last executing test programs:

9m8.254953125s ago: executing program 0 (id=895):
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x20, 0x1000, {0x0, 0x0, 0x1}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x100003f}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x100})

9m8.028222297s ago: executing program 0 (id=897):
socket$nl_generic(0x10, 0x3, 0x10)
getpid()
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0xa8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='sched_switch\x00'}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a80)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r3)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r4, &(0x7f0000000200)=""/85, 0xaa)

9m6.924405173s ago: executing program 0 (id=902):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES32], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, &(0x7f00000001c0))
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x40200)
ioctl$HIDIOCGUSAGE(r1, 0x501c4814, &(0x7f00000001c0)={0x2, 0xffffffff, 0x0, 0xf21, 0x7, 0x82d8})

9m3.540347079s ago: executing program 0 (id=918):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', 0x20}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x8b101a, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]})
sigaltstack(0x0, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x2125099, 0x0)
mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262)
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30)

9m3.39442007s ago: executing program 0 (id=920):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000200)=""/85, 0xaa)

9m0.153770278s ago: executing program 0 (id=927):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000fffff0006574683a73797a6b616c6c657230"], 0x38}}, 0x0)

8m59.180373938s ago: executing program 32 (id=927):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000fffff0006574683a73797a6b616c6c657230"], 0x38}}, 0x0)

53.474849824s ago: executing program 4 (id=2591):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = semget$private(0x0, 0x207, 0x0)
semctl$GETALL(r4, 0x0, 0xd, 0xfffffffffffffffe)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, 0x0, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x20000801}, 0x4)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000014c0)={'macvtap0\x00', 0x0})
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071004000000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c080}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0xe3, 0x8}, {0x6, 0xfffe, 0x10, 0x8}}}}, 0x15)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_io_uring_setup(0x88f, &(0x7f0000000340)={0x0, 0xa439, 0x80, 0x800002, 0x23b9}, &(0x7f0000000000), &(0x7f0000000040))
syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)

50.336207073s ago: executing program 4 (id=2599):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000005580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x74, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0x18}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xbc}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)

50.178390091s ago: executing program 4 (id=2600):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="340100001700010027bd7000fedbdf25ac1e0101000000000000000000000000000004d4ff0000007f000001000000000000000000000000e000000200000000000000000000ff80fe8800000000000000000000000001014e2101004e2000030200e0203b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff020000000000000000000000000001ffffffff0000000000000000000000004e2100094e2200830a0000000c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="6b000000000000002bec00cc9e00000005000000000000000a00000000000000d500000000000000060000000000000006000000000000000b000000000000000e00000000000000a000000000000000090000000020f3ffffffffffffff0002ba00000000000000020000030000000003000000010000000002000029bd70000c0008"], 0x134}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

50.137614997s ago: executing program 4 (id=2601):
r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_crypto(0x10, 0x3, 0x15)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$tmpfs(0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always'])
shmctl$SHM_STAT(0x0, 0xd, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="6c00000002060101000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a3100000000200007800500030017d400000c0001800800014000000000080006400000000405000500020000000500010006"], 0x6c}}, 0x40000)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000084)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='minix\x00', 0x23d476, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)={[{@xino_auto}], [], 0x2f})
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001300)={0x10, 0x2d, 0x1}, 0x10}], 0x1}, 0x300)
r3 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r3, 0x84, 0x84, 0x0, 0x0)
ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000380)={0x0, 0x1, 0x2, 0x6dd, 0x110, 0xe, 0x20, 0x3, 0x20, 0xffffffff, 0x20, 0x4, &(0x7f00000000c0), 0x0, 0x0})

49.417966495s ago: executing program 4 (id=2603):
r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r1 = gettid()
process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40086602, &(0x7f0000000000))
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0xfffffff7)
r3 = fsmount(r0, 0x1, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r4, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e)
fchdir(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000050c0200000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000e0010380dc010080080003400000000273000b802c0001800a0001006c696d69740000001c0002800c0001"], 0x290}, 0x1, 0x0, 0x0, 0x4c004}, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x40000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file2'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x3c, 0x40, 0x107, 0xfffffffa, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x20, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x14, 0x1c, 0x0, 0x0, @ipv6=@mcast1}]}, @nested={0x4, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000200))
syz_open_dev$hiddev(&(0x7f0000000000), 0xb3, 0x420000)
chdir(0x0)

48.139986033s ago: executing program 4 (id=2607):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x200880, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000040), 0x4, 0x101402)
ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000080)=0x1)
r2 = epoll_create1(0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b000000000000000000b2000000", @ANYBLOB="be4ab2e128005dbff5858fe2d244527f2387675d693fc6e9dc0713587bdd000d7a885f07711298fd2870092531cbaa5ede90fb01287c2861700786c1f0970e6551fcde4f8d6ace8b2e669eba9382eb41c3ece6c16f588e6ae29e55c4f7654ed6901b3ef31aa50a76088a9c920068ba93361121181e62c8419d880d67a03799442c1b2578166365f7239b8f7e63b8032cca3439d6fcf6a37659bfc5302a4f5cf70ed32366c7941049"], 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="d2ffdd935517f3e145fa02e086dd", 0x0, 0xd5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007440)=[{{&(0x7f0000001ec0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000002040)=[{&(0x7f0000001f40)="bd7493b1f560f22eeef007ed80cb38f1dc356ad769b534b265f5406a88dec28da9d82709ea808e96bb072016c30133d8b285d510e49f09e9f77d0cfcf5b3784665cb32d325c985127ed7af97b8a9e871765b5d3b9ab47c72b16d15287ab34e91d47306d502ef516518bded24825ab71b8e04cd78d321e6e1c70d40f99f7557c181f6a263dc3be29b197129af72d90b6a00173892c8aa0e8c6b8d97926bdf27fd6c14f1d8fca96bd615e8d059423f224b19891552a7c3171a92e3c8d3cfd1cce76833ccea3913122b", 0xc8}], 0x1, 0x0, 0x0, 0x800}}, {{&(0x7f0000006840)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001bc0)=[{&(0x7f00000068c0)="f9343c58d3b55ec984e33546da7a8d636baba5667d904a419b749fecee42e3f0548bea1dcd", 0x25}, {&(0x7f0000006a00)="7acf92dc9dbebd04d57c5431d8d4e1d554415f29f7bb96505c3246598a390fc76fa468f3f8b36f2926db6e874530d39e128c69b2537addd368989e9a09dfab706843", 0x42}, {&(0x7f0000006ac0)="bf8082ad586ca724f7a2c3854a509e1e650ad7ce916a84d09758f7862c047b81ab93b94fc2d90fc7e635715f4923d23aaf575ddf52ed4170f3ad5099066b24b388c49433c87d1a808581eeb4", 0x4c}, {&(0x7f0000006bc0)="4941f356ee6031459e3c3ad3c883b8ce1ea59a5acb5042f8fda42a8ce27d03e06fb7e51dc210ce08fdbaca8811a16d51092113c9d0d41949ddbd62b92ca64b116395dc5d28ac05ac8bb7e3c78bad4c63d970453b90710fe594c01c579e653294394017bb1669bfd0b0f84a696ade11ea3e9759b9586470167290c77f94a272f1a70471e2f1cfc77fbdc834dc1be7492c664c9371886c728898", 0x99}, {&(0x7f0000001ac0)}], 0x5, &(0x7f0000000c00)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRESDEC=r3, @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="04000000", @ANYRES32, @ANYBLOB="0bf4a9304557fd980b8c3cb0b17fccc6ca7bacbf93e9607619491372e3b5f10e591cd452456f8b877aa78f5b6ff0a1ffb060ba73b9f49ea701e4ca190d96c0016224c217123f27e1d9be4fda0794", @ANYBLOB="100000000000000001000000010000001c000000000000000100000001000000", @ANYRES8=r2, @ANYRES32, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00'], 0xa8, 0x4044094}}, {{0x0, 0x0, &(0x7f0000007300)=[{&(0x7f0000000980)="5be31eda39bd263bcb0b0ac32856657a1644fc925f243d1a7794692a450d94666d38db89af807e0b00c59d36e656297c045a3354ee57a9991bb25f6e8b3e37e69486ea5838d447d98e2a49ca11375bfd8236a251efa8b1399d03be4bade447577f5b0103a0b5570d06ff418bf08f4f76235e1e22398c87f65a6dea1d9d96156ef028288e749283666611290362655d3128d279c7c21072287f80cc8941bac6c5e6889011f514", 0xa6}], 0x1, &(0x7f0000001d00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="00000000100000000010000001000000010002001c0000000000000801000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x50, 0x8003}}], 0x3, 0x4008810)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = socket(0x40000000015, 0x5, 0x0)
syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x3238, 0x400, 0xffffffff, 0x288}, &(0x7f0000000340)=<r5=>0x0, &(0x7f0000000540)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x100, &(0x7f0000000080)=0xfffffffd, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x438}, 0x0, 0x12f4c4729364eade, 0x1})
syz_genetlink_get_family_id$ethtool(&(0x7f0000003e40), 0xffffffffffffffff)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000240)={0x0, 0x5})
connect$rxrpc(0xffffffffffffffff, 0x0, 0x0)

32.753214519s ago: executing program 33 (id=2607):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x200880, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000040), 0x4, 0x101402)
ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000080)=0x1)
r2 = epoll_create1(0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b000000000000000000b2000000", @ANYBLOB="be4ab2e128005dbff5858fe2d244527f2387675d693fc6e9dc0713587bdd000d7a885f07711298fd2870092531cbaa5ede90fb01287c2861700786c1f0970e6551fcde4f8d6ace8b2e669eba9382eb41c3ece6c16f588e6ae29e55c4f7654ed6901b3ef31aa50a76088a9c920068ba93361121181e62c8419d880d67a03799442c1b2578166365f7239b8f7e63b8032cca3439d6fcf6a37659bfc5302a4f5cf70ed32366c7941049"], 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="d2ffdd935517f3e145fa02e086dd", 0x0, 0xd5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007440)=[{{&(0x7f0000001ec0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000002040)=[{&(0x7f0000001f40)="bd7493b1f560f22eeef007ed80cb38f1dc356ad769b534b265f5406a88dec28da9d82709ea808e96bb072016c30133d8b285d510e49f09e9f77d0cfcf5b3784665cb32d325c985127ed7af97b8a9e871765b5d3b9ab47c72b16d15287ab34e91d47306d502ef516518bded24825ab71b8e04cd78d321e6e1c70d40f99f7557c181f6a263dc3be29b197129af72d90b6a00173892c8aa0e8c6b8d97926bdf27fd6c14f1d8fca96bd615e8d059423f224b19891552a7c3171a92e3c8d3cfd1cce76833ccea3913122b", 0xc8}], 0x1, 0x0, 0x0, 0x800}}, {{&(0x7f0000006840)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001bc0)=[{&(0x7f00000068c0)="f9343c58d3b55ec984e33546da7a8d636baba5667d904a419b749fecee42e3f0548bea1dcd", 0x25}, {&(0x7f0000006a00)="7acf92dc9dbebd04d57c5431d8d4e1d554415f29f7bb96505c3246598a390fc76fa468f3f8b36f2926db6e874530d39e128c69b2537addd368989e9a09dfab706843", 0x42}, {&(0x7f0000006ac0)="bf8082ad586ca724f7a2c3854a509e1e650ad7ce916a84d09758f7862c047b81ab93b94fc2d90fc7e635715f4923d23aaf575ddf52ed4170f3ad5099066b24b388c49433c87d1a808581eeb4", 0x4c}, {&(0x7f0000006bc0)="4941f356ee6031459e3c3ad3c883b8ce1ea59a5acb5042f8fda42a8ce27d03e06fb7e51dc210ce08fdbaca8811a16d51092113c9d0d41949ddbd62b92ca64b116395dc5d28ac05ac8bb7e3c78bad4c63d970453b90710fe594c01c579e653294394017bb1669bfd0b0f84a696ade11ea3e9759b9586470167290c77f94a272f1a70471e2f1cfc77fbdc834dc1be7492c664c9371886c728898", 0x99}, {&(0x7f0000001ac0)}], 0x5, &(0x7f0000000c00)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRESDEC=r3, @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="04000000", @ANYRES32, @ANYBLOB="0bf4a9304557fd980b8c3cb0b17fccc6ca7bacbf93e9607619491372e3b5f10e591cd452456f8b877aa78f5b6ff0a1ffb060ba73b9f49ea701e4ca190d96c0016224c217123f27e1d9be4fda0794", @ANYBLOB="100000000000000001000000010000001c000000000000000100000001000000", @ANYRES8=r2, @ANYRES32, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00'], 0xa8, 0x4044094}}, {{0x0, 0x0, &(0x7f0000007300)=[{&(0x7f0000000980)="5be31eda39bd263bcb0b0ac32856657a1644fc925f243d1a7794692a450d94666d38db89af807e0b00c59d36e656297c045a3354ee57a9991bb25f6e8b3e37e69486ea5838d447d98e2a49ca11375bfd8236a251efa8b1399d03be4bade447577f5b0103a0b5570d06ff418bf08f4f76235e1e22398c87f65a6dea1d9d96156ef028288e749283666611290362655d3128d279c7c21072287f80cc8941bac6c5e6889011f514", 0xa6}], 0x1, &(0x7f0000001d00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="00000000100000000010000001000000010002001c0000000000000801000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x50, 0x8003}}], 0x3, 0x4008810)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = socket(0x40000000015, 0x5, 0x0)
syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x3238, 0x400, 0xffffffff, 0x288}, &(0x7f0000000340)=<r5=>0x0, &(0x7f0000000540)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x100, &(0x7f0000000080)=0xfffffffd, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x438}, 0x0, 0x12f4c4729364eade, 0x1})
syz_genetlink_get_family_id$ethtool(&(0x7f0000003e40), 0xffffffffffffffff)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000240)={0x0, 0x5})
connect$rxrpc(0xffffffffffffffff, 0x0, 0x0)

16.228940828s ago: executing program 3 (id=2695):
getpid() (async)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f00000004c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10, 0x0, 0x0, &(0x7f00000025c0)=ANY=[], 0x18}, 0x1050) (async)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000240)=0x5000, 0x4)
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r4, 0x0, 0x16, 0x0, 0x0) (async, rerun: 64)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (rerun: 64)
prctl$PR_SCHED_CORE(0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x7, 0x0, 0x200000000000b49, 0x2, 0x8, 0xfffffffd, 0x6}, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r5, 0x0, 0x8, 0x0, 0x0) (async)
openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x32c180) (async, rerun: 32)
mknodat(0xffffffffffffffff, &(0x7f00000000c0)='./file2\x00', 0x8000, 0x0) (async, rerun: 32)
r6 = socket(0x10, 0x5, 0xd)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000003c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3c, 0x0, 0x7e3875a1, 0x40, 0x2, 0xf, 0x5}})
r7 = socket$kcm(0x10, 0x2, 0x0) (async)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) (async)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00')
read$FUSE(r8, &(0x7f0000000640)={0x2020}, 0x2020) (async)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f0000000200)=0x8) (async)
socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}, {&(0x7f0000002680)="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", 0x1000}, {&(0x7f0000000440)="ced6bc13b12a9bd967d078208050b801100b0a5969e651b6c348881e46019c822b91cee5a487c035ae490ebcd000a67ab1a9ef122ecbd77923aa6e853ac51bc90c08173cb4dd544f7bee7f90318e7a7e18dee4b39051bf4bf2f5ee5801102fae7b721d6370718eaf81ef", 0x6a}], 0x4}, 0x40) (async, rerun: 32)
sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) (rerun: 32)

15.212138721s ago: executing program 1 (id=2698):
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0)
r1 = gettid()
timer_create(0x7, &(0x7f0000000100)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140)=<r2=>0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r6, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r6, &(0x7f0000000540)={&(0x7f0000000300)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000640)=[@rdma_map={0x24, 0x114, 0x3, {{0x0}, 0x0, 0x10}}], 0x30, 0x8010}, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x9, @mcast2, 0x2}}}, 0x30)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r7, &(0x7f00000004c0), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r7, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
cachestat(r7, &(0x7f0000000040), 0x0, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
socket$xdp(0x2c, 0x3, 0x0)
r9 = syz_io_uring_setup(0x1e7f, &(0x7f0000000540)={0x0, 0xac24, 0x10000, 0x3, 0xc}, &(0x7f0000000080), &(0x7f0000000000))
io_uring_enter(r9, 0x3512, 0xc2de, 0x44, 0x0, 0x0)
splice(r5, 0x0, r8, 0x0, 0xf3a, 0x0)
write$binfmt_misc(r8, &(0x7f0000000980), 0xfdef)
splice(r3, 0x0, r8, 0x0, 0x80, 0x4)
timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000980)={0x2020}, 0x2020)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="780000000001010400000000141a000002000010240001801400b03708000100e000000108000200e00000010c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414bb0c000280050001000000080008000740000000011400164000000009000000020000000800000007ec309b6cf94a00785abaa2a812ea2d"], 0x78}}, 0x0)
ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0040d03, &(0x7f0000000040)=0x120)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000000c0))
syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
fanotify_init(0x200, 0x0)

14.258923366s ago: executing program 1 (id=2700):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = semget$private(0x0, 0x207, 0x0)
semctl$GETALL(r3, 0x0, 0xd, 0xfffffffffffffffe)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000014c0)={'macvtap0\x00', 0x0})
socket$can_j1939(0x1d, 0x2, 0x7)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071004000000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c080}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0xe3, 0x8}, {0x6, 0xfffe, 0x10, 0x8}}}}, 0x15)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_io_uring_setup(0x88f, &(0x7f0000000340)={0x0, 0xa439, 0x80, 0x800002, 0x23b9}, &(0x7f0000000000), &(0x7f0000000040))
syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)

12.952508644s ago: executing program 3 (id=2704):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a090400000000000000000200f5ff0900010073797a30000000000900020073797a3200000000380000001c0a050000000000000000000200000a0c00034000000000000000420900020073797a32000000000900010073797a30"], 0x8c}}, 0x0)

12.762261619s ago: executing program 3 (id=2705):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}]}, 0x34}}, 0xc0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010030000000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="009eff0000100000240012800b0001006d"], 0x44}}, 0x0)

12.538798721s ago: executing program 3 (id=2706):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_usb_connect(0x5, 0x0, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000040000000000000000040000000a20000000000a05000000000000000000070000010900010073797a30840000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000018c0000000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000600003805c000080080003400000000250000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010200001800e000100636f6e6e"], 0x110}}, 0x0)

11.840933741s ago: executing program 5 (id=2707):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000001e00431b000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="00000000090000005e385e02873cdb0ebba862d009fac889c66dc63bb380cfac1c41b4cb0cbd60c97ccb84a127474d828a8337f3506a999de6bb58fb11081bd8bdaabbff7e20dca4a7f6b9e700d6485a5fe9f919e24d3c7d10c61bb3af5b325cee5173e0dacd433b0f508b7341bb0b60159cb82cf9481bce4a712b27429176306e80874b5462ee7549c3007de1da7444166d1b491154c9e2d5afdec50a06e8ce59caf99bda814101fd7bc72ec6dd04ffa3d1d5ce32845954ec209dff44ba5d569ec299ab1b7de20066"], 0x20}}, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000010)
syz_init_net_socket$ax25(0x3, 0x2, 0xc4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000040)=0xfffffffb)
r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1f8)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_fuse_handle_req(r6, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e9ff00", 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x2100039, 0x0, 0x0, 0x1, 0x57, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
lsetxattr(&(0x7f00000002c0)='./file0/file1\x00', &(0x7f0000000300)=@known='trusted.syz\x00', 0x0, 0x0, 0x3)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSWINSZ(r7, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x5})
ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0)
syz_emit_ethernet(0x66, &(0x7f00000005c0)=ANY=[], 0x0)

11.062992306s ago: executing program 1 (id=2710):
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000200)=@chain)
fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/mdstat\x00', 0x1800, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x880)
r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x726c, 0xc000, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x20)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
set_mempolicy(0x3, &(0x7f0000000100)=0x3, 0x9)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc, 0x2000000}, 0x1c)

10.801610598s ago: executing program 5 (id=2712):
add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000340)="0000000000000002ff690000000000010007001800000006000200861fa72e5b01504104bfeacdd5a9007d16", 0x2c, 0xffffffffffffffff)

9.975475629s ago: executing program 5 (id=2713):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {}, {0xc, 0x7, {0x700}}, {0xc}}}]}]}, 0xa0}}, 0x0)

9.638246215s ago: executing program 5 (id=2715):
r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x0)
syz_emit_ethernet(0x46, &(0x7f00000003c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '0\x00;', 0x10, 0x2b, 0x0, @private2, @local, {[@srh={0x0, 0x0, 0x2}], {0x0, 0x0, 0x8}}}}}}, 0x0)
fchdir(r1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x2f08, 0xd, 0x0, &(0x7f0000000380)="a162cef0563a20f5177241ee8f", 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50)
r3 = eventfd(0x0)
ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3})
syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c2402000000030000000000092406", @ANYRESHEX], 0x0)
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/67, 0x0, 0x4})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/57, 0xd000})
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3})
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1)
fchdir(0xffffffffffffffff)

9.458953951s ago: executing program 3 (id=2716):
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0)
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x90880, 0x0)
r1 = syz_io_uring_setup(0x56dc, &(0x7f0000000680)={0x0, 0xfcbb, 0x12104, 0x1, 0x19c, 0x0, r0}, &(0x7f0000000540)=<r2=>0x0, &(0x7f0000000700)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1})
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
r5 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x1c4d, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=<r6=>0x0, &(0x7f00000000c0)=<r7=>0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r8 = getpid()
sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
connect$unix(r9, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, 0x0, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x5, 0x0})
io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0)
io_uring_enter(r1, 0x1d39, 0xcec, 0x0, 0x0, 0x0)

8.14010541s ago: executing program 2 (id=2718):
iopl(0x3)
r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080), 0x401, 0x0)
recvfrom$rxrpc(r0, &(0x7f00000000c0)=""/1, 0x1, 0x22, &(0x7f0000000100)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, '\x00', 0x30}}}, 0x24) (async)
recvfrom$rxrpc(r0, &(0x7f00000000c0)=""/1, 0x1, 0x22, &(0x7f0000000100)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, '\x00', 0x30}}}, 0x24)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r2) (async)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r2)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000580)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x24}, 0x1, 0x1000000, 0x0, 0x24008850}, 0x4004a040)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r5 = mq_open(&(0x7f0000000580)='!\x7f\x00\xca\x00\x00\x00\f\x00vt\x00\x01E!\x05\x99\xb7|`', 0x6e93ebbbcc0884f2, 0x61, &(0x7f0000000480)={0x0, 0x2, 0x7})
mq_timedreceive(r5, &(0x7f0000000700)=""/200, 0xc8, 0x0, 0x0) (async)
mq_timedreceive(r5, &(0x7f0000000700)=""/200, 0xc8, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYRES16=r0, @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRES16=r5, @ANYRESHEX=r1], 0x24}, 0x1, 0x0, 0x0, 0x2004c0d2}, 0xcc084)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
wait4(0x0, &(0x7f0000000400), 0x8, &(0x7f00000004c0)) (async)
wait4(0x0, &(0x7f0000000400), 0x8, &(0x7f00000004c0))
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async)
r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) (async)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x9)
socket$nl_route(0x10, 0x3, 0x0) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r9=>0x0})
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000f00)=ANY=[@ANYBLOB="8500000008000000350000000000000085000000050000009500000000000000fed023000000c71adb30be7d75fa1f32f08a23ce3220b0cc9505d72768b8242dd90d17e4c52505756ca2b009546a0900000000000000d3df2bd87184446d165ae3939bbca322a415a98c8801000000000000800859362ed862b3c47f82000000adfd2f16af3a00000000000000000000009a317aa34f0c50f99eedac26048ab915e1be5aa845be00de14683ee4e859d65564a9c79d20e5a011e966388cd0bb39f45d6c508b8a0f7f2d48be0e2a8137c6741775428abf2ddfd2a473f5b271701e22f8cb42198906e1107fa780c435083cac323838727afbfb995f99b82df3b363a9cf6ba87fdfbf5a3dd0dde49b4193520e5e946687634c04000000000000bfbcd911eba0dee5e5ce6434f86fe82ee02f0e8e3173a97d85e232e584ace13387693614f3a74dc418e58f3e98933b2c93fae25ec2dd190231e2531e1ffeff33676a4383a918cba3ad8318ea29f164563a42cdb596f255a251add2d2ae2fac0a0e7421e4bf07fc884be5721bdffe58c6a4b57014ce976ce8b9cddfa50175c53253d7659f0e88913d4fa7f309eb40337fada4363c0698510730725e23bdad60ceaeecfeeccc397565f204b82d000000007a1b4abeadf350c21027d314237a9d448b82827ff3f29cc9b46c8fcfbb30d1fc38311f0918707c252b596cdbf4e77836adc1f59f9d1280333d135fdcdcee8eb817388666e02ff1b148b6bc3c283e71c0ad9c683c6bb6fea2d2d54af3ad488f0cc2e54a70c19ceac518adbe917652c34019d7478c716ab23d4a863b4dcd08d89f6cec674e9fd379d71e06357d207984e885ace8a0dbaffef403aff01d5f2f0e644b61cd8bd72a59f2d7cf67815aeb8761412d68c40dbed08b7eeda96b3856a519a71b83c19b2e8f88d92b66abec165663819a87e7cd8c082cb011051789c283eecfe08f0799f6c7023353b6d3af7177d6b5420b1784b53238b39c0db1da864e593d45fd297e4d34e749bc737e0bcf36fd955a40124c00d40c3f21d26e6e276152412b4ef3f52dc416bb2d7463a93ee6c0b20c5749a44677a3c3a7aa9a47c7cd7bb52fbb2c8d63166f4ad1038f33258736b2224a66726f1fd4dce0eb6043a55fbdd341baba95cc5838a860068e0f3e73d992403455b03b25bd5414628d7325a6b25986666b3368210686dab3a6be8b8d4bd9347c83cb693aebab072fe479705b0c6c9bb9728d131f8320b966898de1a16407692b57b6f7333eac0d2ed0a7a4457d9c70089fcf9aa553929a65777f3bbf6d0bdc6a11371a138c6d4b0fefc655716e4486f5c7a88e80b2fb0efb579333bef98ded75abfb982b1fb92f003a6aefb8bf25eacb848d8ed1c1162d000000000000000000000000e87dffd60f123527781805434d210bb72ac2c097c45b27dde4980bc85b43614d266a9d403c320f80646c7df8bdd1cf3800"/1071], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff79}, 0x16)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r10, 0x0, 0x83, 0x0, &(0x7f0000000e40)="04d31fcd275bfc58188e699fa7c9aa904991771e83b702f3717cf38ed0e92e83ae490758991fa1174a75fa8c45db732026d3de611ffbd09b683e2f08812d695dd9b87f08711c02bb5d2cbac05022bee8aee5339fb6eba21e534e43b9960f470bf9c075368c6a7ee0b6ef641feb6967490ae07547819adcf47330679551ae2bd7009b31", 0x0, 0x947, 0x0, 0x1b, 0x4b, &(0x7f0000000000), &(0x7f0000000e00)="2fda8e7aa8d9cecae13bcbb35230d1cf1f1b23e33fcbd1aa1bea454b04650cecef80daa9a0a349a8e46d661af6e7ee8cdb5e97e738fe54"}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r10, 0x0, 0x83, 0x0, &(0x7f0000000e40)="04d31fcd275bfc58188e699fa7c9aa904991771e83b702f3717cf38ed0e92e83ae490758991fa1174a75fa8c45db732026d3de611ffbd09b683e2f08812d695dd9b87f08711c02bb5d2cbac05022bee8aee5339fb6eba21e534e43b9960f470bf9c075368c6a7ee0b6ef641feb6967490ae07547819adcf47330679551ae2bd7009b31", 0x0, 0x947, 0x0, 0x1b, 0x4b, &(0x7f0000000000), &(0x7f0000000e00)="2fda8e7aa8d9cecae13bcbb35230d1cf1f1b23e33fcbd1aa1bea454b04650cecef80daa9a0a349a8e46d661af6e7ee8cdb5e97e738fe54"}, 0x50)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}]}, 0x58}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002)

7.79410736s ago: executing program 2 (id=2719):
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e24, @loopback}}, 0x0, 0x0, 0x2d, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46f672f2a7a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308f3d40aa1c788df6"}, 0xd8)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x16ba82, 0x10)
write$selinux_load(r1, 0x0, 0x10c)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x6000050)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000c00020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700010005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c000780080006"], 0x5c}}, 0x0)

7.176617039s ago: executing program 5 (id=2720):
syz_emit_ethernet(0xbe, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450000b000000000001190780000e0ffffff000000004e22009c907801000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000"/190], 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x18)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4400)
getsockopt(0xffffffffffffffff, 0x200000000114, 0x2717, 0x0, &(0x7f0000000000))
getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3c, 0x0, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x404c881, 0x0, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ufs\x00', 0x2208004, 0x0)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180008ac0f000000000014000100"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
r6 = fsopen(&(0x7f0000000300)='jfs\x00', 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, 0x0, 0x7a7350fb00ab6963}, 0x20)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000ec0)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(cbcmac(cast5-generic))\x00'}, 0x58)
fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f0000000000)=')#&{\x00', 0x0, r6)
close_range(r6, 0xffffffffffffffff, 0x0)

7.17630821s ago: executing program 1 (id=2721):
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x269, 0x0, 0x0, 0x1})
lsm_set_self_attr(0x66, &(0x7f0000000240)={0x65, 0x100000001, 0x20}, 0x20, 0x0)

7.121667061s ago: executing program 2 (id=2722):
r0 = gettid()
mkdir(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff000000e8ff000003424203"], 0x0)
mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x18)
renameat2(r2, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2)
setpgid(r0, r0)
syz_usb_connect(0x1, 0x763, &(0x7f0000001000)={{0x12, 0x1, 0x300, 0xf6, 0x9a, 0x3b, 0x20, 0x846, 0x4250, 0x47a6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x751, 0x2, 0x0, 0x0, 0xe8, 0x0, [{{0x9, 0x4, 0x65, 0xcd, 0x3, 0xb8, 0x21, 0x61, 0x8, [], [{{0x9, 0x5, 0x3, 0x1f, 0x40, 0x87, 0x2, 0xe2, [@generic={0x100, 0x23, "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"}]}}, {{0x9, 0x5, 0x9, 0x8, 0x10, 0x8, 0xa, 0x7d, [@generic={0x14, 0x21, "d92c655b6f285ff867f5c8024b8c18b309fd"}]}}, {{0x9, 0x5, 0x8, 0x8, 0x200, 0xf, 0x9e, 0xfc, [@generic={0xa1, 0x8, "dde6cea08982ff0c32f4c4a888dd4a36b4363a50f68b3662487a7dde9f960e45065dac939c5ea9247b0e4d56c93a312b937c26e7286782752dc957a7b4e1f6323d498db9f0d8b2976fdb4f5d6a7d600aff96e866ce6ca5395af122298e916f999b9f94c3545828ec4dd8403240a77d43c23d752cc4c5cd5959d1b8630c30baaeb3985e8f5f4e1ea57435299dad8fbc14d0a4cdd0ca51b31d461569d22f60ea"}]}}]}}, {{0x9, 0x4, 0x8c, 0xe, 0xc, 0xff, 0x2, 0x65, 0x4, [], [{{0x9, 0x5, 0xb, 0x1, 0x40, 0x0, 0x0, 0x8, [@generic={0xe2, 0xf, "9614d200b9fa1f8ae663c801aaa9cf7700f07a1dfc3757e6b37907dc9e88cecffde756eff201aa10abb30443cfdd7c4e27b515af06a28e6219e83d076e2045050457dd03d6d9b9cf806a4ea25e9a9c45ac40f66acdbb27c384bdb37e8001f909171e93cfa42a224be1b8684cac738377fd753681646d16fd1cfda0f9cd4107d341536d21fd7998b0ac7fa14915b617a940720474cbec12308e6fc2f3ac50336011f075f55e757f50211a8a26a4c72660aa2f324c8fcfc9d3c4ef127d4bbbd7b3de6ff053e68de18331f51df5188d2f56d30116422ccc1812cb840a30edc97358"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x400, 0x0, 0x81, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x3f0}]}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0xf, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0x9}, @generic={0xe5, 0x11, "2e0e7a4df0d9a3fc322906f4bf7c0b4b4f61d69375fb15c4b0b743ab9eaa1e1d7b8104cff8f889b39ba1d792801b19ad58181967026bc85267056c85a5d6f5941f8c6e8903d7b85808d4c4714f18b9745357e09ed8a2755f1a307dfaee7d1f168089320ff11333d6c1fbdf6aeb027b2b75eac9f51da5d919726ebec8dc856a3b79fc9582ae560a439e104de9d62de51f7d0e85c7680f96c40a98a25ef2ea7110cf9eab359d314263f81fdbf887cc0a0774771fe13b9244a34ab1f09212d4df0234c320879c058e17f1803e1c236cc83e9068bbf5203dc518d4f8f72269b43c3fe1469f"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0x2, 0x5, 0x5, [@generic={0xec, 0x23, "7b422fcc42e49906a5af46d2357e04068352211d7a10c89c03048369f7e3fd343c9a76241107807edcc93d9b4463a96c526d26530a4356b988b359633a1108f11999daa4a1c470eae5afd58b7c855bdb2e3c32aa7b326255e1e8b4590816ab38c6c4f04ea04d712477313f5c8bac4ef8dd4b6c058f24080f2499b61489054a1714c3190f430f1b4e85f1550f0949c7e636cb9c20ac7040aed4ed0091c9681a3c398f6b3ba1271ff767c10231170cd7689428c1e864835553cdcebb46c179b3ef333f7884970b709efdbfb42c9d0b3fd8d0f2f6ab1e370c73be622a728ea5eb01d9bed8060ac53f15acbe"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0x2}]}}, {{0x9, 0x5, 0xe, 0x10, 0x10, 0xa, 0x1, 0xfa, [@generic={0x44, 0x3, "31b79949dd9618506005372e10bcfa5b12d734820ec7be9302e6d84b085da414ceccb1311171837223afdefb8b3f7c8e4e8dabef67e15396d2fb9976792ac22c220c"}, @generic={0x2e, 0x24, "a9f5fffea88d3ee23d32832890f0b451c54c0ea9e4ed851b4574689f4189bc952db0f57cbd6f8f2cad2d7394"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x20, 0xff, 0x3, 0x71, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf2, 0xfc01}, @generic={0xa5, 0x22, "b6826af8127ab712e5b995e7f007a9d31292797e25ccb5664d79b37f24ebf93c59aa8d56fc96eb27796718fca6e3794527fef91d5aff43999cc9214824eda1be382300b5aa8d0ca9acc0ccaa213561153e2c75e0247ade53cc40d0c276a3ca91b4bbc5e65d362c83193adcb8de7a9899d4c43612c6257d585e6528c9458e914bc045651b2ab4f3a135577285522905db53fc7f3ff622e0ddc2f4c80a3f27a0ed06d866"}]}}, {{0x9, 0x5, 0x8, 0x2, 0x0, 0xd, 0x10, 0x4, [@generic={0x4, 0x22, "8fc6"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x10, 0xff, 0x0, 0x5}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x8a, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0x1b4}, @generic={0x65, 0x23, "4a067827e18b1fc39004ed5f3c27e5359ff89fe3f9f72157547bc4f4f9411f02a045e846fe6549db16a00e4ce9851c69aeeae09d37ea93bc5bf0e6323fa2abfb17e3da25fd085dc179bfb64ad821041ab99f44c1b25ab2db0de57569ef8e847258d79f"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x400, 0x4, 0x2, 0xf}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x24, 0xb, 0xee, [@generic={0xa4, 0x10, "d6efb3749c1e292754552be6b813e7bbaa009aa98762d5d90c32921f88fccfb417ba094bfd1f403c84a1821f359586e65e80b74585997b71f90502faf6530107ef999fd757c6c3787be76a6a94e3cdb7d0fd90d2dc43993fb3e3622f0942f913e8ce8ea7ec5312da0c5d83377ba38494ae1d9cfa0ea5593e79760578f019c4b9cafbe204fd1af5d0a1344b119a50a6e47bab240abea38bf3014fe6d100f79015033f"}]}}, {{0x9, 0x5, 0xc, 0x8, 0x400, 0xc, 0x4, 0x48}}]}}]}}]}}, 0x0)
getuid()
unlinkat(r2, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4629772a4e00587b)
gettid() (async)
mkdir(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async)
open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async)
open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async)
syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff000000e8ff000003424203"], 0x0) (async)
mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x18) (async)
renameat2(r2, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) (async)
setpgid(r0, r0) (async)
syz_usb_connect(0x1, 0x763, &(0x7f0000001000)={{0x12, 0x1, 0x300, 0xf6, 0x9a, 0x3b, 0x20, 0x846, 0x4250, 0x47a6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x751, 0x2, 0x0, 0x0, 0xe8, 0x0, [{{0x9, 0x4, 0x65, 0xcd, 0x3, 0xb8, 0x21, 0x61, 0x8, [], [{{0x9, 0x5, 0x3, 0x1f, 0x40, 0x87, 0x2, 0xe2, [@generic={0x100, 0x23, "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"}]}}, {{0x9, 0x5, 0x9, 0x8, 0x10, 0x8, 0xa, 0x7d, [@generic={0x14, 0x21, "d92c655b6f285ff867f5c8024b8c18b309fd"}]}}, {{0x9, 0x5, 0x8, 0x8, 0x200, 0xf, 0x9e, 0xfc, [@generic={0xa1, 0x8, "dde6cea08982ff0c32f4c4a888dd4a36b4363a50f68b3662487a7dde9f960e45065dac939c5ea9247b0e4d56c93a312b937c26e7286782752dc957a7b4e1f6323d498db9f0d8b2976fdb4f5d6a7d600aff96e866ce6ca5395af122298e916f999b9f94c3545828ec4dd8403240a77d43c23d752cc4c5cd5959d1b8630c30baaeb3985e8f5f4e1ea57435299dad8fbc14d0a4cdd0ca51b31d461569d22f60ea"}]}}]}}, {{0x9, 0x4, 0x8c, 0xe, 0xc, 0xff, 0x2, 0x65, 0x4, [], [{{0x9, 0x5, 0xb, 0x1, 0x40, 0x0, 0x0, 0x8, [@generic={0xe2, 0xf, "9614d200b9fa1f8ae663c801aaa9cf7700f07a1dfc3757e6b37907dc9e88cecffde756eff201aa10abb30443cfdd7c4e27b515af06a28e6219e83d076e2045050457dd03d6d9b9cf806a4ea25e9a9c45ac40f66acdbb27c384bdb37e8001f909171e93cfa42a224be1b8684cac738377fd753681646d16fd1cfda0f9cd4107d341536d21fd7998b0ac7fa14915b617a940720474cbec12308e6fc2f3ac50336011f075f55e757f50211a8a26a4c72660aa2f324c8fcfc9d3c4ef127d4bbbd7b3de6ff053e68de18331f51df5188d2f56d30116422ccc1812cb840a30edc97358"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x400, 0x0, 0x81, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x3f0}]}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0xf, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0x9}, @generic={0xe5, 0x11, "2e0e7a4df0d9a3fc322906f4bf7c0b4b4f61d69375fb15c4b0b743ab9eaa1e1d7b8104cff8f889b39ba1d792801b19ad58181967026bc85267056c85a5d6f5941f8c6e8903d7b85808d4c4714f18b9745357e09ed8a2755f1a307dfaee7d1f168089320ff11333d6c1fbdf6aeb027b2b75eac9f51da5d919726ebec8dc856a3b79fc9582ae560a439e104de9d62de51f7d0e85c7680f96c40a98a25ef2ea7110cf9eab359d314263f81fdbf887cc0a0774771fe13b9244a34ab1f09212d4df0234c320879c058e17f1803e1c236cc83e9068bbf5203dc518d4f8f72269b43c3fe1469f"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0x2, 0x5, 0x5, [@generic={0xec, 0x23, "7b422fcc42e49906a5af46d2357e04068352211d7a10c89c03048369f7e3fd343c9a76241107807edcc93d9b4463a96c526d26530a4356b988b359633a1108f11999daa4a1c470eae5afd58b7c855bdb2e3c32aa7b326255e1e8b4590816ab38c6c4f04ea04d712477313f5c8bac4ef8dd4b6c058f24080f2499b61489054a1714c3190f430f1b4e85f1550f0949c7e636cb9c20ac7040aed4ed0091c9681a3c398f6b3ba1271ff767c10231170cd7689428c1e864835553cdcebb46c179b3ef333f7884970b709efdbfb42c9d0b3fd8d0f2f6ab1e370c73be622a728ea5eb01d9bed8060ac53f15acbe"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0x2}]}}, {{0x9, 0x5, 0xe, 0x10, 0x10, 0xa, 0x1, 0xfa, [@generic={0x44, 0x3, "31b79949dd9618506005372e10bcfa5b12d734820ec7be9302e6d84b085da414ceccb1311171837223afdefb8b3f7c8e4e8dabef67e15396d2fb9976792ac22c220c"}, @generic={0x2e, 0x24, "a9f5fffea88d3ee23d32832890f0b451c54c0ea9e4ed851b4574689f4189bc952db0f57cbd6f8f2cad2d7394"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x20, 0xff, 0x3, 0x71, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf2, 0xfc01}, @generic={0xa5, 0x22, "b6826af8127ab712e5b995e7f007a9d31292797e25ccb5664d79b37f24ebf93c59aa8d56fc96eb27796718fca6e3794527fef91d5aff43999cc9214824eda1be382300b5aa8d0ca9acc0ccaa213561153e2c75e0247ade53cc40d0c276a3ca91b4bbc5e65d362c83193adcb8de7a9899d4c43612c6257d585e6528c9458e914bc045651b2ab4f3a135577285522905db53fc7f3ff622e0ddc2f4c80a3f27a0ed06d866"}]}}, {{0x9, 0x5, 0x8, 0x2, 0x0, 0xd, 0x10, 0x4, [@generic={0x4, 0x22, "8fc6"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x10, 0xff, 0x0, 0x5}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x8a, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0x1b4}, @generic={0x65, 0x23, "4a067827e18b1fc39004ed5f3c27e5359ff89fe3f9f72157547bc4f4f9411f02a045e846fe6549db16a00e4ce9851c69aeeae09d37ea93bc5bf0e6323fa2abfb17e3da25fd085dc179bfb64ad821041ab99f44c1b25ab2db0de57569ef8e847258d79f"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x400, 0x4, 0x2, 0xf}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x24, 0xb, 0xee, [@generic={0xa4, 0x10, "d6efb3749c1e292754552be6b813e7bbaa009aa98762d5d90c32921f88fccfb417ba094bfd1f403c84a1821f359586e65e80b74585997b71f90502faf6530107ef999fd757c6c3787be76a6a94e3cdb7d0fd90d2dc43993fb3e3622f0942f913e8ce8ea7ec5312da0c5d83377ba38494ae1d9cfa0ea5593e79760578f019c4b9cafbe204fd1af5d0a1344b119a50a6e47bab240abea38bf3014fe6d100f79015033f"}]}}, {{0x9, 0x5, 0xc, 0x8, 0x400, 0xc, 0x4, 0x48}}]}}]}}]}}, 0x0) (async)
getuid() (async)
unlinkat(r2, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4629772a4e00587b) (async)

7.013047084s ago: executing program 1 (id=2723):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f00000005c0), 0x80, 0x0)
ptrace$peek(0x1, r1, &(0x7f0000000280))
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
socket$nl_route(0x10, 0x3, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0x6, 0x0, 0x0)
setresuid(0x0, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0xb8}}, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020500020e00000000000000070000000500060000000e000a004e24fffffffdfc010000000000000000000000000000988500000000000002000100000004d4008100000000000005000500000000000a004e22fffff800fc0000000080ffffff000000000000010600e100000000008e9e5a1d4bb9c271c09f416cae56972609cc90011da5ab498d83a14bb305c57f03eabea71bd62189e6a5bde3808935b07f22e8acfc50ac"], 0x70}, 0x1, 0x400000000000000}, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'wg0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x700, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x5}, {0xfff1, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x38}}, 0x10)

5.999819592s ago: executing program 1 (id=2724):
r0 = fsopen(&(0x7f0000000040)='securityfs\x00', 0x0)
fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f00000000c0)='nolazytime\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
r4 = socket$xdp(0x2c, 0x3, 0x0)
bind$xdp(r4, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
r6 = openat$binfmt_register(0xffffff9c, &(0x7f0000000100), 0x1, 0x0)
write$binfmt_register(r6, &(0x7f0000000180)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x7fffffff, 0x3a, '\xbe)\x00\x00\x00\x00\x00\x00', 0x3a, '\\\xbd\x00\x00\x00^{', 0x3a, './file1'}, 0x36)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10)
socket(0x840000000002, 0x3, 0xff)
lremovexattr(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trustfd.\x00\x00\x00\x00{@]\\\x00'])
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000002600010316bd7000fcffbfff01"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x1c4}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a320000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff2745400000011003701000000000000000000010000"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
syz_emit_ethernet(0x188, &(0x7f0000000380)=ANY=[@ANYBLOB="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"/389], 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)

5.330259259s ago: executing program 3 (id=2725):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000004000c0f4bae5"], 0x50)
r1 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0)
r6 = syz_usb_connect$uac1(0x0, 0x96, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0x7, 0x24, 0x5, 0x0, 0x0, "8000"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x200, 0x6, 0xff, 0xe80, 0x5, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6f, 0x2, 0x0, 0x1, "0010", "8e"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x0, 0x2a, {0x7, 0x25, 0x1, 0x82}}}}}}}]}}, 0x0)
syz_usb_control_io$uac1(r6, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r6, &(0x7f00000021c0)={0x2c, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44c}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r6, 0x0, 0x0)
syz_usb_control_io(r6, 0x0, 0x0)
syz_usb_control_io(r6, 0x0, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x24, 0x1, 0x0, 0x0, {{0x8, 0x7, 0x4}, {{0x1, 0x0, 0x1, 0x1}, {0x4, 0x1, 0x1, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x2}, {0xffffffffffffffff, 0x1, 0x8}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008004}, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000001840)=0x5d4)
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507"], 0x0)
write$P9_RAUTH(r1, &(0x7f0000000040)={0x14, 0x67, 0x1}, 0x14)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000000c0)={0xffffffffffffff07, 0x0, 0x0})

4.941030829s ago: executing program 6 (id=2726):
timer_settime(0x0, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000038c0), &(0x7f0000003900))
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = open(0x0, 0x145142, 0x0)
r5 = socket(0x40000000015, 0x5, 0x0)
close(r5)
r6 = socket$inet6(0xa, 0x2, 0x0)
r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f00000003c0)={0x0})
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000300)={&(0x7f0000000040)=[0x0, 0x0], 0x2})
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x24}, 0x5, 0x2, 0x0, 0xb, 0x0, 0x6}, 0x20)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000fc0)=@mangle={'mangle\x00', 0x2, 0x6, 0x678, 0x3e8, 0x4d8, 0x4d8, 0x168, 0x248, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [0xffffffff, 0xff000000], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21, 0x0, 0x6}, 0x0, 0x120, 0x168, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x4e22, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e22]}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa000000, @ipv4=@empty, 0xa, 0x30, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@uncond, 0x0, 0x168, 0x1a0, 0x48000000, {}, [@common=@ah={{0x30}, {[0x4d2, 0x4d3], 0xa000000, 0x4, 0x3}}, @common=@srh1={{0x90}, {0xc, 0x3, 0x4, 0x8, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, @private1, @private0, [0xff, 0xff000000, 0x0, 0xff000000], [0xffffffff, 0xffffff00, 0x0, 0xff], [0xff000000, 0x0, 0x0, 0x80], 0x804, 0x400}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6, 0x5}, {0xffffffffffffffff, 0x6, 0x1}, {0x0, 0x4, 0x2}, 0xfffffffe}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0x0, 0xf}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x700000000000000}}, {0x28}}}}, 0x6d8)

4.938783472s ago: executing program 5 (id=2727):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="200e02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="f00d02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x9, 0x1, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

4.047839881s ago: executing program 6 (id=2728):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff30, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000))
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0)
prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil)
dup(0xffffffffffffffff)
r3 = socket$netlink(0x10, 0x3, 0x14)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2})
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
dup3(r5, r4, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000180)=[@decrefs], 0x0, 0x0, 0x0})
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
setsockopt$packet_int(r6, 0x107, 0x13, &(0x7f0000000000)=0x9, 0x4)

3.970236072s ago: executing program 2 (id=2729):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000040000500000a28000000000a03"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x0)

2.750889438s ago: executing program 2 (id=2730):
r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x0)
syz_emit_ethernet(0x46, &(0x7f00000003c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '0\x00;', 0x10, 0x2b, 0x0, @private2, @local, {[@srh={0x0, 0x0, 0x2}], {0x0, 0x0, 0x8}}}}}}, 0x0)
fchdir(r1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x2f08, 0xd, 0x0, &(0x7f0000000380)="a162cef0563a20f5177241ee8f", 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50)
r3 = eventfd(0x0)
ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3})
syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c2402000000030000000000092406", @ANYRESHEX], 0x0)
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/67, 0x0, 0x4})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/57, 0xd000})
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3})
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1)
fchdir(0xffffffffffffffff)

2.555369015s ago: executing program 6 (id=2731):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="760a0000b9090000611167000000000018000000000000fffffffffffff000009500"], &(0x7f0000000000)='GPL\x00'}, 0x94)

2.346312515s ago: executing program 6 (id=2732):
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000240)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000000613000001000000feff08000c0200000000000000120000"], 0x30}], 0x1, 0x0)
r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x13)
waitid(0x0, r0, 0x0, 0x2100000a, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r2, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_mptcp_buf(r3, 0x11c, 0x1, 0x0, &(0x7f0000000100))
setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000740)={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}, 0xc)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r5, 0x800, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x4)
setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57)
r6 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00')
preadv(r6, &(0x7f0000001b80)=[{&(0x7f00000000c0)=""/92, 0x84}], 0x1, 0x62, 0xfd4c)

2.205712819s ago: executing program 6 (id=2733):
add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000340)="0000000000000002ff6900000000003f0000001800000002000200861fa72e5b01504104bfeacdd5a9007d16", 0x2c, 0xffffffffffffffff)

2.120751494s ago: executing program 6 (id=2734):
getdents(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000095, 0x0, 0xfffffffffffffffd}]})
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
set_mempolicy(0x2, 0x0, 0x7)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]})
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000003c0)={<r5=>0x0})
r6 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8000, 0x3, 0x40000337}, &(0x7f00000006c0)=<r7=>0x0, &(0x7f00000001c0)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x20000)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r9, 0x4058534c, &(0x7f0000000240)={0x3, 0x400, 0x3, 0x1000, 0x5, 0x5})
syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f00000000c0)={r5})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={<r10=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000080)={r10, 0x3, r3, 0x5})
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r12}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000000000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50)

0s ago: executing program 2 (id=2735):
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0)
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x90880, 0x0)
r1 = syz_io_uring_setup(0x56dc, &(0x7f0000000680)={0x0, 0xfcbb, 0x12104, 0x1, 0x19c, 0x0, r0}, &(0x7f0000000540)=<r2=>0x0, &(0x7f0000000700)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1})
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
r5 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x1c4d, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=<r6=>0x0, &(0x7f00000000c0)=<r7=>0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r8 = getpid()
sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
connect$unix(r9, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, 0x0)
io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0)
io_uring_enter(r1, 0x1d39, 0xcec, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  695.261141][T13586] sd 0:0:1:0: device reset
[  695.674647][T13572] ceph: No mds server is up or the cluster is laggy
[  696.057150][   T24] usb 4-1: USB disconnect, device number 45
[  696.182649][T13592] sysfs: cannot create duplicate filename '/class/ieee80211/1��^!�l�1�*�$pOc�ɔ��r$�G����t:�u�'
[  696.193750][T13592] CPU: 1 UID: 0 PID: 13592 Comm: syz.4.2060 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  696.193784][T13592] Tainted: [L]=SOFTLOCKUP
[  696.193792][T13592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  696.193804][T13592] Call Trace:
[  696.193811][T13592]  <TASK>
[  696.193819][T13592]  dump_stack_lvl+0x16c/0x1f0
[  696.193852][T13592]  sysfs_warn_dup+0x7f/0xa0
[  696.193876][T13592]  sysfs_do_create_link_sd+0x124/0x140
[  696.193902][T13592]  sysfs_create_link+0x61/0xc0
[  696.193932][T13592]  device_add+0x652/0x1980
[  696.193960][T13592]  ? __pfx_device_add+0x10/0x10
[  696.193982][T13592]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  696.194009][T13592]  ? ieee80211_set_bitrate_flags+0x243/0x6b0
[  696.194043][T13592]  wiphy_register+0x1ea1/0x2cc0
[  696.194070][T13592]  ? __rtnl_unlock+0x68/0xf0
[  696.194096][T13592]  ? __dev_change_flags+0x3e0/0x6f0
[  696.194124][T13592]  ? __pfx_wiphy_register+0x10/0x10
[  696.194151][T13592]  ? __asan_memset+0x23/0x50
[  696.194181][T13592]  ? ieee80211_init_rate_ctrl_alg+0x125/0x680
[  696.194213][T13592]  ieee80211_register_hw+0x2bb2/0x4160
[  696.194253][T13592]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  696.194279][T13592]  ? __pfx___debug_object_init+0x10/0x10
[  696.194308][T13592]  ? find_held_lock+0x2b/0x80
[  696.194334][T13592]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  696.194357][T13592]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  696.194388][T13592]  ? __hrtimer_setup+0x176/0x280
[  696.194423][T13592]  mac80211_hwsim_new_radio+0x3323/0x5150
[  696.194474][T13592]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  696.194506][T13592]  ? __asan_memcpy+0x3c/0x60
[  696.194530][T13592]  hwsim_new_radio_nl+0xba2/0x1330
[  696.194564][T13592]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  696.194603][T13592]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290
[  696.194632][T13592]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290
[  696.194668][T13592]  genl_family_rcv_msg_doit+0x209/0x2f0
[  696.194698][T13592]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  696.194736][T13592]  ? bpf_lsm_capable+0x9/0x10
[  696.194757][T13592]  ? security_capable+0x7e/0x260
[  696.194780][T13592]  ? ns_capable+0xd7/0x110
[  696.194808][T13592]  genl_rcv_msg+0x55c/0x800
[  696.194839][T13592]  ? __pfx_genl_rcv_msg+0x10/0x10
[  696.194867][T13592]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  696.194908][T13592]  netlink_rcv_skb+0x158/0x420
[  696.194942][T13592]  ? __pfx_genl_rcv_msg+0x10/0x10
[  696.194973][T13592]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  696.195012][T13592]  ? netlink_deliver_tap+0x1ae/0xd30
[  696.195043][T13592]  genl_rcv+0x28/0x40
[  696.195069][T13592]  netlink_unicast+0x5aa/0x870
[  696.195100][T13592]  ? __pfx_netlink_unicast+0x10/0x10
[  696.195138][T13592]  netlink_sendmsg+0x8c8/0xdd0
[  696.195168][T13592]  ? __pfx_netlink_sendmsg+0x10/0x10
[  696.195204][T13592]  ____sys_sendmsg+0xa5d/0xc30
[  696.195231][T13592]  ? copy_msghdr_from_user+0x10a/0x160
[  696.195253][T13592]  ? __pfx_____sys_sendmsg+0x10/0x10
[  696.195286][T13592]  ? __pfx_futex_wake_mark+0x10/0x10
[  696.195311][T13592]  ___sys_sendmsg+0x134/0x1d0
[  696.195334][T13592]  ? __pfx____sys_sendmsg+0x10/0x10
[  696.195356][T13592]  ? futex_private_hash_put+0x160/0x1b0
[  696.195416][T13592]  __sys_sendmsg+0x16d/0x220
[  696.195438][T13592]  ? __pfx___sys_sendmsg+0x10/0x10
[  696.195459][T13592]  ? __x64_sys_futex+0x1e0/0x4c0
[  696.195504][T13592]  do_syscall_64+0xcd/0xf80
[  696.195530][T13592]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  696.195550][T13592] RIP: 0033:0x7fbd74b8f749
[  696.195567][T13592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  696.195587][T13592] RSP: 002b:00007fbd75ad0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  696.195606][T13592] RAX: ffffffffffffffda RBX: 00007fbd74de6180 RCX: 00007fbd74b8f749
[  696.195620][T13592] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 000000000000000a
[  696.195633][T13592] RBP: 00007fbd74c13f91 R08: 0000000000000000 R09: 0000000000000000
[  696.195646][T13592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  696.195658][T13592] R13: 00007fbd74de6218 R14: 00007fbd74de6180 R15: 00007ffeb3642078
[  696.195688][T13592]  </TASK>
[  696.641524][ T6172] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  697.284305][ T6172] usb 2-1: Using ep0 maxpacket: 8
[  697.297370][ T6172] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  697.317413][ T6172] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  697.430134][   T30] audit: type=1804 audit(2000001111.396:600): pid=13601 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.2061" name="/newroot/418/file0" dev="tmpfs" ino=2216 res=1 errno=0
[  697.778343][ T6172] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  697.788486][ T6172] usb 2-1: Product: syz
[  697.792666][ T6172] usb 2-1: Manufacturer: syz
[  697.797559][ T6172] usb 2-1: SerialNumber: syz
[  697.805732][ T6172] usb 2-1: config 0 descriptor??
[  697.813766][ T6172] streamzap 2-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0)
[  697.826106][T13603] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2063'.
[  698.060620][ T6172] usb 2-1: USB disconnect, device number 49
[  698.074977][T13606] /dev/nullb0: Can't open blockdev
[  699.058317][T13620] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13620 comm=syz.5.2070
[  699.093237][T13620] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2070'.
[  700.024726][ T5987] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  700.095163][T13632] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2069'.
[  700.414401][ T5987] usb 2-1: Using ep0 maxpacket: 32
[  700.447547][   T30] audit: type=1400 audit(2000001114.436:601): avc:  denied  { write } for  pid=13636 comm="syz.5.2075" name="mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  700.490847][ T5987] usb 2-1: unable to get BOS descriptor or descriptor too short
[  700.674076][ T5987] usb 2-1: config 4 has an invalid interface number: 136 but max is 0
[  700.699736][ T5987] usb 2-1: config 4 has no interface number 0
[  700.720305][ T5987] usb 2-1: config 4 interface 136 has no altsetting 0
[  700.744065][ T5987] usb 2-1: string descriptor 0 read error: -22
[  700.770911][ T5987] usb 2-1: New USB device found, idVendor=0b48, idProduct=300d, bcdDevice=16.c8
[  700.801473][ T5987] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  700.932076][ T5987] dvb-usb: found a 'Technotrend TT-connect CT-3650' in warm state.
[  700.975675][ T5987] dvb-usb: bulk message failed: -22 (4/0)
[  701.030206][ T5987] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  701.087560][ T5987] dvb-usb: bulk message failed: -22 (5/0)
[  701.093926][ T5987] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  701.122706][T13630] libceph: resolve 'c*�' (ret=-3): failed
[  701.267737][ T5987] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  701.333137][ T5987] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  701.421981][ T5987] dvbdev: DVB: registering new adapter (Technotrend TT-connect CT-3650)
[  701.523737][ T5987] usb 2-1: media controller created
[  701.788389][ T5987] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  701.865266][T13660] program syz.4.2083 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  701.879110][ T5987] ttusb2: set interface to alts=3 failed
[  701.932759][T13663] overlayfs: invalid origin (0000)
[  701.951283][ T5987] DVB: Unable to find symbol tda10023_attach()
[  701.963313][ T5987] dvb-usb: no frontend was attached by 'Technotrend TT-connect CT-3650'
[  702.384573][ T6823] usb 4-1: new full-speed USB device number 46 using dummy_hcd
[  702.484591][ T5987] rc_core: IR keymap rc-tt-1500 not found
[  702.490612][ T5987] Registered IR keymap rc-empty
[  702.511280][ T5987] rc rc0: Technotrend TT-connect CT-3650 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0
[  702.537364][ T5987] input: Technotrend TT-connect CT-3650 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input29
[  702.565144][ T5987] dvb-usb: schedule remote query interval to 150 msecs.
[  702.582470][ T5987] dvb-usb: bulk message failed: -22 (4/0)
[  702.590613][ T6823] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  702.604326][ T5987] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  702.624526][ T6823] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  702.646014][ T5987] dvb-usb: bulk message failed: -22 (5/0)
[  702.662050][ T5987] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  702.674709][ T6823] usb 4-1: config 0 interface 0 has no altsetting 0
[  702.676916][T13674] netlink: 'syz.1.2087': attribute type 10 has an invalid length.
[  702.681341][ T6823] usb 4-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00
[  702.714749][ T5987] dvb-usb: Technotrend TT-connect CT-3650 successfully initialized and connected.
[  702.717872][T13673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  702.736819][   T24] dvb-usb: bulk message failed: -22 (4/0)
[  702.742750][   T24] ttusb2: there might have been an error during control message transfer. (rlen = 9, was 0)
[  702.777707][ T5987] usb 2-1: USB disconnect, device number 50
[  702.784046][   T24] dvb-usb: error -5 while querying for an remote control event.
[  702.792100][ T6823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  702.817044][ T6823] usb 4-1: config 0 descriptor??
[  702.889201][ T5987] dvb-usb: Technotrend TT-connect CT-3650 successfully deinitialized and disconnected.
[  703.121559][   T30] audit: type=1400 audit(2000001117.106:602): avc:  denied  { write } for  pid=13682 comm="syz.2.2090" path="socket:[43949]" dev="sockfs" ino=43949 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  703.153089][T13683] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2090'.
[  703.198794][T13683] 8021q: adding VLAN 0 to HW filter on device bond2
[  703.214842][ T6172] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  703.296705][ T6823] hid_parser_main: 7 callbacks suppressed
[  703.298277][ T6823] hid-steam 0003:28DE:1102.0010: unknown main item tag 0x0
[  703.315068][ T6823] hid-steam 0003:28DE:1102.0010: unknown main item tag 0x0
[  703.323430][ T6823] hid-steam 0003:28DE:1102.0010: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0
[  703.364369][ T6172] usb 6-1: Using ep0 maxpacket: 16
[  703.372117][ T6172] usb 6-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config
[  703.389807][ T6172] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  703.400891][ T6823] hid-steam 0003:28DE:1102.0010: Steam Controller 'XXXXXXXXXX' connected
[  703.405455][ T6172] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  703.424583][ T6823] input: Steam Controller as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28DE:1102.0010/input/input30
[  703.446610][ T6172] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  703.457386][ T6172] usb 6-1: Product: syz
[  703.467489][ T6172] usb 6-1: Manufacturer: syz
[  703.472233][ T6172] usb 6-1: SerialNumber: syz
[  703.530228][ T6823] hid-steam 0003:28DE:1102.0011: unknown main item tag 0x0
[  703.556818][ T6823] hid-steam 0003:28DE:1102.0011: unknown main item tag 0x0
[  703.670638][ T6823] hid-steam 0003:28DE:1102.0011: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0
[  703.749417][ T6172] usb 6-1: 0:2 : does not exist
[  703.760472][ T6172] usb 6-1: 5:0: cannot get min/max values for control 4 (id 5)
[  703.775749][ T6172] usb 6-1: 5:0: cannot get min/max values for control 5 (id 5)
[  703.799629][ T6172] usb 6-1: 5:0: cannot get min/max values for control 5 (id 5)
[  703.811453][ T6172] usb 6-1: 5:0: failed to get current value for ch 1 (-22)
[  703.831445][ T6172] usb 6-1: 5:0: cannot get min/max values for control 5 (id 5)
[  703.857618][ T6172] usb 6-1: USB disconnect, device number 35
[  703.932521][T13547] udevd[13547]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  703.949867][T13667] netlink: 'syz.3.2084': attribute type 10 has an invalid length.
[  703.998785][T13667] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  704.078908][T13695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  704.109608][T13695] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  704.393443][T13696] xt_cgroup: invalid path, errno=-2
[  705.238776][ T5987] libceph: connect (1)[c::]:6789 error -101
[  705.255544][ T5987] libceph: mon0 (1)[c::]:6789 connect error
[  705.352495][T13715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2098'.
[  705.466420][   T24] usb 4-1: USB disconnect, device number 46
[  705.506985][T13707] ceph: No mds server is up or the cluster is laggy
[  705.616362][ T6170] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[  705.690109][   T24] hid-steam 0003:28DE:1102.0010: Steam Controller 'XXXXXXXXXX' disconnected
[  705.789530][T13725] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=13725 comm=syz.2.2102
[  705.814404][ T6170] usb 6-1: Using ep0 maxpacket: 16
[  705.836765][ T6170] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24904, setting to 64
[  705.924611][ T6170] usb 6-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00
[  706.411710][ T6170] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  706.447072][ T6170] usb 6-1: config 0 descriptor??
[  706.468883][ T6170] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  706.659039][T13735] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2099'.
[  706.836425][ T6170] usb 6-1: USB disconnect, device number 36
[  708.588445][   T30] audit: type=1400 audit(2000001122.576:603): avc:  denied  { lock } for  pid=13756 comm="syz.5.2110" path="socket:[45225]" dev="sockfs" ino=45225 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  708.720051][T13765] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2111'.
[  708.729123][T13765] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2111'.
[  709.698480][T13768] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2113'.
[  709.708310][T13768] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2113'.
[  710.175689][ T6823] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  710.671652][ T6823] usb 5-1: Using ep0 maxpacket: 8
[  710.678945][ T6823] usb 5-1: config index 0 descriptor too short (expected 6427, got 27)
[  710.687517][ T6823] usb 5-1: config 0 has an invalid interface number: 21 but max is 0
[  710.696340][ T6823] usb 5-1: config 0 has no interface number 0
[  710.710512][ T6823] usb 5-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  710.725058][ T6823] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  710.752689][ T6823] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  711.206473][ T6170] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  711.299352][ T6823] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  711.326792][ T6823] usb 5-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0
[  711.349404][ T6823] usb 5-1: Product: syz
[  711.354364][   T30] audit: type=1400 audit(2000001125.336:604): avc:  denied  { connect } for  pid=13775 comm="syz.3.2116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  711.376977][ T6823] usb 5-1: Manufacturer: syz
[  711.600240][ T6170] usb 2-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b
[  711.614797][ T6170] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  712.179210][ T6170] usb 2-1: Product: syz
[  712.180972][ T6823] usb 5-1: config 0 descriptor??
[  712.190011][ T6170] usb 2-1: Manufacturer: syz
[  712.212565][ T6170] usb 2-1: SerialNumber: syz
[  713.106944][ T6823] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.21/input/input31
[  713.160821][ T6823] input: failed to attach handler kbd to device input31, error: -5
[  713.252397][T13782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  713.261696][T13782] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  713.280667][ T6170] gspca_main: pac207-2.14.0 probing 093a:2476
[  713.308792][ T6170] gspca_pac207: Failed to read a register (index 0x0000, error -71)
[  713.357878][ T6170] uvcvideo 2-1:13.0: Found UVC 0.00 device syz (093a:2476)
[  713.405152][ T6170] uvcvideo 2-1:13.0: No valid video chain found.
[  713.433916][ T6170] usb 2-1: USB disconnect, device number 51
[  715.100544][T13821] netlink: 'syz.3.2125': attribute type 1 has an invalid length.
[  718.557952][   T30] audit: type=1400 audit(2000001132.546:605): avc:  denied  { read write } for  pid=5814 comm="syz-executor" name="loop1" dev="devtmpfs" ino=3599 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  718.636602][   T30] audit: type=1400 audit(2000001132.566:606): avc:  denied  { open } for  pid=5814 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=3599 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  718.745337][   T30] audit: type=1400 audit(2000001132.566:607): avc:  denied  { ioctl } for  pid=5814 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=3599 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  719.589134][   T30] audit: type=1400 audit(2000001133.576:608): avc:  denied  { create } for  pid=13837 comm="syz.1.2132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  719.655563][ T5971] usb 5-1: USB disconnect, device number 52
[  719.799108][   T30] audit: type=1400 audit(2000001133.596:609): avc:  denied  { read } for  pid=13837 comm="syz.1.2132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  720.759805][T13853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2137'.
[  721.925008][T13882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2144'.
[  722.238045][T13889] netlink: 'syz.5.2146': attribute type 1 has an invalid length.
[  722.264160][T13868] xt_cgroup: invalid path, errno=-2
[  723.883313][T13900] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2151'.
[  724.018893][T13900] nbd: socks must be embedded in a SOCK_ITEM attr
[  724.084523][T13570] block nbd64: NBD_DISCONNECT
[  725.005110][   T30] audit: type=1400 audit(2000001138.996:610): avc:  denied  { bind } for  pid=13912 comm="syz.2.2154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  725.065273][   T30] audit: type=1400 audit(2000001139.016:611): avc:  denied  { write } for  pid=13912 comm="syz.2.2154" path="socket:[45043]" dev="sockfs" ino=45043 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  725.185549][T13916] netlink: 'syz.5.2155': attribute type 10 has an invalid length.
[  725.205019][T13916] bond0: (slave wlan1): Opening slave failed
[  725.212257][T13915] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  725.262957][T13919] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2156'.
[  725.285341][T13570] udevd[13570]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  725.296211][T13919] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2156'.
[  725.311508][T13920] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2157'.
[  725.605949][   T30] audit: type=1400 audit(2000001139.536:612): avc:  denied  { ioctl } for  pid=13924 comm="syz.1.2159" path="socket:[46107]" dev="sockfs" ino=46107 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  725.680921][T13930] sp0: Synchronizing with TNC
[  726.127114][T13940] vlan3: entered promiscuous mode
[  726.399457][T13924] [U] �`
[  727.221578][T13945] netlink: 'syz.4.2162': attribute type 4 has an invalid length.
[  727.630759][   T30] audit: type=1400 audit(2000001141.616:613): avc:  denied  { setopt } for  pid=13946 comm="syz.2.2163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  728.586914][T13964] netlink: 'syz.1.2165': attribute type 4 has an invalid length.
[  728.594885][T13964] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2165'.
[  728.624339][   T30] audit: type=1400 audit(2000001142.556:614): avc:  denied  { getopt } for  pid=13953 comm="syz.1.2165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  728.647665][   T30] audit: type=1400 audit(2000001142.556:615): avc:  denied  { setopt } for  pid=13953 comm="syz.1.2165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  728.765987][T13964] delete_channel: no stack
[  730.536091][T14013] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2178'.
[  730.571636][T14013] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2178'.
[  731.134533][   T24] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  731.534369][   T24] usb 3-1: Using ep0 maxpacket: 16
[  731.570496][   T24] usb 3-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config
[  731.587176][   T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  731.852765][T14036] rdma_rxe: rxe_newlink: failed to add syz_tun
[  732.208145][   T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  732.217852][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  732.230751][   T24] usb 3-1: Product: syz
[  732.235317][T14005] xt_cgroup: invalid path, errno=-2
[  732.240923][   T24] usb 3-1: Manufacturer: syz
[  732.250771][   T24] usb 3-1: SerialNumber: syz
[  732.414368][ T6170] usb 4-1: new full-speed USB device number 47 using dummy_hcd
[  732.491516][T14041] rdma_rxe: rxe_newlink: failed to add syz_tun
[  732.979084][   T24] usb 3-1: 0:2 : does not exist
[  733.011420][   T24] usb 3-1: 5:0: cannot get min/max values for control 4 (id 5)
[  733.032356][   T24] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5)
[  733.045988][ T6170] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  733.069434][ T6170] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64
[  733.070164][   T24] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5)
[  733.094545][ T6170] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  733.103698][ T6170] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  733.115116][ T5971] usb 5-1: new full-speed USB device number 53 using dummy_hcd
[  733.143338][   T24] usb 3-1: 5:0: failed to get current value for ch 1 (-22)
[  733.151288][T14036] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  733.158797][T14036] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  733.190247][   T24] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5)
[  733.294697][ T5971] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  733.306745][   T24] usb 3-1: USB disconnect, device number 47
[  733.307099][ T6170] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  733.335773][ T5971] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64
[  733.452665][ T5971] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  733.556404][ T5971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  733.607316][T14041] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  733.614732][T14041] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  733.717495][ T5971] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  733.792704][T13570] udevd[13570]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  734.126553][T14051] sysfs: cannot create duplicate filename '/class/ieee80211/1��^!�l�1�*�$pOc�ɔ��r$�G����t:�u�'
[  734.174723][T14051] CPU: 0 UID: 0 PID: 14051 Comm: syz.2.2187 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  734.174758][T14051] Tainted: [L]=SOFTLOCKUP
[  734.174765][T14051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  734.174777][T14051] Call Trace:
[  734.174783][T14051]  <TASK>
[  734.174795][T14051]  dump_stack_lvl+0x16c/0x1f0
[  734.174817][T14051]  sysfs_warn_dup+0x7f/0xa0
[  734.174832][T14051]  sysfs_do_create_link_sd+0x124/0x140
[  734.174846][T14051]  sysfs_create_link+0x61/0xc0
[  734.174858][T14051]  device_add+0x652/0x1980
[  734.174874][T14051]  ? __pfx_device_add+0x10/0x10
[  734.174885][T14051]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  734.174899][T14051]  ? ieee80211_set_bitrate_flags+0x243/0x6b0
[  734.174916][T14051]  wiphy_register+0x1ea1/0x2cc0
[  734.174932][T14051]  ? __rtnl_unlock+0x68/0xf0
[  734.174950][T14051]  ? __dev_change_flags+0x3e0/0x6f0
[  734.174967][T14051]  ? __pfx_wiphy_register+0x10/0x10
[  734.174982][T14051]  ? __asan_memset+0x23/0x50
[  734.174998][T14051]  ? ieee80211_init_rate_ctrl_alg+0x125/0x680
[  734.175017][T14051]  ieee80211_register_hw+0x2bb2/0x4160
[  734.175039][T14051]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  734.175053][T14051]  ? __pfx___debug_object_init+0x10/0x10
[  734.175070][T14051]  ? find_held_lock+0x2b/0x80
[  734.175086][T14051]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  734.175098][T14051]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  734.175123][T14051]  ? __hrtimer_setup+0x176/0x280
[  734.175153][T14051]  mac80211_hwsim_new_radio+0x3323/0x5150
[  734.175198][T14051]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  734.175229][T14051]  ? __asan_memcpy+0x3c/0x60
[  734.175253][T14051]  hwsim_new_radio_nl+0xba2/0x1330
[  734.175282][T14051]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  734.175323][T14051]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290
[  734.175355][T14051]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290
[  734.175390][T14051]  genl_family_rcv_msg_doit+0x209/0x2f0
[  734.175420][T14051]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  734.175458][T14051]  ? bpf_lsm_capable+0x9/0x10
[  734.175480][T14051]  ? security_capable+0x7e/0x260
[  734.175503][T14051]  ? ns_capable+0xd7/0x110
[  734.175532][T14051]  genl_rcv_msg+0x55c/0x800
[  734.175563][T14051]  ? __pfx_genl_rcv_msg+0x10/0x10
[  734.175591][T14051]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  734.175640][T14051]  netlink_rcv_skb+0x158/0x420
[  734.175667][T14051]  ? __pfx_genl_rcv_msg+0x10/0x10
[  734.175698][T14051]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  734.175745][T14051]  genl_rcv+0x28/0x40
[  734.175770][T14051]  netlink_unicast+0x5aa/0x870
[  734.175800][T14051]  ? __pfx_netlink_unicast+0x10/0x10
[  734.175843][T14051]  netlink_sendmsg+0x8c8/0xdd0
[  734.175877][T14051]  ? __pfx_netlink_sendmsg+0x10/0x10
[  734.175917][T14051]  ____sys_sendmsg+0xa5d/0xc30
[  734.175947][T14051]  ? copy_msghdr_from_user+0x10a/0x160
[  734.175969][T14051]  ? __pfx_____sys_sendmsg+0x10/0x10
[  734.176003][T14051]  ? __pfx_futex_wake_mark+0x10/0x10
[  734.176027][T14051]  ___sys_sendmsg+0x134/0x1d0
[  734.176051][T14051]  ? __pfx____sys_sendmsg+0x10/0x10
[  734.176072][T14051]  ? futex_private_hash_put+0x160/0x1b0
[  734.176146][T14051]  __sys_sendmsg+0x16d/0x220
[  734.176170][T14051]  ? __pfx___sys_sendmsg+0x10/0x10
[  734.176189][T14051]  ? __x64_sys_futex+0x1e0/0x4c0
[  734.176231][T14051]  do_syscall_64+0xcd/0xf80
[  734.176264][T14051]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  734.176285][T14051] RIP: 0033:0x7ff234b8f749
[  734.176302][T14051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  734.176321][T14051] RSP: 002b:00007ff235a86038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  734.176341][T14051] RAX: ffffffffffffffda RBX: 00007ff234de6180 RCX: 00007ff234b8f749
[  734.176354][T14051] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 000000000000000a
[  734.176365][T14051] RBP: 00007ff234c13f91 R08: 0000000000000000 R09: 0000000000000000
[  734.176377][T14051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  734.176388][T14051] R13: 00007ff234de6218 R14: 00007ff234de6180 R15: 00007fffa803e028
[  734.176417][T14051]  </TASK>
[  734.196658][T14053] overlayfs: failed to resolve './file0': -2
[  734.680177][ T5971] usb 4-1: USB disconnect, device number 47
[  734.777164][   T30] audit: type=1400 audit(2000001148.766:616): avc:  denied  { shutdown } for  pid=14050 comm="syz.1.2188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  734.854194][   T30] audit: type=1400 audit(2000001148.766:617): avc:  denied  { read } for  pid=14050 comm="syz.1.2188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  735.670998][   T24] usb 5-1: USB disconnect, device number 53
[  735.880524][T14075] FAULT_INJECTION: forcing a failure.
[  735.880524][T14075] name failslab, interval 1, probability 0, space 0, times 0
[  735.914105][T14075] CPU: 1 UID: 0 PID: 14075 Comm: syz.4.2194 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  735.914135][T14075] Tainted: [L]=SOFTLOCKUP
[  735.914142][T14075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  735.914155][T14075] Call Trace:
[  735.914161][T14075]  <TASK>
[  735.914167][T14075]  dump_stack_lvl+0x16c/0x1f0
[  735.914196][T14075]  should_fail_ex+0x512/0x640
[  735.914225][T14075]  ? kmem_cache_alloc_noprof+0x62/0x770
[  735.914243][T14075]  should_failslab+0xc2/0x120
[  735.914265][T14075]  kmem_cache_alloc_noprof+0x83/0x770
[  735.914284][T14075]  ? prepare_creds+0x2c/0x940
[  735.914312][T14075]  ? prepare_creds+0x2c/0x940
[  735.914333][T14075]  prepare_creds+0x2c/0x940
[  735.914359][T14075]  lookup_user_key+0x399/0x1300
[  735.914386][T14075]  ? __pfx_lookup_user_key+0x10/0x10
[  735.914415][T14075]  ? __pfx_lookup_user_key_possessed+0x10/0x10
[  735.914452][T14075]  __do_sys_add_key+0x25b/0x470
[  735.914472][T14075]  ? __pfx___do_sys_add_key+0x10/0x10
[  735.914489][T14075]  ? ksys_write+0x1ac/0x250
[  735.914521][T14075]  do_syscall_64+0xcd/0xf80
[  735.914550][T14075]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  735.914568][T14075] RIP: 0033:0x7fbd74b8f749
[  735.914587][T14075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  735.914603][T14075] RSP: 002b:00007fbd75b12038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[  735.914621][T14075] RAX: ffffffffffffffda RBX: 00007fbd74de5fa0 RCX: 00007fbd74b8f749
[  735.914634][T14075] RDX: 0000200000000340 RSI: 0000000000000000 RDI: 0000200000000000
[  735.914646][T14075] RBP: 00007fbd75b12090 R08: ffffffffffffffff R09: 0000000000000000
[  735.914658][T14075] R10: 000000000000002c R11: 0000000000000246 R12: 0000000000000001
[  735.914669][T14075] R13: 00007fbd74de6038 R14: 00007fbd74de5fa0 R15: 00007ffeb3642078
[  735.914697][T14075]  </TASK>
[  737.611567][T14087] netlink: 'syz.1.2199': attribute type 1 has an invalid length.
[  738.114551][ T6170] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[  738.404368][ T6170] usb 6-1: Using ep0 maxpacket: 16
[  738.500561][ T6170] usb 6-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config
[  738.664128][ T6170] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  738.808524][ T6170] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  738.858314][ T6170] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  738.897935][ T6170] usb 6-1: Product: syz
[  738.912840][ T6170] usb 6-1: Manufacturer: syz
[  738.930716][ T6170] usb 6-1: SerialNumber: syz
[  739.164416][ T5971] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  739.214471][ T6170] usb 6-1: 0:2 : does not exist
[  739.222963][ T6170] usb 6-1: 5:0: cannot get min/max values for control 4 (id 5)
[  739.246541][ T6170] usb 6-1: 5:0: cannot get min/max values for control 5 (id 5)
[  739.287149][ T6170] usb 6-1: 5:0: cannot get min/max values for control 5 (id 5)
[  739.314366][ T5971] usb 3-1: Using ep0 maxpacket: 8
[  739.321561][ T5971] usb 3-1: config 0 has an invalid interface number: 151 but max is 1
[  739.337611][ T6170] usb 6-1: 5:0: failed to get current value for ch 1 (-22)
[  739.364358][ T5971] usb 3-1: config 0 has no interface number 1
[  739.375583][ T5971] usb 3-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  739.430214][ T5971] usb 3-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83
[  739.471014][ T6170] usb 6-1: 5:0: cannot get min/max values for control 5 (id 5)
[  739.500071][ T5971] usb 3-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024
[  739.532495][ T6170] usb 6-1: USB disconnect, device number 37
[  739.665405][   T30] audit: type=1400 audit(2000001153.536:618): avc:  denied  { setopt } for  pid=14109 comm="syz.4.2205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  739.694576][ T5971] usb 3-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[  740.125302][T13570] udevd[13570]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  740.157868][ T5971] usb 3-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  740.185900][ T5971] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89
[  740.216018][ T5971] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 255
[  740.233764][T14108] NFSD: Failed to start, no listeners configured.
[  740.246170][ T5971] usb 3-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7
[  740.257505][ T5971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  740.273056][ T5971] usb 3-1: Product: syz
[  740.279511][ T5971] usb 3-1: Manufacturer: syz
[  740.353419][ T5971] usb 3-1: SerialNumber: syz
[  740.561352][ T5971] usb 3-1: config 0 descriptor??
[  740.567931][T14102] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  740.578782][ T5971] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  740.595781][ T5971] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  740.690691][T14121] NFSD: Failed to start, no listeners configured.
[  740.779692][ T5971] usb 3-1: USB disconnect, device number 48
[  741.006942][T14127] udevd[14127]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  741.256439][T14045] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  741.414325][T14045] usb 4-1: Using ep0 maxpacket: 16
[  741.437582][T14045] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  741.476634][T14045] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  741.558579][T14045] usb 4-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00
[  741.613928][T14045] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  741.791994][T14045] usb 4-1: config 0 descriptor??
[  743.008901][T14045] usbhid 4-1:0.0: can't add hid device: -71
[  743.101911][T14045] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  743.296017][T14045] usb 4-1: USB disconnect, device number 48
[  743.363398][ T5971] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[  743.391943][T14144] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  743.399655][T14144] IPv6: NLM_F_CREATE should be set when creating new route
[  743.419180][T14146] netlink: 'syz.2.2212': attribute type 1 has an invalid length.
[  743.432016][T14146] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2212'.
[  743.599424][T14152] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2212'.
[  743.626547][ T5971] usb 6-1: Using ep0 maxpacket: 32
[  744.160861][ T5971] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  744.182443][T14152] ALSA: mixer_oss: invalid OSS volume 'PHl�6��q
ӆ���ONEOUT'
[  744.191426][T14152] ALSA: mixer_oss: invalid index 1374389
[  744.219321][ T5971] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  744.238409][T14157] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=14157 comm=syz.4.2214
[  744.253047][ T5971] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  744.269800][ T5971] usb 6-1: Product: syz
[  744.288627][ T5971] usb 6-1: Manufacturer: syz
[  744.302173][ T5971] usb 6-1: SerialNumber: syz
[  744.414416][ T5971] usb 6-1: config 0 descriptor??
[  744.457340][T14131] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  744.484358][   T30] audit: type=1400 audit(2000001158.466:619): avc:  denied  { read write } for  pid=14159 comm="syz.3.2215" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  744.636052][T14165] netlink: 'syz.4.2216': attribute type 30 has an invalid length.
[  744.761267][T14166] netlink: 'syz.4.2216': attribute type 30 has an invalid length.
[  744.866002][T14164] 9pnet_virtio: no channels available for device syz
[  745.868668][   T30] audit: type=1400 audit(2000001158.466:620): avc:  denied  { open } for  pid=14159 comm="syz.3.2215" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  745.965982][T14168] 9p: Bad value for 'rfdno'
[  745.975489][T14168] Bluetooth: hci0: load_link_keys: too big key_count value 2816
[  746.550875][ T5971] usb 6-1: can't set config #0, error -71
[  746.565701][ T5971] usb 6-1: USB disconnect, device number 38
[  746.933911][T14170] SELinux:  Context �9��YKCq��_t��͠$ is not valid (left unmapped).
[  747.110200][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  748.230756][T14198] xt_CT: You must specify a L4 protocol and not use inversions on it
[  749.907929][T14228] tipc: Started in network mode
[  749.923034][T14228] tipc: Node identity 766f152b2f1c, cluster identity 4711
[  749.954433][T14228] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  750.649681][T14225] tipc: Disabling bearer <eth:syzkaller0>
[  752.559095][   T30] audit: type=1400 audit(2000001165.896:621): avc:  denied  { create } for  pid=14244 comm="syz.5.2235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  752.665904][   T30] audit: type=1400 audit(2000001165.906:622): avc:  denied  { write } for  pid=14244 comm="syz.5.2235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  753.424596][ T5971] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  753.434423][T14279] netlink: 'syz.4.2243': attribute type 1 has an invalid length.
[  753.605251][ T5971] usb 4-1: config index 0 descriptor too short (expected 45, got 36)
[  753.666419][ T5971] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1
[  753.777120][ T5971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64
[  753.875713][ T5971] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  753.975192][ T5971] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  754.045745][ T5971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  754.247805][ T5971] usb 4-1: config 0 descriptor??
[  754.380996][ T5971] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  755.091838][T14288] SET target dimension over the limit!
[  755.707418][T14296] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=14296 comm=syz.1.2250
[  756.897874][T14315] input: syz1 as /devices/virtual/input/input32
[  757.032498][ T5971] usb 4-1: USB disconnect, device number 49
[  757.464370][T14045] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[  757.596205][T14045] usb 6-1: device descriptor read/64, error -71
[  758.004409][T14045] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[  758.144379][T14045] usb 6-1: device descriptor read/64, error -71
[  758.264647][T14045] usb usb6-port1: attempt power cycle
[  758.522915][T14334] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65 sclass=netlink_xfrm_socket pid=14334 comm=syz.3.2258
[  758.647126][T14045] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[  758.685691][T14045] usb 6-1: device descriptor read/8, error -71
[  758.722825][T14335] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[  758.729375][T14335] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  758.774929][T14335] vhci_hcd vhci_hcd.0: Device attached
[  758.845138][T14335] random: crng reseeded on system resumption
[  758.867875][   T30] audit: type=1400 audit(2000001172.826:623): avc:  denied  { append } for  pid=14310 comm="syz.1.2255" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  759.017136][T14045] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[  759.024078][   T30] audit: type=1400 audit(2000001172.826:624): avc:  denied  { open } for  pid=14310 comm="syz.1.2255" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  759.074407][   T90] usb 36-1: SetAddress Request (2) to port 0
[  759.080817][   T90] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd
[  759.168463][T14336] vhci_hcd: connection closed
[  759.169070][T12422] vhci_hcd vhci_hcd.1: stop threads
[  759.180166][T14045] usb 6-1: device descriptor read/8, error -71
[  759.191542][T12422] vhci_hcd vhci_hcd.1: release socket
[  759.202135][T14340] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=14340 comm=syz.2.2262
[  759.229944][T12422] vhci_hcd vhci_hcd.1: disconnect device
[  759.314367][T14045] usb usb6-port1: unable to enumerate USB device
[  759.341228][   T30] audit: type=1400 audit(2000001173.326:625): avc:  denied  { ioctl } for  pid=14342 comm="syz.2.2263" path="socket:[47284]" dev="sockfs" ino=47284 ioctlcmd=0x943a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  760.073260][T14356] netlink: 'syz.4.2267': attribute type 1 has an invalid length.
[  760.294374][T14045] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[  761.385642][T14045] usb 6-1: config 0 has an invalid interface number: 49 but max is 0
[  761.393774][T14045] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  762.479094][T14045] usb 6-1: config 0 has no interface number 0
[  762.486191][T14045] usb 6-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=2d.ad
[  762.495931][T14045] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  762.507892][T14045] usb 6-1: config 0 descriptor??
[  763.100009][T14045] usb 6-1: USB disconnect, device number 43
[  763.232561][T14375] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=14375 comm=syz.2.2273
[  763.359569][T14380] netlink: 'syz.5.2274': attribute type 30 has an invalid length.
[  763.462655][T14384] netlink: 'syz.5.2274': attribute type 30 has an invalid length.
[  763.606789][T14380] 9pnet_virtio: no channels available for device syz
[  763.946957][T14388] xt_CT: You must specify a L4 protocol and not use inversions on it
[  764.320121][   T90] usb 36-1: device descriptor read/8, error -110
[  764.735342][   T90] usb usb36-port1: attempt power cycle
[  765.985478][   T90] usb usb36-port1: unable to enumerate USB device
[  766.244368][   T90] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  766.419942][   T90] usb 3-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b
[  766.429151][   T90] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  766.445887][   T90] usb 3-1: Product: syz
[  766.465523][   T90] usb 3-1: Manufacturer: syz
[  766.480330][   T90] usb 3-1: SerialNumber: syz
[  766.829228][   T90] usb 3-1: palm_os_4_probe - error -110 getting connection info
[  766.842647][   T90] visor 3-1:1.0: Handspring Visor / Palm OS converter detected
[  767.168299][T14418] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2284'.
[  767.187126][   T90] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  767.222871][   T90] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  767.303402][T14419] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2284'.
[  767.316517][T14419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2284'.
[  767.330022][T14419] netlink: 'syz.4.2284': attribute type 11 has an invalid length.
[  767.387198][T14419] netlink: 'syz.4.2284': attribute type 13 has an invalid length.
[  767.540028][T14419] bridge0: port 2(bridge_slave_1) entered disabled state
[  767.547297][T14419] bridge0: port 1(bridge_slave_0) entered disabled state
[  767.555113][   T90] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[  767.571695][T14419] bridge0: entered allmulticast mode
[  767.607917][T14419] bridge_slave_1: left allmulticast mode
[  767.613969][T14419] bridge_slave_1: left promiscuous mode
[  767.621041][T14419] bridge0: port 2(bridge_slave_1) entered disabled state
[  767.636428][T14419] bridge_slave_0: left allmulticast mode
[  767.643095][T14419] bridge_slave_0: left promiscuous mode
[  767.649526][T14419] bridge0: port 1(bridge_slave_0) entered disabled state
[  767.716040][   T90] usb 6-1: Using ep0 maxpacket: 16
[  767.727612][   T90] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  767.794161][T14431] netlink: 'syz.3.2288': attribute type 30 has an invalid length.
[  767.848328][T14432] netlink: 'syz.3.2288': attribute type 30 has an invalid length.
[  767.858771][ T6823] usb 3-1: USB disconnect, device number 49
[  767.944678][ T6823] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  767.946329][   T90] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a
[  767.963727][   T90] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  767.971960][   T90] usb 6-1: Product: syz
[  767.976287][   T90] usb 6-1: Manufacturer: syz
[  767.980952][   T90] usb 6-1: SerialNumber: syz
[  767.990032][ T6823] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  767.992704][   T90] usb 6-1: config 0 descriptor??
[  768.008041][   T90] pegasus_notetaker 6-1:0.0: probe with driver pegasus_notetaker failed with error -22
[  768.029409][T14430] 9pnet_virtio: no channels available for device syz
[  768.116483][ T6823] visor 3-1:1.0: device disconnected
[  768.743687][   T30] audit: type=1400 audit(2000001182.726:626): avc:  denied  { create } for  pid=14422 comm="syz.5.2286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  768.901735][   T30] audit: type=1400 audit(2000001182.766:627): avc:  denied  { prog_load } for  pid=14437 comm="syz.1.2290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  769.137838][   T30] audit: type=1400 audit(2000001182.766:628): avc:  denied  { bpf } for  pid=14437 comm="syz.1.2290" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  769.160280][   T30] audit: type=1400 audit(2000001182.766:629): avc:  denied  { perfmon } for  pid=14437 comm="syz.1.2290" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  769.181908][   T30] audit: type=1400 audit(2000001182.766:630): avc:  denied  { prog_run } for  pid=14437 comm="syz.1.2290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  769.211697][   T30] audit: type=1400 audit(2000001182.766:631): avc:  denied  { setopt } for  pid=14422 comm="syz.5.2286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  769.272590][   T90] usb 6-1: USB disconnect, device number 44
[  769.818846][T14465] input: syz1 as /devices/virtual/input/input34
[  769.913677][T14468] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2299'.
[  769.985186][   T90] usb 5-1: new low-speed USB device number 54 using dummy_hcd
[  770.003354][T14472] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2300'.
[  770.013433][   T30] audit: type=1400 audit(2000001183.996:632): avc:  denied  { ioctl } for  pid=14471 comm="syz.5.2300" path="socket:[48211]" dev="sockfs" ino=48211 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  770.014399][ T5971] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  770.149569][   T90] usb 5-1: config index 0 descriptor too short (expected 1307, got 27)
[  770.149601][   T90] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[  770.149621][   T90] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  770.149640][   T90] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[  770.152203][   T90] usb 5-1: string descriptor 0 read error: -22
[  770.152363][   T90] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  770.152385][   T90] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  770.157378][   T90] usb 5-1: config 0 descriptor??
[  770.162467][   T90] hub 5-1:0.0: bad descriptor, ignoring hub
[  770.162493][   T90] hub 5-1:0.0: probe with driver hub failed with error -5
[  770.204732][ T5971] usb 3-1: Using ep0 maxpacket: 16
[  770.277240][ T5971] usb 3-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config
[  770.288336][ T5971] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  770.299367][ T5971] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  770.308878][ T5971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  770.318763][ T5971] usb 3-1: Product: syz
[  770.322999][ T5971] usb 3-1: Manufacturer: syz
[  770.328219][ T5971] usb 3-1: SerialNumber: syz
[  770.705266][ T5971] usb 3-1: 0:2 : does not exist
[  770.722930][ T5971] usb 3-1: 5:0: cannot get min/max values for control 4 (id 5)
[  770.740936][   T30] audit: type=1400 audit(2000001184.726:633): avc:  denied  { map_create } for  pid=14460 comm="syz.4.2297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  770.811154][ T5971] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5)
[  770.851476][ T5971] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5)
[  770.876264][ T5971] usb 3-1: 5:0: failed to get current value for ch 1 (-22)
[  770.898991][ T5971] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5)
[  770.919783][ T5971] usb 3-1: USB disconnect, device number 50
[  770.922483][T14487] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2304'.
[  770.948475][T13570] udevd[13570]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  771.352316][T14505] netlink: 'syz.5.2310': attribute type 1 has an invalid length.
[  771.801169][T14505] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2310'.
[  771.897496][T14511] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2310'.
[  771.925120][T14511] ALSA: mixer_oss: invalid OSS volume 'PHl�6��q
ӆ���ONEOUT'
[  772.163881][T14518] sd 0:0:1:0: device reset
[  772.587319][   T30] audit: type=1400 audit(2000001186.576:634): avc:  denied  { read } for  pid=14504 comm="syz.5.2310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  772.648275][T14511] ALSA: mixer_oss: invalid index 1374389
[  772.967675][   T90] usb 5-1: USB disconnect, device number 54
[  774.551622][   T30] audit: type=1400 audit(2000001188.016:635): avc:  denied  { map_read map_write } for  pid=14535 comm="syz.1.2318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  775.439097][T14548] tmpfs: Bad value for 'mpol'
[  775.930238][T14532] NFSD: Failed to start, no listeners configured.
[  776.714115][T14563] netlink: 'syz.2.2327': attribute type 1 has an invalid length.
[  776.754594][T14563] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2327'.
[  776.831782][   T30] audit: type=1401 audit(2000001190.806:636): op=fscreate invalid_context=EF39FDAA1C594B437119C51A915F740EE7E9CDA024
[  776.844030][T14565] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2327'.
[  776.980165][T14565] ALSA: mixer_oss: invalid OSS volume 'PHl�6��q
ӆ���ONEOUT'
[  777.021081][T14565] ALSA: mixer_oss: invalid index 1374389
[  777.379411][   T30] audit: type=1400 audit(2000001191.326:637): avc:  denied  { ioctl } for  pid=14567 comm="syz.1.2328" path="socket:[48394]" dev="sockfs" ino=48394 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  778.104533][ T6823] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  778.254085][T14580] program syz.4.2332 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  778.315997][ T6823] usb 4-1: Using ep0 maxpacket: 32
[  778.327615][ T6823] usb 4-1: config 2 has an invalid interface number: 93 but max is 2
[  778.336307][ T6823] usb 4-1: config 2 has an invalid interface number: 123 but max is 2
[  778.364680][ T6823] usb 4-1: config 2 contains an unexpected descriptor of type 0x1, skipping
[  778.373520][ T6823] usb 4-1: config 2 has an invalid interface number: 220 but max is 2
[  778.414793][ T6823] usb 4-1: config 2 has no interface number 0
[  778.421167][ T6823] usb 4-1: config 2 has no interface number 1
[  778.439557][ T6823] usb 4-1: config 2 has no interface number 2
[  778.453553][ T6823] usb 4-1: config 2 interface 93 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[  778.499356][ T6823] usb 4-1: config 2 interface 93 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[  778.508071][   T90] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  778.521510][ T6823] usb 4-1: config 2 interface 93 altsetting 8 endpoint 0x1 has invalid maxpacket 1024, setting to 64
[  778.521573][ T6823] usb 4-1: config 2 interface 93 altsetting 8 has a duplicate endpoint with address 0x1, skipping
[  778.634898][ T6823] usb 4-1: config 2 interface 93 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[  778.662277][ T6823] usb 4-1: config 2 interface 93 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[  778.663985][T14588] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2336'.
[  778.694842][ T6823] usb 4-1: config 2 interface 93 altsetting 8 endpoint 0x7 has invalid maxpacket 512, setting to 64
[  778.734436][ T6823] usb 4-1: config 2 interface 93 altsetting 8 has a duplicate endpoint with address 0x1, skipping
[  778.764314][   T90] usb 5-1: device descriptor read/64, error -71
[  778.764750][ T6823] usb 4-1: config 2 interface 93 altsetting 8 endpoint 0x6 has invalid maxpacket 991, setting to 64
[  778.806347][ T6823] usb 4-1: config 2 interface 93 altsetting 8 bulk endpoint 0x4 has invalid maxpacket 1024
[  778.838792][ T6823] usb 4-1: config 2 interface 93 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[  778.886589][ T6823] usb 4-1: config 2 interface 93 altsetting 8 endpoint 0xC has invalid maxpacket 512, setting to 64
[  778.899382][ T6823] usb 4-1: config 2 interface 123 altsetting 3 has a duplicate endpoint with address 0x1, skipping
[  778.941394][ T6823] usb 4-1: config 2 interface 123 altsetting 3 has a duplicate endpoint with address 0x1, skipping
[  778.974312][ T6823] usb 4-1: config 2 interface 123 altsetting 3 has a duplicate endpoint with address 0x7, skipping
[  778.985600][ T6823] usb 4-1: config 2 interface 123 altsetting 3 has a duplicate endpoint with address 0x9, skipping
[  779.004407][   T90] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  779.011496][ T6823] usb 4-1: config 2 interface 220 altsetting 1 endpoint 0xD has invalid maxpacket 1023, setting to 64
[  779.029604][ T6823] usb 4-1: config 2 interface 220 altsetting 1 has a duplicate endpoint with address 0xD, skipping
[  779.048530][ T6823] usb 4-1: config 2 interface 220 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  779.068110][ T6823] usb 4-1: config 2 interface 220 altsetting 1 has a duplicate endpoint with address 0x3, skipping
[  779.085156][ T6823] usb 4-1: config 2 interface 220 altsetting 1 has a duplicate endpoint with address 0x4, skipping
[  779.104009][ T6823] usb 4-1: config 2 interface 220 altsetting 1 has a duplicate endpoint with address 0x6, skipping
[  779.120986][ T6823] usb 4-1: config 2 interface 220 altsetting 1 has a duplicate endpoint with address 0xF, skipping
[  779.138448][ T6823] usb 4-1: config 2 interface 220 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  779.157725][ T6823] usb 4-1: config 2 interface 93 has no altsetting 0
[  779.168423][ T6823] usb 4-1: config 2 interface 123 has no altsetting 0
[  779.194808][ T6823] usb 4-1: config 2 interface 220 has no altsetting 0
[  779.241878][ T6823] usb 4-1: Dual-Role OTG device on HNP port
[  779.248843][ T6823] usb 4-1: New USB device found, idVendor=0cf3, idProduct=0002, bcdDevice=ea.d5
[  779.258854][ T6823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  779.267748][ T6823] usb 4-1: Product: syz
[  779.272444][ T6823] usb 4-1: Manufacturer: syz
[  779.277662][ T6823] usb 4-1: SerialNumber: syz
[  779.291874][T14574] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  779.300669][   T90] usb 5-1: device descriptor read/64, error -71
[  779.308386][T14574] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  779.344502][   T24] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  779.465403][   T30] audit: type=1400 audit(2000001193.426:638): avc:  denied  { read } for  pid=14596 comm="syz.1.2340" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  779.580335][   T24] usb 3-1: config index 0 descriptor too short (expected 45, got 36)
[  779.668496][ T6823] usb 4-1: Could not find all expected endpoints
[  779.694534][   T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  779.709953][   T30] audit: type=1400 audit(2000001193.426:639): avc:  denied  { open } for  pid=14596 comm="syz.1.2340" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  779.721878][   T90] usb usb5-port1: attempt power cycle
[  779.763318][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  779.765350][   T30] audit: type=1400 audit(2000001193.436:640): avc:  denied  { ioctl } for  pid=14596 comm="syz.1.2340" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  779.814686][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  779.834281][   T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  779.899288][   T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  779.910571][ T6823] usb 4-1: Could not find all expected endpoints
[  779.917447][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  779.929344][ T6823] usb 4-1: Could not find all expected endpoints
[  780.079399][   T24] usb 3-1: config 0 descriptor??
[  780.086248][T14595] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  780.104366][   T90] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  780.135385][   T90] usb 5-1: device descriptor read/8, error -71
[  780.145972][ T6823] usb 4-1: USB disconnect, device number 50
[  780.444455][   T90] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  780.489637][   T90] usb 5-1: device descriptor read/8, error -71
[  780.498018][T14610] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=14610 comm=syz.1.2343
[  780.597739][   T24] plantronics 0003:047F:FFFF.0012: reserved main item tag 0xd
[  780.604727][   T90] usb usb5-port1: unable to enumerate USB device
[  780.640035][   T24] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  781.427129][   T30] audit: type=1400 audit(2000001195.246:641): avc:  denied  { write } for  pid=14619 comm="syz.1.2347" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  781.772994][   T90] usb 3-1: USB disconnect, device number 51
[  782.055504][T14636] virt_wifi0 speed is unknown, defaulting to 1000
[  782.062805][T14636] virt_wifi0 speed is unknown, defaulting to 1000
[  782.083867][T14636] virt_wifi0 speed is unknown, defaulting to 1000
[  782.158452][T14636] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  782.340163][T14636] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  782.732937][T14636] virt_wifi0 speed is unknown, defaulting to 1000
[  782.740871][T14636] virt_wifi0 speed is unknown, defaulting to 1000
[  782.748300][T14636] virt_wifi0 speed is unknown, defaulting to 1000
[  782.755612][T14636] virt_wifi0 speed is unknown, defaulting to 1000
[  782.762856][T14636] virt_wifi0 speed is unknown, defaulting to 1000
[  783.052048][T14644] netlink: 'syz.4.2352': attribute type 30 has an invalid length.
[  783.232602][T14645] netlink: 'syz.4.2352': attribute type 30 has an invalid length.
[  783.263297][T14643] 9pnet_virtio: no channels available for device syz
[  784.307066][T14660] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2353'.
[  784.344555][   T30] audit: type=1401 audit(2000001198.116:642): op=fscreate invalid_context=EF39FDAA1C594B437119C51A915F740EE7E9CDA024
[  784.914317][T14671] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2358'.
[  784.918957][T14672] netlink: 'syz.4.2357': attribute type 1 has an invalid length.
[  785.056841][T14671] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2358'.
[  786.373142][ T5987] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  786.840365][T14662] virt_wifi0 speed is unknown, defaulting to 1000
[  787.788059][   T30] audit: type=1400 audit(2000001201.776:643): avc:  denied  { connect } for  pid=14680 comm="syz.5.2360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  787.988668][T14691] netlink: 'syz.2.2363': attribute type 1 has an invalid length.
[  787.996648][ T5987] usb 2-1: Using ep0 maxpacket: 32
[  788.371551][ T5987] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  788.581035][ T5987] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  788.622341][T14662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  788.653408][T14662] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  788.667107][ T5987] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  788.689893][   T30] audit: type=1400 audit(2000001202.676:644): avc:  denied  { map } for  pid=14695 comm="syz.3.2364" path="socket:[48012]" dev="sockfs" ino=48012 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  788.699075][T14696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2364'.
[  788.723026][T14696] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  788.742562][ T5987] usb 2-1: Product: syz
[  788.747037][T14696] batman_adv: batadv0: Removing interface: batadv_slave_0
[  788.754741][ T5987] usb 2-1: Manufacturer: syz
[  788.759359][ T5987] usb 2-1: SerialNumber: syz
[  788.768510][T14696] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  788.785117][ T5987] usb 2-1: config 0 descriptor??
[  788.812079][T14675] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  788.820728][T14696] batman_adv: batadv0: Removing interface: batadv_slave_1
[  788.847643][T14662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  788.867074][T14662] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  788.904167][ T5987] hub 2-1:0.0: bad descriptor, ignoring hub
[  788.924414][ T5987] hub 2-1:0.0: probe with driver hub failed with error -5
[  789.262912][ T5971] usb 2-1: USB disconnect, device number 52
[  790.111073][   T90] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  790.308614][   T90] usb 4-1: config index 0 descriptor too short (expected 45, got 36)
[  790.332265][   T90] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  790.370299][   T90] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  790.509794][   T90] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  790.551336][   T90] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  790.588727][   T90] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  790.628370][   T90] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  790.656639][   T90] usb 4-1: config 0 descriptor??
[  790.679940][T14713] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  792.095438][   T90] plantronics 0003:047F:FFFF.0013: reserved main item tag 0xd
[  792.163792][   T90] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  792.361050][T14713] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4124 sclass=netlink_route_socket pid=14713 comm=syz.3.2371
[  792.541104][T14713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2371'.
[  792.564348][T14713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2371'.
[  792.584887][T14713] netlink: 'syz.3.2371': attribute type 12 has an invalid length.
[  792.592745][T14713] netlink: 'syz.3.2371': attribute type 11 has an invalid length.
[  792.735603][T14713] comedi comedi1: dt2801: I/O port conflict (0x7,2)
[  792.846824][   T90] usb 4-1: USB disconnect, device number 51
[  792.983789][T14760] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2379'.
[  793.858825][T14766] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2386'.
[  793.956275][   T30] audit: type=1400 audit(2000001207.936:645): avc:  denied  { bind } for  pid=14767 comm="syz.1.2387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  794.038512][T14777] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=14777 comm=syz.5.2388
[  794.111694][   T30] audit: type=1400 audit(2000001208.096:646): avc:  denied  { append } for  pid=14782 comm="syz.5.2391" name="sg0" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  794.269119][T14781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2390'.
[  795.131885][T14801] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2394'.
[  796.029954][T14807] random: crng reseeded on system resumption
[  796.993596][ T5987] usb 2-1: new full-speed USB device number 53 using dummy_hcd
[  797.013876][   T30] audit: type=1400 audit(2000001210.016:647): avc:  denied  { write } for  pid=14804 comm="syz.5.2396" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  797.362175][   T30] audit: type=1400 audit(2000001210.196:648): avc:  denied  { ioctl } for  pid=14804 comm="syz.5.2396" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x330f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  797.395885][ T5987] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  797.415089][ T5987] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  797.424160][ T5987] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  797.462610][ T5987] usb 2-1: config 0 descriptor??
[  797.472242][T14803] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  799.362281][ T5987] usbhid 2-1:0.0: can't add hid device: -71
[  799.386592][ T5987] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  799.433492][ T5987] usb 2-1: USB disconnect, device number 53
[  799.801260][ T5971] usb 3-1: new full-speed USB device number 52 using dummy_hcd
[  800.386321][ T5971] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  800.414627][ T5971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  800.433783][ T5971] usb 3-1: Product: syz
[  800.441331][ T5971] usb 3-1: Manufacturer: syz
[  800.450501][ T5971] usb 3-1: SerialNumber: syz
[  800.468248][ T5971] usb 3-1: config 0 descriptor??
[  800.744848][T14861] netlink: 'syz.3.2409': attribute type 4 has an invalid length.
[  801.107964][ T5971] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  801.184373][T14858] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2410'.
[  802.361505][ T5971] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  802.429729][ T5971] usb 3-1: USB disconnect, device number 52
[  802.478866][T14882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2417'.
[  802.540786][T14882] nbd: socks must be embedded in a SOCK_ITEM attr
[  802.873666][T14889] rdma_rxe: rxe_newlink: failed to add syz_tun
[  803.441961][T14045] usb 5-1: new full-speed USB device number 59 using dummy_hcd
[  803.796267][T14045] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  803.817745][T14045] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64
[  803.833547][T14045] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  803.843181][T14045] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  803.864581][T14889] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  803.871825][T14889] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  803.880123][T14903] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer.
[  803.921199][T14045] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  804.034400][ T5987] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  804.197645][ T5987] usb 2-1: config index 0 descriptor too short (expected 45, got 36)
[  804.207272][ T5987] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  804.219904][ T5987] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  804.232960][ T5987] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  804.253007][ T5987] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  804.275354][ T5987] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  804.285151][ T5987] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  804.307687][ T5987] usb 2-1: config 0 descriptor??
[  804.315154][T14901] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  804.549195][T14908] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2424'.
[  804.559368][T14908] 0�: renamed from hsr0 (while UP)
[  804.576874][T14908] 0�: entered allmulticast mode
[  804.590344][T14908] hsr_slave_0: entered allmulticast mode
[  804.611831][T14908] hsr_slave_1: entered allmulticast mode
[  804.636536][T14908] A link change request failed with some changes committed already. Interface 
70� may have been left with an inconsistent configuration, please check.
[  804.729380][T14909] netlink: 'syz.2.2424': attribute type 1 has an invalid length.
[  804.748803][ T5987] plantronics 0003:047F:FFFF.0014: reserved main item tag 0xd
[  804.773460][   T30] audit: type=1400 audit(2000001218.756:649): avc:  denied  { write } for  pid=14912 comm="syz.3.2425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  804.825614][ T5987] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  805.012745][T14918] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.2424'.
[  805.148533][T14045] usb 2-1: USB disconnect, device number 54
[  805.392889][T14931] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=14931 comm=syz.5.2430
[  805.691227][ T5987] usb 5-1: USB disconnect, device number 59
[  806.064258][   T30] audit: type=1401 audit(2000001220.046:650): op=fscreate invalid_context=EF39FDAA1C594B437119C51A915F740EE7E9CDA024
[  806.834361][ T5987] usb 6-1: new high-speed USB device number 45 using dummy_hcd
[  807.037382][T14958] sysfs: cannot create duplicate filename '/class/ieee80211/1��^!�l�1�*�$pOc�ɔ��r$�G����t:�u�'
[  807.064654][T14958] CPU: 0 UID: 0 PID: 14958 Comm: syz.3.2437 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  807.064697][T14958] Tainted: [L]=SOFTLOCKUP
[  807.064704][T14958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  807.064718][T14958] Call Trace:
[  807.064726][T14958]  <TASK>
[  807.064735][T14958]  dump_stack_lvl+0x16c/0x1f0
[  807.064771][T14958]  sysfs_warn_dup+0x7f/0xa0
[  807.064796][T14958]  sysfs_do_create_link_sd+0x124/0x140
[  807.064823][T14958]  sysfs_create_link+0x61/0xc0
[  807.064847][T14958]  device_add+0x652/0x1980
[  807.064875][T14958]  ? __pfx_device_add+0x10/0x10
[  807.064897][T14958]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  807.064923][T14958]  ? ieee80211_set_bitrate_flags+0x243/0x6b0
[  807.064956][T14958]  wiphy_register+0x1ea1/0x2cc0
[  807.065061][T14958]  ? __rtnl_unlock+0x68/0xf0
[  807.065090][T14958]  ? __dev_change_flags+0x3e0/0x6f0
[  807.065120][T14958]  ? __pfx_wiphy_register+0x10/0x10
[  807.065168][T14958]  ? __asan_memset+0x23/0x50
[  807.065202][T14958]  ? ieee80211_init_rate_ctrl_alg+0x125/0x680
[  807.065236][T14958]  ieee80211_register_hw+0x2bb2/0x4160
[  807.065275][T14958]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  807.065303][T14958]  ? __pfx___debug_object_init+0x10/0x10
[  807.065334][T14958]  ? find_held_lock+0x2b/0x80
[  807.065363][T14958]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  807.065387][T14958]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  807.065410][T14958]  ? __hrtimer_setup+0x176/0x280
[  807.065440][T14958]  mac80211_hwsim_new_radio+0x3323/0x5150
[  807.065490][T14958]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  807.065523][T14958]  ? __asan_memcpy+0x3c/0x60
[  807.065550][T14958]  hwsim_new_radio_nl+0xba2/0x1330
[  807.065585][T14958]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  807.065626][T14958]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290
[  807.065656][T14958]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290
[  807.065690][T14958]  genl_family_rcv_msg_doit+0x209/0x2f0
[  807.065720][T14958]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  807.065757][T14958]  ? bpf_lsm_capable+0x9/0x10
[  807.065777][T14958]  ? security_capable+0x7e/0x260
[  807.065800][T14958]  ? ns_capable+0xd7/0x110
[  807.065827][T14958]  genl_rcv_msg+0x55c/0x800
[  807.065857][T14958]  ? __pfx_genl_rcv_msg+0x10/0x10
[  807.065884][T14958]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  807.065923][T14958]  netlink_rcv_skb+0x158/0x420
[  807.065948][T14958]  ? __pfx_genl_rcv_msg+0x10/0x10
[  807.065975][T14958]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  807.066020][T14958]  genl_rcv+0x28/0x40
[  807.066044][T14958]  netlink_unicast+0x5aa/0x870
[  807.066073][T14958]  ? __pfx_netlink_unicast+0x10/0x10
[  807.066096][T14958]  ? skb_put+0x12e/0x1b0
[  807.066135][T14958]  netlink_sendmsg+0x8c8/0xdd0
[  807.066166][T14958]  ? __pfx_netlink_sendmsg+0x10/0x10
[  807.066200][T14958]  ____sys_sendmsg+0xa5d/0xc30
[  807.066227][T14958]  ? copy_msghdr_from_user+0x10a/0x160
[  807.066248][T14958]  ? __pfx_____sys_sendmsg+0x10/0x10
[  807.066281][T14958]  ? lock_acquire+0x179/0x330
[  807.066307][T14958]  ___sys_sendmsg+0x134/0x1d0
[  807.066330][T14958]  ? __pfx____sys_sendmsg+0x10/0x10
[  807.066352][T14958]  ? finish_task_switch.isra.0+0x207/0xbd0
[  807.066415][T14958]  __sys_sendmsg+0x16d/0x220
[  807.066437][T14958]  ? __pfx___sys_sendmsg+0x10/0x10
[  807.066453][T14958]  ? irqentry_exit+0x1dd/0x8c0
[  807.066476][T14958]  ? rcu_is_watching+0x12/0xc0
[  807.066504][T14958]  ? trace_irq_enable.constprop.0+0x2f/0x110
[  807.066529][T14958]  do_syscall_64+0xcd/0xf80
[  807.066556][T14958]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  807.066576][T14958] RIP: 0033:0x7fd6f698f749
[  807.066594][T14958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  807.066613][T14958] RSP: 002b:00007fd6f78ce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  807.066632][T14958] RAX: ffffffffffffffda RBX: 00007fd6f6be6180 RCX: 00007fd6f698f749
[  807.066645][T14958] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 000000000000000a
[  807.066658][T14958] RBP: 00007fd6f6a13f91 R08: 0000000000000000 R09: 0000000000000000
[  807.066671][T14958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  807.066683][T14958] R13: 00007fd6f6be6218 R14: 00007fd6f6be6180 R15: 00007ffe43911dd8
[  807.066713][T14958]  </TASK>
[  807.550245][ T5987] usb 6-1: config index 0 descriptor too short (expected 45, got 36)
[  807.575834][ T5987] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  807.604431][ T5987] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  807.804505][ T5987] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  807.813787][ T5987] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  807.856606][T14965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2439'.
[  807.883558][ T5987] usb 6-1: config 0 descriptor??
[  807.930008][ T5987] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  808.545108][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  808.906990][T14982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  808.918696][T14982] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  809.011836][T14986] trusted_key: syz.1.2443 sent an empty control message without MSG_MORE.
[  809.316351][T14986] netlink: 'syz.1.2443': attribute type 10 has an invalid length.
[  809.477456][T14990] netlink: 'syz.2.2445': attribute type 1 has an invalid length.
[  809.495619][T14990] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2445'.
[  809.514101][T14992] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=14992 comm=syz.3.2444
[  809.576834][T14990] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2445'.
[  809.629779][T14995] ALSA: mixer_oss: invalid OSS volume 'PHl�6��q
ӆ���ONEOUT'
[  809.639105][T14995] ALSA: mixer_oss: invalid index 1374389
[  810.472015][ T5987] usb 6-1: USB disconnect, device number 45
[  810.803635][T15019] netlink: 'syz.5.2451': attribute type 1 has an invalid length.
[  810.933076][T15019] 8021q: adding VLAN 0 to HW filter on device bond2
[  812.524737][T15035] netlink: 'syz.5.2456': attribute type 1 has an invalid length.
[  814.545382][T15034] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15034 comm=syz.4.2458
[  814.635746][T15043] overlayfs: failed to resolve './file1/file0': -2
[  814.642439][   T30] audit: type=1400 audit(2000001228.626:651): avc:  denied  { mounton } for  pid=15031 comm="syz.4.2458" path="/file1" dev="ramfs" ino=50759 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[  814.681526][T15034] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  814.725331][T15034] overlayfs: failed to set xattr on upper
[  814.731186][T15034] overlayfs: ...falling back to redirect_dir=nofollow.
[  814.754878][T15034] overlayfs: ...falling back to index=off.
[  814.774851][T15034] overlayfs: ...falling back to uuid=null.
[  814.795368][T15034] overlayfs: conflicting lowerdir path
[  814.885062][T15053] netlink: 'syz.3.2457': attribute type 1 has an invalid length.
[  814.892833][T15053] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2457'.
[  815.501590][T15060] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2457'.
[  815.804633][T15055] ALSA: mixer_oss: invalid OSS volume 'PHl�6��q
ӆ���ONEOUT'
[  815.813840][T15055] ALSA: mixer_oss: invalid index 1374389
[  816.484925][ T5987] usb 2-1: new full-speed USB device number 55 using dummy_hcd
[  816.511004][T15075] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  816.590509][T15075] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  816.706150][ T5987] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  816.758762][ T5987] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64
[  816.770408][ T5987] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  816.782852][ T5987] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  816.896514][T15071] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  816.903754][T15071] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  816.944903][ T5987] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  817.595451][T15085] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2468'.
[  817.861698][T15085] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2468'.
[  818.953915][   T24] usb 2-1: USB disconnect, device number 55
[  819.514334][   T30] audit: type=1400 audit(2000001233.486:652): avc:  denied  { ioctl } for  pid=15133 comm="syz.5.2486" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  820.359152][   T30] audit: type=1400 audit(2000001234.346:653): avc:  denied  { accept } for  pid=15145 comm="syz.5.2490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  820.606550][T15155] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2493'.
[  820.781806][T15157] binder: 15150:15157 ioctl 400c620e 0 returned -14
[  821.650544][   T30] audit: type=1400 audit(2000001235.636:654): avc:  denied  { append } for  pid=15172 comm="syz.5.2499" name="event1" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  821.825373][T15183] netlink: 'syz.2.2502': attribute type 1 has an invalid length.
[  822.142069][ T5971] usb 6-1: new full-speed USB device number 46 using dummy_hcd
[  823.188389][T15192] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2504'.
[  823.330640][ T5971] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  823.368870][ T5971] usb 6-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16
[  823.384165][ T5971] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  823.400965][ T5971] usb 6-1: Product: syz
[  823.414398][ T5971] usb 6-1: Manufacturer: syz
[  823.439423][ T5971] usb 6-1: SerialNumber: syz
[  823.468616][ T5971] usb 6-1: config 0 descriptor??
[  823.497561][ T5971] mvusb_mdio 6-1:0.0: probe with driver mvusb_mdio failed with error -5
[  823.648741][   T30] audit: type=1401 audit(2000001237.636:655): op=fscreate invalid_context=EF39FDAA1C594B437119C51A915F740EE7E9CDA024
[  823.697440][T14045] usb 6-1: USB disconnect, device number 46
[  823.767000][T15197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2506'.
[  824.396688][T15197] nbd: socks must be embedded in a SOCK_ITEM attr
[  824.439444][T13570] block nbd64: NBD_DISCONNECT
[  825.564527][   T30] audit: type=1400 audit(2000001239.516:656): avc:  denied  { unmount } for  pid=9354 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  825.595271][T15215] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2510'.
[  825.658811][T15220] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2511'.
[  825.682161][T13570] udevd[13570]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  825.960881][T15220] nbd: socks must be embedded in a SOCK_ITEM attr
[  827.003949][T15238] xt_CT: You must specify a L4 protocol and not use inversions on it
[  828.599930][ T5987] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[  828.647270][T13570] udevd[13570]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  828.657164][   T24] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  828.786272][ T5987] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11
[  828.803179][ T5987] usb 6-1: New USB device found, idVendor=0416, idProduct=c168, bcdDevice= 0.00
[  828.839379][ T5987] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  828.851973][   T24] usb 3-1: Using ep0 maxpacket: 32
[  828.876535][   T24] usb 3-1: config 0 has an invalid interface number: 250 but max is 1
[  828.901280][   T24] usb 3-1: config 0 has no interface number 1
[  828.943627][ T5987] usb 6-1: config 0 descriptor??
[  828.964651][   T24] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  829.062592][   T24] usb 3-1: New USB device found, idVendor=0408, idProduct=3090, bcdDevice=a6.3f
[  829.073144][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  829.098070][   T24] usb 3-1: Product: syz
[  829.102561][   T24] usb 3-1: Manufacturer: syz
[  829.114993][   T24] usb 3-1: SerialNumber: syz
[  829.209657][   T24] usb 3-1: config 0 descriptor??
[  829.472401][ T5987] hid-generic 0003:0416:C168.0015: hidraw0: USB HID v0.07 Device [HID 0416:c168] on usb-dummy_hcd.5-1/input0
[  829.503520][T15245] libceph: resolve '400' (ret=-3): failed
[  829.513403][   T24] uvcvideo 3-1:0.250: Found UVC 0.00 device syz (0408:3090)
[  829.544392][ T5971] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  829.680460][   T24] uvcvideo 3-1:0.250: No valid video chain found.
[  829.687348][ T5987] usb 6-1: USB disconnect, device number 47
[  829.704884][   T24] usb 3-1: USB disconnect, device number 53
[  829.714420][ T5971] usb 5-1: Using ep0 maxpacket: 32
[  829.758463][ T5971] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  829.794258][ T5971] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  829.828980][ T5971] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6
[  829.864251][ T5971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  829.872274][ T5971] usb 5-1: Product: syz
[  829.884505][ T5971] usb 5-1: Manufacturer: syz
[  829.889137][ T5971] usb 5-1: SerialNumber: syz
[  829.916855][ T5971] usb 5-1: config 0 descriptor??
[  830.055340][ T5971] viperboard 5-1:0.0: version 0.00 found at bus 005 address 060
[  830.068210][T15278] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2522'.
[  830.130447][ T5971] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100
[  830.163657][ T5971] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5
[  830.174680][ T6823] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[  830.268361][ T5971] usb 5-1: USB disconnect, device number 60
[  830.396414][ T6823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  830.428501][ T6823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  830.468838][ T6823] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  830.493583][ T6823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  830.519713][ T6823] usb 2-1: config 0 descriptor??
[  830.621357][T15286] sg_write: data in/out 124/20 bytes for SCSI command 0xa4-- guessing data in;
[  830.621357][T15286]    program syz.5.2530 not setting count and/or reply_len properly
[  831.468954][ T5971] usb 6-1: new full-speed USB device number 48 using dummy_hcd
[  831.506377][ T6823] hid-led 0003:27B8:01ED.0016: probe with driver hid-led failed with error -71
[  831.529021][ T6823] usb 2-1: USB disconnect, device number 56
[  831.857546][ T5971] usb 6-1: device descriptor read/64, error -71
[  832.343197][ T5971] usb 6-1: new full-speed USB device number 49 using dummy_hcd
[  832.406696][T15308] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2536'.
[  832.481098][T15308] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2536'.
[  832.492660][T15308] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2536'.
[  832.503172][T15308] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2536'.
[  832.522604][T15308] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2536'.
[  832.536062][T15308] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2536'.
[  832.545627][T15308] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2536'.
[  832.558762][T15308] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2536'.
[  832.614347][ T5971] usb 6-1: device descriptor read/64, error -71
[  832.706849][T15316] rdma_rxe: rxe_newlink: failed to add syz_tun
[  833.069698][ T5971] usb usb6-port1: attempt power cycle
[  833.124720][   T24] usb 5-1: new full-speed USB device number 61 using dummy_hcd
[  833.286196][   T24] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  833.298733][   T24] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64
[  833.310158][   T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  833.327038][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  833.338948][T15316] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  833.346408][T15316] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  833.359138][   T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  833.414336][ T5971] usb 6-1: new full-speed USB device number 50 using dummy_hcd
[  833.476611][ T5971] usb 6-1: device descriptor read/8, error -71
[  834.044894][ T5971] usb 6-1: new full-speed USB device number 51 using dummy_hcd
[  834.075867][   T30] audit: type=1400 audit(2000001248.056:657): avc:  denied  { accept } for  pid=15331 comm="syz.3.2545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  834.301698][   T30] audit: type=1326 audit(2000001248.286:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15344 comm="syz.1.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5697d8f749 code=0x7ffc0000
[  834.334501][ T5971] usb 6-1: device not accepting address 51, error -71
[  834.345151][ T5971] usb usb6-port1: unable to enumerate USB device
[  834.485063][   T30] audit: type=1326 audit(2000001248.286:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15344 comm="syz.1.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5697d8f749 code=0x7ffc0000
[  834.560361][   T30] audit: type=1326 audit(2000001248.286:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15344 comm="syz.1.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5697d91667 code=0x7ffc0000
[  834.633087][   T30] audit: type=1326 audit(2000001248.286:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15344 comm="syz.1.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5697d8f749 code=0x7ffc0000
[  834.717537][T15353] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  834.921624][   T30] audit: type=1326 audit(2000001248.286:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15344 comm="syz.1.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5697d8f749 code=0x7ffc0000
[  834.996864][   T30] audit: type=1326 audit(2000001248.286:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15344 comm="syz.1.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f5697d8f749 code=0x7ffc0000
[  835.030272][   T30] audit: type=1326 audit(2000001248.286:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15344 comm="syz.1.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5697d8f749 code=0x7ffc0000
[  835.092681][   T30] audit: type=1326 audit(2000001248.286:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15344 comm="syz.1.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f5697d8f749 code=0x7ffc0000
[  835.136017][   T30] audit: type=1326 audit(2000001248.286:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15344 comm="syz.1.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5697d8f749 code=0x7ffc0000
[  835.388270][T15361] sd 0:0:1:0: device reset
[  835.780069][   T24] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[  835.854356][ T6823] usb 5-1: USB disconnect, device number 61
[  836.036134][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  836.378517][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  836.701397][   T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  836.748493][   T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  836.787314][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  836.849663][   T24] usb 2-1: config 0 descriptor??
[  837.712635][T15387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2563'.
[  837.800630][T15384] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2562'.
[  838.226913][   T24] usbhid 2-1:0.0: can't add hid device: -71
[  838.266169][   T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  838.476624][   T24] usb 2-1: USB disconnect, device number 57
[  839.999760][   T30] kauditd_printk_skb: 5 callbacks suppressed
[  839.999772][   T30] audit: type=1400 audit(2000001253.986:672): avc:  denied  { setopt } for  pid=15407 comm="syz.2.2571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  840.927057][ T5987] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  841.207127][ T5987] usb 3-1: config 0 has an invalid interface number: 64 but max is 0
[  841.226670][ T5987] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  841.255078][ T5987] usb 3-1: config 0 has no interface number 0
[  841.269019][ T5987] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[  841.282680][   T24] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[  841.305979][ T5987] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  841.319513][ T5987] usb 3-1: Product: syz
[  841.329075][ T5987] usb 3-1: Manufacturer: syz
[  841.338392][ T5987] usb 3-1: SerialNumber: syz
[  841.353707][ T5987] usb 3-1: config 0 descriptor??
[  841.373298][ T5987] uvcvideo 3-1:0.64: Found UVC 0.00 device syz (046d:0823)
[  841.392539][ T5987] uvcvideo 3-1:0.64: No valid video chain found.
[  841.492115][   T24] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  841.502753][   T24] usb 5-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3
[  841.515224][   T24] usb 5-1: Product: syz
[  841.520518][   T24] usb 5-1: Manufacturer: syz
[  841.526055][   T24] usb 5-1: SerialNumber: syz
[  841.543642][   T24] usb 5-1: config 0 descriptor??
[  841.551519][   T24] ch341 5-1:0.0: ch341-uart converter detected
[  841.609550][ T5987] usb 3-1: USB disconnect, device number 54
[  841.793007][   T24] usb 5-1: failed to send control message: -71
[  841.811553][   T24] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[  841.861068][   T24] usb 5-1: USB disconnect, device number 62
[  841.868882][   T24] ch341 5-1:0.0: device disconnected
[  843.553278][T15474] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2589'.
[  844.074481][T15488] rdma_rxe: rxe_newlink: failed to add syz_tun
[  844.415783][ T5987] usb 5-1: new full-speed USB device number 63 using dummy_hcd
[  844.735692][ T5987] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  844.794426][ T5987] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64
[  844.833476][ T5987] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  844.845125][ T5987] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  844.858264][T15488] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  844.865837][T15488] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  844.876979][ T5987] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  845.178439][T15496] rdma_rxe: rxe_newlink: failed to add syz_tun
[  845.454431][ T5987] usb 4-1: new full-speed USB device number 52 using dummy_hcd
[  845.786479][ T5987] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  845.803012][ T5987] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64
[  845.824698][ T5987] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  845.834107][ T5987] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  845.847209][T15496] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  845.854948][T15496] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  845.871450][ T5987] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  846.473577][   T30] audit: type=1400 audit(2000001260.456:673): avc:  denied  { listen } for  pid=15503 comm="syz.5.2597" lport=49231 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  846.504961][T15498] rdma_rxe: rxe_newlink: failed to add syz_tun
[  846.800276][ T5987] usb 5-1: USB disconnect, device number 63
[  846.854374][ T5971] usb 2-1: new full-speed USB device number 58 using dummy_hcd
[  847.471679][ T5971] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  847.537658][ T5971] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64
[  847.549228][ T5971] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  847.565850][ T5971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  847.683320][ T5971] usb 2-1: can't set config #27, error -71
[  847.720614][ T5971] usb 2-1: USB disconnect, device number 58
[  848.010157][T15531] netlink: 'syz.1.2604': attribute type 30 has an invalid length.
[  848.036634][   T90] usb 4-1: USB disconnect, device number 52
[  848.041518][T15530] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2603'.
[  848.088870][T15533] netlink: 'syz.1.2604': attribute type 30 has an invalid length.
[  848.191354][T15534] 9pnet_virtio: no channels available for device syz
[  848.220601][T15530] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2603'.
[  848.435152][T15530] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2603'.
[  848.444553][   T30] audit: type=1400 audit(2000001262.306:674): avc:  denied  { mounton } for  pid=15524 comm="syz.4.2603" path="/bus" dev="bpf" ino=51889 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1
[  848.677454][T15532] openvswitch: netlink: nsh attribute has 16 unknown bytes.
[  849.017399][   T30] audit: type=1400 audit(2000001263.006:675): avc:  denied  { setattr } for  pid=5815 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  849.199019][T15541] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  849.884430][ T5987] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[  850.587791][ T5987] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  850.596640][ T5987] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  850.607486][ T5987] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  850.617683][ T5987] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  850.687151][ T5987] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  850.753506][T15561] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2613'.
[  850.997182][ T5987] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  851.364346][ T5987] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  851.388066][T15538] Process accounting resumed
[  851.392926][ T5987] usb 2-1: Product: syz
[  851.416482][ T5987] usb 2-1: Manufacturer: syz
[  851.479485][ T5987] cdc_wdm 2-1:1.0: skipping garbage
[  851.499131][ T5987] cdc_wdm 2-1:1.0: skipping garbage
[  851.755423][T15573] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2616'.
[  852.812439][ T5987] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  852.818948][ T5987] cdc_wdm 2-1:1.0: Unknown control protocol
[  852.922046][T15578] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2617'.
[  853.306416][T15582] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2618'.
[  853.370286][T15582] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2618'.
[  853.609398][ T5987] usb 2-1: USB disconnect, device number 59
[  854.349728][T15600] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2623'.
[  855.391135][T15610] netlink: 'syz.3.2627': attribute type 30 has an invalid length.
[  855.449857][T15611] netlink: 'syz.3.2627': attribute type 30 has an invalid length.
[  855.525474][T15610] 9pnet_virtio: no channels available for device syz
[  856.070532][T15621] xt_TCPMSS: Only works on TCP SYN packets
[  856.211438][T15629] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2632'.
[  857.708559][   T30] audit: type=1400 audit(2000001271.696:676): avc:  denied  { connect } for  pid=15636 comm="syz.5.2636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  857.851398][T15641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2637'.
[  859.323638][T15652] rdma_rxe: rxe_newlink: failed to add syz_tun
[  859.654573][ T6823] usb 6-1: new full-speed USB device number 52 using dummy_hcd
[  859.851571][ T6823] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  859.941635][ T6823] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64
[  860.031633][ T6823] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  860.068392][ T6823] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  860.105528][T15652] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  860.112843][T15652] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  860.142290][ T6823] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  861.578486][T15662] IPv6: Can't replace route, no match found
[  862.135941][ T6823] usb 6-1: USB disconnect, device number 52
[  862.651310][T15685] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2648'.
[  862.714661][T15687] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2649'.
[  862.725446][T15687] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2649'.
[  862.972060][T15691] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2650'.
[  863.134393][T15691] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2650'.
[  863.415993][T15694] netlink: 'syz.2.2651': attribute type 1 has an invalid length.
[  863.423766][T15694] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2651'.
[  864.110036][T15698] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2651'.
[  864.768444][T15713] netlink: 'syz.1.2654': attribute type 1 has an invalid length.
[  864.776361][T15713] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2654'.
[  865.071467][T15714] netlink: 'syz.3.2656': attribute type 1 has an invalid length.
[  867.149349][T15724] netlink: 'syz.3.2660': attribute type 1 has an invalid length.
[  868.136109][T15728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2661'.
[  868.154753][ T5826] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  868.202884][ T5826] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  868.211238][ T5826] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  869.198246][ T5826] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  869.207725][ T5826] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  869.255425][ T5833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  869.262898][ T5833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  869.277875][ T5833] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  869.286659][ T5833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  869.296641][ T5833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  869.742759][T15743] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2666'.
[  869.752368][T15743] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2666'.
[  869.947384][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  871.305953][T15746] kernel profiling enabled (shift: 63)
[  871.311745][T15746] profiling shift: 63 too large
[  871.393448][ T5833] Bluetooth: hci5: command tx timeout
[  871.407631][T15746] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  871.566689][ T3544] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  871.786388][T15746] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  871.831398][T15726] virt_wifi0 speed is unknown, defaulting to 1000
[  871.889828][ T3544] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  871.995695][T15746] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  872.065331][T15759] netlink: 'syz.5.2664': attribute type 1 has an invalid length.
[  872.530627][ T3544] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  872.825060][T15746] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  872.905252][   T30] audit: type=1400 audit(2000001286.896:677): avc:  denied  { append } for  pid=15766 comm="syz.5.2673" name="001" dev="devtmpfs" ino=724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  873.465167][ T5833] Bluetooth: hci5: command tx timeout
[  874.012063][T15778] program syz.2.2675 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  874.042366][ T4228] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  874.102943][T15726] chnl_net:caif_netlink_parms(): no params data found
[  874.173203][   T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  874.328541][   T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  875.368963][ T4041] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  875.560035][ T5833] Bluetooth: hci5: command tx timeout
[  876.728086][ T3544] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  876.801097][ T3544] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  876.919926][ T3544] bond0 (unregistering): Released all slaves
[  876.950200][ T3544] bond1 (unregistering): Released all slaves
[  877.130118][T15805] NFSD: Failed to start, no listeners configured.
[  877.194784][ T3544] bond2 (unregistering): (slave veth5): Releasing active interface
[  877.205033][ T3544] bond2 (unregistering): Released all slaves
[  877.220252][ T3544] bond3 (unregistering): Released all slaves
[  877.233258][T15814] netlink: 'syz.1.2684': attribute type 10 has an invalid length.
[  877.243058][ T3544] bond4 (unregistering): Released all slaves
[  877.309026][T15804] pim6reg: entered allmulticast mode
[  877.333615][T15813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  877.410079][T15726] bridge0: port 1(bridge_slave_0) entered blocking state
[  877.435174][T15726] bridge0: port 1(bridge_slave_0) entered disabled state
[  877.462277][T15726] bridge_slave_0: entered allmulticast mode
[  877.483218][T15726] bridge_slave_0: entered promiscuous mode
[  877.706978][ T5833] Bluetooth: hci5: command tx timeout
[  877.841483][T15726] bridge0: port 2(bridge_slave_1) entered blocking state
[  877.875129][T15726] bridge0: port 2(bridge_slave_1) entered disabled state
[  877.910184][T15726] bridge_slave_1: entered allmulticast mode
[  877.948425][T15726] bridge_slave_1: entered promiscuous mode
[  878.126676][T15726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  878.257182][T15726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  878.351292][T15839] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2689'.
[  878.409918][T15726] team0: Port device team_slave_0 added
[  878.444313][ T5971] usb 6-1: new high-speed USB device number 53 using dummy_hcd
[  878.460008][T15829] NFSD: Failed to start, no listeners configured.
[  878.490315][T15726] team0: Port device team_slave_1 added
[  878.858330][ T5971] usb 6-1: Using ep0 maxpacket: 32
[  878.870614][ T5971] usb 6-1: unable to read config index 0 descriptor/start: -61
[  878.882234][ T5971] usb 6-1: can't read configurations, error -61
[  878.950237][T15726] batman_adv: batadv0: Adding interface: batadv_slave_0
[  878.963483][T15726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  879.014535][T15726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  879.056012][ T5971] usb 6-1: new high-speed USB device number 54 using dummy_hcd
[  879.072207][T15726] batman_adv: batadv0: Adding interface: batadv_slave_1
[  879.335497][ T5971] usb 6-1: Using ep0 maxpacket: 32
[  879.341219][T15726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  879.376747][ T5971] usb 6-1: unable to read config index 0 descriptor/start: -61
[  879.384858][ T5971] usb 6-1: can't read configurations, error -61
[  879.391444][ T5971] usb usb6-port1: attempt power cycle
[  879.397182][T15726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  879.844607][ T5971] usb 6-1: new high-speed USB device number 55 using dummy_hcd
[  879.924732][ T5971] usb 6-1: Using ep0 maxpacket: 32
[  879.931926][ T5971] usb 6-1: unable to read config index 0 descriptor/start: -61
[  879.978440][ T5971] usb 6-1: can't read configurations, error -61
[  880.031094][T15861] kAFS: Can only specify source 'none' with -o dyn
[  880.154306][ T5971] usb 6-1: new high-speed USB device number 56 using dummy_hcd
[  880.191541][ T5971] usb 6-1: Using ep0 maxpacket: 32
[  880.213896][ T5971] usb 6-1: unable to read config index 0 descriptor/start: -61
[  880.245190][ T5971] usb 6-1: can't read configurations, error -61
[  880.264643][ T5971] usb usb6-port1: unable to enumerate USB device
[  880.374598][ T3544] hsr_slave_0: left promiscuous mode
[  880.408218][ T3544] hsr_slave_1: left promiscuous mode
[  880.433371][ T3544] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  880.462207][ T3544] batman_adv: batadv0: Removing interface: batadv_slave_0
[  880.486815][ T3544] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  880.632909][   T30] audit: type=1400 audit(2000001294.486:678): avc:  denied  { name_bind } for  pid=15860 comm="syz.3.2693" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[  880.699566][ T3544] batman_adv: batadv0: Removing interface: batadv_slave_1
[  880.708581][ T3544] batman_adv: batadv0: Removing interface: virt_wifi0
[  880.753659][ T3544] batadv_slave_1: left promiscuous mode
[  880.765583][ T3544] veth1_macvtap: left promiscuous mode
[  880.771261][ T3544] veth0_macvtap: left promiscuous mode
[  880.777201][ T3544] veth1_vlan: left promiscuous mode
[  880.782792][ T3544] veth0_vlan: left promiscuous mode
[  881.688442][T15874] netlink: 'syz.3.2695': attribute type 10 has an invalid length.
[  882.851007][ T3544] team0 (unregistering): Port device team_slave_1 removed
[  882.911376][ T3544] team0 (unregistering): Port device team_slave_0 removed
[  883.180509][T15894] rdma_rxe: rxe_newlink: failed to add syz_tun
[  883.478819][ T5987] usb 2-1: new full-speed USB device number 60 using dummy_hcd
[  883.666212][ T5987] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  883.692821][ T5987] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64
[  883.717802][ T5987] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  883.736303][ T5987] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  883.766496][T15894] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  883.773904][T15894] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  883.783328][ T5987] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  883.988965][T15726] hsr_slave_0: entered promiscuous mode
[  883.995864][T15726] hsr_slave_1: entered promiscuous mode
[  884.002427][T15726] debugfs: 'hsr0' already exists in 'hsr'
[  884.008995][T15726] Cannot create hsr debugfs directory
[  884.423016][T15911] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2705'.
[  884.674626][T15726] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  884.698997][T15726] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  884.721499][T15726] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  884.743517][T15726] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  884.925613][T15928] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2706'.
[  885.337138][T15726] 8021q: adding VLAN 0 to HW filter on device bond0
[  885.381931][T15726] 8021q: adding VLAN 0 to HW filter on device team0
[  885.412778][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  885.420053][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  885.437159][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  885.444374][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  885.498542][T15934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2708'.
[  886.008810][ T5987] usb 2-1: USB disconnect, device number 60
[  886.172014][T15945] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=15945 comm=syz.2.2709
[  886.422097][T15954] netlink: 'syz.2.2711': attribute type 1 has an invalid length.
[  887.269531][T15726] 8021q: adding VLAN 0 to HW filter on device batadv0
[  887.295043][T15960] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2713'.
[  887.331287][T15960] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2713'.
[  887.583225][   T30] audit: type=1400 audit(2000001301.566:679): avc:  denied  { read } for  pid=15947 comm="syz.1.2710" path="socket:[55336]" dev="sockfs" ino=55336 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  887.949524][T15726] veth0_vlan: entered promiscuous mode
[  887.984299][ T6272] usb 6-1: new high-speed USB device number 57 using dummy_hcd
[  888.021435][T15726] veth1_vlan: entered promiscuous mode
[  888.093473][T15726] veth0_macvtap: entered promiscuous mode
[  888.174350][ T6272] usb 6-1: Using ep0 maxpacket: 16
[  888.179832][T15726] veth1_macvtap: entered promiscuous mode
[  888.200857][ T6272] usb 6-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config
[  888.296019][ T6272] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  888.384513][T15994] netlink: 'syz.2.2717': attribute type 4 has an invalid length.
[  888.462596][T15994] netlink: 'syz.2.2717': attribute type 4 has an invalid length.
[  888.756881][ T6272] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  888.787194][T15726] batman_adv: batadv0: Interface activated: batadv_slave_0
[  888.824704][ T6272] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  888.832747][ T6272] usb 6-1: Product: syz
[  888.850067][ T6272] usb 6-1: Manufacturer: syz
[  888.856440][ T6272] usb 6-1: SerialNumber: syz
[  888.879723][T15726] batman_adv: batadv0: Interface activated: batadv_slave_1
[  888.910757][ T3731] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  888.992656][ T4041] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  889.066361][ T4041] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  889.105248][ T6272] usb 6-1: 0:2 : does not exist
[  889.131239][ T4041] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  889.198165][ T6272] usb 6-1: USB disconnect, device number 57
[  889.252736][T13570] udevd[13570]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  889.280178][ T2993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  889.304789][ T2993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  889.527500][ T3544] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  889.542533][ T3544] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  889.936340][   T30] audit: type=1400 audit(2000001303.916:680): avc:  denied  { mounton } for  pid=15726 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  890.404340][ T5971] usb 3-1: new low-speed USB device number 55 using dummy_hcd
[  890.944386][ T5971] usb 3-1: Invalid ep0 maxpacket: 32
[  891.129011][ T5971] usb 3-1: new low-speed USB device number 56 using dummy_hcd
[  891.854328][ T5971] usb 3-1: Invalid ep0 maxpacket: 32
[  891.870240][ T5971] usb usb3-port1: attempt power cycle
[  892.204356][   T24] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  892.320875][ T5971] usb 3-1: new low-speed USB device number 57 using dummy_hcd
[  892.345177][ T5971] usb 3-1: Invalid ep0 maxpacket: 32
[  892.444204][T16054] Cannot find add_set index 0 as target
[  892.489920][ T6272] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[  892.514303][   T24] usb 4-1: Using ep0 maxpacket: 16
[  892.798626][   T24] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  892.823086][   T24] usb 4-1: config 1 has no interface number 1
[  892.844342][ T5971] usb 3-1: new low-speed USB device number 58 using dummy_hcd
[  892.846538][   T24] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  892.890054][   T24] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  892.908617][ T5971] usb 3-1: Invalid ep0 maxpacket: 32
[  892.919344][ T5971] usb usb3-port1: unable to enumerate USB device
[  892.940087][   T24] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  892.962518][   T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  892.972624][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  892.981975][   T24] usb 4-1: Product: syz
[  892.988525][ T6272] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  892.999441][   T24] usb 4-1: Manufacturer: syz
[  893.006277][ T6272] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  893.018710][   T24] usb 4-1: SerialNumber: syz
[  893.035127][ T6272] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  893.158383][ T6272] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  893.202738][T16060] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2729'.
[  893.297608][ T6272] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  893.312603][ T6272] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  893.322245][ T6272] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  893.346420][ T6272] usb 2-1: Product: syz
[  893.350967][ T6272] usb 2-1: Manufacturer: syz
[  893.524306][T16062] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  894.352173][   T24] usb 4-1: 2:1: invalid format type 0x1001 is detected, processed as PCM
[  894.605995][ T6272] cdc_wdm 2-1:1.0: skipping garbage
[  894.611215][ T6272] cdc_wdm 2-1:1.0: skipping garbage
[  894.685159][ T6272] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  894.710103][ T6272] cdc_wdm 2-1:1.0: Unknown control protocol
[  894.994660][   T90] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[  895.085516][T16042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  895.106478][T16042] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  895.154827][   T90] usb 3-1: Using ep0 maxpacket: 16
[  895.163484][   T90] usb 3-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config
[  895.176181][   T90] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  895.197470][   T90] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  895.207474][   T90] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  895.216272][   T90] usb 3-1: Product: syz
[  895.224384][   T90] usb 3-1: Manufacturer: syz
[  895.229122][   T90] usb 3-1: SerialNumber: syz
[  895.231497][   T24] usb 4-1: USB disconnect, device number 53
[  895.444473][ T6272] usb 6-1: new high-speed USB device number 58 using dummy_hcd
[  895.481728][   T90] usb 3-1: 0:2 : does not exist
[  895.506394][   T90] usb 3-1: USB disconnect, device number 59
[  895.604347][ T6272] usb 6-1: Using ep0 maxpacket: 32
[  895.631240][ T6272] usb 6-1: config 0 has an invalid interface number: 188 but max is 0
[  895.650156][ T6272] usb 6-1: config 0 has no interface number 0
[  895.657674][ T6272] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  895.682368][ T6272] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  895.697790][ T6272] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  895.706516][ T6272] usb 6-1: Product: syz
[  895.710785][ T6272] usb 6-1: Manufacturer: syz
[  895.716069][ T6272] usb 6-1: SerialNumber: syz
[  895.723436][ T6272] usb 6-1: config 0 descriptor??
[  895.729214][T16087] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  896.853572][T16087] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1002.204139][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[ 1002.211107][    C1] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P5820/1:b..l P16050/1:b..l P16042/1:b..l
[ 1002.221990][    C1] rcu: 	(detected by 1, t=10502 jiffies, g=75297, q=319 ncpus=2)
[ 1002.229679][    C1] task:syz.3.2725      state:R  running task     stack:27304 pid:16042 tgid:16041 ppid:5816   task_flags:0x40054c flags:0x00080000
[ 1002.244201][    C1] Call Trace:
[ 1002.247552][    C1]  <TASK>
[ 1002.250470][    C1]  ? __schedule+0x10b9/0x6150
[ 1002.255130][    C1]  __schedule+0x1139/0x6150
[ 1002.259617][    C1]  ? __pfx___schedule+0x10/0x10
[ 1002.264443][    C1]  ? folio_remove_rmap_ptes+0x391/0xfb0
[ 1002.269970][    C1]  ? flush_tlb_mm_range+0x1bb/0x12c0
[ 1002.275325][    C1]  ? preempt_schedule_thunk+0x16/0x30
[ 1002.280675][    C1]  preempt_schedule_common+0x44/0xc0
[ 1002.286031][    C1]  preempt_schedule_thunk+0x16/0x30
[ 1002.291311][    C1]  _raw_spin_unlock+0x3e/0x50
[ 1002.295983][    C1]  unmap_page_range+0x20a7/0x43c0
[ 1002.301015][    C1]  ? __pfx_unmap_page_range+0x10/0x10
[ 1002.306371][    C1]  ? mas_next_slot+0x12d3/0x1cb0
[ 1002.311296][    C1]  ? uprobe_munmap+0x93/0x600
[ 1002.315954][    C1]  unmap_single_vma+0x153/0x240
[ 1002.320784][    C1]  unmap_vmas+0x218/0x470
[ 1002.325092][    C1]  ? __pfx_unmap_vmas+0x10/0x10
[ 1002.329915][    C1]  ? mas_next_slot+0x12d3/0x1cb0
[ 1002.334861][    C1]  exit_mmap+0x1b0/0xb60
[ 1002.339083][    C1]  ? __pfx_exit_mmap+0x10/0x10
[ 1002.343841][    C1]  ? __lock_acquire+0x436/0x2890
[ 1002.348757][    C1]  ? arch_uprobe_clear_state+0x16/0x150
[ 1002.354287][    C1]  __mmput+0x12a/0x410
[ 1002.358354][    C1]  mmput+0x62/0x70
[ 1002.362053][    C1]  do_exit+0x7d7/0x2bd0
[ 1002.366185][    C1]  ? __pfx_do_exit+0x10/0x10
[ 1002.370744][    C1]  ? do_raw_spin_lock+0x12c/0x2b0
[ 1002.375744][    C1]  ? find_held_lock+0x2b/0x80
[ 1002.380490][    C1]  do_group_exit+0xd3/0x2a0
[ 1002.384970][    C1]  get_signal+0x2671/0x26d0
[ 1002.389473][    C1]  ? __pfx_get_signal+0x10/0x10
[ 1002.394301][    C1]  ? do_futex+0x122/0x350
[ 1002.398611][    C1]  arch_do_signal_or_restart+0x8f/0x7e0
[ 1002.404139][    C1]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1002.410380][    C1]  ? __pfx___x64_sys_futex+0x10/0x10
[ 1002.415650][    C1]  exit_to_user_mode_loop+0x8c/0x540
[ 1002.420919][    C1]  do_syscall_64+0x4ee/0xf80
[ 1002.425573][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1002.431437][    C1] RIP: 0033:0x7fd6f698f749
[ 1002.435825][    C1] RSP: 002b:00007fd6f79100e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1002.444207][    C1] RAX: fffffffffffffe00 RBX: 00007fd6f6be5fa8 RCX: 00007fd6f698f749
[ 1002.452238][    C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd6f6be5fa8
[ 1002.460185][    C1] RBP: 00007fd6f6be5fa0 R08: 0000000000000000 R09: 0000000000000000
[ 1002.468128][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1002.476070][    C1] R13: 00007fd6f6be6038 R14: 00007ffe43911cf0 R15: 00007ffe43911dd8
[ 1002.484111][    C1]  </TASK>
[ 1002.487109][    C1] task:syz.1.2724      state:R  running task     stack:26888 pid:16050 tgid:16039 ppid:5814   task_flags:0x40044c flags:0x00080002
[ 1002.500560][    C1] Call Trace:
[ 1002.503819][    C1]  <TASK>
[ 1002.506728][    C1]  ? __schedule+0x10b9/0x6150
[ 1002.511387][    C1]  __schedule+0x1139/0x6150
[ 1002.515863][    C1]  ? rcu_is_watching+0x12/0xc0
[ 1002.520603][    C1]  ? __pfx___schedule+0x10/0x10
[ 1002.525427][    C1]  ? mark_held_locks+0x49/0x80
[ 1002.530165][    C1]  preempt_schedule_irq+0x51/0x90
[ 1002.535166][    C1]  irqentry_exit+0x1d8/0x8c0
[ 1002.539733][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1002.545682][    C1] RIP: 0010:stack_access_ok+0x53/0x200
[ 1002.551118][    C1] Code: 83 ec 08 80 3c 02 00 0f 85 94 01 00 00 4c 8d 6b 10 4c 8b 7b 08 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 80 3c 02 00 <0f> 85 52 01 00 00 48 89 da 48 8b 4b 10 48 b8 00 00 00 00 00 fc ff
[ 1002.570702][    C1] RSP: 0018:ffffc9000bda6de0 EFLAGS: 00000246
[ 1002.576750][    C1] RAX: dffffc0000000000 RBX: ffffc9000bda6e90 RCX: ffffffff9121bedc
[ 1002.584701][    C1] RDX: 1ffff920017b4dd4 RSI: ffffc9000bda7b60 RDI: ffffc9000bda6e90
[ 1002.592648][    C1] RBP: ffffc9000bda7b60 R08: 0000000000000001 R09: 00000000fb19a5cc
[ 1002.600596][    C1] R10: 0000000000000002 R11: 0000000000007b3b R12: 0000000000000008
[ 1002.608543][    C1] R13: ffffc9000bda6ea0 R14: ffffc9000bda6e98 R15: ffffc9000bda0000
[ 1002.616502][    C1]  unwind_next_frame+0x1509/0x20b0
[ 1002.621600][    C1]  ? __mmput+0x12a/0x410
[ 1002.625826][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1002.631953][    C1]  arch_stack_walk+0x94/0x100
[ 1002.636610][    C1]  ? mmput+0x62/0x70
[ 1002.640488][    C1]  stack_trace_save+0x8e/0xc0
[ 1002.645141][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[ 1002.650490][    C1]  ? __lock_acquire+0x436/0x2890
[ 1002.655400][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1002.661268][    C1]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1002.666439][    C1]  save_stack+0x160/0x1f0
[ 1002.670752][    C1]  ? __pfx_save_stack+0x10/0x10
[ 1002.675573][    C1]  ? free_unref_folios+0xa22/0x1610
[ 1002.680827][    C1]  ? folios_put_refs+0x4be/0x750
[ 1002.685825][    C1]  ? free_pages_and_swap_cache+0x245/0x4a0
[ 1002.691601][    C1]  ? __tlb_batch_free_encoded_pages+0xf9/0x290
[ 1002.697733][    C1]  ? tlb_flush_mmu+0xe9/0x5a0
[ 1002.702387][    C1]  ? unmap_page_range+0x1e64/0x43c0
[ 1002.707558][    C1]  ? unmap_single_vma+0x153/0x240
[ 1002.712554][    C1]  ? unmap_vmas+0x218/0x470
[ 1002.717027][    C1]  ? exit_mmap+0x1b0/0xb60
[ 1002.721507][    C1]  ? __mmput+0x12a/0x410
[ 1002.725731][    C1]  ? page_ext_put+0x3e/0xd0
[ 1002.730211][    C1]  __reset_page_owner+0x84/0x1a0
[ 1002.735122][    C1]  free_unref_folios+0xa22/0x1610
[ 1002.740134][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1002.745916][    C1]  folios_put_refs+0x4be/0x750
[ 1002.750655][    C1]  ? __pfx_folios_put_refs+0x10/0x10
[ 1002.755917][    C1]  free_pages_and_swap_cache+0x245/0x4a0
[ 1002.761525][    C1]  ? __pfx_free_pages_and_swap_cache+0x10/0x10
[ 1002.767664][    C1]  ? lruvec_stat_mod_folio+0x25b/0x3b0
[ 1002.773097][    C1]  ? __pfx___might_resched+0x10/0x10
[ 1002.778351][    C1]  ? folio_remove_rmap_ptes+0x391/0xfb0
[ 1002.783872][    C1]  __tlb_batch_free_encoded_pages+0xf9/0x290
[ 1002.790099][    C1]  ? find_held_lock+0x2b/0x80
[ 1002.794752][    C1]  tlb_flush_mmu+0xe9/0x5a0
[ 1002.799237][    C1]  unmap_page_range+0x1e64/0x43c0
[ 1002.804249][    C1]  ? __pfx_unmap_page_range+0x10/0x10
[ 1002.809595][    C1]  ? mas_next_slot+0x12d3/0x1cb0
[ 1002.814518][    C1]  ? uprobe_munmap+0x93/0x600
[ 1002.819169][    C1]  unmap_single_vma+0x153/0x240
[ 1002.823995][    C1]  unmap_vmas+0x218/0x470
[ 1002.828300][    C1]  ? __pfx_unmap_vmas+0x10/0x10
[ 1002.833125][    C1]  ? mas_next_slot+0x12d3/0x1cb0
[ 1002.838049][    C1]  exit_mmap+0x1b0/0xb60
[ 1002.842270][    C1]  ? __pfx_exit_mmap+0x10/0x10
[ 1002.847009][    C1]  ? __lock_acquire+0x436/0x2890
[ 1002.851925][    C1]  ? arch_uprobe_clear_state+0x16/0x150
[ 1002.857446][    C1]  __mmput+0x12a/0x410
[ 1002.861494][    C1]  mmput+0x62/0x70
[ 1002.865195][    C1]  do_exit+0x7d7/0x2bd0
[ 1002.869340][    C1]  ? __pfx_do_exit+0x10/0x10
[ 1002.873986][    C1]  ? do_raw_spin_lock+0x12c/0x2b0
[ 1002.878986][    C1]  ? find_held_lock+0x2b/0x80
[ 1002.883641][    C1]  do_group_exit+0xd3/0x2a0
[ 1002.888116][    C1]  get_signal+0x2671/0x26d0
[ 1002.892600][    C1]  ? vfs_write+0xa38/0x11d0
[ 1002.897076][    C1]  ? vfs_write+0x15d/0x11d0
[ 1002.901550][    C1]  ? __pfx_get_signal+0x10/0x10
[ 1002.906375][    C1]  ? do_futex+0x122/0x350
[ 1002.910683][    C1]  arch_do_signal_or_restart+0x8f/0x7e0
[ 1002.916211][    C1]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1002.922347][    C1]  ? fput+0x70/0xf0
[ 1002.926129][    C1]  ? __pfx___x64_sys_futex+0x10/0x10
[ 1002.931388][    C1]  exit_to_user_mode_loop+0x8c/0x540
[ 1002.936649][    C1]  do_syscall_64+0x4ee/0xf80
[ 1002.941214][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1002.947080][    C1] RIP: 0033:0x7f5697d8f749
[ 1002.951558][    C1] RSP: 002b:00007f5698b4c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1002.960133][    C1] RAX: fffffffffffffe00 RBX: 00007f5697fe6278 RCX: 00007f5697d8f749
[ 1002.968088][    C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5697fe6278
[ 1002.976058][    C1] RBP: 00007f5697fe6270 R08: 0000000000000000 R09: 0000000000000000
[ 1002.984002][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1002.991955][    C1] R13: 00007f5697fe6308 R14: 00007ffe81f40cb0 R15: 00007ffe81f40d98
[ 1002.999927][    C1]  </TASK>
[ 1003.002928][    C1] task:syz-executor    state:R  running task     stack:23880 pid:5820  tgid:5820  ppid:5810   task_flags:0x400140 flags:0x00080000
[ 1003.016465][    C1] Call Trace:
[ 1003.019746][    C1]  <TASK>
[ 1003.022694][    C1]  ? __schedule+0x10b9/0x6150
[ 1003.027357][    C1]  __schedule+0x1139/0x6150
[ 1003.031862][    C1]  ? __pfx___schedule+0x10/0x10
[ 1003.036694][    C1]  ? mark_held_locks+0x49/0x80
[ 1003.041435][    C1]  preempt_schedule_irq+0x51/0x90
[ 1003.046446][    C1]  irqentry_exit+0x1d8/0x8c0
[ 1003.051015][    C1]  ? rcu_is_watching+0x12/0xc0
[ 1003.055840][    C1]  asm_sysvec_reschedule_ipi+0x1a/0x20
[ 1003.061364][    C1] RIP: 0010:__orc_find+0x70/0xf0
[ 1003.066292][    C1] Code: ec 72 4e 4c 89 e2 48 29 ea 48 89 d6 48 c1 ea 3f 48 c1 fe 02 48 01 f2 48 d1 fa 48 8d 5c 95 00 48 89 da 48 c1 ea 03 0f b6 34 0a <48> 89 da 83 e2 07 83 c2 03 40 38 f2 7c 05 40 84 f6 75 4b 48 63 13
[ 1003.085888][    C1] RSP: 0018:ffffc900038feeb0 EFLAGS: 00000a03
[ 1003.091949][    C1] RAX: ffffffff912e71a4 RBX: ffffffff90a68e5c RCX: dffffc0000000000
[ 1003.099895][    C1] RDX: 1ffffffff214d1cb RSI: 0000000000000000 RDI: ffffffff90a68e5c
[ 1003.107848][    C1] RBP: ffffffff90a68e5c R08: ffffffff912e71aa R09: 000000000180e2cf
[ 1003.115902][    C1] R10: 0000000000000002 R11: 00000000000116a9 R12: ffffffff90a68e5c
[ 1003.123861][    C1] R13: ffffffff8216a9fc R14: ffffffff90a68e5c R15: ffffffff90a68e5c
[ 1003.131812][    C1]  ? alloc_vmap_area+0x98c/0x2a50
[ 1003.136827][    C1]  ? alloc_vmap_area+0x98c/0x2a50
[ 1003.141842][    C1]  unwind_next_frame+0x2ec/0x20b0
[ 1003.146845][    C1]  ? alloc_vmap_area+0x98d/0x2a50
[ 1003.151844][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1003.157973][    C1]  arch_stack_walk+0x94/0x100
[ 1003.162630][    C1]  ? alloc_vmap_area+0x98d/0x2a50
[ 1003.167629][    C1]  stack_trace_save+0x8e/0xc0
[ 1003.172280][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[ 1003.177639][    C1]  ? __lock_acquire+0x436/0x2890
[ 1003.182552][    C1]  save_stack+0x160/0x1f0
[ 1003.186859][    C1]  ? __pfx_save_stack+0x10/0x10
[ 1003.191698][    C1]  ? post_alloc_hook+0x1af/0x220
[ 1003.196614][    C1]  ? get_page_from_freelist+0xd0b/0x31a0
[ 1003.202216][    C1]  ? __alloc_frozen_pages_noprof+0x25f/0x2430
[ 1003.208255][    C1]  ? alloc_pages_mpol+0x1fb/0x550
[ 1003.213282][    C1]  ? alloc_pages_noprof+0x131/0x390
[ 1003.218469][    C1]  ? get_free_pages_noprof+0x10/0xb0
[ 1003.223728][    C1]  ? __kasan_populate_vmalloc+0xa0/0x220
[ 1003.229336][    C1]  ? alloc_vmap_area+0x98d/0x2a50
[ 1003.234340][    C1]  ? __lock_acquire+0x436/0x2890
[ 1003.239255][    C1]  __set_page_owner+0x91/0x560
[ 1003.243995][    C1]  ? __pfx___set_page_owner+0x10/0x10
[ 1003.249425][    C1]  ? bad_range+0x261/0x4c0
[ 1003.253816][    C1]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1003.259005][    C1]  post_alloc_hook+0x1af/0x220
[ 1003.263768][    C1]  get_page_from_freelist+0xd0b/0x31a0
[ 1003.269218][    C1]  ? __pfx___might_resched+0x10/0x10
[ 1003.274495][    C1]  ? should_fail_alloc_page+0xee/0x130
[ 1003.279961][    C1]  __alloc_frozen_pages_noprof+0x25f/0x2430
[ 1003.285850][    C1]  ? find_held_lock+0x2b/0x80
[ 1003.290510][    C1]  ? is_bpf_text_address+0x8a/0x1a0
[ 1003.295684][    C1]  ? bpf_ksym_find+0x127/0x1c0
[ 1003.300426][    C1]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1003.306728][    C1]  ? kernel_text_address+0x8d/0x100
[ 1003.311903][    C1]  ? __kernel_text_address+0xd/0x40
[ 1003.317076][    C1]  ? unwind_get_return_address+0x59/0xa0
[ 1003.322692][    C1]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1003.328562][    C1]  ? policy_nodemask+0xea/0x4e0
[ 1003.333392][    C1]  alloc_pages_mpol+0x1fb/0x550
[ 1003.338244][    C1]  ? __pfx_alloc_pages_mpol+0x10/0x10
[ 1003.343588][    C1]  ? kasan_save_stack+0x42/0x60
[ 1003.348442][    C1]  ? kasan_save_track+0x14/0x30
[ 1003.353263][    C1]  ? __kasan_kmalloc+0xaa/0xb0
[ 1003.357996][    C1]  ? __get_vm_area_node+0x101/0x330
[ 1003.363258][    C1]  alloc_pages_noprof+0x131/0x390
[ 1003.368257][    C1]  get_free_pages_noprof+0x10/0xb0
[ 1003.373342][    C1]  __kasan_populate_vmalloc+0xa0/0x220
[ 1003.378789][    C1]  alloc_vmap_area+0x98d/0x2a50
[ 1003.383633][    C1]  ? __pfx_alloc_vmap_area+0x10/0x10
[ 1003.388902][    C1]  __get_vm_area_node+0x1ca/0x330
[ 1003.393947][    C1]  __vmalloc_node_range_noprof+0x247/0x16b0
[ 1003.399835][    C1]  ? do_ipt_get_ctl+0x6b6/0xaa0
[ 1003.404665][    C1]  ? __mutex_lock+0x27b/0x1ca0
[ 1003.409413][    C1]  ? do_ipt_get_ctl+0x6b6/0xaa0
[ 1003.414325][    C1]  ? __pfx___mutex_lock+0x10/0x10
[ 1003.419332][    C1]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1003.425641][    C1]  ? do_ipt_get_ctl+0x6b6/0xaa0
[ 1003.430465][    C1]  __vmalloc_node_noprof+0xad/0xf0
[ 1003.435568][    C1]  ? do_ipt_get_ctl+0x6b6/0xaa0
[ 1003.440413][    C1]  do_ipt_get_ctl+0x6b6/0xaa0
[ 1003.445067][    C1]  ? __mutex_unlock_slowpath+0x161/0x790
[ 1003.450707][    C1]  ? __pfx_do_ipt_get_ctl+0x10/0x10
[ 1003.455900][    C1]  ? nf_sockopt_find.constprop.0+0x222/0x290
[ 1003.461948][    C1]  nf_getsockopt+0x7c/0xe0
[ 1003.466345][    C1]  ip_getsockopt+0x18c/0x1e0
[ 1003.470912][    C1]  ? __pfx_ip_getsockopt+0x10/0x10
[ 1003.475995][    C1]  ? find_held_lock+0x2b/0x80
[ 1003.480660][    C1]  ? __might_fault+0xe3/0x190
[ 1003.485323][    C1]  ? __might_fault+0xe3/0x190
[ 1003.489989][    C1]  ? __might_fault+0x13b/0x190
[ 1003.494767][    C1]  tcp_getsockopt+0xa1/0x100
[ 1003.499342][    C1]  ? __pfx_sock_common_getsockopt+0x10/0x10
[ 1003.505215][    C1]  do_sock_getsockopt+0x324/0x410
[ 1003.510242][    C1]  ? __pfx_do_sock_getsockopt+0x10/0x10
[ 1003.515788][    C1]  ? kfree+0x27d/0x6e0
[ 1003.519837][    C1]  ? do_sock_setsockopt+0x101/0x1d0
[ 1003.525013][    C1]  __sys_getsockopt+0x12f/0x260
[ 1003.529843][    C1]  __x64_sys_getsockopt+0xbd/0x160
[ 1003.534940][    C1]  ? do_syscall_64+0x91/0xf80
[ 1003.539599][    C1]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1003.544774][    C1]  do_syscall_64+0xcd/0xf80
[ 1003.549258][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1003.555173][    C1] RIP: 0033:0x7ff234b9148a
[ 1003.559569][    C1] RSP: 002b:00007fffa803dcb8 EFLAGS: 00000216 ORIG_RAX: 0000000000000037
[ 1003.567961][    C1] RAX: ffffffffffffffda RBX: 00007fffa803dd40 RCX: 00007ff234b9148a
[ 1003.575918][    C1] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000003
[ 1003.583871][    C1] RBP: 0000000000000003 R08: 00007fffa803dcdc R09: 0079746972756365
[ 1003.591821][    C1] R10: 00007fffa803dd40 R11: 0000000000000216 R12: 00007ff234db9960
[ 1003.599775][    C1] R13: 00007fffa803dcdc R14: 0000000000000000 R15: 00007ff234dba020
[ 1003.607757][    C1]  </TASK>
[ 1003.610761][    C1] rcu: rcu_preempt kthread starved for 10642 jiffies! g75297 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[ 1003.621927][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[ 1003.631867][    C1] rcu: RCU grace-period kthread stack dump:
[ 1003.637736][    C1] task:rcu_preempt     state:R  running task     stack:28064 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
[ 1003.651184][    C1] Call Trace:
[ 1003.654443][    C1]  <TASK>
[ 1003.657364][    C1]  ? __schedule+0x10b9/0x6150
[ 1003.662016][    C1]  __schedule+0x1139/0x6150
[ 1003.666506][    C1]  ? __pfx___schedule+0x10/0x10
[ 1003.671335][    C1]  ? find_held_lock+0x2b/0x80
[ 1003.675990][    C1]  ? schedule+0x2d7/0x3a0
[ 1003.680295][    C1]  schedule+0xe7/0x3a0
[ 1003.684338][    C1]  schedule_timeout+0x123/0x290
[ 1003.689163][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[ 1003.694505][    C1]  ? __pfx_process_timeout+0x10/0x10
[ 1003.699764][    C1]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1003.705654][    C1]  ? prepare_to_swait_event+0xf5/0x480
[ 1003.711094][    C1]  rcu_gp_fqs_loop+0x1ea/0xaf0
[ 1003.715847][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[ 1003.721106][    C1]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1003.726451][    C1]  ? __pfx_rcu_gp_init+0x10/0x10
[ 1003.731379][    C1]  ? rcu_gp_cleanup+0x7c1/0xe90
[ 1003.736217][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1003.742088][    C1]  rcu_gp_kthread+0x26d/0x380
[ 1003.746755][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1003.751930][    C1]  ? rcu_is_watching+0x12/0xc0
[ 1003.756665][    C1]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1003.761839][    C1]  ? __kthread_parkme+0x19e/0x250
[ 1003.766837][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1003.772013][    C1]  kthread+0x3c5/0x780
[ 1003.776076][    C1]  ? __pfx_kthread+0x10/0x10
[ 1003.780651][    C1]  ? rcu_is_watching+0x12/0xc0
[ 1003.785391][    C1]  ? __pfx_kthread+0x10/0x10
[ 1003.789956][    C1]  ret_from_fork+0x983/0xb10
[ 1003.794521][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[ 1003.799604][    C1]  ? __switch_to+0x7af/0x10d0
[ 1003.804259][    C1]  ? __pfx_kthread+0x10/0x10
[ 1003.808822][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1003.813567][    C1]  </TASK>
[ 1003.816560][    C1] rcu: Stack dump where RCU GP kthread last ran:
[ 1003.822856][    C1] Sending NMI from CPU 1 to CPUs 0:
[ 1003.828053][    C0] NMI backtrace for cpu 0
[ 1003.828068][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1003.828091][    C0] Tainted: [L]=SOFTLOCKUP
[ 1003.828097][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1003.828106][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[ 1003.828129][    C0] Code: 86 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 f9 11 00 fb f4 <e9> cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
[ 1003.828153][    C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6
[ 1003.828171][    C0] RAX: 0000000003d9c749 RBX: 0000000000000000 RCX: ffffffff8b7866d9
[ 1003.828181][    C0] RDX: 0000000000000000 RSI: ffffffff8daceab2 RDI: ffffffff8bf2b480
[ 1003.828192][    C0] RBP: fffffbfff1c12f68 R08: 0000000000000001 R09: ffffed101708673d
[ 1003.828203][    C0] R10: ffff8880b84339eb R11: ffffffff8e098670 R12: 0000000000000000
[ 1003.828213][    C0] R13: ffffffff8e097b40 R14: ffffffff9088bdd0 R15: 0000000000000000
[ 1003.828224][    C0] FS:  0000000000000000(0000) GS:ffff8881248f4000(0000) knlGS:0000000000000000
[ 1003.828240][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1003.828250][    C0] CR2: 00007ff234db9358 CR3: 000000003646e000 CR4: 00000000003526f0
[ 1003.828261][    C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083
[ 1003.828272][    C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1003.828282][    C0] Call Trace:
[ 1003.828289][    C0]  <TASK>
[ 1003.828295][    C0]  default_idle+0x13/0x20
[ 1003.828317][    C0]  default_idle_call+0x6c/0xb0
[ 1003.828338][    C0]  do_idle+0x38d/0x510
[ 1003.828361][    C0]  ? __pfx_do_idle+0x10/0x10
[ 1003.828387][    C0]  cpu_startup_entry+0x4f/0x60
[ 1003.828409][    C0]  rest_init+0x16b/0x2b0
[ 1003.828424][    C0]  ? acpi_subsystem_init+0x133/0x180
[ 1003.828441][    C0]  ? __pfx_x86_late_time_init+0x10/0x10
[ 1003.828459][    C0]  start_kernel+0x3ef/0x4d0
[ 1003.828475][    C0]  x86_64_start_reservations+0x18/0x30
[ 1003.828492][    C0]  x86_64_start_kernel+0x130/0x190
[ 1003.828508][    C0]  common_startup_64+0x13e/0x148
[ 1003.828534][    C0]  </TASK>