last executing test programs:

17m56.946180981s ago: executing program 2 (id=82):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_dev$sg(&(0x7f0000000080), 0x7ff, 0x105000)
ioctl$SCSI_IOCTL_SYNC(r1, 0x4)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4048086)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$usbfs(0x0, 0xa, 0x71f100)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
pipe(&(0x7f0000000340)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
pipe(&(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r6])
splice(r5, 0x0, r4, 0x0, 0xffffffffffff8000, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100))
write$P9_RLERRORu(r4, &(0x7f0000000100)=ANY=[], 0xe)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0xf4b51938c385f7d, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0])
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040))
openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x69)
openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2440, 0x0)

17m54.916220978s ago: executing program 2 (id=88):
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_dev$video4linux(0x0, 0x5, 0xef1b387597921ed)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x112)
pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000540), 0x200080, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r2, 0xffffffffffffffff, 0x0) (fail_nth: 1)

17m54.695762175s ago: executing program 2 (id=92):
syz_ublk_setup_io_uring(0x2ca1, &(0x7f00000003c0)={0x0, 0x14e1, 0x20, 0x2, 0x1b0}, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0))
r0 = syz_ublk_setup_io_uring(0x70f0, &(0x7f0000000340)={0x0, 0xc6c5, 0x20, 0x2, 0x3e0}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300))
io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000e40)={'wlan0\x00'})
openat$panthor(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000001080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x1)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r5, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f000092f000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x25, &(0x7f0000000000)={0x1, r4, 0x3, {0x100000001, 0x8000000000407}}, 0x1)
r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x106f)
socket$nl_route(0x10, 0x3, 0x0)

17m54.511749481s ago: executing program 2 (id=94):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = gettid()
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r3, 0xa)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42)
ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001ac0)={r4, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x400]}})
ioctl$LOOP_CLR_FD(r5, 0x4c01)
r6 = dup(r5)
write$UHID_INPUT(r6, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000)
syz_usb_ep_write(0xffffffffffffffff, 0x8, 0x0, &(0x7f0000000200))

17m53.155354653s ago: executing program 2 (id=96):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040)={'#! ', './file1/../file0', [{0x20, 'cgr\x01\x00 \x00q\xc84\x04\x04'}], 0xa, "e39a0e756a544899b89745f153c7c1c96c278c96dfcaab07"}, 0x39)
writev(r1, &(0x7f0000000280)=[{&(0x7f0000000540)="aa2e07a43ecaa4f030dff111e923219d3a5a00904a9bce005907230e8f75cfc68bd31e61698c6114ffdd856898d814b616a5ac", 0x33}], 0x1)
write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"dc5d3b0169633d3eba3eabbc09167be55101d4af4b22a373236464d2dbfaa84399b77bd438a54364a7ebc5bdaab4f9decb7c044318cd59a0af8279bcab35dd7daf7a0ceb381df2c32eff45b13e2c8f40e1895355bf6f165200cb1ca41a155730ee2e9f83183e9fafe029d0401b0770618254a8b2dc87b630072b1e2de160d1afed51b74c14b71ec1b226a324482d14ad586b1a4ce80e458fe45244c01eddeddf3564af838d6d5324f8a77023d6eb7aa14397a0e1413ea1c3dfdf063a35b709e627f36fe403ee3117365be5017682f53595f28543062c740a94a794312f5cebc315044b8ea000a5d0f27812ab0ce149d11e6f6f7620c5f3e250bf67d13a1ca39dbb7b8b5a31e3d7ba7ebe5849a7a09b61fc9f2cfc54b89e9cd0105bca49483ce55e0187ce2ad692a18219d881057c838587b915337169ee054655f26a04df913a658fccbf4def6aad750ca4796b74d322c67e9d4ee6a530a22dcc35db850b424d6ec9f62495b9f9fd2b000feadd57d26dbd505798c208d91eb0aab0fd97537631b8bf81ce0e2241c4272be4ff69b390e4485d574146b76d1fdbf7fc5334906805534cdae1e47240af7761a18fc8bd0a694be47529da98bc0f98eb7db3fc4a74cbb6e486f4de90fbf2452e72c2e1dca44543ad9ad094b8bc861eef1e814662d0b350339e3a510d459c6f83aabd5fd3dcb38224056d761e7df9b482b9905f1e2135c1929be328ecdb69c007a3efd548502c83106f6df1ab1178fac499eda92ad4373155227ec2df150c919d322ecb3ea37e659285f18a3e2f79b59900ca438df3a1381380a12d3ad7678e0a8d3bdfb40651389b4ac8c66138d442d70eafdc2df8b080028006b124e4ebe0d9883ef100f1934e425a4146056d800975675bb1913142adbc039a9c68c2f146a0e8903447313f5e5549905f397a9b1f21a93b80c4d04a8ea7a29a50fbc5407a9305bba420edf898ea678d6879489c39692c99bb6dacf61f5f97637b94c1031d635b5423d27f7b78fafa060000006eadc21466af5a10281e6a808748969d29efb444c99a4cb2111732a792dbca4376a125a68f7cdac065cc6173dc21caafba48c742d9a7df2f771ff2f5725b22c247d4e0c6106f9f5f6929b69929ab37e9a9b326ce618bb702b883b12026f1300f21f2c7440cac8c5f1210a78aa067211d2827f5dcc7578252c2ccc3f67bab9d1bb6939b21b550788ef550acfed4bf50c0b4fb3ca4d2872ee64f95d611a317d9daaf373a10d868680b2226396c95fa2b0ab4d6fce06c3b42cb97d17a7b5089061537fdeb1a53040869f7befca330358fdba86754fc2e46c2113e1484cb37534af8f0408a7ee313778dab49f08229964298f847ea66c4ec319f64b6a12da585bc59e82e0263c507b397d3efee3b4066f4d25566aa1549f6185f6375f84b65fa8945148b90430c86a5b6fdf58d5c812b98d9dc621fd9a3d9f1a577495356516d1cbcf5e8bb8923b54b247225b9c3892b18a9e137f3620c734052af9dc8f1ea36f0d4592d5ee32e35676a84dc891f97456f2ac3a4ab58a42bcdc221a4ac8bb28d428add2fcbe5b110a8afd5d23b31e827bd16167b2d88cae024afc04a722ac0b4d45c52512e6b6f102aac4be21bc89ce246539048370553665b0a4336a6db99d0d19399be6437bf21419304331b4342b2c1db580f0c9bf681fdb8e9fa3e025454197bbc82ef93ee2f385660818ec5127080675a8013766469afe3b1e36e81bf2f04c3a26eaf4517551e734d21ba3bc90e48aea0891792970c39f3f528397e9b7ae190f1760fe5960dc763ee0a17939c60bfcac0a8914be82c749e4fe85d1ac5fa733413468fb8941085e8c4d6e0b6d1e62e20da58440facd640ddbb6c1f694b3ca48757a34c5a11668368711a1d4f3a81d31ac30d71277d7ae77882b6841cfa6289e6cce84a3ad57eeb328f831888ac7d3cfcd3a472a48d903f20cec8c8ae8d0bea04ebf7413ef7693f8ed876e49bd5f89d7e1078208ff62712e330fc0341b9ccf26845578d44b1e0c66d1bebc14742baedfabb8e9a2c8f42730360c72997efe0ce786ff330c2eb6e0ff20896f813c2a515ce76f87d2a1a1c1588eb369231ddeb4a2f9f9591ecdecc74d20aeb50047beb3ab89a9e4e1b805a20b645c79d0bc5d0247fab8ba46a97a07630b1f1cb69b42b568af746733d2c581f057873d64fe6e659b00b4a26745f5fba1fe7406a86b007936c7cfdac53a4c5b0ea9f6604863c8e3f174eddbb09175f6e13cda9a860cf400ef9ed02b895502ac6e6de6a658249c3c6e8a653517eae2231e56e0f120547923c6549ebc1ed14c623637ce3d96af5c93a32e58e2d9659d8b5b145888b52d9a5b5cb3cdf594eb137bcef2ba068cfd2c6ccf7ab6e5b4ec55e9197bfb91c9b8729f7b50cf0b0326f7ea3e712c77674d48545ca2a86744c3c38f149d69cf811beacf7e5f49c7bfba20f1dcf3d7bc0b9c796016820a46495d244c9606a06fe2e14233eda78d69ae4523ad7b708b0c7ead44d7fd376fed60e3cc2ee25e9600adfbe87ac7c8fb8269aec9459602af0f420becda6120ce7d9626c65ae7f860639e8bf664eb4301ec18add0e436c0356c12ab6b4ca35da2b43c4a8c239fd0b59a2ce94843cdfa1667053165053633b062844dbb0d00070fde74fa3178eb5f1f5fd02e2088d8690379f39ab22c080cdcb29d700bac74fabd8a356fe99afe83a5d99aa5024e9158a299eda6c99b6701e64f1d68e7e2c0c6e88396bb535a02d0948f0a250a6e090041c96d9c9acd6134d44d516fd1010c39e572b86b05bb1326a2a4f23f11181186f9c2a01dc7b58c0129f4b851ca9b1e3dc35db7364e29ef646211796b1651511e041345abce427fa5d6e48b8fb078c8432061a4cc518a8f2a2caf709a5c1473a62112a6650afc64eec12f8f9c08cff1b6fbf7a1209fc8661f62303b7c5d49c1d0b32a9f37e81ed9ab6193816d40995ed49c10b9f5752e04d57535a3d16f06c65d32846c31ec9787ec4a965679eb804e86b45d007f38d8104550770dc6f313bc846e43a14a8c21d0628c744e3e83cb998d1b7acfe996541a8c03852dadf9326444c582b481cae844e4f3fe3d638903b38f24633b63adbad841ac6c4c1169d781a0e271e8a967b1c7e986fcb3a66168e86e3559a44fcfa92452260491da9397659af60453f4cd4be2d15439445ec2b4366a79d3283da912d9d499df1242bd174edc235848caa21d2c997aff0e95c7e5cc0803c90fab84e7be7b37909d0388acb6800baba183ecc8eea8c71c0d65d669e41f99ceae523b7a6b772f3b8ebba1d2127ccc3ddb7ddcb4ec73cbdc26fc87c3848e258a0b5484d3a13e40ec4e4a65dd92f09e9fe1e3e2f8b96c4e363aa3683860dee62dfcf8823ee4a3593a092e0bd9c4cedacf44a272faa164447b01f46a7795642a40c61b0034a37f0e9b792428a0ddcd144fe8263088eaac8016f8f1cd30b55ac90a8f10d785b7570dd9e639a4a068d3fe98a42010e24f69de817f676c2a224300d749571ad43f49d1fbe838f4566bc7b5f104c384ad87189213152b644d9fcbdf98bafeee569d640ce9045779f1d90024c023a7480a358dee276fba139c14b4fdb12885240903d0e61dc161659a68f62c92b899007e0f2b65bf0a069e9e57c9b6ae50a3b30dd1003fb0eead73ae2f6010b3b356b4060579a4f29935e1f00c01d12e5f44e8e3163d81dfef7ca8560604240c7e96e4454c6971614df306c768121abb3f628e3f1d2d026f58d1087334c5bdb74d7c949b0ee66a4531ba4e9b922aee3d0f802ed034734507a5913c52966f1f8bd4577840de0253aabc23299dced2a299859c07af9fb0f9c29b6533b9d84d471390d59ab315f5ddb226f6b8dd7889295f0fb1f7bd1adafe4cc520a1e84bf2a59d5b9795aeafc8d6fd66a8228aba8653b98622617ddfeb5d6795c9bd2f35d4a0c386e862675a50e3314c3fbb17aca151c13c7fc8b1d1b72ed0a958537b5ddc9e74bddc2b9571ec3f2b7775b125338d4852a75a63941564c65bb36dfb6bea4aab1ae7a4f285c2177aa98406eb2cc10934aa92d5a9612d4455c84ad200841d289b5c2d5deab0d8e2459598ef183d3dc46f6bad0b9513710600cfa4d69fcd5763cdcc4f2c2b7cd7d4491fd52f4aec82ce846c0988f6f0123e21e900d39c61085e68c9badc350b44004f6c042d64b0d0cbf91ad0592b198f1eeea1e52200bc8e6d62848d6884b10bdde72466039da488be6b340c23148f666f2fe6e032c07dac43586df182aca9116f4600313fa8375c76337ba86bdc391dae6450218f58f047ced64befc6bb5c2a60024669630a6279fedf2fe45e7e19ce582ad96ae0d023eb9b39f5f1e666e73bb038ae38157275be5eb3e7cbc8b05adf53e817646bdc2cfce98e5d162bf7faaca787db8717ab8b27b9e35609c5fb9fe9def07f010df8b43cf5c96851eadfdeff0b7bc5826e7e15490ae9c3d14166ee81bef007070e7981235a673804ad89943ee6b51ac63364f7870e121e6ff23a0c7d179527cd58dd7a4ca37247c2bd9efc79b720bb1ee2d39862e98cb81e93cf5b48d5d02ee8ac737ab504c867a1c49e678300803c94fbe978dea918a1e71b9791ee1e4d30056e86c26a4670b451a13ece52a89a7057fe2052e11c6666eb916d823ea66bf217c320acba3b714910734b2d27c2fa586bd7f7664b0d1422adabad2ce2afc10270057f11940fac1a51d023ce48bd04ea39b7f99381b239fd0ddeea0dce7863ec1f8f61775013b6414ecf86e686a340a3148f87a9d7d60a1f2da53436d16fc88d6a4e7c3d55e0dd004cbecc15a5558eb705d82aacb1862ddc251dd5d9cbf1d78f97900ce6e8dab0ea678cb823bd1e7bbd1e927878c19f4f322228f9b36287fc13e7c1293ea875ae73815e052d6c2ebc40df8f7b9d1f76e0b10e35aa160944983d8e6b790df0d9b13f3460657336d81f7d83c0350324b930ec9c7557ce12887f76372e126f504b0980fea27f31a780c05187b9b5353dafc6b101543b24332b96e15bc26b19062e52fa9f86d260ee3a3bc92a133e328407bb85357ee5c45cb87228f44888b14941b5911b050e9319fe88033f830a8490917a9c0572ebbc5492b4e1083a2e3d77215a34abef947b5b9a950e780662de18873e55899c92db3ad3d437e8407890afa6b0c04ef861b8bc85fbbe1bb67b3d9ef001409f84b8ec4f01d861cecc143a805b981ab5cf5b605057b63cb2c84ec358e510a69cd8c33a8a62fe4680d0c980145cc709157832bfaef261cb0466c237376ca2944ce9affffd4b1dc7cc9511da0b34bffb9ac216fb8cf7c6572d95627787720d1ba67c6512fcdb16f6329e9668681c404efebad559f81f05971b5efb6b4cca97ad0346753cc0a40a877242d8a808c602b03dc962cee38e646cb18abb079c70d357c30738a70f55cd3c5956a83a1bfcd6649dd765f16bfe968066345df7380bbc0c16b3b5af513d6458c791343952f33a051c5d711c1f35af1b47f3db9bbfb5c7c636b3a2b52805d606479879be0b404a28ade5649a3185e0f85a85fc15cd824671c2befdd0da509597c87d869f0bd7ad163ad93ca28fc0c4025eccaafe385ec3fc06c54ebcd7b07b6c7e0197c5b9ef886159a1585ae45248f865be760db6f5bc8f868fc6aefd04e34ecb51159e4cdcc2214b42b1ca9caec13ba3e1b2e7a3c736977b226213d265c2873195122a9b448088c8b50edd549be41c38ab176807b75e7267f86e400000000000000000000000000000001df00", 0x1000}}, 0x1006)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300003e00", [0x10, 0x4]}})

17m52.899762972s ago: executing program 2 (id=98):
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x5, 0x0)
unshare(0x28000600)
r0 = fsopen(&(0x7f00000001c0)='mqueue\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x8e)
unshare(0x8000280)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00')
ioctl$NS_GET_USERNS(r2, 0xb701, 0x0)
openat(r1, &(0x7f00000000c0)='./file0\x00', 0x40, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
pipe2$9p(&(0x7f00000001c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004500), 0x208850, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_u}]}})
write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff"], 0x15)
r7 = socket$igmp(0x2, 0x3, 0x2)
r8 = socket(0x2, 0x2, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000780)={0x60, 0x887}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r9 = getpid()
sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r11, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0)

17m50.036457802s ago: executing program 32 (id=116):
openat$iommufd(0xffffffffffffff9c, 0x0, 0x20000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_emit_ethernet(0x6e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x38, 0x3a, 0x0, @private1, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "0bae2b", 0x0, 0x2f, 0x0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@fragment={0x87}]}}}}}}}, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r4, &(0x7f0000000340)="0a000300010000", 0x7)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000300)=0x2414, 0x4)
recvmmsg(r4, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x10040, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb0}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r5)
socket$nl_netfilter(0x10, 0x3, 0xc)

17m37.762208537s ago: executing program 33 (id=98):
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x5, 0x0)
unshare(0x28000600)
r0 = fsopen(&(0x7f00000001c0)='mqueue\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x8e)
unshare(0x8000280)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00')
ioctl$NS_GET_USERNS(r2, 0xb701, 0x0)
openat(r1, &(0x7f00000000c0)='./file0\x00', 0x40, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
pipe2$9p(&(0x7f00000001c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004500), 0x208850, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_u}]}})
write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff"], 0x15)
r7 = socket$igmp(0x2, 0x3, 0x2)
r8 = socket(0x2, 0x2, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000780)={0x60, 0x887}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r9 = getpid()
sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r11, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0)

15m46.673445066s ago: executing program 1 (id=588):
r0 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0xfffffffe, 0x2000001, 0x12, 0xffffffffffffffff, 0x20000000)
r1 = syz_io_uring_setup(0x6e06, &(0x7f0000000000)={0x0, 0x4b22, 0x1000, 0x1, 0x3d8}, &(0x7f0000000080), &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = syz_ublk_setup_io_uring(0x27e2, &(0x7f0000000140)={0x0, 0xa0f6, 0x1, 0x3, 0xbc}, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)=<r4=>0x0)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000280)={0xc, 0x5, {<r6=>0xffffffffffffffff}, {0xffffffffffffffff}, 0x200, 0x9})
syz_ublk_add_dev(0xffffffffffffffff, r0, r2, r4, &(0x7f0000000300)={0x2e, 0xd8d804385d77913a, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, r5, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x3, 0xad4, 0x0, 0x0, 0x1000, 0xffffffff, r6, 0x0, 0x8}}}, &(0x7f0000000380)=<r7=>0x0)
r8 = open(&(0x7f00000003c0)='./file0\x00', 0x101c00, 0x1)
setsockopt$inet6_tcp_buf(r8, 0x6, 0x21, &(0x7f0000000400)="294cacc3a71173c6509f0787fbaadf2355298a7f2620ef01eb20c0a83c1276b3463df6064f0c55e1efd28f3afb1703c7f253b9ca205bcd2b3a1aadd29384ee76c3d452c447ba4fb2db88c03041741fb6e4e015173a1c291b82247586c66fdda67dc502146ba7d1054858b60e9c99d78312221872e9a1c2ec42080b5be200e8166147dc306848e565bdffd93a5174f62d572ed946b44bc7ff5bcd035df2de6d0f819fa7489b9153eb7e6881c3e172f03b2b3f86ea164a792526652285bf2f1ee2c60421df02b5fadc37f5075a23d72fe402d97d78b73bfd5cefdce00d4fd2d1a8cab3185a5789261b152350878a", 0xed)
getsockopt$inet6_tcp_buf(r8, 0x6, 0x1a, &(0x7f0000000500)=""/56, &(0x7f0000000540)=0x38)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x58, &(0x7f0000000580)={0x0, <r9=>0x0}}, 0x10)
r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={r9, 0x5}, 0xc)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f00000006c0)={&(0x7f0000000680)=[<r11=>0x0], 0x1})
ioctl$KVM_RUN(r10, 0xae80, 0x0)
r12 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000700), 0x304200, 0x0)
r13 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0)
ioctl$IOMMU_VFIO_IOAS$GET(r12, 0x3b88, &(0x7f0000000780)={0xc, <r14=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r13, 0x3b86, &(0x7f00000007c0)={0x18, r14})
syz_ublk_setup_queues(r12, r7, &(0x7f0000000800)={0x0, 0x908e, 0x100, 0x1, 0x17c, 0x0, r3}, &(0x7f0000000880)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6f4d, 0x20, 0x2, 0x3b7, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7419, 0x10000, 0x0, 0x215, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdce8, 0x20000, 0x3, 0x2bf}, <r15=>0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6cbc, 0x4, 0x1, 0x205}}], 0x4, &(0x7f0000001b00)={0x2e, 0x8, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x400}, 0x0, r5, '\x00', {0x2, 0x8bb, 0x0, &(0x7f0000000b00)=@buf_1k="1502a3f70ca89c09ba3264e6fe59b893eb4bab11b2eca58e5fc095cb6985d7494145d0369d7c9125dadafe0fa758023212db2272f7d901049073644dd1eecef6ebfc5445499245004dd7160ad02e0d75bc167e8e5c7580da8183538e158a9c882eb82a3030de1197c12ed4eeaa779437a2de558de8565115e0e6291a0f909b505036e2ef062c898853e1a9abb9073ec6a1dbbb71dfc3161c4026e1af2b6a38319d6246e21b3da4b6976e99e04fdaaea12abb7b315069545dedce66abd093966402b463c5ee443cacd23e9e1b62ac358ca9f4b313b1c484016f8d9f3adec91ec0621295ffb73386e7f954a695543f83407afa69d024509e2f8986068e7e27d59f5af7d9be0372028c33fc861868b53aaccef62dad9e0b2dee54b09ae206d9d92be47c051a3169a060cff48172c1e149272cf8b7e1f3a9bf8a6be35544945d4a4542abd00165a9a5a41b24b6b33b12ed967cb9ee7abdddc5b1f5562ff2fc6105ee7afcc323dc35c6a3d67569c6424659f8b8a36964b94a5e0995e9bfcba9015808112f70719013ab73053889c0ba2c36e35acd801967031c6ec0efa15619877bbab3dd4db1883881b8fddd00400c2daeda11546dfe8f9079135b67364a71649d8a41bec8998d5fef16afd9f9f46da36b160bf35e9f71958ace82ab4fdca610f4b9bef3b761077e7d206ce829ee78a9662e57f0a52b99de129cb290d68e04bc4acb127450207f91ffc85619006e7a520a658dbeaaee02bc45d1989eda4cfa46fbbfb166c75aa366cb5a7cb11cb6a565aa60ee4363a17923af8e17278d0a410a13d8996a7d562dca63d51635da464eee6501d10c9477bbdf1ca188a7d8afe7096a03991fb1fa2359e680e45a3c2e4cb5f4f03a260e760f81c325646c41d24b198f9a3e89d906e04b7038e494f86624ab336be333a2674a92183ce669865aaf882321e0ae13caabac046a46d6fa718527fd38d1326caa270812023c516b16caa9b6dd933b849ddda0283b423055e1c2059c3f68974cb1efde74d0fcd9f3098509f4bb4ceee264cbfb1eddaf2c5709e4e5d69595796497241d9abd474d985559b0da04919dd3c1683e94a90b4b712669b25d75868ea5a189d3eeec97bcc5d00211b70c19f18499323e69171037ba3df930d2a5b4647a791e27683ae81becfa80c3260d7384421ad5ff0ba8e3bdbde149c44b8ed2023ba1a6ccf9ed5c1cc3586e238ec0f8aaca98eabe6c4f9d0fbf416521b639fac7cd500651473a307f3c430726e1d96d40413fe0afe29219e6de02b49441bb92f66accb0a0d5db1c39d98dc46ef17616b4350711f03733619d1dc26d9d1fa0dbce29d0a7715efac176c8f7d28a167835945548dfedace978a517ae5c23a26e80fca03ee83baabe2402fcfee21a0dad6fd809dcc49b527a09869aae36bbed4e89cd084a68e86adecd50837091609f8a"}}, &(0x7f0000001b80))
mmap$IORING_OFF_CQ_RING(0x0, 0x101, 0x2, 0x8010, r15, 0x8000000)
r16 = add_key$keyring(&(0x7f0000001bc0), &(0x7f0000001c00)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9)
keyctl$unlink(0x9, 0x0, r16)
r17 = io_uring_setup(0x5702, &(0x7f0000001c40)={0x0, 0xe6bc, 0x800, 0x2, 0x173, 0x0, r1})
syz_io_uring_setup(0x4512, &(0x7f0000001cc0)={0x0, 0xc6c3, 0x1, 0x3, 0x252, 0x0, r17}, &(0x7f0000001d40), &(0x7f0000001d80), &(0x7f0000001dc0))
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001e00), 0x220400, 0x0)
r18 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001e40), 0x101000, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r12, 0xc05064a7, &(0x7f0000001fc0)={&(0x7f0000001e80)=[<r19=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001ec0)=[{}], &(0x7f0000001f40)=[0x0], &(0x7f0000001f80)=[0x0, 0x0], 0x1, 0x1, 0x7})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r8, 0xc05064a7, &(0x7f0000002280)={&(0x7f0000002040)=[0x0, 0x0, 0x0, <r20=>0x0, 0x0], &(0x7f0000002080)=[{}, {}, {}, {}, {}], &(0x7f0000002200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x8, 0x5})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r12, 0xc02064b9, &(0x7f0000002400)={&(0x7f0000002380)=[0x0, 0x0, 0x0, 0x0, <r21=>0x0, 0x0], &(0x7f00000023c0)=[0x0], 0x6, r11, 0x8b246eaa558d20f8})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r8, 0xc05064a7, &(0x7f0000002780)={&(0x7f0000002440)=[0x0, 0x0, 0x0], &(0x7f0000002480)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000002700)=[<r22=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x8, 0x3})
ioctl$DRM_IOCTL_MODE_ATOMIC(r18, 0xc03864bc, &(0x7f0000002a40)={0x401, 0x8, &(0x7f0000002300)=[r19, r11, r20, r11, r11, r11, r11, r11], &(0x7f0000002340)=[0x7, 0x86400000, 0x1, 0x7f, 0x7, 0x8000, 0x400, 0x1, 0x0, 0x0], &(0x7f00000029c0)=[r21, r22, 0x0, 0x0, 0x0], &(0x7f0000002a00)=[0x6c], 0x0, 0x100})

15m46.275782108s ago: executing program 1 (id=590):
sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x3f)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0)

15m44.887637372s ago: executing program 1 (id=593):
add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000080)="01000000020000000000006bb55a2a630bf7c045f94cd977", 0x18, 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0)
set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0x50, 0x0, &(0x7f0000000080)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x1, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000cb6fcf20d813200031f7000000010902120001800000000904"], 0x0)

15m42.615334727s ago: executing program 1 (id=603):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000080)={0x10})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000000))
r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0xa042, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb)
mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
chroot(&(0x7f0000000580)='./file0/../file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x9c102, 0x2c)
r3 = open$dir(&(0x7f0000000280)='./file0\x00', 0x6c0003, 0xda)
move_mount(r2, &(0x7f00000001c0)='./file1\x00', r3, &(0x7f00000002c0)='./file0\x00', 0x242)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x80e81, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8008, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x26e1, 0x0)
pidfd_send_signal(r4, 0x0, 0x0, 0x0)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
fchmodat(r5, &(0x7f00000000c0)='./file1\x00', 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0)
syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp6\x00')
openat(r5, &(0x7f0000000300)='./file1\x00', 0x88700, 0x36)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
getsockopt(r6, 0x1, 0x7, 0x0, &(0x7f0000000140))
chroot(&(0x7f0000000080)='./file0/../file0\x00')
pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f0000000300)='./file0/../file0\x00')
ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000040))

15m42.343638868s ago: executing program 1 (id=605):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f00000000c0)={0xa8, 0x0, 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x1000, &(0x7f0000004000/0x1000)=nil})

15m41.731282999s ago: executing program 1 (id=609):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}}, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)

15m41.414221087s ago: executing program 34 (id=609):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}}, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)

13m52.155669752s ago: executing program 3 (id=1022):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f0000000340)={0x2020}, 0x2020)
lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240))
r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0)
r3 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000)
fadvise64(r3, 0x3, 0x7, 0x5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f0000000040)={0x0, 0xfffffffffffffffc, 0x5, 0x0, 0xffffffc, 0x1, 0x0, 0xfffffffffffffffa}, 0x0, 0x0, 0x0, 0x0)
r6 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x54})
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"])

13m48.117893124s ago: executing program 3 (id=1033):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) (async)
syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0)
r1 = syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x3, 0x10000051}, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x5})
io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000140)="ade10832c200b55fc055e54630287077506204825a2fcf6f310bf5dfc272d23b36943e9d94ce2ca5265bee8bf22c6bee64fb78d6501bf6e1c5f528afedfa2e119d352a013109f1e6fabc0b4519ebdda9960290e81f3aa261b1dedec0efbe46d45c30be2fb5e7b332ef8f84a6e968f79436d8b996c37d08b54e7f6caa297e30e70dad78f0e6edbae2604705143e2d7b2c7091a96f777ebb1b1af674371524d915d2b012067731a1ad0864fa43644ec87368c50f0f45b4b9ac3289b8a0e4a026cb420334b24ecce03b60", 0xc9, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @loopback}, 0x1c)
r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
accept4$llc(r5, 0x0, 0x0, 0x80000) (async)
connect$inet6(r0, 0x0, 0x0) (async, rerun: 64)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x4, @empty, 0x1}, 0x1c) (rerun: 64)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00')
fchdir(r6) (async)
removexattr(&(0x7f0000000040)='./mnt\x00', &(0x7f0000000080)=@known='system.posix_acl_access\x00') (async)
ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f00000001c0)=0xd0) (async, rerun: 64)
bpf$MAP_CREATE(0x2000000000000020, &(0x7f00000001c0)=ANY=[], 0x50) (async, rerun: 64)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)

13m47.754638059s ago: executing program 3 (id=1035):
socket$inet(0x2, 0x2, 0x1)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=ANY=[@ANYBLOB="fc000000190001002bbd70000000000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000001000000000000000000000000000000ffffffffffffffff0000000000000000ff000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000700000000004400050064010102000000000000000000000000000000003c00000002000000ac1414aa000000000000000000000000060000000103000000000000000000000000000007af9b689fbe4379cb53f864f81f3c9cc23a9b2f44d0b775de6442dc8ea6b808dfd2fe6bff43dba263c5aff50c38f2a7176800005b50e4524de9c417e1f4b427875b55cc886fffbdb2580367808f3decba6f734a7e08e5d21878344250af09f61e6aa5262096b1c607a3a0eab49e600c27dc6fa9573ffd59751934618ff1a2276123726fee77b0bb3997f40ee7c5dd64fb5c95a9bfdaf933790e94127b3cdcef322915ebea88fb6e8b40d2aa8affc572e469"], 0xfc}}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r1 = getpgrp(0x0)
r2 = syz_pidfd_open(r1, 0x0)
ioctl$FS_IOC_GETVERSION(r2, 0x80087601, 0x0)
getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, &(0x7f00000005c0))
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x140, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000100)={0x400, 0x80, 0x0, 0x0, 0x0, 0x17c, 0xf, 0x0, {}, {0x100}, {}, {0x2, 0xe97}, 0x0, 0x40, 0x0, 0x3, 0x0, 0xfffffffd, 0x1, 0x2, 0x4, 0x90, 0x0, 0xfffffffd, 0x24, 0x0, 0x1, 0xb})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000002d0007012bbd707bd08af4c60a492400080001"], 0x20}, 0x1, 0x0, 0x0, 0x10000004}, 0x4008030)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCXONC(r6, 0x540a, 0x0)
ioctl$TCXONC(r6, 0x540a, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x560, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x490, 0x2e8, 0x2e8, 0x490, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00', {0xff}}, 0x0, 0x2c0, 0x2f0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x3, 0x2}}, @common=@inet=@policy={{0x158}, {[{@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0x0, 0xffffffff, 0xff000000, 0xffffff00], @ipv4=@rand_addr=0x64010102, [0x0, 0xffffffff, 0xffffffff, 0xff000000], 0x4d4, 0x3503, 0x3c, 0x0, 0x1, 0x4}, {@ipv4=@dev={0xac, 0x14, 0x14, 0x38}, [0x0, 0xffffff00, 0xffffff00, 0xff000000], @ipv6=@loopback, [0xffffff00, 0xff, 0xff000000, 0xff000000], 0x4d5, 0x0, 0x0, 0x0, 0x2, 0x2}, {@ipv6=@private1, [0x0, 0xff, 0xff, 0xff], @ipv6=@mcast2, [0xff, 0x0, 0xffffff00, 0xffffff00], 0x4d4, 0x3504, 0x2, 0x0, 0x14, 0x9}, {@ipv6=@local, [0xff, 0xffffffff, 0xffffffff], @ipv4=@empty, [0xffffff00, 0xff], 0x4d3, 0x3505, 0x62, 0x0, 0x7, 0x8}], 0xd9884bcd73343275, 0x1}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@mcast1, @loopback, [0xff, 0xffffff00, 0xffffff00, 0xffffff00], [0x0, 0x0, 0xff000000, 0xff], 'sit0\x00', 'caif0\x00', {}, {}, 0x67, 0x3, 0x0, 0x20}, 0x0, 0x138, 0x1a0, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'bond0\x00', 'veth1_virt_wifi\x00', 0x0, 0x1}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="240000002e000100000000000000000009000000", @ANYRES32=0x0, @ANYBLOB="09000080976b640868000000"], 0x24}], 0x1}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x44004)
r9 = socket$inet6(0xa, 0x3, 0x9)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r10, &(0x7f0000004f80)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000000)="7f", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)
listen(r10, 0xf7f)
accept(r10, 0xfffffffffffffffd, 0x0)
r11 = socket$l2tp6(0xa, 0x2, 0x73)
r12 = dup3(r11, r9, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2, 0x9}, 0x20)
sendmmsg$inet6(r12, &(0x7f0000000000)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0xfff, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x18}}], 0x1, 0x4000810)

13m47.493295243s ago: executing program 3 (id=1036):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mkdir(&(0x7f0000000180)='./file1\x00', 0x1)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='./file1\x00', 0x0, 0x4000, r1}, 0x18)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000280)=r3, 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r4, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e00)={0x14, r5, 0x4, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x4008000)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4)
bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e24, 0x5, @remote, 0xc}, 0x1c)
socket$inet6_icmp(0xa, 0x2, 0x3a)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
chroot(&(0x7f0000000580)='./file0/../file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00')
pread64(0xffffffffffffffff, 0x0, 0x0, 0x4)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdeeH\xe5+\xf0', 0xffffffffffffffff)
keyctl$clear(0x3, 0xfffffffffffffffd)

13m46.459124473s ago: executing program 3 (id=1038):
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
r1 = getuid()
getgroups(0x2, &(0x7f0000000040)=[<r2=>0xee00, <r3=>0xee01])
write$FUSE_CREATE_OPEN(r0, &(0x7f0000000080)={0xa0, 0x0, 0x0, {{0x3, 0x3, 0x8, 0x1ff, 0x5, 0x7, {0x4, 0x6, 0x0, 0x5, 0x37f4c1d, 0xf9, 0xfffffff9, 0x3, 0x84, 0xa000, 0x4, r1, r2, 0x7f, 0x50}}}}, 0xa0)
r4 = getgid()
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setgroups(0x9, &(0x7f0000000200)=[r3, r3, r2, r3, r3, r2, r3, r4, r5])
getgroups(0x9, &(0x7f0000000240)=[<r6=>r5, r5, r3, <r7=>r5, r3, 0xffffffffffffffff, <r8=>r4, <r9=>r3, <r10=>r3])
setgroups(0x3, &(0x7f0000000280)=[r3, r7, r4])
unshare(0x40000000)
setgroups(0x5, &(0x7f00000002c0)=[r8, r7, r8, r3, r7])
statx(r0, &(0x7f0000000300)='./file0\x00', 0x100, 0x20, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0})
getgroups(0x9, &(0x7f0000000440)=[r9, r4, r8, r10, r4, r11, r2, r6, r3])
r12 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000480), 0x480, 0x0)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000700)={<r13=>0x0, @multicast1, @dev}, &(0x7f0000000740)=0xc)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={r0, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0], <r14=>0x0, 0xe, &(0x7f00000008c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000900), &(0x7f0000000940), 0x8, 0xcd, 0x8, 0x8, &(0x7f0000000980)}}, 0x10)
r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x2e, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x79, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@generic={0xce, 0x8, 0x7, 0x9, 0x400}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x53}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r12}}, @tail_call, @generic={0x5, 0x2, 0xc, 0x8}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000640)='syzkaller\x00', 0x8, 0x5b, &(0x7f0000000680)=""/91, 0x41100, 0x2, '\x00', r13, @fallback=0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x1}, 0x8, 0x10, &(0x7f00000007c0)={0x2, 0x7, 0xe95, 0x7}, 0x10, r14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
lchown(&(0x7f0000000bc0)='./file0\x00', r1, 0xffffffffffffffff)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc)
ioctl$TCSETSF2(r12, 0x402c542d, &(0x7f0000000c80)={0x2, 0x2, 0x2, 0x86, 0x1, "85db0e7efc66d7c9d4c6bb9e6ad25d78987c44", 0x9, 0x7})
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r12, 0xf501, 0x0)
ioctl$COMEDI_CMDTEST(r12, 0x8050640a, &(0x7f0000000dc0)={0x9, 0x0, 0x4, 0x6, 0x100, 0x7, 0x1, 0x57f, 0x10, 0xd, 0x1, 0x0, &(0x7f0000000cc0)=[0xfffffffe, 0x0], 0x2, &(0x7f0000000d00)="92497e9a82bda04318edf56a3a68029575a74574f8b8879f02e1ba74f037692a1463b5418586938a588a27ce9a854ebc41c77bcf933bee7b60922a570207a485ea3b17a7f13b1bd143715b25c0b0078ebcabfd35627d5356a9beebcbee6c4ff562b0d7da1b423130db79da10006ca1642df9b573a841dc98ca49148a8a3de5383b4ec891ecb6820676e677cb840422ea1b2777fc98b691902aae8d7cc5bd2fff34323e6a5c18", 0xa6})
ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000e40)=[0x8, 0xffffffff])
openat$nullb(0xffffffffffffff9c, &(0x7f0000000e80), 0x40, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000ec0)={'dummy0\x00'})
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r15, &(0x7f0000000f00)={0x40000002})
ioctl$SNDCTL_TMR_METRONOME(r0, 0x40045407)
stat(&(0x7f0000000f40)='./file0\x00', &(0x7f0000000f80))
ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000001000))

13m46.037036541s ago: executing program 3 (id=1042):
r0 = syz_ublk_setup_io_uring(0x2ead, &(0x7f0000000140)={0x0, 0xe9bc, 0x800, 0x2, 0x318}, &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000002c0))
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="20104300000055bcd62f2d2b4d13f4fcd263c9a18e17b84fc467e6f51a91d0647b3d65797bacc6f6111b73ce5df49620243fa47845768e4a2ab87f9a2726f5c9fba93a2d55b5de60143724acc9407b972cad6f5f8a21323f65fcad357b7e5525b2"], 0x0, 0x0, 0x0, 0x0})
r1 = socket(0x2b, 0x4, 0x4000000)
pipe(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
syz_usb_connect$uac3(0x5, 0xa0, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f00000001c0)={'tunl0\x00', {0x2, 0x4e22, @empty}})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44004)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000640))
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
capget(&(0x7f0000000100)={0x20080522, r4}, &(0x7f0000000180)={0x9, 0xab22, 0xffffff00, 0x1000, 0x87a, 0x7})
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='nfsd\x00', 0x10, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x800, &(0x7f0000000800)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@posixacl}, {@cache_fscache}]}})
ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x7, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
io_uring_register$IORING_REGISTER_ZCRX_CTRL(r0, 0x24, &(0x7f0000000300)={0x80, 0x1, '\x00', @zc_export}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x8202, 0x0)

13m45.325242577s ago: executing program 35 (id=1042):
r0 = syz_ublk_setup_io_uring(0x2ead, &(0x7f0000000140)={0x0, 0xe9bc, 0x800, 0x2, 0x318}, &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000002c0))
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="20104300000055bcd62f2d2b4d13f4fcd263c9a18e17b84fc467e6f51a91d0647b3d65797bacc6f6111b73ce5df49620243fa47845768e4a2ab87f9a2726f5c9fba93a2d55b5de60143724acc9407b972cad6f5f8a21323f65fcad357b7e5525b2"], 0x0, 0x0, 0x0, 0x0})
r1 = socket(0x2b, 0x4, 0x4000000)
pipe(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
syz_usb_connect$uac3(0x5, 0xa0, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f00000001c0)={'tunl0\x00', {0x2, 0x4e22, @empty}})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44004)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000640))
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
capget(&(0x7f0000000100)={0x20080522, r4}, &(0x7f0000000180)={0x9, 0xab22, 0xffffff00, 0x1000, 0x87a, 0x7})
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='nfsd\x00', 0x10, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x800, &(0x7f0000000800)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@posixacl}, {@cache_fscache}]}})
ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x7, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
io_uring_register$IORING_REGISTER_ZCRX_CTRL(r0, 0x24, &(0x7f0000000300)={0x80, 0x1, '\x00', @zc_export}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x8202, 0x0)

9m41.276631883s ago: executing program 7 (id=1977):
syz_open_dev$sndctrl(&(0x7f0000000180), 0x20, 0x800000)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50)
r0 = gettid()
waitid(0x2, r0, 0xfffffffffffffffd, 0x8, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r2, 0xffffffffffffffff, 0x60000000}, 0xc)

9m41.170870297s ago: executing program 7 (id=1978):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0200000000000010000100000000002000"/36], 0x24, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r1=>0x0})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r2)
sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000ffdbdf250100000006000a00030000000500070000000000050011000f000000050011006500000006000a00"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40050)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="2c0000001300050026bd7000ffdbdf2507000000", @ANYRES32=r1, @ANYBLOB="00000000000000000c001a800800048004000880"], 0x2c}, 0x1, 0x0, 0x0, 0x800c000}, 0x20000000)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
r4 = getpgid(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48)
io_uring_enter(0xffffffffffffffff, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r7}, 0x38)
bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x3ff, r7, 0x0, 0x100000000000000}, 0x38)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r8, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004055}, 0x48000)
r9 = socket$inet_sctp(0x2, 0x5, 0x84)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r11=>0x0}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r9, 0x84, 0x71, &(0x7f0000000000)={r11, 0x9}, 0x8)
lchown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0)

9m40.232377755s ago: executing program 7 (id=1982):
read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x2020) (async)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r1, &(0x7f0000002040)={0xa, 0x4e23, 0x8, @local, 0x81}, 0x1c) (async)
r2 = open(&(0x7f0000002080)='./file0\x00', 0x4a0000, 0x80)
ioctl$SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000020c0)={'veth1_to_bridge\x00', 0x200}) (async)
bind$vsock_stream(r2, &(0x7f0000002100)={0x28, 0x0, 0x2711, @local}, 0x10) (async)
ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000002140))
r3 = syz_open_dev$mtd(&(0x7f0000002180), 0x1, 0x10000)
ioctl$MEMGETREGIONINFO(r3, 0xc0104d08, &(0x7f00000021c0)={0x80000000, 0x0, 0x1, 0x1ff}) (async)
accept$packet(r2, 0x0, &(0x7f0000002200)) (async)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002540)={0x11, 0x17, &(0x7f0000002240)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4939}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x101}}, @jmp={0x5, 0x0, 0xf, 0x2189ba26c22c503e, 0x0, 0xfffffffffffffff0, 0xffffffffffffffe7}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], &(0x7f0000002300)='GPL\x00', 0x4d, 0xd2, &(0x7f0000002340)=""/210, 0x41100, 0x8, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000002440)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000002480)={0x1, 0x4, 0xfffffff8, 0x8001}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000024c0)=[r2], &(0x7f0000002500)=[{0x3, 0x4, 0x6, 0xd}, {0x2, 0x1, 0x6, 0x3}, {0x2, 0x1, 0xc, 0x7}, {0x0, 0x4, 0x3, 0xc}], 0x10, 0x2}, 0x94)
ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000002600)=r4) (async)
ioctl$MEMGETOOBSEL(r2, 0x80c84d0a, &(0x7f0000002640)) (async)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002740), 0x400080, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x0, r0, 0x1, &(0x7f0000002780))
ioctl$KDDELIO(r2, 0x4b35, 0x8) (async)
ioctl$KVM_CAP_HYPERV_SYNIC(r5, 0x4068aea3, &(0x7f00000027c0))
r6 = syz_genetlink_get_family_id$fou(&(0x7f0000002880), r2)
sendmsg$FOU_CMD_DEL(r5, &(0x7f0000002940)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002900)={&(0x7f00000028c0)={0x24, r6, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000c0) (async)
bind$bt_sco(r5, &(0x7f0000002980)={0x1f, @none}, 0x8)
ioctl$KVM_GET_PIT2(r2, 0x8070ae9f, &(0x7f00000029c0)) (async)
ioctl$MEMERASE64(r2, 0x40104d14, &(0x7f0000002a40)={0x9, 0x9})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000002bc0)={{0x1, 0x1, 0x18, <r7=>r3, {0x2}}, './file0\x00'})
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002b80)={@map=r7, 0x35, 0x0, 0x5, &(0x7f0000002a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000002ac0)=[0x0, 0x0], &(0x7f0000002b00)=[0x0, 0x0, 0x0], &(0x7f0000002b40)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async)
close(r3) (async)
mount$afs(&(0x7f0000002c00), &(0x7f0000002c40)='./file0\x00', &(0x7f0000002c80), 0x0, &(0x7f0000002cc0)={[{}, {@flock_strict}, {@flock_local}, {}], [{@smackfsroot={'smackfsroot', 0x3d, '{-'}}]}) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002d00)={'hsr0\x00', <r8=>0x0}) (async)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002d40), 0x880, 0x0)
r9 = signalfd4(r3, &(0x7f0000002d80), 0x8, 0x80800)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002f80)={0x11, 0xc, &(0x7f0000002dc0)=@raw=[@jmp={0x5, 0x1, 0x7, 0x3, 0xa, 0xffffffffffffffe4, 0x8}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x5, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x0, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x1, 0x6, 0x9, 0x4, 0x80, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], &(0x7f0000002e40)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002e80)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000002ec0)={0x5, 0xd, 0x100, 0x800}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000002f00)=[r5], &(0x7f0000002f40)=[{0x0, 0x2, 0x6, 0xc}, {0x5, 0x1, 0x2, 0x4}, {0x4, 0x1, 0x4, 0x4}, {0x2, 0x4, 0x0, 0x7}], 0x10, 0x1ff}, 0x94)

9m40.060513247s ago: executing program 7 (id=1983):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000740)="ed", 0x1}], 0x1}}], 0x1, 0x20000014)
recvmmsg(r0, &(0x7f0000001c80)=[{{0x0, 0x0, &(0x7f0000000380)}, 0x255f}], 0x1, 0x40000000, 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x15)
prlimit64(0x0, 0xc, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8)
pwritev2(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000440)="726d3bf62b06157d4463831c317d024316803dd2d3f483e0559010fcfda1f643add9e79f8aaff98ce9d2561addb656f5f48792cd98f35c376c981b99d44ce7318e13ef6fcd650a6843e9c53f52905dcf8eeabb7a89eedb1815d2a08075af43ee183008d7945120299e42481e60f4a8bc75625a7ac6316351d6c4cae55a1c8b68e7b9b0f857bce78160717f91d963d21c5a3c6a1ac73309226fc6c12c", 0x9c}], 0x1, 0x4, 0x80000001, 0x34)
mkdir(&(0x7f00000001c0)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x895480a9c77df824)
chdir(&(0x7f00000003c0)='./bus\x00')
mkdirat(r4, &(0x7f0000000340)='./file0\x00', 0xf3)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0xec280, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdir(0x0, 0x10)
syz_open_dev$evdev(0x0, 0x2, 0x842a01)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/igmp\x00')
setuid(0x0)

9m37.614821584s ago: executing program 7 (id=1996):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000003, 0xfa11, 0xffffffff}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000000c0)="b4", 0x1}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="1400000000000000", @ANYBLOB="006b6a8600000098cbb6a9bc548c07218b1690da8a940f6be00a3e1e161356"], 0x18}, 0xc020)
recvmmsg(r3, &(0x7f0000001140), 0x700, 0x2, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r4, 0x84, 0x11, &(0x7f0000000040), 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000140), &(0x7f0000000100)=0x14)
r5 = syz_usb_connect$cdc_ncm(0x0, 0x76, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r6)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r7)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_MCAST_RATE(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001a80)=ANY=[@ANYRES32=r10, @ANYRESDEC=r6, @ANYBLOB="010000000000fedb2fe35a1d000008000300", @ANYBLOB="3d00ab001b4123b6d9596fe273010185cd8f280119d14c02c3fa1159ecace76e4850cdffff59128469b778cf8ee0e6ceebf95d00", @ANYBLOB="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"], 0x1c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r1], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000040)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000c0a0101000000000000001b0a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010004000000140000001100010000000000000000000100000a"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c0001800600010058"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40)
syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0)
syz_emit_ethernet(0x36, 0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x4)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)

9m37.262604071s ago: executing program 7 (id=1998):
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000000766055800000000000000000a000002"], 0x14}, 0x1, 0x0, 0x0, 0x200008d4}, 0x48810)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$IOMMU_DESTROY$ioas(0xffffffffffffffff, 0x3b80, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat(0xffffffffffffffff, 0x0, 0x0, 0x129)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xc6103, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01022abd000000000300", @ANYRES32=r4, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x80)
r5 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2)
ftruncate(r5, 0x800799c)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000183b9220b113420016519a02030109021b00010000000009040000012e459e000905c435a3"], 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x200603, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r5, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
r7 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0xc000)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)

9m36.941301637s ago: executing program 36 (id=1998):
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000000766055800000000000000000a000002"], 0x14}, 0x1, 0x0, 0x0, 0x200008d4}, 0x48810)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$IOMMU_DESTROY$ioas(0xffffffffffffffff, 0x3b80, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat(0xffffffffffffffff, 0x0, 0x0, 0x129)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xc6103, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01022abd000000000300", @ANYRES32=r4, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x80)
r5 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2)
ftruncate(r5, 0x800799c)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000183b9220b113420016519a02030109021b00010000000009040000012e459e000905c435a3"], 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x200603, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r5, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
r7 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0xc000)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)

2m32.34832879s ago: executing program 8 (id=3359):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040)={'#! ', './file1/../file0', [{0x20, 'cgr\x01\x00 \x00q\xc84\x04\x04'}], 0xa, "e39a0e756a544899b89745f153c7c1c96c278c96dfcaab07"}, 0x39)
writev(r1, &(0x7f0000000280)=[{&(0x7f0000000540)="aa2e07a43ecaa4f030dff111e923219d3a5a00904a9bce005907230e8f75cfc68bd31e61698c6114ffdd856898d814b616a5ac", 0x33}], 0x1)
write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd00000003000000000000001200", [0x10, 0x4]}})

2m31.943901115s ago: executing program 8 (id=3362):
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x3, 0x2, 0xfec00000, 0x1000, &(0x7f0000f40000/0x1000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x2, 0x2, 0x0, 0x2000, &(0x7f0000f8b000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000280)={0x5, 0x0, 0x7000, 0x2000, &(0x7f0000d6c000/0x2000)=nil, 0x7})
fsopen(&(0x7f00000001c0)='devpts\x00', 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0x3000, 0x2000, &(0x7f0000c7d000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r4, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x10001, 0x0, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil})
mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1700000069000b0028bd70000000000000000000000000000800070000fffa6c0281000000000001000100000008000100010000000800422200000000080001000000000008000100010000000800010002000000"], 0x50}}, 0x4000000)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/rcu_normal', 0x80, 0x100)
getsockopt$llc_int(r6, 0x10c, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x4)

2m30.506950847s ago: executing program 8 (id=3366):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x24e22}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket(0x2, 0x80805, 0x0)
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00'})
sendmsg$nl_route_sched(r0, 0x0, 0x4000)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x3, 0x5)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0x1d0, 0x43, 0xa0, 0x1d0, 0x98, 0x2f8, 0x178, 0x178, 0x2f8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'geneve1\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x128, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c206000000116d00"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f0)
ioprio_get$uid(0x3, 0x0)
r1 = syz_io_uring_setup(0x5c2, &(0x7f00000003c0)={0x0, 0x2, 0x10, 0x4, 0x219}, &(0x7f0000000180), &(0x7f0000000580), &(0x7f0000000000))
io_uring_enter(r1, 0x6e2, 0x3900, 0x3, 0x0, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r2, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
listen(r2, 0xda90)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r3 = syz_usb_connect$uac2(0x3, 0xa8, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x1d, 0x7}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x1, 0xff, 0x23}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x0, 0x4, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0xf, 0xe, 0x7, 0x1}, @as_header={0x10, 0x24, 0x1, 0x2, 0x1, 0x0, 0x4, 0x8, 0xb8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r3, &(0x7f0000000700)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
syz_usb_control_io$uac2(r3, 0x0, 0x0)
syz_usb_control_io$sierra_net(r3, 0x0, &(0x7f0000000e80)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0})
syz_usb_control_io(r3, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="2013100a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
accept4(r2, 0x0, 0x0, 0x0)
socket(0x2, 0x80805, 0x0)

2m26.315811589s ago: executing program 8 (id=3377):
pipe2(&(0x7f0000000280)={<r0=>0xffffffffffffffff}, 0x4000)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1e00000004000000fbffffff00000000c0000400", @ANYRES32=0x1, @ANYBLOB="0400000000000000000000000000000000400000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0200000003000000010000000800"/28], 0x50) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000ffffff"], 0x50)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000340)={0x1, @write_link_policy={{0x80d, 0x4}, {0xc9}}}, 0x8) (async)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077", 0x4d}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71da", 0x3d}, {&(0x7f0000000800)}], 0x4}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {0x0}, {&(0x7f0000000580)}], 0x3}}], 0x2, 0x20000044)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) (async)
r3 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wlan0\x00'})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001640)=ANY=[@ANYRESHEX=r1, @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYBLOB="2a00ee4b80e2f4f8b5a75bfbb988c1393f8e84081561be1ea101a5415a66f7c0396db94b58e704b65a01c7814eb6c4a1eeded27eb7ff8f93e1cec5c59a85fd85484ff70f134806ade30c4ce9225dd28a720c9c6fd22481ef4aaf258bdd6d0a3afb235c8187b114ee361095cf06144b397a1d2bc47901995d0d6002df890bf30a0e01b2443771448c42be97073ab4b6269e76dca38788a3a4ea25b227b182a477252cf0f6ace74618f0386f317b44b1d6c56dcc8192a03695f5e4dafe70f4f30bf4d8d112926c0ec38dd600f45ae63e7aafe7bff3368730e80ae4dab93e54575545b42d66f6ecdf7c408730bb84be16ecc3a80933f36e60750d9b93e897f2e52c56fd6beedfc7e10fd6d97ab32cd84039a534b955291764e4d3775991b839ae381716ab5febfb373fe19ba58dce23472076ba344b64d0d2fbccabf82182974ef8409659baf146b725b4223ba24437da7dfa88ac050e794f6c4d5263cb2bf23ccb865ac2bbab530f581917c6704460c284be2d519ed54e478635fe11f8c498288be0ffa2a816314585a74526c3d96da60f049112c10a276f94176bf3ae630496bdce506d9f7ce0ed20b9426028d5694c4b89c2e0d426bc497ca9743dc97174683741df8c9646a38fc2d94efab3b9fd5c72229da27480d20248ca79fa34c355576eaca112c9e9751c4ab417271498316f009476b67d3ab13d3363766c051764ef019501cb0852d635c8d807d94c247605d594c8b7394352110070c764452c58d20238cf4c16c79d952e1e69b6b0f53137743aef36cfa9e53168ade9e76b2d28625861a5db8952aa0967367768e2ce343a6e86b65fe51d1153b2d06c95770f07ad047ee8d42ce803710413a84e1d53ed2c7b590a63d71d6971b15abf5820d73c21fcf17779a985d904a287fd7f5fae8939176ab37e59a7a5c527536d0ac049d6f2ef5efba0260a11d452a16355150c358e08c96bbf40c3fed037d0decd3e96e0a3476fe54367863aab7f8c3f4444debcaee2556da40698e0009c22dc2d84bfad086a73d4e2d9e5c45f4407618035e97a7cf6e4894599518c1a0770673fd8973da9952c856c626581c92e6cd3a8e84ac93bb56f61825ea8886b2bacb3064a411781faad65db4aa551169ed771bcbf2c6ad382eaf7c2839df7859f12f823f4054d867d2967552cbc896172efdea46c2a441526016bd8cef8b2201703c95f00d4b360906cf1a53eadff20298c4a1fc2504f415339373dfd444ce7457c6d3a06560225439104694ed354a9524cff4d27431e5c97b625c3dd7a58d5d14d801e02f7fc8179aec36d6fa05eca79498e0f4ff72454ed770b01af9f597d21a5042e8008480014638c276b93d357e94f964f129e58646274c18318b6cec0e07d9e3708dc06478fe1f816ba38de65a8e248a007f266bd0cfb8696ec01545976b0fb10e3397f374a465228c1793fadd449d0901442e38932570d5a921faffd73a2aa9c195db2017d94fcf8c901384b447aa767bf489d89a3984fd95b1ca899e017d1a67f1583d88023fcc1acf9b9423ab73a0dbb25744d1bf3dfe490ddfabdc5e95ce4bcd11945ab27cd742aa42e7bf81fdd158376da89f459232be891beff91f1f0904c1b23527a22864d059ad97b06ae321d30378d775f33c8d4133304bc573c346b7b50a677be3c91af158883c00b48b662ed36316b07300da98a80f4119be5df061e57a529d2d54b38e9b2115d90caf322826d34c35a1fc66345d40585b1a9a8b7264fbf5456d9ee6b09f2ba7048defdfde592151eb1426051bd60fd05b916ed09e9dee4551c089caca0fdd5a7fad905101c18c78801b60692ecc049777db2170f26f5e62bf9189a74e1cdca2f8ab2e7ee7ad60b9456eb380291a902d56d21a72b266d5108fd787a29be207beda14297078ff99179bc0a6896133914c1b2a1f613a4f9ce0a79a15f424a11a7282a9891442e860ccfb50caa2b1db30f5927ab2528579af7d43659356dd139a75cd702adb0bcb6eea53c72e50aeafd1f798effd127237dbe0aa1c688f4909c9577ac35e1a195bf66cd7829155fa7c8a89bc3d4a7b637a096c2d7f9d54c5689a11d9de505a1576e99f9620913497c369a56d9fe05f978859278555e891537997e58d1b1f6cffb45ac570a7c9dcbe662c88cbec9fd00f5e2138fcc75afcff21c2b764f48253c010d32d1cd27094c4cfa7af74cff0885186419dceb8ddd7126c01833c613022aad7e5a48a0ba9bb32aaf8eabac28e9f0ca811d9a764e01f33a6f0fabb7b6c1ae1d8d2a5e04830e662a1379f29d9c527a400f30dcc00f332a1052e6e80b83320b558882016186fcf261f90f1acbd434aba1e0878a63b105732d55fe54d3cf12e570f5249b6c8633918a79d38874a8a92cc5408f6ec939339204a43f5930c80c8d4c98cadafe80ab19d28b5a5a6008199e72af0511f5459e4004d643a1baa1ea2b2d112a8b1cfb25bddd1489320e8e7551bd7ac1131be95718e355b1a0050b1b353106fdf1ab1d329c483b56d594061c711fa2bc6a939b2bb3546922d4d5742bea36274d1bbfda1e3950e62ec65b2f4e4494a63604a7195ff3ff5e570bc140218bf34d2873fbb2f122462b45c9dc6fca28796dd3b0228e26a5a5e520d689aa26cf82e09fcfdcd6a0bf533775c9c1a5bfab8d02e34666a130af64ffba74cba3ad6e9308973292c6a11feb59c9639b229258003cb37b19fcfbddbf2b2899ccb3c2af81ad75de759cb3971d2f2b6c757bfb3952c2fe2113e6b0f2b1066775ca0bb0382657ba4c7832d046cb1966f1fb27dcb1861ba2447b5dc2f52a79b484f2f24d47247f7eba1e9f71bbf3132f6b4ddfc942c624e561e55169f6f785716035bc3e3208ab1ffe8601f4421603cf3f9fd7323fb2ef119eb83412c339ddb2030b76a7b231856f3494a9fbd37bfc04e6a87c2b628bcde92415952675c3f103cbac60d1a6b32d9f990ebb62db2999b53109c739991185c57dd285c728bcc484167bd33fc66e26c5dd2cbf5a0c086d72dea086aa1bb2966f6c458ca693dc7eaec511e6e2c0b8bfd4b06d70ee7ca9dff70774d329c6d2ade583bf7037c8df038d90779e4d40d75a845436b5af268d4dd7d5c2b6a38c309f48eb2c768fee072ddae322372a19c67c2002a4224dda052bf805111c86f04857337b5bab5de099b10271752e323239091c03cb774f24ef3a948058269dee27ab09e26b23139e11f168033b5fc43a37eabf52e718e3f36fcb0ee509dee90473971ae937b993f8e6555dff08ab647fd77dca0f1f634de44e9338130c241419623797657a32e9ffa9bf9ebf8893a85873b55806203a53048a4d24125922b28e207441bb8365d44631da39ba3c25fc6ba00e77709b04211064139a181c98455e682a9059795872ae762b414752cb71e14200b22f4663c6f6790a440af5602b7667efc47cc9cd63eddb01ebb947955f1c13fa20e135b1927df424cd6a0041c6c7aeab0ba7e25c5b550cad246180e886256cd06f25c2cd36e2267df69c88e2e2b71baac286a4d5d1b1dac0a0c4a8be8a19f9df89c641fdcb483a63159d940787336eed8436ffc7550f5017d361331ad51f9b9d897f7e1fba30ce3d5edd7e369916fc350bd339970a94fad741d8f1b9170f5c2ee4931b07005e114d475927e45deb9b79c1456de259785e02182a05596c3898e1f1b504ebeedc13d92beb9e51d66e7c59163d5789314b8afbad5acf9854ba3a4072c7bc77a7ea4a001ad9916f64af5bb1ad2fa5adc75bed1717a58ec34a76e4d85f2502752beeaa7b11eac47d2efcae2c24c7c46dd989e87dd5f06bc606dea40789d2372ca88c879032f480812f70a1d878f366fcd94f42783b483e3f0834ed738837663c6863c37e8cc4e72b0438bcdc3cb4b168601260d44207826aa39b76f05a30f692527b91d1c71498d1845dc6de62493679c6ab4bc7f48c3be1485f8ef242baebafede25d27ed9617d6a706bfe488b6f60d0ec15da9208015a84f60931d38b0f586720fc0f3dc52f477aa606790a9403e78e89a1013bebc875a1696f4b87d8dbdbc0748b2f3827050a34894e4a2c45dd8178affce7cdc664b638c0d593cacfe563a7ca11698e1b739b89dc8525429aa814f6f8e40a8002385f6ef3b2d25c1cd93f29216ef262a23caa3ddadae7c3dd957eb75d5ad483a9a7e6cd6a2b207324402177163d60d902f121d552753e5c20c380b73da67c14b6f1a7deccf7e194913f7880d3e63dd9158e0839e705f7ecc028fd9eadf8e05c6df90590c47386e0c8318775fda1ca5de3767aee10a8b3b6c24fd597f2d7c7c8a0eaaf7ed9857e7bf98fac9f6bad01932f4ce02a9f60a999a24174604fa9081886d7f9efc14d62e094b842cf0343e5345a962f7606b0a55a3dc86c7384dd061b885117f91a33ff056ea3e0ac022fd25b153c40e8e858479ee7d5413cc57608654b58a26c3e4316d21427d9348583c2c5a5a9de47a89436510e59660cf77785870d27051c8f9f636e745b281ae81dc87012708e2e28bb5ee6b2eb0ec6af1180750307d36db768f9f3141c446c889aed934d9ec54db53fcc8458ace3362fb5e84675fc767d78f68c5ac7f83e0f5beda829adddf7f2c48812c48eec0bfe3fb557a82201c2bfa8348bea3ce77bbc7955aa0f08a5dbe55bb745d36d0f0f1014858f29649fe6e8d8512140ea451a6e606beaf710b8fd9678f71d0da2695d31939330b617033d637966992d1006180a9c7781d46709884d7b8f013e2bab4e43e5109815bc8130693d75c65869a6fd842c91f9775505696dd5882a23a8c6404b50ce9f1b2ed350c6d1c78c633da2c41f6297e4d1c6b8b322c82c8ba2418508b55a6025dad6f03ed450da67c15056c0870906b54aa654a1ab12f89a07626bd9a1cbf959a4489821e78d743327c28ebb7341de49b77a1d3c6cac01853fd0a594e4697058a3f7f3c7862348fa8c79bc54bd47994403ba117643029e392702ecff36f3566daa51fd3cebb5a6d42f9dbe153d5d221809e4dc3f9d9a8ff8597fbbaed9175de943a6ef7336008c2a6a238e86254d855e821a9675395e06ad52047afc4814dc7091e8b887ca9e6a8bae3d2aea2117c16c46442f3d1469714359561d94c5f38cd3efcd6c9a5cb0f26fc97fa3214bf5bf6e8b9c376f4101e12c88983f4ef05bf45aaa51f48442e3540413a34565abf85251ce680f0de0277b612eb4b20313c86aa06bb9c0a884603b0d105a84441c094fa4706106764584f624a599ccca55640f123d9bce5dcbef020e08bb5307ebc19e447ee099810a4fd5032afd03bb70e95a3385002c797aafc2e3a967b9ea2a783c45fe5dc63b602a6999f8d5dfc94c24dd10413acf2e05e2760cad723b07e744bbd6802ad01b65a7048d970a9c74c44eed971b01c849f70684830c75c4182763f4e126d26c3d2865cd00831706c4b5eb35cbd48e8113ee3fda61754a427a4825bcf62e6fd0bb5c42a13f1a9a491919d67f699e4806dee548f55b7040d1da1e2b9d8bdc95a951f603f6d5ccd87ec335c174d8d32b83104792333216cda2adaf6c46eb7b535f9b0d39f051b68d0086f94f291878c195628746c0a88124dcbcaf9b5a4f1775420e1403717938bba8d8392ca1655101a16fa3bb4b5e9e5c8740e6f75d867743052c23540935a6cefb9e68aa60b96342315052d1cc4840cdb1231e08ce2c0a4dc34f41972b65252e707f348a9e071cee9c9a9c3a823afa5fa666d252ea27c6a5dc7a30fe7c7d7f094becc3d0ae601f184cc7a8d9da3c5015b60fc692889511284e24f5f88bc463a21ab", @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) (async)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
fsopen(&(0x7f0000000280)='cifs\x00', 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) (async)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) (async)
r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet6(0xa, 0x2, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xc2100)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x88282, 0x0) (async)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r7, 0x6, 0x22, &(0x7f0000000180)=0x1, 0x4) (async)
sendmmsg$inet(r7, &(0x7f0000003940)=[{{&(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000880)="eb9e2607160598a4f6bb41c4f2f3985e604d4168c68f1745249797dae9367581baccc70f326d0ccc8af76763bee795e6a87a46965415ecb2befaae16c14e122cc08df62723e61095b5ea400bb2006e36990cc6e4e4f854681c9fab28becd8d423eb1a2977c5ae8ee16721aebaab7f5c980eb9dbf89a1a0e9ec992a03c6f3a1c840f9ebf06634ae8ebdce4cdf89b2d018870f27194e7d3e6dd9b77aceb51f7d87bc7481f77582ce8ec34a786bb0c3f1172501", 0xb2}], 0x1}}], 0x1, 0x200080fc) (async)
pselect6(0x40, &(0x7f0000000240)={0x0, 0xbfffffffffffffff, 0x1ff, 0x7a, 0x0, 0x8000, 0x6, 0x7}, 0x0, &(0x7f0000000080)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x12, 0x80000001}, 0x0, 0x0)

2m26.071351219s ago: executing program 8 (id=3378):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0a00000005000000020000000700000000000000", @ANYRES32, @ANYBLOB="00000000000000deffffffffffffff0000000000b0e589a8b261e99961652f5efbcc1b99569f0a300680a18d9839b1cf58e5b26bd6c68436ed969f5618c3e34db7632be8ee7327f28fba8df2146ffd615e22b36ee7665b65f3b8e0aa4c16ab4728d0e99b3f9e235e712e051e60543f8b8f9efbb97b9f20e6789f617dee24036956881b18843acecf05b1fa9b4a66a8d116a64e44f793a79c27510785d233784261854dc118d80dad", @ANYBLOB="38648e3d2b78a4fed3f1796c813991bca703a894abd04ed96580c56e441a40168a1bf7cea6bbcea04cbcc0b6", @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0)
r2 = dup(r1)
write(r2, &(0x7f0000000000)="f9", 0x1)
read$FUSE(r2, &(0x7f0000003480)={0x2020, 0x0, <r3=>0x0}, 0x2020)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00004000000000000080000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r5 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r5, 0xc0106441, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffe00})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="700000000009010100000000000000000000000a0c00048008000140000002bd080005400000000f0900010073797a310000f3003c0002000c00028005000100060000002c00018014000300fe88000000000000000000000000000114000400ff020000000000000000000000000001"], 0x70}, 0x1, 0x0, 0x0, 0x8008890}, 0x40000)
ioprio_set$uid(0x3, 0xffffffffffffffff, 0x2004)
r7 = getpid()
r8 = syz_pidfd_open(r7, 0x0)
setns(r8, 0x24020000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
r11 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=<r12=>0x0, &(0x7f0000000280)=<r13=>0x0, &(0x7f0000000140)=<r14=>0x0)
syz_ublk_add_dev(r11, r12, r13, r14, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r15=>0x0)
syz_ublk_setup_queues(r10, r15, &(0x7f0000000540)={0x0, 0x6bdc, 0x200, 0x1, 0x18c}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x2, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x80, 0xfffffffd, 0x69, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x800, 0x0, 0x400000}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x10, 0x3, 0x0, 0x0, r10}}], 0x1, &(0x7f00000003c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0xdbd, 0x0, 0x0}}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20)
mount(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x2251024, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94)
write$FUSE_INTERRUPT(r2, &(0x7f0000000100)={0x10, 0x0, r3}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r16=>0xffffffffffffffff})
r17 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r16, 0x1, 0x32, &(0x7f00000000c0)=r17, 0x4)

2m25.779481542s ago: executing program 8 (id=3379):
socket$packet(0x11, 0x2, 0x300) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x14, r1, 0x711, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24044894}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
preadv(0xffffffffffffffff, 0x0, 0x0, 0xffffff00, 0x9) (async, rerun: 32)
r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) (async, rerun: 32)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r3, 0xab00, r4)
r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0xa042, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f0000000040)) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r5, 0xc01864c2, &(0x7f0000000080)={<r6=>0x0}) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r7) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r9=>0x0}) (rerun: 32)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="610233"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x18, r10, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8041}, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r10, 0x400, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x1}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x800}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40100) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r5, 0xc01864c2, &(0x7f00000000c0)={<r12=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r5, 0xc02064cc, &(0x7f0000000100)={r6, r12, 0x4, 0x4, 0x1}) (async)
ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r5, 0xc0106441, &(0x7f0000000140)={0x0, <r13=>0x0, 0xfff})
ioctl$DRM_IOCTL_PANTHOR_VM_GET_STATE(r5, 0xc0086444, &(0x7f0000000180)={r13}) (async)
ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(0xffffffffffffffff, 0xc0386447, &(0x7f00000000c0)={{0x8, 0x2, &(0x7f0000000040)=[{0x2, 0x0, 0x9e3}, {0xf, 0x0, 0x3}]}, 0x9, 0x2, 0x7, 0x0, 0x0, 0xfd7, 0xe9, 0x3, r13})
r14 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r14, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async)
bind$inet(r14, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)

2m10.28118033s ago: executing program 37 (id=3379):
socket$packet(0x11, 0x2, 0x300) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x14, r1, 0x711, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24044894}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
preadv(0xffffffffffffffff, 0x0, 0x0, 0xffffff00, 0x9) (async, rerun: 32)
r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) (async, rerun: 32)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r3, 0xab00, r4)
r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0xa042, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f0000000040)) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r5, 0xc01864c2, &(0x7f0000000080)={<r6=>0x0}) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r7) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r9=>0x0}) (rerun: 32)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="610233"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x18, r10, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8041}, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r10, 0x400, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x1}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x800}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40100) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r5, 0xc01864c2, &(0x7f00000000c0)={<r12=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r5, 0xc02064cc, &(0x7f0000000100)={r6, r12, 0x4, 0x4, 0x1}) (async)
ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r5, 0xc0106441, &(0x7f0000000140)={0x0, <r13=>0x0, 0xfff})
ioctl$DRM_IOCTL_PANTHOR_VM_GET_STATE(r5, 0xc0086444, &(0x7f0000000180)={r13}) (async)
ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(0xffffffffffffffff, 0xc0386447, &(0x7f00000000c0)={{0x8, 0x2, &(0x7f0000000040)=[{0x2, 0x0, 0x9e3}, {0xf, 0x0, 0x3}]}, 0x9, 0x2, 0x7, 0x0, 0x0, 0xfd7, 0xe9, 0x3, r13})
r14 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r14, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async)
bind$inet(r14, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)

15.439691358s ago: executing program 5 (id=3821):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a31000000000800054000000002090002"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b"], 0x0)
listen(r0, 0x10040)
syz_open_dev$MSR(&(0x7f0000000180), 0xfffffffe, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'gretap0\x00', <r3=>0x0})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000001b40)={0x0, 0x0, 0x0}, 0x8000)
mprotect(&(0x7f000002c000/0x1000)=nil, 0x1000, 0x2)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps_rollup\x00')
read$FUSE(r4, &(0x7f0000004900)={0x2020, 0x0, <r5=>0x0}, 0x2020)
sendto$packet(r2, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14)
socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = socket$netlink(0x10, 0x3, 0x14)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x4, 0x100, 0x25}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x9, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES8=r5, @ANYBLOB="0000000000000000b703000010000000850000001b000000b700000000000000850000000f00000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd25, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'netdevsim0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x100)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
r7 = syz_open_dev$vim2m(&(0x7f00000004c0), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000780)={0x1, @pix_mp={0x3, 0x1, 0x41565559, 0x6, 0x3, [{0x2eb, 0x8}, {0x6, 0x2}, {0x2, 0x7fffffff}, {0x2, 0x5}, {0x9, 0x14c}, {0x9, 0x3}, {0xfffffffd, 0x400000}, {0x4, 0x5}], 0x9, 0x6, 0x6, 0x2}})
syz_emit_ethernet(0x3a, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x69, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4}]}}}}}}}, 0x0)
syz_emit_ethernet(0x42, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045000034fffe00009506907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8c20000890781000080a0000a001004040560000"], 0x0)

11.66790161s ago: executing program 5 (id=3840):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="2ef848110000005e140602000000000e000a001000000006900000121f2b1200da51d815e8454bbca8886b104c00229866eb9132e06e4c88105ad2fde14fce788af78cb3530f1c881d6a23efb9c31b200e9a088044c987b2", 0x58}], 0x1}, 0x40488c4)
dup(r0)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x11, 0xffffffffffffffff, &(0x7f0000000080))
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r3 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd01800905020210020200000905820200"], 0x0)
syz_usb_control_io$uac1(r3, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0)
syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000140)={0x40, 0x3, 0x6, "b5b986ccab81"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r3, 0x0, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4028af11, 0x0)
r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0), 0x305000, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, <r5=>0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x49, 0x49, 0x7, [@datasec={0x9, 0x5, 0x0, 0xf, 0x1, [{0x2, 0x0, 0x8}, {0x4, 0x400, 0xfffffffa}, {0x4, 0x88, 0x1ff}, {0x3, 0xffff, 0x3}, {0x2, 0x4154ce77, 0x7d53fd4b}], 't'}]}, {0x0, [0x61, 0x5f, 0x2e, 0x2e, 0x2e]}}, &(0x7f0000000640)=""/146, 0x6b, 0x92, 0x1, 0x7}, 0x28)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={0xffffffffffffffff, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0], <r8=>0x0, 0x67, &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000900), &(0x7f0000000940), 0x8, 0xd7, 0x8, 0x8, &(0x7f0000000980)}}, 0x10)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@bloom_filter={0x1e, 0xfff, 0x9, 0x7ff, 0x2800, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x1e, 0x1a, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000200000000000000bb0b000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001834000002000000000000000000000075b50800feffffff04e7400005000000c50a0c00fcffffff186600000b000000000000005293000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000000000008500000086000100bf9100000ce1431eb7020000620000008500000084000095000000000000008c0906f42cea44e7b89522229290fd5476b23c498839c9db0bbcb50caf56cc1c2601033d4f6a14935fdd21a30885a62073d187f03d04ae7b09afd362c8143a8bdec7dfdcb79eb9045e009971f1001691e87c54d317f7bbcc22ea7b10d6b3e8743a695be6c91321"], &(0x7f00000003c0)='GPL\x00', 0x1, 0xb7, &(0x7f0000000400)=""/183, 0x41000, 0x10, '\x00', r6, @sk_lookup, r7, 0x8, &(0x7f0000000740)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x3, 0xa, 0x4}, 0x10, r8, 0xffffffffffffffff, 0x7, &(0x7f0000000b80)=[r9, r2], &(0x7f0000000bc0)=[{0x3, 0x1, 0xb, 0x7}, {0x1, 0x4, 0x2, 0x4}, {0x3, 0x5, 0xc, 0x2}, {0x0, 0x4, 0xf, 0x3}, {0x0, 0x2, 0xb, 0x2}, {0x2, 0x2, 0xb, 0x32a70a70f4b16684}, {0x1, 0x5, 0xf, 0x8}], 0x10, 0x2}, 0x94)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x2000c000)

8.043798571s ago: executing program 6 (id=3854):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = socket$kcm(0x29, 0x7, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000500a8000600200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace80", 0x5e}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0)
syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/hardlockup_count', 0x800, 0x4)
read$char_usb(r2, &(0x7f0000000500)=""/238, 0xee)
pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0xd, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
munmap(&(0x7f00002d2000/0x4000)=nil, 0x4000)
socket$xdp(0x2c, 0x3, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]})
close_range(r3, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={<r5=>0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x9, @private2}]}, &(0x7f0000000240)=0x10)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x83, &(0x7f0000001000)={r5}, 0x8)
socket$netlink(0x10, 0x3, 0xa)

7.489546926s ago: executing program 5 (id=3855):
r0 = io_uring_setup(0xc96, &(0x7f0000000040)={0x0, 0x394b, 0x8, 0x3, 0x33b})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2bb})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000005001e"], 0x24}}, 0x40)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r5, 0x0, 0x4890)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5656d, 0x70bd29, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0x1, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x8, 0x8, 0xfbee}, 0x1, 0x0, 0x3, 0x5, 0xe, 0x4, 0xd, 0x18, 0x5, 0x4, {0x6, 0xc, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x44890)
r9 = socket$kcm(0x11, 0x3, 0x0)
r10 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r11, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c0d4)
io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000001700)=[{0x0, 0x0, 0x0}], 0x1)
r12 = syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x250, 0x9d, 0x74, 0xff, 0x10, 0x458, 0x704a, 0x7521, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x0, 0xaf5ab7443cfb8f59, 0x7f, "", [{{0x9, 0x4, 0xc8, 0xf6, 0x0, 0x88, 0x26, 0x81}}]}}]}}, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r12, 0x0, 0x0)

7.421775203s ago: executing program 6 (id=3856):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
socket$nl_route(0x10, 0x3, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0)
recvfrom(r1, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80000000}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
socket(0x40000000015, 0x5, 0x0)
r3 = socket(0x40000000015, 0x805, 0x0)
getsockopt(r3, 0x114, 0x271f, &(0x7f0000019440)=""/102400, &(0x7f00000000c0)=0x19000)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r4, &(0x7f0000007880)=""/102400, 0x19000)
r5 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r5, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0)
recvfrom$inet6(r5, &(0x7f0000000000)=""/31, 0x39, 0x2002, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1)
socket$inet6(0x10, 0x3, 0x0)

6.119255708s ago: executing program 5 (id=3862):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00')
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000010c0)={&(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000011000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x49, r0}, 0x68)
preadv(r0, &(0x7f0000002400)=[{&(0x7f0000000080)=""/4097, 0x1001}], 0x1, 0x3f, 0x6a76)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r1, &(0x7f0000001dc0)=""/4096, 0x1000)
lseek(r1, 0xffffffffffffffff, 0x1)

5.603392875s ago: executing program 5 (id=3864):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0010002b0009082dbd7000fedbdf2505000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x40070)
r1 = socket(0x400000000010, 0x3, 0x800000)
socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'nr0\x00'})
sendmsg$nl_route_sched(r1, 0x0, 0x0)
r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x88a01, 0x0)
r3 = openat$comedi(0xffffffffffffff9c, 0x0, 0x80400, 0x0)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0)
r4 = socket(0x11, 0x3, 0x0)
setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0)
setsockopt$packet_int(r4, 0x107, 0xe, 0x0, 0x0)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2}, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000180)={0x0, <r5=>0x0})
prlimit64(r5, 0xd, &(0x7f0000000140)={0x1, 0x100008b}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$SIOCGIFHWADDR(r6, 0x8927, &(0x7f0000000000)={'ip6gretap0\x00'})
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x0, 0x0)
r7 = epoll_create(0xfc)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r1, &(0x7f0000000280)={0x6000200d})
r8 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
creat(0x0, 0x88)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)=0x74000000)
write$dsp(r2, &(0x7f0000002000)='`', 0x88020)

5.411944673s ago: executing program 9 (id=3866):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = socket$kcm(0x29, 0x7, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000500a8000600200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace80", 0x5e}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0)
syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/hardlockup_count', 0x800, 0x4)
read$char_usb(r2, &(0x7f0000000500)=""/238, 0xee)
pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0xd, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
munmap(&(0x7f00002d2000/0x4000)=nil, 0x4000)
socket$xdp(0x2c, 0x3, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]})
close_range(r3, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={<r5=>0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x9, @private2}]}, &(0x7f0000000240)=0x10)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x83, &(0x7f0000001000)={r5}, 0x8)
socket$netlink(0x10, 0x3, 0xa)

5.165336123s ago: executing program 9 (id=3867):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x3}, 0x6)
write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="21010405dbfc8a65841ec3289829e8"], 0x9)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000200), 0x0, 0x0, 0x0, 0xf5ffffff}, 0x3f01)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1)
socket$kcm(0x2b, 0x1, 0x0)
r2 = landlock_create_ruleset(&(0x7f00000001c0)={0x1801a, 0x2, 0x3, 0x4800, 0x0, 0x3}, 0x30, 0x2)
landlock_restrict_self(r2, 0xa)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, 0x0, 0x8)
io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, 0x0, 0x1)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0)
r4 = signalfd(r3, &(0x7f0000000080)={[0x3]}, 0x8)
setsockopt$inet6_int(r4, 0x29, 0x5, &(0x7f0000000180)=0x82, 0x4)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24004005, 0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0x8, 0x0, 0x10001, 0x20000000, 0x400100, 0x80000001, 0x63dd1ea1, 0x1}, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r7, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r7, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)

4.947200759s ago: executing program 6 (id=3868):
close(0xffffffffffffffff)
socket$l2tp6(0xa, 0x2, 0x73)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x0)
mount(&(0x7f0000000000), 0x0, &(0x7f0000000800)='9p\x00', 0x0, &(0x7f0000000900)='trans=tcp,')
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'tunl0\x00', <r1=>0x0})
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
sendto$packet(r0, &(0x7f00000000c0)="3f03fe7feee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e24, 0x8, @loopback}, 0x1c)
setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
r4 = syz_open_dev$I2C(&(0x7f00000002c0), 0x0, 0x0)
ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000001380)={0x0, 0x49, 0x8, &(0x7f0000001340)={0xd, "c8660972daadf38033035d21dcc910b0dbf5be74076dc3f2f67b364ef9ed965b13"}})
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r5, 0x40046205, &(0x7f0000000040))
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
setsockopt$MRT6_TABLE(r5, 0x29, 0xcf, &(0x7f0000000080), 0x4)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
r8 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$KVM_GET_MSRS_cpu(r10, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0x40000020, 0x0, 0x5}, {0x40000092, 0x0, 0x9}]})

3.935898494s ago: executing program 9 (id=3869):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e1f, 0x3, @dev={0xfe, 0x80, '\x00', 0x12}, 0x5b5}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = socket$xdp(0x2c, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0)
socket$kcm(0x10, 0x3, 0x10)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000080)={{0x1, @empty, 0x2, 0x47, 'fo\x00', 0x2, 0x0, 0x3a}, {@private=0xa810101, 0x4, 0x0, 0x0, 0xba0, 0xdffffffe}}, 0x44)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
pipe(0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000193c0)=ANY=[@ANYBLOB="1200000000100000046b9d0000000008000000200000", @ANYRESOCT=r0, @ANYRES64=r1, @ANYRES32=r0, @ANYRES32, @ANYRES16=r2], 0x50)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000001400)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r4, 0x107, 0x13, 0x0, &(0x7f0000000040))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001500), r5)
socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r0, 0x29, 0x50, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="919b268a34bd7000fbdbdf250100"], 0xffffffffffffff15}, 0x1, 0x0, 0x0, 0x40800}, 0x4000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000780))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)

3.819853733s ago: executing program 9 (id=3870):
r0 = socket$packet(0x11, 0x2, 0x300) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000007a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
r2 = getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) (async)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
getpriority(0x0, r2) (async)
sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="0a1440000000000700"/28], 0x1c}, 0x1, 0x0, 0x0, 0xc011}, 0x4040000) (async)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
listen(0xffffffffffffffff, 0x0) (async)
sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) (async)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) (async)
modify_ldt$write(0x1, &(0x7f0000000100)={0x3af, 0x7fffffffffffffff, 0x2000, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1}, 0x10) (async)
r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r6, 0x40000000af01, 0x0) (async)
poll(&(0x7f0000000000)=[{r6, 0xda10}], 0x1, 0xfbfeffff)
ioctl$VHOST_NET_SET_BACKEND(r6, 0xaf02, 0x0) (async)
r7 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f00000070c0)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000540)=ANY=[@ANYBLOB="fdaa588eee277477f78b4466a59e7a81020f17928647341f754e96ccae474d0926456bb88d6669b760b723a5955ecf04ce73555499d78d70fab39aef77296c1798139ab3690c958a9125e605afee87f9ba1d4cc7fc4e70a152f0fb90a81e5a7c651fbd124a36bc3ff8c3261c30b1a8a226db1aaaadeb09e80db7c6e49c07302c0b37f10000003b02655cc619648202450850cb051e322af591e1a425e4ef1821355753cc40ad5e06fd7bba5a5605981951006889498cf291c7936add4ba82a5bcf4b5b2487b20a456021e7dca716f3dde2b7f8ffb7ea6b680000000000000000", @ANYRES16=r7, @ANYBLOB="a1ab23bdf000fdffffff3200000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000400000076000001"], 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x2400c880)

3.812012074s ago: executing program 6 (id=3871):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e1f, 0x3, @dev={0xfe, 0x80, '\x00', 0x12}, 0x5b5}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = socket$xdp(0x2c, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0)
socket$kcm(0x10, 0x3, 0x10)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000080)={{0x1, @empty, 0x2, 0x47, 'fo\x00', 0x2, 0x0, 0x3a}, {@private=0xa810101, 0x4, 0x0, 0x0, 0xba0, 0xdffffffe}}, 0x44)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
pipe(0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000193c0)=ANY=[@ANYBLOB="1200000000100000046b9d0000000008000000200000", @ANYRESOCT=r0, @ANYRES64=r1, @ANYRES32=r0, @ANYRES32, @ANYRES16=r2], 0x50)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000001400)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r4, 0x107, 0x13, 0x0, &(0x7f0000000040))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001500), r5)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_int(r7, 0x1, 0x9, &(0x7f0000000200), 0x4)
sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="919b268a34bd7000fbdbdf250100"], 0xffffffffffffff15}, 0x1, 0x0, 0x0, 0x40800}, 0x4000)

3.407178493s ago: executing program 0 (id=3874):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async)
ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd800000000000020000f000000040100"}) (async, rerun: 64)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) (rerun: 64)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f00000000c0)=@arm64_sys={0x603000000013e218, 0x0}) (async, rerun: 32)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) (rerun: 32)

3.372280974s ago: executing program 6 (id=3875):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x9, 0x6, 0x1, 0x4, 0x8, 0xb, 0x1, 0x3, 0xc, 0x7f, 0xd3, 0x85, 0x6, 0x1}, 0xe) (async)
r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000002200)={0x3717, 0x7, {<r2=>0x0}, {0xee01}, 0x7ff, 0x4}) (async)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000023c0)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f00000024c0)=0xe8) (async)
r4 = getgid()
newfstatat(0xffffffffffffff9c, &(0x7f0000002580)='./file0\x00', &(0x7f00000025c0)={0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x2000) (async)
statx(0xffffffffffffff9c, &(0x7f0000002640)='./file0\x00', 0x4000, 0x10, &(0x7f0000002680)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}) (async)
getresuid(&(0x7f0000002880), &(0x7f00000028c0), &(0x7f0000002900)=<r7=>0x0) (async)
read$FUSE(0xffffffffffffffff, &(0x7f0000002940)={0x2020, 0x0, 0x0, 0x0, <r8=>0x0}, 0x2020) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000004980)={{0x1, 0x1, 0x18, <r9=>r0, {<r10=>0xee01}}, './file0\x00'}) (async)
stat(&(0x7f00000049c0)='./file0\x00', &(0x7f0000004a00)={0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}) (async)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000004a80)=<r12=>0x0)
statx(0xffffffffffffffff, &(0x7f0000004ac0)='./file0\x00', 0x400, 0x80, &(0x7f0000004b00)={0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}) (async)
read$FUSE(0xffffffffffffffff, &(0x7f0000004c00)={0x2020, 0x0, 0x0, <r14=>0x0}, 0x2020) (async)
lstat(&(0x7f0000006c40)='./file0\x00', &(0x7f0000006c80)={0x0, 0x0, 0x0, 0x0, 0x0, <r15=>0x0}) (async)
getgroups(0x3, &(0x7f0000006f80)=[<r16=>0xee00, 0x0, 0x0]) (async)
read$FUSE(0xffffffffffffffff, &(0x7f00000070c0)={0x2020, 0x0, 0x0, <r17=>0x0}, 0x2020) (async)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000009100)={0x0, 0x0, <r18=>0x0}, &(0x7f0000009140)=0xc)
syz_fuse_handle_req(r1, &(0x7f0000000080)="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", 0x2000, &(0x7f00000092c0)={&(0x7f0000002080)={0x50, 0x0, 0x2, {0x7, 0x2d, 0x80000000, 0x800004, 0x1000, 0x4, 0xa3a, 0x40, 0x0, 0x0, 0x4, 0x6}}, &(0x7f0000002100)={0x18, 0xffffffffffffffda, 0x2, {0x100000001}}, &(0x7f0000002140)={0x18, 0xdf9e5799d5d46961, 0x3, {0x7f}}, &(0x7f0000002180)={0x18, 0x0, 0x2, {0x9}}, &(0x7f00000021c0)={0x18, 0xffffffffffffffda, 0x7, {0x400}}, &(0x7f0000002240)={0x28, 0xffffffffffffffda, 0x1, {{0x7, 0x2, 0x2, r2}}}, &(0x7f0000002280)={0x60, 0x0, 0x1, {{0xffffffffffffff22, 0x7f, 0x77, 0x101, 0x9, 0x2, 0x64, 0x1000}}}, &(0x7f0000002300)={0x18, 0xffffffffffffffda, 0x2, {0xef}}, &(0x7f0000002340)={0x14, 0x0, 0x6, {'\\!+\x00'}}, &(0x7f0000002380)={0x20, 0x0, 0x3, {0x0, 0x5}}, &(0x7f0000002500)={0x78, 0x0, 0x7, {0x4, 0xff, 0x0, {0x3, 0x3d9b, 0x1, 0xfffffffffffffff4, 0x6, 0x7ff, 0x7, 0x9, 0x7, 0x6000, 0x1, r3, r4, 0x5, 0x1}}}, &(0x7f0000002780)={0x90, 0x0, 0x0, {0x0, 0x0, 0x3fb8, 0x3, 0x81, 0xaca8, {0x5, 0x8000, 0x8, 0x49, 0x6, 0xc, 0x4, 0x7fff, 0x9, 0x2000, 0x2, r5, r6, 0x0, 0x1ff}}}, &(0x7f0000002840)={0x40, 0x0, 0x1, [{0x3, 0xb123, 0x0, 0x8}, {0x0, 0xb6, 0x0, 0x10}]}, &(0x7f0000006d00)={0x280, 0xfffffffffffffffe, 0x6, [{{0x3, 0x2, 0x7ff, 0x7fffffff, 0x7138, 0x80000001, {0x2, 0x157, 0x5, 0x6, 0x4, 0x2, 0x7, 0x9, 0x0, 0x6000, 0xe, r7, r8, 0x6, 0x4}}, {0x3, 0xfb, 0x3, 0x8, '#}{'}}, {{0x2, 0x0, 0x6, 0x5, 0x6, 0x400, {0x1, 0xb45, 0x2, 0x8, 0xff, 0x3, 0xfff, 0x0, 0xffffffff, 0x2000, 0x2, r10, r11, 0x1827, 0x7}}, {0x2, 0x100, 0x1, 0x4, '-'}}, {{0x0, 0x3, 0x7, 0x0, 0x5, 0x417, {0x3, 0x7, 0x6, 0x170, 0x7, 0x4, 0xfffffff9, 0x99, 0x5, 0xc000, 0x6246, r12, r13, 0x7, 0xfffffff5}}, {0x0, 0x8000000000000000, 0x0, 0x4}}, {{0x3, 0x3, 0x54b764b4, 0x8, 0x3, 0x3, {0x6, 0x7ff, 0x80000001, 0xff, 0x6d, 0xb, 0xb, 0x8, 0x5, 0x1000, 0x0, r14, r15, 0xe699}}, {0x2, 0x6, 0x0, 0x23}}]}, &(0x7f0000006fc0)={0xa0, 0xfffffffffffffff5, 0x3, {{0x6, 0x3, 0x9, 0xb, 0x5, 0x1, {0x2, 0x9, 0xf740, 0x6, 0x9, 0xa, 0x2, 0x90000000, 0xffffcea4, 0x2000, 0xef84, 0x0, r16, 0xa5, 0x4}}, {0x0, 0x18}}}, &(0x7f0000007080)={0x20, 0x0, 0x5, {0x5, 0x0, 0x4, 0x1}}, &(0x7f0000009180)={0x130, 0x0, 0x39a6, {0x6, 0x0, 0x0, '\x00', {0x100, 0xa, 0x100000000, 0x5, r17, r18, 0x8000, '\x00', 0x4, 0x9, 0x7a, 0x42, {0x8000000000000000, 0x6}, {0xffffffffffffff81, 0x8}, {0xb343, 0x7}, {0x7, 0x8}, 0x3, 0xb3, 0x1, 0x9}}}}) (async)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r9, &(0x7f0000009440)={&(0x7f0000009380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000009400)={&(0x7f00000093c0)={0x14, 0x5, 0x1, 0x5, 0x0, 0x0, {0x5, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x800) (async)
syslog(0x1, &(0x7f0000009480)=""/73, 0x49) (async)
r19 = getegid()
getgroups(0x1, &(0x7f0000009500)=[r19]) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000009800)={r9, 0xe0, &(0x7f0000009700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000009540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r20=>0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000009580), &(0x7f00000095c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8d, &(0x7f0000009600)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000009640), &(0x7f0000009680), 0x8, 0xc4, 0x8, 0x8, &(0x7f00000096c0)}}, 0x10) (async)
mkdir(&(0x7f0000009840)='./file0\x00', 0x2) (async)
r21 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x0, 0x200000f, 0x10, r0, 0x0)
syz_memcpy_off$KVM_EXIT_MMIO(r21, 0x20, &(0x7f0000009880)="15ebb3030f141938a1c67f1f04b159e0e0e8998a120c2037", 0x0, 0x18) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000009940)={'syztnl1\x00', &(0x7f00000098c0)={'syztnl0\x00', <r22=>r20, 0x29, 0xd0, 0x0, 0x0, 0x20, @private2, @mcast1, 0x8020, 0x80, 0x1, 0x101}})
setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000009980)={r22, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10)

3.355896586s ago: executing program 9 (id=3876):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r1, 0x8)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c6", 0x1}], 0x1, 0x0, 0x0, 0x20048054}}], 0x1, 0x8800)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x2}, 0x8)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYRES8=r4, @ANYRESHEX, @ANYBLOB="070c9fc738f0fddbdf251e000000e25d245d80d99ae1a5b5168c874f029ed4a402aa0e3425c8536a23343c5f381032858fded121196716f70844a419ff07d7fab50cf064f4496b930fae54f63dbc73a801ee76ec0db7f6621cec099137cb5b2dbb6f7d"], 0x14}, 0x1, 0x0, 0x0, 0x4040084}, 0x20008050)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), r4)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x14, r5, 0x0, 0x70bd2e, 0x25dfdbfe}}, 0x1, 0x0, 0x0, 0x20000840}, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES16=r3, @ANYRES32=r4, @ANYBLOB="00009c77ffffffffffff000008004000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000101573632340a74200001a00010000000000000044000500000200"/129], 0xfc}, 0x1, 0x0, 0x0, 0x40091}, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c)
r6 = socket$kcm(0x10, 0x2, 0x0)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="2e00000011008188040f46ecdb4db9cca7480ef410000000e3bd6efb9980b4e4e320f574485120994d290009000e000a000d000100ba800000120156e7201eda09dc4e3bb24c9cb050fc06", 0x4b}], 0x1}, 0x40840)

3.239259786s ago: executing program 6 (id=3878):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r4, 0x8008f511, &(0x7f0000000000))
setsockopt$sock_int(r4, 0x1, 0x23, &(0x7f0000000300)=0x20, 0x4)
recvmmsg(r4, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x40002100, 0x0)
write$binfmt_misc(r4, &(0x7f0000000300), 0x6)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r10, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10)
sendmsg$NL80211_CMD_LEAVE_IBSS(r6, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004044}, 0x8000)
sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000030603000000000000000000010000030900020073797a3100000000050001000700"/48], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x800)
r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
writev(r0, &(0x7f0000000340)=[{&(0x7f00000002c0)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}, {&(0x7f0000000040)="448bffffff7fc0cefe836005000000ec55236d5364d2456eed1ed955bb366b6e8ac5f5c93f494f", 0x27}], 0x2)

3.096959085s ago: executing program 4 (id=3879):
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000001c0)='./file0\x00')
rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)='./file2\x00')
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000000)={0x8, 'veth0_virt_wifi\x00', {'veth1_to_bond\x00'}, 0x3})
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000c00)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00')
read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0x2020)
r3 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x100000000, 0x10000})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000003040)={{0x1, 0x1, 0x18, <r4=>r3}, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00'})
r5 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000840)={'vcan0\x00', <r6=>0x0})
sendmsg$can_raw(r5, &(0x7f0000000000)={&(0x7f0000000200)={0x1d, r6}, 0x10, &(0x7f00000003c0)={&(0x7f0000000080)=@can={{0x3, 0x1, 0x0, 0x1}, 0x10, 0x0, 0x0, 0x0, "1d97ee3d10e03111"}, 0x10}, 0x2, 0x0, 0x0, 0x20000804}, 0x8000)
read$msr(r4, &(0x7f0000000300)=""/104, 0x68)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@map=r4, 0xd, 0x1, 0x8, &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0], <r8=>0x0}, 0x40)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)={@fallback=r2, r4, 0x5, 0x10, r2, @void, @value=r2, @void, @void, r8}, 0x20)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)

2.58785669s ago: executing program 0 (id=3880):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), r0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x121001, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r4, 0x0, &(0x7f00000002c0)='L', 0x1, 0xfffffffffffffff9})
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000000c0)={0x28, 0x2, r4, 0x0, &(0x7f00006d6000/0x2000)=nil, 0x2000, 0x1ff})
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r4, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7})
ioctl$TCSBRKP(r2, 0x5425, 0x0)
ioctl$TCXONC(r2, 0x540a, 0x3)
ioctl$TIOCGICOUNT(r2, 0x5409, 0x0)
r5 = landlock_create_ruleset(&(0x7f0000000140)={0x4000, 0x3, 0x2}, 0x18, 0x0)
landlock_restrict_self(r5, 0x9)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x28, r1, 0x203, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4050}, 0x804)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r6, <r7=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%ps    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r7, <r8=>0xffffffffffffffff}, 0x4)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYRES16=r8, @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r9, 0x2f08, 0xe, 0x0, &(0x7f0000000380)="a162cef0563a20f5177241ee8f52", 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50)
mount(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0)='tmpfs\x00', 0xa14dc7, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='\x00', 0x274)

2.494352816s ago: executing program 4 (id=3881):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e1f, 0x3, @dev={0xfe, 0x80, '\x00', 0x12}, 0x5b5}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = socket$xdp(0x2c, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0)
socket$kcm(0x10, 0x3, 0x10)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000080)={{0x1, @empty, 0x2, 0x47, 'fo\x00', 0x2, 0x0, 0x3a}, {@private=0xa810101, 0x4, 0x0, 0x0, 0xba0, 0xdffffffe}}, 0x44)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
pipe(0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000193c0)=ANY=[@ANYBLOB="1200000000100000046b9d0000000008000000200000", @ANYRESOCT=r0, @ANYRES64=r1, @ANYRES32=r0, @ANYRES32, @ANYRES16=r2], 0x50)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000001400)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r4, 0x107, 0x13, 0x0, &(0x7f0000000040))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001500), r5)
socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r0, 0x29, 0x50, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="919b268a34bd7000fbdbdf250100"], 0xffffffffffffff15}, 0x1, 0x0, 0x0, 0x40800}, 0x4000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000780))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)

2.484431825s ago: executing program 5 (id=3882):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@abs={0xdbd0937b9ff20c24, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0xd6901, 0x9c)
fcntl$setlease(r3, 0x400, 0x0)
fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0x0, 0x1000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, 0x0, 0x0)
syz_emit_ethernet(0xfdef, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c2ce0000ffffffffffff86dd600907001164110000000000000000000000ffffe0000002ff02000000000000000000000000000100000e22006490"], 0x0)
memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2400c110, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @loopback}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4)
socket$unix(0x1, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r6, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$inet_tcp_int(r6, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4)
connect$inet(r6, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg$inet(r6, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0xd007)
creat(&(0x7f0000000300)='./file0\x00', 0x60)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="1700000054000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="058335fa", @ANYRES32=0x0, @ANYBLOB="00000000fe8000"/24], 0x38}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffff00"/28], 0x50)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)

2.335478614s ago: executing program 9 (id=3883):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2a)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1)
r1 = syz_open_dev$sg(&(0x7f0000000080), 0x7, 0xf46f0ebeb3543f43)
ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)={0x6d, 0xe, 0x101, "a427f1da118691b03683af3bdf56908b03d8fbb0473149ed1e4c47da4e2629f13358e4b047a47ab66e9d9affa9ebdc553aaf369b2f158247c828816064b9a4cf30959aa6592591dba6c55fee7f01e9a583ba9c2aeb697f564fe396958a77890a542500b6d29ffae745c188b996"})
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x0, @local}, {0x2, 0x200, @loopback}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x401})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r3 = io_uring_setup(0x5252, &(0x7f0000000080))
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup, 0xffffffffffffffff, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1a00}], 0x0, 0x11a}, 0x20)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xe)
r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r4, 0x40383d0c, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
syz_usb_connect(0x2, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb10000000010200090502", @ANYRES32], 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000b00)=ANY=[@ANYBLOB="1201000300000020ac053215666c1b84db8c4e4268cd02400001fb030009022d00010108a00809040012010301840009210f21030122c60d"], &(0x7f0000000640)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x250, 0x4, 0x80, 0xfc, 0xff}, 0x105, &(0x7f0000000240)={0x5, 0xf, 0x105, 0x2, [@generic={0xe4, 0x10, 0x4, "0a22ffa5cec48a9eed7c3d23a169aeef4bda24a1508176c477261983dd5f51d1478e3ec748b02d46b069f84f959f89e81ebe0b4c6416dfa4088c04d33af312d90710064db38290d4aa359b2f99dc2e5945cd9dfb7403cb85a6bdb6d124d22cde2c6b8d494c88a0b790ec9d27d4a8f6b377663085bb3e316bd2cb96e97c828428bb66c4fc8818825181c8b1f31a634bea7e51b1dbd85c6186883e1c3da29eaff8fed0e518157010a6ff738eada709caeaf210aada2779f1c41e15e18a26d5ec76f8e9a6026356e3321ad9c62240ac57fff214e4482f1da018184655235d01d5bcd0"}, @ssp_cap={0x1c, 0x10, 0xa, 0x2, 0x4, 0x1, 0x1ef0f, 0x7f, [0xff0030, 0xf, 0x120ff, 0xffc000]}]}, 0x4, [{0x3a, &(0x7f0000000380)=ANY=[@ANYBLOB="3a0310b1b74731a63e66af5bdb00fd6aa7081c3a12043ce5c9657bdbb381a76b4613d7539e7f952113cc54d724171df5562adf6da0ae790b7c33"]}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x42f}}, {0x79, &(0x7f0000000b80)=ANY=[@ANYBLOB="7903fda00bb846ccd81a7dbe67c40fe13c09547326518cab295753730663242c8cd4ac45bd278876b5fa3419af2bb306d3b523cf86f8cfaabc5f486b5146c4bbd9a7d63afeb7385cffab11aff4f9c8ccf0593054ad66be71b9bd6e9d2854c84ca3d0bdc0c5b9c87446b273009bbd308e27b8", @ANYRESOCT=0x0]}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x41b}}]})
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000ac0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r9}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
fsopen(&(0x7f00000000c0)='ufs\x00', 0x1)
ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f00000004c0)={0x1, 0x0, [{0x6e0, 0x0, 0x400000000000000}]})
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0904000000000000000002000000300004802c0001800a00010072616e67650000001c0002800800014000000016080001400000000904000480040003800900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000aa890bf68ebd2de5f40322c9b55bc17750ab4d429550b923833be450bc4aa48309182a3de6e7427ed5a4ae9c9cd7dba124b3345e618c744517526caa06c58140988242499c3657cbeb6d1faab6d6542e288245c11c73869f9f0315e7a1be4647e5ca60afa373f590c53ce134191f27cbc132a96a4"], 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe9d, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94)
r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r11, 0x40047438, &(0x7f0000000180)=""/246)

1.686833815s ago: executing program 4 (id=3884):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x5c, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000000c0)=0x10000000)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x400, &(0x7f0000000040))
lstat(&(0x7f0000000380)='./cgroup\x00', &(0x7f0000000540))

1.65356116s ago: executing program 0 (id=3885):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e1f, 0x3, @dev={0xfe, 0x80, '\x00', 0x12}, 0x5b5}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = socket$xdp(0x2c, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0)
socket$kcm(0x10, 0x3, 0x10)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000080)={{0x1, @empty, 0x2, 0x47, 'fo\x00', 0x2, 0x0, 0x3a}, {@private=0xa810101, 0x4, 0x0, 0x0, 0xba0, 0xdffffffe}}, 0x44)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
pipe(0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000193c0)=ANY=[@ANYBLOB="1200000000100000046b9d0000000008000000200000", @ANYRESOCT=r0, @ANYRES64=r1, @ANYRES32=r0, @ANYRES32, @ANYRES16=r2], 0x50)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000001400)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r4, 0x107, 0x13, 0x0, &(0x7f0000000040))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001500), r5)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000000200), 0x4)
sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="919b268a34bd7000fbdbdf250100"], 0xffffffffffffff15}, 0x1, 0x0, 0x0, 0x40800}, 0x4000)

1.143998418s ago: executing program 0 (id=3886):
syz_emit_vhci(&(0x7f00000021c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x18}, @l2cap_cid_signaling={{0x14}, [@l2cap_conn_rsp={{0x3, 0x72, 0x8}, {0x0, 0x200, 0x9, 0x7}}, @l2cap_conf_req={{0x4, 0x3f, 0x4}, {0x8}}]}}, 0x1d)
openat$rfkill(0xffffffffffffff9c, 0x0, 0x40e02, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x40, 0x0)
mount$9p_fd(0x0, 0x0, &(0x7f0000000b80), 0x0, &(0x7f00000004c0))
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x8000000000000000)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r1, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0x4, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@rdma_args={0x48, 0x114, 0x1, {{0xd, 0x7}, {0x0}, &(0x7f0000000680)=[{&(0x7f0000001040)=""/4096, 0x1000}], 0x1, 0x31}}], 0x48, 0x29ff1109601b30a4}, 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000080)=0x5)

1.071849638s ago: executing program 4 (id=3887):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x6, &(0x7f0000000100)=0x5)
syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e04050b2100"], 0x7)
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001800000000000000200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000002000b70200001400000015f6000000f3b8d50100000085000000830000000000000055090100000000009500000010000000bf91000000000000b70200e60bac74008500000085000000b7000000000000ba18bc850000000000"], 0x0, 0x7, 0xfffffffffffffedb, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3e, &(0x7f00000000c0)=0x8, 0x4)
write(0xffffffffffffffff, &(0x7f0000000180)="a9", 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
keyctl$clear(0x3, 0xfffffffffffffffd)
r4 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', <r6=>0x0})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="d60a0000000000006111840000001800000000000000000000000000000095000000000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x180, 0x24, 0xd0f, 0x70bd25, 0x25dfdbfd, {0x60, 0x0, 0x0, r6, {0x0, 0x2}, {0xd, 0xffff}, {0x9}}}, 0x180}, 0x1, 0x0, 0x0, 0x810}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0xc004)
syz_open_dev$vcsn(&(0x7f0000000040), 0xd0f, 0x103000)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94)
r7 = getpgid(0x0)
rt_tgsigqueueinfo(0x0, r7, 0x33, &(0x7f0000000240)={0x15, 0x3, 0x1})
syz_clone3(&(0x7f0000000340)={0xc6107700, &(0x7f00000000c0), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58)

994.483864ms ago: executing program 0 (id=3888):
r0 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
getpgid(r1)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000b00), 0x10143, 0x40010062, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x50, &(0x7f00000001c0)={0x0, 0x0}, 0x10)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x4004044}, 0x40041)
setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x4)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f, 0xa}}, 0x20)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000018, 0x11, r5, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000300)={0x80000000, &(0x7f000000a2c0), 0x0})
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0)

903.467555ms ago: executing program 4 (id=3889):
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = socket$kcm(0x29, 0x7, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000500a8000600200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace80", 0x5e}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0)
syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/hardlockup_count', 0x800, 0x4)
read$char_usb(r2, &(0x7f0000000500)=""/238, 0xee)
pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0xd, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
munmap(&(0x7f00002d2000/0x4000)=nil, 0x4000)
socket$xdp(0x2c, 0x3, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]})
close_range(r3, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={<r5=>0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x9, @private2}]}, &(0x7f0000000240)=0x10)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x83, &(0x7f0000001000)={r5}, 0x8)
socket$netlink(0x10, 0x3, 0xa)

575.901559ms ago: executing program 4 (id=3890):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001200000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0)
syz_usb_connect$uac1(0x0, 0xaa, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902980003010000000904000000010100000a2401000000020102132406040006030000000000000000000000000924030000010000ff0924050000f8431cfd0924030604030204001b2404040209", @ANYBLOB="06c9"], 0x0)

0s ago: executing program 0 (id=3891):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x28)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0)
syz_usb_connect$uac3(0x2, 0xa3, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdb, 0x3, 0x1, 0x7, 0x80, 0x7, {0x8, 0xb, 0x1, 0x0, 0x1, 0x22, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x27}, [@feature_unit={0x1d, 0x24, 0x7, 0x5, 0x3, [0x5, 0x4, 0xa, 0x10, 0x5, 0x10]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2, 0x8, 0x3}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x8, 0xf, 0x80, 0x2, 0xb}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x9, 0x4, 0xa, 0x2, "df8749011d26"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x8, 0x2, 0xf, 0x9, "78b604", "330ab1"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0xff, 0x3, 0x1c, 0xdf, "578a5a02"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xf3, 0x8, 0x0, {0xa, 0x25, 0x25, 0xe5, 0x60, 0x7f}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x8}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x6, 0x81, 0x0, "0786570bb248"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x31, 0xf, 0x0, {0xa, 0x25, 0x25, 0x9, 0x3, 0x4}}}}}}}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0xa, 0x5, 0x5, 0x10, 0x4}, 0x48, &(0x7f0000000240)={0x5, 0xf, 0x48, 0x3, [@ptm_cap, @ptm_cap, @ss_cap={0x0, 0x10, 0x3, 0x2, 0x0, 0x3, 0x9f, 0x5}]}, 0x1, [{0x8b, &(0x7f00000001c0)=@lang_id={0x0, 0x3, 0x8cc9}}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xe6, &(0x7f0000000000)=ANY=[@ANYBLOB="1b1b"])

kernel console output (not intermixed with test programs):

_TYPE desc
[ 1040.789340][   T11] usb 7-1: USB disconnect, device number 60
[ 1040.852269][T20320] veth0_vlan: entered promiscuous mode
[ 1040.917162][T20320] veth1_vlan: entered promiscuous mode
[ 1040.927359][T20100] udevd[20100]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1041.001595][T20490] loop8: detected capacity change from 0 to 7
[ 1041.024168][T20490] Dev loop8: unable to read RDB block 7
[ 1041.046578][T20490]  loop8: unable to read partition table
[ 1041.060383][T20490] loop8: partition table beyond EOD, truncated
[ 1041.076588][T20490] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[ 1041.077591][T20320] veth0_macvtap: entered promiscuous mode
[ 1041.142373][T20320] veth1_macvtap: entered promiscuous mode
[ 1041.245481][T20320] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1041.301785][T20497] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3454'.
[ 1041.327073][T20320] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1041.335291][   T30] kauditd_printk_skb: 46 callbacks suppressed
[ 1041.335308][   T30] audit: type=1400 audit(1783499593.314:2758): avc:  denied  { write } for  pid=20483 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1041.431437][T20502] sch_tbf: burst 0 is lower than device veth0_to_hsr mtu (1514) !
[ 1041.754391][T15706] Bluetooth: hci0: command tx timeout
[ 1042.010376][T17328] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1042.173703][   T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1042.406069][   T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1042.514536][T17318] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1042.722412][   T30] audit: type=1400 audit(1783499594.704:2759): avc:  denied  { write } for  pid=20511 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1043.016969][ T6792] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1043.026939][ T6792] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1043.070673][T20523] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3459'.
[ 1043.094352][ T9947] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1043.121794][ T9947] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1043.173043][T15839] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[ 1043.286677][T11123] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[ 1043.353082][T15839] usb 6-1: Using ep0 maxpacket: 32
[ 1043.377159][T15839] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1043.436055][T15839] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1043.548098][T15839] usb 6-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68
[ 1043.554756][T11123] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1043.699748][T11123] usb 1-1: config 0 has no interfaces?
[ 1043.710456][T11123] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[ 1043.710735][T15839] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1043.730490][T11123] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1043.755973][T11123] usb 1-1: config 0 descriptor??
[ 1043.782216][T15839] usb 6-1: Product: syz
[ 1043.797689][T15839] usb 6-1: Manufacturer: syz
[ 1043.813918][T15839] usb 6-1: SerialNumber: syz
[ 1043.841676][T15839] usb 6-1: config 0 descriptor??
[ 1043.999159][   T30] audit: type=1400 audit(1783499595.984:2760): avc:  denied  { write } for  pid=20524 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1044.077065][T15839] usb 6-1: USB disconnect, device number 42
[ 1044.136742][   T30] audit: type=1400 audit(1783499596.124:2761): avc:  denied  { write } for  pid=20545 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1044.563771][T11123] usb 7-1: new full-speed USB device number 61 using dummy_hcd
[ 1044.760583][   T30] audit: type=1400 audit(1783499596.744:2762): avc:  denied  { write } for  pid=20550 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1044.790191][T20568] gfs2: error -5 reading superblock
[ 1044.828518][T11123] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1044.873421][T11123] usb 7-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54
[ 1044.895003][T11123] usb 7-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7
[ 1044.925144][T11123] usb 7-1: Product: syz
[ 1044.941348][T11123] usb 7-1: Manufacturer: syz
[ 1044.960452][T11123] usb 7-1: SerialNumber: syz
[ 1044.965342][   T30] audit: type=1400 audit(1783499596.944:2763): avc:  denied  { write } for  pid=20570 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1045.290967][T11123] usb 7-1: config 0 descriptor??
[ 1045.328392][T11123] gspca_main: conex-2.14.0 probing 0572:0041
[ 1045.443856][T20579] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3468'.
[ 1045.520678][T20584] overlayfs: failed to decode file handle (len=5, type=251, flags=0, err=-22)
[ 1045.608022][ T5863] libceph: connect (1)[c::]:6789 error -101
[ 1045.624883][ T5863] libceph: mon0 (1)[c::]:6789 connect error
[ 1045.658806][T20547] ceph: No mds server is up or the cluster is laggy
[ 1046.058426][T11130] libceph: connect (1)[c::]:6789 error -101
[ 1046.078811][T11130] libceph: mon0 (1)[c::]:6789 connect error
[ 1046.164896][T11130] usb 1-1: USB disconnect, device number 38
[ 1046.915696][T11108] libceph: connect (1)[c::]:6789 error -101
[ 1046.937237][T11108] libceph: mon0 (1)[c::]:6789 connect error
[ 1046.944393][   T10] block nbd8: Possible stuck request ffff888029227000: control (read@0,1024B). Runtime 90 seconds
[ 1046.955878][   T10] block nbd8: Possible stuck request ffff8880292271c0: control (read@1024,1024B). Runtime 90 seconds
[ 1046.969484][   T10] block nbd8: Possible stuck request ffff888029227380: control (read@2048,1024B). Runtime 90 seconds
[ 1046.983584][   T10] block nbd8: Possible stuck request ffff888029227540: control (read@3072,1024B). Runtime 90 seconds
[ 1047.197012][T11130] usb 7-1: USB disconnect, device number 61
[ 1047.256153][T20615] qnx6: unable to read the first superblock
[ 1047.288732][T20622] loop8: detected capacity change from 0 to 7
[ 1047.301534][   T30] audit: type=1400 audit(1783499599.276:2764): avc:  denied  { write } for  pid=20581 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1047.303645][T20615] qnx6: unable to read the first superblock
[ 1047.350069][T20622] Dev loop8: unable to read RDB block 7
[ 1047.384101][T20622]  loop8: unable to read partition table
[ 1047.393728][T20622] loop8: partition table beyond EOD, truncated
[ 1047.418334][T20615] qnx6: unable to read the first superblock
[ 1047.420711][T20622] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[ 1048.100788][   T30] audit: type=1400 audit(1783499600.070:2765): avc:  denied  { write } for  pid=20629 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1048.500162][T20646] geneve2: entered promiscuous mode
[ 1048.505865][T20646] geneve2: entered allmulticast mode
[ 1049.035357][   T30] audit: type=1400 audit(1783499600.993:2766): avc:  denied  { map } for  pid=20649 comm="syz.5.3480" path="/dev/video2" dev="devtmpfs" ino=935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[ 1049.060914][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[ 1049.088310][T20654] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3481'.
[ 1049.323955][   T30] audit: type=1400 audit(1783499601.271:2767): avc:  denied  { write } for  pid=20647 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1049.416781][T20668] syzkaller1: entered allmulticast mode
[ 1049.422663][T11153] usb 10-1: new high-speed USB device number 79 using dummy_hcd
[ 1049.435275][T20668] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3484'.
[ 1049.525693][   T30] audit: type=1400 audit(1783499601.479:2768): avc:  denied  { write } for  pid=20675 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1049.600213][T11153] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1049.617010][T20677] NILFS (nullb0): couldn't find nilfs on the device
[ 1049.730446][T11153] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1049.784586][T11153] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1049.865062][T11153] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1049.977797][T11153] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1049.996272][T11153] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1050.015827][T11153] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1050.036061][T11153] usb 10-1: Product: syz
[ 1050.040645][T11153] usb 10-1: Manufacturer: syz
[ 1050.102931][T11153] cdc_wdm 10-1:1.0: skipping garbage
[ 1050.131333][T11153] cdc_wdm 10-1:1.0: skipping garbage
[ 1050.318788][T11153] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device
[ 1050.404145][T11153] cdc_wdm 10-1:1.0: Unknown control protocol
[ 1050.698211][    C0] cdc_wdm 10-1:1.0: Unexpected error -71
[ 1050.698762][T11153] usb 10-1: USB disconnect, device number 79
[ 1050.704008][    C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71
[ 1050.716712][    C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes
[ 1050.722879][    C0] cdc_wdm 10-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[ 1050.857166][   T30] audit: type=1400 audit(1783499602.799:2769): avc:  denied  { write } for  pid=20678 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1051.019685][   T30] audit: type=1400 audit(1783499602.968:2770): avc:  denied  { write } for  pid=20703 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1051.115401][   T30] audit: type=1400 audit(1783499603.038:2771): avc:  denied  { recv } for  pid=0 comm="swapper/1" saddr=10.128.0.169 src=30006 daddr=10.128.1.45 dest=46962 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[ 1051.212252][T15845] usb 7-1: new high-speed USB device number 62 using dummy_hcd
[ 1051.366363][T15845] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1051.384523][T15845] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1051.421254][T15845] usb 7-1: config 0 descriptor??
[ 1051.459534][T15845] cp210x 7-1:0.0: cp210x converter detected
[ 1051.595614][T11123] usb 10-1: new high-speed USB device number 80 using dummy_hcd
[ 1051.677486][   T30] audit: type=1400 audit(1783499603.613:2772): avc:  denied  { write } for  pid=20711 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1051.768925][T11123] usb 10-1: Using ep0 maxpacket: 32
[ 1051.789344][T11123] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1051.814354][T11123] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1051.849434][T11123] usb 10-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68
[ 1051.868853][T15845] cp210x 7-1:0.0: failed to get vendor val 0x0010 size 3: -71
[ 1051.884675][T11123] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1051.896799][   T30] audit: type=1400 audit(1783499603.842:2773): avc:  denied  { write } for  pid=20741 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1051.913850][T11123] usb 10-1: Product: syz
[ 1051.924385][T11123] usb 10-1: Manufacturer: syz
[ 1051.929800][T15845] cp210x 7-1:0.0: failed to get vendor val 0x000e size 678: -71
[ 1051.929850][T15845] cp210x 7-1:0.0: GPIO initialisation failed: -71
[ 1051.939246][T15845] usb 7-1: cp210x converter now attached to ttyUSB0
[ 1051.994840][T11123] usb 10-1: SerialNumber: syz
[ 1051.997988][T15845] usb 7-1: USB disconnect, device number 62
[ 1052.012087][T11123] usb 10-1: config 0 descriptor??
[ 1052.056749][T15845] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1052.078605][T11153] usb 1-1: new full-speed USB device number 39 using dummy_hcd
[ 1052.106914][T15845] cp210x 7-1:0.0: device disconnected
[ 1052.239044][T11123] usb 10-1: USB disconnect, device number 80
[ 1052.254260][T11153] usb 1-1: config 0 has an invalid interface number: 55 but max is 0
[ 1052.284515][T11153] usb 1-1: config 0 has no interface number 0
[ 1052.304467][T11153] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1052.331834][T11153] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 1052.367269][T11153] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[ 1052.410054][T11153] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64
[ 1052.438080][T11153] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1052.733927][T11153] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 1052.769089][T11153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1052.809561][T11153] usb 1-1: config 0 descriptor??
[ 1052.834599][T20742] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[ 1052.857011][T11153] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 1052.910087][   T30] audit: type=1400 audit(1783499604.845:2774): avc:  denied  { write } for  pid=20744 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1052.971083][   T30] audit: type=1400 audit(1783499604.854:2775): avc:  denied  { egress } for  pid=11123 comm="kworker/0:3" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1
[ 1053.037836][   T30] audit: type=1400 audit(1783499604.854:2776): avc:  denied  { sendto } for  pid=11123 comm="kworker/0:3" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1
[ 1053.072605][T11130] usb 7-1: new full-speed USB device number 63 using dummy_hcd
[ 1053.081367][T20767] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3500'.
[ 1053.231203][   T30] audit: type=1400 audit(1783499605.162:2777): avc:  denied  { write } for  pid=20768 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1053.273326][T11130] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1053.294902][T11130] usb 7-1: not running at top speed; connect to a high speed hub
[ 1053.319057][T11130] usb 7-1: config 14 has an invalid interface number: 57 but max is 1
[ 1053.330223][T11130] usb 7-1: config 14 has an invalid interface number: 228 but max is 1
[ 1053.349842][T11130] usb 7-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config
[ 1053.375400][T11130] usb 7-1: config 14 has no interface number 0
[ 1053.400077][T11130] usb 7-1: config 14 has no interface number 1
[ 1053.416810][T11130] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[ 1053.446334][T11130] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[ 1053.481327][T11130] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1053.506212][T11130] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64
[ 1053.532660][T11130] usb 7-1: config 14 interface 57 has no altsetting 0
[ 1053.695174][T11130] usb 7-1: config 14 interface 228 has no altsetting 0
[ 1053.829379][T20778] openvswitch: netlink: Key type 30 is not supported
[ 1053.884789][T11130] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[ 1053.896223][T11130] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1053.958050][T11130] usb 7-1: Product: syz
[ 1053.995899][T11130] usb 7-1: Manufacturer: syz
[ 1054.002205][T11130] usb 7-1: SerialNumber: syz
[ 1054.213700][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1054.241807][T20774] usb usb8: usbfs: process 20774 (syz.9.3501) did not claim interface 0 before use
[ 1054.763325][T11130] legousbtower 7-1:14.57: interrupt endpoints not found
[ 1054.829123][   T30] audit: type=1400 audit(1783499606.741:2778): avc:  denied  { write } for  pid=20771 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1054.883171][T11108] usb 1-1: USB disconnect, device number 39
[ 1054.920616][T11108] ldusb 1-1:0.55: LD USB Device #0 now disconnected
[ 1055.001609][T11130] legousbtower 7-1:14.228: get version request failed: -121
[ 1055.011038][T11130] legousbtower 7-1:14.228: probe with driver legousbtower failed with error -121
[ 1055.028752][   T30] audit: type=1400 audit(1783499606.930:2779): avc:  denied  { write } for  pid=20794 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1055.137148][T15706] Bluetooth: hci6: unexpected event for opcode 0x040d
[ 1055.182563][T20803] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[ 1055.606731][   T30] audit: type=1400 audit(1783499607.526:2780): avc:  denied  { write } for  pid=20761 comm="syz.6.3499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[ 1056.166884][T15845] usb 10-1: new high-speed USB device number 81 using dummy_hcd
[ 1056.329707][T15845] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1056.341510][T15845] usb 10-1: config 0 has no interfaces?
[ 1056.349124][T15845] usb 10-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[ 1056.358749][T15845] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1056.368747][T11130] usb 1-1: new full-speed USB device number 40 using dummy_hcd
[ 1056.382749][T15845] usb 10-1: config 0 descriptor??
[ 1056.542031][T11130] usb 1-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config
[ 1056.552958][T11130] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1056.564467][T11130] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64
[ 1056.633220][T11130] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[ 1056.648097][T11130] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1056.658051][T11130] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1056.666655][T11130] usb 1-1: Manufacturer: syz
[ 1056.673321][T11130] usb 1-1: config 0 descriptor??
[ 1056.903932][T20815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1056.914069][T20815] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1056.941738][T20815] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[ 1056.993685][T11108] usb 7-1: USB disconnect, device number 63
[ 1057.133774][T11130] rc_core: IR keymap rc-hauppauge not found
[ 1057.139933][T11130] Registered IR keymap rc-empty
[ 1057.146165][T11130] mceusb 1-1:0.0: Error: mce write urb status = -71
[ 1057.164222][T11130] mceusb 1-1:0.0: Error: mce write urb status = -71
[ 1057.185419][T11130] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[ 1057.205152][T11130] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input103
[ 1057.225502][T11130] mceusb 1-1:0.0: Error: mce write urb status = -71
[ 1057.244720][T11130] mceusb 1-1:0.0: Error: mce write urb status = -71
[ 1057.265213][T11130] mceusb 1-1:0.0: Error: mce write urb status = -71
[ 1057.284942][T11130] mceusb 1-1:0.0: Error: mce write urb status = -71
[ 1057.345801][T11130] mceusb 1-1:0.0: Error: mce write urb status = -71
[ 1057.355747][T20833] gfs2: error -5 reading superblock
[ 1057.376007][T11130] mceusb 1-1:0.0: Error: mce write urb status = -71
[ 1057.406235][T11130] mceusb 1-1:0.0: Error: mce write urb status = -71
[ 1057.446183][T11130] mceusb 1-1:0.0: Error: mce write urb status = -71
[ 1057.456143][T11108] usb 7-1: new high-speed USB device number 64 using dummy_hcd
[ 1057.476347][T11130] mceusb 1-1:0.0: Error: mce write urb status = -71
[ 1057.496315][T11130] mceusb 1-1:0.0: Error: mce write urb status = -71
[ 1057.518542][T11130] mceusb 1-1:0.0: Registered  with mce emulator interface version 1
[ 1057.527252][T11130] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1057.549858][T11130] usb 1-1: USB disconnect, device number 40
[ 1057.597549][T11108] usb 7-1: device descriptor read/64, error -71
[ 1057.677095][ T5863] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[ 1057.839147][T11108] usb 7-1: new high-speed USB device number 65 using dummy_hcd
[ 1057.849508][ T5863] usb 6-1: Using ep0 maxpacket: 8
[ 1057.880928][ T5863] usb 6-1: too many endpoints for config 0 interface 0 altsetting 254: 65, using maximum allowed: 30
[ 1057.897522][ T5863] usb 6-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 65
[ 1057.926322][ T5863] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1057.934532][ T5863] usb 6-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00
[ 1057.945445][ T5863] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1057.980465][T11108] usb 7-1: device descriptor read/64, error -71
[ 1058.004896][ T5863] usb 6-1: config 0 descriptor??
[ 1058.153689][T11108] usb usb7-port1: attempt power cycle
[ 1058.664911][T20847] could not allocate digest TFM handle sha224-ni
[ 1058.683999][T11108] usb 7-1: new high-speed USB device number 66 using dummy_hcd
[ 1058.717291][T11108] usb 7-1: device descriptor read/8, error -71
[ 1058.724263][T11153] usb 1-1: new full-speed USB device number 41 using dummy_hcd
[ 1058.747641][ T5863] microsoft 0003:045E:00F9.002B: collection stack underflow
[ 1058.755508][ T5863] microsoft 0003:045E:00F9.002B: item 0 2 0 12 parsing failed
[ 1058.767834][ T5863] microsoft 0003:045E:00F9.002B: parse failed
[ 1058.775921][ T5863] microsoft 0003:045E:00F9.002B: probe with driver microsoft failed with error -22
[ 1058.877045][T11153] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1058.891256][T11153] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1058.904946][T11153] usb 1-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00
[ 1058.914487][T11153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1058.932134][T11153] usb 1-1: config 0 descriptor??
[ 1058.943434][T11130] usb 10-1: USB disconnect, device number 81
[ 1058.977056][T11108] usb 7-1: new high-speed USB device number 67 using dummy_hcd
[ 1058.993751][T20835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1059.017515][T20835] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1059.019049][T11108] usb 7-1: device descriptor read/8, error -71
[ 1059.026365][T20857] can0: slcan on ttyS3.
[ 1059.051673][T20835] comedi comedi3: pcmda12: I/O port conflict (0x100,16)
[ 1059.089086][   T24] usb 6-1: USB disconnect, device number 43
[ 1059.161193][T11108] usb usb7-port1: unable to enumerate USB device
[ 1059.462515][T20867] sg_write: data in/out 1740286428/88 bytes for SCSI command 0x1b-- guessing data in;
[ 1059.462515][T20867]    program syz.0.3516 not setting count and/or reply_len properly
[ 1059.703408][T20857] can0 (unregistered): slcan off ttyS3.
[ 1060.235646][T11153] usbhid 1-1:0.0: can't add hid device: -71
[ 1060.252254][T11153] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 1060.353112][T11153] usb 1-1: USB disconnect, device number 41
[ 1060.822071][   T30] audit: type=1400 audit(1783499612.702:2781): avc:  denied  { write } for  pid=20862 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1061.257197][   T30] audit: type=1400 audit(1783499613.129:2782): avc:  denied  { write } for  pid=20898 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1061.551056][T20908] FAT-fs (nbd5): unable to read boot sector
[ 1061.663002][T11153] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[ 1061.894555][T11123] usb 6-1: new full-speed USB device number 44 using dummy_hcd
[ 1062.659251][ T5863] usb 7-1: new high-speed USB device number 68 using dummy_hcd
[ 1063.009641][ T5863] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1063.094283][ T5863] usb 7-1: config 0 has no interfaces?
[ 1063.139348][ T5863] usb 7-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[ 1063.220872][ T5863] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1063.352043][ T5863] usb 7-1: config 0 descriptor??
[ 1063.453107][T11153] usb 1-1: Using ep0 maxpacket: 16
[ 1063.555427][T11153] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1063.567208][T11153] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1063.580776][T11153] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1063.590213][T11153] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1063.599253][T11153] usb 1-1: Product: syz
[ 1063.603437][T11153] usb 1-1: Manufacturer: syz
[ 1063.608114][T11153] usb 1-1: SerialNumber: syz
[ 1063.617399][T11153] usb 1-1: config 0 descriptor??
[ 1063.628423][T11153] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1063.637753][T11153] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[ 1063.799027][   T30] audit: type=1400 audit(1783499615.664:2783): avc:  denied  { write } for  pid=20906 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1063.939837][T20926] nfs: Unknown parameter 'ø�Ë/üo¸éÒ1C!^WæžfK
Óü(ÈãÙ'§;OÝ'
[ 1064.082375][T20929] SELinux:  policydb magic number 0x7 does not match expected magic number 0xf97cff8c
[ 1064.092455][T20929] SELinux: failed to load policy
[ 1064.251913][   T30] audit: type=1400 audit(1783499615.992:2784): avc:  denied  { write } for  pid=20924 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1064.351701][T11153] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[ 1064.372999][T20936] gfs2: error -5 reading superblock
[ 1064.395393][T11153] em28xx 1-1:0.0: Config register raw data: 0x41
[ 1064.753131][T11123] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1065.480600][T11123] usb 6-1: unable to read config index 0 descriptor/start: -71
[ 1065.489027][T11123] usb 6-1: can't read configurations, error -71
[ 1065.514335][T11153] usb 7-1: USB disconnect, device number 68
[ 1065.614888][T20945] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3534'.
[ 1066.078086][T15845] usb 1-1: USB disconnect, device number 42
[ 1066.110390][T15845] em28xx 1-1:0.0: Disconnecting em28xx
[ 1066.156452][T15845] em28xx 1-1:0.0: Freeing device
[ 1066.328248][T20956] loop8: detected capacity change from 0 to 7
[ 1066.396464][T20956]  loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2
[ 1066.424567][T20956] loop8: partition table partially beyond EOD, truncated
[ 1066.488866][T20956] loop8: p1 size 1905483274 extends beyond EOD, truncated
[ 1066.581013][T20956] loop8: p2 start 121280928 is beyond EOD, truncated
[ 1066.664000][T20100] udevd[20100]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory
[ 1067.345790][T15845] usb 7-1: new low-speed USB device number 69 using dummy_hcd
[ 1067.353403][T11153] usb 1-1: new full-speed USB device number 43 using dummy_hcd
[ 1067.530488][T11153] usb 1-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config
[ 1067.542868][T15845] usb 7-1: config 0 has no interfaces?
[ 1067.551368][T11153] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1067.582656][T15845] usb 7-1: string descriptor 0 read error: -22
[ 1067.590224][T11153] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64
[ 1067.606743][T15845] usb 7-1: New USB device found, idVendor=054c, idProduct=087d, bcdDevice=15.88
[ 1067.618841][T11153] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[ 1067.632235][T15845] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1067.662752][T11153] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1067.672292][T15845] usb 7-1: config 0 descriptor??
[ 1067.680266][T11153] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1067.706332][T11153] usb 1-1: Manufacturer: syz
[ 1067.727464][T11153] usb 1-1: config 0 descriptor??
[ 1067.955203][T11123] usb 7-1: USB disconnect, device number 69
[ 1068.050764][T20972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1068.067738][T20972] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1068.124526][T20972] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[ 1068.382382][T11153] rc_core: IR keymap rc-hauppauge not found
[ 1068.389441][   T30] audit: type=1400 audit(1783499620.227:2785): avc:  denied  { nosuid_transition } for  pid=20981 comm="syz.5.3543" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1
[ 1068.412410][T11153] Registered IR keymap rc-empty
[ 1068.431267][T11153] mceusb 1-1:0.0: Error: mce write urb status = -71
[ 1068.439119][   T30] audit: type=1400 audit(1783499620.247:2786): avc:  denied  { transition } for  pid=20981 comm="syz.5.3543" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1445 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1
[ 1068.477621][T11153] mceusb 1-1:0.0: Error: mce write urb status = -71
[ 1068.518201][T11153] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[ 1068.547499][   T30] audit: type=1400 audit(1783499620.257:2787): avc:  denied  { entrypoint } for  pid=20981 comm="syz.5.3543" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1445 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[ 1068.600234][T11153] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input104
[ 1068.640722][T11153] mceusb 1-1:0.0: Error: mce write urb status = -71
[ 1068.664845][   T30] audit: type=1400 audit(1783499620.257:2788): avc:  denied  { share } for  pid=20981 comm="syz.5.3543" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1
[ 1068.712677][T11153] mceusb 1-1:0.0: Error: mce write urb status = -71
[ 1068.781690][   T30] audit: type=1400 audit(1783499620.257:2789): avc:  denied  { noatsecure } for  pid=20981 comm="syz.5.3543" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1
[ 1068.809001][T11153] mceusb 1-1:0.0: Error: mce write urb status = -71
[ 1068.852008][   T12] Bluetooth: (null): Invalid header checksum
[ 1068.860921][   T12] Bluetooth: (null): Invalid header checksum
[ 1068.867055][T11153] mceusb 1-1:0.0: Error: mce write urb status = -71
[ 1068.895105][T11153] mceusb 1-1:0.0: Error: mce write urb status = -71
[ 1068.949738][T11153] mceusb 1-1:0.0: Error: mce write urb status = -71
[ 1068.961873][   T36] Bluetooth: (null): Invalid header checksum
[ 1068.985990][T11123] usb 7-1: new high-speed USB device number 70 using dummy_hcd
[ 1068.993759][T11108] usb 10-1: new full-speed USB device number 82 using dummy_hcd
[ 1069.006584][T11153] mceusb 1-1:0.0: Error: mce write urb status = -71
[ 1069.046089][T11153] mceusb 1-1:0.0: Error: mce write urb status = -71
[ 1069.072641][   T30] audit: type=1400 audit(1783499620.904:2790): avc:  denied  { write } for  pid=20996 comm="syz.4.3547" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[ 1069.180062][T17328] Bluetooth: (null): Invalid header checksum
[ 1069.183121][T11153] mceusb 1-1:0.0: Error: mce write urb status = -71
[ 1069.190799][T11108] usb 10-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1
[ 1069.204849][T11123] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1069.215247][T17328] Bluetooth: (null): Invalid header checksum
[ 1069.222988][T11123] usb 7-1: config 0 has no interfaces?
[ 1069.229198][T11108] usb 10-1: config 36 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64
[ 1069.240722][T11123] usb 7-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[ 1069.254350][T11123] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1069.263625][T11108] usb 10-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[ 1069.280214][T11108] usb 10-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[ 1069.284407][T11153] mceusb 1-1:0.0: Error: mce write urb status = -71
[ 1069.297966][T11123] usb 7-1: config 0 descriptor??
[ 1069.307366][   T36] Bluetooth: (null): Invalid header checksum
[ 1069.317286][T11108] usb 10-1: Manufacturer: syz
[ 1069.327719][T11108] usb 10-1: SerialNumber: syz
[ 1069.373461][T11153] mceusb 1-1:0.0: Registered  with mce emulator interface version 1
[ 1069.402997][T11153] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1069.419757][ T6792] Bluetooth: (null): Invalid header checksum
[ 1069.444240][T11153] usb 1-1: USB disconnect, device number 43
[ 1069.465922][T21012] loop8: detected capacity change from 0 to 7
[ 1069.505441][T21012] Dev loop8: unable to read RDB block 7
[ 1069.529830][ T6792] Bluetooth: (null): Invalid header checksum
[ 1069.537158][T21012]  loop8: unable to read partition table
[ 1069.546812][T21012] loop8: partition table beyond EOD, truncated
[ 1069.564014][T20985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1069.573363][T20985] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1069.605627][T11108] usbhid 10-1:36.0: couldn't find an input interrupt endpoint
[ 1069.626867][T21012] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[ 1069.641251][ T6792] Bluetooth: (null): Invalid header checksum
[ 1069.667519][T11108] usb 10-1: USB disconnect, device number 82
[ 1069.846842][   T30] audit: type=1400 audit(1783499621.669:2791): avc:  denied  { mount } for  pid=21018 comm="syz.4.3553" name="/" dev="pstore" ino=411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1
[ 1069.934635][   T30] audit: type=1400 audit(1783499621.759:2792): avc:  denied  { unmount } for  pid=20320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1
[ 1070.121473][T11108] usb 6-1: new high-speed USB device number 46 using dummy_hcd
[ 1070.259778][T21032] gfs2: error -5 reading superblock
[ 1070.283126][T11108] usb 6-1: Using ep0 maxpacket: 8
[ 1070.303943][T11108] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1070.338729][T11108] usb 6-1: config 7 has an invalid interface number: 234 but max is 0
[ 1070.357770][T11108] usb 6-1: config 7 has no interface number 0
[ 1070.369135][T11108] usb 6-1: config 7 interface 234 altsetting 5 has an endpoint descriptor with address 0x65, changing to 0x5
[ 1070.391132][T11108] usb 6-1: config 7 interface 234 has no altsetting 0
[ 1070.401517][T11108] usb 6-1: New USB device found, idVendor=413c, idProduct=8185, bcdDevice=58.bb
[ 1070.413758][T11108] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1070.430743][T11108] usb 6-1: Product: syz
[ 1070.436778][T11108] usb 6-1: Manufacturer: syz
[ 1070.441538][T11108] usb 6-1: SerialNumber: syz
[ 1072.199875][ T5863] usb 7-1: USB disconnect, device number 70
[ 1074.035063][T21059] pim6reg9: entered allmulticast mode
[ 1074.319617][T11108] IPVS: starting estimator thread 0...
[ 1074.414210][T21066] IPVS: using max 76 ests per chain, 182400 per kthread
[ 1074.736971][T11108] usb 6-1: USB disconnect, device number 46
[ 1076.266724][T11108] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[ 1076.444102][T11108] usb 1-1: Using ep0 maxpacket: 8
[ 1076.462089][T11108] usb 1-1: too many endpoints for config 0 interface 0 altsetting 254: 65, using maximum allowed: 30
[ 1076.487604][T11108] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 65
[ 1076.525327][T11108] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1076.538709][T11108] usb 1-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00
[ 1076.556936][T11108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1076.574316][T11153] usb 7-1: new high-speed USB device number 71 using dummy_hcd
[ 1076.587525][T11108] usb 1-1: config 0 descriptor??
[ 1076.625284][T15845] usb 6-1: new full-speed USB device number 47 using dummy_hcd
[ 1076.697038][T21090] loop8: detected capacity change from 0 to 7
[ 1076.754765][T21090]  loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2
[ 1076.778101][T21090] loop8: partition table partially beyond EOD, truncated
[ 1076.795314][T15845] usb 6-1: device descriptor read/64, error -71
[ 1076.804262][T21090] loop8: p1 size 1905483274 extends beyond EOD, truncated
[ 1076.804371][T11153] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1076.837798][T21090] loop8: p2 start 121280928 is beyond EOD, truncated
[ 1076.844713][T11153] usb 7-1: config 0 has no interfaces?
[ 1076.871586][T11153] usb 7-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[ 1076.906514][T11153] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1076.942125][T11153] usb 7-1: config 0 descriptor??
[ 1077.003598][T20100] udevd[20100]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory
[ 1077.032215][T11108] microsoft 0003:045E:00F9.002C: collection stack underflow
[ 1077.063160][T11108] microsoft 0003:045E:00F9.002C: item 0 2 0 12 parsing failed
[ 1077.080057][T15845] usb 6-1: new full-speed USB device number 48 using dummy_hcd
[ 1077.095072][T21092] 9p: Bad value for 'rfdno'
[ 1077.105138][T11108] microsoft 0003:045E:00F9.002C: parse failed
[ 1077.128857][T11108] microsoft 0003:045E:00F9.002C: probe with driver microsoft failed with error -22
[ 1077.177424][T21092] 9p: Bad value for 'rfdno'
[ 1077.227575][T15845] usb 6-1: device descriptor read/64, error -71
[ 1077.348259][T15845] usb usb6-port1: attempt power cycle
[ 1077.378971][   T10] block nbd8: Possible stuck request ffff888029227000: control (read@0,1024B). Runtime 120 seconds
[ 1077.379009][   T10] block nbd8: Possible stuck request ffff8880292271c0: control (read@1024,1024B). Runtime 120 seconds
[ 1077.379032][   T10] block nbd8: Possible stuck request ffff888029227380: control (read@2048,1024B). Runtime 120 seconds
[ 1077.379055][   T10] block nbd8: Possible stuck request ffff888029227540: control (read@3072,1024B). Runtime 120 seconds
[ 1077.709755][T15845] usb 6-1: new full-speed USB device number 49 using dummy_hcd
[ 1077.730336][T15845] usb 6-1: device descriptor read/8, error -71
[ 1077.884313][T21099] gfs2: error -5 reading superblock
[ 1077.981429][T15845] usb 6-1: new full-speed USB device number 50 using dummy_hcd
[ 1078.012873][T15845] usb 6-1: device descriptor read/8, error -71
[ 1078.132414][T15845] usb usb6-port1: unable to enumerate USB device
[ 1079.056992][T15845] usb 1-1: USB disconnect, device number 44
[ 1079.215582][T21106] loop8: detected capacity change from 0 to 7
[ 1079.228501][T21106]  loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2
[ 1079.269398][T21106] loop8: partition table partially beyond EOD, truncated
[ 1079.278898][T21106] loop8: p1 size 1905483274 extends beyond EOD, truncated
[ 1079.315573][T21106] loop8: p2 start 121280928 is beyond EOD, truncated
[ 1079.328038][ T5863] usb 7-1: USB disconnect, device number 71
[ 1079.463537][T20100] udevd[20100]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory
[ 1079.485963][T21111] 9p: Bad value for 'wfdno'
[ 1079.515546][   T30] audit: type=1326 audit(1783499631.291:2793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21107 comm="syz.5.3574" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6e099de59 code=0x7fc00000
[ 1079.595110][   T30] audit: type=1326 audit(1783499631.370:2794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21107 comm="syz.5.3574" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc6e099de59 code=0x7fc00000
[ 1079.672570][T21116] set match dimension is over the limit!
[ 1079.757373][T21122] FAULT_INJECTION: forcing a failure.
[ 1079.757373][T21122] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1079.781430][T21122] CPU: 0 UID: 0 PID: 21122 Comm: syz.6.3578 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1079.781460][T21122] Tainted: [L]=SOFTLOCKUP
[ 1079.781467][T21122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[ 1079.781476][T21122] Call Trace:
[ 1079.781482][T21122]  <TASK>
[ 1079.781489][T21122]  dump_stack_lvl+0x100/0x190
[ 1079.781516][T21122]  should_fail_ex.cold+0x5/0xa
[ 1079.781541][T21122]  _copy_from_user+0x2e/0xd0
[ 1079.781562][T21122]  io_uring_setup+0xc0/0x160
[ 1079.781588][T21122]  ? __pfx_io_uring_setup+0x10/0x10
[ 1079.781608][T21122]  ? find_held_lock+0x2b/0x80
[ 1079.781631][T21122]  ? avc_has_perm_noaudit+0x11e/0x3b0
[ 1079.781647][T21122]  ? avc_has_perm_noaudit+0x11e/0x3b0
[ 1079.781680][T21122]  ? ksys_write+0x1ac/0x250
[ 1079.781703][T21122]  ? __pfx_ksys_write+0x10/0x10
[ 1079.781735][T21122]  __x64_sys_io_uring_setup+0xc2/0x170
[ 1079.781757][T21122]  do_syscall_64+0x115/0x870
[ 1079.781779][T21122]  ? clear_bhb_loop+0x40/0x90
[ 1079.781800][T21122]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1079.781818][T21122] RIP: 0033:0x7f31d579de59
[ 1079.781834][T21122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1079.781851][T21122] RSP: 002b:00007f31d667e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9
[ 1079.781869][T21122] RAX: ffffffffffffffda RBX: 00007f31d5a25fa0 RCX: 00007f31d579de59
[ 1079.781881][T21122] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000001
[ 1079.781890][T21122] RBP: 00007f31d667e090 R08: 0000000000000000 R09: 0000000000000000
[ 1079.781900][T21122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1079.781911][T21122] R13: 00007f31d5a26038 R14: 00007f31d5a25fa0 R15: 00007ffe6a77ac58
[ 1079.781935][T21122]  </TASK>
[ 1080.277603][T21129] xt_connbytes: Forcing CT accounting to be enabled
[ 1080.329134][T21129] set match dimension is over the limit!
[ 1081.985465][T21148] openvswitch: netlink: Key type 30 is not supported
[ 1082.050372][T15706] Bluetooth: hci4: command 0x0406 tx timeout
[ 1082.420033][T21146] usb usb8: usbfs: process 21146 (syz.5.3584) did not claim interface 0 before use
[ 1082.652547][T15845] usb 10-1: new high-speed USB device number 83 using dummy_hcd
[ 1082.801985][T21163] FAULT_INJECTION: forcing a failure.
[ 1082.801985][T21163] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1082.836566][T15845] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1082.852973][T21163] CPU: 1 UID: 0 PID: 21163 Comm: syz.0.3589 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1082.853005][T21163] Tainted: [L]=SOFTLOCKUP
[ 1082.853011][T21163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[ 1082.853021][T21163] Call Trace:
[ 1082.853028][T21163]  <TASK>
[ 1082.853036][T21163]  dump_stack_lvl+0x100/0x190
[ 1082.853063][T21163]  should_fail_ex.cold+0x5/0xa
[ 1082.853086][T21163]  _copy_to_user+0x32/0xd0
[ 1082.853110][T21163]  simple_read_from_buffer+0xcb/0x170
[ 1082.853138][T21163]  proc_fail_nth_read+0x1af/0x230
[ 1082.853162][T21163]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1082.853188][T21163]  ? rw_verify_area+0xce/0x6d0
[ 1082.853210][T21163]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1082.853233][T21163]  vfs_read+0x1e4/0xb40
[ 1082.853260][T21163]  ? __pfx_vfs_read+0x10/0x10
[ 1082.853282][T21163]  ? __fget_files+0x215/0x3d0
[ 1082.853315][T21163]  ? __fget_files+0x21f/0x3d0
[ 1082.853347][T21163]  ksys_read+0x12a/0x250
[ 1082.853369][T21163]  ? __pfx_ksys_read+0x10/0x10
[ 1082.853399][T21163]  do_syscall_64+0x115/0x870
[ 1082.853423][T21163]  ? clear_bhb_loop+0x40/0x90
[ 1082.853445][T21163]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1082.853462][T21163] RIP: 0033:0x7f1f2f55e68e
[ 1082.853477][T21163] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1082.853493][T21163] RSP: 002b:00007f1f303e9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1082.853511][T21163] RAX: ffffffffffffffda RBX: 00007f1f303ea6c0 RCX: 00007f1f2f55e68e
[ 1082.853522][T21163] RDX: 000000000000000f RSI: 00007f1f303ea0a0 RDI: 0000000000000003
[ 1082.853533][T21163] RBP: 00007f1f303ea090 R08: 0000000000000000 R09: 0000000000000000
[ 1082.853543][T21163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1082.853552][T21163] R13: 00007f1f2f826038 R14: 00007f1f2f825fa0 R15: 00007ffcdbec4778
[ 1082.853578][T21163]  </TASK>
[ 1083.056827][T15845] usb 10-1: config 0 has no interfaces?
[ 1083.064797][T15845] usb 10-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[ 1083.074004][T15845] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1083.084029][T15845] usb 10-1: config 0 descriptor??
[ 1083.343908][T21167] netlink: 'syz.0.3590': attribute type 4 has an invalid length.
[ 1083.968930][T11130] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[ 1083.993267][T21174] 9p: Could not find request transport: fd0x000000000000000a
[ 1084.035798][T21177] gfs2: error -5 reading superblock
[ 1084.173353][T11130] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1084.197772][T11130] usb 1-1: config 63 has an invalid interface number: 66 but max is 0
[ 1084.217648][T11130] usb 1-1: config 63 has an invalid descriptor of length 23, skipping remainder of the config
[ 1084.255331][T11130] usb 1-1: config 63 has no interface number 0
[ 1084.274801][T11130] usb 1-1: config 63 interface 66 has no altsetting 0
[ 1084.320953][T11130] usb 1-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4
[ 1084.330748][T11130] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1084.338848][T11130] usb 1-1: Product: syz
[ 1084.353664][T11130] usb 1-1: Manufacturer: syz
[ 1084.362819][T11130] usb 1-1: SerialNumber: syz
[ 1084.855684][T11130] uvcvideo 1-1:63.66: Found UVC 0.07 device syz (174f:8acf)
[ 1084.885150][T11130] uvcvideo 1-1:63.66: No valid video chain found.
[ 1084.927960][T11130] usb 1-1: USB disconnect, device number 45
[ 1085.427791][ T5863] usb 10-1: USB disconnect, device number 83
[ 1085.606073][T11153] usb 1-1: new full-speed USB device number 46 using dummy_hcd
[ 1085.777878][T11153] usb 1-1: config 193 has an invalid interface number: 121 but max is 0
[ 1085.788056][T11153] usb 1-1: config 193 has no interface number 0
[ 1085.794319][T11153] usb 1-1: config 193 interface 121 has no altsetting 0
[ 1085.803914][T11153] usb 1-1: string descriptor 0 read error: -22
[ 1085.811068][T11153] usb 1-1: New USB device found, idVendor=0408, idProduct=4033, bcdDevice=32.0a
[ 1085.820756][T11153] usb 1-1: New USB device strings: Mfr=1, Product=1, SerialNumber=3
[ 1085.846359][ T5863] usb 10-1: new full-speed USB device number 84 using dummy_hcd
[ 1085.846359][T15845] usb 6-1: new high-speed USB device number 51 using dummy_hcd
[ 1085.887158][T11108] usb 7-1: new high-speed USB device number 72 using dummy_hcd
[ 1086.000488][ T5863] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1086.012606][ T5863] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1086.017203][T15845] usb 6-1: Using ep0 maxpacket: 8
[ 1086.023498][ T5863] usb 10-1: Product: syz
[ 1086.030835][ T5863] usb 10-1: Manufacturer: syz
[ 1086.032089][T15845] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1086.038334][ T5863] usb 10-1: SerialNumber: syz
[ 1086.046417][T15845] usb 6-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40
[ 1086.059096][T15845] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1086.059513][   T11] usb 1-1: USB disconnect, device number 46
[ 1086.067239][T15845] usb 6-1: Product: syz
[ 1086.079652][T11108] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[ 1086.079672][T15845] usb 6-1: Manufacturer: syz
[ 1086.079689][T15845] usb 6-1: SerialNumber: syz
[ 1086.100441][T11108] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[ 1086.114430][ T5863] usb 10-1: config 0 descriptor??
[ 1086.125089][T11108] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[ 1086.138393][T11108] usb 7-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[ 1086.150196][T11108] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1086.159814][T11108] usb 7-1: Product: syz
[ 1086.164005][T11108] usb 7-1: Manufacturer: syz
[ 1086.169218][T11108] usb 7-1: SerialNumber: syz
[ 1086.176008][T11108] usb 7-1: config 0 descriptor??
[ 1086.184616][T11108] iguanair 7-1:0.0: probe with driver iguanair failed with error -12
[ 1086.352765][ T5863] dvb_usb_rtl28xxu 10-1:0.0: chip type detection failed -71
[ 1086.362636][ T5863] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1086.366116][T15845] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1086.381925][ T5863] usb 10-1: USB disconnect, device number 84
[ 1086.389857][T15845] usb 6-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8213); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues
[ 1086.429202][T15845] usb 6-1: Error initialising Scarlett Gen 3 Mixer Driver: -22
[ 1086.756648][T17123] Bluetooth: hci4: unexpected event for opcode 0x040d
[ 1086.787735][T15845] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1086.807511][T20100] udevd[20100]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1086.825638][T15845] usb 6-1: USB disconnect, device number 51
[ 1086.910354][T21188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1086.919070][T21188] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1086.935482][T11153] usb 7-1: USB disconnect, device number 72
[ 1086.990323][T21195] tmpfs: Bad value for 'mpol'
[ 1087.789862][T21199] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3599'.
[ 1087.824289][T21199] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3599'.
[ 1087.982314][T21210] set match dimension is over the limit!
[ 1088.136468][ T5863] usb 6-1: new high-speed USB device number 52 using dummy_hcd
[ 1088.169154][T11108] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[ 1088.497652][ T5863] usb 6-1: device descriptor read/64, error -71
[ 1088.507747][T11108] usb 1-1: Using ep0 maxpacket: 32
[ 1088.516320][T11108] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[ 1088.527972][T11108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[ 1088.544554][T11108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[ 1088.558320][T11108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[ 1088.612892][T11108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[ 1088.639245][T11108] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[ 1088.652839][T11108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1088.666028][T11108] usb 1-1: Product: syz
[ 1088.672899][T11108] usb 1-1: Manufacturer: syz
[ 1088.681035][T11108] usb 1-1: SerialNumber: syz
[ 1088.695694][T11108] usb 1-1: config 0 descriptor??
[ 1088.738789][ T5863] usb 6-1: new high-speed USB device number 53 using dummy_hcd
[ 1088.868833][T11153] usb 10-1: new high-speed USB device number 85 using dummy_hcd
[ 1088.879314][ T5863] usb 6-1: device descriptor read/64, error -71
[ 1088.989862][ T5863] usb usb6-port1: attempt power cycle
[ 1089.033408][T11153] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1089.043816][T11153] usb 10-1: config 0 has no interfaces?
[ 1089.050502][T11153] usb 10-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[ 1089.059750][T11153] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1089.070380][T11153] usb 10-1: config 0 descriptor??
[ 1089.113328][T11108] iforce 1-1:0.0: usb_submit_urb failed: -32
[ 1089.119630][T11108] input input106: Device does not respond to id packet M
[ 1089.132920][T11108] iforce 1-1:0.0: usb_submit_urb failed: -71
[ 1089.142425][T11108] input input106: Device does not respond to id packet P
[ 1089.150820][T11108] iforce 1-1:0.0: usb_submit_urb failed: -71
[ 1089.156901][T11108] input input106: Device does not respond to id packet B
[ 1089.164835][T11108] iforce 1-1:0.0: usb_submit_urb failed: -71
[ 1089.171425][T11108] input input106: Device does not respond to id packet N
[ 1089.178817][T11108] iforce 1-1:0.0: usb_submit_urb failed: -71
[ 1089.186200][T11108] iforce 1-1:0.0: usb_submit_urb failed: -71
[ 1089.192923][T11108] iforce 1-1:0.0: usb_submit_urb failed: -71
[ 1089.199157][T11108] iforce 1-1:0.0: usb_submit_urb failed: -71
[ 1089.212391][T11108] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input106
[ 1089.233346][T11108] usb 1-1: USB disconnect, device number 47
[ 1089.331189][ T5863] usb 6-1: new high-speed USB device number 54 using dummy_hcd
[ 1089.352290][ T5863] usb 6-1: device descriptor read/8, error -71
[ 1089.594284][ T5863] usb 6-1: new high-speed USB device number 55 using dummy_hcd
[ 1089.622624][ T5863] usb 6-1: device descriptor read/8, error -71
[ 1089.731416][T21222] binder: BINDER_SET_CONTEXT_MGR already set
[ 1089.738168][ T5863] usb usb6-port1: unable to enumerate USB device
[ 1089.739971][T21222] binder: 21220:21222 ioctl 4018620d 200000003280 returned -16
[ 1089.753547][T21221] binder: 21220:21221 ioctl c0306201 200000000080 returned -14
[ 1089.989636][T21228] gfs2: error -5 reading superblock
[ 1090.841725][T21236] xt_hashlimit: size too large, truncated to 1048576
[ 1092.460318][T21250] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3612'.
[ 1092.463721][ T5863] usb 10-1: USB disconnect, device number 85
[ 1093.094461][T21271] input: syz0 as /devices/virtual/input/input107
[ 1093.235777][T15845] usb 6-1: new high-speed USB device number 56 using dummy_hcd
[ 1093.396621][T15845] usb 6-1: Using ep0 maxpacket: 32
[ 1093.405162][T15845] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1093.415973][T15845] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1093.427338][T15845] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1093.439232][T15845] usb 6-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice= 0.40
[ 1093.449624][T15845] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1093.457902][T15845] usb 6-1: Product: syz
[ 1093.462453][T15845] usb 6-1: Manufacturer: syz
[ 1093.468026][T15845] usb 6-1: SerialNumber: syz
[ 1093.478845][T15845] usb 6-1: 0:1 : does not exist
[ 1093.487591][T15845] usb 6-1: BAAD HEADSET ADAPTER c_chmask mismatch
[ 1093.518272][T15845] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1093.628096][T20100] udevd[20100]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1093.701365][T21270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1093.715351][T21270] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1093.774932][T21270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1093.783969][T11108] usb 10-1: new full-speed USB device number 86 using dummy_hcd
[ 1093.805204][T21270] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1093.856110][ T5863] usb 6-1: USB disconnect, device number 56
[ 1093.950800][T11108] usb 10-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config
[ 1093.963168][T11108] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1093.990593][T11108] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64
[ 1094.015988][T11108] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[ 1094.046671][T11108] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1094.057518][T11108] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1094.071500][T11108] usb 10-1: Manufacturer: syz
[ 1094.092258][T11108] usb 10-1: config 0 descriptor??
[ 1094.334863][T21274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1094.349649][T21274] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1094.525517][T21274] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[ 1094.698427][T21284] Cannot find set identified by id 0 to match
[ 1094.793292][T11108] rc_core: IR keymap rc-hauppauge not found
[ 1094.832375][T17123] Bluetooth: hci6: unexpected event for opcode 0x040d
[ 1095.086792][T11108] Registered IR keymap rc-empty
[ 1095.128197][T11108] mceusb 10-1:0.0: Error: mce write urb status = -71
[ 1095.164690][T11108] mceusb 10-1:0.0: Error: mce write urb status = -71
[ 1095.209841][T11108] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0
[ 1095.258355][T11108] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input108
[ 1095.333043][T11108] mceusb 10-1:0.0: Error: mce write urb status = -71
[ 1095.365401][T11108] mceusb 10-1:0.0: Error: mce write urb status = -71
[ 1095.501112][T11108] mceusb 10-1:0.0: Error: mce write urb status = -71
[ 1095.756694][T21303] hfsplus: unable to find HFS+ superblock
[ 1095.908596][ T5863] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[ 1095.947102][T11108] mceusb 10-1:0.0: Error: mce write urb status = -71
[ 1095.976102][T11108] mceusb 10-1:0.0: Error: mce write urb status = -71
[ 1096.007613][T11108] mceusb 10-1:0.0: Error: mce write urb status = -71
[ 1096.057416][T11108] mceusb 10-1:0.0: Error: mce write urb status = -71
[ 1096.078002][ T5863] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1096.090891][T11108] mceusb 10-1:0.0: Error: mce write urb status = -71
[ 1096.100940][ T5863] usb 1-1: config 0 has no interfaces?
[ 1096.117660][ T5863] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[ 1096.132602][T11108] mceusb 10-1:0.0: Error: mce write urb status = -71
[ 1096.143215][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1096.167065][T11108] mceusb 10-1:0.0: Error: mce write urb status = -71
[ 1096.183703][ T5863] usb 1-1: config 0 descriptor??
[ 1096.266618][T11108] mceusb 10-1:0.0: Registered  with mce emulator interface version 1
[ 1096.302504][T11108] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1096.352780][T11108] usb 10-1: USB disconnect, device number 86
[ 1096.408476][T21313] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3629'.
[ 1096.426147][T21313] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3629'.
[ 1096.728580][   T24] usb 7-1: new full-speed USB device number 73 using dummy_hcd
[ 1097.030183][   T24] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1097.046037][   T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1097.117946][   T24] usb 7-1: config 0 descriptor??
[ 1097.274262][T21325] gfs2: error -5 reading superblock
[ 1097.358589][   T24] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor
[ 1097.825858][   T24] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2
[ 1097.832764][   T24] [drm] Initialized udl on minor 2
[ 1097.875250][T21336] loop8: detected capacity change from 0 to 7
[ 1097.895268][T21336] Dev loop8: unable to read RDB block 7
[ 1097.913902][T21336]  loop8: unable to read partition table
[ 1097.930646][T21336] loop8: partition table beyond EOD, truncated
[ 1097.952122][T21336] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[ 1097.985534][T21331] openvswitch: netlink: Key type 30 is not supported
[ 1098.050823][   T24] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9
[ 1098.071086][   T24] udl 7-1:0.0: [drm] Cannot find any crtc or sizes
[ 1098.085836][T15845] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1098.100166][   T24] usb 7-1: USB disconnect, device number 73
[ 1098.110761][T15845] udl 7-1:0.0: [drm] Cannot find any crtc or sizes
[ 1098.396394][   T24] usb 1-1: USB disconnect, device number 48
[ 1098.537849][   T30] audit: type=1400 audit(1783499650.244:2795): avc:  denied  { getattr } for  pid=21344 comm="syz.4.3641" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=80214 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1098.595604][   T30] audit: type=1400 audit(1783499650.284:2796): avc:  denied  { create } for  pid=21344 comm="syz.4.3641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1
[ 1099.695416][T21364] libceph: resolve '400' (ret=-3): failed
[ 1099.851301][T21389] xt_connbytes: Forcing CT accounting to be enabled
[ 1099.859096][   T30] audit: type=1326 audit(1783499651.540:2797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21385 comm="syz.4.3651" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f859de59 code=0x7ffc0000
[ 1099.880020][T21389] set match dimension is over the limit!
[ 1099.911468][   T30] audit: type=1326 audit(1783499651.550:2798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21385 comm="syz.4.3651" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f75f859de59 code=0x7ffc0000
[ 1099.941207][   T30] audit: type=1326 audit(1783499651.550:2799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21385 comm="syz.4.3651" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f859de59 code=0x7ffc0000
[ 1099.968201][   T30] audit: type=1326 audit(1783499651.550:2800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21385 comm="syz.4.3651" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f75f855e68e code=0x7ffc0000
[ 1100.001440][T11108] usb 6-1: new high-speed USB device number 57 using dummy_hcd
[ 1100.007137][   T30] audit: type=1326 audit(1783499651.550:2801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21385 comm="syz.4.3651" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f75f859daeb code=0x7ffc0000
[ 1100.041436][   T30] audit: type=1326 audit(1783499651.550:2802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21385 comm="syz.4.3651" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f75f859daeb code=0x7ffc0000
[ 1100.087478][   T30] audit: type=1326 audit(1783499651.579:2803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21385 comm="syz.4.3651" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f75f859daeb code=0x7ffc0000
[ 1100.115553][   T30] audit: type=1326 audit(1783499651.579:2804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21385 comm="syz.4.3651" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f75f859daeb code=0x7ffc0000
[ 1100.224797][T11108] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1100.235794][T11108] usb 6-1: config 0 has no interfaces?
[ 1100.257324][T11108] usb 6-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[ 1100.277779][T11108] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1100.294480][T11108] usb 6-1: config 0 descriptor??
[ 1100.413246][T21396] batadv_slave_1: entered promiscuous mode
[ 1100.420342][T21396] batadv_slave_1: left promiscuous mode
[ 1100.642035][T11153] usb 7-1: new high-speed USB device number 74 using dummy_hcd
[ 1100.692263][   T24] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[ 1100.794516][T11153] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1100.803606][T11153] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1100.814780][T11153] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1100.827143][T11153] usb 7-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[ 1100.837187][T11153] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1100.845276][T11153] usb 7-1: Product: syz
[ 1100.849669][T11153] usb 7-1: Manufacturer: syz
[ 1100.854433][   T24] usb 1-1: Using ep0 maxpacket: 32
[ 1100.859639][T11153] usb 7-1: SerialNumber: syz
[ 1100.866020][   T24] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[ 1100.878510][   T24] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7
[ 1100.891781][T11153] usb 7-1: selecting invalid altsetting 1
[ 1100.901805][T11153] usb 7-1: unit 6 not found!
[ 1100.912696][   T24] usb 1-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40
[ 1100.922464][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1100.930680][   T24] usb 1-1: Product: syz
[ 1100.946585][   T24] usb 1-1: Manufacturer: syz
[ 1100.953640][   T24] usb 1-1: SerialNumber: syz
[ 1100.959644][T11153] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1100.995886][T20100] udevd[20100]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1101.117788][T21393] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[ 1101.182948][   T24] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1101.207796][   T24] usb 1-1: disable ehci-hcd to run US-144
[ 1101.216125][   T24] usb 1-1: USB disconnect, device number 49
[ 1101.250010][T20100] udevd[20100]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1101.633278][   T24] usb 7-1: USB disconnect, device number 74
[ 1102.970470][T15845] usb 6-1: USB disconnect, device number 57
[ 1104.317985][T21428] syzkaller1: entered promiscuous mode
[ 1104.323558][T21428] syzkaller1: entered allmulticast mode
[ 1105.037492][T21447] kvm: pic: non byte read
[ 1105.047309][T21447] kvm: pic: non byte read
[ 1105.057370][T21447] kvm: pic: level sensitive irq not supported
[ 1105.057433][T21447] kvm: pic: non byte read
[ 1105.082493][T21447] kvm: pic: level sensitive irq not supported
[ 1105.082557][T21447] kvm: pic: non byte read
[ 1105.348540][T15845] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[ 1105.558647][T15845] usb 1-1: Using ep0 maxpacket: 8
[ 1105.573031][T15845] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1105.618759][T15845] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1105.671995][T15845] usb 1-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= 0.40
[ 1105.681565][T15845] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1105.690916][T15845] usb 1-1: Product: syz
[ 1105.695204][T15845] usb 1-1: Manufacturer: syz
[ 1105.699849][T15845] usb 1-1: SerialNumber: syz
[ 1105.779807][T21457] set match dimension is over the limit!
[ 1106.074609][T15845] usb 1-1: invalid MIDI EP
[ 1106.085631][T15845] usb 1-1: snd-bcd2000: error during probing
[ 1106.096546][T15845] snd-bcd2000 1-1:1.0: probe with driver snd-bcd2000 failed with error -22
[ 1106.113615][T15845] usb 1-1: USB disconnect, device number 50
[ 1106.159770][   T24] usb 6-1: new high-speed USB device number 58 using dummy_hcd
[ 1106.167625][T21463] netlink: 'syz.6.3671': attribute type 10 has an invalid length.
[ 1106.179165][   T30] audit: type=1400 audit(1783499657.829:2805): avc:  denied  { map } for  pid=21462 comm="syz.6.3671" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1
[ 1106.232353][T21463] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1106.239847][T21463] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1106.303945][T21463] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1106.311107][T21463] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1106.318630][T21463] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1106.325754][T21463] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1106.389136][T21463] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1106.396523][T21463] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1106.434311][   T24] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1106.451155][   T24] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[ 1106.490798][   T24] usb 6-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[ 1106.514190][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1106.532293][   T24] usb 6-1: Product: syz
[ 1106.546545][   T24] usb 6-1: Manufacturer: syz
[ 1106.562678][   T24] usb 6-1: SerialNumber: syz
[ 1106.803930][   T24] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1107.020226][   T24] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found
[ 1107.586208][   T10] block nbd8: Possible stuck request ffff888029227000: control (read@0,1024B). Runtime 150 seconds
[ 1107.598394][   T10] block nbd8: Possible stuck request ffff8880292271c0: control (read@1024,1024B). Runtime 150 seconds
[ 1107.610004][   T10] block nbd8: Possible stuck request ffff888029227380: control (read@2048,1024B). Runtime 150 seconds
[ 1107.622042][   T10] block nbd8: Possible stuck request ffff888029227540: control (read@3072,1024B). Runtime 150 seconds
[ 1107.739037][T17123] Bluetooth: hci5: command 0x0406 tx timeout
[ 1108.747669][   T24] usb 1-1: new full-speed USB device number 51 using dummy_hcd
[ 1108.921548][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1108.952341][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1108.963151][   T24] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1108.976751][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1108.999102][   T24] usb 1-1: config 0 descriptor??
[ 1109.053564][ T5863] usb 6-1: USB disconnect, device number 58
[ 1109.221188][   T24] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1109.248362][T21494] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1109.252551][   T24] usb 1-1: USB disconnect, device number 51
[ 1109.419547][T11153] usb 10-1: new high-speed USB device number 87 using dummy_hcd
[ 1109.594797][T11153] usb 10-1: Using ep0 maxpacket: 8
[ 1109.619306][T11153] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1110.597749][T11153] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1110.607018][T11153] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1110.652370][T11153] usb 10-1: config 0 descriptor??
[ 1110.788482][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[ 1110.909521][T11153] iowarrior 10-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1111.001844][T21512] loop8: detected capacity change from 0 to 7
[ 1111.004957][T21511] openvswitch: netlink: Key type 30 is not supported
[ 1111.040226][T21512] Dev loop8: unable to read RDB block 7
[ 1111.073610][T21512]  loop8: unable to read partition table
[ 1111.092575][T21512] loop8: partition table beyond EOD, truncated
[ 1111.116728][T21512] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[ 1111.210629][ T5863] usb 10-1: USB disconnect, device number 87
[ 1111.413893][T21519] netlink: 'syz.5.3686': attribute type 12 has an invalid length.
[ 1111.604261][T21521] macsec0: entered promiscuous mode
[ 1112.825701][T21518] macsec0: left promiscuous mode
[ 1112.831640][T21533] set match dimension is over the limit!
[ 1112.951004][ T5863] usb 10-1: new high-speed USB device number 88 using dummy_hcd
[ 1113.078495][T21540] netlink: 'syz.5.3691': attribute type 4 has an invalid length.
[ 1113.110971][ T5863] usb 10-1: Using ep0 maxpacket: 32
[ 1113.118780][ T5863] usb 10-1: config 0 has an invalid interface number: 51 but max is 0
[ 1113.132832][T21537] netlink: 'syz.5.3691': attribute type 4 has an invalid length.
[ 1113.142563][ T5863] usb 10-1: config 0 has no interface number 0
[ 1113.152618][ T5863] usb 10-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1113.163347][ T5863] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1113.173237][ T5863] usb 10-1: Product: syz
[ 1113.188779][ T5863] usb 10-1: Manufacturer: syz
[ 1113.206496][ T5863] usb 10-1: SerialNumber: syz
[ 1113.223714][ T5863] usb 10-1: config 0 descriptor??
[ 1113.247826][ T5863] quatech2 10-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1113.453231][ T5863] usb 10-1: qt2_attach - failed to power on unit: -71
[ 1113.468034][ T5863] quatech2 10-1:0.51: probe with driver quatech2 failed with error -71
[ 1113.497455][ T5863] usb 10-1: USB disconnect, device number 88
[ 1113.571618][T11108] usb 6-1: new high-speed USB device number 59 using dummy_hcd
[ 1113.732109][T11108] usb 6-1: Using ep0 maxpacket: 16
[ 1113.743841][T11108] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 11
[ 1113.760941][T11108] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[ 1113.779020][T11108] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[ 1113.797545][T11108] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[ 1113.815003][T11108] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[ 1113.832488][T11108] usb 6-1: config 1 interface 0 has no altsetting 0
[ 1113.844573][T11108] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[ 1113.861685][T11108] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1113.885526][T11108] ums-sddr09 6-1:1.0: USB Mass Storage device detected
[ 1114.089245][T11108] scsi host1: usb-storage 6-1:1.0
[ 1114.135998][T21554] loop8: detected capacity change from 0 to 7
[ 1114.144099][T21554] Dev loop8: unable to read RDB block 7
[ 1114.149699][T21554]  loop8: unable to read partition table
[ 1114.155675][T21554] loop8: partition table beyond EOD, truncated
[ 1114.161848][T21554] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[ 1114.220801][T21556] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3696'.
[ 1114.239992][T21556] team0 (unregistering): Port device team_slave_0 removed
[ 1114.249674][T21556] team0 (unregistering): Port device team_slave_1 removed
[ 1114.310012][T21546] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1114.376681][T11108] usb 6-1: USB disconnect, device number 59
[ 1115.821341][   T30] audit: type=1400 audit(1783499667.472:2806): avc:  denied  { ioctl } for  pid=21573 comm="syz.9.3701" path="socket:[81447]" dev="sockfs" ino=81447 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 1115.880683][   T30] audit: type=1400 audit(1783499667.512:2807): avc:  denied  { setattr } for  pid=21573 comm="syz.9.3701" path="/dev/userfaultfd" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1115.953800][T11153] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[ 1116.196517][T11153] usb 1-1: config 0 has an invalid interface number: 18 but max is 0
[ 1116.220340][T11153] usb 1-1: config 0 has no interface number 0
[ 1116.242172][T11153] usb 1-1: config 0 interface 18 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1116.336420][T11153] usb 1-1: config 0 interface 18 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1116.351542][T11153] usb 1-1: config 0 interface 18 has no altsetting 0
[ 1116.358676][T11153] usb 1-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00
[ 1116.368004][T11153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1116.387423][T11153] usb 1-1: config 0 descriptor??
[ 1116.408448][T21582] bond1: entered promiscuous mode
[ 1116.430580][T21587] comedi comedi0: Minor 4 could not be opened
[ 1116.437100][T21587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3704'.
[ 1116.457444][T21582] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1116.602651][T21571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1116.616920][T21571] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1116.799981][   T24] usb 10-1: new full-speed USB device number 89 using dummy_hcd
[ 1116.836925][T11153] chicony 0003:04F2:1236.002D: unknown main item tag 0x0
[ 1116.857098][T11153] chicony 0003:04F2:1236.002D: unknown main item tag 0x0
[ 1116.873300][T11153] chicony 0003:04F2:1236.002D: unknown main item tag 0x0
[ 1116.883695][T11153] chicony 0003:04F2:1236.002D: unknown main item tag 0x0
[ 1116.891076][T11153] chicony 0003:04F2:1236.002D: unknown main item tag 0x0
[ 1116.900358][T11153] chicony 0003:04F2:1236.002D: unknown main item tag 0x0
[ 1116.907433][T11153] chicony 0003:04F2:1236.002D: unknown main item tag 0x0
[ 1116.915036][T11153] chicony 0003:04F2:1236.002D: unknown main item tag 0x0
[ 1116.922459][T11153] chicony 0003:04F2:1236.002D: unknown main item tag 0x0
[ 1116.929686][T11153] chicony 0003:04F2:1236.002D: unknown main item tag 0x0
[ 1116.956357][T11153] chicony 0003:04F2:1236.002D: hidraw0: USB HID vff.fc Device [HID 04f2:1236] on usb-dummy_hcd.0-1/input18
[ 1116.973838][   T24] usb 10-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config
[ 1116.989134][   T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1117.001244][   T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64
[ 1117.013048][   T24] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[ 1117.028871][   T24] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1117.046650][T21571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1117.067614][   T24] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1117.078482][T21571] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1117.089487][   T24] usb 10-1: Manufacturer: syz
[ 1117.120258][   T24] usb 10-1: config 0 descriptor??
[ 1117.127694][T11153] usb 1-1: USB disconnect, device number 52
[ 1117.185208][T15845] usb 7-1: new high-speed USB device number 75 using dummy_hcd
[ 1117.361402][T15845] usb 7-1: Using ep0 maxpacket: 16
[ 1117.368474][T15845] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1117.380354][T15845] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1117.380945][T21576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1117.390705][T15845] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89
[ 1117.402358][T21576] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1117.417611][T15845] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1117.425960][T15845] usb 7-1: SerialNumber: syz
[ 1117.440039][T15845] usb 7-1: 0:2 : does not exist
[ 1117.458457][T21576] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1117.552261][T11108] usb 6-1: new high-speed USB device number 60 using dummy_hcd
[ 1117.621960][   T24] rc_core: IR keymap rc-hauppauge not found
[ 1117.628039][   T24] Registered IR keymap rc-empty
[ 1117.638727][   T24] mceusb 10-1:0.0: Error: mce write urb status = -71
[ 1117.663697][   T24] mceusb 10-1:0.0: Error: mce write urb status = -71
[ 1117.683349][   T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0
[ 1117.685117][   T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input110
[ 1117.720290][T21609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1117.729767][   T24] mceusb 10-1:0.0: Error: mce write urb status = -71
[ 1117.731306][T21609] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1117.731590][T11108] usb 6-1: config 0 has an invalid interface number: 91 but max is 0
[ 1117.731613][T11108] usb 6-1: config 0 has no interface number 0
[ 1117.731638][T11108] usb 6-1: config 0 interface 91 has no altsetting 0
[ 1117.749701][T11108] usb 6-1: New USB device found, idVendor=046d, idProduct=0920, bcdDevice=78.55
[ 1117.749730][T11108] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1117.749749][T11108] usb 6-1: Product: syz
[ 1117.749764][T11108] usb 6-1: Manufacturer: syz
[ 1117.749779][T11108] usb 6-1: SerialNumber: syz
[ 1117.764163][   T24] mceusb 10-1:0.0: Error: mce write urb status = -71
[ 1117.765191][T11108] usb 6-1: config 0 descriptor??
[ 1117.783714][   T24] mceusb 10-1:0.0: Error: mce write urb status = -71
[ 1117.802753][   T24] mceusb 10-1:0.0: Error: mce write urb status = -71
[ 1117.832770][   T24] mceusb 10-1:0.0: Error: mce write urb status = -71
[ 1117.862954][   T24] mceusb 10-1:0.0: Error: mce write urb status = -71
[ 1117.923059][   T24] mceusb 10-1:0.0: Error: mce write urb status = -71
[ 1117.943013][   T24] mceusb 10-1:0.0: Error: mce write urb status = -71
[ 1117.963111][   T24] mceusb 10-1:0.0: Error: mce write urb status = -71
[ 1117.983684][   T24] mceusb 10-1:0.0: Error: mce write urb status = -71
[ 1118.006018][   T24] mceusb 10-1:0.0: Registered  with mce emulator interface version 1
[ 1118.016065][   T24] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1118.021291][   T24] usb 10-1: USB disconnect, device number 89
[ 1118.082339][T15845] usb 7-1: 5:0: failed to get current value for ch 1 (-22)
[ 1118.105076][T15845] usb 7-1: 5:0: failed to get current value for ch 2 (-22)
[ 1118.120318][T15845] usb 7-1: 5:0: failed to get current value for ch 3 (-22)
[ 1118.145067][T15845] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[ 1118.159344][T15845] usb 7-1: 5:0: cannot get min/max values for control 2 (id 5)
[ 1118.172457][T15845] usb 7-1: Warning! Unlikely small volume range (=1), linear volume or custom curve?
[ 1118.192393][T15845] usb 7-1: [5] FU [Feature 5 Playback Volume] ch = 3, val = 0/1/1
[ 1118.215030][T15845] usb 7-1: 5:0: cannot get min/max values for control 2 (id 5)
[ 1118.224961][T15845] usb 7-1: Warning! Unlikely small volume range (=1), linear volume or custom curve?
[ 1118.245042][T15845] usb 7-1: [5] FU [Feature 5 Playback Volume] ch = 1, val = 0/1/1
[ 1118.266615][T15845] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5)
[ 1118.286588][T15845] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5)
[ 1118.311986][T15845] usb 7-1: 5:0: cannot get min/max values for control 4 (id 5)
[ 1118.324854][T15845] usb 7-1: 5:0: cannot get min/max values for control 4 (id 5)
[ 1118.356526][T15845] usb 7-1: 5:0: cannot get min/max values for control 5 (id 5)
[ 1118.372792][T15845] usb 7-1: 5:0: cannot get min/max values for control 5 (id 5)
[ 1118.386580][T15845] usb 7-1: 5:0: failed to get current value for ch 1 (-22)
[ 1118.400930][T21615] loop8: detected capacity change from 0 to 7
[ 1118.401260][T15845] usb 7-1: 5:0: failed to get current value for ch 2 (-22)
[ 1118.408527][T21615] Dev loop8: unable to read RDB block 7
[ 1118.422496][T15845] usb 7-1: 5:0: failed to get current value for ch 3 (-22)
[ 1118.436203][T21615]  loop8: unable to read partition table
[ 1118.437601][T15845] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[ 1118.443724][T21615] loop8: partition table beyond EOD, truncated
[ 1118.457173][T15845] usb 7-1: 5:0: cannot get min/max values for control 8 (id 5)
[ 1118.475716][T21615] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[ 1118.476644][T15845] usb 7-1: 5:0: cannot get min/max values for control 8 (id 5)
[ 1118.515693][T15845] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5)
[ 1118.527843][T15845] usb 7-1: 5:0: cannot get min/max values for control 5 (id 5)
[ 1118.575580][T15845] usb 7-1: USB disconnect, device number 75
[ 1118.643465][T20100] udevd[20100]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1119.025664][T15845] usb 7-1: new high-speed USB device number 76 using dummy_hcd
[ 1119.914874][T15845] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[ 1119.926062][T15845] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[ 1119.941296][T15845] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[ 1119.952655][T15845] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[ 1120.130696][T15845] usb 7-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[ 1120.174357][T15845] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1120.238100][T15845] usb 7-1: Product: syz
[ 1120.240032][T11108] gspca_main: tv8532-2.14.0 probing 046d:0920
[ 1120.273841][T15845] usb 7-1: Manufacturer: syz
[ 1120.285632][T15845] usb 7-1: SerialNumber: syz
[ 1120.297844][T11108] usb 6-1: USB disconnect, device number 60
[ 1120.344205][T15845] usb 7-1: config 0 descriptor??
[ 1120.370967][T15845] ums-isd200 7-1:0.0: USB Mass Storage device detected
[ 1120.410037][   T11] usb 10-1: new high-speed USB device number 90 using dummy_hcd
[ 1120.450071][T21641] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3720'.
[ 1120.610513][   T11] usb 10-1: Using ep0 maxpacket: 32
[ 1120.628276][T21617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1120.689667][T21617] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1121.145798][   T11] usb 10-1: config 2 has an invalid interface number: 88 but max is 0
[ 1121.574359][T21662] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=21662 comm=syz.0.3723
[ 1122.498009][   T11] usb 10-1: config 2 has no interface number 0
[ 1122.501708][T21659] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 1122.515987][   T11] usb 10-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256
[ 1122.540186][   T11] usb 10-1: config 2 interface 88 has no altsetting 0
[ 1122.566924][   T11] usb 10-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06
[ 1122.588539][   T11] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1
[ 1122.613580][   T11] usb 10-1: Product: syz
[ 1122.639049][   T11] usb 10-1: Manufacturer: syz
[ 1122.652600][   T11] usb 10-1: SerialNumber: syz
[ 1122.676001][T21637] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22
[ 1122.692276][   T30] audit: type=1400 audit(1783499674.324:2808): avc:  denied  { ioctl } for  pid=21640 comm="syz.5.3720" path="socket:[81701]" dev="sockfs" ino=81701 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[ 1122.836183][T21665] random: crng reseeded on system resumption
[ 1122.909524][T21637] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22
[ 1123.246300][T11108] usb 6-1: new high-speed USB device number 61 using dummy_hcd
[ 1123.517129][T11108] usb 6-1: Using ep0 maxpacket: 8
[ 1123.532749][T11108] usb 6-1: New USB device found, idVendor=0582, idProduct=002d, bcdDevice= 0.40
[ 1123.545983][T11108] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1123.560972][T11108] usb 6-1: Product: 鷈�藫ⳗ䯗��Ẵ㴄ᾴ�藜݃⩻潼�᧪櫢ꦬ疚�㖪�黎횳猊�뭡摞�떙啈쬀䆾⼪㔘蠠譸腇앨⣿�Ȁ駿ݲ䦟㸲㳫뷕툂�⃬幖�鼟亸巟̎쒂ྌꪙ牲�迟ᷜ韹٘ᔪ显<��쨧簱밫㜃ꨱ��瑣債鲞䤈ᶧ웆㜑ࡑ榱릨탘翳㣞ꆭ㱉⦙⮢प㨧㴑䡞夘튻壓⧵
[ 1123.595929][T11108] usb 6-1: Manufacturer: �ৼඦ䗽ꛌ냆ॴ갲垜鸛��ʞ蔓�鵢桲鼬뻯⟴䋂耶哕⫗ꕟ�㙤ṛꔊႶ䉠�쵋켈줶鳩ݕÓ필�摀뙓봊ᯌ�婬�椧㠛��¦칟ﳄ틙看��饠뫎路槪왧벿讇ꚩⱦ㪺զ��龤
[ 1123.933650][T15845] scsi host1: usb-storage 7-1:0.0
[ 1124.102127][   T11] asix 10-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[ 1124.191042][T15845] usb 7-1: USB disconnect, device number 76
[ 1124.414316][   T11] asix 10-1:2.88: probe with driver asix failed with error -71
[ 1124.425753][   T11] usb 10-1: USB disconnect, device number 90
[ 1124.432639][T11108] usb 6-1: SerialNumber: ь
[ 1124.652796][T11108] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[ 1124.682789][T11108] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -2
[ 1124.705489][T21693] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3731'.
[ 1124.732045][T11108] usb 6-1: USB disconnect, device number 61
[ 1124.733730][T21695] netlink: 'syz.0.3724': attribute type 18 has an invalid length.
[ 1124.782367][T17319] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1124.796503][T17319] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1124.816794][T17319] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1124.833530][T21699] xt_connbytes: Forcing CT accounting to be enabled
[ 1124.855860][T17319] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1124.879075][T21699] Cannot find set identified by id 0 to match
[ 1125.371371][T11108] usb 1-1: new full-speed USB device number 53 using dummy_hcd
[ 1125.413732][   T30] audit: type=1400 audit(1783499677.038:2809): avc:  denied  { remount } for  pid=21714 comm="syz.9.3737" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[ 1125.440648][   T30] audit: type=1400 audit(1783499677.068:2810): avc:  denied  { mounton } for  pid=21714 comm="syz.9.3737" path="/356/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1
[ 1125.552950][T11108] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1125.568986][T11108] usb 1-1: not running at top speed; connect to a high speed hub
[ 1125.619964][T11108] usb 1-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1126.138778][T11108] usb 1-1: config 1 interface 0 has no altsetting 0
[ 1126.147749][T11108] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.40
[ 1126.181186][T21723] (syz.9.3739,21723,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[ 1126.193201][T11108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1126.201442][T11108] usb 1-1: Product: syz
[ 1126.207327][T21723] (syz.9.3739,21723,0):ocfs2_fill_super:1177 ERROR: status = -22
[ 1126.216293][T11108] usb 1-1: Manufacturer: syz
[ 1126.221402][T11108] usb 1-1: SerialNumber: syz
[ 1126.761633][T21739] openvswitch: netlink: Key type 30 is not supported
[ 1126.991953][T11108] usbhid 1-1:1.0: can't add hid device: -71
[ 1127.001792][T11108] usbhid 1-1:1.0: probe with driver usbhid failed with error -71
[ 1127.007686][T21746] afs: Unknown parameter 'dynØnr[—æs/	!¦äÄÏ«k	oª”h'^(Ë“ÖðGº�_:Û¸¡0Bü$¹ç|ìN#άÄe¤º�?üH™^å1Q^ö‘üV¨Ãö:¼ªÔ8+º2B'
[ 1127.053385][T11108] usb 1-1: USB disconnect, device number 53
[ 1127.121629][T21748] SELinux: failed to load policy
[ 1127.622158][   T30] audit: type=1400 audit(1783499679.243:2811): avc:  denied  { map } for  pid=21762 comm="syz.0.3749" path="/dev/usbmon0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[ 1127.701779][T21765] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3750'.
[ 1127.751714][T15845] usb 7-1: new high-speed USB device number 77 using dummy_hcd
[ 1127.751713][T11123] usb 6-1: new high-speed USB device number 62 using dummy_hcd
[ 1127.775694][T21765] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úÆÿAZøZ´”à�I�ƺ¥þ àø§%
[ 1127.896858][T11123] usb 6-1: Using ep0 maxpacket: 32
[ 1127.905398][T11123] usb 6-1: config 0 has an invalid interface number: 89 but max is 0
[ 1127.914630][T11123] usb 6-1: config 0 has no interface number 0
[ 1127.921615][T11123] usb 6-1: config 0 interface 89 altsetting 225 bulk endpoint 0x82 has invalid maxpacket 6
[ 1127.929652][T15845] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1127.933437][T11123] usb 6-1: config 0 interface 89 has no altsetting 0
[ 1127.949082][T11123] usb 6-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68
[ 1127.959253][T11123] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1127.968717][T15845] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[ 1127.973373][T11123] usb 6-1: Product: syz
[ 1128.000240][T15845] usb 7-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[ 1128.003683][T11123] usb 6-1: Manufacturer: syz
[ 1128.014834][T15845] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1128.018402][T11123] usb 6-1: SerialNumber: syz
[ 1128.027926][T15845] usb 7-1: Product: syz
[ 1128.027949][T15845] usb 7-1: Manufacturer: syz
[ 1128.027963][T15845] usb 7-1: SerialNumber: syz
[ 1128.055234][T11123] usb 6-1: config 0 descriptor??
[ 1128.066221][T21761] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1128.078920][T11123] hub 6-1:0.89: bad descriptor, ignoring hub
[ 1128.085095][T11123] hub 6-1:0.89: probe with driver hub failed with error -5
[ 1128.094002][T11123] option 6-1:0.89: GSM modem (1-port) converter detected
[ 1128.106579][T11123] usb 6-1: GSM modem (1-port) converter now attached to ttyUSB0
[ 1128.277171][T11153] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[ 1128.288985][T15845] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1128.319751][T21776] set match dimension is over the limit!
[ 1128.417573][T11123] usb 6-1: USB disconnect, device number 62
[ 1128.430284][T11123] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0
[ 1128.456267][T11123] option 6-1:0.89: device disconnected
[ 1128.467523][T11153] usb 1-1: Using ep0 maxpacket: 16
[ 1128.474981][T11153] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1128.488149][T15845] usb 7-1: 2:1 : no UAC_FORMAT_TYPE desc
[ 1128.494383][T11153] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1128.515664][T11153] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1128.525910][T11153] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1128.536912][T11153] usb 1-1: Product: syz
[ 1128.544650][T11153] usb 1-1: Manufacturer: syz
[ 1128.552743][T11153] usb 1-1: SerialNumber: syz
[ 1128.563879][T11153] usb 1-1: config 0 descriptor??
[ 1128.575716][T11153] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1128.588668][T11153] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[ 1129.680613][T11153] em28xx 1-1:0.0: chip ID is em28174
[ 1129.902059][T11153] usb 1-1: USB disconnect, device number 54
[ 1129.924236][T11153] em28xx 1-1:0.0: Disconnecting em28xx
[ 1130.049692][T21801] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3759'.
[ 1130.154804][T11153] em28xx 1-1:0.0: Freeing device
[ 1130.868190][   T11] usb 7-1: USB disconnect, device number 77
[ 1131.097512][T21808] loop8: detected capacity change from 0 to 7
[ 1131.387856][T21811] openvswitch: netlink: Key type 30 is not supported
[ 1131.408251][T21808] Dev loop8: unable to read RDB block 7
[ 1131.450112][T21808]  loop8: unable to read partition table
[ 1131.509845][T21808] loop8: partition table beyond EOD, truncated
[ 1131.578429][T21808] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[ 1132.937263][   T30] audit: type=1400 audit(1783499684.552:2812): avc:  denied  { mounton } for  pid=21834 comm="syz.5.3768" path="/proc/363/task" dev="proc" ino=83210 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[ 1133.096305][T21836] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[21839] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[21836]
[ 1133.180869][   T30] audit: type=1400 audit(1783499684.792:2813): avc:  denied  { map } for  pid=21843 comm="syz.6.3771" path="socket:[82302]" dev="sockfs" ino=82302 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[ 1133.331853][T21845] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3770'.
[ 1133.341476][T21845] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3770'.
[ 1133.380670][T21845] syzkaller0: entered promiscuous mode
[ 1133.389129][T21845] syzkaller0: entered allmulticast mode
[ 1133.713582][T21855] loop8: detected capacity change from 0 to 7
[ 1133.733744][T21855] Dev loop8: unable to read RDB block 7
[ 1133.745505][T21855]  loop8: unable to read partition table
[ 1133.751752][T21855] loop8: partition table beyond EOD, truncated
[ 1133.765962][T21855] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[ 1134.438691][T21879] ip6gre2: entered allmulticast mode
[ 1134.512475][T21879] vxfs: unable to read disk superblock at 1
[ 1134.522718][T21879] vxfs: unable to read disk superblock at 8
[ 1134.528759][T21879] vxfs: can't find superblock.
[ 1135.759498][   T30] audit: type=1400 audit(1783499687.357:2814): avc:  denied  { mount } for  pid=21847 comm="syz.5.3773" name="/" dev="rpc_pipefs" ino=82331 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[ 1136.269684][T21918] loop8: detected capacity change from 0 to 7
[ 1136.327490][T21918] Dev loop8: unable to read RDB block 7
[ 1136.349727][T21918]  loop8: unable to read partition table
[ 1136.359978][T21919] vlan2: entered allmulticast mode
[ 1136.370339][T21918] loop8: partition table beyond EOD, truncated
[ 1136.570916][T21919] bond0: entered allmulticast mode
[ 1136.594773][T21918] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[ 1136.598915][T21919] bond_slave_0: entered allmulticast mode
[ 1136.676922][T21919] bond_slave_1: entered allmulticast mode
[ 1136.804965][   T11] usb 6-1: new high-speed USB device number 63 using dummy_hcd
[ 1137.238312][   T11] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1137.292683][   T11] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1137.334831][   T11] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 1137.385737][   T11] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1137.467798][   T11] usb 6-1: config 0 descriptor??
[ 1137.727189][   T10] block nbd8: Possible stuck request ffff888029227000: control (read@0,1024B). Runtime 180 seconds
[ 1137.738790][   T10] block nbd8: Possible stuck request ffff8880292271c0: control (read@1024,1024B). Runtime 180 seconds
[ 1137.752337][   T10] block nbd8: Possible stuck request ffff888029227380: control (read@2048,1024B). Runtime 180 seconds
[ 1137.764288][   T10] block nbd8: Possible stuck request ffff888029227540: control (read@3072,1024B). Runtime 180 seconds
[ 1137.799145][T21967] binder: BINDER_SET_CONTEXT_MGR already set
[ 1138.125683][T21967] binder: 21965:21967 ioctl 4018620d 200000000100 returned -16
[ 1138.602370][T21988] openvswitch: netlink: Key type 30 is not supported
[ 1138.707720][T21921] SET target dimension over the limit!
[ 1138.731459][T21919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1138.746831][T21921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1138.765515][T21919] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1138.779365][   T30] audit: type=1326 audit(1783499690.381:2815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21983 comm="syz.6.3799" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f31d579de59 code=0x0
[ 1138.807290][T21921] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1139.049073][T11123] usb 1-1: new full-speed USB device number 55 using dummy_hcd
[ 1139.170398][   T11] usb 6-1: string descriptor 0 read error: -71
[ 1139.177454][   T11] uclogic 0003:256C:006D.002E: failed retrieving string descriptor #200: -71
[ 1139.197289][   T11] uclogic 0003:256C:006D.002E: failed retrieving pen parameters: -71
[ 1139.216280][T11123] usb 1-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config
[ 1139.232478][   T11] uclogic 0003:256C:006D.002E: failed probing pen v2 parameters: -71
[ 1139.255687][T11123] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1139.271570][   T11] uclogic 0003:256C:006D.002E: failed probing parameters: -71
[ 1139.287172][T11123] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64
[ 1139.308437][   T11] uclogic 0003:256C:006D.002E: probe with driver uclogic failed with error -71
[ 1139.330512][T11123] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[ 1139.348664][   T11] usb 6-1: USB disconnect, device number 63
[ 1139.419993][T11123] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1139.457862][T11123] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1139.582433][T11123] usb 1-1: Manufacturer: syz
[ 1139.638419][T11123] usb 1-1: config 0 descriptor??
[ 1140.299679][T22032] netlink: 72 bytes leftover after parsing attributes in process `syz.9.3804'.
[ 1140.310178][T22032] netlink: 80 bytes leftover after parsing attributes in process `syz.9.3804'.
[ 1141.148496][T22037] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3801'.
[ 1141.157729][T22037] netdevsim netdevsim5 netdevsim0: entered allmulticast mode
[ 1143.233008][T15845] hid_parser_main: 31 callbacks suppressed
[ 1143.233029][T15845] hid-generic 0006:0008:0001.002F: unknown main item tag 0x0
[ 1143.278023][T15845] hid-generic 0006:0008:0001.002F: unknown main item tag 0x0
[ 1143.409837][T15845] hid-generic 0006:0008:0001.002F: unknown main item tag 0x0
[ 1143.444580][T15845] hid-generic 0006:0008:0001.002F: unknown main item tag 0x2
[ 1143.483453][T15845] hid-generic 0006:0008:0001.002F: unknown main item tag 0x0
[ 1143.503342][T15845] hid-generic 0006:0008:0001.002F: unknown main item tag 0x0
[ 1143.542573][T15845] hid-generic 0006:0008:0001.002F: unknown main item tag 0x0
[ 1143.581737][T15845] hid-generic 0006:0008:0001.002F: unknown main item tag 0x0
[ 1143.604119][T15845] hid-generic 0006:0008:0001.002F: unknown main item tag 0x0
[ 1143.627094][T15845] hid-generic 0006:0008:0001.002F: unknown main item tag 0x0
[ 1143.723711][T15845] hid-generic 0006:0008:0001.002F: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0
[ 1143.796958][T11152] usb 7-1: new high-speed USB device number 78 using dummy_hcd
[ 1143.807722][T11123] rc_core: IR keymap rc-hauppauge not found
[ 1143.837874][T11123] Registered IR keymap rc-empty
[ 1143.923477][T11123] mceusb 1-1:0.0: Error: mce write urb status = -71
[ 1143.981222][T11123] mceusb 1-1:0.0: Error: mce write urb status = -71
[ 1144.013114][T22070] fido_id[22070]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 1144.033438][T11123] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[ 1144.067936][T11123] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input111
[ 1144.125272][T11152] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1144.154311][T11123] mceusb 1-1:0.0: Error: mce write urb status = -71
[ 1144.156409][T11152] usb 7-1: unable to read config index 0 descriptor/start: -71
[ 1144.183934][T11152] usb 7-1: can't read configurations, error -71
[ 1144.271695][T22101] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1144.381167][T22104] syzkaller0: entered promiscuous mode
[ 1144.389427][T22104] syzkaller0: entered allmulticast mode
[ 1144.395584][T11123] mceusb 1-1:0.0: Error: mce write urb status = -71
[ 1144.493688][T11123] mceusb 1-1:0.0: Error: mce write urb status = -71
[ 1144.524408][T11123] mceusb 1-1:0.0: Error: mce write urb status = -71
[ 1145.160760][T11123] mceusb 1-1:0.0: Error: mce write urb status = -71
[ 1145.204085][T11123] mceusb 1-1:0.0: Error: mce write urb status = -71
[ 1145.233135][T11123] mceusb 1-1:0.0: Error: mce write urb status = -71
[ 1145.260346][T11123] mceusb 1-1:0.0: Error: mce write urb status = -71
[ 1145.288009][T22111] tipc: Started in network mode
[ 1145.290517][T11123] mceusb 1-1:0.0: Error: mce write urb status = -71
[ 1145.293494][T22111] tipc: Node identity , cluster identity 4711
[ 1145.305643][T22111] tipc: Failed to obtain node identity
[ 1145.311221][T22111] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1145.320236][T11123] mceusb 1-1:0.0: Error: mce write urb status = -71
[ 1145.373885][T22117] openvswitch: netlink: Key type 30 is not supported
[ 1145.382199][T11123] mceusb 1-1:0.0: Registered  with mce emulator interface version 1
[ 1145.436532][T11123] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1145.591585][T11123] usb 1-1: USB disconnect, device number 55
[ 1145.650728][T22112] ipvlan2: entered allmulticast mode
[ 1145.656120][T22112] batadv_slave_1: entered allmulticast mode
[ 1145.670296][T22112] batman_adv: batadv0: Adding interface: ipvlan2
[ 1145.677309][T22112] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1145.703941][T22112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1145.714471][T22112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1145.724409][T22112] batman_adv: batadv0: Interface activated: ipvlan2
[ 1146.496800][T22128] loop8: detected capacity change from 0 to 7
[ 1146.665692][T22128]  loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2
[ 1146.721801][T22128] loop8: partition table partially beyond EOD, truncated
[ 1146.737330][T22128] loop8: p1 size 1905483274 extends beyond EOD, truncated
[ 1146.775964][T22128] loop8: p2 start 121280928 is beyond EOD, truncated
[ 1146.830089][T18288] udevd[18288]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory
[ 1147.179798][T22146] netlink: 'syz.6.3817': attribute type 10 has an invalid length.
[ 1147.188732][T22146] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3817'.
[ 1147.406388][T22146] bridge0: port 3(dummy0) entered blocking state
[ 1147.437430][T22146] bridge0: port 3(dummy0) entered disabled state
[ 1147.483399][T22146] dummy0: entered allmulticast mode
[ 1147.525052][T22146] dummy0: entered promiscuous mode
[ 1147.683634][   T24] usb 7-1: new high-speed USB device number 80 using dummy_hcd
[ 1147.809225][T22167] openvswitch: netlink: Key type 30 is not supported
[ 1147.915815][   T24] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x92, changing to 0x82
[ 1147.944976][   T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 48224, setting to 64
[ 1147.971102][   T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1148.259234][   T24] usb 7-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f
[ 1148.259266][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1148.259285][   T24] usb 7-1: Product: syz
[ 1148.259301][   T24] usb 7-1: Manufacturer: syz
[ 1148.259316][   T24] usb 7-1: SerialNumber: syz
[ 1148.270457][   T24] usb 7-1: config 0 descriptor??
[ 1148.277791][   T24] redrat3 7-1:0.0: Couldn't find all endpoints
[ 1148.278965][T22179] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3821'.
[ 1148.525144][T15845] usb 6-1: new low-speed USB device number 64 using dummy_hcd
[ 1148.654999][T15845] usb 6-1: device descriptor read/64, error -71
[ 1148.833623][T11153] usb 7-1: USB disconnect, device number 80
[ 1148.917157][T15845] usb 6-1: new low-speed USB device number 65 using dummy_hcd
[ 1149.080307][T15845] usb 6-1: device descriptor read/64, error -71
[ 1149.141568][T22212] openvswitch: netlink: Key type 30 is not supported
[ 1149.298129][T15845] usb usb6-port1: attempt power cycle
[ 1149.687324][T15845] usb 6-1: new low-speed USB device number 66 using dummy_hcd
[ 1149.738298][T15845] usb 6-1: device descriptor read/8, error -71
[ 1149.997065][T15845] usb 6-1: new low-speed USB device number 67 using dummy_hcd
[ 1150.028310][T15845] usb 6-1: device descriptor read/8, error -71
[ 1150.158726][T15845] usb usb6-port1: unable to enumerate USB device
[ 1150.861807][T22260] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3837'.
[ 1151.015459][   T30] audit: type=1400 audit(1783499702.590:2816): avc:  denied  { module_load } for  pid=22259 comm="syz.6.3837" path="/120/bus" dev="tmpfs" ino=642 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1
[ 1151.015767][T22271] Invalid ELF header len 7
[ 1151.219087][T22274] set match dimension is over the limit!
[ 1151.980676][ T5863] usb 6-1: new high-speed USB device number 68 using dummy_hcd
[ 1152.143005][ T5863] usb 6-1: Using ep0 maxpacket: 32
[ 1152.201799][ T5863] usb 6-1: config 0 has an invalid interface number: 196 but max is 0
[ 1152.244981][ T5863] usb 6-1: config 0 has no interface number 0
[ 1152.343978][T22305] FAULT_INJECTION: forcing a failure.
[ 1152.343978][T22305] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1152.357910][T22305] CPU: 1 UID: 0 PID: 22305 Comm: syz.6.3844 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1152.357940][T22305] Tainted: [L]=SOFTLOCKUP
[ 1152.357946][T22305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[ 1152.357957][T22305] Call Trace:
[ 1152.357964][T22305]  <TASK>
[ 1152.357971][T22305]  dump_stack_lvl+0x100/0x190
[ 1152.357999][T22305]  should_fail_ex.cold+0x5/0xa
[ 1152.358023][T22305]  strncpy_from_user+0x3b/0x2d0
[ 1152.358047][T22305]  do_getname+0x78/0x390
[ 1152.358072][T22305]  do_sys_openat2+0xc7/0x1e0
[ 1152.358093][T22305]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1152.358112][T22305]  ? preempt_schedule_irq+0x7b/0x90
[ 1152.358139][T22305]  ? irqentry_exit+0x24d/0xa00
[ 1152.358163][T22305]  ? lockdep_hardirqs_on+0x78/0x100
[ 1152.358192][T22305]  __x64_sys_openat+0x12d/0x210
[ 1152.358213][T22305]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1152.358245][T22305]  do_syscall_64+0x115/0x870
[ 1152.358269][T22305]  ? clear_bhb_loop+0x40/0x90
[ 1152.358292][T22305]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1152.358311][T22305] RIP: 0033:0x7f31d575e68e
[ 1152.358328][T22305] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1152.358345][T22305] RSP: 002b:00007f31d665cb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1152.358364][T22305] RAX: ffffffffffffffda RBX: 00007f31d665d6c0 RCX: 00007f31d575e68e
[ 1152.358376][T22305] RDX: 0000000000002082 RSI: 00007f31d665cc00 RDI: ffffffffffffff9c
[ 1152.358388][T22305] RBP: 00007f31d665cc00 R08: 0000000000000000 R09: 0000000000000000
[ 1152.358399][T22305] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[ 1152.358410][T22305] R13: 00007f31d5a26128 R14: 00007f31d5a26090 R15: 00007ffe6a77ac58
[ 1152.358437][T22305]  </TASK>
[ 1153.222607][ T5863] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[ 1153.233657][ T5863] usb 6-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1153.245490][ T5863] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[ 1153.258538][ T5863] usb 6-1: config 0 interface 196 has no altsetting 0
[ 1153.270135][ T5863] usb 6-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a
[ 1153.286144][ T5863] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1153.302674][ T5863] usb 6-1: Product: syz
[ 1153.312622][ T5863] usb 6-1: Manufacturer: syz
[ 1153.596953][ T5863] usb 6-1: SerialNumber: syz
[ 1153.637813][ T5863] usb 6-1: config 0 descriptor??
[ 1153.648575][T22285] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1154.334098][T11123] usb 10-1: new high-speed USB device number 91 using dummy_hcd
[ 1154.486237][ T5863] ipheth 6-1:0.196: ipheth_enable_ncm: usb_control_msg: 0
[ 1154.496711][T11123] usb 10-1: Using ep0 maxpacket: 16
[ 1154.504696][T11123] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1154.542611][T11123] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1154.555132][ T5863] ipheth 6-1:0.196: Apple iPhone USB Ethernet device attached
[ 1154.570747][T11123] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1154.603151][T11123] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1154.647596][T11123] usb 10-1: Product: syz
[ 1154.663503][T11123] usb 10-1: Manufacturer: syz
[ 1154.682442][T11123] usb 10-1: SerialNumber: syz
[ 1154.715064][T11123] usb 10-1: config 0 descriptor??
[ 1154.744501][T11123] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1154.766351][T11123] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class)
[ 1154.774997][T22285] netlink: 'syz.5.3840': attribute type 10 has an invalid length.
[ 1154.802577][T22285] dummy0: entered allmulticast mode
[ 1154.820083][T22285] bond0: (slave dummy0): Enslaving as an active interface with an up link
[ 1154.890326][ T5863] usb 6-1: USB disconnect, device number 68
[ 1155.001632][   T30] audit: type=1400 audit(1783499706.574:2817): avc:  denied  { write } for  pid=22352 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1155.256592][ T5863] ipheth 6-1:0.196: Apple iPhone USB Ethernet now disconnected
[ 1155.349337][T11123] em28xx 10-1:0.0: unknown em28xx chip ID (0)
[ 1155.376365][   T30] audit: type=1400 audit(1783499706.954:2818): avc:  denied  { write } for  pid=22389 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1155.449300][T22398] debugfs: '1ùà^!' already exists in 'ieee80211'
[ 1155.484871][T11108] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[ 1155.678170][T11108] usb 1-1: Using ep0 maxpacket: 8
[ 1155.798092][T11108] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1155.839074][T11108] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1155.901992][T11108] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1155.990177][T11108] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1156.022977][T11108] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[ 1156.055027][T11108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1156.074159][T11108] usb 1-1: Product: syz
[ 1156.087825][T11108] usb 1-1: Manufacturer: syz
[ 1156.109726][T11108] usb 1-1: SerialNumber: syz
[ 1156.136221][   T30] audit: type=1400 audit(1783499707.703:2819): avc:  denied  { write } for  pid=22407 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1156.156868][T11108] usb 1-1: config 0 descriptor??
[ 1156.176412][T22418] syzkaller0: entered promiscuous mode
[ 1156.203979][T22418] syzkaller0: entered allmulticast mode
[ 1156.209120][T11108] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found
[ 1156.399827][T11123] em28xx 10-1:0.0: Config register raw data: 0xfffffffb
[ 1156.417412][T11123] em28xx 10-1:0.0: AC97 chip type couldn't be determined
[ 1156.423775][   T30] audit: type=1400 audit(1783499707.983:2820): avc:  denied  { write } for  pid=22434 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1156.425960][T11123] em28xx 10-1:0.0: No AC97 audio processor
[ 1156.484420][T11108] snd_usb_toneport 1-1:0.0: cannot get proper max packet size
[ 1156.504006][T11108] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected
[ 1156.507127][T11153] usb 10-1: USB disconnect, device number 91
[ 1156.575232][T11153] em28xx 10-1:0.0: Disconnecting em28xx
[ 1156.623321][T11108] snd_usb_toneport 1-1:0.0: probe with driver snd_usb_toneport failed with error -22
[ 1156.661024][T11153] em28xx 10-1:0.0: Freeing device
[ 1156.729116][T11108] usb 1-1: USB disconnect, device number 56
[ 1157.757778][T22495] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3863'.
[ 1158.039039][T11108] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[ 1158.311042][T11108] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1158.352870][T11108] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1158.375090][T11108] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1158.388068][T11108] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1158.415497][T11108] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1158.432753][T11108] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1158.443823][T11108] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1158.467267][T11108] usb 1-1: Product: syz
[ 1158.475439][T11108] usb 1-1: Manufacturer: syz
[ 1158.495756][T11108] cdc_wdm 1-1:1.0: skipping garbage
[ 1158.510614][T11108] cdc_wdm 1-1:1.0: skipping garbage
[ 1158.533579][T11108] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[ 1158.556151][T11108] cdc_wdm 1-1:1.0: Unknown control protocol
[ 1158.966306][    C0] cdc_wdm 1-1:1.0: Unexpected error -71
[ 1158.966703][T11153] usb 1-1: USB disconnect, device number 57
[ 1158.972000][    C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[ 1158.984468][    C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[ 1158.990515][    C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[ 1159.041035][T15706] Bluetooth: hci0: command 0x0406 tx timeout
[ 1160.060497][   T30] audit: type=1400 audit(1783499711.628:2821): avc:  denied  { map } for  pid=22575 comm="syz.6.3875" path="socket:[85226]" dev="sockfs" ino=85226 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1160.265635][T22585] netlink: 14 bytes leftover after parsing attributes in process `syz.9.3876'.
[ 1160.299028][T22585] tipc: Resetting bearer <eth:team0>
[ 1160.348960][T22595] Bluetooth: MGMT ver 1.23
[ 1160.373890][T22585] tipc: Disabling bearer <eth:team0>
[ 1160.489403][T22585] team0 (unregistering): Port device vlan0 removed
[ 1160.877105][T22604] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3878'.
[ 1160.934535][T22595] tipc: Started in network mode
[ 1160.947129][T22595] tipc: Node identity 164e3d88699c, cluster identity 4711
[ 1160.975909][T22595] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1161.734301][T11108] usb 10-1: new full-speed USB device number 92 using dummy_hcd
[ 1161.769948][T22595] syzkaller0: entered promiscuous mode
[ 1161.962143][T22595] syzkaller0: entered allmulticast mode
[ 1162.058226][T11108] usb 10-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config
[ 1162.070483][T11108] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1162.071893][T22595] tipc: Resetting bearer <eth:syzkaller0>
[ 1162.121885][T11108] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64
[ 1162.141015][T11108] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[ 1162.188404][T22587] tipc: Resetting bearer <eth:syzkaller0>
[ 1162.198854][T11108] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1162.229656][T11108] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1162.251370][T11108] usb 10-1: Manufacturer: syz
[ 1162.268428][T11108] usb 10-1: config 0 descriptor??
[ 1162.269809][T17123] Bluetooth: hci6: ACL packet for unknown connection handle 200
[ 1162.326346][T17123] Bluetooth: hci0: unexpected event for opcode 0x210b
[ 1162.336346][   T30] audit: type=1400 audit(1783499713.905:2822): avc:  denied  { setopt } for  pid=22643 comm="syz.4.3887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[ 1162.569369][T22622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1162.590760][T22622] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1162.682105][   T30] audit: type=1400 audit(1783499714.224:2823): avc:  denied  { map } for  pid=22649 comm="syz.0.3888" path="socket:[85383]" dev="sockfs" ino=85383 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[ 1163.616433][T11123] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[ 1163.776724][T11123] usb 1-1: Using ep0 maxpacket: 32
[ 1163.784688][T11123] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[ 1163.793935][T11123] usb 1-1: config 0 has no interface number 0
[ 1163.803191][T11123] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1163.813596][T11123] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1163.822136][T11123] usb 1-1: Product: syz
[ 1163.828940][T11123] usb 1-1: Manufacturer: syz
[ 1163.833684][T11123] usb 1-1: SerialNumber: syz
[ 1163.842379][T11123] usb 1-1: config 0 descriptor??
[ 1163.857434][T11123] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1164.063374][T22668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1164.073903][T22668] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1164.102964][T11123] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[ 1164.132658][T11123] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[ 1164.515387][T11153] usb 1-1: USB disconnect, device number 58
[ 1164.523302][    C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -108
[ 1164.534882][T11153] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[ 1164.588374][T11153] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[ 1164.602926][T11153] quatech2 1-1:0.51: device disconnected
[ 1164.662474][   T31] INFO: task syz.8.3379:20122 blocked for more than 143 seconds.
[ 1164.671139][   T31]       Tainted: G             L      syzkaller #0
[ 1164.678183][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1164.686911][   T31] task:syz.8.3379      state:D stack:28776 pid:20122 tgid:20118 ppid:10202  task_flags:0x400040 flags:0x00080002
[ 1164.699776][   T31] Call Trace:
[ 1164.703130][   T31]  <TASK>
[ 1164.706084][   T31]  __schedule+0x125c/0x6730
[ 1164.711264][   T31]  ? do_raw_spin_lock+0x128/0x260
[ 1164.716332][   T31]  ? __pfx___schedule+0x10/0x10
[ 1164.721701][   T31]  ? find_held_lock+0x2b/0x80
[ 1164.726405][   T31]  ? schedule+0x225/0x2c0
[ 1164.731596][   T31]  schedule+0xdd/0x2c0
[ 1164.735699][   T31]  schedule_preempt_disabled+0x13/0x30
[ 1164.741896][   T31]  __mutex_lock+0xccc/0x1bd0
[ 1164.747886][   T31]  ? bdev_open+0x41a/0xe40
[ 1164.752353][   T31]  ? find_held_lock+0x2b/0x80
[ 1164.757046][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 1164.762586][   T31]  ? bdev_open+0x41a/0xe40
[ 1164.767035][   T31]  bdev_open+0x41a/0xe40
[ 1164.772007][   T31]  ? iput+0x3a/0x40
[ 1164.775828][   T31]  blkdev_open+0x34e/0x4f0
[ 1164.780956][   T31]  do_dentry_open+0x6ab/0x14d0
[ 1164.785754][   T31]  ? __pfx_blkdev_open+0x10/0x10
[ 1164.791168][   T31]  vfs_open+0x82/0x3f0
[ 1164.795249][   T31]  path_openat+0x2873/0x4280
[ 1164.801157][   T31]  ? __pfx_path_openat+0x10/0x10
[ 1164.806166][   T31]  do_file_open+0x20e/0x430
[ 1164.811290][   T31]  ? __pfx_do_file_open+0x10/0x10
[ 1164.816346][   T31]  ? alloc_fd+0x471/0x7a0
[ 1164.821333][   T31]  ? do_getname+0x191/0x390
[ 1164.825892][   T31]  do_sys_openat2+0x10f/0x1e0
[ 1164.830690][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1164.835927][   T31]  __x64_sys_openat+0x12d/0x210
[ 1164.840859][   T31]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1164.846255][   T31]  do_syscall_64+0x115/0x870
[ 1164.852338][   T31]  ? clear_bhb_loop+0x40/0x90
[ 1164.857053][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1164.863569][   T31] RIP: 0033:0x7fb6afb5e68e
[ 1164.868461][   T31] RSP: 002b:00007fb6b0b1fb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1164.876920][   T31] RAX: ffffffffffffffda RBX: 00007fb6b0b206c0 RCX: 00007fb6afb5e68e
[ 1164.885398][   T31] RDX: 0000000000000002 RSI: 00007fb6b0b1fc00 RDI: ffffffffffffff9c
[ 1164.894079][   T31] RBP: 00007fb6b0b1fc00 R08: 0000000000000000 R09: 0000000000000000
[ 1164.902605][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[ 1164.911078][   T31] R13: 00007fb6afe26128 R14: 00007fb6afe26090 R15: 00007fff0c47b568
[ 1164.919579][   T31]  </TASK>
[ 1164.922638][   T31] 
[ 1164.922638][   T31] Showing all locks held in the system:
[ 1164.947274][   T31] 1 lock held by khungtaskd/31:
[ 1164.953532][   T31]  #0: ffffffff8ebe6100 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[ 1164.964138][   T31] 1 lock held by klogd/4967:
[ 1164.969238][   T31]  #0: ffff8880b843b520 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140
[ 1164.979661][   T31] 2 locks held by getty/5362:
[ 1164.984347][   T31]  #0: ffff888037fcf0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[ 1164.994595][   T31]  #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0
[ 1165.005169][   T31] 3 locks held by kworker/0:9/5863:
[ 1165.010797][   T31]  #0: ffff88801bc0b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940
[ 1165.021272][   T31]  #1: ffffc90004247d08 ((work_completion)(&tn->work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940
[ 1165.032352][   T31]  #2: ffffffff90a9b480 (rtnl_mutex){+.+.}-{4:4}, at: tipc_net_finalize_work+0x13/0x90
[ 1165.042789][   T31] 5 locks held by kworker/0:0/11108:
[ 1165.048767][   T31]  #0: ffff88801f69bd40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940
[ 1165.061223][   T31]  #1: ffffc9000448fd08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940
[ 1165.073074][   T31]  #2: ffff888021ba31d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0
[ 1165.082609][   T31]  #3: ffff888033dbe1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 1165.092398][   T31]  #4: ffff888027b311a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 1165.102179][   T31] 1 lock held by udevd/17824:
[ 1165.106869][   T31]  #0: ffff8880290e5350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40
[ 1165.116750][   T31] 4 locks held by udevd/20100:
[ 1165.121974][   T31]  #0: ffff888057cc0e18 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270
[ 1165.131348][   T31]  #1: ffff888026a87480 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0
[ 1165.141255][   T31]  #2: ffff88802b75fc38 (kn->active#31){++++}-{0:0}, at: kernfs_seq_start+0xbc/0x2a0
[ 1165.151286][   T31]  #3: ffff888033dbe1d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0
[ 1165.161754][   T31] 1 lock held by syz.8.3379/20122:
[ 1165.166911][   T31]  #0: ffff8880290e5350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40
[ 1165.176714][   T31] 3 locks held by kworker/u8:1/21248:
[ 1165.182534][   T31]  #0: ffff88801d35c140 ((wq_completion)cfg80211){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940
[ 1165.193627][   T31]  #1: ffffc90003f47d08 ((work_completion)(&(&rdev->dfs_update_channels_wk)->work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940
[ 1165.207535][   T31]  #2: ffffffff90a9b480 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_dfs_channels_update_work+0xb9/0x640
[ 1165.218713][   T31] 2 locks held by syz.6.3878/22587:
[ 1165.223923][   T31]  #0: ffffffff90a9b480 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220
[ 1165.233382][   T31]  #1: ffffffff8ebf1ba8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0
[ 1165.243853][   T31] 1 lock held by syz.5.3882/22615:
[ 1165.249503][   T31]  #0: ffffffff90a9b480 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x371/0xe90
[ 1165.260356][   T31] 1 lock held by syz.9.3883/22616:
[ 1165.265501][   T31]  #0: ffffffff90a9b480 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8bb/0x2380
[ 1165.275068][   T31] 
[ 1165.277910][   T31] =============================================
[ 1165.277910][   T31] 
[ 1165.286507][   T31] NMI backtrace for cpu 1
[ 1165.286526][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1165.286549][   T31] Tainted: [L]=SOFTLOCKUP
[ 1165.286555][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[ 1165.286565][   T31] Call Trace:
[ 1165.286572][   T31]  <TASK>
[ 1165.286580][   T31]  dump_stack_lvl+0x100/0x190
[ 1165.286605][   T31]  nmi_cpu_backtrace.cold+0x12d/0x151
[ 1165.286626][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1165.286648][   T31]  nmi_trigger_cpumask_backtrace+0x21c/0x2a0
[ 1165.286670][   T31]  sys_info+0x141/0x190
[ 1165.286686][   T31]  watchdog+0xcb1/0x1030
[ 1165.286708][   T31]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1165.286730][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1165.286747][   T31]  ? __kthread_parkme+0x18c/0x230
[ 1165.286771][   T31]  ? kthread+0x13a/0x450
[ 1165.286792][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1165.286807][   T31]  kthread+0x370/0x450
[ 1165.286829][   T31]  ? __pfx_kthread+0x10/0x10
[ 1165.286854][   T31]  ret_from_fork+0x72b/0xd50
[ 1165.286875][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1165.286896][   T31]  ? __switch_to+0x800/0x10f0
[ 1165.286929][   T31]  ? __pfx_kthread+0x10/0x10
[ 1165.286953][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1165.286988][   T31]  </TASK>
[ 1165.286995][   T31] Sending NMI from CPU 1 to CPUs 0:
[ 1165.423164][    C0] NMI backtrace for cpu 0
[ 1165.423182][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1165.423201][    C0] Tainted: [L]=SOFTLOCKUP
[ 1165.423205][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[ 1165.423216][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[ 1165.423240][    C0] Code: 06 8e 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 d9 12 00 fb f4 <e9> bc 48 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
[ 1165.423254][    C0] RSP: 0018:ffffffff8e807e10 EFLAGS: 00000242
[ 1165.423266][    C0] RAX: 00000000049c19cb RBX: ffffffff8e891480 RCX: ffffffff8bb8c2d5
[ 1165.423276][    C0] RDX: 0000000000000000 RSI: ffffffff8e1a2a17 RDI: ffffffff8c400c80
[ 1165.423285][    C0] RBP: fffffbfff1d12290 R08: 0000000000000001 R09: ffffed101708678d
[ 1165.423294][    C0] R10: ffff8880b8433c6b R11: 0000000000000000 R12: 0000000000000000
[ 1165.423302][    C0] R13: 0000000000000000 R14: 1ffffffff1d00fc6 R15: dffffc0000000000
[ 1165.423311][    C0] FS:  0000000000000000(0000) GS:ffff888123dec000(0000) knlGS:0000000000000000
[ 1165.423326][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1165.423335][    C0] CR2: 00007f1b2c68da88 CR3: 0000000077c76000 CR4: 00000000003526f0
[ 1165.423344][    C0] Call Trace:
[ 1165.423349][    C0]  <TASK>
[ 1165.423353][    C0]  default_idle+0x9/0x10
[ 1165.423372][    C0]  default_idle_call+0x6c/0xb0
[ 1165.423391][    C0]  do_idle+0x3a7/0x5b0
[ 1165.423411][    C0]  ? __pfx_do_idle+0x10/0x10
[ 1165.423430][    C0]  cpu_startup_entry+0x4f/0x60
[ 1165.423446][    C0]  rest_init+0x251/0x260
[ 1165.423458][    C0]  ? __pfx_x86_late_time_init+0x10/0x10
[ 1165.423473][    C0]  start_kernel+0x48e/0x490
[ 1165.423493][    C0]  x86_64_start_reservations+0x24/0x30
[ 1165.423513][    C0]  x86_64_start_kernel+0x12b/0x130
[ 1165.423533][    C0]  common_startup_64+0x13e/0x158
[ 1165.423559][    C0]  </TASK>
[ 1165.613561][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[ 1165.620436][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1165.631128][   T31] Tainted: [L]=SOFTLOCKUP
[ 1165.635451][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[ 1165.645502][   T31] Call Trace:
[ 1165.648860][   T31]  <TASK>
[ 1165.651803][   T31]  dump_stack_lvl+0x100/0x190
[ 1165.656475][   T31]  vpanic+0x552/0x970
[ 1165.660543][   T31]  ? __pfx_vpanic+0x10/0x10
[ 1165.665033][   T31]  ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0
[ 1165.671189][   T31]  panic+0xd1/0xe0
[ 1165.674898][   T31]  ? __pfx_panic+0x10/0x10
[ 1165.679306][   T31]  ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0
[ 1165.685453][   T31]  ? nmi_trigger_cpumask_backtrace+0x260/0x2a0
[ 1165.691607][   T31]  ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0
[ 1165.697772][   T31]  ? watchdog.cold+0x1ec/0x234
[ 1165.702979][   T31]  ? watchdog+0xcc1/0x1030
[ 1165.707409][   T31]  watchdog.cold+0x1fd/0x234
[ 1165.712022][   T31]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1165.717829][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1165.722495][   T31]  ? __kthread_parkme+0x18c/0x230
[ 1165.727515][   T31]  ? kthread+0x13a/0x450
[ 1165.731744][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1165.736404][   T31]  kthread+0x370/0x450
[ 1165.740465][   T31]  ? __pfx_kthread+0x10/0x10
[ 1165.745044][   T31]  ret_from_fork+0x72b/0xd50
[ 1165.749619][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1165.754719][   T31]  ? __switch_to+0x800/0x10f0
[ 1165.759385][   T31]  ? __pfx_kthread+0x10/0x10
[ 1165.763969][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1165.768737][   T31]  </TASK>
[ 1165.771975][   T31] Kernel Offset: disabled
[ 1165.776283][   T31] Rebooting in 86400 seconds..