last executing test programs:

5m54.753389791s ago: executing program 32 (id=1383):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}]}}, &(0x7f0000000340)=""/142, 0x2a, 0x8e, 0x1, 0x0, 0x0, @void, @value}, 0x28)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000003b0007010000000000000000017c00000400fc800c00018006000600800a0000080002800400728008000700", @ANYRES32=r0, @ANYBLOB="19e9408d57f10011b061415ef05c27e1"], 0x34}}, 0xc000)

5m18.313263124s ago: executing program 33 (id=1485):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x50, &(0x7f0000000000)={0x0, 0x0}, 0x10)

4m54.671325587s ago: executing program 34 (id=1556):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e000000800000000700000019", @ANYRES32=r1, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0x1c, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000b000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000", @ANYRES32=r3], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94)
pipe2(0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x2000000)
ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4881, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c)
socket$nl_generic(0x10, 0x3, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
set_mempolicy_home_node(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x802, 0x0)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000008440)=[{{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f00000000c0)="2b99460a268b409ffdf5c08f2d7d8c8ed105fb430c9294caf428ca100ec6e358bcfaaf7797da22fc1b1c8b625323560433d273a9ce67fe5081ceae684818e60b3be418e5b5716c8023035f044f044bd3f15e8400", 0x54}, {&(0x7f0000008540)="5f883583a367aabe532d7d27250551979b78138838a22187cdcbcb1d6a25fa7fdb20721b56dea4644dc32e8f2e465e7c3f7267b57c4bd30c318dc357a33d0a35a1b25d833a50053b8698376e404ccf3cd73f43ee7a3f9c1d444b52c93055fb1f6f899f98d76434ed6d", 0x69}, {&(0x7f0000000580)="7e4674b8f08f27f32d6598b8b8c97a309f3613019ca997fc8e4bbadd940e46eb79da061afae7b6dc7eda05f889499a8236a7d82bdb0c12a08e792e157de340d36e69be39d79554518c0c9c6bdbf938ab6223966d0c98ff55699dd806b7bb610a2452918b8cd27ef2aed64eaee09e9573b335e7c40934c883a6b78cd0cb78e530530dbf3d0618d74a4bc379460ed2897d748d4ff888ae0b92dc002e", 0x9b}, {&(0x7f0000000640)="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", 0xfa}, {&(0x7f0000000740)="ce72a71993a3ffceeef57e6f9bc05a8cbc2ed3f530cb92b733249540ab76503ac69ba1f9614bfd16cf699e78270e86badd99d805c1cf6570d790dd2bd73e0aaa83f95f6b3ea702d1ac9e43067a1f1b25830cc9f893205e488f21e39431bd05020f6b6e29b6e8369bbadd3a7d90237b07f13db70ea373c858a5d764066734e409b9192ccf3a09112bbe5d43a0245d88848d45d307fb8249dc1a5a841725ad615dade671817df6bf5a0f105ce8394c716581efc216f14b09b5614dfad1bda8498f272b192741fb3091db925ca0132bf4ed6ede530acd8d91514b26", 0xda}, {&(0x7f0000000840)}], 0x6}}], 0x1, 0x11)

4m50.744942658s ago: executing program 35 (id=1567):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
pipe2(&(0x7f00000000c0), 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$inet6(0xa, 0x3, 0x5)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfffffffc, 0x0, 0x0, 0x7}, &(0x7f00000007c0)=<r1=>0x0, &(0x7f0000000800)=<r2=>0x0)
socket$key(0xf, 0x3, 0x2)
socket(0x2a, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd6000000000002d9300000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_smc(0x2b, 0x1, 0x0)
syz_io_uring_setup(0x24fd, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000200), 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[@ANYRES64=r5], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x48, 0x0, 0x0, 0x0, &(0x7f0000903000/0x2000)=nil, 0x2000, 0x15, 0x1})
io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0)

4m47.338047122s ago: executing program 36 (id=1577):
socket$vsock_stream(0x28, 0x1, 0x0)
socket$unix(0x1, 0x2, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, 0x0, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000e6ffffff00bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xa0c}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)

4m28.121455616s ago: executing program 37 (id=1608):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x0, 0x0, 0xd2b, 0x7, 0x40, 0x0, 0x8}, 0x1c)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000000)=0x6, 0x8, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
semop(0xffffffffffffffff, &(0x7f0000000080)=[{0x1, 0x401, 0x1000}, {0x4, 0x59, 0x1000}, {0x3, 0x9, 0x1800}, {0x4, 0x3ff}, {0x7, 0x8, 0x2000}], 0x5)
setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000140)=0x35, 0x4)

4m17.450622643s ago: executing program 38 (id=1651):
r0 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00GM\x00'/13, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000180)='hugetlbfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x30000000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]})

4m8.308936488s ago: executing program 39 (id=1685):
r0 = syz_open_dev$admmidi(&(0x7f0000000280), 0x2, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, &(0x7f00000001c0)={0x1})
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00'})
syz_genetlink_get_family_id$ethtool(&(0x7f0000002080), r1)
prctl$PR_MCE_KILL(0x35, 0x1, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x2710, 0x0, 0x0, 0x2000, &(0x7f0000004000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
r5 = inotify_init1(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
getgroups(0x1, &(0x7f00000000c0)=[0x0])
r6 = accept$nfc_llcp(0xffffffffffffffff, 0x0, 0x0)
close_range(r6, r5, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0x89, 0x0, 0x3, "bbc2a3a3e1d673944bd798d08698df64c7331fa53707b146ba8d09c566945665", 0x47425247})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r7, &(0x7f0000000080), 0x0}, 0x20)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000080)={0x1, 0x2, 0xf7})
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0)
fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0)

4m4.342931269s ago: executing program 40 (id=1697):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0)
r2 = getpid()
write$cgroup_pid(r1, &(0x7f0000000180)=r2, 0x12)
fchdir(r0)
mkdir(&(0x7f0000000100)='./control\x00', 0x0)
rmdir(&(0x7f0000000040)='./control\x00')
dup3(r0, r0, 0x0)
r3 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r3, &(0x7f00000000c0)='THAWED\x00', 0x7)

3m59.239632462s ago: executing program 41 (id=1710):
mkdir(&(0x7f0000000440)='./file1\x00', 0x3)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000040)='./file1\x00')
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0xca40, 0x0)
r1 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000080)={0x2, 0xfffffffffffff105})
ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x5, 0x4}}, './file1\x00'})
creat(&(0x7f0000000540)='./bus\x00', 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0xa0000, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CAP_MAX_VCPU_ID(r5, 0x4068aea3, &(0x7f0000000080)={0x80, 0x0, 0x7fc0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r3, 0x7a4, &(0x7f0000000180)={{@any, 0x800}, 0xe07, 0xcb, 0x100, 0x1a560})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xb, &(0x7f0000000280)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r6 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x40000006)
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82)
r9 = fanotify_init(0x4, 0x101801)
fanotify_mark(r9, 0x105, 0x40001032, r8, 0x0)
r10 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0)
fcntl$setlease(r10, 0x400, 0x1)
read$FUSE(r9, &(0x7f00000057c0)={0x2020}, 0x2020)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)

3m49.932654363s ago: executing program 1 (id=1724):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x8, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x4, 0x6, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x101a02, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf8}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
brk(0x55d55ede6004)
add_key$keyring(&(0x7f0000000180), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00'])
write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)

3m49.033041618s ago: executing program 1 (id=1726):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x2, 0x80000000, 0x800d}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2d8a7313, @void, @value}, 0x94)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0x7, &(0x7f0000000140)={0x7, 0x7}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
fcntl$dupfd(r1, 0x0, r1)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000140)={'\x00', 0x5, 0x3, 0xc25})
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00004bd000/0x3000)=nil, 0x3000}})

3m48.876946623s ago: executing program 1 (id=1727):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2840, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x181800, 0x0)
ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
setgroups(0x0, &(0x7f00000000c0))
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$vim2m(0x0, 0x8004, 0x2)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r5 = socket(0x1e, 0x5, 0x0)
listen(r5, 0xfffffffc)
accept4$inet6(r5, 0x0, 0x0, 0x0)

3m47.910323089s ago: executing program 1 (id=1731):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0xe4)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
creat(&(0x7f0000000440)='./file0/file0\x00', 0x188)
chdir(&(0x7f0000000140)='./bus\x00')
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
write$qrtrtun(0xffffffffffffffff, &(0x7f0000000300)="ca0e808bb35bda", 0x7)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000100)=[0x7], 0x0, 0x0, 0x1, 0x0, r2}}, 0x40)
open(&(0x7f0000000140)='./file0\x00', 0x44582, 0x9)

3m47.474728981s ago: executing program 1 (id=1732):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x9, 0x3ff, 0x3, 0x1009, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0xe, @void, @value, @void, @value}, 0x50)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x693, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x6a)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0)
personality(0x1bb2baf3005ac137)
uname(&(0x7f0000000080)=""/185)
fallocate(0xffffffffffffffff, 0x3, 0x0, 0x2)
syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xe, 0x9}}}}}}, 0x0)
r7 = getpid()
openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x6ee80, 0x0)
timer_create(0x3, &(0x7f0000000300)={0x0, 0x13, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000340))
sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x9, 0x0, 0x50}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

3m47.351735203s ago: executing program 3 (id=1733):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x48)
bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000080)={r4, 0x58, &(0x7f0000000140)}, 0x10)

3m47.041105094s ago: executing program 1 (id=1734):
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0x3}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x44080)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000003d0007010000000000000000047c000008000880040008000c00018006000600800a0000100002800c00170005"], 0x38}}, 0xc000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x5d, 0xba, 0xfc, 0x40, 0xbfd, 0x10c, 0x2d16, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x21, 0xef, 0xb0, 0x0, [], [{{0x9, 0x5, 0x82, 0x2}}]}}]}}]}}, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
io_setup(0x9, &(0x7f0000000040)=<r3=>0x0)
r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x20441, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000140)={0xfffffffe, "4206ad063ff47d1dc9cb07cdb0464100000000001400", <r5=>0xffffffffffffffff})
io_submit(r3, 0x1, &(0x7f00000001c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}])
r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x80, 0x0, 0x0, 0x0, @random="7ea03b100425"}, 0x10)
sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

3m46.756756166s ago: executing program 42 (id=1734):
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0x3}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x44080)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000003d0007010000000000000000047c000008000880040008000c00018006000600800a0000100002800c00170005"], 0x38}}, 0xc000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x5d, 0xba, 0xfc, 0x40, 0xbfd, 0x10c, 0x2d16, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x21, 0xef, 0xb0, 0x0, [], [{{0x9, 0x5, 0x82, 0x2}}]}}]}}]}}, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
io_setup(0x9, &(0x7f0000000040)=<r3=>0x0)
r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x20441, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000140)={0xfffffffe, "4206ad063ff47d1dc9cb07cdb0464100000000001400", <r5=>0xffffffffffffffff})
io_submit(r3, 0x1, &(0x7f00000001c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}])
r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x80, 0x0, 0x0, 0x0, @random="7ea03b100425"}, 0x10)
sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

3m46.293580364s ago: executing program 3 (id=1739):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
iopl(0xa0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read$FUSE(r4, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="b514b73a325412cdb62f9fcb46f816a2cfb0519cb7fd9f7a08b19e736b9250f3706e13043882df460526d487572100886285cbce1884d9f9e5ebf72c1240526695d51fd3f9f5ef5af0aaca648b1bc4c7effe1cadbb1a1bb11c85fc535fccdc0522c324d704eadd8eab7f0000fe2396d4c90ab9ec6ae2cc87af15a3fcae03cd4f353fc4a0d549c7fb0835fec9aa053dc1ad1cf0b28149363bfe2876b040d05f2931e07f942cd3e938ce858d0018b6c7c275af0eb2e024759fa948974a787a014b3a561c8782b96f9f54c25b2dbf06a208627fd374adb0048148dab79797671aab", 0xe0}], 0x1}, 0x4048080)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)

3m45.340869777s ago: executing program 3 (id=1740):
r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100))
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0)
ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f0000000000)=0x3)
ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000040))
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0200000004000000080000000100"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0ffffff000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b5090200000000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

3m45.261284499s ago: executing program 3 (id=1741):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0xe4)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
creat(&(0x7f0000000440)='./file0/file0\x00', 0x188)
chdir(&(0x7f0000000140)='./bus\x00')
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
write$qrtrtun(0xffffffffffffffff, &(0x7f0000000300)="ca0e808bb35bda", 0x7)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000100)=[0x7], 0x0, 0x0, 0x1, 0x0, r2}}, 0x40)
open(&(0x7f0000000140)='./file0\x00', 0x44582, 0x9)

3m45.091318031s ago: executing program 3 (id=1742):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x3, &(0x7f0000000400)=[{0x200000000006, 0x0, 0x0, 0x7ffc2002}, {0x9, 0x0, 0x0, 0xfffffff3}, {0x3, 0x1, 0x9, 0x8}]})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae09, &(0x7f0000000180)=""/12)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000080)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xed, 0x0, 0xfffffffffffffffc, 0x80000000000}, {0x4}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@broadcast, 0x0, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0xff}, 0x0, 0x0, 0x2, 0x6, 0xae, 0xffffffff}}, 0xe8)
sendmmsg(r3, &(0x7f0000000180), 0x400000000000077, 0x0)
r5 = syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@mcast1}, 0x0, @in=@remote}}, &(0x7f0000000380)=0xe8)
stat(&(0x7f0000000100)='./file1\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setuid(r8)
socket$can_bcm(0x1d, 0x2, 0x2)
mount$overlay(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000680)={[{@uuid_auto}, {@default_permissions}], [{@fowner_gt={'fowner>', r7}}, {@smackfsdef={'smackfsdef', 0x3d, 'i2c_result\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@euid_lt={'euid<', r8}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/kvm\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '\'[}:'}}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='i2c_result\x00', r6}, 0x10)
ioctl$I2C_RDWR(r5, 0x707, &(0x7f00000001c0)={&(0x7f0000000a00)=[{0x9, 0x0, 0x0, 0x0}], 0x1})

3m42.260472756s ago: executing program 3 (id=1746):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000))
arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f0000000000))
syz_open_dev$evdev(0x0, 0x0, 0x121000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = request_key(&(0x7f00000000c0)='big_key\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000200)='/dev/dsp1\x00', 0xfffffffffffffffa)
keyctl$read(0xb, r2, &(0x7f0000000240)=""/226, 0xe2)
r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80400, 0x0)
ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f0000000080))
tkill(0x0, 0xb)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24004000)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xab49}, {0x6}]}, 0x10)

3m41.553726601s ago: executing program 43 (id=1746):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000))
arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f0000000000))
syz_open_dev$evdev(0x0, 0x0, 0x121000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = request_key(&(0x7f00000000c0)='big_key\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000200)='/dev/dsp1\x00', 0xfffffffffffffffa)
keyctl$read(0xb, r2, &(0x7f0000000240)=""/226, 0xe2)
r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80400, 0x0)
ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f0000000080))
tkill(0x0, 0xb)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24004000)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xab49}, {0x6}]}, 0x10)

3m24.676032302s ago: executing program 2 (id=1791):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async)
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a9a81) (async)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x200, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'})
ioctl$USBDEVFS_FREE_STREAMS(r1, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYRES8=r0]) (async)
ioctl$USBDEVFS_CONTROL(r1, 0x80045503, 0x0) (async)
r3 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), r3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) (async)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r5=>0x0}) (async)
r6 = socket$inet6(0xa, 0x2, 0x0) (async)
setsockopt$MRT6_PIM(r3, 0x29, 0xcf, &(0x7f0000000300)=0x4, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x48) (async)
ioctl$TCSETS(r3, 0x5402, &(0x7f0000000440)={0x8, 0x7, 0x1, 0x5, 0x5, "748ac41efaf18cc0b34952593a047971222fe4"}) (async, rerun: 32)
r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x2801, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x1ff, 0xfc, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x5af, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) (rerun: 32)
syz_usb_control_io(r7, 0x0, 0x0) (async, rerun: 64)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000001a80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (rerun: 64)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r8}, 0x10)
syz_usb_control_io(r7, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="2066ab"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
setsockopt$SO_TIMESTAMP(r6, 0x1, 0x4a, &(0x7f0000000040)=0x2, 0x4) (async, rerun: 32)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000029bd7000fedb0500000000010042080052ddf4bd5cd55e45ac71ea0a40a629eef9bb5629aceb062242ed6b5eed5ac5d0e85227e3584e900b7b86c827c5f3b5864497", @ANYRES32=r5, @ANYBLOB="0c009900050000004b000000"], 0x28}}, 0x4004001) (async, rerun: 32)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r1, &(0x7f0000000200)={0x40002002})

3m24.482426187s ago: executing program 2 (id=1792):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, 0x0, 0x20000000)

3m24.392573368s ago: executing program 2 (id=1793):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002)
r1 = dup(r0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000021401"], 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_user}]}})

3m24.270542984s ago: executing program 2 (id=1795):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0xe4)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
creat(&(0x7f0000000440)='./file0/file0\x00', 0x188)
chdir(&(0x7f0000000140)='./bus\x00')
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
write$qrtrtun(0xffffffffffffffff, &(0x7f0000000300)="ca0e808bb35bda", 0x7)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000100)=[0x7], 0x0, 0x0, 0x1, 0x0, r2}}, 0x40)
open(&(0x7f0000000140)='./file0\x00', 0x44582, 0x9)

3m23.594834021s ago: executing program 2 (id=1797):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
setresuid(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x48, 0x0, 0x0, 0xfff00001}, {0x16}]}, 0x10)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000080))
sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a0008002ec000000001", 0x1c, 0x0, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x380, 0xffffffff, 0x1c0, 0xd0, 0x0, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [0x0, 0x0, 0x0, 0xff], [], 'macsec0\x00', 'bond_slave_0\x00', {0xff}, {0xff}, 0x6, 0x0, 0x1, 0x48}, 0x2f2, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x7, 0x50cc}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz0\x00', {0x42b5}}}}, {{@ipv6={@private2, @mcast1, [0x0, 0xffffffff, 0xffffffff, 0xffffff00], [0x0, 0xffffffff, 0xffffff00], 'macvlan1\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0x6c, 0x6, 0x6}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10)

3m23.202726067s ago: executing program 2 (id=1799):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"])
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
lsm_list_modules(0x0, &(0x7f0000000080), 0x0)
ioperm(0x0, 0x2, 0x7e)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x2, &(0x7f0000000200)=<r3=>0x0)
r4 = eventfd2(0x0, 0x0)
io_getevents(r3, 0x1, 0x1, &(0x7f0000000080)=[{}], 0x0)
io_submit(r3, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x3, r4}])
setsockopt$sock_timeval(r1, 0x1, 0x2, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a3200000000140007800500140080ff00000800084000000000050001000600000011000300686173683a6e65742c6e6574000000000500050002"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000700), r0)
sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010025bd7020fbdbdf2506000000080003005200000008000100", @ANYRES32=0x0, @ANYBLOB="bb979a5678e97cc79d9730c67b75ee69a7b60fcff196c0ec6a8e17cec9323efb7627bd2b2892ea5938d5205159efc2bddec94be30727d98bf56b5b04f3b9dfe03d60e41c6b6fe4b11644c69eb4374259"], 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x40000)

3m23.033743624s ago: executing program 44 (id=1799):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"])
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
lsm_list_modules(0x0, &(0x7f0000000080), 0x0)
ioperm(0x0, 0x2, 0x7e)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x2, &(0x7f0000000200)=<r3=>0x0)
r4 = eventfd2(0x0, 0x0)
io_getevents(r3, 0x1, 0x1, &(0x7f0000000080)=[{}], 0x0)
io_submit(r3, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x3, r4}])
setsockopt$sock_timeval(r1, 0x1, 0x2, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a3200000000140007800500140080ff00000800084000000000050001000600000011000300686173683a6e65742c6e6574000000000500050002"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000700), r0)
sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010025bd7020fbdbdf2506000000080003005200000008000100", @ANYRES32=0x0, @ANYBLOB="bb979a5678e97cc79d9730c67b75ee69a7b60fcff196c0ec6a8e17cec9323efb7627bd2b2892ea5938d5205159efc2bddec94be30727d98bf56b5b04f3b9dfe03d60e41c6b6fe4b11644c69eb4374259"], 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x40000)

3m11.841820662s ago: executing program 6 (id=1836):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000480)=@assoc_value, &(0x7f0000000040)=0x8)
socket(0x2, 0x80805, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000002c0)={0x1, 0x0, [{0x0, 0x73, &(0x7f0000000780)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x1fffe000000})

3m11.094045229s ago: executing program 6 (id=1840):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x48)
bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000080)={r3, 0x58, &(0x7f0000000140)}, 0x10)

3m9.85233236s ago: executing program 6 (id=1843):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+  \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3)
write$binfmt_misc(r2, &(0x7f0000000740), 0xff67)
sendfile(r1, r2, &(0x7f0000000000), 0xfffb)
fcntl$addseals(r2, 0x409, 0x8)
ftruncate(r2, 0x0)
lseek(r2, 0x0, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
timer_create(0x0, 0x0, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r4}, 0x10)
clock_gettime(0x0, &(0x7f0000000040)={<r5=>0x0, <r6=>0x0})
timer_settime(0x0, 0x0, &(0x7f0000000200)={{r5, r6+60000000}, {0x0, 0x3938700}}, 0x0)
sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6)
fcntl$setpipe(r0, 0x407, 0x2)
recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000bc0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x10022, 0x0)

3m9.245031637s ago: executing program 6 (id=1845):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0xe4)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bda", 0x7)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000100)=[0x7], 0x0, 0x0, 0x1, 0x0, r3}}, 0x40)
open(&(0x7f0000000140)='./file0\x00', 0x44582, 0x9)

3m9.124853445s ago: executing program 6 (id=1847):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async, rerun: 64)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (rerun: 64)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) (async)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) (async, rerun: 32)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (rerun: 32)
read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8)
fsopen(0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000b00000001"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001740)={{r3}, &(0x7f0000000c80)=0x2000000, &(0x7f0000000cc0), 0x2000000}, 0x20)
pidfd_getfd(0xffffffffffffffff, r3, 0x0) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) (async)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x23, &(0x7f00000003c0)=0x7, 0x4) (async)
getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) (async, rerun: 64)
r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (rerun: 64)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) (async)
r5 = syz_open_dev$dri(0x0, 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, 0x0) (async)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r6, 0x0, 0x22, &(0x7f0000000500)=0x831, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000071123b000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
close_range(r0, 0xffffffffffffffff, 0x0)

3m7.556961855s ago: executing program 6 (id=1851):
pipe(0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x20000000005, 0x43}, 0xd8)
r0 = openat$selinux_status(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
read$rfkill(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
pipe2(0x0, 0x0)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r3=>0x0})
bind$can_raw(r2, &(0x7f00000005c0)={0x1d, r3}, 0x66)

3m7.072825122s ago: executing program 45 (id=1851):
pipe(0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x20000000005, 0x43}, 0xd8)
r0 = openat$selinux_status(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
read$rfkill(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
pipe2(0x0, 0x0)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r3=>0x0})
bind$can_raw(r2, &(0x7f00000005c0)={0x1d, r3}, 0x66)

2m46.505106589s ago: executing program 7 (id=1905):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa)
bind$inet6(r3, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fdf000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x47, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000280)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34cf2645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6424923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff0000f5620000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe656c9c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f00000000c0))

2m45.266042212s ago: executing program 7 (id=1906):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=<r0=>0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2)
getrlimit(0x3, &(0x7f0000000100))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x69)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfff}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
getpid()
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000)=0x2, 0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000240)="b245dcf9d0516dc801f97c2d5d8c07a5", 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000096c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x18, 0x30, 0x100, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x40, 0x5)
syz_open_dev$ndb(0x0, 0x0, 0x0)
r4 = syz_open_dev$ndb(0x0, 0x0, 0x0)
ioctl$NBD_DO_IT(r4, 0xab03)
syz_emit_vhci(0x0, 0x26)
socket$tipc(0x1e, 0x2, 0x0)
mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x0, 0x0)

2m44.288372544s ago: executing program 7 (id=1907):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) (async)
getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x7, &(0x7f0000000000), &(0x7f00000001c0)=0x4)
connect$llc(r1, &(0x7f0000000040)={0x1a, 0x331, 0x0, 0x0, 0xe, 0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x10) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xe8}}, 0x0)

2m44.028666882s ago: executing program 7 (id=1908):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r2=>0x0})
connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10)
sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="01000000400800"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001000000007e923b0ad9cda5b28dd4753620a268a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc0000000000e4b4ef5c"], 0x80}}, 0x0)
sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1, 0x1, 0x3, {}, {0x0, 0x2710}, {0x3, 0x1, 0x1, 0x1}, 0x1, @can={{0x4, 0x0, 0x0, 0x1}, 0x7, 0x2, 0x0, 0x0, "d467aef0f23fe738"}}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kfree\x00', r4}, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r5)
sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000fddbdf2504000000080002000500"], 0x1c}}, 0x4010)
close_range(r3, 0xffffffffffffffff, 0x0)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r8=>0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
mkdir(&(0x7f00000022c0)='./file0\x00', 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0)
read$sequencer(r10, &(0x7f0000000300)=""/31, 0x1f)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
mount$overlay(0x0, &(0x7f0000000080)='./file0/../file0/file0\x00', 0x0, 0x0, 0x0)
read$FUSE(r9, &(0x7f000000e280)={0x2020, 0x0, <r11=>0x0, <r12=>0x0, <r13=>0x0}, 0x2020)
mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0x0, 0x0)
write$FUSE_INIT(r9, &(0x7f0000000380)={0x50, 0x0, r11, {0x7, 0x28, 0x0, 0x40488060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24522716a989086f, 0xfffffffc}}, 0x50)
syz_fuse_handle_req(r9, &(0x7f0000002680)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x8, {0x1, 0x2, 0x16, 0x7fffffffffffffff, 0x1, 0x9, {0x2, 0x80, 0x9, 0x8, 0x0, 0x8, 0x8, 0x800, 0x6, 0xa000, 0x7fffffff, r12, r13, 0x5, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x4, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x3c}}, 0x0)

2m43.636876586s ago: executing program 7 (id=1912):
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000000)={0x14, &(0x7f00000000c0)={0xecb6bcbdeffb5fd9, 0x17, 0x50, {0x50, 0x3b, "fc8c51a84c6fab6a95b70dac52e6631d6ee1d0296234ebdf023d2c738d4e39af11dcc3a9dc84ab97594baf578b849875b152fedf8eff0884f435fc06a41c6c3c75a67bdce35b76c28f07aafdd710"}}, 0x0}, 0x0)
syz_usb_connect$cdc_ncm(0x6, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a44000010203010902640002010000000904000001020d000008240600010d4bb505240000000d240f0100000000000000000006241a000000052401000009058103000000fb00090401"], 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
syz_usb_connect(0x3, 0x8c6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a24010100800201020824050503"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2f, &(0x7f0000000100)=ANY=[@ANYBLOB="2f03bac6c75bef54b57901ce9c63dae3933f2b25"]}]})
syz_usb_connect(0x90927f1af554bc1d, 0x45e, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0xb6, 0xd8, 0x95, 0x40, 0xdf6, 0x21, 0x4288, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44c, 0x2, 0x1, 0x8, 0x50, 0x4, [{{0x9, 0x4, 0x70, 0x7, 0x1, 0xab, 0xc5, 0xea, 0xe, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x6, 0xd6b3, 0xffff, 0x2}, [@country_functional={0xc, 0x24, 0x7, 0x7f, 0x6, [0x0, 0x6, 0x280]}, @mbim={0xc, 0x24, 0x1b, 0x1, 0x7, 0x2, 0x7, 0x3, 0xf}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x66}, @obex={0x5, 0x24, 0x15, 0x6fe6}]}, @uac_control={{0xa, 0x24, 0x1, 0xf55f, 0x5}, [@extension_unit={0xb, 0x24, 0x8, 0x3, 0x2, 0x8, "abbc3355"}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x305, 0x1, 0x3, 0x21}]}], [{{0x9, 0x5, 0xb, 0x3, 0x20, 0x1, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xb8, 0xe}, @generic={0x102, 0x7, "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"}]}}]}}, {{0x9, 0x4, 0xe9, 0x4, 0xb, 0xff, 0xff, 0xff, 0x6, [], [{{0x9, 0x5, 0x89, 0x10, 0x3ff, 0x3, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x10}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xa6, 0x6}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x3, 0xb0, 0x6}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x6, 0xad, 0x0, [@generic={0x5d, 0xf, "66a4ce92209c40db590a3dc503738aa8cc37ee8d65a32c372668a77b44de3025087d940782a13d6b99334b218c48c09be12ef958d32b977356491783aecf192ea70f4d194fc2041e3eed6acd7c30af5baf7871ef65c071d24ee927"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x2}]}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0xb8, 0x3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2e, 0xc}]}}, {{0x9, 0x5, 0x4, 0x8, 0x200, 0x2, 0xb6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x102, 0x6, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xff, 0x2}]}}, {{0x9, 0x5, 0x7, 0x10, 0x10, 0x4, 0x81, 0x7}}, {{0x9, 0x5, 0xb, 0xc, 0x200, 0xbf, 0x4, 0x0, [@generic={0x6a, 0x22, "d0111d0be9c191a24f0e6309aee6cf9f31554e64639d5d17a035e3c2f8de21e01f52cb7ef077d6c78603fcc70a64848a80687fc0a5acec217cd82f2110cde7ade6d5975f8cb405f9089b52760d28a9bd60e0ca63139bc36d5e828107e652826e74ab0f8a0abfac91"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0x9, 0x1, 0x75, [@generic={0x49, 0xa, "3e61c7c439b5cc7f38c8d1d835d0f3012dd85a818f640135247cefe98bfda73de6f4c76dd3ae3c0b1480d791dc8e9570033650241d8bf89f01e63380e960c0d4e95e491fd6dbc8"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x8}]}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0x1, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x3536}]}}, {{0x9, 0x5, 0x1, 0x4, 0x400, 0x1, 0x7, 0xd, [@generic={0x18, 0x21, "33256bbcb4f7ac0c795c12e726c8ec01b20bc63935e1"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0xc60}]}}, {{0x9, 0x5, 0x9, 0xc5f4336cc0cf28b9, 0x20, 0xb4, 0x8, 0xf, [@generic={0xff, 0xa, "2011460930e486399eaae38d977fe2ce7f4f21df884e5d85a3db4180161c01a19e9189be7d124ad9dc35b44df0f7d132301a1b17970447606ce04e8f87dc806505d2dff3f21d62e142f15c95ea455706c1b3376d432758c4d5596cb5bb9e936929308f5e4514a5492c6ee088905e46fd5a4277ddd6f711ac6320f0fa07be3977e7fee90b7e4e0dbe9afed9eff45d10867466bffe24b78ac43f8271c2bd53b68fb81f68b7286693da18e19f220571711d0cd3d69ebdb3a17744ea49e7f145e2ad8bd38e8aa9a96bda474ab7335486aef7fd57bebaff481b076cf9e93b25b9487125616515a208b2b3e37640f14893c6aac110e382552bf8b82aff7c2ad8"}]}}]}}]}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x5, 0x9, 0x2, 0x8, 0xfd}, 0x117, &(0x7f00000005c0)={0x5, 0xf, 0x117, 0x5, [@generic={0xea, 0x10, 0x2, "8268f49c5a4180a95b5d3d9aa0726645de40a426d64396b10534a748ee236d5eb7e6a383a59f25454b18955548a43ff65910ea231a0e57ec7914ba3479f5545fe961f960367be4994b59473a0920c247337fbf67c661f5b8e94914b867da6c7582fb7ec09c5adda22f9d342a1412e90926754df37e0d184b9829e1bae1942e7f136a0178c04cc754b07e35f393b633f958303ba1cb784e2dd55fc1bca12cea80916b00967eb94521021c1ecd345946a6dfa90dde40dfc6229316c83841e877da467d4b71e0278cadd9587f18324ffea6b7706885aaf6fd9a012c1a2db01b5ec42f0edfeb562d3c"}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xc, 0x8, 0xf}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xc0, 0xcf, 0xe8ad}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "d52b72be467bf073717794fbc7bb94d1"}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc01}}, {0xf1, &(0x7f0000000740)=@string={0xf1, 0x3, "ffa73732db52f2624f96566c0dc2619838d99c94e83f724861ef70ddfe3c1f948b321f6f6c19aabc5de3901ad7d2eda405de9d5875fd58afa2c9478c6596f3c39106c651dab48d3cd00e1198dc24b14ec65ac87adba3d17e7a767fe48b78e01fdc0b132b45e0bb0d9fa73195cba405a504d8858cf77830faaf3573d77301a48e787b8489a36d0b7a8d0e26394b6e41844a130b7393c9e997bd988894c107849ac26a7acce359261009815126cdf6bee00406519fa46db8d288e5992e6faa45d2de54a0a83dccefacc32475ed762a609ce0b82f4f27304af252c2aade100d94f3bc41c3289e2a462d41e8a5f06d2fe9"}}]})
r0 = creat(&(0x7f0000000880)='./file0\x00', 0x1)
write$char_usb(r0, &(0x7f00000008c0)="0f79b7f32ab01e0c9a47aa9920303306756d9a02bfc8954080c7c00246f658ebe4950f034487372ae07bc3af6373bba780fd9f72c34b015f395792acd4e7b9a80200c271fee24d0acb10e61322e70dfb37d4738d950efb627ec1a2e75026cdfc3b12dac12ea77d54062025144e06315a92253fad163c2f86bfb919bb778b9bfb28f6c09ec8b222c36b0f3bbd9dc63cb52fd99f877943a14507b5375d135a5498541742dae20aa1b9909fd3138a38cf1de7c230ecf08ad4a93d473a167fb3361dfac5c0ba1c849e51f687efa7e4845f1548ce6cea102c8cb60d694baeeb5f58d13e19d81b6117", 0xe6)

2m40.009729685s ago: executing program 7 (id=1921):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x0)
accept4(r1, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=unix'])
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wg0\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f00000002c0)="05030500d3fc030000004788031c09", 0xf, 0x4, &(0x7f0000000140)={0x11, 0x6558, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)
r3 = memfd_secret(0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0)
munlockall()

2m24.967268836s ago: executing program 46 (id=1921):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x0)
accept4(r1, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=unix'])
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wg0\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f00000002c0)="05030500d3fc030000004788031c09", 0xf, 0x4, &(0x7f0000000140)={0x11, 0x6558, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)
r3 = memfd_secret(0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0)
munlockall()

8.88129687s ago: executing program 0 (id=2578):
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = socket$kcm(0x2, 0x6, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x72, &(0x7f0000000000), 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
socket(0x1d, 0x2, 0x6)
r6 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xd2c6, 0x0, 0x0, 0x221}, &(0x7f0000000340)=<r7=>0x0, &(0x7f0000000280)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, r8, &(0x7f00000002c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, 0xffffffffffffffff, 0x0, r3, 0x2, 0x0, 0x1})
io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_IRQCHIP(r5, 0x4048aec9, &(0x7f0000000540)={0x3, 0x12c, @pic={0x1, 0x1, 0x1, 0xf2, 0x5, 0x3, 0x3, 0x6, 0xf4, 0x10, 0x9, 0x3, 0x1, 0x7, 0xa2, 0x6}})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20048004)
socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x82, &(0x7f0000000340)={0x0, 0x0, 0x10, 0x1ff}, &(0x7f0000000480)=0x10)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r9 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0)
r10 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0)
ioctl$CEC_S_MODE(r10, 0x40046109, &(0x7f0000000100)=0x21)
ioctl$CEC_S_MODE(r9, 0x40046109, &(0x7f0000000100)=0x22)
syz_io_uring_setup(0x5bf, 0x0, &(0x7f0000000240), &(0x7f0000000200))

7.26399596s ago: executing program 0 (id=2585):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b000000000000"], 0x50)
syz_open_dev$radio(&(0x7f0000000200), 0x1, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000400)={0x1, 0x12c, @ioapic={0xd000, 0x20, 0xffffff07, 0x2783, 0x0, [{0x5, 0xbe, 0x8, '\x00', 0x4}, {0xfc, 0xb, 0x6, '\x00', 0x80}, {0x6, 0x7, 0x4, '\x00', 0x7}, {0xa, 0x0, 0x2}, {0x5, 0x40, 0x2, '\x00', 0x2}, {0x4, 0x8, 0x7, '\x00', 0xf1}, {0x8, 0x3, 0x8, '\x00', 0x5}, {0x0, 0x5, 0x6, '\x00', 0x7}, {0x9, 0xb, 0x0, '\x00', 0x7}, {0xb, 0x3, 0xb, '\x00', 0x9}, {0x5, 0xc, 0x0, '\x00', 0x4}, {0x5, 0x3, 0x4}, {0x15, 0xc7, 0x7, '\x00', 0x8}, {0x0, 0xea, 0x2, '\x00', 0x8}, {0x78, 0x1, 0x64, '\x00', 0x8}, {0x7, 0x21, 0xb, '\x00', 0x30}, {0xc, 0xfa, 0x8, '\x00', 0x6}, {0x6, 0x1, 0x1, '\x00', 0xc}, {0x2, 0x1, 0x0, '\x00', 0x7f}, {0x80, 0x80, 0x8, '\x00', 0x3}, {0x1c, 0x3, 0x3, '\x00', 0x5}, {0x1, 0x6, 0x1d, '\x00', 0x7}, {0x5, 0xb, 0x10, '\x00', 0xfb}, {0xdc, 0x9, 0x10, '\x00', 0x2}]}})

6.058682517s ago: executing program 0 (id=2588):
ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
r1 = getegid()
setresgid(0x0, r1, 0x0)
r2 = syz_usb_connect(0x3, 0x36, &(0x7f0000000240)=ANY=[@ANYRESHEX=r0], 0x0)
syz_usb_control_io$printer(r2, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
linkat(r3, &(0x7f0000000000)='\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1400)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
r4 = socket(0x10, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x40000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bca)
r6 = syz_open_dev$MSR(&(0x7f0000000300), 0x9fd5, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff038}, {0xb1, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10)
sendmmsg(r7, &(0x7f0000001c00), 0x400000000000159, 0x40840)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000010400"/19, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010065727370616e000014"], 0x44}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r5, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0)
r9 = socket(0x10, 0x3, 0x0)
sendmmsg(r9, &(0x7f0000000000), 0x400000000000235, 0x0)
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)

5.845529704s ago: executing program 8 (id=2591):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffff2a}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
syz_open_dev$sndctrl(0x0, 0x8003, 0x0)
openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0)
r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VIDIOC_SUBDEV_G_CROP(r4, 0xc038563b, &(0x7f0000000040)={0x1, 0x0, {0x2778f40c, 0x7, 0x4, 0x1}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d)
futex(&(0x7f0000000180), 0x5, 0x0, 0x0, &(0x7f0000000000), 0xaffffffa)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="bb54015a344508b066b2a2b6e12f48000500", @ANYRES16=r5, @ANYBLOB="01002dbd7000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="2a003300d0000000ffffffffffff080211000000505050505050004004040100020076060405270003000000"], 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

5.560822634s ago: executing program 4 (id=2592):
ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000440)=0x8)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x3c8, 0xffffffff, 0x188, 0xc8, 0xc8, 0xffffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x74000002, 0xa0, 0xc8, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@cluster={{0x30}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'bridge0\x00', 'wg1\x00'}, 0x287, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@connlabel={{0x28}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x168, 0x1a8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0xde, 0x0, 'syz1\x00'}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "81d0042c436dbdac8bebde18b54dd11bf035c1d8b6b0e88ef5aee0eccad7"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428)

5.436086883s ago: executing program 4 (id=2594):
syz_open_dev$video4linux(&(0x7f0000000040), 0x400, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mknodat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file2\x00', 0x0, 0x1)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0)
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r0, &(0x7f0000000340)="1e", 0x1, 0x6004081, &(0x7f0000000400)={0xa, 0x4e24, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000140)={0xa, 0x4e21, 0x6, @private1, 0x98ae}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000380)='m', 0x1}], 0x1}, 0x8000)
r1 = syz_io_uring_setup(0x237, &(0x7f0000000240)={0x0, 0x8101, 0x0, 0x0, 0x24f}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000600)=<r3=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000001c0)={0x0, 0x0, 0x1}, 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x80, 0x3, 0x0, 0x9276, 0x0, 0x0, {0x1}})
io_uring_enter(r1, 0x47bc, 0x3bf6, 0x7, 0x0, 0x0)
shutdown(r0, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mremap(&(0x7f00003ca000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000016f000/0x1000)=nil)
ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_ULP(r6, 0x6, 0x1f, 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)

5.380255421s ago: executing program 8 (id=2596):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket(0x80000000000000a, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff038}, {0x20, 0x6}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0x10)
sendmmsg(r1, &(0x7f0000001c00), 0x400000000000159, 0x40840)

4.468949801s ago: executing program 4 (id=2599):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x200, 0x32, 0xe0, 0xb, 0x8, 0x45e, 0x2d5, 0x6d21, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x2, 0x1, 0x0, 0x58, 0x1a, 0x8}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000980)={0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0, 0x0})
r1 = socket(0xa, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x25, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @private=0xa010101}}, 0xffff}, 0x90)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012000000000000", @ANYRES32], 0x48)

4.398499587s ago: executing program 8 (id=2601):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
r1 = socket$kcm(0x2, 0x1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r5, 0x0, 0xfffffffffffffffe}, 0x18)
r6 = socket$xdp(0x2c, 0x3, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0x1, &(0x7f0000000000), 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, 0x0, 0x0)
sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_SIOCOUTQ(r1, 0x5411, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
syz_emit_ethernet(0x3a, &(0x7f0000002100)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0x18, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0)

3.252039833s ago: executing program 8 (id=2607):
openat$sndseq(0xffffffffffffff9c, 0x0, 0x22803)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
read$snddsp(r0, &(0x7f0000000040)=""/77, 0x4d)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x7b22f2765f52af67)
sendmsg$tipc(r2, &(0x7f00000001c0)={&(0x7f00000000c0)=@name={0x1e, 0x2, 0x1, {{0x1, 0x4}}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="68dbe4bb0e30d448e51639b7887f9a152e05037ed56218510cb5fae5d9736c3906878321c1d96231404bad764d8d37fcde", 0x31}, {&(0x7f0000000280)="e4cb12fc29211708a871cef640dae18c91594d8492dd10e46e767bdcc8ebcda125c3a0828cbd9f481df230499b0a22f47f5f9da1a7e1bfa40eb3f766c74b44a8e6c6a3f3011f01d799327c034281b52146d7e659727d6fa896feb55a3efbcb599e55bf3bfa4f0b4d611fd7ad6eba9a66836e9f3ec577a9fe7b56e3b0c5b7f9d0bdeebacb15a38984c594448a2949ccf0718ff38e4f3560cee78322c9e1c0df27", 0xa0}], 0x2, &(0x7f0000000340)="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", 0xfa, 0x800}, 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x2c, 0x3b, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}]}, 0x2c}}, 0xc000)

2.988868362s ago: executing program 0 (id=2609):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0)
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+  \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3)
write$binfmt_misc(r2, &(0x7f0000000740), 0xff67)
sendfile(r1, r2, &(0x7f0000000000), 0xfffb)
fcntl$addseals(r2, 0x409, 0x8)
ftruncate(r2, 0x0)
lseek(r2, 0x0, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
timer_create(0x0, 0x0, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r3}, 0x10)
clock_gettime(0x0, &(0x7f0000000040)={<r4=>0x0, <r5=>0x0})
timer_settime(0x0, 0x0, &(0x7f0000000200)={{r4, r5+60000000}, {0x0, 0x3938700}}, 0x0)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6)
fcntl$setpipe(r0, 0x407, 0x2)
recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000bc0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x10022, 0x0)

2.898005945s ago: executing program 9 (id=2610):
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2}, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) (fail_nth: 1)

2.782282398s ago: executing program 8 (id=2611):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket(0x80000000000000a, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x0, 0x891018, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff038}, {0x20, 0x6}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0x10)
sendmmsg(r1, &(0x7f0000001c00), 0x400000000000159, 0x40840)

2.599414664s ago: executing program 9 (id=2612):
syz_emit_ethernet(0x1bc, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x6, 0x6, "b2174d", 0x186, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xe}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[@fragment={0x11, 0x0, 0xc, 0x1, 0x0, 0x1a, 0x67}, @dstopts={0x5e, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @enc_lim={0x4, 0x1, 0x1}, @ra={0x5, 0x2, 0x5}, @jumbo={0xc2, 0x4, 0x8}]}, @hopopts={0x29, 0x19, '\x00', [@hao={0xc9, 0x10, @private1}, @pad1, @enc_lim={0x4, 0x1, 0xb}, @generic={0x9, 0x14, "fb2e86b886b174079e234b8e70d42c3d8403de8f"}, @generic={0x8, 0x94, "be7ce195f9e2f8f72dd06efc6ae06013942136d5cd95d2219cb4ac9ba68a71c04f793aba2aedae13fd6df453162c8901d7b3e7341aabaebbc7fb2ade1db2715ac5d9dd80b6d40594389ae68e61563d36004831b7aa8824c538785a9461215e2785b6eeadc60af09947d8d96306354e081281cd7dab9218d346335df9a5e7b5cde27693b1912efeb5e4e3e6ca0ec07a12fecd448c"}, @ra]}, @hopopts={0x3c, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x4}, @enc_lim={0x4, 0x1, 0x79}]}], "0c290d17216a49bd81b19f41bafbb08f26be4d59cf1841595a044b8cd9559e2ffffb670b3fcc9ed6a85647916b8c8aeb533646d8b90fecf2a293ba3a1b98e8a529362fe1ed258f225fc0b98fd6c477415efb9e55adf9b5ec91691d41e851f0bbb410d5ba08cc638ce576d3a3ae26c4b7ae84170c7c3d5594451307adafbc"}}}}}, 0x0)

2.574868462s ago: executing program 9 (id=2613):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r0, 0x4068aea3, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg$unix(r1, &(0x7f0000002e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002120, &(0x7f0000002f00))
close_range(r1, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89b0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x58}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$vsock_stream(0x28, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af25, &(0x7f0000000940))
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r6 = accept4(r5, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
recvmmsg(r6, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb}}, {{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000000500)=""/219, 0xdb}, {&(0x7f0000002740)=""/233, 0xe9}, {&(0x7f0000000400)=""/105, 0x69}, {0x0}, {0x0}], 0x5}}], 0x2, 0x60, 0x0)

2.024783352s ago: executing program 0 (id=2615):
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x216822a75a8bdd29, 0x70bd27}, 0x14}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000480)='net/ip_vs_stats_percpu\x00')
syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x5ca5, 0x200, 0xfffffffe, 0x8}, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4)
ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYBLOB="070000000000000007000000ff"])
ioctl$KVM_RUN(r3, 0xae80, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) (fail_nth: 3)

2.024268545s ago: executing program 9 (id=2616):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$KDSETMODE(r0, 0x4b3a, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
ioctl$TCXONC(r0, 0x4b3a, 0x8000000)

1.64582064s ago: executing program 0 (id=2617):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.625228047s ago: executing program 8 (id=2618):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000008c0)={0x1, <r2=>0xffffffffffffffff}, 0x4)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="1000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='setgroups\x00')
read$FUSE(r4, &(0x7f0000003480)={0x2020}, 0x2020)
write$FUSE_DIRENT(r4, 0x0, 0x70)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x20, &(0x7f0000000900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x86, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a00)='GPL\x00', 0x9, 0xc1, &(0x7f0000000a40)=""/193, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000b80)={0x0, 0x4, 0x2, 0x7}, 0x10, 0x21a55, 0xffffffffffffffff, 0x0, &(0x7f0000000bc0)=[r3, r4], 0x0, 0x10, 0x6000, @void, @value}, 0x94)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mkdirat(0xffffffffffffffff, 0x0, 0xa)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
syz_open_dev$vim2m(0x0, 0x7, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x0)
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x7e0, 0x628, 0x3f8, 0x3f8, 0x0, 0x628, 0x710, 0x710, 0x710, 0x710, 0x710, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @mcast1, [], [], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x7400, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@dev, @empty, @remote, @private2, @private1, @dev, @loopback, @mcast2, @local, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @loopback, @local, @private1, @dev]}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@remote, 'nr0\x00'}}}, {{@ipv6={@empty, @private0, [], [], 'sit0\x00', 'sit0\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x840)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9c, 0x32, 0x3f, 0x8, 0x4a5, 0x3003, 0x3ab2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x28, 0xf0, 0xf6}}]}}]}}, 0x0)

1.414896613s ago: executing program 4 (id=2619):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x10008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}}, 0x8000)
sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r4 = socket(0x1, 0x2, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r5=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r5, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$KVM_GET_XSAVE(r6, 0x9000aea4, &(0x7f0000000300))
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x1e, 0x0, 0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x8, 0x6}, 0x0, 0xffffffffffffff81, 0x0, 0x12345})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="210027bd700001dcdf25100000001800018014000200776c616e30000000000000000000000008000f"], 0x34}}, 0x4000040)
getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0)
read(0xffffffffffffffff, &(0x7f0000000040)=""/29, 0x1d)
write$cgroup_int(r0, &(0x7f0000000040)=0x902, 0x12)

1.246242519s ago: executing program 5 (id=2620):
socket$kcm(0x2, 0x1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_init_net_socket$bt_sco(0x9, 0x5, 0x2)
r0 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x288}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000180))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_setup(0x7534, &(0x7f0000000000)={0x0, 0xcbf0, 0x80, 0x1, 0x3d7}, &(0x7f00000000c0), &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd_index=0xa, 0x0, 0x0})
io_uring_enter(r0, 0x3516, 0x1000000, 0x0, 0x0, 0x0)

1.02089863s ago: executing program 5 (id=2621):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r1, 0x402, 0x80000034)
fcntl$setsig(r1, 0xa, 0x21)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x1c5100, 0x0)
creat(&(0x7f0000000180)='./file1\x00', 0x80)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
getpid()
syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
poll(0x0, 0x0, 0x3)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, 0x0, 0x0)
syz_emit_ethernet(0x3e, 0x0, 0x0)
sendmsg$nl_xfrm(r4, 0x0, 0x0)
sendmmsg$inet(r1, 0x0, 0x0, 0x20000090)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
readv(r0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/176, 0xb0}, {0x0}], 0x2)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x2)

894.376198ms ago: executing program 5 (id=2622):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x47f)
bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e21}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000080))
ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000000000001"])
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0xfffffffc, 0x8001, 0xfffe}, 0x14)
shutdown(r0, 0x2)

811.723823ms ago: executing program 5 (id=2623):
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0)
socket(0x40000000015, 0x5, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket$nl_crypto(0x10, 0x3, 0x15)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3801458b, 0x0, 0x47b07c7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x0, 0xae], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff801, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_GET_SYSNAME(r0, 0x8040552c, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
stat(&(0x7f0000000040)='./file0\x00', 0x0)
membarrier(0x1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev\x00')
read$FUSE(r2, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, <r3=>0x0}, 0x2020)
setgid(r3)
setresgid(0xee01, 0x0, r3)
r4 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x4e22, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}}, 0x5c)
setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000140)=0xf, 0x4)
r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)

512.198916ms ago: executing program 9 (id=2624):
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002cfcdbdf250400000008002c0013000000"], 0x1c}, 0x1, 0x0, 0x0, 0x404000d}, 0x20000000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x216822a75a8bdd29, 0x70bd27}, 0x14}}, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000480)='net/ip_vs_stats_percpu\x00')
io_setup(0x9, &(0x7f0000000000)=<r2=>0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
io_getevents(r2, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x5ca5, 0x200, 0x2, 0x2b5, 0x0, r1}, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x4)
ioctl$KVM_SET_CPUID2(r5, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYBLOB="070000000000000007000000ff"])
ioctl$KVM_RUN(r5, 0xae80, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f00000001c0), 0x12)

381.453475ms ago: executing program 4 (id=2625):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0)
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+  \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3)
write$binfmt_misc(r2, &(0x7f0000000740), 0xff67)
sendfile(r1, r2, &(0x7f0000000000), 0xfffb)
fcntl$addseals(r2, 0x409, 0x8)
ftruncate(r2, 0x0)
lseek(r2, 0x0, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
timer_create(0x0, 0x0, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r3}, 0x10)
clock_gettime(0x0, &(0x7f0000000040)={<r4=>0x0, <r5=>0x0})
timer_settime(0x0, 0x0, &(0x7f0000000200)={{r4, r5+60000000}, {0x0, 0x3938700}}, 0x0)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6)
fcntl$setpipe(r0, 0x407, 0x2)
recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000bc0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x10022, 0x0)

234.013519ms ago: executing program 5 (id=2626):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {0x6}, {0xffff, 0xffff}, {0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x22002, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000380)={&(0x7f0000000180), 0x0, 0x0, 0x0, 0xcccccccc})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f00000aa000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000080)=0x1)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4, 0x8, 0xc, 0x0, 0x9, 0x10, 0x5, 0x2, 0xe, 0x3, 0x6, 0x5, 0x0, 0x0, 0x615, 0x3, 0x4, 0x3e, 0xa, '\x00', 0x7, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
truncate(0x0, 0xffffffffffff0005)
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
r4 = epoll_create1(0x0)
ioctl$FS_IOC_SETFLAGS(r4, 0x40088a01, &(0x7f0000000000)=0x100)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0xe0002013})
syz_open_dev$dri(&(0x7f0000000000), 0x29, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x8202, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r5], 0x1c}}, 0x0)

144.735448ms ago: executing program 9 (id=2627):
getrlimit(0xf, &(0x7f0000000040))
r0 = syz_usb_connect(0x0, 0x68, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xa1, 0x12, 0x17, 0x10, 0xb95, 0x172a, 0xf7f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfb, 0x0, 0x2, 0x6c, 0x5d, 0x65, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x40, 0x13, 0x6, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x8d7a7ea9fc7ffc8a)
syz_usb_connect$cdc_ecm(0x5, 0x68, &(0x7f0000000440)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x56, 0x1, 0x1, 0x9, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x2, 0x6, 0x0, 0x9, {{0x6, 0x24, 0x6, 0x0, 0x0, "9f"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x101, 0x2, 0xf2}, [@mbim_extended={0x8, 0x24, 0x1c, 0x33fe, 0xda, 0x6}, @acm={0x4, 0x24, 0x2, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x8, 0x4, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x7, 0x4, 0xd}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x2, 0x81, 0x8}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0xd, 0x2, 0x3, 0x40, 0x13}, 0x79, &(0x7f0000000100)={0x5, 0xf, 0x79, 0x1, [@generic={0x74, 0x10, 0xa, "991e6f56005ebeea0c6d9ddf31014eddcfd82f53762699b2bb69719014ace61e91a75f1ea6492fe047ccdd592678f72b9771daa3574a2c47579b46c4e685600b2caf755f2ae5f1c8246c463cf66e154562617b4bed0d628e5ee44378ce7a0f24bbb4b1c3ffa3dda1a7fa8d8754a3a151f1"}]}, 0x4, [{0xb1, &(0x7f0000000180)=@string={0xb1, 0x3, "5f479c60fc4bbc9fbab9091a8e0e07a159b58ff53106d1abbd5ed23a8fedb468b620c1d4c7301b32499b8a70673ae871399fc75a7284ad55369cc2e73f1e2aa350a3879c5d46992634f3cf45654f04066e28e41ba0b9512b4af68909175e2502e39af9f229cfe4b4d3c06b015ec0604cef2aeefc04e261ba4cede1cfd8557d908e913e8805165ea5222602491852f57d31bfff73f5b8439d809e92542f82741024dbd6d1366a489d04c7ffa237250a"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x812}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x2c01}}, {0xd0, &(0x7f00000002c0)=@string={0xd0, 0x3, "a62c255e5d8285f018ccd59f22800e6992767fe35db59e2fa65358d538e356616866fa35b2be2d8e75a8e48a8a64526114d8fc43045343ca44cebcfd128a98374c83ba17a1509d6c6b90db88a32b8896fb2128c0d5fa3b157868ebfaa563e7b752810470e1cbc7762f2191bc80175facafb7b13b3a040a3499b4fc035bb10b515c7cb1968e1b24e0cf4366e55588f6297a6e239b2b296364bcee6fad2116255220475d9ce38065dca8e492d11d0d4c00c23f29553ceb046c856b55995acdd14a7d63939ca765f7e109d59f8973fe"}}]})

138.525108ms ago: executing program 5 (id=2628):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket(0x80000000000000a, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x0, 0x891018, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff038}, {0x20, 0x6}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0x10)
sendmmsg(r1, &(0x7f0000001c00), 0x400000000000159, 0x40840)

0s ago: executing program 4 (id=2629):
syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)=ANY=[@ANYBLOB="12ffff00fb154920480b0810423d01020301090212000100000000090400000008841100"], 0x0)
fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3)
mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x5)
r0 = open(&(0x7f0000000100)='./bus\x00', 0x1c3142, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x5d032, 0xffffffffffffffff, 0x0)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xe)
ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080))
ioctl$TIOCCONS(r1, 0x541d)
pwritev(0xffffffffffffffff, &(0x7f0000001000)=[{&(0x7f0000000e40)="ebac", 0x2}], 0x1, 0xac, 0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000008000000760000000000000127000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0f00000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="00000001bc00002000000061b454d2000050fcadd70000000000", @ANYRES32=r0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'/28], 0x37)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r3}, 0x0, &(0x7f0000000140)=r2}, 0x20)
msgget$private(0x0, 0x0)
r4 = timerfd_create(0x1, 0x0)
timerfd_settime(r4, 0x3, 0x0, 0x0)
r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000300), 0x4800, 0x0)
ioctl$KDGKBLED(r5, 0x4b64, &(0x7f0000000340))
timerfd_gettime(r4, &(0x7f0000000640))
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000800)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_PMKSA(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010039bd7000fbdbdf253400000008000300", @ANYRES32=r8, @ANYBLOB="14005500ff5cb4eb3ae185e332037b0a0034000101010101010000b65f585599bc8bfe2d7dae18512c97e018282cc01e7536067d5834ccbf1831b267e53cfb77b747ca6c820142e87d2bc4c09b75a5f24f8af40e36188d0ee83b85a6584a44c9bb3385a8da6ccf8a648a68fc0c37fc866ff903a065baebbdc1a5a0af07356d0e436d3359ef38a7729cc8d41b0f343cf6eb436e734a6de4c8aff8e2be09e821f07b3fe865984d6f7b4fb03c1043ff7e37dbf4fa4bedd89295000a5f0aa2d2867873ed0084993a97a8e26fb5ae108faa7452cd2301e16f8defd6e24a1bb968bc742274be4ee7e66e235e23"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
recvmmsg$unix(r0, &(0x7f0000000940)=[{{&(0x7f0000000840)=@abs, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000440)=""/114, 0x72}], 0x1}}, {{&(0x7f0000000fc0)=@abs, 0x6e, &(0x7f0000000340)=[{&(0x7f0000001040)=""/87, 0x57}, {&(0x7f00000010c0)=""/142, 0x8e}, {&(0x7f0000001180)=""/242, 0xf2}, {&(0x7f0000001280)=""/179, 0xb3}], 0x4, &(0x7f0000001340)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000001400)=""/200, 0xc8}, {&(0x7f0000000580)=""/178, 0xb2}, {&(0x7f00000015c0)=""/185, 0xb9}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000002680)=""/105, 0x69}, {&(0x7f0000002700)=""/104, 0x68}, {&(0x7f00000007c0)=""/28, 0x1c}], 0x4, &(0x7f0000002840)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x108}}, {{&(0x7f0000002980), 0x6e, &(0x7f0000003ec0)=[{&(0x7f0000002a00)}, {&(0x7f0000002a40)=""/169, 0xa9}, {&(0x7f0000002b00)=""/153, 0x99}, {&(0x7f0000002bc0)=""/53, 0x35}, {&(0x7f0000002c00)=""/4096, 0x1000}, {&(0x7f0000003c00)=""/230, 0xe6}, {&(0x7f0000003d00)=""/200, 0xc8}, {&(0x7f0000000380)=""/148, 0x94}], 0x8}}], 0x4, 0x10120, &(0x7f0000004040))
epoll_create(0x613e)

kernel console output (not intermixed with test programs):

aa:aa:aa:3f) already exists on: batadv_slave_1
[  717.396248][T13363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  717.399518][  T902] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  717.408648][T13363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  717.439349][T13363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  717.455215][T13363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  717.467143][T13363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  717.479516][ T5866] usb 6-1: config 0 interface 0 altsetting 101 endpoint 0x81 has invalid wMaxPacketSize 0
[  717.493951][ T5866] usb 6-1: config 0 interface 0 has no altsetting 0
[  717.500711][ T5866] usb 6-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00
[  717.514283][ T5866] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  717.524375][T13363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  717.537299][T13363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  717.551045][ T5866] usb 6-1: config 0 descriptor??
[  717.560571][T13363] batman_adv: batadv0: Interface activated: batadv_slave_1
[  717.569443][  T902] usb 5-1: Using ep0 maxpacket: 16
[  717.578774][T13363] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  717.599523][T13363] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  717.601576][  T902] usb 5-1: config 0 has an invalid interface number: 251 but max is 0
[  717.613880][T13363] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  717.623776][  T902] usb 5-1: config 0 has no interface number 0
[  717.629992][T13363] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  717.633746][  T902] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  717.654420][  T902] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  717.674572][  T902] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  717.684647][  T902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  717.692865][  T902] usb 5-1: Product: syz
[  717.701053][  T902] usb 5-1: Manufacturer: syz
[  717.705736][  T902] usb 5-1: SerialNumber: syz
[  717.733633][  T902] usb 5-1: config 0 descriptor??
[  717.745411][T13491] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  717.753036][T12729] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  717.765697][T13491] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  717.771820][T12729] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  717.803042][   T29] audit: type=1400 audit(1740898122.822:1353): avc:  denied  { read } for  pid=13501 comm="syz.8.2007" name="btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  717.821111][   T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  717.832162][   T29] audit: type=1400 audit(1740898122.822:1354): avc:  denied  { open } for  pid=13501 comm="syz.8.2007" path="/dev/btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  717.865969][   T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  717.977335][ T5866] holtek_mouse 0003:04D9:A072.001E: unknown main item tag 0x4
[  717.984895][T13491] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  717.984972][T13491] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  717.989119][ T5864] IPVS: starting estimator thread 0...
[  718.005063][ T5866] holtek_mouse 0003:04D9:A072.001E: unknown main item tag 0x3
[  718.215088][ T5866] holtek_mouse 0003:04D9:A072.001E: hidraw0: USB HID v0.00 Device [HID 04d9:a072] on usb-dummy_hcd.5-1/input0
[  718.508323][T13516] bridge0: port 2(bridge_slave_1) entered disabled state
[  718.515811][T13516] bridge0: port 1(bridge_slave_0) entered disabled state
[  718.529051][T13516] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  718.599984][T13518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  718.658042][T13518] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  718.784864][T13518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  718.828432][  T902] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  718.844120][T13508] IPVS: using max 29 ests per chain, 69600 per kthread
[  718.864023][  T902] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -61
[  718.882826][T13518] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  718.900815][  T902] asix 5-1:0.251: probe with driver asix failed with error -61
[  719.008599][  T902] usb 5-1: USB disconnect, device number 38
[  719.166899][T13525] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[  719.514278][   T29] audit: type=1400 audit(1740898124.532:1355): avc:  denied  { setopt } for  pid=13531 comm="syz.9.2015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  719.536466][T13532] syz_tun: entered allmulticast mode
[  719.549252][T13532] dvmrp0: entered allmulticast mode
[  719.557543][T13532] dvmrp0: left allmulticast mode
[  719.562859][T13532] syz_tun: left allmulticast mode
[  720.469702][  T902] usb 9-1: new high-speed USB device number 21 using dummy_hcd
[  720.564077][ T5932] usb 6-1: USB disconnect, device number 17
[  720.709473][  T902] usb 9-1: Using ep0 maxpacket: 16
[  720.731687][  T902] usb 9-1: config index 0 descriptor too short (expected 69, got 36)
[  720.740211][  T902] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  720.770040][  T902] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  720.789547][  T902] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  720.804203][  T902] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  720.814201][  T902] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  720.830852][  T902] usb 9-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89
[  720.840081][  T902] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  720.848097][  T902] usb 9-1: Product: syz
[  720.852380][  T902] usb 9-1: Manufacturer: syz
[  720.856997][  T902] usb 9-1: SerialNumber: syz
[  720.863420][  T902] usb 9-1: config 0 descriptor??
[  720.871183][  T902] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622
[  721.560444][T13562] nvme_fabrics: unknown parameter or missing value 'gDf˜' in ctrl creation request
[  721.639618][  T902] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110
[  721.654378][  T902] gspca_pac7302 9-1:0.0: probe with driver gspca_pac7302 failed with error -110
[  722.149141][T13565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  722.188611][T13572] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2025'.
[  722.382744][T13572] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  722.879991][ T5866] usb 9-1: USB disconnect, device number 21
[  722.999036][   T29] audit: type=1400 audit(1740898128.012:1356): avc:  denied  { read } for  pid=13582 comm="syz.8.2031" path="socket:[49937]" dev="sockfs" ino=49937 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  723.022857][ T5867] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  723.291113][ T5867] usb 10-1: Using ep0 maxpacket: 32
[  723.318958][ T5867] usb 10-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  723.331149][ T5867] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  723.339273][ T5867] usb 10-1: Product: syz
[  723.347887][ T5867] usb 10-1: Manufacturer: syz
[  723.352686][ T5867] usb 10-1: SerialNumber: syz
[  723.415553][ T5867] usb 10-1: config 0 descriptor??
[  723.577534][T13597] FAULT_INJECTION: forcing a failure.
[  723.577534][T13597] name failslab, interval 1, probability 0, space 0, times 0
[  723.590411][T13597] CPU: 1 UID: 0 PID: 13597 Comm: syz.5.2034 Not tainted 6.14.0-rc4-syzkaller-00248-g03d38806a902 #0
[  723.590434][T13597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  723.590444][T13597] Call Trace:
[  723.590450][T13597]  <TASK>
[  723.590457][T13597]  dump_stack_lvl+0x16c/0x1f0
[  723.590485][T13597]  should_fail_ex+0x50a/0x650
[  723.590511][T13597]  ? fs_reclaim_acquire+0xae/0x150
[  723.590537][T13597]  should_failslab+0xc2/0x120
[  723.590563][T13597]  __kmalloc_cache_node_noprof+0x6e/0x420
[  723.590581][T13597]  ? __lock_acquire+0x15a9/0x3c40
[  723.590605][T13597]  ? __get_vm_area_node+0x101/0x2f0
[  723.590633][T13597]  __get_vm_area_node+0x101/0x2f0
[  723.590661][T13597]  __vmalloc_node_range_noprof+0x26a/0x1530
[  723.590687][T13597]  ? do_replace+0x21f/0x500
[  723.590717][T13597]  ? do_replace+0x21f/0x500
[  723.590738][T13597]  ? irqentry_exit+0x3b/0x90
[  723.590758][T13597]  ? lockdep_hardirqs_on+0x7c/0x110
[  723.590778][T13597]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  723.590811][T13597]  ? do_replace+0x21f/0x500
[  723.590831][T13597]  __vmalloc_noprof+0x6d/0x90
[  723.590856][T13597]  ? do_replace+0x21f/0x500
[  723.590877][T13597]  do_replace+0x21f/0x500
[  723.590898][T13597]  ? __pfx_do_replace+0x10/0x10
[  723.590931][T13597]  ? bpf_lsm_capable+0x9/0x10
[  723.590950][T13597]  ? security_capable+0x7e/0x260
[  723.590974][T13597]  do_ebt_set_ctl+0x470/0x580
[  723.590997][T13597]  ? __pfx_do_ebt_set_ctl+0x10/0x10
[  723.591029][T13597]  ? nf_sockopt_find.constprop.0+0x221/0x290
[  723.591057][T13597]  nf_setsockopt+0x8a/0xf0
[  723.591080][T13597]  ip_setsockopt+0xcb/0xf0
[  723.591106][T13597]  udp_setsockopt+0x7d/0xd0
[  723.591129][T13597]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  723.591157][T13597]  do_sock_setsockopt+0x222/0x480
[  723.591183][T13597]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  723.591210][T13597]  ? lock_acquire+0x2f/0xb0
[  723.591244][T13597]  __sys_setsockopt+0x1a0/0x230
[  723.591270][T13597]  __x64_sys_setsockopt+0xbd/0x160
[  723.591291][T13597]  ? do_syscall_64+0x91/0x250
[  723.591312][T13597]  ? lockdep_hardirqs_on+0x7c/0x110
[  723.591332][T13597]  do_syscall_64+0xcd/0x250
[  723.591354][T13597]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  723.591376][T13597] RIP: 0033:0x7fa699b8d169
[  723.591390][T13597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  723.591408][T13597] RSP: 002b:00007fa69a942038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  723.591425][T13597] RAX: ffffffffffffffda RBX: 00007fa699da6160 RCX: 00007fa699b8d169
[  723.591437][T13597] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000006
[  723.591448][T13597] RBP: 00007fa69a942090 R08: 0000000000000108 R09: 0000000000000000
[  723.591459][T13597] R10: 0000400000000040 R11: 0000000000000246 R12: 0000000000000001
[  723.591470][T13597] R13: 0000000000000000 R14: 00007fa699da6160 R15: 00007ffeaec0f3a8
[  723.591495][T13597]  </TASK>
[  723.591524][T13597] warn_alloc: 1 callbacks suppressed
[  723.591570][T13597] syz.5.2034: vmalloc error: size 128, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1
[  723.902111][T13597] CPU: 0 UID: 0 PID: 13597 Comm: syz.5.2034 Not tainted 6.14.0-rc4-syzkaller-00248-g03d38806a902 #0
[  723.902127][T13597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  723.902134][T13597] Call Trace:
[  723.902140][T13597]  <TASK>
[  723.902146][T13597]  dump_stack_lvl+0x16c/0x1f0
[  723.902167][T13597]  warn_alloc+0x24d/0x3a0
[  723.902181][T13597]  ? __pfx_warn_alloc+0x10/0x10
[  723.902194][T13597]  ? __kmalloc_cache_node_noprof+0x2ad/0x420
[  723.902208][T13597]  ? __kasan_kmalloc+0x8a/0xb0
[  723.902224][T13597]  ? __get_vm_area_node+0x1dc/0x2f0
[  723.902244][T13597]  __vmalloc_node_range_noprof+0xd24/0x1530
[  723.902266][T13597]  ? do_replace+0x21f/0x500
[  723.902282][T13597]  ? irqentry_exit+0x3b/0x90
[  723.902297][T13597]  ? lockdep_hardirqs_on+0x7c/0x110
[  723.902310][T13597]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  723.902332][T13597]  ? do_replace+0x21f/0x500
[  723.902345][T13597]  __vmalloc_noprof+0x6d/0x90
[  723.902363][T13597]  ? do_replace+0x21f/0x500
[  723.902376][T13597]  do_replace+0x21f/0x500
[  723.902390][T13597]  ? __pfx_do_replace+0x10/0x10
[  723.902411][T13597]  ? bpf_lsm_capable+0x9/0x10
[  723.902424][T13597]  ? security_capable+0x7e/0x260
[  723.902441][T13597]  do_ebt_set_ctl+0x470/0x580
[  723.902456][T13597]  ? __pfx_do_ebt_set_ctl+0x10/0x10
[  723.902476][T13597]  ? nf_sockopt_find.constprop.0+0x221/0x290
[  723.902493][T13597]  nf_setsockopt+0x8a/0xf0
[  723.902509][T13597]  ip_setsockopt+0xcb/0xf0
[  723.902529][T13597]  udp_setsockopt+0x7d/0xd0
[  723.902544][T13597]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  723.902567][T13597]  do_sock_setsockopt+0x222/0x480
[  723.902586][T13597]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  723.902605][T13597]  ? lock_acquire+0x2f/0xb0
[  723.902627][T13597]  __sys_setsockopt+0x1a0/0x230
[  723.902644][T13597]  __x64_sys_setsockopt+0xbd/0x160
[  723.902658][T13597]  ? do_syscall_64+0x91/0x250
[  723.902673][T13597]  ? lockdep_hardirqs_on+0x7c/0x110
[  723.902685][T13597]  do_syscall_64+0xcd/0x250
[  723.902700][T13597]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  723.902716][T13597] RIP: 0033:0x7fa699b8d169
[  723.902726][T13597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  723.902737][T13597] RSP: 002b:00007fa69a942038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  723.902748][T13597] RAX: ffffffffffffffda RBX: 00007fa699da6160 RCX: 00007fa699b8d169
[  723.902755][T13597] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000006
[  723.902762][T13597] RBP: 00007fa69a942090 R08: 0000000000000108 R09: 0000000000000000
[  723.902768][T13597] R10: 0000400000000040 R11: 0000000000000246 R12: 0000000000000001
[  723.902775][T13597] R13: 0000000000000000 R14: 00007fa699da6160 R15: 00007ffeaec0f3a8
[  723.902788][T13597]  </TASK>
[  723.902811][T13597] Mem-Info:
[  724.180159][T13597] active_anon:18596 inactive_anon:0 isolated_anon:0
[  724.180159][T13597]  active_file:16192 inactive_file:3246 isolated_file:0
[  724.180159][T13597]  unevictable:768 dirty:260 writeback:0
[  724.180159][T13597]  slab_reclaimable:12297 slab_unreclaimable:113894
[  724.180159][T13597]  mapped:42558 shmem:16086 pagetables:891
[  724.180159][T13597]  sec_pagetables:0 bounce:0
[  724.180159][T13597]  kernel_misc_reclaimable:0
[  724.180159][T13597]  free:1309809 free_pcp:1306 free_cma:0
[  724.225459][T13597] Node 0 active_anon:74384kB inactive_anon:0kB active_file:64636kB inactive_file:12976kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:170140kB dirty:1036kB writeback:0kB shmem:62808kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12412kB pagetables:3564kB sec_pagetables:0kB all_unreclaimable? no
[  724.257815][T13597] Node 1 active_anon:0kB inactive_anon:0kB active_file:132kB inactive_file:8kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:92kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  724.288702][T13597] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  724.315787][T13597] lowmem_reserve[]: 0 2487 2487 0 0
[  724.321022][T13597] Node 0 DMA32 free:1315840kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:74368kB inactive_anon:0kB active_file:64636kB inactive_file:12896kB unevictable:1536kB writepending:1036kB present:3129332kB managed:2547384kB mlocked:0kB bounce:0kB free_pcp:5212kB local_pcp:1172kB free_cma:0kB
[  724.351716][T13597] lowmem_reserve[]: 0 0 0 0 0
[  724.356427][T13597] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:16kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:8kB free_cma:0kB
[  724.383745][T13597] lowmem_reserve[]: 0 0 0 0 0
[  724.388442][T13597] Node 1 Normal free:3908036kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:132kB inactive_file:8kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  724.417219][T13597] lowmem_reserve[]: 0 0 0 0 0
[  724.421967][T13597] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  724.434601][T13597] Node 0 DMA32: 2*4kB (UM) 23*8kB (UME) 3*16kB (UME) 44*32kB (UE) 78*64kB (UME) 30*128kB (UME) 27*256kB (UM) 42*512kB (UM) 15*1024kB (UM) 12*2048kB (UME) 302*4096kB (UM) = 1315824kB
[  724.452680][T13597] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  724.464146][T13597] Node 1 Normal: 185*4kB (UE) 60*8kB (UME) 48*16kB (UME) 202*32kB (UME) 95*64kB (UE) 24*128kB (UME) 15*256kB (UME) 7*512kB (UME) 4*1024kB (UM) 4*2048kB (UE) 945*4096kB (UM) = 3908036kB
[  724.482752][T13597] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  724.492961][T13597] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  724.502321][T13597] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  724.511927][T13597] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  724.521210][T13597] 35547 total pagecache pages
[  724.525887][T13597] 0 pages in swap cache
[  724.530036][T13597] Free swap  = 124744kB
[  724.534178][T13597] Total swap = 124996kB
[  724.538319][T13597] 2097051 pages RAM
[  724.542130][T13597] 0 pages HighMem/MovableOnly
[  724.546807][T13597] 428547 pages reserved
[  724.550976][T13597] 0 pages cma reserved
[  724.632239][T13578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  724.642644][T13578] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  724.680129][ T5866] usb 1-1: new high-speed USB device number 74 using dummy_hcd
[  725.303133][T13604] hpfs: Bad magic ... probably not HPFS
[  725.331146][ T5866] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  725.344952][ T5866] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  725.355483][ T5866] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  725.367742][ T5866] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  725.388778][ T5866] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  725.411205][ T5866] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  725.425254][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  725.433656][ T5866] usb 1-1: Product: syz
[  725.438107][ T5866] usb 1-1: Manufacturer: syz
[  725.462381][ T5866] cdc_wdm 1-1:1.0: skipping garbage
[  725.476473][ T5866] cdc_wdm 1-1:1.0: skipping garbage
[  725.514491][ T5866] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  725.535255][ T5866] cdc_wdm 1-1:1.0: Unknown control protocol
[  725.576781][ T5895] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  725.601466][ T5867] peak_usb 10-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels)
[  725.624832][ T5867] peak_usb 10-1:0.0 can0: sending command failure: -22
[  725.649491][ T5867] peak_usb 10-1:0.0 can0: sending command failure: -22
[  725.682247][T11002] usb 1-1: USB disconnect, device number 74
[  725.739380][ T5895] usb 6-1: Using ep0 maxpacket: 16
[  725.749451][ T5895] usb 6-1: no configurations
[  725.750081][ T5867] peak_usb 10-1:0.0: probe with driver peak_usb failed with error -22
[  725.754101][ T5895] usb 6-1: can't read configurations, error -22
[  725.842965][  T902] usb 10-1: USB disconnect, device number 5
[  725.872664][   T29] audit: type=1400 audit(1740898130.892:1357): avc:  denied  { shutdown } for  pid=13605 comm="syz.4.2039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  725.872980][T13606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2039'.
[  725.911901][ T5895] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  725.915456][T13606] x_tables: duplicate underflow at hook 2
[  726.119566][ T5895] usb 6-1: Using ep0 maxpacket: 16
[  726.129778][T13611] FAULT_INJECTION: forcing a failure.
[  726.129778][T13611] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  726.143649][T13611] CPU: 0 UID: 0 PID: 13611 Comm: syz.4.2041 Not tainted 6.14.0-rc4-syzkaller-00248-g03d38806a902 #0
[  726.143673][T13611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  726.143684][T13611] Call Trace:
[  726.143689][T13611]  <TASK>
[  726.143696][T13611]  dump_stack_lvl+0x16c/0x1f0
[  726.143725][T13611]  should_fail_ex+0x50a/0x650
[  726.143753][T13611]  _copy_from_user+0x2e/0xd0
[  726.143771][T13611]  cec_ioctl+0x6b8/0x2920
[  726.143791][T13611]  ? __pfx_cec_ioctl+0x10/0x10
[  726.143811][T13611]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  726.143839][T13611]  ? do_vfs_ioctl+0x513/0x1990
[  726.143862][T13611]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  726.143891][T13611]  ? ioctl_has_perm.constprop.0.isra.0+0x2f2/0x450
[  726.143919][T13611]  ? ioctl_has_perm.constprop.0.isra.0+0x2fc/0x450
[  726.143948][T13611]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  726.143978][T13611]  ? __pfx_lock_release+0x10/0x10
[  726.144013][T13611]  ? selinux_file_ioctl+0x180/0x270
[  726.144038][T13611]  ? selinux_file_ioctl+0xb4/0x270
[  726.144065][T13611]  ? __pfx_cec_ioctl+0x10/0x10
[  726.144082][T13611]  __x64_sys_ioctl+0x190/0x200
[  726.144108][T13611]  do_syscall_64+0xcd/0x250
[  726.144130][T13611]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  726.144152][T13611] RIP: 0033:0x7f8198b8d169
[  726.144167][T13611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  726.144185][T13611] RSP: 002b:00007f8199933038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  726.144204][T13611] RAX: ffffffffffffffda RBX: 00007f8198da5fa0 RCX: 00007f8198b8d169
[  726.144217][T13611] RDX: 0000400000000040 RSI: 0000000040046109 RDI: 0000000000000003
[  726.144228][T13611] RBP: 00007f8199933090 R08: 0000000000000000 R09: 0000000000000000
[  726.144239][T13611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  726.144250][T13611] R13: 0000000000000000 R14: 00007f8198da5fa0 R15: 00007ffe91fac2a8
[  726.144274][T13611]  </TASK>
[  726.149656][ T5895] usb 6-1: no configurations
[  726.354135][ T5895] usb 6-1: can't read configurations, error -22
[  726.360915][ T5895] usb usb6-port1: attempt power cycle
[  726.430836][ T5867] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  726.592464][ T5867] usb 5-1: device descriptor read/64, error -71
[  726.699495][ T5895] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  726.719903][ T5895] usb 6-1: Using ep0 maxpacket: 16
[  726.725488][ T5895] usb 6-1: no configurations
[  726.730305][ T5895] usb 6-1: can't read configurations, error -22
[  726.850139][ T5867] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  726.859450][ T5895] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  726.880480][ T5895] usb 6-1: Using ep0 maxpacket: 16
[  726.886142][ T5895] usb 6-1: no configurations
[  726.890933][ T5895] usb 6-1: can't read configurations, error -22
[  726.897455][ T5895] usb usb6-port1: unable to enumerate USB device
[  726.909492][  T902] usb 1-1: new high-speed USB device number 75 using dummy_hcd
[  726.909504][T11002] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  726.989799][ T5867] usb 5-1: device descriptor read/64, error -71
[  727.052048][  T902] usb 1-1: device descriptor read/64, error -71
[  727.070480][T11002] usb 10-1: Using ep0 maxpacket: 8
[  727.076934][T11002] usb 10-1: config 1 has an invalid interface number: 3 but max is 2
[  727.085312][T11002] usb 10-1: config 1 has no interface number 1
[  727.091722][T11002] usb 10-1: too many endpoints for config 1 interface 3 altsetting 1: 136, using maximum allowed: 30
[  727.102903][ T5867] usb usb5-port1: attempt power cycle
[  727.108398][T11002] usb 10-1: config 1 interface 3 altsetting 1 endpoint 0x1 has an invalid bInterval 126, changing to 7
[  727.120146][T11002] usb 10-1: config 1 interface 3 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 136
[  727.133374][T11002] usb 10-1: config 1 interface 3 has no altsetting 0
[  727.142278][T11002] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  727.152534][T11002] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  727.160781][T11002] usb 10-1: Product: syz
[  727.165033][T11002] usb 10-1: Manufacturer: syz
[  727.169863][T11002] usb 10-1: SerialNumber: syz
[  727.289445][  T902] usb 1-1: new high-speed USB device number 76 using dummy_hcd
[  727.430593][  T902] usb 1-1: device descriptor read/64, error -71
[  727.459542][ T5867] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  727.522084][ T5867] usb 5-1: device descriptor read/8, error -71
[  727.541651][  T902] usb usb1-port1: attempt power cycle
[  727.723801][T13638] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2051'.
[  727.738762][   T29] audit: type=1400 audit(1740898132.752:1358): avc:  denied  { name_bind } for  pid=13636 comm="syz.8.2051" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  727.879619][ T5867] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  727.899541][  T902] usb 1-1: new high-speed USB device number 77 using dummy_hcd
[  727.910028][ T5867] usb 5-1: device descriptor read/8, error -71
[  727.921186][  T902] usb 1-1: device descriptor read/8, error -71
[  728.031845][ T5867] usb usb5-port1: unable to enumerate USB device
[  728.159560][  T902] usb 1-1: new high-speed USB device number 78 using dummy_hcd
[  728.180170][  T902] usb 1-1: device descriptor read/8, error -71
[  728.209530][ T5864] usb 9-1: new full-speed USB device number 22 using dummy_hcd
[  728.290048][  T902] usb usb1-port1: unable to enumerate USB device
[  728.345381][T13646] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2054'.
[  728.366207][   T29] audit: type=1400 audit(1740898133.382:1359): avc:  denied  { read } for  pid=5177 comm="acpid" name="event9" dev="devtmpfs" ino=3315 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1
[  728.392939][   T29] audit: type=1400 audit(1740898133.382:1360): avc:  denied  { open } for  pid=5177 comm="acpid" path="/dev/input/event9" dev="devtmpfs" ino=3315 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1
[  728.398575][T13646] sp0: Synchronizing with TNC
[  728.416458][ T5864] usb 9-1: no configurations
[  728.425645][ T5864] usb 9-1: can't read configurations, error -22
[  728.433207][   T29] audit: type=1400 audit(1740898133.382:1361): avc:  denied  { ioctl } for  pid=5177 comm="acpid" path="/dev/input/event9" dev="devtmpfs" ino=3315 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1
[  728.559516][ T5864] usb 9-1: new full-speed USB device number 23 using dummy_hcd
[  728.585309][   T29] audit: type=1400 audit(1740898133.602:1362): avc:  denied  { read write } for  pid=12441 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  728.614223][   T29] audit: type=1400 audit(1740898133.602:1363): avc:  denied  { open } for  pid=12441 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  728.645196][   T29] audit: type=1400 audit(1740898133.602:1364): avc:  denied  { ioctl } for  pid=12441 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  728.710670][ T5864] usb 9-1: no configurations
[  728.718852][ T5864] usb 9-1: can't read configurations, error -22
[  728.727198][ T5864] usb usb9-port1: attempt power cycle
[  729.069507][ T5864] usb 9-1: new full-speed USB device number 24 using dummy_hcd
[  729.095174][ T5864] usb 9-1: no configurations
[  729.100003][ T5864] usb 9-1: can't read configurations, error -22
[  729.231594][ T5864] usb 9-1: new full-speed USB device number 25 using dummy_hcd
[  729.243975][T13656] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2057'.
[  729.253584][T13656] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  729.274584][ T5864] usb 9-1: no configurations
[  729.279220][ T5864] usb 9-1: can't read configurations, error -22
[  729.285870][ T5864] usb usb9-port1: unable to enumerate USB device
[  729.549418][T11002] usb 10-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  729.598255][T11002] usb 10-1: USB disconnect, device number 6
[  730.126173][   T29] audit: type=1400 audit(1740898135.142:1365): avc:  denied  { execmod } for  pid=13669 comm="syz.9.2062" path="/dev/sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  730.295851][T13679] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2065'.
[  730.449415][ T5864] usb 1-1: new low-speed USB device number 79 using dummy_hcd
[  730.580179][ T5864] usb 1-1: device descriptor read/64, error -71
[  730.649652][ T5895] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  730.799485][ T5895] usb 5-1: device descriptor read/64, error -71
[  730.819551][ T5864] usb 1-1: new low-speed USB device number 80 using dummy_hcd
[  730.879481][  T902] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  730.959528][ T5864] usb 1-1: device descriptor read/64, error -71
[  731.039647][ T5895] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  731.047315][  T902] usb 10-1: Using ep0 maxpacket: 32
[  731.064550][  T902] usb 10-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  731.074301][ T5864] usb usb1-port1: attempt power cycle
[  731.082773][  T902] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  731.205355][ T5895] usb 5-1: device descriptor read/64, error -71
[  731.398424][  T902] usb 10-1: Product: syz
[  731.452413][ T5895] usb usb5-port1: attempt power cycle
[  731.469950][  T902] usb 10-1: Manufacturer: syz
[  731.474764][  T902] usb 10-1: SerialNumber: syz
[  731.482680][  T902] usb 10-1: config 0 descriptor??
[  731.542506][ T5864] usb 1-1: new low-speed USB device number 81 using dummy_hcd
[  731.569884][ T5864] usb 1-1: device descriptor read/8, error -71
[  731.802872][T13691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  731.819586][ T5895] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  731.827454][ T5864] usb 1-1: new low-speed USB device number 82 using dummy_hcd
[  731.827618][T13691] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  732.032284][ T5895] usb 5-1: device descriptor read/8, error -71
[  732.039199][ T5864] usb 1-1: device descriptor read/8, error -71
[  732.052208][  T902] peak_usb 10-1:0.0 can0: unable to request usb[type=0 value=1] err=-71
[  732.061718][  T902] peak_usb 10-1:0.0: unable to read PCAN-USB Pro firmware info (err -71)
[  732.129781][  T902] peak_usb 10-1:0.0: probe with driver peak_usb failed with error -71
[  732.236456][ T5864] usb usb1-port1: unable to enumerate USB device
[  732.248601][  T902] usb 10-1: USB disconnect, device number 7
[  732.359476][ T5895] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  732.400333][ T5895] usb 5-1: device descriptor read/8, error -71
[  732.514209][ T5895] usb usb5-port1: unable to enumerate USB device
[  732.586515][   T29] audit: type=1400 audit(1740898137.602:1366): avc:  denied  { create } for  pid=13720 comm="syz.5.2077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  732.623943][   T29] audit: type=1400 audit(1740898137.622:1367): avc:  denied  { map } for  pid=13720 comm="syz.5.2077" path="socket:[51217]" dev="sockfs" ino=51217 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  732.647542][   T29] audit: type=1400 audit(1740898137.622:1368): avc:  denied  { read } for  pid=13720 comm="syz.5.2077" path="socket:[51217]" dev="sockfs" ino=51217 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  734.223571][ T5864] usb 9-1: new high-speed USB device number 26 using dummy_hcd
[  734.691691][ T5864] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  734.738777][ T5864] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  735.289869][ T5864] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  735.330740][ T5864] usb 9-1: config 0 descriptor??
[  735.492804][T13752] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2084'.
[  735.782155][ T5864] usbhid 9-1:0.0: can't add hid device: -71
[  735.788300][ T5864] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  735.805541][ T5864] usb 9-1: USB disconnect, device number 26
[  736.024187][T13759] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2085'.
[  736.455616][T13764] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2087'.
[  736.719549][  T902] usb 9-1: new high-speed USB device number 27 using dummy_hcd
[  736.749860][T13766] overlayfs: failed to resolve './file0': -2
[  737.045774][T13773] bio_check_eod: 2 callbacks suppressed
[  737.045811][T13773] syz.9.2089: attempt to access beyond end of device
[  737.045811][T13773] loop19: rw=0, sector=0, nr_sectors = 1 limit=0
[  737.064953][T13773] FAT-fs (loop19): unable to read boot sector
[  737.523911][   T29] audit: type=1400 audit(1740898142.062:1369): avc:  denied  { mounton } for  pid=13767 comm="syz.9.2089" path="/19/file0" dev="tmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  737.575750][  T902] usb 9-1: device descriptor read/all, error -71
[  737.614942][   T29] audit: type=1400 audit(1740898142.632:1370): avc:  denied  { ioctl } for  pid=13776 comm="syz.8.2092" path="socket:[50373]" dev="sockfs" ino=50373 ioctlcmd=0x89e5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  738.150664][   T29] audit: type=1400 audit(1740898143.082:1371): avc:  denied  { read } for  pid=13779 comm="syz.9.2093" path="socket:[50387]" dev="sockfs" ino=50387 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  738.865073][   T29] audit: type=1326 audit(1740898143.272:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13779 comm="syz.9.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ad98d169 code=0x7fc00000
[  738.995377][   T29] audit: type=1326 audit(1740898143.272:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13779 comm="syz.9.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f89ad98d169 code=0x7fc00000
[  739.076647][   T29] audit: type=1326 audit(1740898143.272:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13779 comm="syz.9.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ad98d169 code=0x7fc00000
[  739.148508][   T29] audit: type=1326 audit(1740898143.272:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13779 comm="syz.9.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ad98d169 code=0x7fc00000
[  739.216019][   T29] audit: type=1326 audit(1740898143.272:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13779 comm="syz.9.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ad98d169 code=0x7fc00000
[  739.284849][   T29] audit: type=1326 audit(1740898143.272:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13779 comm="syz.9.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ad98d169 code=0x7fc00000
[  739.363673][   T29] audit: type=1326 audit(1740898143.272:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13779 comm="syz.9.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ad98d169 code=0x7fc00000
[  739.409478][   T29] audit: type=1326 audit(1740898143.272:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13779 comm="syz.9.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ad98d169 code=0x7fc00000
[  739.525382][T13805] sp0: Synchronizing with TNC
[  740.229538][ T9921] usb 1-1: new high-speed USB device number 83 using dummy_hcd
[  740.419591][ T9921] usb 1-1: Using ep0 maxpacket: 32
[  740.427683][ T9921] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[  740.444172][ T9921] usb 1-1: config 0 has no interface number 0
[  740.474095][ T9921] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  740.493606][ T9921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  740.666912][ T5867] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  740.676029][ T9921] usb 1-1: Product: syz
[  740.681415][ T9921] usb 1-1: Manufacturer: syz
[  740.687107][ T9921] usb 1-1: SerialNumber: syz
[  741.056602][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  741.496276][ T9921] usb 1-1: config 0 descriptor??
[  741.496480][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  741.496506][ T5867] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  741.496608][ T5867] usb 5-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00
[  741.496631][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  741.500291][ T9921] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  741.502047][ T5867] usb 5-1: config 0 descriptor??
[  741.748924][ T9921] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  741.779989][ T9921] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  741.950423][ T5867] dragonrise 0003:0079:0011.001F: invalid report_count -326368751
[  741.960440][ T5867] dragonrise 0003:0079:0011.001F: item 0 4 1 9 parsing failed
[  741.969102][ T5867] dragonrise 0003:0079:0011.001F: parse failed
[  742.149518][ T5867] dragonrise 0003:0079:0011.001F: probe with driver dragonrise failed with error -22
[  742.163109][ T5867] usb 5-1: USB disconnect, device number 47
[  742.175617][    C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[  742.185631][ T9921] usb 1-1: USB disconnect, device number 83
[  742.261136][T13845] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  742.768763][ T9921] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  742.804241][ T9921] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  742.834845][ T9921] quatech2 1-1:0.51: device disconnected
[  742.933022][T11054] Bluetooth: hci3: unexpected event 0x03 length: 17 > 11
[  743.609097][T13867] FAULT_INJECTION: forcing a failure.
[  743.609097][T13867] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  743.630290][T13867] CPU: 0 UID: 0 PID: 13867 Comm: syz.0.2118 Not tainted 6.14.0-rc4-syzkaller-00248-g03d38806a902 #0
[  743.630314][T13867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  743.630324][T13867] Call Trace:
[  743.630330][T13867]  <TASK>
[  743.630336][T13867]  dump_stack_lvl+0x16c/0x1f0
[  743.630370][T13867]  should_fail_ex+0x50a/0x650
[  743.630396][T13867]  ? __pfx___might_resched+0x10/0x10
[  743.630426][T13867]  should_fail_alloc_page+0xe7/0x130
[  743.630449][T13867]  prepare_alloc_pages.constprop.0+0x16f/0x560
[  743.630480][T13867]  __alloc_frozen_pages_noprof+0x18e/0x2470
[  743.630503][T13867]  ? hlock_class+0x4e/0x130
[  743.630521][T13867]  ? __lock_acquire+0xcc5/0x3c40
[  743.630549][T13867]  ? find_held_lock+0x2d/0x110
[  743.630567][T13867]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  743.630589][T13867]  ? __might_fault+0x13b/0x190
[  743.630609][T13867]  ? __pfx_lock_release+0x10/0x10
[  743.630631][T13867]  ? trace_lock_acquire+0x14e/0x1f0
[  743.630654][T13867]  ? lock_acquire+0x2f/0xb0
[  743.630676][T13867]  ? __might_fault+0xe3/0x190
[  743.630697][T13867]  ? __might_fault+0xe3/0x190
[  743.630718][T13867]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  743.630747][T13867]  ? policy_nodemask+0xea/0x4e0
[  743.630770][T13867]  alloc_pages_mpol+0x1fc/0x540
[  743.630790][T13867]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  743.630812][T13867]  ? __virt_addr_valid+0x5e/0x590
[  743.630829][T13867]  ? __phys_addr+0xc6/0x150
[  743.630849][T13867]  alloc_pages_noprof+0x131/0x390
[  743.630869][T13867]  af_alg_sendmsg+0xff7/0x2a70
[  743.630905][T13867]  ? __pfx_af_alg_sendmsg+0x10/0x10
[  743.630933][T13867]  ? __might_fault+0xe3/0x190
[  743.630953][T13867]  ? __might_fault+0xe3/0x190
[  743.630981][T13867]  ____sys_sendmsg+0xaaf/0xc90
[  743.631001][T13867]  ? __pfx_____sys_sendmsg+0x10/0x10
[  743.631017][T13867]  ? __lock_acquire+0xcc5/0x3c40
[  743.631052][T13867]  ___sys_sendmsg+0x135/0x1e0
[  743.631077][T13867]  ? __pfx____sys_sendmsg+0x10/0x10
[  743.631112][T13867]  ? trace_lock_acquire+0x14e/0x1f0
[  743.631150][T13867]  __sys_sendmmsg+0x201/0x420
[  743.631177][T13867]  ? __pfx___sys_sendmmsg+0x10/0x10
[  743.631210][T13867]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  743.631242][T13867]  ? __pfx_native_tss_update_io_bitmap+0x10/0x10
[  743.631269][T13867]  ? ksys_write+0x1ba/0x250
[  743.631296][T13867]  ? __pfx_ksys_write+0x10/0x10
[  743.631326][T13867]  __x64_sys_sendmmsg+0x9c/0x100
[  743.631355][T13867]  ? lockdep_hardirqs_on+0x7c/0x110
[  743.631375][T13867]  do_syscall_64+0xcd/0x250
[  743.631399][T13867]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  743.631422][T13867] RIP: 0033:0x7f0c6458d169
[  743.631437][T13867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  743.631453][T13867] RSP: 002b:00007f0c65400038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  743.631470][T13867] RAX: ffffffffffffffda RBX: 00007f0c647a6160 RCX: 00007f0c6458d169
[  743.631481][T13867] RDX: 04924924924924b9 RSI: 0000400000000400 RDI: 000000000000000a
[  743.631492][T13867] RBP: 00007f0c65400090 R08: 0000000000000000 R09: 0000000000000000
[  743.631503][T13867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  743.631512][T13867] R13: 0000000000000000 R14: 00007f0c647a6160 R15: 00007fff6fe2a278
[  743.631536][T13867]  </TASK>
[  744.163358][   T29] kauditd_printk_skb: 59 callbacks suppressed
[  744.163378][   T29] audit: type=1400 audit(1740898149.182:1439): avc:  denied  { create } for  pid=13861 comm="syz.9.2119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  744.189098][    C1] vkms_vblank_simulate: vblank timer overrun
[  744.273013][   T29] audit: type=1400 audit(1740898149.242:1440): avc:  denied  { connect } for  pid=13861 comm="syz.9.2119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  744.981700][T11054] Bluetooth: hci3: command 0x0c1a tx timeout
[  745.449410][T11054] Bluetooth: hci2: ISO packet for unknown connection handle 0
[  745.638218][T13885] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2125'.
[  745.768741][T13889] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[  746.030657][   T29] audit: type=1400 audit(1740898150.992:1441): avc:  denied  { setopt } for  pid=13882 comm="syz.4.2124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  746.171400][   T29] audit: type=1400 audit(1740898151.082:1442): avc:  denied  { accept } for  pid=13882 comm="syz.4.2124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  746.411259][   T29] audit: type=1400 audit(1740898151.422:1443): avc:  denied  { getopt } for  pid=13895 comm="syz.5.2129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  746.950176][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  746.978762][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  747.059838][T11054] Bluetooth: hci3: command 0x0c1a tx timeout
[  747.471890][T13904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2130'.
[  747.480903][T13904] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2130'.
[  747.581221][T13905] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2130'.
[  748.920721][T11054] Bluetooth: hci2: ISO packet for unknown connection handle 0
[  749.355011][T13931] gre1: entered promiscuous mode
[  749.360566][T13931] gre1: entered allmulticast mode
[  749.495502][T13932] xt_CT: You must specify a L4 protocol and not use inversions on it
[  749.521825][T11261] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  749.592037][   T29] audit: type=1400 audit(1740898154.212:1444): avc:  denied  { ioctl } for  pid=13917 comm="syz.9.2136" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  749.830141][T11261] usb 5-1: config 1 has an invalid descriptor of length 43, skipping remainder of the config
[  749.849501][T11261] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  749.869127][T11261] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  749.883990][T11261] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  749.893188][T11261] usb 5-1: SerialNumber: syz
[  749.900336][T13940] netdevsim netdevsim5: Direct firmware load for 
 failed with error -2
[  749.909505][T13940] netdevsim netdevsim5: Falling back to sysfs fallback for: 

[  750.059387][ T5866] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  750.108766][T11261] usb 5-1: 0:2 : does not exist
[  750.119473][T11261] usb 5-1: unit 5 not found!
[  750.134562][T11261] usb 5-1: USB disconnect, device number 48
[  750.219374][ T5866] usb 10-1: Using ep0 maxpacket: 16
[  750.236694][ T5866] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  750.257194][ T5866] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[  750.271963][ T5866] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  750.289529][ T5866] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  750.297671][ T5866] usb 10-1: Product: syz
[  750.309361][ T5866] usb 10-1: Manufacturer: syz
[  750.314108][ T5866] usb 10-1: SerialNumber: syz
[  750.904387][ T5866] usb 10-1: cannot find UAC_HEADER
[  750.947948][ T5866] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22
[  751.007677][T13938] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x2
[  751.028191][ T5895] usb 10-1: USB disconnect, device number 8
[  751.451706][   T29] audit: type=1326 audit(1740898156.462:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13956 comm="syz.5.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa699b8d169 code=0x7ffc0000
[  752.048538][   T29] audit: type=1326 audit(1740898156.462:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13956 comm="syz.5.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa699b8d169 code=0x7ffc0000
[  752.119397][   T29] audit: type=1326 audit(1740898156.462:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13956 comm="syz.5.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa699b8d169 code=0x7ffc0000
[  752.213989][   T29] audit: type=1326 audit(1740898156.462:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13956 comm="syz.5.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa699b8d169 code=0x7ffc0000
[  752.285023][   T29] audit: type=1326 audit(1740898156.462:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13956 comm="syz.5.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa699b8d169 code=0x7ffc0000
[  752.809687][ T5867] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  752.971039][ T5867] usb 10-1: Using ep0 maxpacket: 8
[  753.008275][ T5867] usb 10-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  753.117404][ T5867] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  753.223646][ T5867] usb 10-1: Product: syz
[  753.277674][ T5867] usb 10-1: Manufacturer: syz
[  753.331957][ T5867] usb 10-1: SerialNumber: syz
[  753.392977][ T5867] usb 10-1: config 0 descriptor??
[  753.458058][ T5867] gspca_main: se401-2.14.0 probing 047d:5003
[  753.875103][ T5867] gspca_se401: ExtraFeatures: 110
[  754.267463][ T5867] input: se401 as /devices/platform/dummy_hcd.9/usb10/10-1/input/input63
[  754.269585][  T902] usb 1-1: new high-speed USB device number 84 using dummy_hcd
[  754.364505][   T29] audit: type=1800 audit(1740898159.382:1450): pid=13968 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.2152" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  754.559417][  T902] usb 1-1: Using ep0 maxpacket: 32
[  754.567155][  T902] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  755.192972][  T902] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  755.213030][  T902] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  755.228273][  T902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  755.239424][ T5932] usb 5-1: new full-speed USB device number 49 using dummy_hcd
[  755.248129][  T902] usb 1-1: config 0 descriptor??
[  755.257810][  T902] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  755.401066][ T5932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  755.450293][ T5932] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  755.463924][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  755.477058][ T5932] usb 5-1: config 0 descriptor??
[  755.488544][T13996] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  755.629970][T14017] netlink: 'syz.5.2167': attribute type 9 has an invalid length.
[  755.965620][ T5932] usbhid 5-1:0.0: can't add hid device: -71
[  755.978016][ T5932] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  756.002778][ T5932] usb 5-1: USB disconnect, device number 49
[  756.635524][ T9696] usb 10-1: USB disconnect, device number 9
[  757.129518][ T9696] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  757.339432][ T9696] usb 10-1: device descriptor read/64, error -71
[  757.599734][ T9696] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[  757.740969][T14037] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  757.760712][T14037] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  757.790510][T14037] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  757.805139][T14037] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  757.822249][ T5866] usb 1-1: USB disconnect, device number 84
[  757.840505][T14037] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  757.853126][T14037] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  757.863775][T14037] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  757.872002][T14037] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  757.882275][ T9696] usb 10-1: device descriptor read/64, error -71
[  757.932485][T14037] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  757.948099][T14037] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  757.991434][T14037] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  758.000804][ T9696] usb usb10-port1: attempt power cycle
[  758.075594][T14037] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  758.160571][T14052] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2177'.
[  758.440118][   T29] audit: type=1400 audit(1740898163.372:1451): avc:  denied  { getopt } for  pid=14048 comm="syz.4.2177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  758.460022][ T9696] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[  758.500112][ T9696] usb 10-1: device descriptor read/8, error -71
[  758.809813][ T9696] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[  758.860355][ T9696] usb 10-1: device descriptor read/8, error -71
[  758.909407][ T5867] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  759.008939][ T9696] usb usb10-port1: unable to enumerate USB device
[  759.079555][ T5867] usb 5-1: Using ep0 maxpacket: 8
[  759.093067][ T5867] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  759.110035][ T5867] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d
[  759.121984][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105
[  759.152129][ T5867] usb 5-1: SerialNumber: syz
[  759.154874][T14060] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app
[  759.175344][T14058] tmpfs: Unknown parameter ''
[  759.182508][ T5867] usb 5-1: config 0 descriptor??
[  759.324898][T14063] SELinux:  Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped).
[  759.341058][   T29] audit: type=1400 audit(1740898164.352:1452): avc:  denied  { relabelto } for  pid=14062 comm="syz.8.2180" name="file0" dev="tmpfs" ino=798 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:mouse_device_t:s0"
[  759.384065][   T29] audit: type=1400 audit(1740898164.352:1453): avc:  denied  { associate } for  pid=14062 comm="syz.8.2180" name="file0" dev="tmpfs" ino=798 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:mouse_device_t:s0"
[  759.563350][T14065] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=14065 comm=syz.8.2181
[  759.755387][   T29] audit: type=1400 audit(1740898164.772:1454): avc:  denied  { getopt } for  pid=14070 comm="syz.5.2184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  759.918204][   T29] audit: type=1400 audit(1740898164.932:1455): avc:  denied  { read } for  pid=14064 comm="syz.8.2181" name="file0" dev="tmpfs" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  760.376609][T14077] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2186'.
[  761.028418][ T5867] usb 5-1: USB disconnect, device number 50
[  762.569522][ T5867] usb 1-1: new high-speed USB device number 85 using dummy_hcd
[  762.588105][T14123] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2199'.
[  762.687270][   T29] audit: type=1400 audit(1740898167.702:1456): avc:  denied  { getopt } for  pid=14125 comm="syz.5.2200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  762.750832][ T5867] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  762.764696][ T5867] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  762.791954][ T5867] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  762.814606][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  762.845337][T14113] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  762.855286][ T5867] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  763.065557][ T5932] usb 1-1: USB disconnect, device number 85
[  765.449078][   T29] audit: type=1400 audit(1740898170.462:1457): avc:  denied  { append } for  pid=14149 comm="syz.0.2207" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  765.579501][   T29] audit: type=1400 audit(1740898170.462:1458): avc:  denied  { setopt } for  pid=14151 comm="syz.5.2206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  765.837814][   T29] audit: type=1400 audit(1740898170.852:1459): avc:  denied  { accept } for  pid=14165 comm="syz.9.2210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  765.992684][T14168] sp0: Synchronizing with TNC
[  766.018055][T14168] [U] è
[  766.685135][T14187] input: syz1 as /devices/virtual/input/input64
[  768.243883][   T29] audit: type=1400 audit(1740898173.262:1460): avc:  denied  { getopt } for  pid=14208 comm="syz.0.2223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  768.882050][T14229] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2228'.
[  770.908170][T14256] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[  771.721884][T14269] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2241'.
[  772.863417][T14291] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2249'.
[  776.040672][ T9921] usb 1-1: new high-speed USB device number 86 using dummy_hcd
[  776.498125][T14337] SET target dimension over the limit!
[  776.709425][ T9921] usb 1-1: Using ep0 maxpacket: 16
[  776.745352][ T9921] usb 1-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=6c.de
[  776.769599][ T9921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  776.799191][ T9921] usb 1-1: Product: syz
[  776.810062][ T9921] usb 1-1: Manufacturer: syz
[  776.815503][ T9921] usb 1-1: SerialNumber: syz
[  776.836583][ T9921] usb 1-1: config 0 descriptor??
[  776.847464][ T9921] ems_usb 1-1:0.0 (unnamed net_device) (uninitialized): couldn't initialize controller: -22
[  776.870500][ T9921] ems_usb 1-1:0.0: probe with driver ems_usb failed with error -22
[  777.042282][T14337] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2264'.
[  777.059497][ T5866] usb 9-1: new high-speed USB device number 29 using dummy_hcd
[  777.075624][ T9921] usb 1-1: USB disconnect, device number 86
[  777.319782][ T5866] usb 9-1: device descriptor read/64, error -71
[  777.943963][ T5867] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[  778.009332][ T5866] usb 9-1: new high-speed USB device number 30 using dummy_hcd
[  778.149508][ T5867] usb 10-1: device descriptor read/64, error -71
[  778.190017][ T5866] usb 9-1: device descriptor read/64, error -71
[  778.299689][ T5866] usb usb9-port1: attempt power cycle
[  778.329568][ T9921] usb 5-1: new full-speed USB device number 51 using dummy_hcd
[  778.399401][ T5867] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[  778.699868][ T5866] usb 9-1: new high-speed USB device number 31 using dummy_hcd
[  778.730538][ T5867] usb 10-1: device descriptor read/64, error -71
[  778.809042][ T9921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  778.820234][ T9921] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  778.832464][ T9921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  778.840806][ T5866] usb 9-1: device descriptor read/8, error -71
[  778.851587][ T9921] usb 5-1: config 0 descriptor??
[  778.859827][T14361] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  778.889826][ T5867] usb usb10-port1: attempt power cycle
[  779.081710][ T9921] usbhid 5-1:0.0: can't add hid device: -71
[  779.087929][ T9921] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  779.099470][ T5866] usb 9-1: new high-speed USB device number 32 using dummy_hcd
[  779.111237][ T9921] usb 5-1: USB disconnect, device number 51
[  779.129803][ T5866] usb 9-1: device descriptor read/8, error -71
[  779.239469][ T5867] usb 10-1: new high-speed USB device number 16 using dummy_hcd
[  779.247397][ T5866] usb usb9-port1: unable to enumerate USB device
[  779.271581][ T5867] usb 10-1: device descriptor read/8, error -71
[  780.009933][ T5867] usb 10-1: new high-speed USB device number 17 using dummy_hcd
[  780.074717][ T5867] usb 10-1: device descriptor read/8, error -71
[  780.204127][ T5867] usb usb10-port1: unable to enumerate USB device
[  780.931558][T14390] all (unregistering): Released all slaves
[  781.033719][   T29] audit: type=1400 audit(1740898186.052:1461): avc:  denied  { map } for  pid=14397 comm="syz.4.2283" path="socket:[53637]" dev="sockfs" ino=53637 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  781.115827][T14402] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[  781.597768][T14410] netdevsim netdevsim5: Direct firmware load for .
[  781.597768][T14410]  failed with error -2
[  781.608925][T14410] netdevsim netdevsim5: Falling back to sysfs fallback for: .
[  781.608925][T14410] 
[  781.713169][   T29] audit: type=1400 audit(1740898186.732:1462): avc:  denied  { write } for  pid=14417 comm="syz.4.2288" name="usbmon8" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  781.791908][T14416] xt_SECMARK: invalid security context 'unconfined'
[  781.807093][   T29] audit: type=1400 audit(1740898186.732:1463): avc:  denied  { ioctl } for  pid=14417 comm="syz.4.2288" path="/dev/usbmon8" dev="devtmpfs" ino=745 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  782.259431][ T9696] usb 1-1: new full-speed USB device number 87 using dummy_hcd
[  782.269451][  T902] usb 9-1: new high-speed USB device number 33 using dummy_hcd
[  782.599597][  T902] usb 9-1: Using ep0 maxpacket: 32
[  782.649396][ T9696] usb 1-1: config 0 has an invalid interface number: 207 but max is 0
[  782.684166][ T9696] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  782.696058][  T902] usb 9-1: config 1 has an invalid interface number: 112 but max is 0
[  782.708653][  T902] usb 9-1: config 1 has no interface number 0
[  782.733092][ T9696] usb 1-1: config 0 has no interface number 0
[  782.791959][  T902] usb 9-1: config 1 interface 112 has no altsetting 0
[  782.839826][ T9696] usb 1-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd
[  782.890171][  T902] usb 9-1: New USB device found, idVendor=2639, idProduct=0013, bcdDevice=c8.8f
[  782.934992][ T9696] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  782.960135][  T902] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  782.968241][  T902] usb 9-1: Product: syz
[  782.969442][ T5866] usb 10-1: new full-speed USB device number 18 using dummy_hcd
[  782.980276][  T902] usb 9-1: Manufacturer: syz
[  782.980322][  T902] usb 9-1: SerialNumber: syz
[  782.981163][ T9696] usb 1-1: Product: syz
[  783.014045][ T9696] usb 1-1: Manufacturer: syz
[  783.020914][ T9696] usb 1-1: SerialNumber: syz
[  783.028512][ T9696] usb 1-1: config 0 descriptor??
[  783.036332][ T9696] qmi_wwan 1-1:0.207: bogus CDC Union: master=0, slave=0
[  783.043748][ T9696] qmi_wwan 1-1:0.207: probe with driver qmi_wwan failed with error -22
[  783.232389][  T902] usb 9-1: USB disconnect, device number 33
[  783.791302][ T5866] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  783.802539][ T5866] usb 10-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  783.816103][ T5866] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  783.832912][ T5866] usb 10-1: config 0 descriptor??
[  783.925749][T14433] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22
[  783.943377][T14443] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=281 sclass=netlink_route_socket pid=14443 comm=syz.0.2289
[  784.038816][T14448] input: syz0 as /devices/virtual/input/input69
[  784.175445][ T5866] usbhid 10-1:0.0: can't add hid device: -71
[  784.190511][ T5866] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[  784.208616][ T5866] usb 10-1: USB disconnect, device number 18
[  784.215856][   T29] audit: type=1400 audit(1740898189.232:1464): avc:  denied  { mount } for  pid=14458 comm="syz.5.2300" name="/" dev="ocfs2_dlmfs" ino=53744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  784.251828][ T9921] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  784.560751][ T5867] usb 1-1: USB disconnect, device number 87
[  784.570672][ T9921] usb 5-1: Using ep0 maxpacket: 16
[  784.615376][ T9921] usb 5-1: New USB device found, idVendor=0456, idProduct=f000, bcdDevice=f3.7f
[  784.625152][ T9921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  784.633258][ T9921] usb 5-1: Product: syz
[  784.637509][ T9921] usb 5-1: Manufacturer: syz
[  784.642236][ T9921] usb 5-1: SerialNumber: syz
[  784.647913][ T9921] usb 5-1: config 0 descriptor??
[  784.654379][ T9921] ftdi_sio 5-1:0.0: Ignoring interface reserved for JTAG
[  785.176590][T12729] Bluetooth: (null): Invalid header checksum
[  785.199162][   T29] audit: type=1400 audit(1740898190.212:1465): avc:  denied  { ioctl } for  pid=14444 comm="syz.4.2297" path="socket:[53756]" dev="sockfs" ino=53756 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  785.209383][T12729] Bluetooth: (null): Invalid header checksum
[  785.229490][ T9696] usb 5-1: USB disconnect, device number 52
[  785.234586][T12729] Bluetooth: (null): Invalid header checksum
[  785.242613][T12729] Bluetooth: (null): Invalid header checksum
[  785.248738][T12729] Bluetooth: (null): Invalid header checksum
[  785.259493][T12729] Bluetooth: (null): Invalid header checksum
[  785.265736][T12729] Bluetooth: (null): Invalid header checksum
[  786.085106][   T29] audit: type=1400 audit(1740898191.102:1466): avc:  denied  { write } for  pid=14475 comm="syz.9.2306" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  786.370226][   T29] audit: type=1400 audit(1740898191.392:1467): avc:  denied  { write } for  pid=14484 comm="syz.8.2310" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  788.553241][ T5867] usb 10-1: new high-speed USB device number 19 using dummy_hcd
[  789.359715][ T5867] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  789.690275][ T5867] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[  789.713098][ T5867] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  789.743501][ T5867] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  789.757925][ T5867] usb 10-1: SerialNumber: syz
[  790.107497][ T5867] usb 10-1: 0:2 : does not exist
[  790.132032][ T5867] usb 10-1: unit 5: unexpected type 0x0d
[  790.178960][ T5867] usb 10-1: USB disconnect, device number 19
[  790.349625][T14539] ceph: No mds server is up or the cluster is laggy
[  790.357636][ T5932] libceph: connect (1)[c::]:6789 error -101
[  790.364036][ T5932] libceph: mon0 (1)[c::]:6789 connect error
[  790.499592][   T29] audit: type=1400 audit(1740898195.512:1468): avc:  denied  { getopt } for  pid=14543 comm="syz.5.2326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  790.622599][   T29] audit: type=1400 audit(1740898195.512:1469): avc:  denied  { ioctl } for  pid=14543 comm="syz.5.2326" path="socket:[53903]" dev="sockfs" ino=53903 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  790.722739][   T29] audit: type=1400 audit(1740898195.542:1470): avc:  denied  { setopt } for  pid=14543 comm="syz.5.2326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  791.074188][T14563] veth0_to_bond: entered promiscuous mode
[  791.082517][T14563] veth0_to_bond: left promiscuous mode
[  791.089753][   T29] audit: type=1400 audit(1740898196.092:1471): avc:  denied  { bind } for  pid=14560 comm="syz.4.2333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  791.438136][T14566] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2330'.
[  791.621210][   T29] audit: type=1400 audit(1740898196.642:1472): avc:  denied  { getopt } for  pid=14577 comm="syz.9.2337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  791.712910][T14580] tmpfs: Unknown parameter ''
[  794.697706][T14622] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6)
[  794.704269][T14622] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  794.722164][T14622] vhci_hcd vhci_hcd.0: Device attached
[  794.739125][   T29] audit: type=1400 audit(1740898199.752:1473): avc:  denied  { listen } for  pid=14621 comm="syz.9.2351" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  794.750259][T14624] vhci_hcd: connection closed
[  794.820378][T12746] vhci_hcd: stop threads
[  794.853754][T12746] vhci_hcd: release socket
[  794.858223][T12746] vhci_hcd: disconnect device
[  795.913733][T14643] FAULT_INJECTION: forcing a failure.
[  795.913733][T14643] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  795.926928][T14643] CPU: 0 UID: 0 PID: 14643 Comm: syz.4.2355 Not tainted 6.14.0-rc4-syzkaller-00248-g03d38806a902 #0
[  795.926952][T14643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  795.926963][T14643] Call Trace:
[  795.926970][T14643]  <TASK>
[  795.926977][T14643]  dump_stack_lvl+0x16c/0x1f0
[  795.927004][T14643]  should_fail_ex+0x50a/0x650
[  795.927034][T14643]  _copy_from_user+0x2e/0xd0
[  795.927053][T14643]  move_addr_to_kernel+0x68/0x160
[  795.927081][T14643]  __sys_connect+0xb0/0x170
[  795.927101][T14643]  ? __pfx___sys_connect+0x10/0x10
[  795.927131][T14643]  ? __pfx_ksys_write+0x10/0x10
[  795.927163][T14643]  __x64_sys_connect+0x72/0xb0
[  795.927182][T14643]  ? lockdep_hardirqs_on+0x7c/0x110
[  795.927203][T14643]  do_syscall_64+0xcd/0x250
[  795.927227][T14643]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  795.927251][T14643] RIP: 0033:0x7f8198b8d169
[  795.927265][T14643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  795.927282][T14643] RSP: 002b:00007f81969f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  795.927299][T14643] RAX: ffffffffffffffda RBX: 00007f8198da6160 RCX: 00007f8198b8d169
[  795.927311][T14643] RDX: 0000000000000060 RSI: 0000400000000000 RDI: 0000000000000007
[  795.927322][T14643] RBP: 00007f81969f6090 R08: 0000000000000000 R09: 0000000000000000
[  795.927332][T14643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  795.927343][T14643] R13: 0000000000000000 R14: 00007f8198da6160 R15: 00007ffe91fac2a8
[  795.927365][T14643]  </TASK>
[  796.084939][    C0] vkms_vblank_simulate: vblank timer overrun
[  796.362175][T14645] netlink: 'syz.8.2356': attribute type 10 has an invalid length.
[  796.373188][T14645] veth1_vlan: entered allmulticast mode
[  796.418147][T14645] team0: Device veth1_vlan failed to register rx_handler
[  797.879456][ T9921] usb 10-1: new full-speed USB device number 20 using dummy_hcd
[  798.853146][   T29] audit: type=1804 audit(1740898203.542:1474): pid=14668 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.2363" name="cgroup.controllers" dev="tmpfs" ino=862 res=1 errno=0
[  799.649326][   T29] audit: type=1800 audit(1740898203.552:1475): pid=14668 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.2363" name="cgroup.controllers" dev="tmpfs" ino=862 res=0 errno=0
[  799.890388][T14676] veth0_to_bond: entered promiscuous mode
[  799.930471][T14676] veth0_to_bond: left promiscuous mode
[  800.038397][ T9921] usb 10-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  800.081212][T11002] usb 1-1: new high-speed USB device number 88 using dummy_hcd
[  800.102732][ T9921] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  800.116183][ T9921] usb 10-1: config 0 descriptor??
[  800.239660][T11002] usb 1-1: device descriptor read/64, error -71
[  800.479423][T11002] usb 1-1: new high-speed USB device number 89 using dummy_hcd
[  800.609491][T11002] usb 1-1: device descriptor read/64, error -71
[  800.756154][T11002] usb usb1-port1: attempt power cycle
[  800.849488][  T972] usb 9-1: new high-speed USB device number 34 using dummy_hcd
[  801.014407][T14680] Illegal XDP return value 4294967274 on prog  (id 412) dev N/A, expect packet loss!
[  801.073748][  T972] usb 9-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00
[  801.084417][  T972] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  801.096209][  T972] usb 9-1: config 0 descriptor??
[  801.149439][T11002] usb 1-1: new high-speed USB device number 90 using dummy_hcd
[  801.176965][T11002] usb 1-1: device descriptor read/8, error -71
[  801.496430][T11002] usb 1-1: new high-speed USB device number 91 using dummy_hcd
[  801.540431][T11002] usb 1-1: device descriptor read/8, error -71
[  801.931643][T11002] usb usb1-port1: unable to enumerate USB device
[  802.319401][  T972] gembird 0003:11FF:3331.0020: hidraw0: USB HID v1.01 Device [HID 11ff:3331] on usb-dummy_hcd.8-1/input0
[  802.413883][  T972] usb 9-1: USB disconnect, device number 34
[  802.518382][   T29] audit: type=1400 audit(1740898207.512:1476): avc:  denied  { accept } for  pid=14702 comm="syz.4.2374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  802.546073][ T9921] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[  802.596313][ T9921] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  802.609384][ T9921] [drm:udl_init] *ERROR* Selecting channel failed
[  802.636573][ T9921] [drm] Initialized udl 0.0.1 for 10-1:0.0 on minor 2
[  802.643689][ T9921] [drm] Initialized udl on minor 2
[  802.656006][ T9921] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  802.673889][ T9921] udl 10-1:0.0: [drm] Cannot find any crtc or sizes
[  802.690322][T11261] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  802.700825][ T9921] usb 10-1: USB disconnect, device number 20
[  802.713748][T11261] udl 10-1:0.0: [drm] Cannot find any crtc or sizes
[  804.371773][T14735] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2384'.
[  805.447043][T14751] netlink: 1296 bytes leftover after parsing attributes in process `syz.8.2389'.
[  805.456274][T14751] openvswitch: netlink: Flow key attr not present in new flow.
[  805.568736][T14750] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  806.463272][   T29] audit: type=1400 audit(1740898211.452:1477): avc:  denied  { create } for  pid=14764 comm="syz.9.2393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[  806.492332][T14765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  806.503116][T14765] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  806.749987][T11261] usb 10-1: new high-speed USB device number 21 using dummy_hcd
[  807.149495][T11261] usb 10-1: Using ep0 maxpacket: 16
[  807.270291][T11261] usb 10-1: config 1 interface 0 has no altsetting 0
[  807.798884][T11261] usb 10-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.40
[  807.808320][T11261] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  807.816498][T11261] usb 10-1: Product: à°‡
[  807.820864][T11261] usb 10-1: Manufacturer: М
[  807.825496][T11261] usb 10-1: SerialNumber: Ї
[  807.833640][T11261] usb 10-1: rejected 1 configuration due to insufficient available bus power
[  807.859402][T11261] usb 10-1: no configuration chosen from 1 choice
[  808.470001][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  808.477308][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  809.069215][   T29] audit: type=1326 audit(1740898214.082:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14787 comm="syz.8.2399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577258d169 code=0x7ffc0000
[  809.102081][   T29] audit: type=1326 audit(1740898214.082:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14787 comm="syz.8.2399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577258d169 code=0x7ffc0000
[  809.126118][   T29] audit: type=1326 audit(1740898214.112:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14787 comm="syz.8.2399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f577258d169 code=0x7ffc0000
[  809.149931][   T29] audit: type=1326 audit(1740898214.112:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14787 comm="syz.8.2399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577258d169 code=0x7ffc0000
[  809.217455][   T29] audit: type=1326 audit(1740898214.112:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14787 comm="syz.8.2399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577258d169 code=0x7ffc0000
[  809.902652][   T29] audit: type=1326 audit(1740898214.112:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14787 comm="syz.8.2399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f577258d169 code=0x7ffc0000
[  809.926331][   T29] audit: type=1326 audit(1740898214.112:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14787 comm="syz.8.2399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577258d169 code=0x7ffc0000
[  809.969399][   T29] audit: type=1326 audit(1740898214.112:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14787 comm="syz.8.2399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577258d169 code=0x7ffc0000
[  810.012943][T11002] usb 10-1: USB disconnect, device number 21
[  810.133320][   T29] audit: type=1326 audit(1740898214.112:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14787 comm="syz.8.2399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f577258d169 code=0x7ffc0000
[  810.136541][T14796] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  811.247268][ T5864] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  811.509394][ T5864] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  811.915740][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  812.073737][ T5864] usb 5-1: Product: syz
[  812.108170][ T5864] usb 5-1: Manufacturer: syz
[  812.113008][ T5864] usb 5-1: SerialNumber: syz
[  812.127172][ T5864] r8152-cfgselector 5-1: Unknown version 0x0000
[  812.134754][ T5864] r8152-cfgselector 5-1: config 0 descriptor??
[  812.339492][T11261] usb 10-1: new high-speed USB device number 22 using dummy_hcd
[  812.574497][T14805] @: renamed from vlan0 (while UP)
[  812.579564][T11261] usb 10-1: Using ep0 maxpacket: 32
[  812.588710][T11261] usb 10-1: config 0 has an invalid interface number: 51 but max is 0
[  812.598993][T11261] usb 10-1: config 0 has no interface number 0
[  812.600756][T14840] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2415'.
[  812.607918][T11261] usb 10-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  812.627496][T11261] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  812.636704][T11261] usb 10-1: Product: syz
[  812.644001][T11261] usb 10-1: Manufacturer: syz
[  812.650738][T11261] usb 10-1: SerialNumber: syz
[  812.658087][T11261] usb 10-1: config 0 descriptor??
[  812.667717][T11261] quatech2 10-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  812.826816][ T9921] r8152-cfgselector 5-1: USB disconnect, device number 53
[  812.873689][T11261] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  812.886244][T11261] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  813.095705][    C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 6
[  813.312560][    C0] usb 10-1: qt2_read_bulk_callback - non-zero urb status: -71
[  813.312857][ T5864] usb 10-1: USB disconnect, device number 22
[  813.371626][ T5864] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  813.403208][ T5864] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  813.415017][ T5864] quatech2 10-1:0.51: device disconnected
[  813.699421][ T9921] usb 9-1: new high-speed USB device number 35 using dummy_hcd
[  813.849501][ T9921] usb 9-1: Using ep0 maxpacket: 16
[  813.952179][ T9921] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  813.965737][ T9921] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  813.978437][ T9921] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  813.990937][ T9921] usb 9-1: config 0 descriptor??
[  814.444956][T14855] Bluetooth: MGMT ver 1.23
[  814.471969][ T9921] usbhid 9-1:0.0: can't add hid device: -71
[  814.479213][ T9921] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  814.495830][ T9921] usb 9-1: USB disconnect, device number 35
[  814.594081][T14872] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2426'.
[  815.198160][   T29] kauditd_printk_skb: 29 callbacks suppressed
[  815.198177][   T29] audit: type=1800 audit(1740898220.212:1516): pid=14888 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.2430" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0
[  815.625926][T14899] FAULT_INJECTION: forcing a failure.
[  815.625926][T14899] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  815.639374][  T902] usb 10-1: new high-speed USB device number 23 using dummy_hcd
[  815.647331][T14899] CPU: 0 UID: 0 PID: 14899 Comm: syz.4.2434 Not tainted 6.14.0-rc4-syzkaller-00248-g03d38806a902 #0
[  815.647355][T14899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  815.647366][T14899] Call Trace:
[  815.647371][T14899]  <TASK>
[  815.647378][T14899]  dump_stack_lvl+0x16c/0x1f0
[  815.647406][T14899]  should_fail_ex+0x50a/0x650
[  815.647432][T14899]  _copy_to_user+0x32/0xd0
[  815.647450][T14899]  simple_read_from_buffer+0xd0/0x160
[  815.647476][T14899]  proc_fail_nth_read+0x198/0x270
[  815.647497][T14899]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  815.647517][T14899]  ? rw_verify_area+0xcf/0x680
[  815.647538][T14899]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  815.647558][T14899]  vfs_read+0x1df/0xbf0
[  815.647582][T14899]  ? __fget_files+0x1fc/0x3a0
[  815.647598][T14899]  ? __pfx___mutex_lock+0x10/0x10
[  815.647612][T14899]  ? __pfx_vfs_read+0x10/0x10
[  815.647631][T14899]  ? __fget_files+0x206/0x3a0
[  815.647645][T14899]  ksys_read+0x12b/0x250
[  815.647661][T14899]  ? __pfx_ksys_read+0x10/0x10
[  815.647681][T14899]  do_syscall_64+0xcd/0x250
[  815.647699][T14899]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  815.647729][T14899] RIP: 0033:0x7f8198b8bb7c
[  815.647744][T14899] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  815.647756][T14899] RSP: 002b:00007f8199912030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  815.647766][T14899] RAX: ffffffffffffffda RBX: 00007f8198da6080 RCX: 00007f8198b8bb7c
[  815.647773][T14899] RDX: 000000000000000f RSI: 00007f81999120a0 RDI: 0000000000000048
[  815.647780][T14899] RBP: 00007f8199912090 R08: 0000000000000000 R09: 0000000000000000
[  815.647786][T14899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  815.647792][T14899] R13: 0000000000000000 R14: 00007f8198da6080 R15: 00007ffe91fac2a8
[  815.647805][T14899]  </TASK>
[  816.147642][T14891] uprobe: syz.5.2433:14891 failed to unregister, leaking uprobe
[  816.203121][T14905] openvswitch: netlink: Message has 4 unknown bytes.
[  816.219384][T14905] openvswitch: netlink: Actions may not be safe on all matching packets
[  816.283051][  T902] usb 10-1: Using ep0 maxpacket: 32
[  816.298059][  T902] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  816.308595][  T902] usb 10-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  816.310539][T14907] overlayfs: failed to clone upperpath
[  816.329721][  T902] usb 10-1: config 0 interface 0 has no altsetting 0
[  816.354715][  T902] usb 10-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  816.374941][  T902] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  816.388752][  T902] usb 10-1: Product: syz
[  816.393218][  T902] usb 10-1: Manufacturer: syz
[  816.398043][  T902] usb 10-1: SerialNumber: syz
[  816.408181][  T902] usb 10-1: config 0 descriptor??
[  816.413468][ T5864] usb 1-1: new high-speed USB device number 92 using dummy_hcd
[  816.460627][   T29] audit: type=1326 audit(1740898221.482:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14914 comm="syz.5.2441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa699b8d169 code=0x7ffc0000
[  816.491378][   T29] audit: type=1326 audit(1740898221.482:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14914 comm="syz.5.2441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa699b8d169 code=0x7ffc0000
[  816.492807][T14915] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2441'.
[  816.524209][   T29] audit: type=1326 audit(1740898221.502:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14914 comm="syz.5.2441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fa699b8d169 code=0x7ffc0000
[  816.557827][   T29] audit: type=1326 audit(1740898221.502:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14914 comm="syz.5.2441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa699b8d169 code=0x7ffc0000
[  816.570934][ T5864] usb 1-1: config 0 has an invalid interface number: 69 but max is 0
[  816.585604][   T29] audit: type=1326 audit(1740898221.502:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14914 comm="syz.5.2441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fa699b8d169 code=0x7ffc0000
[  816.650583][ T5864] usb 1-1: config 0 has no interface number 0
[  816.689549][ T9921] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  816.715168][ T5864] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  816.726513][ T5864] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  816.744637][ T5864] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  816.761815][   T29] audit: type=1326 audit(1740898221.502:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14914 comm="syz.5.2441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa699b8d169 code=0x7ffc0000
[  816.762318][ T5864] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  816.797760][ T5864] usb 1-1: Product: syz
[  816.802239][ T5864] usb 1-1: Manufacturer: syz
[  816.807148][ T5864] usb 1-1: SerialNumber: syz
[  816.841098][ T5864] usb 1-1: config 0 descriptor??
[  816.847245][T14903] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  816.857938][   T29] audit: type=1326 audit(1740898221.502:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14914 comm="syz.5.2441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa699b8d169 code=0x7ffc0000
[  816.859704][ T5864] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  816.881911][ T9921] usb 5-1: Using ep0 maxpacket: 16
[  816.902167][   T29] audit: type=1326 audit(1740898221.502:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14914 comm="syz.5.2441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fa699b8d169 code=0x7ffc0000
[  816.904633][ T9921] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  816.905131][ T5864] cyberjack ttyUSB0: usb_submit_urb(read int) failed
[  816.945630][   T29] audit: type=1326 audit(1740898221.502:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14914 comm="syz.5.2441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa699b8d169 code=0x7ffc0000
[  816.952688][ T5864] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  816.975331][ T9921] usb 5-1: config 0 interface 0 has no altsetting 0
[  816.988560][ T9921] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d
[  816.997979][ T9921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  817.006199][ T9921] usb 5-1: Product: syz
[  817.010966][ T9921] usb 5-1: Manufacturer: syz
[  817.015779][ T9921] usb 5-1: SerialNumber: syz
[  817.022196][ T9921] usb 5-1: config 0 descriptor??
[  817.029670][ T9921] hub 5-1:0.0: bad descriptor, ignoring hub
[  817.035950][ T9921] hub 5-1:0.0: probe with driver hub failed with error -5
[  817.059832][ T9921] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  817.086059][ T6004] usb 5-1: Failed to submit usb control message: -71
[  817.086913][T11002] usb 1-1: USB disconnect, device number 92
[  817.094832][ T6004] usb 5-1: unable to send the bmi data to the device: -71
[  817.107826][T11002] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  817.117208][ T6004] usb 5-1: unable to get target info from device
[  817.120520][T11002] cyberjack 1-1:0.69: device disconnected
[  817.127216][ T6004] usb 5-1: could not get target info (-71)
[  817.141337][ T6004] usb 5-1: could not probe fw (-71)
[  817.829702][ T9696] usb 5-1: USB disconnect, device number 54
[  817.928657][  T902] gs_usb 10-1:0.0: Required endpoints not found
[  817.939031][  T902] usb 10-1: USB disconnect, device number 23
[  818.961634][T11002] usb 9-1: new high-speed USB device number 36 using dummy_hcd
[  820.189336][T11002] usb 9-1: Using ep0 maxpacket: 8
[  820.195927][T11002] usb 9-1: config 179 has an invalid interface number: 65 but max is 0
[  820.204345][T11002] usb 9-1: config 179 has no interface number 0
[  820.786198][T11002] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  820.811730][T11002] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  820.823073][T11002] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  820.833179][T11002] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  820.847478][T11002] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  820.856786][T11002] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  820.868140][T14949] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  821.295318][   T29] kauditd_printk_skb: 21 callbacks suppressed
[  821.295335][   T29] audit: type=1400 audit(1740898226.312:1547): avc:  denied  { map } for  pid=14980 comm="syz.9.2459" path="socket:[55945]" dev="sockfs" ino=55945 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[  821.351628][T11002] usb 9-1: USB disconnect, device number 36
[  821.475405][   T29] audit: type=1400 audit(1740898226.482:1548): avc:  denied  { write } for  pid=14983 comm="syz.9.2460" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  821.528620][T14936] syz.0.2445 (14936): drop_caches: 1
[  821.792414][T14995] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2465'.
[  821.908026][T15002] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[  822.349831][T14997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  823.346094][T15026] netlink: 'syz.5.2474': attribute type 4 has an invalid length.
[  823.387241][T15027] netlink: 'syz.5.2474': attribute type 4 has an invalid length.
[  823.399658][ T9921] usb 10-1: new high-speed USB device number 24 using dummy_hcd
[  823.551258][ T9921] usb 10-1: config 0 interface 0 altsetting 12 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  823.592944][ T9921] usb 10-1: config 0 interface 0 has no altsetting 0
[  823.646239][ T9921] usb 10-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3
[  823.678175][ T9921] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  823.697214][ T9921] usb 10-1: Product: syz
[  824.029457][ T9921] usb 10-1: Manufacturer: syz
[  824.036011][ T9921] usb 10-1: SerialNumber: syz
[  824.047590][ T9921] usb 10-1: config 0 descriptor??
[  824.070305][ T9921] keyspan 10-1:0.0: Keyspan 2 port adapter converter detected
[  824.111034][ T9921] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 87
[  824.135548][ T9921] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 7
[  824.152170][ T9921] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 81
[  824.163743][ T9921] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 1
[  824.206269][ T9921] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 2
[  824.249388][ T9921] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 85
[  824.529330][ T9921] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 5
[  824.544625][ T9921] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  824.629820][ T9921] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 83
[  824.643126][ T9921] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 4
[  824.651677][ T9921] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 86
[  824.682602][ T9921] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 6
[  824.690479][  T972] usb 1-1: new high-speed USB device number 93 using dummy_hcd
[  824.699497][ T9921] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  825.123326][  T972] usb 1-1: config 0 has an invalid interface number: 69 but max is 0
[  825.148077][  T972] usb 1-1: config 0 has no interface number 0
[  825.170686][   T29] audit: type=1400 audit(1740898230.192:1549): avc:  denied  { setopt } for  pid=15053 comm="syz.8.2484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  825.172725][  T972] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  825.245882][  T972] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  825.284202][  T972] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  825.298199][T15059] SELinux:  policydb magic number 0xf86a5272 does not match expected magic number 0xf97cff8c
[  825.356158][T15059] SELinux: failed to load policy
[  825.366474][  T972] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  825.375732][  T972] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  825.385043][  T972] usb 1-1: Product: syz
[  825.389344][  T972] usb 1-1: Manufacturer: syz
[  825.401710][  T972] usb 1-1: SerialNumber: syz
[  825.411216][  T972] usb 1-1: config 0 descriptor??
[  825.419041][T15047] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  825.433973][  T972] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  825.454170][  T972] cyberjack ttyUSB2: usb_submit_urb(read int) failed
[  825.475064][  T972] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB2
[  825.613941][T15063] overlayfs: failed to clone upperpath
[  825.666613][ T5864] usb 1-1: USB disconnect, device number 93
[  825.682891][ T5864] cyberjack ttyUSB2: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB2
[  825.708088][ T5864] cyberjack 1-1:0.69: device disconnected
[  826.481155][ T9921] usb 10-1: USB disconnect, device number 24
[  826.496050][ T9921] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  826.542363][ T9921] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  826.566185][T15071] dlm: plock device version mismatch: kernel (1.2.0), user (16.0.536870912)
[  826.575519][ T9921] keyspan 10-1:0.0: device disconnected
[  827.264211][T15086] syz.9.2493 (15086): /proc/15081/oom_adj is deprecated, please use /proc/15081/oom_score_adj instead.
[  827.359855][ T9696] usb 1-1: new high-speed USB device number 94 using dummy_hcd
[  827.608031][ T9696] usb 1-1: Using ep0 maxpacket: 16
[  827.627762][ T9696] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  827.653205][ T9696] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  827.672573][ T9696] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  827.685831][ T9696] usb 1-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00
[  827.695008][ T9696] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  827.704648][ T9696] usb 1-1: config 0 descriptor??
[  828.250022][T15094] netlink: 96 bytes leftover after parsing attributes in process `syz.9.2497'.
[  828.285634][T15094] IPVS: set_ctl: invalid protocol: 8 255.255.255.255:20000
[  828.471595][ T9696] hid-alps 0003:044E:120C.0021: unknown main item tag 0x0
[  828.496483][ T9696] hid-alps 0003:044E:120C.0021: unknown main item tag 0x0
[  828.506126][ T9696] hid-alps 0003:044E:120C.0021: unknown main item tag 0x0
[  828.518924][ T9696] hid-alps 0003:044E:120C.0021: unknown main item tag 0x0
[  828.528622][ T9696] hid-alps 0003:044E:120C.0021: unknown main item tag 0x0
[  828.552302][ T9696] hid-alps 0003:044E:120C.0021: hidraw0: USB HID v0.00 Device [HID 044e:120c] on usb-dummy_hcd.0-1/input0
[  828.836137][T15106] syz_tun: entered promiscuous mode
[  828.843446][T15106] batadv_slave_0: entered promiscuous mode
[  828.858605][   T29] audit: type=1400 audit(1740898233.872:1550): avc:  denied  { getopt } for  pid=15105 comm="syz.9.2501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  829.210878][T11261] usb 9-1: new high-speed USB device number 37 using dummy_hcd
[  829.513156][T15119] overlay: Unknown parameter 'uid'
[  829.573986][T11261] usb 9-1: config 0 has an invalid interface number: 69 but max is 0
[  829.584032][T11261] usb 9-1: config 0 has no interface number 0
[  829.591011][T11261] usb 9-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  829.601405][T11261] usb 9-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  829.613032][T11261] usb 9-1: config 0 interface 69 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  829.645158][T11261] usb 9-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  829.662021][T11261] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  829.671527][T11261] usb 9-1: Product: syz
[  829.675838][T11261] usb 9-1: Manufacturer: syz
[  829.680910][T11261] usb 9-1: SerialNumber: syz
[  829.686994][T11261] usb 9-1: config 0 descriptor??
[  829.693565][T15113] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  829.816460][T11261] cyberjack 9-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  829.826209][T11261] cyberjack ttyUSB0: usb_submit_urb(read int) failed
[  829.833666][T11261] usb 9-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  830.023910][ T9696] usb 9-1: USB disconnect, device number 37
[  830.201967][ T9696] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  830.388456][ T9696] cyberjack 9-1:0.69: device disconnected
[  830.444889][T15140] overlayfs: failed to clone upperpath
[  830.611954][ T9696] usb 1-1: USB disconnect, device number 94
[  830.789376][  T972] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  830.879416][  T902] usb 9-1: new high-speed USB device number 38 using dummy_hcd
[  830.955269][T15163] VFS: could not find a valid V7 on nullb0.
[  830.969300][  T972] usb 5-1: Using ep0 maxpacket: 16
[  830.984839][  T972] usb 5-1: config index 0 descriptor too short (expected 69, got 36)
[  831.001983][  T972] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  831.016107][  T972] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  831.031916][  T972] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  831.045471][  T972] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  831.058066][  T972] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  831.104972][  T972] usb 5-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89
[  831.123649][  T972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  831.140960][  T972] usb 5-1: Product: syz
[  831.145306][  T972] usb 5-1: Manufacturer: syz
[  831.153524][  T972] usb 5-1: SerialNumber: syz
[  831.161522][  T972] usb 5-1: config 0 descriptor??
[  831.166525][T15169] xt_hashlimit: size too large, truncated to 1048576
[  831.168740][  T972] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622
[  831.220760][  T902] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  831.232271][  T902] usb 9-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00
[  831.241481][  T902] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  831.249559][ T9921] usb 10-1: new high-speed USB device number 25 using dummy_hcd
[  831.259501][  T902] usb 9-1: config 0 descriptor??
[  831.337073][T15174] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2525'.
[  831.423001][ T9921] usb 10-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=20.fa
[  831.433716][ T9921] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  831.442191][ T9921] usb 10-1: Product: syz
[  831.446658][ T9921] usb 10-1: Manufacturer: syz
[  831.451729][ T9921] usb 10-1: SerialNumber: syz
[  831.465894][ T9921] usb 10-1: config 0 descriptor??
[  831.480969][ T9921] pn533_usb 10-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[  831.488547][  T902] usbhid 9-1:0.0: can't add hid device: -71
[  831.498125][  T902] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  831.514954][  T902] usb 9-1: USB disconnect, device number 38
[  832.095171][  T972] gspca_pac7302: reg_w() failed i: ff v: 01 error -110
[  832.107365][  T972] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -110
[  832.846498][T15206] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2536'.
[  833.323220][T15221] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2540'.
[  834.050369][T15232] ISOFS: Unable to identify CD-ROM format.
[  834.128427][T15230] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[  834.232673][  T972] usb 10-1: USB disconnect, device number 25
[  834.274325][T15221] nbd: socks must be embedded in a SOCK_ITEM attr
[  834.341310][ T9921] usb 5-1: USB disconnect, device number 55
[  834.676596][T15244] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2544'.
[  834.686253][T15244] netlink: 43 bytes leftover after parsing attributes in process `syz.5.2544'.
[  834.843040][T15246] ubi: mtd0 is already attached to ubi31
[  835.639496][T15244] netlink: 'syz.5.2544': attribute type 6 has an invalid length.
[  835.647232][T15244] netlink: 'syz.5.2544': attribute type 5 has an invalid length.
[  835.655023][T15244] netlink: 43 bytes leftover after parsing attributes in process `syz.5.2544'.
[  835.663821][T15247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  835.712799][T15247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  835.722945][T15247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  836.058291][T15247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  836.071553][T15247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  836.354160][T15247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  836.545619][T15247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  836.565578][T15247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  836.659806][T15247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  836.687300][T15247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  836.881215][ T9696] usb 1-1: new full-speed USB device number 95 using dummy_hcd
[  836.963892][T15266] xt_TPROXY: Can be used only with -p tcp or -p udp
[  836.972981][T15267] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2547'.
[  836.994742][   T29] audit: type=1400 audit(1740898242.002:1551): avc:  denied  { mount } for  pid=15265 comm="syz.8.2548" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[  837.046238][T15269] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2549'.
[  837.139096][ T9696] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  837.401733][T15267] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  837.431384][ T9696] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  837.608198][ T9696] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  837.648149][ T9696] usb 1-1: config 0 descriptor??
[  837.665421][T15262] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  837.891337][ T9921] usb 9-1: new high-speed USB device number 39 using dummy_hcd
[  838.242992][ T9696] usbhid 1-1:0.0: can't add hid device: -71
[  838.248967][ T9696] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  838.264695][ T9696] usb 1-1: USB disconnect, device number 95
[  838.309425][ T9921] usb 9-1: Using ep0 maxpacket: 16
[  838.319915][ T9921] usb 9-1: config 9 has no interfaces?
[  838.327143][ T9921] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  838.359547][ T9921] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  838.369396][ T9921] usb 9-1: Product: syz
[  838.373585][ T9921] usb 9-1: Manufacturer: syz
[  838.380390][ T9921] usb 9-1: SerialNumber: syz
[  838.406646][ T9921] r8152-cfgselector 9-1: Unknown version 0x0000
[  838.625091][ T9921] r8152-cfgselector 9-1: USB disconnect, device number 39
[  838.649438][T11261] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  838.847029][T11261] usb 5-1: Using ep0 maxpacket: 16
[  838.860191][T11261] usb 5-1: config 5 has an invalid interface number: 123 but max is 0
[  838.874497][T11261] usb 5-1: config 5 has no interface number 0
[  838.886182][T11261] usb 5-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B
[  838.898270][T11261] usb 5-1: config 5 interface 123 altsetting 7 bulk endpoint 0x8B has invalid maxpacket 32
[  838.922184][T11261] usb 5-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xE6, changing to 0x86
[  838.943383][T11261] usb 5-1: config 5 interface 123 altsetting 7 endpoint 0x86 has invalid wMaxPacketSize 0
[  838.973746][T11261] usb 5-1: config 5 interface 123 has no altsetting 0
[  838.997801][T11261] usb 5-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[  839.013697][T11261] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  839.030442][T11261] usb 5-1: Product: syz
[  839.046565][T15298] atomic_op ffff88805bf34198 conn xmit_atomic 0000000000000000
[  839.077357][T11261] usb 5-1: Manufacturer: syz
[  839.087696][T11261] usb 5-1: SerialNumber: syz
[  839.110606][T15289] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  839.287696][T15304] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[  839.415015][T15305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  839.450860][ T9696] usb 9-1: new high-speed USB device number 40 using dummy_hcd
[  839.493463][T15305] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  839.609339][ T9696] usb 9-1: device descriptor read/64, error -71
[  839.692677][T15289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  839.801099][T15289] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  839.929440][ T9696] usb 9-1: new high-speed USB device number 41 using dummy_hcd
[  840.079366][ T9696] usb 9-1: device descriptor read/64, error -71
[  840.096296][T15289] x_tables: duplicate underflow at hook 2
[  840.159011][T11261] ni6501 5-1:5.123: driver 'ni6501' failed to auto-configure device.
[  840.204778][T11261] usb 5-1: USB disconnect, device number 56
[  840.219834][ T9696] usb usb9-port1: attempt power cycle
[  840.241596][T15315] xt_cgroup: invalid path, errno=-2
[  840.244294][T15314] xt_cgroup: invalid path, errno=-2
[  840.679673][ T9696] usb 9-1: new high-speed USB device number 42 using dummy_hcd
[  840.709934][ T9696] usb 9-1: device descriptor read/8, error -71
[  840.969370][ T9696] usb 9-1: new high-speed USB device number 43 using dummy_hcd
[  841.003980][ T9696] usb 9-1: device descriptor read/8, error -71
[  841.133340][ T9696] usb usb9-port1: unable to enumerate USB device
[  841.239473][T11261] usb 10-1: new high-speed USB device number 26 using dummy_hcd
[  841.399678][T11261] usb 10-1: Using ep0 maxpacket: 32
[  841.410732][T11261] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  841.426553][T11261] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  841.473438][T11261] usb 10-1: New USB device found, idVendor=16d0, idProduct=66b8, bcdDevice=df.c0
[  841.503344][T11261] usb 10-1: New USB device strings: Mfr=64, Product=2, SerialNumber=3
[  841.534463][T11261] usb 10-1: Product: syz
[  842.149144][T11261] usb 10-1: Manufacturer: syz
[  842.159289][T11261] usb 10-1: SerialNumber: syz
[  842.166971][T11261] usb 10-1: config 0 descriptor??
[  843.080795][T15342] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2572'.
[  843.089921][T15342] mac80211_hwsim hwsim39 wlan0: entered promiscuous mode
[  843.346951][T15355] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2576'.
[  843.389583][T15355] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  843.774290][T15366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  843.791541][T15366] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  844.294661][   T29] audit: type=1400 audit(1740898249.312:1552): avc:  denied  { write } for  pid=15377 comm="syz.4.2581" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[  844.349205][   T29] audit: type=1400 audit(1740898249.352:1553): avc:  denied  { connect } for  pid=15375 comm="syz.8.2580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  844.616175][   T29] audit: type=1400 audit(1740898249.542:1554): avc:  denied  { setopt } for  pid=15382 comm="syz.5.2583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  845.673915][  T902] usb 10-1: USB disconnect, device number 26
[  846.619372][ T5864] usb 1-1: new high-speed USB device number 96 using dummy_hcd
[  846.759538][ T5864] usb 1-1: device descriptor read/64, error -71
[  847.009662][ T5864] usb 1-1: new high-speed USB device number 97 using dummy_hcd
[  847.155156][ T5864] usb 1-1: device descriptor read/64, error -71
[  847.288180][ T5864] usb usb1-port1: attempt power cycle
[  847.913389][ T5864] usb 1-1: new high-speed USB device number 98 using dummy_hcd
[  847.950072][ T5864] usb 1-1: device descriptor read/8, error -71
[  848.171203][ T9696] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  848.199482][ T5864] usb 1-1: new high-speed USB device number 99 using dummy_hcd
[  848.233194][ T5864] usb 1-1: device descriptor read/8, error -71
[  848.339392][ T9696] usb 5-1: Using ep0 maxpacket: 8
[  848.346634][ T9696] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  848.355316][ T5864] usb usb1-port1: unable to enumerate USB device
[  848.361895][ T9696] usb 5-1: config 0 has no interface number 0
[  848.370320][ T9696] usb 5-1: config 0 interface 2 has no altsetting 0
[  848.384174][ T9696] usb 5-1: New USB device found, idVendor=045e, idProduct=02d5, bcdDevice=6d.21
[  848.398869][ T9696] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  848.408165][ T9696] usb 5-1: Product: syz
[  848.415839][ T9696] usb 5-1: Manufacturer: syz
[  848.421850][ T9696] usb 5-1: SerialNumber: syz
[  848.436667][ T9696] usb 5-1: config 0 descriptor??
[  848.701708][T15457] bridge_slave_0: left allmulticast mode
[  848.707518][T15457] bridge_slave_0: left promiscuous mode
[  848.712846][ T9696] dvb-usb: found a 'Microsoft Xbox One Digital TV Tuner' in cold state, will try to load a firmware
[  848.717109][T15457] bridge0: port 1(bridge_slave_0) entered disabled state
[  848.766978][T15457] bridge_slave_1: left allmulticast mode
[  848.773263][T15457] bridge_slave_1: left promiscuous mode
[  848.779427][T15457] bridge0: port 2(bridge_slave_1) entered disabled state
[  848.845832][T15457] bond0: (slave bond_slave_0): Releasing backup interface
[  848.966709][ T9696] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  849.014436][T15457] bond0: (slave bond_slave_1): Releasing backup interface
[  849.017394][ T9696] dib0700: firmware download failed at 7 with -22
[  849.143742][T15457] team0: Port device team_slave_0 removed
[  849.221166][T15457] team0: Port device team_slave_1 removed
[  849.245657][T15457] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  849.253449][T15457] batman_adv: batadv0: Removing interface: batadv_slave_0
[  849.264049][T15457] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  849.279528][T15457] batman_adv: batadv0: Removing interface: batadv_slave_1
[  849.507832][T15471] FAULT_INJECTION: forcing a failure.
[  849.507832][T15471] name failslab, interval 1, probability 0, space 0, times 0
[  849.520249][T15464] : entered promiscuous mode
[  849.530171][T15471] CPU: 0 UID: 0 PID: 15471 Comm: syz.9.2610 Not tainted 6.14.0-rc4-syzkaller-00248-g03d38806a902 #0
[  849.530200][T15471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  849.530209][T15471] Call Trace:
[  849.530215][T15471]  <TASK>
[  849.530222][T15471]  dump_stack_lvl+0x16c/0x1f0
[  849.530249][T15471]  should_fail_ex+0x50a/0x650
[  849.530273][T15471]  ? fs_reclaim_acquire+0xae/0x150
[  849.530297][T15471]  ? tomoyo_realpath_from_path+0xb9/0x720
[  849.530320][T15471]  should_failslab+0xc2/0x120
[  849.530339][T15471]  __kmalloc_noprof+0xcb/0x510
[  849.530356][T15471]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  849.530382][T15471]  tomoyo_realpath_from_path+0xb9/0x720
[  849.530404][T15471]  ? tomoyo_path_number_perm+0x235/0x590
[  849.530425][T15471]  ? tomoyo_path_number_perm+0x235/0x590
[  849.530446][T15471]  tomoyo_path_number_perm+0x248/0x590
[  849.530464][T15471]  ? tomoyo_path_number_perm+0x235/0x590
[  849.530486][T15471]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  849.530533][T15471]  ? __pfx_lock_release+0x10/0x10
[  849.530553][T15471]  ? trace_lock_acquire+0x14e/0x1f0
[  849.530574][T15471]  ? lock_acquire+0x2f/0xb0
[  849.530594][T15471]  ? __fget_files+0x40/0x3a0
[  849.530613][T15471]  ? __fget_files+0x206/0x3a0
[  849.530633][T15471]  security_file_ioctl+0x9b/0x240
[  849.530659][T15471]  __x64_sys_ioctl+0xb7/0x200
[  849.530683][T15471]  do_syscall_64+0xcd/0x250
[  849.530706][T15471]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  849.530728][T15471] RIP: 0033:0x7f89ad98d169
[  849.530742][T15471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  849.530758][T15471] RSP: 002b:00007f89ae859038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  849.530774][T15471] RAX: ffffffffffffffda RBX: 00007f89adba5fa0 RCX: 00007f89ad98d169
[  849.530785][T15471] RDX: 0000400000000100 RSI: 00000000400452c9 RDI: 0000000000000004
[  849.530796][T15471] RBP: 00007f89ae859090 R08: 0000000000000000 R09: 0000000000000000
[  849.530806][T15471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  849.530815][T15471] R13: 0000000000000000 R14: 00007f89adba5fa0 R15: 00007ffd7701f0b8
[  849.530838][T15471]  </TASK>
[  849.530845][T15471] ERROR: Out of memory at tomoyo_realpath_from_path.
[  850.381221][T15487] FAULT_INJECTION: forcing a failure.
[  850.381221][T15487] name failslab, interval 1, probability 0, space 0, times 0
[  850.396020][T15487] CPU: 0 UID: 0 PID: 15487 Comm: syz.0.2615 Not tainted 6.14.0-rc4-syzkaller-00248-g03d38806a902 #0
[  850.396045][T15487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  850.396055][T15487] Call Trace:
[  850.396064][T15487]  <TASK>
[  850.396071][T15487]  dump_stack_lvl+0x16c/0x1f0
[  850.396095][T15487]  should_fail_ex+0x50a/0x650
[  850.396113][T15487]  ? fs_reclaim_acquire+0xae/0x150
[  850.396130][T15487]  ? find_css_set+0x74e/0x1bb0
[  850.396143][T15487]  should_failslab+0xc2/0x120
[  850.396156][T15487]  __kmalloc_cache_noprof+0x68/0x410
[  850.396183][T15487]  find_css_set+0x74e/0x1bb0
[  850.396201][T15487]  ? __pfx_find_css_set+0x10/0x10
[  850.396214][T15487]  ? __pfx_mark_lock+0x10/0x10
[  850.396235][T15487]  ? lockdep_hardirqs_on+0x7c/0x110
[  850.396252][T15487]  cgroup_migrate_prepare_dst+0x10b/0x7f0
[  850.396272][T15487]  cgroup_attach_task+0x48f/0x920
[  850.396289][T15487]  ? __pfx_cgroup_attach_task+0x10/0x10
[  850.396309][T15487]  ? get_task_cred+0x17f/0x360
[  850.396332][T15487]  ? __cgroup1_procs_write.constprop.0+0x2f9/0x420
[  850.396346][T15487]  __cgroup1_procs_write.constprop.0+0x2f9/0x420
[  850.396361][T15487]  ? __pfx___cgroup1_procs_write.constprop.0+0x10/0x10
[  850.396377][T15487]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  850.396398][T15487]  cgroup_file_write+0x211/0x7d0
[  850.396417][T15487]  ? __pfx_cgroup1_procs_write+0x10/0x10
[  850.396439][T15487]  ? __pfx_cgroup_file_write+0x10/0x10
[  850.396457][T15487]  ? lock_acquire+0x2f/0xb0
[  850.396477][T15487]  kernfs_fop_write_iter+0x33d/0x500
[  850.396491][T15487]  ? __pfx_cgroup_file_write+0x10/0x10
[  850.396505][T15487]  vfs_write+0x5ae/0x1150
[  850.396523][T15487]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  850.396537][T15487]  ? __pfx___mutex_lock+0x10/0x10
[  850.396551][T15487]  ? __pfx_vfs_write+0x10/0x10
[  850.396578][T15487]  ksys_write+0x12b/0x250
[  850.396594][T15487]  ? __pfx_ksys_write+0x10/0x10
[  850.396615][T15487]  do_syscall_64+0xcd/0x250
[  850.396630][T15487]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  850.396646][T15487] RIP: 0033:0x7f0c6458d169
[  850.396656][T15487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  850.396668][T15487] RSP: 002b:00007f0c65442038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  850.396683][T15487] RAX: ffffffffffffffda RBX: 00007f0c647a5fa0 RCX: 00007f0c6458d169
[  850.396695][T15487] RDX: 0000000000000012 RSI: 00004000000001c0 RDI: 0000000000000009
[  850.396704][T15487] RBP: 00007f0c65442090 R08: 0000000000000000 R09: 0000000000000000
[  850.396714][T15487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  850.396722][T15487] R13: 0000000000000000 R14: 00007f0c647a5fa0 R15: 00007fff6fe2a278
[  850.396746][T15487]  </TASK>
[  850.847253][T15496] xt_SECMARK: invalid security context 'unconfined'
[  850.950397][T11002] usb 5-1: USB disconnect, device number 57
[  851.072773][ T9696] usb 1-1: new high-speed USB device number 100 using dummy_hcd
[  851.129375][ T5864] usb 9-1: new high-speed USB device number 44 using dummy_hcd
[  851.229438][ T9696] usb 1-1: Using ep0 maxpacket: 32
[  851.242334][ T9696] usb 1-1: config 0 has an invalid interface number: 89 but max is 0
[  851.252916][ T9696] usb 1-1: config 0 has no interface number 0
[  851.278322][ T9696] usb 1-1: config 0 interface 89 has no altsetting 0
[  851.285368][ T5864] usb 9-1: Using ep0 maxpacket: 8
[  851.298509][ T5864] usb 9-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2
[  851.315554][ T5864] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  851.324811][ T5864] usb 9-1: Product: syz
[  851.329474][ T5864] usb 9-1: Manufacturer: syz
[  851.336211][ T5864] usb 9-1: SerialNumber: syz
[  851.341648][ T9696] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  851.351756][ T9696] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  851.364535][ T9696] usb 1-1: Product: syz
[  851.369983][ T5864] usb 9-1: config 0 descriptor??
[  851.375120][ T9696] usb 1-1: Manufacturer: syz
[  851.380551][ T9696] usb 1-1: SerialNumber: syz
[  851.421991][ T9696] usb 1-1: config 0 descriptor??
[  851.444499][ T9696] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  851.454296][ T9696] em28xx 1-1:0.89: Video interface 89 found: bulk
[  851.840729][   T29] audit: type=1326 audit(1740898256.862:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15508 comm="syz.9.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ad98d169 code=0x7ffc0000
[  851.883432][   T29] audit: type=1326 audit(1740898256.862:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15508 comm="syz.9.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ad98d169 code=0x7ffc0000
[  851.911436][   T29] audit: type=1326 audit(1740898256.862:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15508 comm="syz.9.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f89ad98d169 code=0x7ffc0000
[  851.941561][   T29] audit: type=1326 audit(1740898256.862:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15508 comm="syz.9.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ad98d169 code=0x7ffc0000
[  851.970083][   T29] audit: type=1326 audit(1740898256.862:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15508 comm="syz.9.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f89ad98d169 code=0x7ffc0000
[  851.997652][   T29] audit: type=1326 audit(1740898256.882:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15508 comm="syz.9.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f89ad98d1a3 code=0x7ffc0000
[  852.022396][   T29] audit: type=1326 audit(1740898256.882:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15508 comm="syz.9.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ad98d169 code=0x7ffc0000
[  852.050150][   T29] audit: type=1326 audit(1740898256.892:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15508 comm="syz.9.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ad98d169 code=0x7ffc0000
[  852.074966][   T29] audit: type=1326 audit(1740898256.892:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15508 comm="syz.9.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f89ad98d169 code=0x7ffc0000
[  852.099501][   T29] audit: type=1326 audit(1740898256.892:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15508 comm="syz.9.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ad98d169 code=0x7ffc0000
[  852.125367][ T9696] em28xx 1-1:0.89: unknown em28xx chip ID (0)
[  852.501224][   T30] INFO: task syz.7.1921:13193 blocked for more than 143 seconds.
[  852.509006][   T30]       Not tainted 6.14.0-rc4-syzkaller-00248-g03d38806a902 #0
[  852.516680][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  852.525521][   T30] task:syz.7.1921      state:D stack:27200 pid:13193 tgid:13192 ppid:12475  task_flags:0x400740 flags:0x00000006
[  852.537865][   T30] Call Trace:
[  852.541323][  T972] usb 10-1: new high-speed USB device number 27 using dummy_hcd
[  852.543282][   T30]  <TASK>
[  852.552538][   T30]  __schedule+0xf43/0x5890
[  852.557077][   T30]  ? __pfx___lock_acquire+0x10/0x10
[  852.565070][   T30]  ? __pfx___schedule+0x10/0x10
[  852.570814][   T30]  ? schedule+0x298/0x350
[  852.575375][   T30]  ? __pfx_lock_release+0x10/0x10
[  852.580599][   T30]  ? lock_acquire+0x2f/0xb0
[  852.585187][   T30]  ? schedule+0x1fd/0x350
[  852.590592][   T30]  schedule+0xe7/0x350
[  852.594762][   T30]  schedule_timeout+0x244/0x280
[  852.599931][   T30]  ? __pfx_schedule_timeout+0x10/0x10
[  852.605425][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  852.610760][   T30]  __wait_for_common+0x3e1/0x600
[  852.615755][   T30]  ? __pfx_schedule_timeout+0x10/0x10
[  852.621306][   T30]  ? __pfx___wait_for_common+0x10/0x10
[  852.626828][   T30]  ? __pfx_try_to_wake_up+0x10/0x10
[  852.632123][   T30]  wait_for_completion_state+0x1c/0x40
[  852.637632][   T30]  do_coredump+0x86f/0x4400
[  852.642420][   T30]  ? unwind_get_return_address+0x59/0xa0
[  852.648131][   T30]  ? __pfx_do_coredump+0x10/0x10
[  852.653210][   T30]  ? stack_trace_save+0x95/0xd0
[  852.658150][   T30]  ? __pfx_stack_trace_save+0x10/0x10
[  852.663662][   T30]  ? hlock_class+0x4e/0x130
[  852.668215][   T30]  ? stack_depot_save_flags+0x28/0x9c0
[  852.673831][   T30]  ? kasan_save_stack+0x42/0x60
[  852.678740][   T30]  ? kasan_save_stack+0x33/0x60
[  852.679389][T11002] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  852.683903][   T30]  ? kasan_save_track+0x14/0x30
[  852.698442][   T30]  ? kasan_save_free_info+0x3b/0x60
[  852.703803][   T30]  ? __kasan_slab_free+0x51/0x70
[  852.708918][   T30]  ? kmem_cache_free+0x2e2/0x4d0
[  852.714067][   T30]  ? __sigqueue_free+0xba/0x2a0
[  852.719124][   T30]  ? get_signal+0xcbc/0x26c0
[  852.723907][  T972] usb 10-1: Using ep0 maxpacket: 16
[  852.724009][   T30]  ? arch_do_signal_or_restart+0x90/0x7e0
[  852.733751][  T972] usb 10-1: config 0 has an invalid interface number: 251 but max is 0
[  852.735146][   T30]  ? syscall_exit_to_user_mode+0x150/0x2a0
[  852.747058][  T972] usb 10-1: config 0 has no interface number 0
[  852.749666][   T30]  ? find_held_lock+0x2d/0x110
[  852.755606][  T972] usb 10-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  852.760471][   T30]  ? proc_coredump_connector+0x2d2/0x4f0
[  852.776103][  T972] usb 10-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  852.778052][  T972] usb 10-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  852.789993][   T30]  ? __pfx_proc_coredump_connector+0x10/0x10
[  852.800775][  T972] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  852.806229][ T9696] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[  852.815006][  T972] usb 10-1: Product: syz
[  852.818481][ T9696] em28xx 1-1:0.89: board has no eeprom
[  852.822661][  T972] usb 10-1: Manufacturer: syz
[  852.828802][   T30]  get_signal+0x230b/0x26c0
[  852.832800][  T972] usb 10-1: SerialNumber: syz
[  852.837362][   T30]  ? __pfx_force_sigsegv+0x10/0x10
[  852.847296][T11002] usb 5-1: device descriptor read/64, error -71
[  852.854245][   T30]  ? __pfx_get_signal+0x10/0x10
[  852.858213][  T972] usb 10-1: config 0 descriptor??
[  852.859181][   T30]  ? __rseq_handle_notify_resume+0x14a/0x10b0
[  852.870730][T15517] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[  852.878065][T15517] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[  852.885664][   T30]  arch_do_signal_or_restart+0x90/0x7e0
[  852.891361][   T30]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  852.898735][   T30]  ? ksys_mmap_pgoff+0x85/0x5c0
[  852.903793][   T30]  ? rcu_is_watching+0x12/0xc0
[  852.908664][   T30]  syscall_exit_to_user_mode+0x150/0x2a0
[  852.914482][ T9696] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67)
[  852.922064][ T9696] em28xx 1-1:0.89: analog set to bulk mode.
[  852.928924][ T5895] em28xx 1-1:0.89: Registering V4L2 extension
[  852.939668][ T9696] usb 1-1: USB disconnect, device number 100
[  852.945870][   T30]  do_syscall_64+0xda/0x250
[  852.951253][ T9696] em28xx 1-1:0.89: Disconnecting em28xx
[  852.956936][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  852.963201][   T30] RIP: 0033:0x7f58ab04e750
[  852.967716][   T30] RSP: 002b:00007f58ac04b338 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  852.976469][ T5895] em28xx 1-1:0.89: Config register raw data: 0xffffffed
[  852.983634][ T5895] em28xx 1-1:0.89: AC97 chip type couldn't be determined
[  853.003053][   T30] RAX: 0000000000000000 RBX: 00007f58ab3a5fa0 RCX: 00007f58ab18d169
[  853.011187][ T5895] em28xx 1-1:0.89: No AC97 audio processor
[  853.017877][   T30] RDX: 00007f58ac04b340 RSI: 00007f58ac04b470 RDI: 000000000000000b
[  853.026136][ T5895] usb 1-1: Decoder not found
[  853.030843][ T5895] em28xx 1-1:0.89: failed to create media graph
[  853.037131][   T30] RBP: 00007f58ab20e2a0 R08: 0000000000000006 R09: 0000000000000000
[  853.045355][ T5895] em28xx 1-1:0.89: V4L2 device video103 deregistered
[  853.052136][   T30] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000000
[  853.060396][   T30] R13: 0000000000000000 R14: 00007f58ab3a5fa0 R15: 00007ffc5b0de898
[  853.070412][   T30]  </TASK>
[  853.072205][ T5895] em28xx 1-1:0.89: Registering snapshot button...
[  853.073599][   T30] 
[  853.073599][   T30] Showing all locks held in the system:
[  853.081234][ T5895] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input75
[  853.087906][T11002] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  853.107989][   T30] 1 lock held by khungtaskd/30:
[  853.108031][   T30]  #0: ffffffff8e1bccc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390
[  853.108108][   T30] 6 locks held by kworker/0:2/972:
[  853.108121][   T30]  #0: ffff8881446a3948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0
[  853.108197][   T30]  #1: ffffc90003c8fd18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0
[  853.108250][   T30]  #2: ffff8881457ae190 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c1/0x4e10
[  853.199361][   T30]  #3: ffff88806638c190 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7f/0x4b0
[  853.216036][   T30]  #4: ffff88805d8ea160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7f/0x4b0
[  853.230082][   T30]  #5: ffff888145741d68 (hcd->bandwidth_mutex){+.+.}-{4:4}, at: usb_set_interface+0x29b/0xea0
[  853.238189][ T5895] em28xx 1-1:0.89: Remote control support is not available for this card.
[  853.246535][T15517] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[  853.249205][ T9696] em28xx 1-1:0.89: Closing input extension
[  853.256400][   T30] 1 lock held by acpid/5177:
[  853.264122][ T9696] em28xx 1-1:0.89: Deregistering snapshot button
[  853.267023][T15517] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[  853.279343][   T30]  #0: ffffffff8e1c8138 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x282/0x3b0
[  853.290460][   T30] 2 locks held by getty/5579:
[  853.295187][   T30]  #0: ffff888031fce0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  853.305982][   T30]  #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480
[  853.316339][T11002] usb 5-1: device descriptor read/64, error -71
[  853.317755][   T30] 4 locks held by kworker/1:4/5864:
[  853.331715][   T30]  #0: ffff8881446a3948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0
[  853.343887][   T30]  #1: ffffc900041bfd18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0
[  853.359206][   T30]  #2: ffff88814579e190 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c1/0x4e10
[  853.369207][   T30]  #3: ffff88807866b190 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7f/0x4b0
[  853.388022][   T30] 8 locks held by kworker/1:3/9696:
[  853.393358][   T30]  #0: ffff8881446a3948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0
[  853.405467][   T30]  #1: ffffc90003dcfd18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0
[  853.416880][   T30]  #2: ffff8880287d7190 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c1/0x4e10
[  853.425820][   T30]  #3: ffff88805890d190 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0x10a/0x920
[  853.435164][   T30]  #4: ffff88807c6dd160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xa4/0x610
[  853.439593][T11002] usb usb5-port1: attempt power cycle
[  853.445782][   T30]  #5: ffffffff8f9831e8 (em28xx_devlist_mutex){+.+.}-{4:4}, at: em28xx_close_extension+0x28/0x2b0
[  853.462278][   T30]  #6: ffffffff8f742908 (input_mutex){+.+.}-{4:4}, at: __input_unregister_device+0x154/0x470
[  853.472623][   T30]  #7: ffffffff8e1c8138 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a4/0x3b0
[  853.482736][   T30] 6 locks held by kworker/0:3/11002:
[  853.488044][   T30]  #0: ffff8881446a3948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0
[  853.499103][   T30]  #1: ffffc90004d27d18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0
[  853.511181][   T30]  #2: ffff888028c79190 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c1/0x4e10
[  853.525348][   T30]  #3: ffff888028c7c510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x27ec/0x4e10
[  853.538490][   T30]  #4: ffff888028239868 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2815/0x4e10
[  853.548441][   T30]  #5: ffffffff8f4e9090 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x1a5/0x1cd0
[  853.559037][   T30] 
[  853.563274][   T30] =============================================
[  853.563274][   T30] 
[  853.575645][   T30] NMI backtrace for cpu 1
[  853.575661][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc4-syzkaller-00248-g03d38806a902 #0
[  853.575682][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  853.575692][   T30] Call Trace:
[  853.575698][   T30]  <TASK>
[  853.575706][   T30]  dump_stack_lvl+0x116/0x1f0
[  853.575733][   T30]  nmi_cpu_backtrace+0x27b/0x390
[  853.575760][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  853.575782][   T30]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[  853.575807][   T30]  watchdog+0xf62/0x12b0
[  853.575840][   T30]  ? __pfx_watchdog+0x10/0x10
[  853.575861][   T30]  ? lockdep_hardirqs_on+0x7c/0x110
[  853.575881][   T30]  ? __kthread_parkme+0x148/0x220
[  853.575899][   T30]  ? __pfx_watchdog+0x10/0x10
[  853.575922][   T30]  kthread+0x3af/0x750
[  853.575943][   T30]  ? __pfx_kthread+0x10/0x10
[  853.575964][   T30]  ? __pfx_kthread+0x10/0x10
[  853.575982][   T30]  ret_from_fork+0x45/0x80
[  853.576002][   T30]  ? __pfx_kthread+0x10/0x10
[  853.576021][   T30]  ret_from_fork_asm+0x1a/0x30
[  853.576048][   T30]  </TASK>
[  853.576072][   T30] Sending NMI from CPU 1 to CPUs 0:
[  853.689617][    C0] NMI backtrace for cpu 0
[  853.689633][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.14.0-rc4-syzkaller-00248-g03d38806a902 #0
[  853.689650][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  853.689657][    C0] RIP: 0010:native_apic_msr_write+0x28/0x40
[  853.689679][    C0] Code: 90 90 f3 0f 1e fa 8d 87 30 ff ff ff 83 e0 ef 74 20 89 f8 83 e0 ef 83 f8 20 74 16 c1 ef 04 31 d2 89 f0 8d 8f 00 08 00 00 0f 30 <66> 90 c3 cc cc cc cc c3 cc cc cc cc 89 f6 31 d2 89 cf e9 41 05 8d
[  853.689692][    C0] RSP: 0018:ffffc90000007eb8 EFLAGS: 00000046
[  853.689704][    C0] RAX: 0000000000002892 RBX: ffff8880b8628400 RCX: 0000000000000838
[  853.689713][    C0] RDX: 0000000000000000 RSI: 0000000000002892 RDI: 0000000000000038
[  853.689723][    C0] RBP: 0000000000002892 R08: 0000000000000005 R09: 000000000000003f
[  853.689733][    C0] R10: 0000000000000020 R11: 0000000000000000 R12: 0000000000000000
[  853.689741][    C0] R13: 0000000000000020 R14: 0000000000000000 R15: 000000c6c2b849d4
[  853.689750][    C0] FS:  0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[  853.689764][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  853.689773][    C0] CR2: 000000110c46a174 CR3: 00000000350b6000 CR4: 00000000003526f0
[  853.689784][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  853.689792][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  853.689800][    C0] Call Trace:
[  853.689805][    C0]  <NMI>
[  853.689811][    C0]  ? nmi_cpu_backtrace+0x1d8/0x390
[  853.689832][    C0]  ? nmi_cpu_backtrace_handler+0xc/0x20
[  853.689849][    C0]  ? nmi_handle+0x1ac/0x5d0
[  853.689870][    C0]  ? native_apic_msr_write+0x28/0x40
[  853.689884][    C0]  ? default_do_nmi+0x6a/0x160
[  853.689904][    C0]  ? exc_nmi+0x170/0x1e0
[  853.689921][    C0]  ? end_repeat_nmi+0xf/0x53
[  853.689943][    C0]  ? native_apic_msr_write+0x28/0x40
[  853.689957][    C0]  ? native_apic_msr_write+0x28/0x40
[  853.689972][    C0]  ? native_apic_msr_write+0x28/0x40
[  853.689985][    C0]  </NMI>
[  853.689990][    C0]  <IRQ>
[  853.689994][    C0]  lapic_next_event+0x10/0x20
[  853.690013][    C0]  clockevents_program_event+0x26f/0x380
[  853.690032][    C0]  tick_program_event+0xa9/0x140
[  853.690047][    C0]  hrtimer_interrupt+0x3e4/0x8e0
[  853.690065][    C0]  __sysvec_apic_timer_interrupt+0x10f/0x400
[  853.690084][    C0]  sysvec_apic_timer_interrupt+0x9f/0xc0
[  853.690098][    C0]  </IRQ>
[  853.690102][    C0]  <TASK>
[  853.690107][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  853.690125][    C0] RIP: 0010:acpi_safe_halt+0x1a/0x20
[  853.690144][    C0] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 48 8b 05 08 78 ac 74 48 8b 00 a8 08 75 0c 66 90 0f 00 2d 58 4c 87 00 fb f4 <fa> c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  853.690156][    C0] RSP: 0018:ffffffff8de07d70 EFLAGS: 00000246
[  853.690166][    C0] RAX: 0000000000004000 RBX: 0000000000000001 RCX: ffffffff8b574469
[  853.690175][    C0] RDX: 0000000000000001 RSI: ffff888143ee0800 RDI: ffff888143ee0864
[  853.690184][    C0] RBP: ffff888143ee0864 R08: 0000000000000001 R09: ffffed10170c6f85
[  853.690192][    C0] R10: ffff8880b8637c2b R11: 0000000000000000 R12: ffff8881472cc800
[  853.690201][    C0] R13: ffffffff8ee2e060 R14: 0000000000000000 R15: 0000000000000000
[  853.690211][    C0]  ? ct_kernel_exit+0x139/0x190
[  853.690228][    C0]  acpi_idle_enter+0xc5/0x160
[  853.690246][    C0]  cpuidle_enter_state+0xaa/0x4f0
[  853.690263][    C0]  ? __pfx_tsc_verify_tsc_adjust+0x10/0x10
[  853.690283][    C0]  cpuidle_enter+0x4e/0xa0
[  853.690300][    C0]  do_idle+0x310/0x3f0
[  853.690317][    C0]  ? __pfx_do_idle+0x10/0x10
[  853.690335][    C0]  cpu_startup_entry+0x4f/0x60
[  853.690351][    C0]  rest_init+0x16b/0x2b0
[  853.690367][    C0]  ? acpi_subsystem_init+0x133/0x180
[  853.690384][    C0]  ? __pfx_x86_late_time_init+0x10/0x10
[  853.690398][    C0]  start_kernel+0x3e9/0x4d0
[  853.690412][    C0]  x86_64_start_reservations+0x18/0x30
[  853.690433][    C0]  x86_64_start_kernel+0xb2/0xc0
[  853.690445][    C0]  common_startup_64+0x13e/0x148
[  853.690469][    C0]  </TASK>
[  854.106276][ T5864] gspca_main: sunplus-2.14.0 probing 04a5:3003
[  854.110319][T15517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  854.112951][ T5864] gspca_sunplus: reg_w_riv err -71
[  854.126352][T15517] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  854.127953][  T972] asix 10-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  854.137890][ T5864] sunplus 9-1:0.0: probe with driver sunplus failed with error -71
[  854.145029][  T972] asix 10-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71
[  854.161538][ T9696] em28xx 1-1:0.89: Freeing device
[  854.164871][T11002] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  854.177908][ T5864] usb 9-1: USB disconnect, device number 44
[  854.178063][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  854.178076][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc4-syzkaller-00248-g03d38806a902 #0
[  854.178095][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  854.178105][   T30] Call Trace:
[  854.178111][   T30]  <TASK>
[  854.178119][   T30]  dump_stack_lvl+0x3d/0x1f0
[  854.178144][   T30]  panic+0x71d/0x800
[  854.178167][   T30]  ? __pfx_panic+0x10/0x10
[  854.178183][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[  854.178207][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  854.178227][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[  854.178247][   T30]  ? watchdog+0xdcc/0x12b0
[  854.178277][   T30]  ? watchdog+0xdbf/0x12b0
[  854.178301][   T30]  watchdog+0xddd/0x12b0
[  854.178327][   T30]  ? __pfx_watchdog+0x10/0x10
[  854.178347][   T30]  ? lockdep_hardirqs_on+0x7c/0x110
[  854.178368][   T30]  ? __kthread_parkme+0x148/0x220
[  854.178384][   T30]  ? __pfx_watchdog+0x10/0x10
[  854.178406][   T30]  kthread+0x3af/0x750
[  854.178425][   T30]  ? __pfx_kthread+0x10/0x10
[  854.178447][   T30]  ? __pfx_kthread+0x10/0x10
[  854.178465][   T30]  ret_from_fork+0x45/0x80
[  854.178485][   T30]  ? __pfx_kthread+0x10/0x10
[  854.178503][   T30]  ret_from_fork_asm+0x1a/0x30
[  854.178529][   T30]  </TASK>
[  854.183921][   T30] Kernel Offset: disabled