last executing test programs:

13m23.46319588s ago: executing program 0 (id=86):
r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5)
ioctl$TCSETA(r0, 0x8924, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4, 0x0, "4feda26323b172e0"})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
unshare(0x8000000)
semget$private(0x0, 0x4000, 0x0)
fanotify_init(0x0, 0x400)
r3 = socket(0x1, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r3}, 0x20)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCXONC(r6, 0x560b, 0x0)
ioctl$TCSETS(r6, 0x5402, &(0x7f0000000100)={0x1, 0x8, 0x6, 0x80, 0x9, "efa25ba54a99c5ea267ff8beae91ff741dab5d"})
bind$unix(r3, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0)
recvmmsg(r3, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x2, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x7fff, 0x1, 0x4, 0x8, 0xa4, 0x3, 0x3, 0xb69, 0xc1, 0x4, 0x1, 0x20000003, 0x40000008, 0x20101, 0x80000000, 0x9, 0x3, 0xa, 0x1, 0xfffffffd, 0x401, 0x6, 0x9, 0x2, 0x4, 0x5, 0x66c, 0x200, 0x3, 0x0, 0xe, 0x5, 0x100, 0x3, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11003, 0x8, 0x7, 0xfffffffd, 0x4, 0x1, 0x7b, 0x3ff, 0xa, 0xfffffffb, 0xf, 0x9, 0xd7, 0x1fa4860a, 0x7, 0xaa, 0xfff, 0x2, 0x180000, 0x7, 0x8b, 0x7, 0x2af, 0xf5, 0xffffffff, 0x2, 0x6, 0x9, 0x4, 0x7, 0x9, 0x1, 0x4, 0x0, 0x8, 0x752, 0x5, 0x4, 0x0, 0x10001, 0x2, 0xfffffffd, 0x6, 0x8, 0x8, 0x8, 0xffffffff, 0x5, 0x2, 0x80, 0xc, 0x5, 0x0, 0x81, 0x2000b, 0x5, 0x400, 0x6, 0x22, 0x8, 0x4, 0xd9a, 0x800809, 0x0, 0x3ff, 0x4, 0x2, 0x5, 0x8, 0x0, 0x80000000, 0xb57, 0x0, 0x3, 0x4, 0x49b1, 0x401, 0x8, 0xd0a, 0x401, 0x1, 0x200, 0xc5d, 0x2]}})
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xc)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740))

13m17.959247681s ago: executing program 0 (id=99):
socket$unix(0x1, 0x2, 0x0) (async)
r0 = socket$unix(0x1, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000000)=0x2, 0x4)
connect$unix(r0, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e) (async)
connect$unix(r0, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = syz_io_uring_setup(0x15fa, &(0x7f0000000140)={0x0, 0xd73c, 0x2}, &(0x7f00000001c0), &(0x7f00000003c0))
syz_io_uring_setup(0x263c, &(0x7f0000000840)={0x0, 0xb8da, 0x186a, 0x0, 0x169, 0x0, r1}, 0x0, 0x0)

13m16.900677606s ago: executing program 0 (id=102):
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_clone(0x2b00b100, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x101201, 0x0)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000480)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa})
write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
close_range(r1, r1, 0x0)
close(r1)
ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047454, 0x0)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r4 = accept4$x25(0xffffffffffffffff, &(0x7f0000000080)={0x9, @remote}, &(0x7f00000000c0)=0x12, 0x800)
close(r4)
read$char_usb(r3, &(0x7f0000000000)=""/74, 0x4a)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
getdents64(r5, &(0x7f0000000100)=""/83, 0x53)
getdents(r5, &(0x7f0000000000)=""/116, 0x74)
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, <r6=>0x0})
r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[<r8=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, r8})
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r7, 0xc01064ab, 0x0)
ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000440)={0x5})
r9 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r9, 0xc05064a7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1, 0xffffffffffffffa5})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[r6, 0x0, 0x0, 0x0], 0x4, 0x80000})
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x1380, &(0x7f0000000100)=ANY=[])
socket$nl_netfilter(0x10, 0x3, 0xc)

13m13.026433351s ago: executing program 0 (id=108):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) (async)
r2 = getpgid(0x0) (async)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) (async)
r3 = syz_pidfd_open(r2, 0x0)
r4 = pidfd_getfd(r3, r3, 0x0)
setns(r4, 0x66020000) (async)
mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
umount2(&(0x7f0000000040)='.\x00', 0x2) (async)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x76, &(0x7f0000000140)=@assoc_value, 0x8) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r6 = creat(&(0x7f00000005c0)='./file0\x00', 0x0)
close(r6) (async)
setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000180)=0x10, 0x4)
connect$pptp(r6, &(0x7f00000002c0)={0x18, 0x2, {0x2, @rand_addr=0x64010102}}, 0x1e) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRES8=r5], 0x6c}, 0x1, 0x0, 0x0, 0x20001080}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="6800000000010104020000000000000002000000240001801400018008000100e000000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000040006"], 0x68}}, 0x0)

13m12.128558169s ago: executing program 0 (id=111):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, 0x0, 0x0)
sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_team\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2004000}, 0x4004044)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000680)={{0x5, 0x1}, 'port0\x00', 0xad, 0x100200, 0x80000000, 0x8, 0xfe01, 0x1, 0x3, 0x0, 0x0, 0x1})
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x400c000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x3, 0x101)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r6, &(0x7f0000000300)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c0001007665746863a955562d288ab46d167a4fea85a9b846ac90a32c2453e2e487da494df37b3c6ea94192717897822a64cdec84e5bbfc80076ee54e735d7cfddc"], 0x48}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000980)=@delchain={0x45, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x5}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4000880)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r8 = socket(0x11, 0xa, 0x5)
ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendto$inet(r8, &(0x7f0000000000)="cf3a19d02a04e49cf90a0a4363d1", 0xe, 0x10004001, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10)
r9 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00')
ioctl$KVM_GET_STATS_FD_vm(r9, 0xaece)

13m11.124071079s ago: executing program 0 (id=114):
syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x100)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
modify_ldt$write2(0x11, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24008800)
socket$can_bcm(0x1d, 0x2, 0x2)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x10b, 0x8000000000006})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
getpgrp(0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r3, @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000380)={0x28, r6, 0x1, 0x0, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}]}, 0x28}}, 0x0)
r7 = dup3(r2, r1, 0x0)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x10000000000)
ioctl$sock_SIOCADDDLCI(r7, 0x8980, &(0x7f00000002c0)={'syz_tun\x00', 0xc9e})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0x48, 0x2, 0x8002c}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/216, 0xd8, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0x9, 0x1, 0x48}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0})
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x414}, 0x50)

13m10.452940579s ago: executing program 32 (id=114):
syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x100)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
modify_ldt$write2(0x11, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24008800)
socket$can_bcm(0x1d, 0x2, 0x2)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x10b, 0x8000000000006})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
getpgrp(0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r3, @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000380)={0x28, r6, 0x1, 0x0, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}]}, 0x28}}, 0x0)
r7 = dup3(r2, r1, 0x0)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x10000000000)
ioctl$sock_SIOCADDDLCI(r7, 0x8980, &(0x7f00000002c0)={'syz_tun\x00', 0xc9e})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0x48, 0x2, 0x8002c}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/216, 0xd8, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0x9, 0x1, 0x48}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0})
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x414}, 0x50)

13m2.762520447s ago: executing program 3 (id=135):
r0 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x800)
ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f00000001c0)={{}, "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"})
r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000680)='cmdline\x00')
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = socket(0x2, 0x80805, 0x0)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_FILES_UPDATE={0x14, 0x2c, 0x0, 0x0, 0xa78, &(0x7f00000004c0)=[r3, r3, r3], 0x3, 0x0, 0x1, {0x0, r6}})
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=@newtaction={0xd4, 0x30, 0x1, 0x0, 0x0, {}, [{0xc0, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x9655d7820cbcfa29, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x3, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbmod={0x78, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="d54c048084f7"}]}, {0x33, 0x6, "41d1393df1a73d1ab779b495bced558a0d8e644208997dd9cf542fcbd9dc6c68262a1ecffa511a8e48c151939d3f8c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x800}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6)
r7 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r9, &(0x7f0000000000), 0x0, 0x80)
sched_setaffinity(r7, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setreuid(0xee00, 0x0)
open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x4)
getuid()
fsetxattr$system_posix_acl(r4, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f00000011c0)=ANY=[@ANYRESHEX=r2, @ANYRESDEC=r7, @ANYRES16=r5, @ANYRES64=r0, @ANYRESOCT=r1, @ANYRES8=r9, @ANYRES16=r2, @ANYRES32], 0x24, 0x2)
openat$cgroup_ro(r3, &(0x7f00000000c0)='memory.swap.events\x00', 0x275a, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000380)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d63, 0x3}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0)

13m1.684439482s ago: executing program 3 (id=136):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
statfs(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
r1 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000100)={r2, 0x2, &(0x7f0000000000)=[0x140, 0x4], &(0x7f0000000040)=[0x101, 0x1, 0x67a2, 0x3, 0x1, 0xf437, 0xfff], &(0x7f00000000c0)=[0x7c, 0xfffd, 0x100, 0x1]})
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x54, 0x10, 0x403, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0xfffffff4}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)

13m0.017014827s ago: executing program 3 (id=142):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = socket$unix(0x1, 0x1, 0x0)
recvmmsg$unix(r0, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40010000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000000100000027bf000000050000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000008050870016b0fabdac337e5865ce31920bf6ad9d149b846367ce0d53728a2367d51cd702a2953a32d8e78b3899e37127a61fd36be0a94cb5791af3af868720250e7aa905e8a33b1b6907fba6"], 0x48)
mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r2, 0x0)
mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil)
mount$9p_fd(0x0, 0x0, 0x0, 0x800, 0x0)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000019340), r3)
read$FUSE(r3, 0x0, 0x0)
openat(r3, 0x0, 0x400001, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000100003055f0400"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000001c0012800b0001006d616373656300000c00028005000f000200000008000500", @ANYRES32, @ANYBLOB], 0x44}}, 0x0)
syz_open_dev$dri(0x0, 0x4, 0x14000)
openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x121800, 0x0)
setuid(0xee00)
ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f0000000200)={0xb000, 0x1000, 0x9, 0x1, 0x80000000})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)

12m58.240264307s ago: executing program 3 (id=147):
r0 = socket(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2301091, 0x0)
umount2(&(0x7f0000000080)='./file0\x00', 0x2)
r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='pids.events\x00', 0x300, 0x0)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f0000000280)={'ip6tnl0\x00', {0x2, 0x0, @empty}})
shutdown(r0, 0x1)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0)
sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x130, r4, 0x20, 0x70bd66, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x10001}, {0x6, 0x11, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x3c8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9d}, {0x6, 0x11, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1ff}, {0x6, 0x11, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xf}, {0x6, 0x11, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x14}}]}, 0x130}, 0x1, 0x0, 0x0, 0x24000080}, 0x4000800)
setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0)
write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000002c0))

12m57.840641244s ago: executing program 3 (id=148):
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)="eb4c", 0x2}], 0x1}, 0x4045)
r4 = syz_open_dev$vim2m(&(0x7f0000000280), 0xfffffffffffffffe, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000300)={0x9, 0x1, 0x0, 0x0, 0x2})
setsockopt$sock_attach_bpf(r2, 0x1, 0x10, &(0x7f0000001280), 0x4)
recvmsg$unix(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2122)
sendmsg$inet(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000012c0)="f9", 0x1}], 0x1}, 0x48844)
fallocate(0xffffffffffffffff, 0x0, 0x1000000, 0x3)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)

12m57.568013349s ago: executing program 3 (id=149):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x239, 0x0, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
socket$unix(0x1, 0x2, 0x0)
write$sysctl(0xffffffffffffffff, &(0x7f0000000000)='4\x00', 0x2)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
lsm_get_self_attr(0x64, &(0x7f0000000040), &(0x7f0000000000)=0x101, 0x0)
lsm_get_self_attr(0x64, &(0x7f0000000040)={0x0, 0x0, 0xd1, 0xb1, ""/177}, &(0x7f0000000140)=0xd1, 0x1)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)
socket$inet6_tcp(0xa, 0x1, 0x0)

12m56.737892087s ago: executing program 33 (id=149):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x239, 0x0, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
socket$unix(0x1, 0x2, 0x0)
write$sysctl(0xffffffffffffffff, &(0x7f0000000000)='4\x00', 0x2)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
lsm_get_self_attr(0x64, &(0x7f0000000040), &(0x7f0000000000)=0x101, 0x0)
lsm_get_self_attr(0x64, &(0x7f0000000040)={0x0, 0x0, 0xd1, 0xb1, ""/177}, &(0x7f0000000140)=0xd1, 0x1)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)
socket$inet6_tcp(0xa, 0x1, 0x0)

9m33.679651623s ago: executing program 2 (id=748):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0)={<r1=>0xffffffffffffffff}, 0x13f, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000280)={0x13, 0x10, 0xfa00, {&(0x7f0000000380), r1, 0x1}}, 0x18)
syz_usb_connect(0x2, 0x0, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00'})
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}, 0x1, 0x0, 0x0, 0x24000890}, 0x0)
sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x2c00, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x25000000)
setuid(0xee00)
r4 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r4, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0)
r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
syz_io_uring_setup(0x120e, &(0x7f0000000580)={0x0, 0x17cd, 0x100, 0x0, 0x14a}, &(0x7f00000000c0), &(0x7f0000000140))
syz_usb_connect(0x3, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x7d, 0xa8, 0xe3, 0x40, 0xdba, 0x5000, 0x3d88, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x0, 0x10, [{{0x9, 0x4, 0x8c, 0x0, 0x0, 0x77, 0xb3, 0x6a}}]}}]}}, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54b24f15955565060608d70ff6e425a6c36af37b33facd22dc8a9c7044410d324b03e654156762092a62fea8f13441431ce248bfc73a6726ee61b5191d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d100a05e97ed3dcad452db6e08a991e2c78b057f55deebde6f0b11ce65700c0a1ad7946ff7c355db87566e3e5abb7a37b52876fd9fa194c09273031900"})

9m30.268261786s ago: executing program 2 (id=766):
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000140016"], 0x4c}}, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, &(0x7f0000000ec0)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x120, 0x29, 0x4, {0x4, 0x20, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x71, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888"}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x10, "e80ee304ecb784ec4655260cecea14e4"}]}}}, @hoplimit={{0x14}}, @hopopts={{0xd8, 0x29, 0x36, {0x5e, 0x17, '\x00', [@generic={0xff, 0x45, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70dac43574"}, @pad1, @pad1, @calipso={0x7, 0x40, {0x3, 0xe, 0x0, 0xfff, [0x2, 0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @calipso={0x7, 0x8, {0x0, 0x0, 0x7, 0x6}}, @generic={0x8}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x8000, 0xffffffffffffff04]}}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @rthdr={{0x18}}], 0x258}}], 0x1, 0x810)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

9m29.448623457s ago: executing program 2 (id=769):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
futex(0x0, 0x1, 0x0, 0x0, 0x0, 0xc57ffffc)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
syz_emit_ethernet(0x0, 0x0, 0x0)
ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
socket$netlink(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008085}, 0x20000000)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}, 0x1, 0x0, 0x0, 0x2400e084}, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
r3 = eventfd(0x0)
ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000080)={0x1, r3})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/67, 0x0, 0x4})
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x66, &(0x7f00000001c0)=""/102}]})
ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3})
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1)

9m28.294921047s ago: executing program 2 (id=771):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4)
r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2dbe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xfc, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0) (async)
pipe2$watch_queue(&(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000200), &(0x7f0000000240)=0x4)
r5 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
r6 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r5)
keyctl$KEYCTL_WATCH_KEY(0x20, r6, r3, 0x0)
keyctl$setperm(0x5, r6, 0x2201)
r7 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r7, 0x84, 0x70, 0x0, &(0x7f0000000000)=0x17)
syz_usb_control_io$hid(r2, &(0x7f0000000480)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xa, {[@global=@item_4={0x3, 0x1, 0x35acf18683962edc, "a1a771b9"}, @global=@item_4={0x3, 0x1, 0x6, "05f11032"}]}}, 0x0}, 0x0)

9m26.602379205s ago: executing program 2 (id=781):
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='GPL\x00', 0x200, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r1, r1, 0x2f, 0x0, @void}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xc, &(0x7f0000000180)={0x1000000000000d, 0xffffffffffffffff}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESDEC=r2, @ANYRES8=r0], 0x48)
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000240)='./file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x3925099, 0x0)
io_setup(0x4, &(0x7f00000014c0)=<r4=>0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00')
io_submit(r4, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffe, r5, 0x0}])
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0xfffffffffffffeec)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0003}]})
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

9m24.413159191s ago: executing program 2 (id=788):
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 64)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) (async, rerun: 64)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r2, 0x0) (async)
socket$can_bcm(0x1d, 0x2, 0x2) (async)
poll(&(0x7f0000000180), 0x0, 0x11ff)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x4048884)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={<r3=>0xffffffffffffffff})
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24082}, 0xa800)
ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000000)={'veth0_macvtap\x00', 0x6}) (async)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) (async)
r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async)
r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r5, &(0x7f0000000780), 0x12) (async)
bind$x25(r4, &(0x7f0000000080), 0x12) (async)
r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000700)={'bond0\x00'})

9m9.15608618s ago: executing program 34 (id=788):
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 64)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) (async, rerun: 64)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r2, 0x0) (async)
socket$can_bcm(0x1d, 0x2, 0x2) (async)
poll(&(0x7f0000000180), 0x0, 0x11ff)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x4048884)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={<r3=>0xffffffffffffffff})
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24082}, 0xa800)
ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000000)={'veth0_macvtap\x00', 0x6}) (async)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) (async)
r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async)
r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r5, &(0x7f0000000780), 0x12) (async)
bind$x25(r4, &(0x7f0000000080), 0x12) (async)
r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000700)={'bond0\x00'})

24.20927032s ago: executing program 4 (id=2403):
r0 = socket$packet(0x11, 0x2, 0x300)
syz_usb_connect(0x0, 0xb6, &(0x7f0000000280)=ANY=[@ANYBLOB="12010003cf7e8f4040201f7200f2010203010902a400018104004f0904870605a97a37020a24010a0b06020102092403050703020496062404029cfe09050b004000800000072501af82a7ce1932dc70000464040507250103"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1555555555555709})
r1 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gre0\x00', <r2=>0x0})
syz_usb_connect$hid(0x632005c72e5fda11, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x0, 0x6a3, 0xccb, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xa0, 0xc0, 0x3, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x1, 0xf1, {0x9, 0x21, 0x8, 0x40, 0x1, {0x22, 0xa9f}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xfa, 0x7, 0xfa}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0xf3, 0xe6, 0x9}}]}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x0, 0x3, 0x2, 0x20, 0xf7}, 0x19, &(0x7f0000000180)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "76a2bb063e9b7a2d3fea4afd97c8efe1"}]}, 0x7, [{0xf, &(0x7f00000001c0)=@string={0xf, 0x3, "fa497ec27eac21744e9540118d"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x40d}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x42b}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x1401}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4}}]})
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, 0x0, &(0x7f0000000280))
syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2)
ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000480)={0x0, 0x2, 0xd})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x8, 0x8, 0x22, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x10000000}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r3, &(0x7f0000000080), 0x0}, 0x20)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x5)
socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect(0x3, 0x36, &(0x7f0000000c40)={{0x12, 0x1, 0x110, 0xd4, 0x80, 0x54, 0x8, 0x1b3d, 0x108, 0x2900, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x7, 0xc, 0x30, 0x81, [{{0x9, 0x4, 0x38, 0x95, 0x1, 0xc2, 0x63, 0x0, 0x7a, [@hid_hid={0x9, 0x21, 0x5, 0xc7, 0x1, {0x22, 0xfd0}}], [{{0x9, 0x5, 0x9, 0x0, 0x8, 0x8, 0x10, 0x80}}]}}]}}]}}, 0x0)
sendto$packet(r0, 0x0, 0x0, 0x4000, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0xff, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14)

18.723339204s ago: executing program 4 (id=2413):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
wait4(0x0, 0x0, 0x2, 0x0)
r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000440), 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x19, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x4b, 0x89}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f0000000000)={0x0, 0x399a, 0x5, 0x1, 0x2})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc)
syz_usb_control_io$rtl8150(r1, &(0x7f00000002c0)={0x14, &(0x7f00000001c0)={0x20, 0x23, 0x2, {0x2, 0x10}}, 0x0}, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sockstat\x00')
preadv(r5, &(0x7f0000003380)=[{&(0x7f00000020c0)=""/168, 0xa8}], 0x1, 0xffffffc0, 0x10000)
sched_setscheduler(0x0, 0x5, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000880))

15.102410602s ago: executing program 4 (id=2416):
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) (async)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
sync() (async)
write$vga_arbiter(r0, 0x0, 0xc)

13.030235859s ago: executing program 7 (id=2420):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x18}, @val={0x3, 0x1, 0x3, 0x4, 0xc4, 0x10}, @ipv4=@gre={{0x5, 0x4, 0x0, 0x26, 0xdd, 0x68, 0x0, 0x4d, 0x2f, 0x0, @multicast1, @broadcast}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x9], "df9bec600741ab7678efacbb4bb5eafe41dcf381519d333f7db40600000000000000bac8a3c61f767523cf49747979000000001e5c9d13eb790eef1c4576f02d0079a5110612701de9a2136391ed7d9927ebe14e3f1497a19e5a9f0d45ef3be53ee4e9092b75c4"}, {0x8, 0x88be, 0x3, {{0xa, 0x1, 0x3, 0x3, 0x1, 0x2, 0x0, 0x4}, 0x1, {0x5}}}, {0x8, 0x22eb, 0x3, {{0x9, 0x2, 0xe, 0x3, 0x1, 0x3, 0x7, 0x3}, 0x2, {0x8, 0x8, 0x0, 0xd, 0x0, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x3, "a33ce789860dc984c201b1e28a9fe3cd0d2bcc93a01e37ac14a0f11b"}}}}, 0xeb)
fanotify_init(0x79, 0x0)

12.89141048s ago: executing program 5 (id=2422):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, 0x0, 0x275a, 0x0)
read(r1, &(0x7f0000000900)=""/198, 0xc6)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10)
sendmmsg$inet6(r2, &(0x7f0000003f00)=[{{0x0, 0xffffffffffffff41, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1}], 0x1}}], 0x1, 0x0)
socket(0x40000000015, 0x5, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_OPENQRY(r4, 0x4b46, &(0x7f0000000000))
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000280)='port', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4010)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={<r7=>0xffffffffffffffff}, 0x13f, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r6, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r7}}, 0x30)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r6, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {&(0x7f00000008c0)={<r8=>0xffffffffffffffff}, 0x4, r7, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0)
ptrace$ARCH_GET_CPUID(0x1e, 0x0, 0x0, 0x1011)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r6, &(0x7f0000000800)={0x11, 0x10, 0xfa00, {&(0x7f00000007c0), r8}}, 0x18)
syz_genetlink_get_family_id$nfc(&(0x7f00000019c0), r3)
socket$kcm(0x29, 0x7, 0x0)

12.84408971s ago: executing program 4 (id=2423):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
wait4(0x0, 0x0, 0x2, 0x0)
r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000440), 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x19, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x4b, 0x89}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f0000000000)={0x0, 0x399a, 0x5, 0x1, 0x2})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc)
syz_usb_control_io$rtl8150(r1, &(0x7f00000002c0)={0x14, &(0x7f00000001c0)={0x20, 0x23, 0x2, {0x2, 0x10}}, 0x0}, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sockstat\x00')
preadv(r5, &(0x7f0000003380)=[{&(0x7f00000020c0)=""/168, 0xa8}], 0x1, 0xffffffc0, 0x10000)
sched_setscheduler(0x0, 0x5, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000880))

12.6724771s ago: executing program 7 (id=2426):
socket$inet(0x10, 0x3, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
futex(0x0, 0x1, 0x0, 0x0, 0x0, 0xc57ffffc)
read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000)
syz_emit_ethernet(0x0, 0x0, 0x0)
ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0))
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0x0)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000080)={0x1, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/67, 0x0, 0x4})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f00000006c0)=""/245, &(0x7f00000000c0)=""/77, &(0x7f0000000480)=""/57, 0xa000})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x66, &(0x7f00000001c0)=""/102}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1)

12.671968204s ago: executing program 6 (id=2427):
socket(0x10, 0x3, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0x0, 0xc9}}}, 0x6)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0)
read$msr(r0, &(0x7f0000048040)=""/102392, 0x18ff8)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001680)={0x14, 0x3a, 0x229, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0xf)
socket(0x10, 0x3, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20)
connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20)
sendmmsg$inet6(r2, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00)
open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0)

12.613939991s ago: executing program 5 (id=2428):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000140)={'wg1\x00', <r2=>0x0})
sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r1, @ANYBLOB="00022bbd7000fedbdf25030000001800068014000400ff01000000000000000000000000000108000200020000001c000180060001000a000000080006000800000008000700", @ANYRES32=r2, @ANYBLOB="0800020007000000050005000f0000003800018008000300ac1414bb08000300ac1414bb080006001400000008000300ffffffff14000400fc02000000000000000000000000000008000400090000000500050003000000c1e79bbc33d3705a4e86366284297d0570ca380ed8e7a9095118aefc6ca316c867ec7a0b"], 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x8000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x4040000)

7.066140843s ago: executing program 4 (id=2429):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
wait4(0x0, 0x0, 0x2, 0x0)
r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000440), 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x19, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x4b, 0x89}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f0000000000)={0x0, 0x399a, 0x5, 0x1, 0x2})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc)
syz_usb_control_io$rtl8150(r1, &(0x7f00000002c0)={0x14, &(0x7f00000001c0)={0x20, 0x23, 0x2, {0x2, 0x10}}, 0x0}, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sockstat\x00')
preadv(r5, &(0x7f0000003380)=[{&(0x7f00000020c0)=""/168, 0xa8}], 0x1, 0xffffffc0, 0x10000)
sched_setscheduler(0x0, 0x5, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000880))

7.053996187s ago: executing program 7 (id=2430):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0xfffffffb, 0x80, 0x3, 0x0, 0x0, 0x8}, 0x1c)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000005e000ffb28bd7000ffdbdf2500", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x44040)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000000)={0x0, 'bridge_slave_1\x00', {0x3}, 0x2})
recvmsg(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x102)
syz_emit_ethernet(0x86, &(0x7f0000000000)={@multicast, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "ff690b", 0x48, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100, 0x0, 0x8003, [0x1ff, 0xb]}, {0x0, 0x0, 0x0, 0x0, 0x100}}}}}}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x4, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x1)
r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$binfmt_elf64(r4, &(0x7f0000002600)=ANY=[], 0x1820)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x12}}, 0x40)

7.01284062s ago: executing program 5 (id=2431):
munmap(&(0x7f0000001000/0x2000)=nil, 0x2000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018010b0000000000180000001800000002000000000000000000000d020000000000000000000005090000000000ae98a27db6272ff3de55e81a95a901decbd0f3dcb0150e4947c4cdc176c95b9dd702e59f2686bea3617c6b7edccb763c611485fa53ce272cdad84bd7cebeebbcda45a7ba72aec42ee776cad1f956169d508c3eba52c5172e30966273cf0bc65301dd5f5bfb9206b504560fa0f243bb9a1f318c6502d8349631dbc73491842b65f61ca41d05937e73e4fd3ce52c01ae4ead3e0167d79171e4d7bff264f998d16553bf7362f887d5c201320b6a7a54653e8bdbcd8fd301fad9cf684e852c10903bf375c89f"], 0x0, 0x32, 0x0, 0x1, 0x7ff}, 0x28)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
ptrace$ARCH_MAP_VDSO_32(0x1e, r2, 0xffffffffffffff80, 0x2002)
sendmmsg$unix(r4, &(0x7f0000000000), 0x40001e0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r1)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket(0xa, 0x3, 0x2)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e23, 0x9, @loopback, 0xd9b}, 0x1c)
sendmmsg$inet6(r5, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)}}], 0x1, 0x800)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001ac0)={0xffffffffffffffff, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x140000, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x400]}})
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TCFLSH(r6, 0x541b, 0x7ffffffffffffffe)

7.011259935s ago: executing program 6 (id=2432):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
syz_open_dev$usbfs(0x0, 0x77, 0x103341)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_host_features={{0x3d, 0xe}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, "89ac154d507f3101"}}}, 0x11)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000180)={0x1, @default, @netrom={'nr', 0x0}, 0x4, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x28, 0x4, 0x8, 0x801, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0xc800)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000)
shmdt(0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x773568b9b38b679a}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)

6.897402056s ago: executing program 1 (id=2433):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x2})
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, 0x0, 0x0)
sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x8050)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000000)=0x100)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x45)

6.015411536s ago: executing program 5 (id=2434):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0)
read$msr(r0, &(0x7f0000048040)=""/102392, 0x18ff8)
socket(0x10, 0x3, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='\n\x00\x00\x00'], 0x2d)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20)
connect$l2tp6(r1, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20)
sendmmsg$inet6(r1, &(0x7f0000000ac0), 0x0, 0xff00)
open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0)

5.830489756s ago: executing program 1 (id=2435):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000'])
read$FUSE(r0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000", @ANYRES32=r3, @ANYBLOB="08002600ad160000400033001000000008021100000008021100000008021100000100"], 0x68}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)

4.965258893s ago: executing program 1 (id=2436):
pipe2$watch_queue(&(0x7f0000000200), 0x80)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)='*', 0x1}], 0x1}}], 0x1, 0x0)
r2 = dup3(r0, r1, 0x0)
mq_open(&(0x7f0000000040)='\x00', 0x40, 0xa1, &(0x7f0000000180)={0xa, 0x100, 0x6, 0x8})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r2)
syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x82)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000020000000000000000000850000003600000095"], &(0x7f00000000c0)='GPL\x00', 0x5}, 0x94)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r5=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, r5, 0x25, 0x0, @void}, 0x10)
socket$inet_mptcp(0x2, 0x1, 0x106)
syz_open_dev$tty1(0xc, 0x4, 0x4)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0xb, 0x2, 0xb49, 0x800000000000009, 0x3, 0x2, 0x3}, 0x0)
r9 = fsopen(&(0x7f0000000040)='afs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0)
fsetxattr$security_ima(r6, &(0x7f0000000200), &(0x7f0000000240)=ANY=[@ANYBLOB="044b"], 0x2, 0x0)
fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0)
r10 = userfaultfd(0x1)
ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f00000000c0))
syz_emit_ethernet(0x36, &(0x7f0000000300)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2c, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x1}}}}}}, 0x0)
ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})

4.8247272s ago: executing program 5 (id=2437):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a54000000060a010400000000000000000a0000040900010073797a31000000000900020073797a320000000028000480240001800b0001007470726f7879000014000280080002400000001508000140"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)={0x2040, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x2014, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ffd}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x2040}}, 0x0)

3.689646547s ago: executing program 6 (id=2438):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, 0x0, 0x275a, 0x0)
read(r1, &(0x7f0000000900)=""/198, 0xc6)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10)
sendmmsg$inet6(r2, &(0x7f0000003f00)=[{{0x0, 0xffffffffffffff41, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1}], 0x1}}], 0x1, 0x0)
socket(0x40000000015, 0x5, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_OPENQRY(r4, 0x4b46, &(0x7f0000000000))
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000280)='port', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4010)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={<r7=>0xffffffffffffffff}, 0x13f, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r6, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r7}}, 0x30)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r6, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {&(0x7f00000008c0)={<r8=>0xffffffffffffffff}, 0x4, r7, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0)
ptrace$ARCH_GET_CPUID(0x1e, 0x0, 0x0, 0x1011)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r6, &(0x7f0000000800)={0x11, 0x10, 0xfa00, {&(0x7f00000007c0), r8}}, 0x18)
syz_genetlink_get_family_id$nfc(&(0x7f00000019c0), r3)
socket$kcm(0x29, 0x7, 0x0)

3.602564602s ago: executing program 1 (id=2439):
munmap(&(0x7f0000001000/0x2000)=nil, 0x2000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018010b0000000000180000001800000002000000000000000000000d020000000000000000000005090000000000ae98a27db6272ff3de55e81a95a901decbd0f3dcb0150e4947c4cdc176c95b9dd702e59f2686bea3617c6b7edccb763c611485fa53ce272cdad84bd7cebeebbcda45a7ba72aec42ee776cad1f956169d508c3eba52c5172e30966273cf0bc65301dd5f5bfb9206b504560fa0f243bb9a1f318c6502d8349631dbc73491842b65f61ca41d05937e73e4fd3ce52c01ae4ead3e0167d79171e4d7bff264f998d16553bf7362f887d5c201320b6a7a54653e8bdbcd8fd301fad9cf684e852c10903bf375c89f"], 0x0, 0x32, 0x0, 0x1, 0x7ff}, 0x28)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
ptrace$ARCH_MAP_VDSO_32(0x1e, r1, 0xffffffffffffff80, 0x2002)
sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x9, @loopback, 0xd9b}, 0x1c)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xd)
ioctl$TCFLSH(r4, 0x541b, 0x7ffffffffffffffe)

3.59945401s ago: executing program 7 (id=2440):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0xfffffffb, 0x80, 0x3, 0x0, 0x0, 0x8}, 0x1c)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000005e000ffb28bd7000ffdbdf2500", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x44040)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000000)={0x0, 'bridge_slave_1\x00', {0x3}, 0x2})
recvmsg(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x102)
syz_emit_ethernet(0x86, &(0x7f0000000000)={@multicast, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "ff690b", 0x48, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100, 0x0, 0x8003, [0x1ff, 0xb]}, {0x0, 0x0, 0x0, 0x0, 0x100}}}}}}}, 0x0)
r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x1)
r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$binfmt_elf64(r3, &(0x7f0000002600)=ANY=[], 0x1820)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x12}}, 0x40)

3.545369901s ago: executing program 5 (id=2441):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}, 0x1, 0x0, 0x0, 0x2400e084}, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
r3 = eventfd(0x0)
ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000080)={0x1, r3})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/67, 0x0, 0x4})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f00000006c0)=""/245, &(0x7f00000000c0)=""/77, &(0x7f0000000480)=""/57, 0xa000})
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x66, &(0x7f00000001c0)=""/102}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1)

3.515644155s ago: executing program 4 (id=2442):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r3, r3, 0x2f, 0x0, @void}, 0x10)
bpf$LINK_DETACH(0x22, 0x0, 0x0)
r4 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r4, &(0x7f0000001540)=[{{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000340)='v', 0xfd13}], 0x1}}], 0x2, 0x48000)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={<r5=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000400)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x7, 0xdff8, 0xb, r5}, 0x20)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r5, 0x7}, &(0x7f0000000240)=0x8)
r6 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)={0x34, 0x0, 0x1, 0x70bd27, 0x25dfd3fb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x34}}, 0x0)
sendmsg$SMC_PNETID_ADD(r4, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x200, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x4040000)
mount(0x0, &(0x7f0000000500)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
getrlimit(0x3, 0x0)
chdir(&(0x7f0000000080)='./file1\x00')
r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
r8 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f00000000c0)='./file1\x00', r8, &(0x7f0000000100)='./file0\x00')
ioctl$AUTOFS_IOC_PROTOSUBVER(r7, 0x40049366, &(0x7f0000000180))
ioctl$AUTOFS_IOC_READY(r8, 0x9360, 0x800000000000001)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0)

2.748773973s ago: executing program 6 (id=2443):
r0 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x1, 0x3}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r3, 0x7a4, &(0x7f0000000040)={{@hyper}, 0x2, 0x6, 0x4, 0x7fff})
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_int(r4, 0x0, 0x34, 0x0, &(0x7f00000001c0)=0x2)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
epoll_create1(0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200), &(0x7f0000000240), 0x2, 0x1)
io_uring_enter(r0, 0x133d, 0x3e000000, 0x8, 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1, {0x6, 0x6d4}, 0xf0}, 0x1)

2.606600142s ago: executing program 1 (id=2444):
munmap(&(0x7f0000001000/0x2000)=nil, 0x2000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018010b0000000000180000001800000002000000000000000000000d020000000000000000000005090000000000ae98a27db6272ff3de55e81a95a901decbd0f3dcb0150e4947c4cdc176c95b9dd702e59f2686bea3617c6b7edccb763c611485fa53ce272cdad84bd7cebeebbcda45a7ba72aec42ee776cad1f956169d508c3eba52c5172e30966273cf0bc65301dd5f5bfb9206b504560fa0f243bb9a1f318c6502d8349631dbc73491842b65f61ca41d05937e73e4fd3ce52c01ae4ead3e0167d79171e4d7bff264f998d16553bf7362f887d5c201320b6a7a54653e8bdbcd8fd301fad9cf684e852c10903bf375c89f"], 0x0, 0x32, 0x0, 0x1, 0x7ff}, 0x28)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
ptrace$ARCH_MAP_VDSO_32(0x1e, r2, 0xffffffffffffff80, 0x2002)
sendmmsg$unix(r4, &(0x7f0000000000), 0x40001e0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r1)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket(0xa, 0x3, 0x2)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e23, 0x9, @loopback, 0xd9b}, 0x1c)
sendmmsg$inet6(r5, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)}}], 0x1, 0x800)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001ac0)={0xffffffffffffffff, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x140000, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x400]}})
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TCFLSH(r6, 0x541b, 0x7ffffffffffffffe)

2.445728772s ago: executing program 7 (id=2445):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x2})
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x8050)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f0000000000))
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x45)

1.437203312s ago: executing program 1 (id=2446):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000'])
read$FUSE(r0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b000000", @ANYRES32=r3, @ANYBLOB="08002600ad160000400033001000000008021100000008021100000008021100000100"], 0x68}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)

1.423193032s ago: executing program 6 (id=2447):
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0)
setsockopt$MRT_DEL_MFC(0xffffffffffffffff, 0x0, 0xcd, &(0x7f0000000180)={@broadcast, @empty, 0x1, "dea7763504bd02040d4a7abe3e869450be08fc0b14d79502cc26ed76a332cd94", 0xfffffffc, 0xfffffffb, 0x10001, 0x7}, 0x3c)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
eventfd(0xc)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0002, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x3e}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x2, &(0x7f0000000240)=[{0x57d, 0x5, 0x28, 0xf234}, {0x1, 0x6, 0x6, 0x2}]})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, &(0x7f0000000480)={0x0, 0x89b, 0xfff})
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x11)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)

1.381683898s ago: executing program 7 (id=2448):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
futex(0x0, 0x1, 0x0, 0x0, 0x0, 0xc57ffffc)
syz_emit_ethernet(0x0, 0x0, 0x0)
ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
socket$netlink(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}, 0x1, 0x0, 0x0, 0x2400e084}, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0x0)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000080)={0x1, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/67, 0x0, 0x4})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f00000006c0)=""/245, &(0x7f00000000c0)=""/77, &(0x7f0000000480)=""/57, 0xa000})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x66, &(0x7f00000001c0)=""/102}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1)

0s ago: executing program 6 (id=2449):
syz_usb_connect$uac1(0x0, 0xae, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000406b1d010140000102030109029c00030105e0810904000000010100000a240100000402210e00000000000009000800010924030600000102fc08240703ae026d740b240402002500f3dd64af0724050112c69c09040100000102000009040101010102000009050109000401064207250180fc020009040200000102000009040201010102"], 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x44, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x667}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x83}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x6, 0xbe, "fb80"}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4814)
r3 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x80000000, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000080)={0x2, 0x2, 0x0, "7173547abb63a05ec5f539ed227607ee7dea3f7728d716a425609829c8860fdb", 0x32344d59})
r5 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0)
fcntl$setlease(r5, 0x400, 0x1)
fcntl$getflags(r5, 0x401)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000e4c000/0x1000)=nil, &(0x7f0000515000/0x4000)=nil, &(0x7f0000cb1000/0x4000)=nil, &(0x7f0000728000/0x4000)=nil, &(0x7f0000990000/0x3000)=nil, &(0x7f0000a08000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000b76000/0x2000)=nil, &(0x7f000070e000/0x3000)=nil, &(0x7f00000000c0)="0912bc585b79d79df4475e32330708966be9148bbb210f6154d2136e2e5835e804a39645c4ec7a694535ade5966a0f954336cbd5707eff81f60cae8d3b643602022e18b2e98f63a8a92692be5f5c6a45b9d56b3659c53422e7a45162ba8f87589d54a3369855285c093d129541757113585467bf827e16f24cf27f7a", 0x7c, r3}, 0x68)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000400)={<r7=>0x0, 0x1, 0x2, [0x400, 0x1]}, &(0x7f0000000440)=0xc)
getsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000480)={r7, 0x5}, &(0x7f00000004c0)=0x8)
r8 = syz_open_dev$mouse(&(0x7f00000001c0), 0x8, 0x10000)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl2\x00', &(0x7f0000000200)={'ip6_vti0\x00', <r9=>0x0, 0x2f, 0x9, 0x4, 0x8, 0x8, @private1, @rand_addr=' \x01\x00', 0x700, 0x40, 0x6, 0x3}})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x3ff, 0x0, r8, 0x1ff, '\x00', r9, 0xffffffffffffffff, 0x2, 0x3, 0x2}, 0x50)
connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000500)={0x1f, @any, 0x4}, 0xa)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd)
ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000540)={0x5, 0x7411, 0x2})
ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})

kernel console output (not intermixed with test programs):

0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12352 comm="syz.1.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7fabc538f749 code=0x7ffc0000
[  599.742634][   T30] audit: type=1326 audit(1768431691.078:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12352 comm="syz.1.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabc538f749 code=0x7ffc0000
[  600.069861][   T30] audit: type=1326 audit(1768431691.078:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12352 comm="syz.1.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fabc538f749 code=0x7ffc0000
[  600.093858][   T30] audit: type=1326 audit(1768431691.548:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12352 comm="syz.1.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabc538f749 code=0x7ffc0000
[  600.315301][   T30] audit: type=1326 audit(1768431691.548:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12352 comm="syz.1.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabc538f749 code=0x7ffc0000
[  600.590051][T12376] set match dimension is over the limit!
[  600.644284][   T30] audit: type=1326 audit(1768431691.588:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12352 comm="syz.1.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fabc538df90 code=0x7ffc0000
[  601.112855][   T30] audit: type=1326 audit(1768431691.588:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12352 comm="syz.1.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fabc538df90 code=0x7ffc0000
[  601.161007][   T30] audit: type=1326 audit(1768431691.588:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12352 comm="syz.1.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabc538f749 code=0x7ffc0000
[  601.227732][   T30] audit: type=1326 audit(1768431691.588:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12352 comm="syz.1.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fabc538f749 code=0x7ffc0000
[  601.310590][   T30] audit: type=1326 audit(1768431691.588:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12352 comm="syz.1.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabc538f749 code=0x7ffc0000
[  601.575657][ T6050] usb 7-1: new high-speed USB device number 30 using dummy_hcd
[  601.584424][T10414] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[  601.594164][    T9] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  601.844183][T10414] usb 6-1: Using ep0 maxpacket: 32
[  601.853503][ T6050] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  601.863192][ T6050] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  601.873792][T10414] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  601.884202][T10414] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  601.892906][    T9] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  601.904866][ T6050] usb 7-1: Product: syz
[  601.910063][ T6050] usb 7-1: Manufacturer: syz
[  601.915041][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  601.923175][T10414] usb 6-1: Product: syz
[  601.927680][ T6050] usb 7-1: SerialNumber: syz
[  601.932351][T10414] usb 6-1: Manufacturer: syz
[  601.940164][T10414] usb 6-1: SerialNumber: syz
[  601.946289][    T9] usb 5-1: config 0 descriptor??
[  601.948742][ T6050] usb 7-1: config 0 descriptor??
[  601.966358][T10414] usb 6-1: config 0 descriptor??
[  602.074126][ T5954] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[  603.330914][T10414] airspy 6-1:0.0: usb_control_msg() failed -110 request 09
[  603.343611][ T6050] usb 7-1: Firmware version (0.0) predates our first public release.
[  603.355147][T10414] airspy 6-1:0.0: Could not detect board
[  603.364260][T10414] airspy 6-1:0.0: probe with driver airspy failed with error -110
[  603.374097][ T6050] usb 7-1: Please update to version 0.2 or newer
[  603.437975][    T9] usb 5-1: Cannot read MAC address
[  603.444464][    T9] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  603.463501][    T9] usb 5-1: USB disconnect, device number 45
[  603.508048][ T5954] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  603.548365][ T5954] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  603.557145][ T5954] usb 8-1: Product: syz
[  603.581542][ T5954] usb 8-1: Manufacturer: syz
[  603.586389][ T5954] usb 8-1: SerialNumber: syz
[  603.599748][ T5954] usb 8-1: config 0 descriptor??
[  604.660994][ T5934] usb 7-1: USB disconnect, device number 30
[  604.676933][ T5954] usb 8-1: Firmware version (0.0) predates our first public release.
[  604.687053][ T5954] usb 8-1: Please update to version 0.2 or newer
[  605.095458][ T5954] usb 6-1: USB disconnect, device number 40
[  605.700181][ T6050] usb 8-1: USB disconnect, device number 15
[  605.708141][T12422] syz1: rxe_newlink: already configured on syz_tun
[  606.599796][T12434] rdma_rxe: rxe_newlink: failed to add syz_tun
[  606.701449][T12437] set match dimension is over the limit!
[  608.314054][T12457] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1559'.
[  608.323057][T12457] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1559'.
[  608.351270][T12457] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1559'.
[  608.360609][T12457] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1559'.
[  608.364144][ T5934] usb 7-1: new high-speed USB device number 31 using dummy_hcd
[  608.743645][ T5934] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  608.759833][ T5934] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  608.770796][ T5934] usb 7-1: Product: syz
[  608.798216][ T5934] usb 7-1: Manufacturer: syz
[  608.817148][ T5934] usb 7-1: SerialNumber: syz
[  608.903202][ T5934] usb 7-1: config 0 descriptor??
[  609.989088][ T5934] usb 7-1: Firmware version (0.0) predates our first public release.
[  610.012479][ T5934] usb 7-1: Please update to version 0.2 or newer
[  610.336033][T12488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1568'.
[  610.345093][T12488] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1568'.
[  610.360817][T12488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1568'.
[  610.369912][T12488] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1568'.
[  610.654818][T12487] rdma_rxe: rxe_newlink: failed to add syz_tun
[  611.020970][T12491] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1569'.
[  611.030167][T12491] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1569'.
[  611.334629][    T9] usb 7-1: USB disconnect, device number 31
[  611.724136][ T6050] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  612.114156][ T6050] usb 2-1: Using ep0 maxpacket: 16
[  612.124887][ T6050] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  612.134125][ T5934] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[  612.136353][ T6050] usb 2-1: config 0 interface 0 has no altsetting 0
[  612.151235][ T6050] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  612.187010][ T6050] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  612.223917][ T6050] usb 2-1: config 0 descriptor??
[  612.314256][ T5934] usb 8-1: Using ep0 maxpacket: 16
[  612.322726][ T5934] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  612.334828][ T5934] usb 8-1: config 0 interface 0 has no altsetting 0
[  612.341919][ T5934] usb 8-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  612.351747][ T5934] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  612.381927][ T5934] usb 8-1: config 0 descriptor??
[  612.454210][    T9] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[  612.702286][T12497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  612.928275][T12500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  612.974415][T12500] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  612.986260][T12497] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  613.011333][    T9] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  613.020547][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  613.037518][T12497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  613.074131][    T9] usb 6-1: Product: syz
[  613.079869][T12500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  613.101207][T12497] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  613.114857][    T9] usb 6-1: Manufacturer: syz
[  613.119496][    T9] usb 6-1: SerialNumber: syz
[  613.126773][T12500] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  613.136514][    T9] usb 6-1: config 0 descriptor??
[  613.328970][ T6050] usbhid 2-1:0.0: can't add hid device: -71
[  613.340118][ T6050] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  613.366796][ T5934] usbhid 8-1:0.0: can't add hid device: -71
[  613.382949][ T5934] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  613.400032][ T5934] usb 8-1: USB disconnect, device number 16
[  613.436413][ T5923] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  613.508757][ T6050] usb 2-1: USB disconnect, device number 40
[  613.682235][ T5923] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  613.692910][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  613.703572][ T5923] usb 5-1: Product: syz
[  613.712215][ T5923] usb 5-1: Manufacturer: syz
[  613.720626][ T5923] usb 5-1: SerialNumber: syz
[  613.748768][ T5923] usb 5-1: config 0 descriptor??
[  614.230923][    T9] usb 6-1: Firmware version (0.0) predates our first public release.
[  614.251879][    T9] usb 6-1: Please update to version 0.2 or newer
[  614.664261][ T6050] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  614.677277][T12539] set match dimension is over the limit!
[  614.911228][ T6050] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  615.006235][ T6050] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  615.051548][ T5923] usb 5-1: Firmware version (0.0) predates our first public release.
[  615.059846][ T5923] usb 5-1: Please update to version 0.2 or newer
[  615.076768][ T6050] usb 2-1: Product: syz
[  615.086087][ T6050] usb 2-1: Manufacturer: syz
[  615.091345][ T6050] usb 2-1: SerialNumber: syz
[  615.155257][ T6050] usb 2-1: config 0 descriptor??
[  615.734198][ T5954] usb 6-1: USB disconnect, device number 41
[  616.225258][ T6050] usb 2-1: Firmware version (0.0) predates our first public release.
[  616.246263][ T5954] usb 5-1: USB disconnect, device number 46
[  616.306115][ T6050] usb 2-1: Please update to version 0.2 or newer
[  616.814317][    T9] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[  616.954071][T12566] ceph: No mds server is up or the cluster is laggy
[  617.022861][    T9] usb 8-1: Using ep0 maxpacket: 16
[  617.274643][ T6050] usb 2-1: USB disconnect, device number 41
[  617.285352][    T9] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  617.298820][    T9] usb 8-1: config 0 interface 0 has no altsetting 0
[  617.307989][    T9] usb 8-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  617.320292][    T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  617.424692][    T9] usb 8-1: config 0 descriptor??
[  617.560140][   T30] kauditd_printk_skb: 20 callbacks suppressed
[  617.560157][   T30] audit: type=1400 audit(1768431709.558:781): avc:  denied  { write } for  pid=12580 comm="syz.4.1597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  617.824798][ T5923] usb 7-1: new high-speed USB device number 32 using dummy_hcd
[  617.836587][T12561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  617.860782][T12561] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  617.998391][ T5923] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  618.014863][ T5923] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  618.033662][ T5923] usb 7-1: Product: syz
[  618.044816][ T5923] usb 7-1: Manufacturer: syz
[  618.059300][ T5923] usb 7-1: SerialNumber: syz
[  618.113696][ T5923] usb 7-1: config 0 descriptor??
[  618.115210][    T9] usbhid 8-1:0.0: can't add hid device: -71
[  618.274301][    T9] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  618.295298][    T9] usb 8-1: USB disconnect, device number 17
[  619.186629][ T5923] usb 7-1: Firmware version (0.0) predates our first public release.
[  619.211992][ T5923] usb 7-1: Please update to version 0.2 or newer
[  619.543433][T12609] x_tables: duplicate underflow at hook 1
[  619.909357][ T5954] usb 8-1: new high-speed USB device number 18 using dummy_hcd
[  619.920201][T12581] netlink: 'syz.4.1597': attribute type 8 has an invalid length.
[  620.087691][ T5954] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  620.164448][ T5954] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  620.180404][ T5954] usb 8-1: Product: syz
[  620.190886][ T5954] usb 8-1: Manufacturer: syz
[  620.195911][ T5954] usb 8-1: SerialNumber: syz
[  620.205168][ T5954] usb 8-1: config 0 descriptor??
[  620.224529][T10414] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  620.344884][T12617] rdma_rxe: rxe_newlink: failed to add syz_tun
[  620.396428][T10414] usb 5-1: Using ep0 maxpacket: 8
[  620.605871][T10414] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  620.634163][T10414] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  621.095176][T10414] usb 5-1: Product: syz
[  621.099373][T10414] usb 5-1: Manufacturer: syz
[  621.104515][ T6050] usb 7-1: USB disconnect, device number 32
[  621.124342][T10414] usb 5-1: SerialNumber: syz
[  621.132328][T10414] usb 5-1: config 0 descriptor??
[  621.137862][T10414] usb 5-1: can't set config #0, error -71
[  621.146198][T10414] usb 5-1: USB disconnect, device number 47
[  621.275607][ T5954] usb 8-1: Firmware version (0.0) predates our first public release.
[  621.301444][ T5954] usb 8-1: Please update to version 0.2 or newer
[  621.621153][T12636] __nla_validate_parse: 2 callbacks suppressed
[  621.621171][T12636] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1607'.
[  622.252022][ T6050] usb 7-1: new high-speed USB device number 33 using dummy_hcd
[  622.418220][ T6050] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  622.432691][ T6050] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  622.544659][ T5923] usb 8-1: USB disconnect, device number 18
[  622.548365][ T6050] usb 7-1: Product: syz
[  622.556922][ T6050] usb 7-1: Manufacturer: syz
[  622.561549][ T6050] usb 7-1: SerialNumber: syz
[  622.604138][ T5954] usb 6-1: new full-speed USB device number 42 using dummy_hcd
[  622.623211][ T6050] usb 7-1: config 0 descriptor??
[  622.744152][ T5954] usb 6-1: device descriptor read/64, error -71
[  622.904163][ T5934] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  623.004176][ T5954] usb 6-1: new full-speed USB device number 43 using dummy_hcd
[  623.054251][ T5934] usb 5-1: Using ep0 maxpacket: 16
[  623.069361][ T5934] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  623.107399][ T5934] usb 5-1: config 0 interface 0 has no altsetting 0
[  623.124223][ T5934] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  623.141841][ T5934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  623.166612][ T5954] usb 6-1: device descriptor read/64, error -71
[  623.277139][ T5934] usb 5-1: config 0 descriptor??
[  623.329580][ T5954] usb usb6-port1: attempt power cycle
[  623.539749][   T30] audit: type=1400 audit(1768431715.538:782): avc:  denied  { setopt } for  pid=12651 comm="syz.7.1613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  623.578964][T12649] ALSA: mixer_oss: invalid OSS volume ''
[  623.746766][ T6050] usb 7-1: Firmware version (0.0) predates our first public release.
[  623.764366][ T6050] usb 7-1: Please update to version 0.2 or newer
[  623.887559][ T5954] usb 6-1: new full-speed USB device number 44 using dummy_hcd
[  623.915719][ T5954] usb 6-1: device descriptor read/8, error -71
[  624.122014][ T5934] usbhid 5-1:0.0: can't add hid device: -71
[  624.214208][   T79] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  624.325068][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  624.331711][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  624.355087][ T5934] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  624.382203][ T5934] usb 5-1: USB disconnect, device number 48
[  624.404366][ T5954] usb 6-1: new full-speed USB device number 45 using dummy_hcd
[  624.425688][ T5954] usb 6-1: device descriptor read/8, error -71
[  624.506529][ T6050] usb 7-1: USB disconnect, device number 33
[  624.524485][   T79] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  624.540267][ T5954] usb usb6-port1: unable to enumerate USB device
[  624.557476][   T79] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  624.591650][   T79] usb 2-1: Product: syz
[  624.600136][   T79] usb 2-1: Manufacturer: syz
[  624.614346][   T79] usb 2-1: SerialNumber: syz
[  624.625746][   T79] usb 2-1: config 0 descriptor??
[  624.822754][T12672] rdma_rxe: rxe_newlink: failed to add syz_tun
[  625.709440][   T79] usb 2-1: Firmware version (0.0) predates our first public release.
[  625.719833][   T79] usb 2-1: Please update to version 0.2 or newer
[  626.058653][T12687] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1620'.
[  626.067645][T12687] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1620'.
[  626.082330][T12687] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1620'.
[  626.091365][T12687] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1620'.
[  626.939995][ T6050] usb 2-1: USB disconnect, device number 42
[  628.183521][T12717] openvswitch: netlink: Flow key attr not present in new flow.
[  630.864434][T10414] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  630.891534][T12739] set match dimension is over the limit!
[  631.374665][T10414] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  631.392804][T10414] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  631.420044][T10414] usb 2-1: Product: syz
[  631.437000][T10414] usb 2-1: Manufacturer: syz
[  631.640784][T10414] usb 2-1: SerialNumber: syz
[  631.659357][T10414] usb 2-1: config 0 descriptor??
[  631.880305][T12744] can: request_module (can-proto-0) failed.
[  632.905138][T10414] usb 2-1: Firmware version (0.0) predates our first public release.
[  632.913695][T10414] usb 2-1: Please update to version 0.2 or newer
[  632.953682][   T30] audit: type=1400 audit(1768431724.948:783): avc:  denied  { setopt } for  pid=12749 comm="syz.5.1636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  633.030553][T12759] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  633.926841][T10414] usb 2-1: USB disconnect, device number 43
[  635.413454][T12786] binder: 12781:12786 ioctl c018620c 200000000140 returned -1
[  635.524548][T12788] set match dimension is over the limit!
[  636.673479][T12796] fuse: Unknown parameter ''
[  637.104212][T10414] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  637.234078][ T5934] usb 6-1: new high-speed USB device number 46 using dummy_hcd
[  637.244698][   T79] usb 8-1: new full-speed USB device number 19 using dummy_hcd
[  637.276634][T10414] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  637.285977][T10414] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  637.305307][T10414] usb 2-1: Product: syz
[  637.309590][T10414] usb 2-1: Manufacturer: syz
[  637.315284][T10414] usb 2-1: SerialNumber: syz
[  637.331309][T10414] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  637.393553][  T974] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  637.393830][ T5934] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  637.570940][   T79] usb 8-1: config 0 has an invalid descriptor of length 252, skipping remainder of the config
[  637.595535][   T79] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  637.605166][   T79] usb 8-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00
[  637.614743][ T5934] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  637.623328][ T5934] usb 6-1: Product: syz
[  637.629491][ T5934] usb 6-1: Manufacturer: syz
[  637.635014][   T79] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  637.643307][ T5934] usb 6-1: SerialNumber: syz
[  637.799549][ T5934] usb 6-1: config 0 descriptor??
[  637.804965][   T79] usb 8-1: config 0 descriptor??
[  638.475936][  T974] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[  638.922965][ T5934] usb 6-1: Firmware version (0.0) predates our first public release.
[  638.954176][  T974] ath9k_htc: Failed to initialize the device
[  638.962302][ T5934] usb 6-1: Please update to version 0.2 or newer
[  638.977682][T10414] usb 2-1: USB disconnect, device number 44
[  639.004560][T10414] usb 2-1: ath9k_htc: USB layer deinitialized
[  639.147503][ T6050] usb 8-1: USB disconnect, device number 19
[  640.239248][T10414] usb 6-1: USB disconnect, device number 46
[  641.054410][   T30] audit: type=1400 audit(1768431732.848:784): avc:  denied  { write } for  pid=12860 comm="syz.6.1669" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[  642.300823][T12875] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12875 comm=syz.5.1674
[  642.314524][T12875] netlink: 'syz.5.1674': attribute type 21 has an invalid length.
[  642.384307][   T79] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  642.385612][T12881] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1677'.
[  642.568238][T12887] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1677'.
[  642.587023][ T5934] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  642.602775][   T79] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  642.622453][   T79] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  642.640879][   T79] usb 5-1: Product: syz
[  642.645341][T12893] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12893 comm=syz.6.1677
[  642.658093][   T79] usb 5-1: Manufacturer: syz
[  642.666457][   T79] usb 5-1: SerialNumber: syz
[  642.675198][   T79] usb 5-1: config 0 descriptor??
[  642.805446][ T5934] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  642.831962][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  642.841050][ T5934] usb 2-1: Product: syz
[  642.845690][ T5934] usb 2-1: Manufacturer: syz
[  642.850332][ T5934] usb 2-1: SerialNumber: syz
[  642.860701][ T5934] usb 2-1: config 0 descriptor??
[  644.026592][ T5934] usb 2-1: Firmware version (0.0) predates our first public release.
[  644.035086][   T79] usb 5-1: Firmware version (0.0) predates our first public release.
[  644.056737][ T5934] usb 2-1: Please update to version 0.2 or newer
[  644.066811][   T79] usb 5-1: Please update to version 0.2 or newer
[  644.657997][T12919] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1687'.
[  644.667389][T12919] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1687'.
[  644.677393][T12919] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1687'.
[  644.686950][T12919] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1687'.
[  645.263785][T12928] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12928 comm=syz.6.1685
[  645.293412][T12928] netlink: 'syz.6.1685': attribute type 21 has an invalid length.
[  645.513249][   T79] usb 2-1: USB disconnect, device number 45
[  645.632974][  T974] usb 5-1: USB disconnect, device number 49
[  645.760259][   T30] audit: type=1400 audit(1768431737.758:785): avc:  denied  { bind } for  pid=12929 comm="syz.4.1690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  645.784309][   T30] audit: type=1400 audit(1768431737.758:786): avc:  denied  { name_bind } for  pid=12929 comm="syz.4.1690" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[  645.806525][   T30] audit: type=1400 audit(1768431737.758:787): avc:  denied  { node_bind } for  pid=12929 comm="syz.4.1690" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[  646.080284][T12937] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1692'.
[  646.190077][T12937] kvm: user requested TSC rate below hardware speed
[  646.454462][  T974] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[  646.610958][T10414] usb 7-1: new high-speed USB device number 34 using dummy_hcd
[  646.636210][  T974] usb 6-1: Using ep0 maxpacket: 16
[  646.643414][  T974] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  646.655296][  T974] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  646.684101][  T974] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  646.698918][  T974] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  646.720817][  T974] usb 6-1: config 0 descriptor??
[  646.945786][T10414] usb 7-1: Using ep0 maxpacket: 16
[  647.002731][T10414] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  647.147480][   T30] audit: type=1400 audit(1768431739.148:788): avc:  denied  { name_bind } for  pid=12955 comm="syz.7.1698" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  647.228089][T10414] usb 7-1: config 0 interface 0 has no altsetting 0
[  647.235135][T10414] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  647.247486][T10414] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  647.316219][T12957] tmpfs: Bad value for 'huge'
[  647.590684][T10414] usb 7-1: config 0 descriptor??
[  647.599258][  T974] microsoft 0003:045E:07DA.000B: unbalanced delimiter at end of report description
[  647.632669][  T974] microsoft 0003:045E:07DA.000B: parse failed
[  647.651306][  T974] microsoft 0003:045E:07DA.000B: probe with driver microsoft failed with error -22
[  648.044693][T10414] usbhid 7-1:0.0: can't add hid device: -71
[  648.047822][ T5934] usb 8-1: new high-speed USB device number 20 using dummy_hcd
[  648.051800][T10414] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  648.073642][T10414] usb 7-1: USB disconnect, device number 34
[  648.104693][   T79] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  648.208326][ T5934] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  648.220654][ T5934] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  648.230134][ T5934] usb 8-1: Product: syz
[  648.235176][ T5934] usb 8-1: Manufacturer: syz
[  648.239952][ T5934] usb 8-1: SerialNumber: syz
[  648.248412][ T5934] usb 8-1: config 0 descriptor??
[  648.268407][   T79] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  648.278376][   T79] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  648.287715][   T79] usb 2-1: Product: syz
[  648.295800][   T79] usb 2-1: Manufacturer: syz
[  648.300578][   T79] usb 2-1: SerialNumber: syz
[  648.311115][   T79] usb 2-1: config 0 descriptor??
[  648.362266][T12970] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[  648.383753][T12970] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1692'.
[  648.587071][ T5934] usb 8-1: Firmware version (0.0) predates our first public release.
[  648.597016][ T5934] usb 8-1: Please update to version 0.2 or newer
[  649.248988][ T5934] usb 8-1: USB disconnect, device number 20
[  649.353657][   T79] usb 2-1: Firmware version (0.0) predates our first public release.
[  649.377780][   T79] usb 2-1: Please update to version 0.2 or newer
[  649.542558][T10414] usb 6-1: USB disconnect, device number 47
[  649.614647][   T79] usb 7-1: new high-speed USB device number 35 using dummy_hcd
[  649.795507][   T79] usb 7-1: Using ep0 maxpacket: 16
[  649.821191][   T79] usb 7-1: config 53 has an invalid interface number: 106 but max is 0
[  649.936201][  T974] usb 8-1: new high-speed USB device number 21 using dummy_hcd
[  649.959401][T12990] input: syz1 as /devices/virtual/input/input25
[  649.993762][   T79] usb 7-1: config 53 has no interface number 0
[  650.013208][   T79] usb 7-1: New USB device found, idVendor=1eda, idProduct=2315, bcdDevice=ce.ba
[  650.024970][   T79] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  650.042899][   T79] usb 7-1: Product: syz
[  650.049419][   T79] usb 7-1: Manufacturer: syz
[  650.055730][   T79] usb 7-1: SerialNumber: syz
[  650.116230][  T974] usb 8-1: config 220 has an invalid interface number: 76 but max is 2
[  650.125403][  T974] usb 8-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  650.249379][  T974] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  650.267931][T12977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  650.278825][  T974] usb 8-1: config 220 has no interface number 2
[  650.340983][T12995] set match dimension is over the limit!
[  650.871224][  T974] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  650.873517][ T5954] usb 2-1: USB disconnect, device number 46
[  650.884968][  T974] usb 8-1: config 220 interface 0 has no altsetting 0
[  651.037798][T12977] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  651.117081][  T974] usb 8-1: config 220 interface 76 has no altsetting 0
[  651.155051][  T974] usb 8-1: config 220 interface 1 has no altsetting 0
[  651.317381][  T974] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  651.347877][  T974] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  651.362231][  T974] usb 8-1: Product: syz
[  651.388917][  T974] usb 8-1: Manufacturer: syz
[  651.393752][  T974] usb 8-1: SerialNumber: syz
[  651.626451][   T30] audit: type=1400 audit(1768431743.628:789): avc:  denied  { getopt } for  pid=12978 comm="syz.7.1704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  651.670989][  T974] usb 8-1: selecting invalid altsetting 0
[  651.692364][  T974] uvcvideo 8-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  651.743830][  T974] uvcvideo 8-1:220.0: No valid video chain found.
[  651.811455][  T974] usb 8-1: selecting invalid altsetting 0
[  651.829889][  T974] usbtest 8-1:220.1: probe with driver usbtest failed with error -22
[  651.907611][  T974] usb 8-1: USB disconnect, device number 21
[  652.541916][T13009] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1713'.
[  652.551409][T13009] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1713'.
[  652.561053][T13009] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1713'.
[  652.569998][T13009] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1713'.
[  652.644451][   T79] usb 7-1: ath9k_htc: Device endpoint numbers are not the expected ones
[  652.673528][   T79] usb 7-1: USB disconnect, device number 35
[  652.834733][   T30] audit: type=1400 audit(1768431744.838:790): avc:  denied  { read } for  pid=13017 comm="syz.6.1716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  653.014641][  T974] usb 8-1: new high-speed USB device number 22 using dummy_hcd
[  653.497630][  T974] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  653.507120][  T974] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  653.544305][  T974] usb 8-1: Product: syz
[  653.552297][  T974] usb 8-1: Manufacturer: syz
[  653.557001][  T974] usb 8-1: SerialNumber: syz
[  653.563523][  T974] usb 8-1: config 0 descriptor??
[  653.899556][  T974] usb 8-1: Firmware version (0.0) predates our first public release.
[  653.907816][  T974] usb 8-1: Please update to version 0.2 or newer
[  653.966221][ T5954] usb 7-1: new high-speed USB device number 36 using dummy_hcd
[  653.987844][  T974] usb 8-1: USB disconnect, device number 22
[  654.140633][ T5954] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  654.154612][ T5954] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  654.164420][ T5954] usb 7-1: Product: syz
[  654.168608][ T5954] usb 7-1: Manufacturer: syz
[  654.173227][ T5954] usb 7-1: SerialNumber: syz
[  654.197247][ T5954] usb 7-1: config 0 descriptor??
[  654.214276][T10414] usb 6-1: new high-speed USB device number 48 using dummy_hcd
[  654.384231][T10414] usb 6-1: Using ep0 maxpacket: 8
[  654.407128][T10414] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  654.419530][T10414] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  654.428789][T10414] usb 6-1: Product: syz
[  654.433057][T10414] usb 6-1: Manufacturer: syz
[  654.597621][T10414] usb 6-1: SerialNumber: syz
[  654.626894][T10414] usb 6-1: config 0 descriptor??
[  655.067190][T10414] gspca_main: se401-2.14.0 probing 047d:5003
[  655.074990][T13051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1725'.
[  655.083894][T13051] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1725'.
[  655.093466][T13051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1725'.
[  655.102554][T13051] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1725'.
[  655.269032][ T5954] usb 7-1: Firmware version (0.0) predates our first public release.
[  655.286526][ T5954] usb 7-1: Please update to version 0.2 or newer
[  655.293672][T13056] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5130 sclass=netlink_route_socket pid=13056 comm=syz.7.1726
[  655.344301][T13056] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1726'.
[  655.494061][T10414] gspca_se401: Bayer format not supported!
[  655.590277][ T6024] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  655.657441][ T6024] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  655.692434][ T6024] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  655.706376][   T79] usb 6-1: USB disconnect, device number 48
[  655.789558][ T6024] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  656.920160][ T5954] usb 7-1: USB disconnect, device number 36
[  658.574175][   T79] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  659.998947][   T79] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  660.020697][T13103] rdma_rxe: rxe_newlink: failed to add syz_tun
[  660.110224][   T79] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  660.136489][   T79] usb 2-1: Product: syz
[  660.140665][   T79] usb 2-1: Manufacturer: syz
[  660.177993][   T79] usb 2-1: SerialNumber: syz
[  660.203204][T13105] fuse: Unknown parameter '0x0000000000000005'
[  660.234377][T13105] usb usb8: usbfs: process 13105 (syz.6.1736) did not claim interface 0 before use
[  660.236637][   T79] usb 2-1: config 0 descriptor??
[  660.702785][   T79] usb 2-1: Firmware version (0.0) predates our first public release.
[  660.724046][   T79] usb 2-1: Please update to version 0.2 or newer
[  660.806768][   T79] usb 2-1: USB disconnect, device number 47
[  660.834575][T13122] fuse: Bad value for 'fd'
[  660.965245][T13124] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1744'.
[  661.836130][T13131] fuse: Bad value for 'fd'
[  661.960934][T13133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1746'.
[  662.176453][   T79] usb 2-1: new low-speed USB device number 48 using dummy_hcd
[  663.354072][   T79] usb 2-1: Invalid ep0 maxpacket: 64
[  663.484085][   T79] usb 2-1: new low-speed USB device number 49 using dummy_hcd
[  663.674249][   T79] usb 2-1: Invalid ep0 maxpacket: 64
[  663.682625][   T79] usb usb2-port1: attempt power cycle
[  663.712799][T13147] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1750'.
[  663.730148][T13147] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1750'.
[  663.997299][T13147] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1750'.
[  664.007096][T13147] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1750'.
[  664.055761][   T79] usb 2-1: new low-speed USB device number 50 using dummy_hcd
[  664.104880][   T79] usb 2-1: Invalid ep0 maxpacket: 64
[  664.118115][T13149] rdma_rxe: rxe_newlink: failed to add syz_tun
[  664.244192][   T79] usb 2-1: new low-speed USB device number 51 using dummy_hcd
[  664.354614][   T79] usb 2-1: Invalid ep0 maxpacket: 64
[  664.416890][T13156] set match dimension is over the limit!
[  664.834668][   T79] usb usb2-port1: unable to enumerate USB device
[  665.774695][  T974] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  665.967614][  T974] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  665.980301][  T974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  666.007780][  T974] usb 2-1: Product: syz
[  666.017791][  T974] usb 2-1: Manufacturer: syz
[  666.035662][   T30] audit: type=1400 audit(1768431758.038:791): avc:  denied  { accept } for  pid=13176 comm="syz.4.1759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  666.066045][  T974] usb 2-1: SerialNumber: syz
[  666.084785][  T974] usb 2-1: config 0 descriptor??
[  666.696546][T13193] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1763'.
[  666.715992][T13193] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1763'.
[  666.719970][T13194] overlay: Unknown parameter 'subj_type'
[  666.726953][T13193] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1763'.
[  666.741283][T13193] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1763'.
[  667.105030][  T974] usb 2-1: Firmware version (0.0) predates our first public release.
[  667.131234][  T974] usb 2-1: Please update to version 0.2 or newer
[  667.207489][T13198] rdma_rxe: rxe_newlink: failed to add syz_tun
[  667.233512][T13204] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1766'.
[  667.574143][  T974] usb 7-1: new high-speed USB device number 37 using dummy_hcd
[  667.864107][T13223] set match dimension is over the limit!
[  668.134186][  T974] usb 7-1: Using ep0 maxpacket: 16
[  668.143118][  T974] usb 7-1: config 0 has an invalid interface number: 251 but max is 0
[  668.151689][  T974] usb 7-1: config 0 has no interface number 0
[  668.158112][  T974] usb 7-1: config 0 interface 251 altsetting 255 bulk endpoint 0x4 has invalid maxpacket 16
[  668.168556][  T974] usb 7-1: config 0 interface 251 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 64
[  668.179168][  T974] usb 7-1: config 0 interface 251 has no altsetting 0
[  668.189813][  T974] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  668.199495][  T974] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  668.207850][  T974] usb 7-1: Product: syz
[  668.212542][  T974] usb 7-1: Manufacturer: syz
[  668.217511][  T974] usb 7-1: SerialNumber: syz
[  668.227603][  T974] usb 7-1: config 0 descriptor??
[  668.237463][T13208] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  668.245254][T13208] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  668.420704][T10414] usb 2-1: USB disconnect, device number 52
[  668.488827][T13208] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  668.523625][T13208] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  669.135071][T13235] infiniband pyz1: RDMA CMA: cma_listen_on_dev, error -98
[  669.148265][T13208] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1767'.
[  669.198493][T13208] netlink: 'syz.6.1767': attribute type 30 has an invalid length.
[  669.220298][T13236] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1767'.
[  669.246444][T13236] netlink: 'syz.6.1767': attribute type 30 has an invalid length.
[  670.539869][  T974] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  670.574287][  T974] asix 7-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  671.041806][  T974] asix 7-1:0.251: probe with driver asix failed with error -71
[  671.059097][  T974] usb 7-1: USB disconnect, device number 37
[  671.451781][T13252] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1779'.
[  671.462682][T13252] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1779'.
[  671.478453][T13252] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1779'.
[  672.004086][ T5954] usb 8-1: new high-speed USB device number 23 using dummy_hcd
[  672.029061][  T974] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  672.147809][T13276] set match dimension is over the limit!
[  672.206835][ T5954] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  672.217134][ T5954] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  672.228302][ T5954] usb 8-1: Product: syz
[  672.233214][ T5954] usb 8-1: Manufacturer: syz
[  672.239011][ T5934] usb 7-1: new high-speed USB device number 38 using dummy_hcd
[  672.251079][ T5954] usb 8-1: SerialNumber: syz
[  672.317242][ T5954] usb 8-1: config 0 descriptor??
[  672.446150][ T5934] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  672.456122][ T5934] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  672.465004][ T5934] usb 7-1: Product: syz
[  672.469750][ T5934] usb 7-1: Manufacturer: syz
[  672.474989][ T5934] usb 7-1: SerialNumber: syz
[  672.482606][ T5934] usb 7-1: config 0 descriptor??
[  672.504221][  T974] usb 5-1: device descriptor read/64, error -71
[  672.848522][  T974] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  673.304135][  T974] usb 5-1: device descriptor read/64, error -71
[  673.414566][  T974] usb usb5-port1: attempt power cycle
[  673.425207][ T5954] usb 8-1: Firmware version (0.0) predates our first public release.
[  673.433823][ T5954] usb 8-1: Please update to version 0.2 or newer
[  673.507323][ T5934] usb 7-1: Firmware version (0.0) predates our first public release.
[  673.516499][ T5934] usb 7-1: Please update to version 0.2 or newer
[  673.764578][  T974] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  673.794917][  T974] usb 5-1: device descriptor read/8, error -71
[  674.034088][  T974] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  674.054803][  T974] usb 5-1: device descriptor read/8, error -71
[  674.164642][  T974] usb usb5-port1: unable to enumerate USB device
[  674.354193][ T5934] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  674.507574][ T5934] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  674.517093][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  674.525451][ T5934] usb 2-1: Product: syz
[  674.530077][ T5934] usb 2-1: Manufacturer: syz
[  674.534754][ T5934] usb 2-1: SerialNumber: syz
[  674.541120][ T5934] usb 2-1: config 0 descriptor??
[  674.738832][T13301] mkiss: ax0: crc mode is auto.
[  674.769091][ T6050] usb 8-1: USB disconnect, device number 23
[  675.061172][   T79] usb 7-1: USB disconnect, device number 38
[  675.124096][ T5954] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  675.526705][ T5954] usb 5-1: Using ep0 maxpacket: 8
[  675.639237][ T5934] usb 2-1: Firmware version (0.0) predates our first public release.
[  675.647661][ T5934] usb 2-1: Please update to version 0.2 or newer
[  675.661900][ T5954] usb 5-1: config 127 has an invalid interface number: 171 but max is 1
[  675.671714][ T5954] usb 5-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config
[  675.774125][ T5954] usb 5-1: config 127 has 1 interface, different from the descriptor's value: 2
[  675.783466][ T5954] usb 5-1: config 127 has no interface number 0
[  675.790233][ T5954] usb 5-1: config 127 interface 171 has no altsetting 0
[  676.129821][ T5954] usb 5-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9
[  676.148801][ T5954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  676.178193][ T5954] usb 5-1: Product: syz
[  676.189484][ T5954] usb 5-1: Manufacturer: syz
[  676.199697][ T5954] usb 5-1: SerialNumber: syz
[  676.919829][ T5954] usb 5-1: USB disconnect, device number 54
[  677.185423][ T6050] usb 2-1: USB disconnect, device number 53
[  678.034140][ T5934] usb 7-1: new high-speed USB device number 39 using dummy_hcd
[  678.084650][ T5954] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  678.184963][ T5934] usb 7-1: device descriptor read/64, error -71
[  678.249342][ T5954] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  678.260018][T13352] openvswitch: netlink: Flow key attr not present in new flow.
[  678.270965][T13352] __nla_validate_parse: 1 callbacks suppressed
[  678.270988][T13352] netlink: 140 bytes leftover after parsing attributes in process `syz.5.1808'.
[  678.316487][ T5954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  678.316513][ T5954] usb 5-1: Product: syz
[  678.316528][ T5954] usb 5-1: Manufacturer: syz
[  678.316544][ T5954] usb 5-1: SerialNumber: syz
[  678.318986][ T5954] usb 5-1: config 0 descriptor??
[  678.374258][   T79] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  678.446485][ T5934] usb 7-1: new high-speed USB device number 40 using dummy_hcd
[  678.532639][   T79] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  678.532670][   T79] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  678.532707][   T79] usb 2-1: Product: syz
[  678.532723][   T79] usb 2-1: Manufacturer: syz
[  678.532737][   T79] usb 2-1: SerialNumber: syz
[  678.535924][   T79] usb 2-1: config 0 descriptor??
[  678.584663][ T5934] usb 7-1: device descriptor read/64, error -71
[  678.698661][ T5934] usb usb7-port1: attempt power cycle
[  679.552948][ T5954] usb 5-1: Firmware version (0.0) predates our first public release.
[  679.594383][   T79] usb 2-1: Firmware version (0.0) predates our first public release.
[  679.602716][ T5954] usb 5-1: Please update to version 0.2 or newer
[  679.635980][   T79] usb 2-1: Please update to version 0.2 or newer
[  679.650847][ T5934] usb 7-1: new high-speed USB device number 41 using dummy_hcd
[  679.853196][ T5934] usb 7-1: device descriptor read/8, error -71
[  680.096186][ T5934] usb 7-1: new high-speed USB device number 42 using dummy_hcd
[  680.124230][   T79] usb 8-1: new high-speed USB device number 24 using dummy_hcd
[  680.132774][ T5934] usb 7-1: device descriptor read/8, error -71
[  680.165892][   T30] audit: type=1400 audit(1768431772.158:792): avc:  denied  { read } for  pid=13370 comm="syz.5.1811" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  680.190595][   T30] audit: type=1400 audit(1768431772.168:793): avc:  denied  { open } for  pid=13370 comm="syz.5.1811" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  680.244471][ T5934] usb usb7-port1: unable to enumerate USB device
[  680.289262][   T79] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  680.307005][   T79] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  680.319676][   T79] usb 8-1: Product: syz
[  680.327615][   T79] usb 8-1: Manufacturer: syz
[  680.333084][   T79] usb 8-1: SerialNumber: syz
[  680.345198][   T79] usb 8-1: config 0 descriptor??
[  680.652583][T13379] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1813'.
[  680.851163][ T5934] usb 5-1: USB disconnect, device number 55
[  680.921650][T13388] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1815'.
[  680.938567][T13388] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1815'.
[  680.953611][T13388] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1815'.
[  680.963050][T13388] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1815'.
[  680.992795][T13390] syz1: rxe_newlink: already configured on syz_tun
[  681.128639][ T6050] usb 2-1: USB disconnect, device number 54
[  681.429039][   T79] usb 8-1: Firmware version (0.0) predates our first public release.
[  681.487784][   T79] usb 8-1: Please update to version 0.2 or newer
[  681.658013][T13396] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  682.272290][T13392] delete_channel: no stack
[  682.977958][  T974] usb 8-1: USB disconnect, device number 24
[  683.191439][T13424] siw: device registration error -23
[  683.253157][T13425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1826'.
[  683.754206][T11956] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  683.754270][T11956] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  683.754302][T11956] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  683.754321][T11956] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  683.878853][T13433] netlink: 9 bytes leftover after parsing attributes in process `syz.7.1827'.
[  683.926066][T13433] gretap0: entered promiscuous mode
[  683.977662][T13433] gretap0: left promiscuous mode
[  684.011212][T13433] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  684.024325][ T5954] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  684.049721][T13440] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1830'.
[  684.059267][T13440] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1830'.
[  684.070278][T13440] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1830'.
[  684.085126][T13440] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1830'.
[  684.161958][   T30] audit: type=1400 audit(1768431776.158:794): avc:  denied  { write } for  pid=13441 comm="syz.6.1831" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  684.303455][   T30] audit: type=1400 audit(1768431776.158:795): avc:  denied  { open } for  pid=13441 comm="syz.6.1831" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  684.303463][ T5954] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  684.303489][ T5954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  684.360219][ T5954] usb 5-1: Product: syz
[  684.397528][ T5954] usb 5-1: Manufacturer: syz
[  684.404143][  T974] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[  684.406753][ T5954] usb 5-1: SerialNumber: syz
[  684.469583][ T5954] usb 5-1: config 0 descriptor??
[  684.570114][T13457] rdma_rxe: rxe_newlink: failed to add syz_tun
[  684.576513][  T974] usb 2-1: Using ep0 maxpacket: 32
[  684.583687][  T974] usb 2-1: config 0 has an invalid descriptor of length 72, skipping remainder of the config
[  684.597168][   T30] audit: type=1400 audit(1768431776.598:796): avc:  denied  { connect } for  pid=13459 comm="syz.7.1834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  684.617029][  T974] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  684.626190][  T974] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  684.637780][  T974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  684.650051][  T974] usb 2-1: config 0 descriptor??
[  685.573670][ T5954] usb 5-1: Firmware version (0.0) predates our first public release.
[  685.732930][   T30] audit: type=1400 audit(1768431777.728:797): avc:  denied  { shutdown } for  pid=13459 comm="syz.7.1834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  685.756947][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  685.757051][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  685.759906][ T5954] usb 5-1: Please update to version 0.2 or newer
[  686.263577][T13476] lo speed is unknown, defaulting to 1000
[  686.277202][T13476] lo speed is unknown, defaulting to 1000
[  686.292164][T13476] lo speed is unknown, defaulting to 1000
[  686.328075][T13476] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  686.427893][T13476] lo speed is unknown, defaulting to 1000
[  686.481644][T13476] lo speed is unknown, defaulting to 1000
[  686.497258][T13476] lo speed is unknown, defaulting to 1000
[  686.515411][T13476] lo speed is unknown, defaulting to 1000
[  686.522092][T13476] lo speed is unknown, defaulting to 1000
[  686.776903][T13481] rdma_rxe: rxe_newlink: failed to add syz_tun
[  686.794108][ T6050] usb 7-1: new high-speed USB device number 43 using dummy_hcd
[  686.843230][ T5954] usb 5-1: USB disconnect, device number 56
[  686.936656][   T79] usb 2-1: USB disconnect, device number 55
[  687.332173][ T6050] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  687.413466][ T6050] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  687.458143][ T6050] usb 7-1: Product: syz
[  687.462515][ T6050] usb 7-1: Manufacturer: syz
[  687.468636][ T6050] usb 7-1: SerialNumber: syz
[  687.475279][   T30] audit: type=1400 audit(1768431779.468:798): avc:  denied  { watch watch_with_perm } for  pid=13486 comm="syz.1.1840" path="/381/bus" dev="tmpfs" ino=2070 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  687.501739][ T6050] usb 7-1: config 0 descriptor??
[  688.232864][T13493] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed
[  688.241273][   T30] audit: type=1400 audit(1768431779.828:799): avc:  denied  { connect } for  pid=13488 comm="syz.5.1841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  688.416289][   T30] audit: type=1400 audit(1768431779.828:800): avc:  denied  { write } for  pid=13488 comm="syz.5.1841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  688.436576][   T30] audit: type=1400 audit(1768431779.828:801): avc:  denied  { shutdown } for  pid=13488 comm="syz.5.1841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  688.577352][ T6050] usb 7-1: Firmware version (0.0) predates our first public release.
[  688.585502][ T6050] usb 7-1: Please update to version 0.2 or newer
[  688.721719][   T30] audit: type=1400 audit(1768431780.718:802): avc:  denied  { sys_module } for  pid=13499 comm="syz.4.1844" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  688.760723][T13512] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1847'.
[  688.771615][T13509] rdma_rxe: rxe_newlink: failed to add syz_tun
[  688.914344][   T79] usb 8-1: new high-speed USB device number 25 using dummy_hcd
[  689.093511][   T79] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  689.106968][   T79] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  689.120600][   T79] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  689.148512][   T79] usb 8-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 4.00
[  689.161728][   T79] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  689.181649][   T79] usb 8-1: Manufacturer: syz
[  689.226258][   T79] usb 8-1: config 0 descriptor??
[  689.600587][ T5954] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  689.608595][ T6050] usb 7-1: USB disconnect, device number 43
[  689.654296][T10414] usb 6-1: new high-speed USB device number 49 using dummy_hcd
[  689.713368][   T79] hid-udraw 0003:20D6:CB17.000C: item fetching failed at offset 3/7
[  689.752400][   T79] hid-udraw 0003:20D6:CB17.000C: parse failed
[  689.762804][   T79] hid-udraw 0003:20D6:CB17.000C: probe with driver hid-udraw failed with error -22
[  689.797274][ T5954] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  689.811988][ T5954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  689.824247][T10414] usb 6-1: device descriptor read/64, error -71
[  689.856805][ T5954] usb 5-1: Product: syz
[  690.097229][ T5954] usb 5-1: Manufacturer: syz
[  690.110172][ T5954] usb 5-1: SerialNumber: syz
[  690.114124][T10414] usb 6-1: new high-speed USB device number 50 using dummy_hcd
[  690.600514][ T5954] usb 5-1: config 0 descriptor??
[  690.694548][T10414] usb 6-1: device descriptor read/64, error -71
[  690.821121][T10414] usb usb6-port1: attempt power cycle
[  691.164190][T10414] usb 6-1: new high-speed USB device number 51 using dummy_hcd
[  691.567162][T10414] usb 6-1: device descriptor read/8, error -71
[  691.728000][ T6050] usb 8-1: USB disconnect, device number 25
[  691.744899][ T5954] usb 5-1: Firmware version (0.0) predates our first public release.
[  691.758560][ T5954] usb 5-1: Please update to version 0.2 or newer
[  691.854220][T10414] usb 6-1: new high-speed USB device number 52 using dummy_hcd
[  691.895335][T10414] usb 6-1: device descriptor read/8, error -71
[  691.999907][T13537] kvm: pic: non byte read
[  692.007857][T13537] kvm: pic: level sensitive irq not supported
[  692.008007][T13537] kvm: pic: non byte read
[  692.021964][T10414] usb usb6-port1: unable to enumerate USB device
[  692.030247][T13537] kvm: pic: non byte read
[  692.036044][T13537] kvm: pic: non byte read
[  692.041026][T13537] kvm: pic: single mode not supported
[  692.041042][T13537] kvm: pic: level sensitive irq not supported
[  692.050956][T13537] kvm: pic: non byte read
[  692.065328][T13537] kvm: pic: single mode not supported
[  692.065348][T13537] kvm: pic: level sensitive irq not supported
[  692.071047][T13537] kvm: pic: non byte read
[  692.314677][T13544] rdma_rxe: rxe_newlink: failed to add syz_tun
[  692.586675][T10414] usb 5-1: USB disconnect, device number 57
[  692.714100][T13549] Invalid source name
[  693.527070][T13565] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1861'.
[  693.550638][T13565] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1861'.
[  693.571372][T13563] rdma_rxe: rxe_newlink: failed to add syz_tun
[  693.616443][T13565] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1861'.
[  693.655982][T13565] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1861'.
[  693.733075][T13576] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1867'.
[  693.884117][   T79] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[  694.144241][   T79] usb 2-1: Using ep0 maxpacket: 32
[  694.446623][   T79] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  694.456522][   T79] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  694.503847][   T79] usb 2-1: config 0 descriptor??
[  694.860678][   T79] gspca_main: sunplus-2.14.0 probing 041e:400b
[  694.999504][T13588] xt_connbytes: Forcing CT accounting to be enabled
[  695.006531][T13588] Cannot find set identified by id 0 to match
[  695.490814][T13590] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  695.821616][   T79] gspca_sunplus: reg_r err -110
[  695.845103][ T5954] usb 6-1: new high-speed USB device number 53 using dummy_hcd
[  696.819738][T13601] Invalid source name
[  697.518664][   T79] sunplus 2-1:0.0: probe with driver sunplus failed with error -110
[  697.546727][ T5954] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  699.142076][ T5954] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  699.154099][   T79] usb 2-1: USB disconnect, device number 56
[  699.167004][ T5954] usb 6-1: Product: syz
[  699.171646][ T5954] usb 6-1: Manufacturer: syz
[  699.176364][ T5954] usb 6-1: SerialNumber: syz
[  699.364508][T13618] rdma_rxe: rxe_newlink: failed to add syz_tun
[  699.484333][ T5954] usb 6-1: config 0 descriptor??
[  699.491464][ T5954] usb 6-1: can't set config #0, error -71
[  699.499015][ T5954] usb 6-1: USB disconnect, device number 53
[  699.583594][T13614] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1878'.
[  699.610696][T13620] syz1: rxe_newlink: already configured on syz_tun
[  700.686179][T13640] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  700.745995][  T974] usb 7-1: new full-speed USB device number 44 using dummy_hcd
[  700.950193][   T79] usb 8-1: new high-speed USB device number 26 using dummy_hcd
[  701.164780][   T79] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  701.188548][   T79] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  701.200840][   T79] usb 8-1: Product: syz
[  701.205487][   T79] usb 8-1: Manufacturer: syz
[  701.210188][   T79] usb 8-1: SerialNumber: syz
[  701.227009][   T79] usb 8-1: config 0 descriptor??
[  701.234101][  T974] usb 7-1: device descriptor read/64, error -71
[  701.532077][  T974] usb 7-1: new full-speed USB device number 45 using dummy_hcd
[  702.248096][  T974] usb 7-1: device descriptor read/64, error -71
[  702.310641][   T79] usb 8-1: Firmware version (0.0) predates our first public release.
[  702.364956][   T79] usb 8-1: Please update to version 0.2 or newer
[  702.457622][  T974] usb usb7-port1: attempt power cycle
[  702.558400][T13669] syz1: rxe_newlink: already configured on syz_tun
[  702.974557][  T974] usb 7-1: new full-speed USB device number 46 using dummy_hcd
[  703.175818][  T974] usb 7-1: device descriptor read/8, error -71
[  703.915002][ T5954] usb 8-1: USB disconnect, device number 26
[  703.952841][T13685] rdma_rxe: rxe_newlink: failed to add syz_tun
[  704.449077][T13686] virtio-fs: tag </dev/md0> not found
[  704.590899][T13696] netlink: 'syz.5.1897': attribute type 10 has an invalid length.
[  704.623426][T13696] team0: Device ipvlan0 failed to register rx_handler
[  706.147098][ T5954] usb 8-1: new high-speed USB device number 27 using dummy_hcd
[  706.555639][ T5954] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  706.647395][ T5954] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  706.656955][T13733] rdma_rxe: rxe_newlink: failed to add syz_tun
[  706.819585][ T5954] usb 8-1: Product: syz
[  706.824043][ T5954] usb 8-1: Manufacturer: syz
[  706.828736][ T5954] usb 8-1: SerialNumber: syz
[  706.857354][ T5954] usb 8-1: config 0 descriptor??
[  707.907238][ T5954] usb 8-1: Firmware version (0.0) predates our first public release.
[  707.915665][ T5954] usb 8-1: Please update to version 0.2 or newer
[  708.678839][T13745] rdma_rxe: rxe_newlink: failed to add syz_tun
[  708.684515][T13746] set match dimension is over the limit!
[  710.929778][T13771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1918'.
[  710.941002][T13771] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1918'.
[  710.967340][T13771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1918'.
[  710.976360][T13771] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1918'.
[  711.382800][ T6050] usb 8-1: USB disconnect, device number 27
[  711.772641][T13782] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1923'.
[  711.794446][T13782] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1923'.
[  712.051629][T13785] rdma_rxe: rxe_newlink: failed to add syz_tun
[  712.194709][T13786] rdma_rxe: rxe_newlink: failed to add syz_tun
[  712.924229][   T79] usb 6-1: new high-speed USB device number 54 using dummy_hcd
[  713.238935][   T79] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  713.251585][   T79] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  713.261105][   T79] usb 6-1: Product: syz
[  713.266646][   T79] usb 6-1: Manufacturer: syz
[  713.274433][   T79] usb 6-1: SerialNumber: syz
[  713.287140][   T79] usb 6-1: config 0 descriptor??
[  715.380938][   T79] usb 6-1: Firmware version (0.0) predates our first public release.
[  715.413368][   T79] usb 6-1: Please update to version 0.2 or newer
[  716.512553][   T79] usb 6-1: USB disconnect, device number 54
[  717.001289][T13820] No buffer was provided with the request
[  717.568035][   T79] usb 6-1: new full-speed USB device number 55 using dummy_hcd
[  717.766417][   T79] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  717.786417][   T79] usb 6-1: config 0 has no interface number 0
[  717.805247][   T79] usb 6-1: New USB device found, idVendor=0b48, idProduct=1004, bcdDevice=8c.1e
[  717.824016][   T79] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  717.851367][   T79] usb 6-1: config 0 descriptor??
[  717.878353][   T79] usb 6-1: selecting invalid altsetting 1
[  717.892130][T13833] Cannot find set identified by id 0 to match
[  717.899393][   T79] dvb_ttusb_budget: ttusb_init_controller: error
[  717.916389][   T79] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  718.497390][   T79] DVB: Unable to find symbol ves1820_attach()
[  718.502820][T13839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1931'.
[  718.533009][T13839] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1931'.
[  718.562346][   T79] DVB: Unable to find symbol stv0297_attach()
[  718.567396][T13839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1931'.
[  718.581453][   T79] dvb_ttusb_budget: no frontend driver found for device [0b48:1004]
[  718.603737][T13839] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1931'.
[  720.294678][ T5954] usb 6-1: USB disconnect, device number 55
[  723.366429][T13890] rdma_rxe: rxe_newlink: failed to add syz_tun
[  723.486581][T13896] Invalid source name
[  724.694557][T13903] set match dimension is over the limit!
[  725.130275][   T30] audit: type=1400 audit(1768431817.038:803): avc:  denied  { mount } for  pid=13902 comm="syz.5.1954" name="/" dev="autofs" ino=50011 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  725.400493][   T30] audit: type=1400 audit(1768431817.058:804): avc:  denied  { bind } for  pid=13902 comm="syz.5.1954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  725.436109][  T974] usb 6-1: new high-speed USB device number 56 using dummy_hcd
[  725.466503][   T30] audit: type=1326 audit(1768431817.468:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13911 comm="syz.7.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397198f749 code=0x7ffc0000
[  725.490931][   T30] audit: type=1326 audit(1768431817.498:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13911 comm="syz.7.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397198f749 code=0x7ffc0000
[  725.517258][   T30] audit: type=1326 audit(1768431817.528:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13911 comm="syz.7.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f397198f749 code=0x7ffc0000
[  725.589034][   T30] audit: type=1326 audit(1768431817.528:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13911 comm="syz.7.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397198f749 code=0x7ffc0000
[  725.614719][  T974] usb 6-1: Using ep0 maxpacket: 32
[  725.627713][  T974] usb 6-1: config 0 has an invalid interface number: 184 but max is 0
[  725.669149][  T974] usb 6-1: config 0 has no interface number 0
[  725.683145][  T974] usb 6-1: config 0 interface 184 has no altsetting 0
[  725.700572][  T974] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  725.711484][   T30] audit: type=1326 audit(1768431817.528:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13911 comm="syz.7.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397198f749 code=0x7ffc0000
[  725.752380][  T974] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  725.783078][  T974] usb 6-1: Product: syz
[  725.795794][  T974] usb 6-1: Manufacturer: syz
[  725.814448][  T974] usb 6-1: SerialNumber: syz
[  725.847394][  T974] usb 6-1: config 0 descriptor??
[  725.861419][  T974] smsc75xx v1.0.0
[  727.151869][T13943] rdma_rxe: rxe_newlink: failed to add syz_tun
[  727.353805][T13950] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1966'.
[  727.973912][  T974] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71
[  728.043812][  T974] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  728.069035][  T974] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  728.104768][T13955] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1967'.
[  728.113683][T13955] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1967'.
[  728.134739][T13955] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1967'.
[  728.147692][T13951] Invalid source name
[  728.158400][  T974] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  728.174093][  T974] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  728.197499][T13955] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1967'.
[  728.210215][   T30] audit: type=1400 audit(1768431820.208:810): avc:  denied  { unmount } for  pid=6460 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  728.241723][  T974] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  728.294689][  T974] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71
[  728.307397][  T974] usb 6-1: USB disconnect, device number 56
[  731.241741][T13981] set match dimension is over the limit!
[  734.766801][ T5954] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  734.934114][ T5954] usb 5-1: Using ep0 maxpacket: 32
[  734.940897][ T5954] usb 5-1: config 0 has an invalid interface number: 146 but max is 0
[  734.973071][ T5954] usb 5-1: config 0 has no interface number 0
[  734.981832][ T5954] usb 5-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  735.015751][ T5954] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[  735.058089][ T5954] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[  735.185211][ T5954] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[  735.196250][ T5954] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82
[  735.208500][ T5954] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  735.224269][ T5954] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  735.272693][T14026] set match dimension is over the limit!
[  735.686046][T14025] rdma_rxe: rxe_newlink: failed to add syz_tun
[  735.703648][ T5954] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024
[  735.730122][ T5954] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  735.750931][ T5954] usb 5-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  735.965715][ T5954] usb 5-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95
[  735.978166][ T5954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  735.993869][ T5954] usb 5-1: Product: syz
[  735.998918][ T5954] usb 5-1: Manufacturer: syz
[  736.003840][ T5954] usb 5-1: SerialNumber: syz
[  736.064036][T14033] Invalid source name
[  736.170481][ T5954] usb 5-1: config 0 descriptor??
[  736.488891][T14016] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  736.518758][T14016] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  736.539539][ T5954] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3
[  736.548277][ T5954] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2
[  736.579612][ T5954] scsi host1: microtekX6
[  736.898826][T14016] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96
[  736.930719][ T5895] usb 5-1: USB disconnect, device number 58
[  740.555215][T14074] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1998'.
[  740.613504][T14074] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1998'.
[  740.712680][T14074] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1998'.
[  740.722129][T14074] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1998'.
[  741.326463][T14082] rdma_rxe: rxe_newlink: failed to add syz_tun
[  741.467325][T14079] rdma_rxe: rxe_newlink: failed to add syz_tun
[  742.701955][T14108] gfs2: not a GFS2 filesystem
[  743.371028][T14126] syz_tun: entered allmulticast mode
[  743.688518][T14124] syz_tun: left allmulticast mode
[  743.939140][T14144] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2012'.
[  744.317316][T14144] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2012'.
[  744.512977][T14144] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2012'.
[  747.189919][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  747.204556][T14144] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2012'.
[  747.214859][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  748.650291][T14151] rdma_rxe: rxe_newlink: failed to add syz_tun
[  749.305529][T14162] set match dimension is over the limit!
[  750.037733][   T30] audit: type=1400 audit(1768431842.028:811): avc:  denied  { override_creds } for  pid=14163 comm="syz.1.2021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  750.237058][T14178] vxcan3: entered promiscuous mode
[  751.547661][T14186] syz1: rxe_newlink: already configured on syz_tun
[  753.376098][T14212] ip6gre2: entered promiscuous mode
[  753.381341][T14212] ip6gre2: entered allmulticast mode
[  753.397013][   T13] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  753.413705][   T13] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  753.434231][ T5954] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  754.508452][   T79] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  754.644554][ T5923] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  755.042256][T14223] Cannot find set identified by id 0 to match
[  755.477594][T14231] rdma_rxe: rxe_newlink: failed to add syz_tun
[  755.515964][T14228] comedi comedi1: aio_iiro_16: I/O port conflict (0x4f23,8)
[  755.613079][T14237] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2039'.
[  755.622704][T14237] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2039'.
[  755.632170][T14237] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2039'.
[  755.641294][T14237] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2039'.
[  757.330737][T14245] Invalid source name
[  757.504147][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  758.834163][ T5895] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  759.041905][T14280] rdma_rxe: rxe_newlink: failed to add syz_tun
[  759.060121][ T5895] usb 5-1: config 0 has an invalid interface number: 49 but max is 0
[  759.070667][ T5895] usb 5-1: config 0 has no interface number 0
[  759.080637][ T5895] usb 5-1: too many endpoints for config 0 interface 49 altsetting 56: 52, using maximum allowed: 30
[  759.111378][ T5895] usb 5-1: config 0 interface 49 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 52
[  759.171046][ T5895] usb 5-1: config 0 interface 49 has no altsetting 0
[  759.190826][ T5895] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  759.236947][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  760.106299][ T5895] usb 5-1: config 0 descriptor??
[  760.407792][ T5895] usb 5-1: string descriptor 0 read error: -71
[  760.464575][ T5895] ums-realtek 5-1:0.49: USB Mass Storage device detected
[  760.551959][ T5895] usb 5-1: USB disconnect, device number 59
[  760.610737][T14306] syz1: rxe_newlink: already configured on syz_tun
[  760.980285][T14308] Invalid source name
[  762.298068][T14322] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2061'.
[  762.307950][T14322] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2061'.
[  762.317908][T14322] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2061'.
[  762.327870][T14322] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2061'.
[  763.307542][T14341] rdma_rxe: rxe_newlink: failed to add syz_tun
[  763.404466][ T6050] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  763.770547][ T6050] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  763.781414][ T6050] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  763.798024][ T6050] usb 5-1: Product: syz
[  763.807643][ T6050] usb 5-1: Manufacturer: syz
[  763.816600][ T6050] usb 5-1: SerialNumber: syz
[  763.831911][ T6050] usb 5-1: config 0 descriptor??
[  764.254141][ T5895] usb 7-1: new high-speed USB device number 48 using dummy_hcd
[  764.424131][ T5895] usb 7-1: Using ep0 maxpacket: 16
[  764.537650][ T5895] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  764.548824][ T5895] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEA, changing to 0x8A
[  764.564345][ T5895] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  764.577679][ T5895] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  764.593144][ T5895] usb 7-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f
[  764.630840][ T5895] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  764.837755][ T5895] usb 7-1: Product: syz
[  764.877166][ T6050] usb 5-1: Firmware version (0.0) predates our first public release.
[  764.908334][ T5895] usb 7-1: Manufacturer: syz
[  764.969257][ T5895] usb 7-1: SerialNumber: syz
[  764.976222][ T6050] usb 5-1: Please update to version 0.2 or newer
[  764.992833][ T5895] usb 7-1: config 0 descriptor??
[  765.136229][ T5895] rc_core: IR keymap rc-xbox-dvd not found
[  765.147004][ T5895] Registered IR keymap rc-empty
[  765.153896][ T5895] rc rc0: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0
[  765.164678][T14371] rdma_rxe: rxe_newlink: failed to add syz_tun
[  765.168755][ T5895] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input26
[  765.219889][T14351] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.2068'.
[  765.539785][ T5895] usb 7-1: USB disconnect, device number 48
[  765.545768][    C0] xbox_remote 7-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19
[  765.744194][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  767.987848][ T5923] usb 5-1: USB disconnect, device number 60
[  768.404871][T14400] Invalid source name
[  770.147116][T14417] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2085'.
[  770.156095][T14417] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2085'.
[  770.165756][T14417] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2085'.
[  770.175000][T14417] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2085'.
[  770.802787][T14425] tmpfs: Bad value for 'huge'
[  771.064117][ T5923] usb 8-1: new high-speed USB device number 28 using dummy_hcd
[  771.294072][ T5923] usb 8-1: Using ep0 maxpacket: 32
[  771.337352][ T5923] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  771.547878][ T5923] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  772.176351][ T5923] usb 8-1: config 0 descriptor??
[  772.568014][ T5923] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware
[  773.059020][ T5923] usb 8-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2
[  773.075178][   T30] audit: type=1400 audit(1768431865.078:812): avc:  denied  { firmware_load } for  pid=5923 comm="kworker/1:4" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  773.099111][ T5923] usb 8-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw
[  773.415482][   T79] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[  773.569881][T14463] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2097'.
[  773.579210][T14463] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2097'.
[  773.593744][T14463] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2097'.
[  773.604337][T14463] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2097'.
[  773.922042][   T79] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  773.961887][   T79] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  773.982480][   T79] usb 2-1: Product: syz
[  773.993513][   T79] usb 2-1: Manufacturer: syz
[  774.016620][   T79] usb 2-1: SerialNumber: syz
[  774.049629][   T79] usb 2-1: config 0 descriptor??
[  774.263178][T14473] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2100'.
[  774.272402][T14473] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2100'.
[  774.784221][ T5954] usb 6-1: new high-speed USB device number 57 using dummy_hcd
[  775.267242][T14479] Invalid source name
[  775.602005][   T79] usb 2-1: Firmware version (0.0) predates our first public release.
[  775.633776][   T79] usb 2-1: Please update to version 0.2 or newer
[  775.674064][ T5954] usb 6-1: Using ep0 maxpacket: 16
[  775.697888][ T5954] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  775.725627][ T5954] usb 6-1: config 0 interface 0 has no altsetting 0
[  775.801678][ T5954] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  775.815440][ T5954] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  775.878733][ T5954] usb 6-1: config 0 descriptor??
[  777.152339][  T974] usb 2-1: USB disconnect, device number 57
[  777.285444][T14471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  777.315274][T14471] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  777.361962][T14471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  777.381459][T14471] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  777.646974][ T5954] usbhid 6-1:0.0: can't add hid device: -71
[  777.675145][ T5954] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  777.717848][ T5954] usb 6-1: USB disconnect, device number 57
[  777.986410][T14498] __nla_validate_parse: 2 callbacks suppressed
[  777.986445][T14498] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2106'.
[  778.003761][T14498] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2106'.
[  778.015868][T14498] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2106'.
[  778.025334][T14498] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2106'.
[  778.432133][T14499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2107'.
[  778.441628][T14499] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2107'.
[  778.460059][T14499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2107'.
[  778.470262][T14499] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2107'.
[  779.124760][T14507] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2111'.
[  779.133628][T14507] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2111'.
[  780.434180][ T6050] usb 6-1: new high-speed USB device number 58 using dummy_hcd
[  780.743399][ T6050] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  780.752945][ T6050] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  781.182343][ T6050] usb 6-1: Product: syz
[  781.201656][ T6050] usb 6-1: Manufacturer: syz
[  781.211885][ T6050] usb 6-1: SerialNumber: syz
[  781.275417][ T6050] usb 6-1: config 0 descriptor??
[  781.754201][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  783.087140][ T6050] usb 6-1: Firmware version (0.0) predates our first public release.
[  783.106308][ T6050] usb 6-1: Please update to version 0.2 or newer
[  783.968345][   T79] usb 6-1: USB disconnect, device number 58
[  784.256215][   T30] audit: type=1400 audit(1768431876.258:813): avc:  denied  { ioctl } for  pid=14547 comm="syz.5.2122" path="socket:[53699]" dev="sockfs" ino=53699 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  784.672066][   T79] usb 6-1: new high-speed USB device number 59 using dummy_hcd
[  784.844279][   T79] usb 6-1: Using ep0 maxpacket: 8
[  784.852955][   T79] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  784.869988][   T79] usb 6-1: config 179 has no interface number 0
[  784.914126][   T79] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  784.975723][   T79] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  784.998475][   T79] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  785.030351][   T79] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  785.180057][   T79] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  785.319041][   T79] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  785.546632][T14561] Invalid source name
[  785.987318][   T79] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  786.007309][T14548] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  786.307961][   T79] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input27
[  786.500168][   T30] audit: type=1400 audit(1768431878.498:814): avc:  denied  { write } for  pid=14547 comm="syz.5.2122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  786.521918][T14548] ieee802154 phy0 wpan0: encryption failed: -22
[  786.580026][   T79] usb 6-1: USB disconnect, device number 59
[  786.580080][    C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  786.594365][    C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  787.034213][ T5895] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[  787.115882][   T79] usb 7-1: new high-speed USB device number 49 using dummy_hcd
[  787.284095][   T79] usb 7-1: Using ep0 maxpacket: 8
[  787.329844][   T79] usb 7-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[  787.346184][   T79] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  787.364518][   T79] usb 7-1: Product: syz
[  787.376383][   T79] usb 7-1: Manufacturer: syz
[  788.075501][   T79] usb 7-1: SerialNumber: syz
[  788.155683][ T5895] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  788.157313][   T79] usb 7-1: config 0 descriptor??
[  788.167558][ T5895] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  788.205628][ T5895] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  788.206594][   T79] gspca_main: sq905-2.14.0 probing 2770:9120
[  788.215411][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  788.274691][ T5895] usb 5-1: Product: syz
[  788.284228][ T5895] usb 5-1: Manufacturer: syz
[  788.301446][ T5895] usb 5-1: SerialNumber: syz
[  788.437884][T14570] 8021q: adding VLAN 0 to HW filter on device bond1
[  788.558410][ T5895] usb 5-1: USB disconnect, device number 61
[  788.987030][T14585] __nla_validate_parse: 2 callbacks suppressed
[  788.987045][T14585] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2133'.
[  789.005364][T14585] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2133'.
[  789.014876][T14585] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2133'.
[  789.024106][T14585] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2133'.
[  789.292288][   T79] gspca_sq905: bulk read fail (-22) len 0/4
[  789.311474][   T79] sq905 7-1:0.0: probe with driver sq905 failed with error -5
[  789.672913][T14600] Invalid source name
[  790.334255][ T5895] usb 7-1: USB disconnect, device number 49
[  792.174636][T14622] set match dimension is over the limit!
[  792.297327][T14626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2146'.
[  792.306636][T14626] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2146'.
[  792.319674][T14626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2146'.
[  792.328855][T14626] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2146'.
[  793.066802][T14637] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  793.087192][T14637] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  793.491487][T14637] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  793.515762][T14637] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  793.609936][T14637] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  793.634819][T14637] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  793.729712][T14637] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  793.750255][T14637] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  793.900634][   T12] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  793.943207][   T12] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  795.863925][ T1910] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  795.904198][ T1910] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  796.333545][ T1910] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  796.619692][ T1910] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  796.663223][ T1910] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  796.681631][ T1910] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  798.071678][T14674] set match dimension is over the limit!
[  798.161508][T14676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2162'.
[  798.170758][T14676] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2162'.
[  798.182527][T14676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2162'.
[  798.191692][T14676] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2162'.
[  801.674142][ T6050] usb 7-1: new high-speed USB device number 50 using dummy_hcd
[  801.862401][ T6050] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  801.886965][ T6050] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  801.898252][ T6050] usb 7-1: Product: syz
[  801.902445][ T6050] usb 7-1: Manufacturer: syz
[  801.914623][ T6050] usb 7-1: SerialNumber: syz
[  801.940578][ T6050] usb 7-1: config 0 descriptor??
[  803.052562][ T6050] usb 7-1: Firmware version (0.0) predates our first public release.
[  803.061235][ T6050] usb 7-1: Please update to version 0.2 or newer
[  804.422123][   T79] usb 7-1: USB disconnect, device number 50
[  804.629451][T14723] set match dimension is over the limit!
[  804.796858][ T5954] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  804.819102][ T5954] hid-generic 0000:0000:0000.000D: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  804.944091][   T79] usb 7-1: new high-speed USB device number 51 using dummy_hcd
[  805.138410][   T79] usb 7-1: Using ep0 maxpacket: 32
[  805.152556][   T79] usb 7-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  805.170112][   T79] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  805.192512][   T79] usb 7-1: config 0 descriptor??
[  805.222622][   T79] gspca_main: sunplus-2.14.0 probing 041e:400b
[  806.123138][   T79] gspca_sunplus: reg_w_riv err -110
[  806.127735][T14748] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2181'.
[  806.128967][   T79] sunplus 7-1:0.0: probe with driver sunplus failed with error -110
[  806.249177][T14748] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2181'.
[  806.282818][T14748] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2181'.
[  806.291951][T14748] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2181'.
[  806.323086][ T6050] usb 7-1: USB disconnect, device number 51
[  806.515551][T14755] openvswitch: netlink: Missing key (keys=40, expected=100)
[  807.260054][T14770] rdma_rxe: rxe_newlink: failed to add syz_tun
[  807.764045][ T6050] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[  807.914057][ T6050] usb 5-1: Using ep0 maxpacket: 32
[  807.924655][ T6050] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  808.927323][ T6050] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  808.943462][ T6050] usb 5-1: config 0 descriptor??
[  808.943509][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  808.956753][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  809.014333][ T6050] gspca_main: sunplus-2.14.0 probing 041e:400b
[  810.448898][ T6050] gspca_sunplus: reg_r err -110
[  810.453904][ T6050] sunplus 5-1:0.0: probe with driver sunplus failed with error -110
[  812.239104][   T30] audit: type=1400 audit(1768431904.088:815): avc:  denied  { connect } for  pid=14794 comm="syz.7.2196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  813.421160][ T5895] usb 5-1: USB disconnect, device number 62
[  814.384322][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  817.205950][T14834] syzkaller0: entered promiscuous mode
[  817.218320][T14834] syzkaller0: entered allmulticast mode
[  818.765406][ T5895] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[  818.983442][ T5895] usb 2-1: Using ep0 maxpacket: 32
[  820.554863][ T5895] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  820.568499][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  820.677522][ T5895] usb 2-1: config 0 descriptor??
[  820.708347][ T5895] gspca_main: sunplus-2.14.0 probing 041e:400b
[  821.754160][ T5895] gspca_sunplus: reg_r err -110
[  821.759195][ T5895] sunplus 2-1:0.0: probe with driver sunplus failed with error -110
[  823.385426][ T5954] usb 6-1: new high-speed USB device number 60 using dummy_hcd
[  823.544055][ T5954] usb 6-1: Using ep0 maxpacket: 32
[  823.566291][ T5954] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  823.614143][ T5954] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  823.623327][   T79] usb 2-1: USB disconnect, device number 58
[  823.648931][ T5954] usb 6-1: config 0 descriptor??
[  823.681753][ T5954] gspca_main: sunplus-2.14.0 probing 041e:400b
[  823.769427][T14882] rdma_rxe: rxe_newlink: failed to add syz_tun
[  824.142540][ T5954] gspca_sunplus: reg_w_riv err -71
[  824.152835][ T5954] sunplus 6-1:0.0: probe with driver sunplus failed with error -71
[  824.174365][ T5954] usb 6-1: USB disconnect, device number 60
[  824.966484][T14890] Invalid source name
[  825.885613][   T79] usb 7-1: new high-speed USB device number 52 using dummy_hcd
[  826.094340][   T79] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  826.107752][   T79] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  826.190621][   T79] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  826.215921][   T79] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  826.297427][   T79] usb 7-1: config 0 descriptor??
[  826.959505][   T79] kovaplus 0003:1E7D:2D50.000E: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.6-1/input0
[  827.393452][   T79] kovaplus 0003:1E7D:2D50.000E: couldn't init struct kovaplus_device
[  827.428604][   T79] kovaplus 0003:1E7D:2D50.000E: couldn't install mouse
[  827.478810][   T79] kovaplus 0003:1E7D:2D50.000E: probe with driver kovaplus failed with error -32
[  828.964319][ T5895] usb 7-1: USB disconnect, device number 52
[  830.181792][T14945] syz1: rxe_newlink: already configured on syz_tun
[  830.883620][T14955] rdma_rxe: rxe_newlink: failed to add syz_tun
[  832.808450][T14994] rdma_rxe: rxe_newlink: failed to add syz_tun
[  833.341209][   T30] audit: type=1400 audit(1768431925.338:816): avc:  denied  { getopt } for  pid=15000 comm="syz.7.2256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  834.501693][ T5923] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  834.538752][ T5923] dvb_usb_az6027 8-1:0.0: probe with driver dvb_usb_az6027 failed with error -110
[  834.583617][ T5923] usb 8-1: USB disconnect, device number 28
[  834.934263][ T5923] usb 8-1: new high-speed USB device number 29 using dummy_hcd
[  835.144449][T15031] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.2262'.
[  835.224121][ T5923] usb 8-1: Using ep0 maxpacket: 16
[  835.357242][ T5923] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  835.386330][ T5923] usb 8-1: config 1 has no interface number 1
[  835.404229][ T5923] usb 8-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  835.419001][ T5923] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  835.667770][ T5923] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  835.705514][ T5923] usb 8-1: config 1 interface 2 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 20
[  835.973258][ T5923] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  836.005245][ T5923] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  836.032336][ T5923] usb 8-1: Product: syz
[  836.045052][ T5923] usb 8-1: Manufacturer: syz
[  836.058592][ T5923] usb 8-1: SerialNumber: syz
[  836.124367][ T5954] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[  836.301079][ T5923] usb 8-1: failed to enable PITCH for EP 0x82
[  836.308070][ T5954] usb 5-1: Using ep0 maxpacket: 16
[  836.316704][ T5954] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  836.332423][ T5923] usb 8-1: 2:1: cannot set freq 11994917 to ep 0x82
[  836.343612][ T5954] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  836.355929][T15053] rdma_rxe: rxe_newlink: failed to add syz_tun
[  836.375464][ T5954] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  836.401408][ T5954] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  836.413585][ T5923] usb 8-1: USB disconnect, device number 29
[  836.457812][T14149] udevd[14149]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  836.485220][ T5954] usb 5-1: config 0 descriptor??
[  836.790992][   T79] usb 5-1: USB disconnect, device number 63
[  836.824292][ T5923] usb 8-1: new high-speed USB device number 30 using dummy_hcd
[  837.224471][ T5923] usb 8-1: Using ep0 maxpacket: 32
[  837.231648][ T5923] usb 8-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  837.241190][ T5923] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  837.629179][T15069] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2274'.
[  837.640226][ T5861] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[  837.727218][ T5923] usb 8-1: config 0 descriptor??
[  838.014897][ T5923] gspca_main: sunplus-2.14.0 probing 041e:400b
[  838.403794][ T5861] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  838.426650][ T5861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  838.446710][ T5861] usb 2-1: Product: syz
[  838.462031][ T5861] usb 2-1: Manufacturer: syz
[  838.562673][T15078] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request
[  839.468414][ T5923] gspca_sunplus: reg_w_riv err -110
[  839.473745][ T5923] sunplus 8-1:0.0: probe with driver sunplus failed with error -110
[  839.625406][ T5861] usb 2-1: SerialNumber: syz
[  839.650328][ T5861] usb 2-1: config 0 descriptor??
[  841.136912][ T5861] usb 2-1: Firmware version (0.0) predates our first public release.
[  841.192375][ T5861] usb 2-1: Please update to version 0.2 or newer
[  842.237525][ T5861] usb 2-1: USB disconnect, device number 59
[  842.296952][T15079] usb 8-1: USB disconnect, device number 30
[  842.308812][   T30] audit: type=1400 audit(1768431934.318:817): avc:  denied  { map } for  pid=15089 comm="syz.1.2280" path="/472/file0" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  846.658814][ T5861] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[  846.815786][T15132] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2293'.
[  846.840622][ T5861] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  846.850455][T15132] hsr_slave_0: left promiscuous mode
[  846.858512][ T5861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  846.867641][T15132] hsr_slave_1: left promiscuous mode
[  846.874437][ T5861] usb 2-1: Product: syz
[  846.878813][ T5861] usb 2-1: Manufacturer: syz
[  847.398901][T15134] hfs: can't find a HFS filesystem on dev nullb0
[  847.690233][ T5861] usb 2-1: SerialNumber: syz
[  847.704589][ T5861] usb 2-1: config 0 descriptor??
[  847.744277][T15079] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[  848.047712][T15079] usb 5-1: Using ep0 maxpacket: 32
[  848.055569][T15079] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  848.072782][T15079] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  848.094461][T15079] usb 5-1: config 0 descriptor??
[  848.108933][T15079] gspca_main: sunplus-2.14.0 probing 041e:400b
[  848.830307][T15079] gspca_sunplus: reg_w_riv err -110
[  848.837768][ T5861] usb 2-1: Firmware version (0.0) predates our first public release.
[  848.848164][T15079] sunplus 5-1:0.0: probe with driver sunplus failed with error -110
[  848.857283][ T5861] usb 2-1: Please update to version 0.2 or newer
[  850.191061][   T79] usb 2-1: USB disconnect, device number 60
[  851.504612][T15168] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2295'.
[  853.660983][T15079] usb 5-1: USB disconnect, device number 64
[  854.223802][T15192] rdma_rxe: rxe_newlink: failed to add syz_tun
[  854.294262][   T79] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[  854.546909][   T79] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  854.558059][   T79] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  854.568793][   T79] usb 5-1: New USB device found, idVendor=846d, idProduct=c626, bcdDevice= 0.00
[  854.578918][   T79] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  854.603086][   T79] usb 5-1: config 0 descriptor??
[  854.924029][ T5954] usb 8-1: new high-speed USB device number 31 using dummy_hcd
[  855.056335][   T79] hid-generic 0003:846D:C626.000F: unknown main item tag 0x0
[  855.544348][T15207] overlayfs: unescaped trailing colons in lowerdir mount option.
[  855.641385][T15208] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0.
[  855.649223][   T79] hid-generic 0003:846D:C626.000F: hidraw0: USB HID v0.00 Device [HID 846d:c626] on usb-dummy_hcd.4-1/input0
[  855.689645][T15205] netlink: 'syz.5.2311': attribute type 20 has an invalid length.
[  855.731095][ T5954] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  855.763444][ T5954] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  855.913274][ T5954] usb 8-1: Product: syz
[  855.918706][ T5954] usb 8-1: Manufacturer: syz
[  855.934685][ T5954] usb 8-1: SerialNumber: syz
[  856.057544][ T5954] usb 8-1: config 0 descriptor??
[  856.665923][T15221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  856.743506][T15221] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  857.491348][ T5954] usb 8-1: Firmware version (0.0) predates our first public release.
[  857.506654][ T5954] usb 8-1: Please update to version 0.2 or newer
[  858.211571][T15232] dummy0: entered allmulticast mode
[  858.280589][T15229] dummy0: left allmulticast mode
[  858.618129][ T5895] usb 8-1: USB disconnect, device number 31
[  862.090675][T15247] kAFS: unable to lookup cell '(,'
[  862.557337][   T30] audit: type=1326 audit(1768431954.558:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15255 comm="syz.5.2327" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbe0b58f749 code=0x0
[  863.358343][ T5895] usb 8-1: new high-speed USB device number 32 using dummy_hcd
[  863.424076][T15079] usb 7-1: new high-speed USB device number 53 using dummy_hcd
[  863.878103][T15079] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  863.888625][ T5895] usb 8-1: Using ep0 maxpacket: 32
[  863.894904][T15079] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  863.903615][T15079] usb 7-1: Product: syz
[  863.915344][ T5895] usb 8-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  863.928349][T15079] usb 7-1: Manufacturer: syz
[  863.936732][ T5895] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  863.945091][T15079] usb 7-1: SerialNumber: syz
[  863.975576][ T5895] usb 8-1: Product: syz
[  863.980675][T15079] usb 7-1: config 0 descriptor??
[  863.993761][ T5895] usb 8-1: Manufacturer: syz
[  864.003141][ T5895] usb 8-1: SerialNumber: syz
[  864.020232][ T5895] usb 8-1: config 0 descriptor??
[  864.599562][ T5895] airspy 8-1:0.0: Board ID: 00
[  864.604610][ T5895] airspy 8-1:0.0: Firmware version: 
[  864.744162][T15282] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=5130 sclass=netlink_xfrm_socket pid=15282 comm=syz.1.2332
[  865.002925][T15265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  865.029511][T15079] usb 7-1: Firmware version (0.0) predates our first public release.
[  865.041222][T15265] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  865.059881][T15079] usb 7-1: Please update to version 0.2 or newer
[  865.075697][ T5895] airspy 8-1:0.0: usb_control_msg() failed -71 request 0e
[  865.108730][ T5895] airspy 8-1:0.0: Registered as swradio24
[  865.129962][ T5895] airspy 8-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  865.200118][ T5895] usb 8-1: USB disconnect, device number 32
[  865.334940][T15288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2333'.
[  865.382581][T15293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  865.398106][T15293] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  865.552395][T15295] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  866.991504][T15302] syzkaller0: entered promiscuous mode
[  867.000560][T15302] syzkaller0: entered allmulticast mode
[  867.017207][T15300] netlink: 'syz.1.2335': attribute type 3 has an invalid length.
[  867.102438][T15300] IPv6: NLM_F_CREATE should be specified when creating new route
[  868.932541][ T5954] usb 7-1: USB disconnect, device number 53
[  869.409467][   T30] audit: type=1400 audit(1768431961.408:819): avc:  denied  { ioctl } for  pid=15320 comm="syz.1.2338" path="/dev/uhid" dev="devtmpfs" ino=1273 ioctlcmd=0xaed4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  869.412413][T15324] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  869.715319][   T30] audit: type=1326 audit(1768431961.718:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15332 comm="syz.6.2342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60c2b8f749 code=0x7ffc0000
[  869.829820][   T30] audit: type=1326 audit(1768431961.748:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15332 comm="syz.6.2342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60c2b8f749 code=0x7ffc0000
[  870.083844][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  870.101852][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  870.137970][   T30] audit: type=1326 audit(1768431961.748:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15332 comm="syz.6.2342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f60c2b8f749 code=0x7ffc0000
[  870.232304][T15333] syzkaller0: entered promiscuous mode
[  870.242085][T15333] syzkaller0: entered allmulticast mode
[  870.265370][   T30] audit: type=1326 audit(1768431961.748:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15332 comm="syz.6.2342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60c2b8f749 code=0x7ffc0000
[  870.350175][   T30] audit: type=1326 audit(1768431961.748:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15332 comm="syz.6.2342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60c2b8f749 code=0x7ffc0000
[  870.399753][   T30] audit: type=1326 audit(1768431961.748:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15332 comm="syz.6.2342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f60c2b8f749 code=0x7ffc0000
[  870.428495][   T30] audit: type=1326 audit(1768431961.768:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15332 comm="syz.6.2342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60c2b8f749 code=0x7ffc0000
[  870.489628][   T30] audit: type=1326 audit(1768431961.768:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15332 comm="syz.6.2342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60c2b8f749 code=0x7ffc0000
[  870.612952][   T30] audit: type=1326 audit(1768431961.778:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15332 comm="syz.6.2342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f60c2b8f749 code=0x7ffc0000
[  870.824033][ T5954] usb 8-1: new high-speed USB device number 33 using dummy_hcd
[  870.873454][T15353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  870.915205][T15353] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  870.945349][T15355] loop6: detected capacity change from 0 to 2640
[  870.952399][T15355] buffer_io_error: 10 callbacks suppressed
[  870.952414][T15355] Buffer I/O error on dev loop6, logical block 0, async page read
[  870.994283][T15355] Buffer I/O error on dev loop6, logical block 0, async page read
[  871.006096][T15355] Buffer I/O error on dev loop6, logical block 0, async page read
[  871.014512][T15355] Buffer I/O error on dev loop6, logical block 0, async page read
[  871.016502][ T5954] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  871.022626][T15355] Buffer I/O error on dev loop6, logical block 0, async page read
[  871.040381][ T5954] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  871.041038][T15355] Buffer I/O error on dev loop6, logical block 0, async page read
[  871.049297][ T5954] usb 8-1: Product: syz
[  871.049361][ T5954] usb 8-1: Manufacturer: syz
[  871.049398][ T5954] usb 8-1: SerialNumber: syz
[  871.139576][T15355] Buffer I/O error on dev loop6, logical block 0, async page read
[  871.151014][ T5954] usb 8-1: config 0 descriptor??
[  871.164090][T15355] Buffer I/O error on dev loop6, logical block 0, async page read
[  871.176240][T15355] ldm_validate_partition_table(): Disk read failed.
[  871.234024][T15362] loop6: detected capacity change from 2640 to 524288000
[  871.244416][T15355] Buffer I/O error on dev loop6, logical block 0, async page read
[  871.279017][T15355] Buffer I/O error on dev loop6, logical block 0, async page read
[  871.291159][T15355] Dev loop6: unable to read RDB block 0
[  871.309657][T15355]  loop6: unable to read partition table
[  871.320856][T15355] loop_reread_partitions: partition scan of loop6 (ir¡c‡’úÒVUŸX¯ÃG¨½›˜ñZtM<IÆi8NL� í	á·ùWû@©àQ6ÒÝ%ž…û¥¡Úè) failed (rc=-5)
[  871.510799][T15079] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[  871.681892][T15079] usb 2-1: Using ep0 maxpacket: 32
[  871.694734][T15079] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  871.723336][T15079] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  872.274758][ T5954] usb 8-1: Firmware version (0.0) predates our first public release.
[  872.283105][ T5954] usb 8-1: Please update to version 0.2 or newer
[  872.351290][T15079] usb 2-1: config 0 descriptor??
[  872.536758][T15079] gspca_main: sunplus-2.14.0 probing 041e:400b
[  873.997283][T15079] gspca_sunplus: reg_r err -110
[  875.219163][T15387] rdma_rxe: rxe_newlink: failed to add syz_tun
[  875.251169][T15079] sunplus 2-1:0.0: probe with driver sunplus failed with error -110
[  875.956724][ T5954] usb 8-1: USB disconnect, device number 33
[  876.397254][T15395] NILFS (loop6): device size too small
[  876.511569][T15396] NILFS (loop6): device size too small
[  876.631087][   T30] kauditd_printk_skb: 48 callbacks suppressed
[  876.631116][   T30] audit: type=1400 audit(1768431968.468:877): avc:  denied  { write } for  pid=15394 comm="syz.6.2359" lport=44989 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  877.613695][T15079] usb 2-1: USB disconnect, device number 61
[  878.204071][ T5954] usb 8-1: new high-speed USB device number 34 using dummy_hcd
[  878.468441][ T5954] usb 8-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=1d.4f
[  878.479300][ T5954] usb 8-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0
[  878.492122][ T5954] usb 8-1: Manufacturer: syz
[  879.034792][ T5954] peak_usb 8-1:127.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels)
[  879.130332][   T30] audit: type=1400 audit(1768431971.128:878): avc:  denied  { write } for  pid=15409 comm="syz.1.2363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  879.314414][ T5954] peak_usb 8-1:127.0 can0: sending command failure: -22
[  879.321648][ T5954] peak_usb 8-1:127.0 can0: sending command failure: -22
[  879.344358][ T5954] peak_usb 8-1:127.0 can0: sending command failure: -22
[  879.446961][T15422] syz1: rxe_newlink: already configured on syz_tun
[  879.515511][T15400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  879.598538][T15400] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  879.725799][ T5954] peak_usb 8-1:127.0: probe with driver peak_usb failed with error -22
[  879.748626][ T5954] usb 8-1: USB disconnect, device number 34
[  880.304092][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  881.710793][T15438] rdma_rxe: rxe_newlink: failed to add syz_tun
[  881.766191][ T5895] usb 6-1: new full-speed USB device number 61 using dummy_hcd
[  882.024974][ T5895] usb 6-1: device descriptor read/64, error -71
[  882.109703][T15454] Invalid source name
[  882.534541][   T30] audit: type=1326 audit(1768431974.538:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15452 comm="syz.1.2376" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fabc538f749 code=0x0
[  882.653058][T15453] overlayfs: failed to resolve './file2': -2
[  882.662192][T15453] fuse: Unknown parameter '0x0000000000000007'
[  882.770390][ T5895] usb 6-1: new full-speed USB device number 62 using dummy_hcd
[  882.793789][T15456] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=255 sclass=netlink_route_socket pid=15456 comm=syz.1.2376
[  883.307370][ T5895] usb 6-1: device descriptor read/64, error -71
[  883.425199][ T5895] usb usb6-port1: attempt power cycle
[  886.074082][ T5895] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[  886.244822][ T5895] usb 2-1: device descriptor read/64, error -71
[  886.494033][ T5895] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[  886.723338][T15486] rdma_rxe: rxe_newlink: failed to add syz_tun
[  886.757075][ T5895] usb 2-1: device descriptor read/64, error -71
[  886.971665][ T5895] usb usb2-port1: attempt power cycle
[  888.078122][T15505] Invalid source name
[  888.179030][T15079] usb 7-1: new high-speed USB device number 54 using dummy_hcd
[  888.234034][ T5895] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[  888.258171][ T5895] usb 2-1: device descriptor read/8, error -71
[  888.344119][T15079] usb 7-1: Using ep0 maxpacket: 16
[  888.352956][T15079] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[  889.124480][T15079] usb 7-1: config 0 interface 0 has no altsetting 0
[  889.141410][T15079] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  889.248983][T15079] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  889.302964][ T5895] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[  889.312705][T15079] usb 7-1: config 0 descriptor??
[  889.344554][T15079] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[  890.592020][ T5895] usb 2-1: device not accepting address 65, error -71
[  890.599534][ T5895] usb usb2-port1: unable to enumerate USB device
[  890.704193][ T5954] usb 7-1: USB disconnect, device number 54
[  890.754846][T15530] rdma_rxe: rxe_newlink: failed to add syz_tun
[  890.780330][T15528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  890.813113][T15528] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  891.324082][ T5954] usb 7-1: new high-speed USB device number 55 using dummy_hcd
[  891.493990][ T5954] usb 7-1: Using ep0 maxpacket: 32
[  891.508254][ T5954] usb 7-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  891.525780][ T5954] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  891.572786][ T5954] usb 7-1: config 0 descriptor??
[  891.615280][ T5954] gspca_main: sunplus-2.14.0 probing 041e:400b
[  892.354975][ T5954] gspca_sunplus: reg_w_riv err -110
[  892.366098][ T5954] sunplus 7-1:0.0: probe with driver sunplus failed with error -110
[  893.007003][T15555] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  893.952327][T15559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  895.724681][T15559] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  897.097670][T15573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  897.441949][T15573] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  897.457610][ T5895] usb 7-1: USB disconnect, device number 55
[  897.579185][   T30] audit: type=1400 audit(1768431989.578:880): avc:  denied  { ioctl } for  pid=15583 comm="syz.6.2410" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  897.663020][T15587] rdma_rxe: rxe_newlink: failed to add syz_tun
[  897.713479][   T30] audit: type=1400 audit(1768431989.708:881): avc:  denied  { map } for  pid=15588 comm="syz.7.2412" path="socket:[59469]" dev="sockfs" ino=59469 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  897.738937][   T30] audit: type=1400 audit(1768431989.708:882): avc:  denied  { accept } for  pid=15588 comm="syz.7.2412" path="socket:[59469]" dev="sockfs" ino=59469 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  897.879875][   T79] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[  897.888901][ T5954] usb 6-1: new high-speed USB device number 64 using dummy_hcd
[  897.924520][ T5895] usb 7-1: new high-speed USB device number 56 using dummy_hcd
[  898.097200][T15592] netlink: 'syz.7.2412': attribute type 1 has an invalid length.
[  898.164422][ T5895] usb 7-1: device descriptor read/64, error -71
[  898.394820][ T5954] usb 6-1: Using ep0 maxpacket: 16
[  898.402394][ T5954] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[  898.413403][ T5954] usb 6-1: config 0 interface 0 has no altsetting 0
[  898.422249][ T5954] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  898.432955][ T5954] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  898.443999][   T79] usb 2-1: Using ep0 maxpacket: 32
[  898.452986][   T79] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  898.463850][T15594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  898.473459][ T5954] usb 6-1: config 0 descriptor??
[  898.479067][   T79] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  898.485103][T15594] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  898.490964][ T5954] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  898.514029][   T79] usb 2-1: config 0 descriptor??
[  898.514183][ T5895] usb 7-1: new high-speed USB device number 57 using dummy_hcd
[  898.532828][   T79] gspca_main: sunplus-2.14.0 probing 041e:400b
[  898.801832][T15596] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  898.874355][ T5954] usb 6-1: USB disconnect, device number 64
[  899.008491][ T5895] usb 7-1: device descriptor read/64, error -71
[  899.140687][T15599] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2414'.
[  899.864932][   T79] gspca_sunplus: reg_r err -110
[  900.359737][   T79] sunplus 2-1:0.0: probe with driver sunplus failed with error -110
[  901.414601][ T5895] usb usb7-port1: attempt power cycle
[  904.137024][ T5954] usb 2-1: USB disconnect, device number 66
[  904.304640][   T30] audit: type=1400 audit(1768431996.308:883): avc:  denied  { audit_write } for  pid=15619 comm="syz.7.2420" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  904.430287][T15633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  904.439544][T15626] rdma_rxe: rxe_newlink: failed to add syz_tun
[  904.477037][T15633] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  904.557990][   T30] audit: type=1400 audit(1768431996.558:884): avc:  denied  { write } for  pid=15628 comm="syz.1.2425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  905.014812][T15644] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  905.340817][T15646] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2428'.
[  910.384934][T15663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  910.404384][T15663] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  911.118769][   T30] audit: type=1400 audit(1768432002.698:885): avc:  denied  { ioctl } for  pid=15657 comm="syz.6.2432" path="socket:[59677]" dev="sockfs" ino=59677 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  911.399528][T15669] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  912.582573][T15680] kAFS: unable to lookup cell 'ÿ'
[  912.615053][T15680] kAFS: unable to lookup cell '(,c¾Ì'
[  913.582542][T15686] rdma_rxe: rxe_newlink: failed to add syz_tun
[  913.771621][   T30] audit: type=1400 audit(1768432005.758:886): avc:  denied  { create } for  pid=15690 comm="syz.4.2442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[  915.737754][T15691] vxcan1 speed is unknown, defaulting to 1000
[  917.074382][T15710] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2446'.
[ 1018.544033][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[ 1022.143875][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[ 1022.150862][    C1] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P15710/1:b..l P15691/1:b..l
[ 1022.160589][    C1] rcu: 	(detected by 1, t=10502 jiffies, g=76161, q=155 ncpus=2)
[ 1022.168379][    C1] task:syz.4.2442      state:R  running task     stack:24936 pid:15691 tgid:15690 ppid:5811   task_flags:0x400140 flags:0x00080002
[ 1022.183094][    C1] Call Trace:
[ 1022.186374][    C1]  <TASK>
[ 1022.189306][    C1]  ? __schedule+0x10b9/0x6150
[ 1022.194077][    C1]  __schedule+0x1139/0x6150
[ 1022.198718][    C1]  ? __pfx___schedule+0x10/0x10
[ 1022.203561][    C1]  ? mark_held_locks+0x49/0x80
[ 1022.208660][    C1]  preempt_schedule_irq+0x51/0x90
[ 1022.213856][    C1]  irqentry_exit+0x1d8/0x8c0
[ 1022.218462][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1022.224532][    C1] RIP: 0010:__rcu_read_lock+0xa7/0xf0
[ 1022.229910][    C1] Code: 48 b8 00 00 00 00 00 fc ff df 89 9d 84 04 00 00 65 48 8b 1d d3 b0 0f 12 48 8d bb 84 04 00 00 48 89 fa 48 c1 ea 03 0f b6 14 02 <48> 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 1f 8b 83 84 04 00
[ 1022.249509][    C1] RSP: 0018:ffffc9000bea6d80 EFLAGS: 00000a07
[ 1022.255644][    C1] RAX: dffffc0000000000 RBX: ffff888032eaa4c0 RCX: ffffc9000bea6d5c
[ 1022.263693][    C1] RDX: 0000000000000000 RSI: ffffffff8228a239 RDI: ffff888032eaa944
[ 1022.271751][    C1] RBP: ffff888032eaa4c0 R08: ffffffff912fca48 R09: 000000001ddd49f9
[ 1022.279798][    C1] R10: 0000000000000002 R11: 000000000001289d R12: ffffffff81a97200
[ 1022.287835][    C1] R13: ffffc9000bea6e08 R14: 0000000000000000 R15: ffff888032eaa4c0
[ 1022.295892][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1022.302122][    C1]  ? __kasan_slab_alloc+0x89/0x90
[ 1022.307232][    C1]  unwind_next_frame+0xae/0x20b0
[ 1022.312361][    C1]  ? __kasan_slab_alloc+0x89/0x90
[ 1022.317389][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1022.323543][    C1]  arch_stack_walk+0x94/0x100
[ 1022.328366][    C1]  ? __kasan_slab_alloc+0x89/0x90
[ 1022.333399][    C1]  stack_trace_save+0x8e/0xc0
[ 1022.338262][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[ 1022.343807][    C1]  ? kasan_save_stack+0x42/0x60
[ 1022.348661][    C1]  ? kasan_save_stack+0x33/0x60
[ 1022.353487][    C1]  ? kasan_save_track+0x14/0x30
[ 1022.358323][    C1]  ? __kasan_kmalloc+0xaa/0xb0
[ 1022.363167][    C1]  ? __kmalloc_node_track_caller_noprof+0x353/0x930
[ 1022.369748][    C1]  ? kstrdup+0x53/0x100
[ 1022.373990][    C1]  kasan_save_stack+0x33/0x60
[ 1022.378659][    C1]  ? kasan_save_stack+0x33/0x60
[ 1022.383497][    C1]  ? kasan_save_track+0x14/0x30
[ 1022.388338][    C1]  ? __kasan_slab_alloc+0x89/0x90
[ 1022.393939][    C1]  kasan_save_track+0x14/0x30
[ 1022.398624][    C1]  __kasan_slab_alloc+0x89/0x90
[ 1022.404092][    C1]  kmem_cache_alloc_noprof+0x25e/0x770
[ 1022.410421][    C1]  ? __kernfs_new_node+0xd2/0x9b0
[ 1022.416071][    C1]  ? __kernfs_new_node+0xd2/0x9b0
[ 1022.421074][    C1]  __kernfs_new_node+0xd2/0x9b0
[ 1022.425903][    C1]  ? __pfx___kernfs_new_node+0x10/0x10
[ 1022.431340][    C1]  ? find_held_lock+0x2b/0x80
[ 1022.436002][    C1]  ? kernfs_root+0xee/0x2a0
[ 1022.440897][    C1]  kernfs_new_node+0x13c/0x1e0
[ 1022.445673][    C1]  __kernfs_create_file+0x53/0x350
[ 1022.450792][    C1]  sysfs_add_file_mode_ns+0x207/0x3c0
[ 1022.456204][    C1]  internal_create_group+0x597/0xf70
[ 1022.461587][    C1]  ? __pfx_internal_create_group+0x10/0x10
[ 1022.468090][    C1]  ? __pfx_kobject_add+0x10/0x10
[ 1022.473057][    C1]  internal_create_groups+0x9d/0x150
[ 1022.478609][    C1]  setup_port+0x409/0x1720
[ 1022.483039][    C1]  ? __pfx_setup_port+0x10/0x10
[ 1022.487896][    C1]  ? do_raw_spin_unlock+0x172/0x230
[ 1022.493193][    C1]  ? rxe_get_link_layer+0x60/0xe0
[ 1022.498339][    C1]  ? __pfx_rxe_get_link_layer+0x10/0x10
[ 1022.505333][    C1]  ? rdma_port_get_link_layer+0x57/0x110
[ 1022.511750][    C1]  ib_setup_port_attrs+0x201/0x600
[ 1022.517014][    C1]  ? kobject_put+0xaf/0x6f0
[ 1022.522189][    C1]  ? __pfx_ib_setup_port_attrs+0x10/0x10
[ 1022.528190][    C1]  ? __init_waitqueue_head+0xca/0x150
[ 1022.534200][    C1]  add_one_compat_dev+0x5b3/0x820
[ 1022.539676][    C1]  rdma_dev_init_net+0x30a/0x590
[ 1022.545219][    C1]  ? __pfx_rdma_dev_init_net+0x10/0x10
[ 1022.550992][    C1]  ? __kmalloc_noprof+0x35d/0x910
[ 1022.556500][    C1]  ? __pfx_rdma_dev_init_net+0x10/0x10
[ 1022.561966][    C1]  ops_init+0x1e2/0x5f0
[ 1022.566220][    C1]  setup_net+0x11d/0x3a0
[ 1022.570465][    C1]  ? __pfx_setup_net+0x10/0x10
[ 1022.575228][    C1]  ? lockdep_init_map_type+0x5c/0x270
[ 1022.581148][    C1]  ? mutex_init_lockep+0x110/0x150
[ 1022.586356][    C1]  copy_net_ns+0x351/0x7c0
[ 1022.590894][    C1]  create_new_namespaces+0x3ea/0xab0
[ 1022.596203][    C1]  copy_namespaces+0x468/0x570
[ 1022.600984][    C1]  copy_process+0x2a70/0x7430
[ 1022.605677][    C1]  ? __pfx_copy_process+0x10/0x10
[ 1022.611163][    C1]  ? futex_private_hash_put+0x160/0x1b0
[ 1022.616823][    C1]  kernel_clone+0xfc/0x910
[ 1022.621356][    C1]  ? __pfx_kernel_clone+0x10/0x10
[ 1022.626591][    C1]  __do_sys_clone+0xce/0x120
[ 1022.631314][    C1]  ? __pfx___do_sys_clone+0x10/0x10
[ 1022.636784][    C1]  ? xfd_validate_state+0x61/0x180
[ 1022.642014][    C1]  do_syscall_64+0xcd/0xf80
[ 1022.646716][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1022.652793][    C1] RIP: 0033:0x7ff6bc18f749
[ 1022.657544][    C1] RSP: 002b:00007ff6bcf55fe8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038
[ 1022.666310][    C1] RAX: ffffffffffffffda RBX: 00007ff6bc3e5fa0 RCX: 00007ff6bc18f749
[ 1022.674634][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000fdba2080
[ 1022.682691][    C1] RBP: 00007ff6bc213f91 R08: 0000000000000000 R09: 0000000000000000
[ 1022.690953][    C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[ 1022.699372][    C1] R13: 00007ff6bc3e6038 R14: 00007ff6bc3e5fa0 R15: 00007fff97dd28b8
[ 1022.707513][    C1]  </TASK>
[ 1022.710780][    C1] task:syz.1.2446      state:R  running task     stack:27096 pid:15710 tgid:15709 ppid:5820   task_flags:0x40054c flags:0x00080000
[ 1022.724596][    C1] Call Trace:
[ 1022.728235][    C1]  <TASK>
[ 1022.731175][    C1]  ? __schedule+0x10b9/0x6150
[ 1022.736373][    C1]  __schedule+0x1139/0x6150
[ 1022.740969][    C1]  ? mark_held_locks+0x49/0x80
[ 1022.745833][    C1]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1022.751045][    C1]  ? __pfx___schedule+0x10/0x10
[ 1022.756076][    C1]  ? preempt_schedule_thunk+0x16/0x30
[ 1022.761469][    C1]  preempt_schedule_common+0x44/0xc0
[ 1022.766753][    C1]  preempt_schedule_thunk+0x16/0x30
[ 1022.771997][    C1]  _raw_spin_unlock+0x3e/0x50
[ 1022.776672][    C1]  unmap_page_range+0x1047/0x43c0
[ 1022.781697][    C1]  ? __pfx_unmap_page_range+0x10/0x10
[ 1022.787185][    C1]  ? uprobe_munmap+0x20/0x600
[ 1022.791848][    C1]  unmap_single_vma+0x153/0x240
[ 1022.796708][    C1]  unmap_vmas+0x218/0x470
[ 1022.801023][    C1]  ? __pfx_unmap_vmas+0x10/0x10
[ 1022.805855][    C1]  ? mas_next_slot+0x12d3/0x1cb0
[ 1022.810812][    C1]  exit_mmap+0x1b0/0xb60
[ 1022.815058][    C1]  ? __pfx_exit_mmap+0x10/0x10
[ 1022.819814][    C1]  ? __lock_acquire+0x436/0x2890
[ 1022.824739][    C1]  ? arch_uprobe_clear_state+0x16/0x150
[ 1022.830263][    C1]  __mmput+0x12a/0x410
[ 1022.834314][    C1]  mmput+0x62/0x70
[ 1022.838015][    C1]  do_exit+0x7d7/0x2bd0
[ 1022.842144][    C1]  ? lock_acquire+0x179/0x330
[ 1022.846804][    C1]  ? __pfx_do_exit+0x10/0x10
[ 1022.851397][    C1]  ? find_held_lock+0x2b/0x80
[ 1022.856056][    C1]  do_group_exit+0xd3/0x2a0
[ 1022.860539][    C1]  get_signal+0x2671/0x26d0
[ 1022.865035][    C1]  ? putname+0xf5/0x1a0
[ 1022.869174][    C1]  ? __pfx_get_signal+0x10/0x10
[ 1022.874090][    C1]  ? do_futex+0x122/0x350
[ 1022.878398][    C1]  arch_do_signal_or_restart+0x8f/0x7e0
[ 1022.883928][    C1]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1022.890073][    C1]  ? __x64_sys_openat+0x174/0x210
[ 1022.895336][    C1]  ? __pfx___x64_sys_futex+0x10/0x10
[ 1022.900625][    C1]  exit_to_user_mode_loop+0x8c/0x540
[ 1022.905922][    C1]  do_syscall_64+0x4ee/0xf80
[ 1022.910514][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1022.916414][    C1] RIP: 0033:0x7fabc538f749
[ 1022.920832][    C1] RSP: 002b:00007fabc61950e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1022.929245][    C1] RAX: fffffffffffffe00 RBX: 00007fabc55e5fa8 RCX: 00007fabc538f749
[ 1022.937226][    C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fabc55e5fa8
[ 1022.945293][    C1] RBP: 00007fabc55e5fa0 R08: 0000000000000000 R09: 0000000000000000
[ 1022.953250][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1022.961311][    C1] R13: 00007fabc55e6038 R14: 00007ffe66e72540 R15: 00007ffe66e72628
[ 1022.969302][    C1]  </TASK>
[ 1022.972571][    C1] rcu: rcu_preempt kthread starved for 10582 jiffies! g76161 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[ 1022.983754][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[ 1022.993714][    C1] rcu: RCU grace-period kthread stack dump:
[ 1022.999617][    C1] task:rcu_preempt     state:R  running task     stack:28064 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
[ 1023.013097][    C1] Call Trace:
[ 1023.016362][    C1]  <TASK>
[ 1023.019278][    C1]  ? __schedule+0x10b9/0x6150
[ 1023.023944][    C1]  __schedule+0x1139/0x6150
[ 1023.028526][    C1]  ? __pfx___schedule+0x10/0x10
[ 1023.033449][    C1]  ? find_held_lock+0x2b/0x80
[ 1023.038130][    C1]  ? schedule+0x2d7/0x3a0
[ 1023.042456][    C1]  schedule+0xe7/0x3a0
[ 1023.046500][    C1]  schedule_timeout+0x123/0x290
[ 1023.051359][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[ 1023.056710][    C1]  ? __pfx_process_timeout+0x10/0x10
[ 1023.062104][    C1]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1023.068025][    C1]  ? prepare_to_swait_event+0xf5/0x480
[ 1023.073546][    C1]  rcu_gp_fqs_loop+0x1ea/0xaf0
[ 1023.078337][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[ 1023.083674][    C1]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1023.089218][    C1]  ? __pfx_rcu_gp_init+0x10/0x10
[ 1023.094208][    C1]  ? rcu_gp_cleanup+0x7c1/0xe90
[ 1023.099243][    C1]  rcu_gp_kthread+0x26d/0x380
[ 1023.104017][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1023.109221][    C1]  ? rcu_is_watching+0x12/0xc0
[ 1023.114062][    C1]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1023.119279][    C1]  ? __kthread_parkme+0x19e/0x250
[ 1023.124283][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1023.129552][    C1]  kthread+0x3c5/0x780
[ 1023.133687][    C1]  ? __pfx_kthread+0x10/0x10
[ 1023.138256][    C1]  ? rcu_is_watching+0x12/0xc0
[ 1023.142996][    C1]  ? __pfx_kthread+0x10/0x10
[ 1023.147657][    C1]  ret_from_fork+0x983/0xb10
[ 1023.152234][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[ 1023.157319][    C1]  ? __switch_to+0x7af/0x10d0
[ 1023.161987][    C1]  ? __pfx_kthread+0x10/0x10
[ 1023.166555][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1023.171304][    C1]  </TASK>
[ 1023.174387][    C1] rcu: Stack dump where RCU GP kthread last ran:
[ 1023.180680][    C1] Sending NMI from CPU 1 to CPUs 0:
[ 1023.185991][    C0] NMI backtrace for cpu 0
[ 1023.186013][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1023.186036][    C0] Tainted: [L]=SOFTLOCKUP
[ 1023.186042][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1023.186053][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[ 1023.186079][    C0] Code: 86 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 f9 11 00 fb f4 <e9> cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
[ 1023.186094][    C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6
[ 1023.186109][    C0] RAX: 00000000031fbcab RBX: 0000000000000000 RCX: ffffffff8b7866d9
[ 1023.186119][    C0] RDX: 0000000000000000 RSI: ffffffff8daceab2 RDI: ffffffff8bf2b480
[ 1023.186130][    C0] RBP: fffffbfff1c12f68 R08: 0000000000000001 R09: ffffed101708673d
[ 1023.186144][    C0] R10: ffff8880b84339eb R11: ffffffff8e098670 R12: 0000000000000000
[ 1023.186155][    C0] R13: ffffffff8e097b40 R14: ffffffff9088bdd0 R15: 0000000000000000
[ 1023.186165][    C0] FS:  0000000000000000(0000) GS:ffff8881248f4000(0000) knlGS:0000000000000000
[ 1023.186181][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1023.186191][    C0] CR2: 0000001b2f322ff8 CR3: 000000004d92d000 CR4: 00000000003526f0
[ 1023.186201][    C0] Call Trace:
[ 1023.186209][    C0]  <TASK>
[ 1023.186215][    C0]  default_idle+0x13/0x20
[ 1023.186236][    C0]  default_idle_call+0x6c/0xb0
[ 1023.186257][    C0]  do_idle+0x38d/0x510
[ 1023.186282][    C0]  ? __pfx_do_idle+0x10/0x10
[ 1023.186307][    C0]  cpu_startup_entry+0x4f/0x60
[ 1023.186330][    C0]  rest_init+0x16b/0x2b0
[ 1023.186344][    C0]  ? acpi_subsystem_init+0x133/0x180
[ 1023.186361][    C0]  ? __pfx_x86_late_time_init+0x10/0x10
[ 1023.186380][    C0]  start_kernel+0x3ef/0x4d0
[ 1023.186397][    C0]  x86_64_start_reservations+0x18/0x30
[ 1023.186413][    C0]  x86_64_start_kernel+0x130/0x190
[ 1023.186430][    C0]  common_startup_64+0x13e/0x148
[ 1023.186457][    C0]  </TASK>