  320.151959][   T30] audit: type=1400 audit(1751278547.849:1523): avc:  denied  { map } for  pid=9631 comm="syz.5.819" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  320.340500][   T30] audit: type=1400 audit(1751278548.029:1524): avc:  denied  { execmod } for  pid=9631 comm="syz.5.819" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  320.378161][ T5923] usb 10-1: USB disconnect, device number 30
[  320.437107][   T30] audit: type=1400 audit(1751278548.029:1525): avc:  denied  { execute } for  pid=9631 comm="syz.5.819" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  320.683431][   T30] audit: type=1400 audit(1751278548.379:1526): avc:  denied  { create } for  pid=9636 comm="syz.8.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  320.841683][ T9638] nfs4: Unknown parameter '
dev/cpu/#/msr'
[  321.078279][   T30] audit: type=1400 audit(1751278548.779:1527): avc:  denied  { append } for  pid=9640 comm="syz.4.821" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  321.100987][    C0] vkms_vblank_simulate: vblank timer overrun
[  321.173696][ T9646] overlayfs: conflicting lowerdir path
[  321.289115][ T9646] loop2: detected capacity change from 0 to 7
[  321.306186][ T9646] Dev loop2: unable to read RDB block 7
[  321.312634][ T9646]  loop2: unable to read partition table
[  321.320594][ T9646] loop2: partition table beyond EOD, truncated
[  321.327766][ T9646] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
OK
[  321.351292][   T30] audit: type=1400 audit(1751278549.049:1528): avc:  denied  { ioctl } for  pid=9648 comm="syz.8.824" path="socket:[28660]" dev="sockfs" ino=28660 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  321.445979][   T30] audit: type=1400 audit(1751278549.139:1529): avc:  denied  { create } for  pid=9645 comm="syz.5.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
Stopping iptables: [  321.604890][ T5923] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  321.676929][   T30] audit: type=1400 audit(1751278549.269:1530): avc:  denied  { read write } for  pid=9660 comm="iptables" path="/dev/console" dev="rootfs" ino=40 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1
[  321.701325][    C0] vkms_vblank_simulate: vblank timer overrun
[  321.796078][ T5923] usb 5-1: Using ep0 maxpacket: 8
[  321.887211][ T5923] usb 5-1: config 162 has an invalid interface number: 251 but max is 1
[  321.913234][ T5923] usb 5-1: config 162 has an invalid interface number: 209 but max is 1
[  321.937331][ T5923] usb 5-1: config 162 has no interface number 0
[  321.948165][ T5923] usb 5-1: config 162 has no interface number 1
[  321.955054][  T880] usb 9-1: new high-speed USB device number 34 using dummy_hcd
[  321.977542][ T5923] usb 5-1: config 162 interface 251 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  322.003272][ T5923] usb 5-1: config 162 interface 209 altsetting 1 has a duplicate endpoint with address 0x9, skipping
[  322.030712][ T5923] usb 5-1: config 162 interface 209 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86
[  322.059780][ T5923] usb 5-1: config 162 interface 209 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024
OK
[  322.104673][ T5923] usb 5-1: config 162 interface 209 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024
[  322.171769][ T5923] usb 5-1: config 162 interface 209 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4
[  322.935631][  T880] usb 9-1: too many configurations: 161, using maximum allowed: 8
[  322.940647][ T5923] usb 5-1: config 162 interface 251 has no altsetting 0
[  322.966981][ T5923] usb 5-1: config 162 interface 209 has no altsetting 0
[  322.977037][ T5923] usb 5-1: New USB device found, idVendor=1608, idProduct=0010, bcdDevice=4f.88
[  323.001946][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
Stopping system message bus: [  323.013967][ T5923] usb 5-1: Product: syz
[  323.018364][ T5923] usb 5-1: Manufacturer: syz
[  323.023249][ T5923] usb 5-1: SerialNumber: syz
[  323.023363][  T880] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  323.057499][  T880] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  323.070344][  T880] usb 9-1: Product: syz
[  323.074552][  T880] usb 9-1: Manufacturer: syz
[  323.080453][ T9535] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  323.149897][ T9535] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  323.156668][  T880] usb 9-1: SerialNumber: syz
[  323.168283][  T880] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  323.262278][ T5923] io_edgeport 5-1:162.251: required endpoints missing
[  323.294303][ T9535] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  323.315036][ T5864] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  323.381006][ T9535] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  323.466112][ T5923] io_edgeport 5-1:162.209: Edgeport 2 port adapter converter detected
[  323.554230][ T9674] !
 speed is unknown, defaulting to 1000
[  323.667862][ T9652] 9pnet_fd: Insufficient options for proto=fd
[  323.700881][ T5923] usb 5-1:   detected
[  323.707470][ T5923] usb 5-1: error in getting manufacturer descriptor: -71
[  323.745122][ T5923] usb 5-1: error in getting boot descriptor: -71
[  323.775427][ T5923] usb 5-1: Device Reported 0 serial ports vs. core thinking we have 2 ports, email greg@kroah.com this information.
[  323.833127][ T5923] usb 5-1: Direct firmware load for edgeport/down.fw failed with error -2
[  323.943912][   T30] kauditd_printk_skb: 7 callbacks suppressed
[  323.943931][   T30] audit: type=1400 audit(1751278551.639:1538): avc:  denied  { firmware_load } for  pid=5923 comm="kworker/0:6" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  324.077607][ T5923] usb 5-1: Falling back to sysfs fallback for: edgeport/down.fw
[  324.404890][ T5864] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive
[  324.665172][ T5864] ath9k_htc: Failed to initialize the device
[  325.294636][ T9668] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  325.316775][ T5864] usb 9-1: ath9k_htc: USB layer deinitialized
[  325.404451][ T9535] 8021q: adding VLAN 0 to HW filter on device bond0
[  325.444177][ T5948] usb 9-1: USB disconnect, device number 34
done
[  325.552702][   T30] audit: type=1400 audit(1751278553.249:1539): avc:  denied  { getopt } for  pid=9673 comm="syz.5.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  325.627707][ T9535] 8021q: adding VLAN 0 to HW filter on device team0
[  325.673203][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  325.680737][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  325.932507][ T5948] usb 9-1: new high-speed USB device number 35 using dummy_hcd
[  326.063810][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  326.070976][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  326.182154][ T9535] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  326.225080][ T5948] usb 9-1: Using ep0 maxpacket: 16
[  326.236528][ T5948] usb 9-1: config 3 has an invalid interface number: 71 but max is 0
[  326.281165][ T5948] usb 9-1: config 3 has no interface number 0
[  326.292734][ T5948] usb 9-1: config 3 interface 71 has no altsetting 0
[  326.306825][ T5948] usb 9-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01
[  326.316723][ T5948] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  326.333684][ T5948] usb 9-1: Product: syz
[  326.352304][ T5948] usb 9-1: Manufacturer: syz
[  326.374073][ T5948] usb 9-1: SerialNumber: syz
[  326.438393][ T9703] FAULT_INJECTION: forcing a failure.
[  326.438393][ T9703] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  326.467719][ T9703] CPU: 0 UID: 0 PID: 9703 Comm: syz.5.832 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) 
[  326.467748][ T9703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  326.467759][ T9703] Call Trace:
[  326.467768][ T9703]  <TASK>
[  326.467775][ T9703]  dump_stack_lvl+0x16c/0x1f0
[  326.467806][ T9703]  should_fail_ex+0x512/0x640
[  326.467832][ T9703]  strncpy_from_user+0x3b/0x2e0
[  326.467856][ T9703]  getname_flags.part.0+0x8f/0x550
[  326.467878][ T9703]  getname_flags+0x93/0xf0
[  326.467900][ T9703]  do_sys_openat2+0xb8/0x1d0
[  326.467916][ T9703]  ? __pfx_do_sys_openat2+0x10/0x10
[  326.467944][ T9703]  ? __fget_files+0x20e/0x3c0
[  326.467973][ T9703]  __x64_sys_creat+0xcc/0x120
[  326.467991][ T9703]  ? __pfx___x64_sys_creat+0x10/0x10
[  326.468007][ T9703]  ? __pfx_ksys_write+0x10/0x10
[  326.468033][ T9703]  ? rcu_is_watching+0x12/0xc0
[  326.468054][ T9703]  ? do_syscall_64+0x91/0x4c0
[  326.468080][ T9703]  do_syscall_64+0xcd/0x4c0
[  326.468107][ T9703]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  326.468125][ T9703] RIP: 0033:0x7f9fccd8e929
[  326.468139][ T9703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  326.468155][ T9703] RSP: 002b:00007f9fcdbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[  326.468172][ T9703] RAX: ffffffffffffffda RBX: 00007f9fccfb5fa0 RCX: 00007f9fccd8e929
[  326.468183][ T9703] RDX: 0000000000000000 RSI: 0000000000000110 RDI: 0000200000000080
[  326.468193][ T9703] RBP: 00007f9fcdbf6090 R08: 0000000000000000 R09: 0000000000000000
[  326.468211][ T9703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  326.468226][ T9703] R13: 0000000000000000 R14: 00007f9fccfb5fa0 R15: 00007ffe12b32038
[  326.468249][ T9703]  </TASK>
[  327.336214][ T5948] go7007 9-1:3.71: Sensoray 2250 found
[  327.341830][ T5948] go7007 9-1:3.71: probe with driver go7007 failed with error -12
[  327.374449][ T5948] usb 9-1: USB disconnect, device number 35
[  327.536244][ T9716] netlink: 20 bytes leftover after parsing attributes in process `syz.9.835'.
[  327.581494][ T9716] netlink: 20 bytes leftover after parsing attributes in process `syz.9.835'.
killall: udevd: no process killed
[  327.964998][ T9713] netlink: 96 bytes leftover after parsing attributes in process `syz.4.833'.
[  328.052127][   T30] audit: type=1400 audit(1751278555.749:1540): avc:  denied  { create } for  pid=9720 comm="syz.5.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  328.075456][   T30] audit: type=1400 audit(1751278555.749:1541): avc:  denied  { ioctl } for  pid=9720 comm="syz.5.834" path="socket:[30914]" dev="sockfs" ino=30914 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  328.998253][ T9535] 8021q: adding VLAN 0 to HW filter on device batadv0
[  329.023015][   T30] audit: type=1800 audit(1751278555.879:1542): pid=9723 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.834" name="bus" dev="overlay" ino=1015 res=0 errno=0
Stopping klogd: start-stop-daemon: warning: killing process 5173: No such process
FAIL
Stopping acpid: [  330.303039][ T9535] veth0_vlan: entered promiscuous mode
[  330.353422][ T9535] veth1_vlan: entered promiscuous mode
[  331.719844][   T30] audit: type=1400 audit(1751278559.419:1543): avc:  denied  { remove_name } for  pid=5169 comm="acpid" name="acpid.pid" dev="tmpfs" ino=7 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  331.760494][   T30] audit: type=1400 audit(1751278559.419:1544): avc:  denied  { unlink } for  pid=5169 comm="acpid" name="acpid.pid" dev="tmpfs" ino=7 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  331.843099][ T9747] input: syz1 as /devices/virtual/input/input35
[  331.887217][ T9535] veth0_macvtap: entered promiscuous mode
[  331.931881][ T9535] veth1_macvtap: entered promiscuous mode
[  331.969179][ T9535] batman_adv: batadv0: Interface activated: batadv_slave_0
[  331.976534][   T30] audit: type=1400 audit(1751278559.669:1545): avc:  denied  { read write } for  pid=9746 comm="syz.8.840" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  332.009796][ T9535] batman_adv: batadv0: Interface activated: batadv_slave_1
[  332.035559][   T30] audit: type=1400 audit(1751278559.669:1546): avc:  denied  { open } for  pid=9746 comm="syz.8.840" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  332.077806][ T9535] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  332.104874][ T9535] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  332.116249][   T30] audit: type=1400 audit(1751278559.759:1547): avc:  denied  { write } for  pid=9746 comm="syz.8.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  332.136333][ T9535] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  332.158938][ T9535] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  332.831779][   T30] audit: type=1400 audit(1751278560.529:1548): avc:  denied  { create } for  pid=9760 comm="syz.8.844" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1
OK
[  332.879604][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  332.887807][   T30] audit: type=1400 audit(1751278560.549:1549): avc:  denied  { connect } for  pid=9760 comm="syz.8.844" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1
[  332.914308][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  332.967021][   T30] audit: type=1400 audit(1751278560.549:1550): avc:  denied  { name_connect } for  pid=9760 comm="syz.8.844" dest=20004 scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  333.287190][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  333.368057][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
Stopping syslogd: [  334.147097][ T9771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  334.516056][ T9771] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  335.300667][   T30] audit: type=1400 audit(1751278561.009:1551): avc:  denied  { read } for  pid=9766 comm="syz.9.846" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  335.324140][   T30] audit: type=1400 audit(1751278561.009:1552): avc:  denied  { open } for  pid=9766 comm="syz.9.846" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  335.347979][   T30] audit: type=1400 audit(1751278561.369:1554): avc:  denied  { mounton } for  pid=9535 comm="syz-executor" path="/root/syzkaller.S8LuC0/syz-tmp" dev="sda1" ino=2061 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[  335.372639][   T30] audit: type=1400 audit(1751278561.359:1553): avc:  denied  { shutdown } for  pid=9766 comm="syz.9.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
stopped /sbin/syslogd (pid 5166)[  335.402487][   T30] audit: type=1400 audit(1751278561.559:1555): avc:  denied  { mounton } for  pid=9535 comm="syz-executor" path="/root/syzkaller.S8LuC0/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  335.430621][   T30] audit: type=1400 audit(1751278561.649:1556): avc:  denied  { mounton } for  pid=9535 comm="syz-executor" path="/root/syzkaller.S8LuC0/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=31780 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  335.465360][   T30] audit: type=1400 audit(1751278561.909:1557): avc:  denied  { mounton } for  pid=9535 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2774 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1

[  335.489444][   T30] audit: type=1400 audit(1751278561.969:1558): avc:  denied  { mount } for  pid=9535 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  335.514431][   T30] audit: type=1400 audit(1751278561.999:1559): avc:  denied  { mounton } for  pid=9535 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
OK
[  336.451219][   T30] audit: type=1400 audit(1751278564.149:1560): avc:  denied  { mount } for  pid=9779 comm="syz.5.850" name="/" dev="hugetlbfs" ino=31829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  336.873609][ T9796] Bluetooth: MGMT ver 1.23
[  337.361046][ T9796] netlink: 'syz.5.853': attribute type 4 has an invalid length.
umount: can't remount debugfs read-only
[  338.834754][ T9825] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55419 sclass=netlink_route_socket pid=9825 comm=syz.5.864
[  339.206975][ T9828] netlink: 28 bytes leftover after parsing attributes in process `syz.9.865'.
[  339.216158][ T9828] netlink: 28 bytes leftover after parsing attributes in process `syz.9.865'.
[  339.904790][ T5948] usb 10-1: new high-speed USB device number 31 using dummy_hcd
[  340.036081][ T5882] usb 9-1: new high-speed USB device number 36 using dummy_hcd
[  340.055074][ T5948] usb 10-1: Using ep0 maxpacket: 16
[  340.066355][ T5948] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  340.077595][ T5948] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[  340.111757][ T5948] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  340.131347][ T5948] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  340.159592][ T5948] usb 10-1: Product: syz
[  340.172485][ T5948] usb 10-1: Manufacturer: syz
[  340.181241][ T5948] usb 10-1: SerialNumber: syz
[  340.229624][ T9834] bridge2: entered promiscuous mode
[  340.235099][ T9834] bridge2: entered allmulticast mode
[  340.285002][ T5882] usb 9-1: Using ep0 maxpacket: 16
[  340.309836][ T5882] usb 9-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  340.345883][ T5882] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  340.364318][ T5882] usb 9-1: Product: syz
[  340.374455][ T5882] usb 9-1: Manufacturer: syz
[  340.394956][ T5882] usb 9-1: SerialNumber: syz
[  340.431891][ T5882] usb 9-1: config 0 descriptor??
[  340.441138][ T9830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  340.448958][   T30] kauditd_printk_skb: 5 callbacks suppressed
[  340.448972][   T30] audit: type=1400 audit(1751278568.139:1566): avc:  denied  { relabelfrom } for  pid=9835 comm="syz.5.869" name="" dev="pipefs" ino=31997 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  340.466746][ T9830] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  340.478387][ T9837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  340.599001][ T9837] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  340.674976][   T30] audit: type=1400 audit(1751278568.349:1567): avc:  denied  { connect } for  pid=9835 comm="syz.5.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  340.733257][ T9838] Bluetooth: received HCILL_WAKE_UP_IND in state 2
[  340.758881][ T6976] Bluetooth: hci5: Frame reassembly failed (-84)
[  340.878460][ T5948] usb 10-1: cannot find UAC_HEADER
[  340.885470][   T30] audit: type=1400 audit(1751278568.579:1568): avc:  denied  { ioctl } for  pid=9829 comm="syz.9.866" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  340.937170][ T5948] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22
[  340.985122][ T5882] dvb_usb_dtv5100 9-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110
[  341.001208][   T30] audit: type=1400 audit(1751278568.579:1569): avc:  denied  { read write } for  pid=9829 comm="syz.9.866" name="sg0" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  341.082948][ T5882] usb 10-1: USB disconnect, device number 31
[  341.120680][ T9844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  341.150053][ T9844] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  341.207296][ T9844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  341.229481][ T9844] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  341.409123][ T9846] ucma_write: process 9 (syz.1.872) changed security contexts after opening file descriptor, this is not allowed.
[  341.929220][   T30] audit: type=1400 audit(1751278569.629:1570): avc:  denied  { ioctl } for  pid=9858 comm="syz.5.877" path="socket:[31129]" dev="sockfs" ino=31129 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
umount: sysfs busy - remounted read-only
umount: devtmpfs busy - remounted read-only
umount: can't remount /dev/root read-only
The system is going down NOW!
Sent SIGTERM to all processes
[  342.111557][   T30] audit: type=1400 audit(1751278569.779:1571): avc:  denied  { write } for  pid=5797 comm="syz-executor" path="pipe:[4514]" dev="pipefs" ino=4514 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
Connection to 10.128.1.72 closed by remote host.
[  342.244974][   T30] audit: type=1400 audit(1751278569.929:1572): avc:  denied  { write } for  pid=9861 comm="syz.5.878" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  342.806348][ T5818] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  342.806822][ T5816] Bluetooth: hci5: command 0x1003 tx timeout
[  342.852732][ T5948] usb 9-1: USB disconnect, device number 36
[  343.058543][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  343.179747][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  343.238711][ T5882] usb 6-1: USB disconnect, device number 16
[  343.238843][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
Sent SIGKILL to[  343.329845][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
 all processes
Requesting system poweroff
[  343.430271][   T12] bridge_slave_1: left allmulticast mode
[  343.435976][   T12] bridge_slave_1: left promiscuous mode
[  343.441611][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  343.452737][   T12] bridge_slave_0: left allmulticast mode
[  343.458733][   T12] bridge_slave_0: left promiscuous mode
[  343.464391][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  343.750815][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  343.762809][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  343.774177][   T12] bond0 (unregistering): Released all slaves
[  344.031465][   T12] hsr_slave_0: left promiscuous mode
[  344.037507][   T12] hsr_slave_1: left promiscuous mode
[  344.043142][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  344.050584][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  344.058211][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  344.066573][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  344.085064][   T12] veth1_macvtap: left promiscuous mode
[  344.090562][   T12] veth0_macvtap: left promiscuous mode
[  344.096455][   T12] veth1_vlan: left promiscuous mode
[  344.101703][   T12] veth0_vlan: left promiscuous mode
[  344.404077][ T5923] usb 5-1: Failed to load image "edgeport/down.fw" err -2
[  344.426821][ T5923] usb 5-1: Direct firmware load for edgeport/boot.fw failed with error -2
[  344.436757][ T5923] usb 5-1: Falling back to sysfs fallback for: edgeport/boot.fw
[  344.445244][ T5923] ------------[ cut here ]------------
[  344.450746][ T5923] WARNING: CPU: 0 PID: 5923 at drivers/base/firmware_loader/fallback.c:148 firmware_fallback_sysfs+0x6d3/0xbe0
[  344.462662][ T5923] Modules linked in:
[  344.467069][ T5923] CPU: 0 UID: 0 PID: 5923 Comm: kworker/0:6 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) 
[  344.477453][ T5923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  344.487590][ T5923] Workqueue: usb_hub_wq hub_event
[  344.492608][ T5923] RIP: 0010:firmware_fallback_sysfs+0x6d3/0xbe0
[  344.498910][ T5923] Code: 88 fb e9 da f9 ff ff e8 fb 97 a9 fb e8 e6 ba 6f fb 31 ff 89 c3 89 c6 e8 2b 93 a9 fb 85 db 0f 84 17 fb ff ff e8 de 97 a9 fb 90 <0f> 0b 90 48 c7 c6 20 af 42 8c 4c 89 e2 4c 89 f7 e8 68 28 f9 ff e9
[  344.518593][ T5923] RSP: 0018:ffffc900045fec60 EFLAGS: 00010283
[  344.524642][ T5923] RAX: 00000000000c9dfb RBX: 00000000fffffff5 RCX: ffffc90019a90000
[  344.532652][ T5923] RDX: 0000000000100000 RSI: ffffffff861288c2 RDI: 0000000000000005
[  344.540635][ T5923] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000
[  344.548620][ T5923] R10: 00000000fffffff5 R11: 0000000000002c00 R12: ffffffff8c7dd100
[  344.556623][ T5923] R13: ffff888034e4b600 R14: ffff888059ca40b0 R15: 0000000000001770
[  344.564590][ T5923] FS:  0000000000000000(0000) GS:ffff888124752000(0000) knlGS:0000000000000000
[  344.573879][ T5923] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  344.580537][ T5923] CR2: 00007f26508e7d60 CR3: 000000000e382000 CR4: 00000000003526f0
[  344.588541][ T5923] Call Trace:
[  344.591807][ T5923]  <TASK>
[  344.594770][ T5923]  _request_firmware+0xfe9/0x1470
[  344.599813][ T5923]  ? __pfx__request_firmware+0x10/0x10
[  344.605291][ T5923]  request_firmware+0x35/0x50
[  344.609949][ T5923]  edge_startup+0x25f8/0x5a90
[  344.614614][ T5923]  ? __pfx_edge_startup+0x10/0x10
[  344.619651][ T5923]  ? rcu_is_watching+0x12/0xc0
[  344.624395][ T5923]  ? trace_kmalloc+0x2b/0xd0
[  344.628987][ T5923]  ? __kmalloc_noprof+0x242/0x510
[  344.633992][ T5923]  ? __asan_memset+0x23/0x50
[  344.638588][ T5923]  ? __pfx_edge_startup+0x10/0x10
[  344.643698][ T5923]  usb_serial_probe+0x2816/0x4040
[  344.648967][ T5923]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  344.654824][ T5923]  usb_probe_interface+0x300/0x9c0
[  344.659921][ T5923]  ? __pfx_usb_probe_interface+0x10/0x10
[  344.665565][ T5923]  really_probe+0x241/0xa90
[  344.670075][ T5923]  __driver_probe_device+0x1de/0x440
[  344.675393][ T5923]  driver_probe_device+0x4c/0x1b0
[  344.680425][ T5923]  __device_attach_driver+0x1df/0x310
[  344.685923][ T5923]  ? __pfx___device_attach_driver+0x10/0x10
[  344.691835][ T5923]  bus_for_each_drv+0x159/0x1e0
[  344.696753][ T5923]  ? __pfx_bus_for_each_drv+0x10/0x10
[  344.702136][ T5923]  ? lockdep_hardirqs_on+0x7c/0x110
[  344.707386][ T5923]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  344.713196][ T5923]  __device_attach+0x1e4/0x4b0
[  344.717983][ T5923]  ? __pfx___device_attach+0x10/0x10
[  344.723251][ T5923]  ? do_raw_spin_unlock+0x172/0x230
[  344.728471][ T5923]  bus_probe_device+0x17f/0x1c0
[  344.733319][ T5923]  device_add+0x1148/0x1a70
[  344.737850][ T5923]  ? __pfx_device_add+0x10/0x10
[  344.742685][ T5923]  ? usb_create_ep_devs+0x1f7/0x2b0
[  344.747879][ T5923]  ? create_intf_ep_devs.isra.0+0x195/0x200
[  344.753754][ T5923]  usb_set_configuration+0x1187/0x1e20
[  344.759238][ T5923]  ? __pfx_usb_generic_driver_probe+0x10/0x10
[  344.765328][ T5923]  usb_generic_driver_probe+0xb1/0x110
[  344.770809][ T5923]  usb_probe_device+0xec/0x3e0
[  344.775647][ T5923]  ? __pfx_usb_probe_device+0x10/0x10
[  344.781012][ T5923]  really_probe+0x241/0xa90
[  344.785525][ T5923]  __driver_probe_device+0x1de/0x440
[  344.790791][ T5923]  ? usb_driver_applicable+0x1c7/0x220
[  344.796317][ T5923]  driver_probe_device+0x4c/0x1b0
[  344.801362][ T5923]  __device_attach_driver+0x1df/0x310
[  344.806798][ T5923]  ? __pfx___device_attach_driver+0x10/0x10
[  344.812708][ T5923]  bus_for_each_drv+0x159/0x1e0
[  344.817733][ T5923]  ? __pfx_bus_for_each_drv+0x10/0x10
[  344.823115][ T5923]  ? lockdep_hardirqs_on+0x7c/0x110
[  344.828364][ T5923]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  344.834176][ T5923]  __device_attach+0x1e4/0x4b0
[  344.838954][ T5923]  ? __pfx___device_attach+0x10/0x10
[  344.844225][ T5923]  ? do_raw_spin_unlock+0x172/0x230
[  344.849424][ T5923]  bus_probe_device+0x17f/0x1c0
[  344.854257][ T5923]  device_add+0x1148/0x1a70
[  344.858786][ T5923]  ? __pfx_device_add+0x10/0x10
[  344.863623][ T5923]  ? add_device_randomness+0xb7/0xf0
[  344.868915][ T5923]  ? __usb_get_extra_descriptor+0x158/0x1c0
[  344.874837][ T5923]  usb_new_device+0xd07/0x1a20
[  344.879600][ T5923]  ? __pfx_usb_new_device+0x10/0x10
[  344.885302][ T5923]  hub_event+0x2eb7/0x4fa0
[  344.889764][ T5923]  ? __pfx_hub_event+0x10/0x10
[  344.894524][ T5923]  ? __list_add_valid_or_report+0xe0/0x190
[  344.900372][ T5923]  ? rcu_is_watching+0x12/0xc0
[  344.905160][ T5923]  process_one_work+0x9cf/0x1b70
[  344.910103][ T5923]  ? __pfx_wg_packet_decrypt_worker+0x10/0x10
[  344.916191][ T5923]  ? __pfx_process_one_work+0x10/0x10
[  344.921549][ T5923]  ? assign_work+0x1a0/0x250
[  344.926171][ T5923]  worker_thread+0x6c8/0xf10
[  344.930769][ T5923]  ? __pfx_worker_thread+0x10/0x10
[  344.935915][ T5923]  kthread+0x3c2/0x780
[  344.939979][ T5923]  ? __pfx_kthread+0x10/0x10
[  344.944553][ T5923]  ? rcu_is_watching+0x12/0xc0
[  344.949326][ T5923]  ? __pfx_kthread+0x10/0x10
[  344.953908][ T5923]  ret_from_fork+0x5d4/0x6f0
[  344.958509][ T5923]  ? __pfx_kthread+0x10/0x10
[  344.963075][ T5923]  ret_from_fork_asm+0x1a/0x30
[  344.967842][ T5923]  </TASK>
[  344.970859][ T5923] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  344.978132][ T5923] CPU: 0 UID: 0 PID: 5923 Comm: kworker/0:6 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) 
[  344.988445][ T5923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  344.998491][ T5923] Workqueue: usb_hub_wq hub_event
[  345.003502][ T5923] Call Trace:
[  345.006760][ T5923]  <TASK>
[  345.009673][ T5923]  dump_stack_lvl+0x3d/0x1f0
[  345.014243][ T5923]  panic+0x71c/0x800
[  345.018122][ T5923]  ? __pfx_panic+0x10/0x10
[  345.022520][ T5923]  ? show_trace_log_lvl+0x29b/0x3e0
[  345.027716][ T5923]  ? firmware_fallback_sysfs+0x6d3/0xbe0
[  345.033344][ T5923]  check_panic_on_warn+0xab/0xb0
[  345.038293][ T5923]  __warn+0xf6/0x3c0
[  345.042213][ T5923]  ? firmware_fallback_sysfs+0x6d3/0xbe0
[  345.047865][ T5923]  report_bug+0x3c3/0x580
[  345.052207][ T5923]  ? firmware_fallback_sysfs+0x6d3/0xbe0
[  345.057921][ T5923]  handle_bug+0x184/0x210
[  345.062276][ T5923]  exc_invalid_op+0x17/0x50
[  345.066770][ T5923]  asm_exc_invalid_op+0x1a/0x20
[  345.071607][ T5923] RIP: 0010:firmware_fallback_sysfs+0x6d3/0xbe0
[  345.077841][ T5923] Code: 88 fb e9 da f9 ff ff e8 fb 97 a9 fb e8 e6 ba 6f fb 31 ff 89 c3 89 c6 e8 2b 93 a9 fb 85 db 0f 84 17 fb ff ff e8 de 97 a9 fb 90 <0f> 0b 90 48 c7 c6 20 af 42 8c 4c 89 e2 4c 89 f7 e8 68 28 f9 ff e9
[  345.097465][ T5923] RSP: 0018:ffffc900045fec60 EFLAGS: 00010283
[  345.103523][ T5923] RAX: 00000000000c9dfb RBX: 00000000fffffff5 RCX: ffffc90019a90000
[  345.111490][ T5923] RDX: 0000000000100000 RSI: ffffffff861288c2 RDI: 0000000000000005
[  345.119452][ T5923] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000
[  345.127426][ T5923] R10: 00000000fffffff5 R11: 0000000000002c00 R12: ffffffff8c7dd100
[  345.135382][ T5923] R13: ffff888034e4b600 R14: ffff888059ca40b0 R15: 0000000000001770
[  345.143346][ T5923]  ? firmware_fallback_sysfs+0x6d2/0xbe0
[  345.148980][ T5923]  _request_firmware+0xfe9/0x1470
[  345.154004][ T5923]  ? __pfx__request_firmware+0x10/0x10
[  345.159459][ T5923]  request_firmware+0x35/0x50
[  345.164126][ T5923]  edge_startup+0x25f8/0x5a90
[  345.168813][ T5923]  ? __pfx_edge_startup+0x10/0x10
[  345.173833][ T5923]  ? rcu_is_watching+0x12/0xc0
[  345.178590][ T5923]  ? trace_kmalloc+0x2b/0xd0
[  345.183172][ T5923]  ? __kmalloc_noprof+0x242/0x510
[  345.188193][ T5923]  ? __asan_memset+0x23/0x50
[  345.192771][ T5923]  ? __pfx_edge_startup+0x10/0x10
[  345.197790][ T5923]  usb_serial_probe+0x2816/0x4040
[  345.202837][ T5923]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  345.208657][ T5923]  usb_probe_interface+0x300/0x9c0
[  345.213777][ T5923]  ? __pfx_usb_probe_interface+0x10/0x10
[  345.219404][ T5923]  really_probe+0x241/0xa90
[  345.223903][ T5923]  __driver_probe_device+0x1de/0x440
[  345.229190][ T5923]  driver_probe_device+0x4c/0x1b0
[  345.234210][ T5923]  __device_attach_driver+0x1df/0x310
[  345.239575][ T5923]  ? __pfx___device_attach_driver+0x10/0x10
[  345.245455][ T5923]  bus_for_each_drv+0x159/0x1e0
[  345.250292][ T5923]  ? __pfx_bus_for_each_drv+0x10/0x10
[  345.255650][ T5923]  ? lockdep_hardirqs_on+0x7c/0x110
[  345.260837][ T5923]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  345.266646][ T5923]  __device_attach+0x1e4/0x4b0
[  345.271397][ T5923]  ? __pfx___device_attach+0x10/0x10
[  345.276691][ T5923]  ? do_raw_spin_unlock+0x172/0x230
[  345.281883][ T5923]  bus_probe_device+0x17f/0x1c0
[  345.286726][ T5923]  device_add+0x1148/0x1a70
[  345.291223][ T5923]  ? __pfx_device_add+0x10/0x10
[  345.296066][ T5923]  ? usb_create_ep_devs+0x1f7/0x2b0
[  345.301255][ T5923]  ? create_intf_ep_devs.isra.0+0x195/0x200
[  345.307138][ T5923]  usb_set_configuration+0x1187/0x1e20
[  345.312599][ T5923]  ? __pfx_usb_generic_driver_probe+0x10/0x10
[  345.318662][ T5923]  usb_generic_driver_probe+0xb1/0x110
[  345.324114][ T5923]  usb_probe_device+0xec/0x3e0
[  345.328878][ T5923]  ? __pfx_usb_probe_device+0x10/0x10
[  345.334238][ T5923]  really_probe+0x241/0xa90
[  345.338737][ T5923]  __driver_probe_device+0x1de/0x440
[  345.344016][ T5923]  ? usb_driver_applicable+0x1c7/0x220
[  345.349472][ T5923]  driver_probe_device+0x4c/0x1b0
[  345.354487][ T5923]  __device_attach_driver+0x1df/0x310
[  345.359849][ T5923]  ? __pfx___device_attach_driver+0x10/0x10
[  345.365736][ T5923]  bus_for_each_drv+0x159/0x1e0
[  345.370576][ T5923]  ? __pfx_bus_for_each_drv+0x10/0x10
[  345.375936][ T5923]  ? lockdep_hardirqs_on+0x7c/0x110
[  345.381128][ T5923]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  345.386934][ T5923]  __device_attach+0x1e4/0x4b0
[  345.391689][ T5923]  ? __pfx___device_attach+0x10/0x10
[  345.396968][ T5923]  ? do_raw_spin_unlock+0x172/0x230
[  345.402164][ T5923]  bus_probe_device+0x17f/0x1c0
[  345.407005][ T5923]  device_add+0x1148/0x1a70
[  345.411506][ T5923]  ? __pfx_device_add+0x10/0x10
[  345.416362][ T5923]  ? add_device_randomness+0xb7/0xf0
[  345.421641][ T5923]  ? __usb_get_extra_descriptor+0x158/0x1c0
[  345.427529][ T5923]  usb_new_device+0xd07/0x1a20
[  345.432289][ T5923]  ? __pfx_usb_new_device+0x10/0x10
[  345.437496][ T5923]  hub_event+0x2eb7/0x4fa0
[  345.441928][ T5923]  ? __pfx_hub_event+0x10/0x10
[  345.446675][ T5923]  ? __list_add_valid_or_report+0xe0/0x190
[  345.452485][ T5923]  ? rcu_is_watching+0x12/0xc0
[  345.457267][ T5923]  process_one_work+0x9cf/0x1b70
[  345.462235][ T5923]  ? __pfx_wg_packet_decrypt_worker+0x10/0x10
[  345.468312][ T5923]  ? __pfx_process_one_work+0x10/0x10
[  345.473679][ T5923]  ? assign_work+0x1a0/0x250
[  345.478264][ T5923]  worker_thread+0x6c8/0xf10
[  345.482853][ T5923]  ? __pfx_worker_thread+0x10/0x10
[  345.487950][ T5923]  kthread+0x3c2/0x780
[  345.492021][ T5923]  ? __pfx_kthread+0x10/0x10
[  345.496597][ T5923]  ? rcu_is_watching+0x12/0xc0
[  345.501356][ T5923]  ? __pfx_kthread+0x10/0x10
[  345.505929][ T5923]  ret_from_fork+0x5d4/0x6f0
[  345.510511][ T5923]  ? __pfx_kthread+0x10/0x10
[  345.515084][ T5923]  ret_from_fork_asm+0x1a/0x30
[  345.519848][ T5923]  </TASK>
[  345.523121][ T5923] Kernel Offset: disabled
[  345.527457][ T5923] Rebooting in 86400 seconds..