last executing test programs:

15m35.113752072s ago: executing program 4 (id=421):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0xdddd1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x14)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

15m34.137139614s ago: executing program 4 (id=424):
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x50)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
read$eventfd(r4, &(0x7f0000000180), 0x8)

15m32.983160369s ago: executing program 4 (id=428):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000005600)='sys_enter\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='\t\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00@\x00\x00\x00B'], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r3}, 0x38)
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x400})
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x5}, 0x8)
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000540)={'pim6reg\x00', 0x600})

15m32.483296958s ago: executing program 4 (id=429):
memfd_create(&(0x7f0000000040)='dev [\x1dx#l', 0x8)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000100)=0xfffffff7, 0x4)
r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040))
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=@v1={0x1000000, [{0x4, 0x5}]}, 0xc, 0x0)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000680)={0x1, 0x0, 0x202, 0xce, 0xffffffffffffffff, 0x200000000000008, 0x1000000000000008, 0x2, 0x8, 0x40000000000002a, 0x80000009, 0x2})
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r3, 0xc06c4124, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2})
sendmmsg$inet6(r0, &(0x7f0000001700)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @local, 0x1}, 0x18, 0x0, 0x0, &(0x7f0000000140)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1={0xff, 0x11}}}}], 0x28, 0x7ffffff7}}], 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0)
mount_setattr(r4, &(0x7f0000000040)='./file0\x00', 0x1100, &(0x7f0000000300)={0x80, 0x2, 0x80000, {r4}}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x3, 0x0, @random="a1fb75d10a28"}, 0x10)
r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'})

15m31.537671413s ago: executing program 4 (id=432):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a300000000054000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c08000340000000080800074022fa0031080006"], 0xe0}}, 0xffffffffffffff)

15m29.229519901s ago: executing program 4 (id=437):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x1, 0x2, 0x3, 0x0, 0x0, 0xf00}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x90)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
pipe2(&(0x7f0000001040), 0x0)
gettid()
timer_settime(0x0, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000002340)='mountstats\x00')
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r2, 0x0, 0x0)
sched_getscheduler(0x0)
r3 = syz_open_dev$video4linux(&(0x7f00000001c0), 0xf, 0x60100)
ioctl$VIDIOC_QUERYMENU(r3, 0xc02c5625, &(0x7f0000000000)={0x8, 0xffff, @value=0x400})

15m28.084580037s ago: executing program 32 (id=437):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x1, 0x2, 0x3, 0x0, 0x0, 0xf00}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x90)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
pipe2(&(0x7f0000001040), 0x0)
gettid()
timer_settime(0x0, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000002340)='mountstats\x00')
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r2, 0x0, 0x0)
sched_getscheduler(0x0)
r3 = syz_open_dev$video4linux(&(0x7f00000001c0), 0xf, 0x60100)
ioctl$VIDIOC_QUERYMENU(r3, 0xc02c5625, &(0x7f0000000000)={0x8, 0xffff, @value=0x400})

15m1.412992103s ago: executing program 3 (id=520):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, &(0x7f0000001140))
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo\x00')
getdents64(r2, &(0x7f0000000080)=""/95, 0x5f)
getdents(r2, 0xfffffffffffffffd, 0x3b)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f00000000c0)={[{@subsystem='cpu'}, {@subsystem='memory'}, {@xattr}]})
mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0)
r5 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0), 0x161)
unshare(0x40020000)

15m0.928311788s ago: executing program 3 (id=523):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002240)=""/102400, 0x19000)
setreuid(0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_virt_wifi\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0xf0b, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xb, 0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x0, 0x2, 0x0, 0xfffffffd, 0xbfffffff}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x92, 0x0, 0x10, 0x0, 0x3}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2004c084}, 0x40000d0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
stat(0x0, &(0x7f0000000980))
gettid()
getgroups(0x7, &(0x7f0000000b40)=[0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff, 0xee01])
mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x8000, 0x0)
r4 = syz_open_dev$vbi(&(0x7f00000028c0), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000100)=0x3)
r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002)
ioctl$EVIOCGRAB(r5, 0x40044590, 0x0)
write$evdev(r5, 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x640, 0x1, 0x1, 0xd59f83, 0x7, 0x42, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xba3, 0x9, 0x0, {0x8, 0xffffffff}, 0xd0, 0x9}})
r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
pread64(r6, &(0x7f0000000340)=""/125, 0x7d, 0x66fe)
mknodat$null(r6, &(0x7f0000000180)='./file0\x00', 0x400, 0x103)

15m0.340804783s ago: executing program 3 (id=526):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffa5}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_usb_control_io(r0, &(0x7f00000000c0)={0x18, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffa5}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
syz_usb_control_io(r0, &(0x7f00000000c0)={0x18, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) (async)

14m57.423713105s ago: executing program 3 (id=536):
r0 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000000))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r2=>0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES64=r2], 0x158}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
mknodat$loop(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8000, 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"})
ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000000)=0x8)
r5 = syz_open_pts(r4, 0x101)
ioctl$TCXONC(r5, 0x540a, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x125d, &(0x7f0000001080))
socket$key(0xf, 0x3, 0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000002000)=""/102400, 0x19000)
keyctl$read(0x2, 0x0, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r7 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x3, @mcast1}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, 0x0, 0x0)
sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000650000000040000000067c63a13d2b1e4659bc2409b4a600000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94)

14m50.920215732s ago: executing program 3 (id=551):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$l2tp(0x2, 0x2, 0x73)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
close(r6)
write$selinux_load(r6, &(0x7f00000005c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c690de571ae7639b9146798892cacfb52e49cf5737b72c7868b6695e9d03ac1352fa5c29ae1f7b16a4fdd121b8ac198f9e0bb8a87c72fcf8c1fd6b6040000005af416dc7baec09a7c45ff450db60709a9db1e8018"], 0x57)
sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x24004840}, 0x20000841)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
connect$inet(r4, 0x0, 0x0)
sendmmsg$inet(r4, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)

14m49.364377643s ago: executing program 3 (id=552):
prlimit64(0x0, 0xe, &(0x7f0000000780)={0x9, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xe75f0000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1b, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18447900000000000000001800", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0}, 0x94)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@getqdisc={0x0, 0x26, 0x300, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xa, 0xd}, {0x6, 0xffec}, {0xd, 0x4}}, [{}, {}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xf}, {}, {0x2, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x24040084)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0})
write(r6, &(0x7f0000000000)="fa", 0xfffffdef)
socket$vsock_stream(0x28, 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000004c0)={0x0, 0x0})
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff7a1ef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40dddb51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88370d9ed9467b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42553ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca000000000000000000000509619f5f0cbc72eebc653946d3552236f0dfe485cfa71bd69f4ded6e131128c3875b785875addfcbd5931c12adbef75535e694f3a19f28f9f99fa32e8ff66e7b1ff674434fb63ba0e28aadccf77d387525c98e81476058c958eaccfa7d251d0671222dc9d06485f7f690d3d4227bd21bd7ff8338617705b7faec47c86789a488b43d0fedf1b0ee05d65c677ced1e8214b2f6cb74d73886eb"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffa3, 0x0, 0xffffffffffffffff, 0x24}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r8, 0x80083313, &(0x7f0000000240))
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10)
ppoll(&(0x7f0000000500)=[{r2, 0x40}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x20003, 0x1, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

14m34.095845568s ago: executing program 33 (id=552):
prlimit64(0x0, 0xe, &(0x7f0000000780)={0x9, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xe75f0000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1b, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18447900000000000000001800", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0}, 0x94)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@getqdisc={0x0, 0x26, 0x300, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xa, 0xd}, {0x6, 0xffec}, {0xd, 0x4}}, [{}, {}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xf}, {}, {0x2, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x24040084)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0})
write(r6, &(0x7f0000000000)="fa", 0xfffffdef)
socket$vsock_stream(0x28, 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000004c0)={0x0, 0x0})
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffa3, 0x0, 0xffffffffffffffff, 0x24}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r8, 0x80083313, &(0x7f0000000240))
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10)
ppoll(&(0x7f0000000500)=[{r2, 0x40}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x20003, 0x1, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

9m55.226756171s ago: executing program 6 (id=1471):
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40000)
syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0)
prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000180))
r2 = memfd_secret(0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x416500, 0x0)
ftruncate(r2, 0x0)
mremap(&(0x7f0000d71000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000179000/0x2000)=nil)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000000)=0x2)
ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000240)={0x2, &(0x7f00000001c0)=[{0x40, 0x0, 0x38, 0x4}, {0x6, 0xfc, 0x0, 0x3}]})
write(r3, &(0x7f0000000280)="4591c28e8b83", 0x6)
migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x9f17d8a0a2d59e23, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0)

9m51.573625752s ago: executing program 6 (id=1479):
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x80080, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcffffffa591bd46f1080c23", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, &(0x7f0000000240), &(0x7f00000002c0)=0xc)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000080)=0x20013)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x4)
sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0)

9m49.733915133s ago: executing program 6 (id=1485):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000020e704090000000000000109022400010000000009040000010300000009210000000122040009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000000))
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000100))
ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000040)=0xc)
ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000580)=0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7)
getpgid(0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r4, 0xa11, 0x70bd26, 0x25dfdbff, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x10)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40})
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000001ec0)={0x0, 0x0})
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r7, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20)
connect$l2tp6(r7, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20)
sendmmsg$inet6(r7, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)

9m44.886681576s ago: executing program 6 (id=1493):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xef)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xfb)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000240)=@FILEID_INO32_GEN={0x8, 0x1, {0x0, 0x5}}, &(0x7f0000000280), 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x2001080, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x40)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e)
socket$inet6(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x3, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000001800", [0x0, 0x2000000000001]}})
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000680)="3da26ab0126b", 0x6}], 0x1)
bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)=ANY=[@ANYBLOB="1600000000000000b4", @ANYBLOB="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"], 0x50)
open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80801)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000005c0)="f2b314c96d50", 0x6}], 0x1}}], 0x1, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0xf0, 0x29, 0x4, {0x4, 0x1a, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x5e, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c"}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7a, 0x8001, [0x5, 0x4, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x9, "e80ee304ecb784ec46"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x170, 0x29, 0x36, {0x5e, 0x2b, '\x00', [@generic={0xff, 0x34, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec42"}, @pad1, @pad1, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x8, {0x3, 0x0, 0x0, 0xfff}}, @calipso={0x7, 0x10, {0x3, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xdb, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8146e6672c844ca0c43cde3afb3f9b0e9c19b929779"}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x0, 0x8000]}}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x300}}], 0x1, 0x810)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
accept4(r4, 0x0, 0x0, 0x800)

9m44.263619972s ago: executing program 6 (id=1495):
r0 = syz_usb_connect(0x0, 0xffffffffffffff12, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000099bc12d13020410e504682d00102030109021b0001000410fe090401140068323908092105000701221509"], 0x0)
syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0003f4000000f403"], 0x0, 0x0, 0x0}, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "5995839581dd06bf", "f8e4ddbda365ebe61417544cdba30c3b161f11253326297369d7845200864e0e", "a64adea6", "6363778bb6a29929"}, 0x38)
syz_usb_control_io$cdc_ecm(r0, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000e00)={0x0, 0x3, 0x1a, {0x14}}}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="40230c0000ffff05f027aa82a8e18dc1f670"], 0x0, 0x0, 0x0, 0x0}, 0x0)

9m43.140562211s ago: executing program 6 (id=1498):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4)
getpeername$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000100)=0x20) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r1}, 0x10) (async)
r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) (async)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r5, @ANYBLOB="0a0006000802110000000000060066008e880000200033"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x70, r4, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x12, 0x13, [{0x4, 0x1}, {0x48, 0x1}, {0x1, 0x1}, {0x16, 0x1}, {0x24}, {0x1b}, {0x6c}, {0x1}, {0x30, 0x1}, {0x6c, 0x1}, {0x4}, {0x60, 0x1}, {0x3}, {0xc, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_FLAGS={0x18, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2a}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x1f9}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x4010) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x8001) (async)
fdatasync(r6) (async)
r7 = socket$netlink(0x10, 0x3, 0x4)
r8 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) (async, rerun: 64)
setsockopt$inet6_IPV6_DSTOPTS(r8, 0x29, 0x3b, &(0x7f0000000480)=ANY=[@ANYBLOB="211d00000000000007e6"], 0xf0) (rerun: 64)
sendto$inet6(r8, &(0x7f0000000040)="00d8", 0x20a00, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) (async)
writev(r7, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) (async)
r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r9, 0x1, 0x1}, 0x50)
ioctl$USBDEVFS_IOCTL(r2, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect={0x6})
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="129f00005d35b94082058d00ac7a010203010902120001000000000904000000959ec800"], 0x0)

9m42.20357293s ago: executing program 34 (id=1498):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4)
getpeername$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000100)=0x20) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r1}, 0x10) (async)
r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) (async)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r5, @ANYBLOB="0a0006000802110000000000060066008e880000200033"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x70, r4, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x12, 0x13, [{0x4, 0x1}, {0x48, 0x1}, {0x1, 0x1}, {0x16, 0x1}, {0x24}, {0x1b}, {0x6c}, {0x1}, {0x30, 0x1}, {0x6c, 0x1}, {0x4}, {0x60, 0x1}, {0x3}, {0xc, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_FLAGS={0x18, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2a}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x1f9}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x4010) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x8001) (async)
fdatasync(r6) (async)
r7 = socket$netlink(0x10, 0x3, 0x4)
r8 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) (async, rerun: 64)
setsockopt$inet6_IPV6_DSTOPTS(r8, 0x29, 0x3b, &(0x7f0000000480)=ANY=[@ANYBLOB="211d00000000000007e6"], 0xf0) (rerun: 64)
sendto$inet6(r8, &(0x7f0000000040)="00d8", 0x20a00, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) (async)
writev(r7, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) (async)
r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r9, 0x1, 0x1}, 0x50)
ioctl$USBDEVFS_IOCTL(r2, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect={0x6})
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="129f00005d35b94082058d00ac7a010203010902120001000000000904000000959ec800"], 0x0)

8m24.580119985s ago: executing program 0 (id=1731):
r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$selinux_access(r0, &(0x7f0000000040)={'system_u:object_r:hald_log_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x6e7}, 0x4c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x89, 0x89, 0x4, [@decl_tag={0xf, 0x0, 0x0, 0x11, 0x4, 0x6}, @datasec={0x7, 0x2, 0x0, 0xf, 0x1, [{0x4, 0x9, 0xb6}, {0x2, 0x7fffffff, 0x6}], "eb"}, @int={0xc, 0x0, 0x0, 0x1, 0x0, 0x20, 0x0, 0x7f, 0x2}, @typedef={0x0, 0x0, 0x0, 0x8, 0x4}, @func={0x4, 0x0, 0x0, 0xc, 0x3}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2, 0x5}]}, @fwd={0x1}, @type_tag={0x4, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x2e, 0x5f]}}, &(0x7f0000000180)=""/87, 0xa8, 0x57, 0x0, 0x6}, 0x28)
prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff5000/0x8000)=nil)
r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_BMAP(r1, &(0x7f00000022c0)={0x18, 0x0, r2, {0x9}}, 0x18)
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000002380)=@nat={'nat\x00', 0x1b, 0x5, 0x660, 0x298, 0x298, 0xffffffff, 0x4a0, 0xf0, 0x590, 0x590, 0xffffffff, 0x590, 0x590, 0x5, &(0x7f0000002300), {[{{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x8, @ipv4=@local, @ipv6=@local, @gre_key=0x3ff, @gre_key=0x1}}}, {{@uncond, 0x0, 0x160, 0x1a8, 0x0, {}, [@common=@srh1={{0x90}, {0x2f, 0xc3, 0x4, 0x1, 0x6, @mcast1, @rand_addr=' \x01\x00', @loopback, [0xffffffff, 0xffffffff, 0x0, 0xffffff00], [0xff000000, 0xff000000, 0x0, 0xff000000], [0x0, 0xff000000, 0xff, 0xffffffff], 0x3234, 0x1}}, @common=@icmp6={{0x28}, {0x12, "0fd4"}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x2, @ipv4=@remote, @ipv6=@mcast1, @gre_key, @icmp_id=0x68}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0x0, 0xff000000, 0xff000000], [0xffffff00, 0xffffff00, 0xff000000], '\x00', 'veth1\x00', {}, {}, 0x2c, 0x81, 0x2, 0x6e}, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x2ea, [0xe162, 0x4], 0x8, 0x1, 0x4, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, @mcast1, @mcast2, @loopback, @ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, @private0, @mcast1, @rand_addr=' \x01\x00'], 0x10}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x5, 0x6, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv6=@rand_addr=' \x01\x00', @ipv6=@rand_addr=' \x01\x00', @gre_key=0x3, @port=0x4e24}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6c0)
r4 = syz_open_dev$ndb(&(0x7f0000002a40), 0x0, 0x80000)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000002a80)={{0x1, 0x1, 0x18, <r5=>r3, {0xb4}}, './file0\x00'})
ioctl$NBD_SET_SOCK(r4, 0xab00, r5)
r6 = epoll_create(0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000002ac0)={0xa0000018})
r7 = openat2(0xffffffffffffffff, &(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x208002, 0x1, 0x20}, 0x18)
write$vga_arbiter(r7, &(0x7f0000002b80)=@other={'lock', ' ', 'mem'}, 0x9)
r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002bc0)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0)
ioctl$TIOCL_SETVESABLANK(r8, 0x541c, &(0x7f0000002c00))
ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000002c40)={0x34, 0x6, 0x8, 0xffffffff, 0xb1, 0x7800})
r9 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000002c80), 0x90c0, 0x0)
readv(r9, &(0x7f0000002d80)=[{&(0x7f0000002cc0)=""/146, 0x92}], 0x1)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000002dc0)=@req={0xf7d, 0x7f, 0x401, 0x4}, 0x10)
setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000002e00)=0xe, 0x4)
ioctl$PPPIOCGIDLE32(r5, 0x8008743f, &(0x7f0000002e40))
ioctl$KDSETLED(r7, 0x4b32, 0x800)
r10 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002e80), 0x800, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r10, 0xc018937c, &(0x7f0000002ec0)={{0x1, 0x1, 0x18, r7, {0x4}}, './file0\x00'})
timerfd_create(0x2, 0x800)
mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2)
socket$igmp6(0xa, 0x3, 0x2)

8m24.45667645s ago: executing program 0 (id=1732):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x1, 0x50)
io_setup(0x4fe, &(0x7f0000000100)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x40, r0, &(0x7f0000000200)='8', 0x1, 0x10000000005971}])
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1400000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="65000000fcffffff0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
r5 = socket(0x200000000000011, 0x2, 0x0)
prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffd000/0x2000)=nil)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r6=>0x0})
sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbde40288aaf23606be6053893bbcefcf517000fc6337251900fb5519a0edeedfbcdae72427e5dbeb1a63a9526a9dfd5ae71b43d1b9c39a62f9fa679b71c168bf1996e925a5048a1adb4dd7cde5f96d017b5d843f717bd7ea2b0bbbb1517bee7b2354d19b486df9dbbad045a9acd2611bae7fa0c3941e6e914eede6fd9eb8208b80974c2df64d0654d4ed43e0ce1350cf9646e8b8a120d0759c32819be506b48ef35fd59f2e8893085881fe0c93198f3fa38ebeb2", @ANYRES32=r6, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0x4040840)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000340)={&(0x7f0000002000)={[{&(0x7f0000000040)="c61073d2b880f8bbfc958e03d91a5913865231571dd7521b89f92187584d0b472bddc170344275a52f0d276cd69d4b5d0c4a4ffd07d09924f648eaf535d1494f951edd1306bd08d875e07a8c1d308e8b55490ff533676ed06be1260d1f17170152e00244cc75fea5c04e942fa2f53f2dabb82561104a372d21315854ccaa943eecb33aa4216569b0895cee53e9772b6eaff62886be8115c8ec493d1490101928ab5e2b6187dd98aeae9ad30c", 0xac, 0x1}, {&(0x7f00000001c0)="1415fcf2b07d5753a1", 0x9, 0x1}, {&(0x7f0000000280)="32f10d3089e4e49f96f3c9a2247d44179b9249af48ea0f7b99c094c9ed0752de2d48e2ac0960cb3b1e2545e09ee2817bcd24e0c046579bd08fdfe9f351c4a2194eb7a9", 0x43}, {&(0x7f0000000a40)="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", 0x1000, 0x1}]}, 0x4}, 0x1)

8m24.099223808s ago: executing program 0 (id=1734):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x10)
io_uring_setup(0x401, &(0x7f0000000300)={0x0, 0x9a87, 0x2, 0x8000005, 0xbb})
syz_io_uring_setup(0x7b, 0x0, &(0x7f00000005c0), 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r6, 0x29, 0x41, &(0x7f00000007c0)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000050000", @ANYBLOB="bf8ef257a7db30c88b466a5b15d9f01e98ee0a23cd3027d27f85ef861422a8382164f55c089c71d3f2e0d2f9903ce7a2f03b2122129f5086af987e88caca83fc8bbccdcaefb1f8a586c9314b0cbb0f5725d0c94f46c41f822ab3857e59601aa205750352f23d61a9e1e63fe55aa1ec873bd67a07618970948eb36750c0d910ba32c09e34da9e6bb1917d22d97496f0332813", @ANYBLOB="62c19ab14dd07663354cf875ea28d2252f16c3e0aad8b6f99691d8", @ANYRES64=r3], 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
syz_emit_ethernet(0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd6003000000002cfffe8000000000000000000000000000bbfe8000000000000000000000000000aa26f866aa3c37364d60878a5b66ac25be7ac356525f91936dac74dd2e3a90dfb89523cf8cde1f198004c62fc603ba68e47553e8a63e5f509b34c9abe41177d747f20e9dfdf7e4059d61f6e972da79c3f908947126c0fcc2b60ca70909be8234ee83bf72f15641e25375aa40de3556d647d6dc862b863f5a7f3fc8a946d407c07d713f1594d0abb0035a623bf61c8b3c72cd5b56736a12e05e"], 0x0)
ioctl(r7, 0xfffffff9, &(0x7f0000000240)='I')
r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
write$P9_RLERRORu(r8, &(0x7f0000000240)=ANY=[], 0x10)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40)

8m22.624164734s ago: executing program 0 (id=1742):
r0 = syz_open_procfs(0x0, &(0x7f0000000340)='mountinfo\x00')
r1 = syz_io_uring_setup(0x891, &(0x7f0000000140)={0x0, 0x8c36, 0x80, 0x4, 0xbfdffdfc}, &(0x7f0000000000)=<r2=>0x0, &(0x7f00000000c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x8, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x80}})
io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x8)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
socket$kcm(0x10, 0x2, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000380)='thermal_power_devfreq_get_power\x00', r0, 0x0, 0xffffffffffffffff}, 0x18)
r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r9, 0x40000000af01, 0x0)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_VRING_ADDR(r9, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000})
ioctl$VHOST_SET_MEM_TABLE(r9, 0x4008af03, &(0x7f0000000740))
r10 = dup(0xffffffffffffffff)
ioctl$VHOST_NET_SET_BACKEND(r9, 0x4008af30, &(0x7f0000000040)={0x0, r10})

8m20.996367027s ago: executing program 0 (id=1745):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
close(r4)
socket$unix(0x1, 0x1, 0x0) (async)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x789d2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x9, 0xfffffffb, 0x9, 0x198, 0x2, 0x9, 0x2, 0x3}}}}]}, 0x58}}, 0x0) (async)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x789d2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x9, 0xfffffffb, 0x9, 0x198, 0x2, 0x9, 0x2, 0x3}}}}]}, 0x58}}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r8, 0x89f5, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={@multicast1, 0x0, 0x0, 0x20, 0x0, [{@dev}, {@dev}]}})
sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffe6, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c031}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

8m20.82257888s ago: executing program 0 (id=1746):
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) (async)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x6, &(0x7f0000000640)=0x5) (async)
sched_setscheduler(0x0, 0x6, &(0x7f0000000640)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f000001a300), 0x0, 0x0)
read$msr(r2, &(0x7f0000001300)=""/102400, 0x19000)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x1)
ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000480)={0x0, 0x0, 0x0, &(0x7f0000000200)}) (async)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000480)={0x0, 0x0, 0x0, &(0x7f0000000200)})
r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003600), 0x101000, 0x0)
ioctl$SOUND_MIXER_WRITE_VOLUME(r3, 0xc0044d07, &(0x7f0000003640)=0x20)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8004, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0) (async)
close_range(r0, 0xffffffffffffffff, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
socket$inet_sctp(0x2, 0x5, 0x84)
r4 = inotify_init1(0x0)
inotify_add_watch(r4, &(0x7f00000000c0)='.\x00', 0xa4000061)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
read$FUSE(r5, &(0x7f0000000040)={0x2020}, 0x229)
getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, 0x0, 0x0)

8m20.216456828s ago: executing program 35 (id=1746):
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) (async)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x6, &(0x7f0000000640)=0x5) (async)
sched_setscheduler(0x0, 0x6, &(0x7f0000000640)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f000001a300), 0x0, 0x0)
read$msr(r2, &(0x7f0000001300)=""/102400, 0x19000)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x1)
ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000480)={0x0, 0x0, 0x0, &(0x7f0000000200)}) (async)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000480)={0x0, 0x0, 0x0, &(0x7f0000000200)})
r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003600), 0x101000, 0x0)
ioctl$SOUND_MIXER_WRITE_VOLUME(r3, 0xc0044d07, &(0x7f0000003640)=0x20)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8004, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0) (async)
close_range(r0, 0xffffffffffffffff, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
socket$inet_sctp(0x2, 0x5, 0x84)
r4 = inotify_init1(0x0)
inotify_add_watch(r4, &(0x7f00000000c0)='.\x00', 0xa4000061)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
read$FUSE(r5, &(0x7f0000000040)={0x2020}, 0x229)
getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, 0x0, 0x0)

11.73284721s ago: executing program 5 (id=3497):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0xce, &(0x7f0000000040)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1}, @void, {@ipv4={0x800, @dccp={{0x1f, 0x4, 0x0, 0x1d, 0xc0, 0x67, 0x0, 0x0, 0x21, 0x0, @multicast1, @private=0xa010102, {[@rr={0x7, 0xf, 0x48, [@empty, @broadcast, @broadcast]}, @lsrr={0x83, 0x1f, 0x4, [@private=0xa010101, @multicast1, @private=0xa010102, @multicast1, @empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x18, 0x2c, 0x0, 0xe, [0x6, 0xdfab, 0x8, 0x7, 0x42]}, @lsrr={0x83, 0x7, 0x88, [@dev={0xac, 0x14, 0x14, 0x30}]}, @rr={0x7, 0xf, 0x4c, [@local, @remote, @multicast1]}, @rr={0x7, 0xb, 0x4, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}]}}, {{0x4e21, 0x4e23, 0x4, 0x1, 0x6, 0x0, 0x0, 0x2, 0x0, "162545", 0x41, "5f128f"}, "8f2228461dd21856b61e72284766fc612ef5636cf6b1530390706cb18ace988bba742de6c7e1b043c8dd1b16eb5e0daef823e368"}}}}}, 0x0)
r0 = socket$phonet(0x23, 0x2, 0x1)
r1 = dup(r0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000002b40), r1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001100)=ANY=[@ANYBLOB="140000002a000907"], 0x14}, 0x1, 0x3000000}, 0x0)
r3 = socket(0x2, 0x1, 0x0)
setsockopt$inet_opts(r3, 0x0, 0x14, &(0x7f00000001c0)="02000000", 0x4)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
syz_emit_ethernet(0x3e, &(0x7f0000000400)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @private=0xa010102}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @loopback}}}}}}, 0x0)

10.950700809s ago: executing program 5 (id=3498):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 64)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x2483, 0x0) (async, rerun: 64)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x1000, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x48, &(0x7f0000000180)=ANY=[@ANYBLOB="3cbbbf"], 0x30)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async, rerun: 64)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@nfs_export_on}]}) (rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1002, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) (async)
io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117})
r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
listen(r1, 0x3)
openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) (async)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x6, 0x7ffc0002}]}) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x20000000) (async, rerun: 64)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r5=>0x0})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x80) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)

10.769120629s ago: executing program 5 (id=3500):
r0 = syz_open_procfs(0x0, 0x0)
socket(0x2, 0x3, 0xff)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_GET_SREGS2(r0, 0x8140aecc, &(0x7f0000000440))
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r8 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0)
lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_team\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200888e4}, 0x20048000)
syz_usb_connect(0x2, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x250, 0x4, 0xcc, 0x3, 0x8, 0x9fb, 0x602e, 0xa99d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0xc0, 0x0, 0x8, [{{0x9, 0x4, 0x2, 0x5, 0x0, 0x81, 0xc7, 0x28, 0xd1}}]}}]}}, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xb0}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x5, 0x8}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52)
r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000100000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

8.719151421s ago: executing program 7 (id=3505):
syz_usb_connect(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x99, 0x4e, 0x72, 0x8, 0xf3d, 0x68a2, 0x5bfe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x6, 0xd0, 0x8, [{{0x9, 0x4, 0x54, 0x0, 0x2, 0xc4, 0x5, 0x19, 0x9, [], [{{0x9, 0x5, 0xe, 0x10, 0x3ff, 0x9, 0xb9, 0xf}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0x3, 0x1, 0x7}}]}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) (async)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) (async)
syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000014935d1071042c03e9ba0102cc3c0902120001000000000904"], 0x0)
syz_open_pts(0xffffffffffffffff, 0x10800)

7.015682236s ago: executing program 5 (id=3508):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x1, r0, 0x0, 0xc100000e, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000540)="5c00000015006b05c84e21000ab16d6e230675f80200002c000000000000000461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f662826b9cf6b10a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x62}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000001007000000000000008bffffffffffffff0000000000000000000000000000000002000000000000000000000000000000fcffffffffffffff0000000000000000020000000000000000000000002000000000000000000000000000000000000001000200000000004400050020010000000000000000000000000000000020ce383fc526fea35300022b0000000a000000fe8000000000000000000000000000aa000000000100"/189], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000280)={0x7, "88087e"}, 0x6)
io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0xfb6e, 0x38c1, 0x4, 0xed})
move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0)
bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_SET_FORCE_PACK_ID(r5, 0x227b, &(0x7f00000001c0)=0x2001)
r6 = fcntl$dupfd(r5, 0x0, r5)
write$FUSE_INIT(r6, &(0x7f00000002c0)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x4ac0, 0x40000000, 0x8000, 0x8001, 0x10000, 0x8, 0x0, 0x0, 0x4, 0x3}}, 0x50)
read$FUSE(r6, &(0x7f0000003800)={0x2020}, 0x3f)
setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000000500), 0x4)
r7 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ff9000/0x4000)=nil)
shmctl$SHM_STAT_ANY(r7, 0xf, &(0x7f0000000040)=""/220)
listen(r3, 0x3)
clock_gettime(0x0, &(0x7f0000000440)={<r8=>0x0, <r9=>0x0})
timer_settime(0x0, 0x0, &(0x7f0000000480)={{r8, r9+60000000}, {0x0, 0x3938700}}, &(0x7f00000004c0))
getsockopt$inet6_buf(r3, 0x29, 0xcd, &(0x7f0000000140)=""/208, &(0x7f0000000000)=0xd0)
r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
write$sndseq(r10, &(0x7f0000000240)=[{0xe, 0x81, 0x0, 0xfd, @time={0x5, 0x5}, {0x10, 0x49}, {0xe}, @raw8={"1f000e00000000001f00"}}], 0x1c)

6.383814237s ago: executing program 5 (id=3512):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}})
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0xf, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0xe, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x20000000, 0x1}}, 0x40)
syz_usb_disconnect(r2)
unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f00000006c0)='./binderfs2/binder1\x00')
syz_usb_connect(0x6, 0x24, &(0x7f0000000740)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r2, 0x5501, &(0x7f0000000200)=0x6)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r6)
sendmsg$TIPC_NL_MON_SET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r5, @ANYRES16=r7, @ANYBLOB="01000000000000e2ffff100000002400ffffffff08000100080000000800010001000000040002004005000075e9c7853a01e0c6b46f26af30d49182798d9c8de5b587f4250b536e8db0e8f198052fecfc5ebbe7b3d1c13e8f113bea75364983f675ce37645faf119fc9d8fec409796e13239098c3385cedc10ed6f81782deab7aa49cdff6f08b2cf9a255b8ee5b6175b556755f7b3fe5aedc93122ed95da671ebb3cbcf43f23c18e6a8bc2ebc0894967ba20cc04a88ff0665ae626a3ad14f"], 0x38}}, 0x800)
sendmsg$TIPC_NL_NAME_TABLE_GET(r6, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x124}, 0x1, 0x0, 0x0, 0x20044800}, 0x100)
getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000000040)=""/239, &(0x7f0000000180)=0xef)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_MEDIA_SET(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="60010000", @ANYRES16=r8, @ANYBLOB="010028bd7000fbdbdf250c0000004c0105802c00028008000200da0800000800040003000000080001001d000000080002000000000008000300580f00003400028008000400f9ffffff080002000400000008000300dc0000000800040040000000080002000008000008000200080000003c000280080003000c00000008000200e303000008000300ff07000008000200faffffff080003000400000008000100060000000800020000100000080001007564700008000100756470004c000280080001001f00000008000200020000000800040010000000080004000400000008000200000000000800010001000000080002000008"], 0x160}, 0x1, 0x0, 0x0, 0x28000021}, 0x24008854)
newfstatat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, <r10=>0x0}, 0x2000)
fsetxattr$security_capability(r0, &(0x7f00000001c0), &(0x7f0000000680)=@v3={0x3000000, [{0x6, 0x7fffffff}, {0x4, 0x8}], r10}, 0x18, 0x2)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0xfff1, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0x34}}, 0x10)

5.779365195s ago: executing program 8 (id=3515):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
clock_nanosleep(0x4, 0x0, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f000001b080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000001b040)=ANY=[@ANYRES32=0x0], 0x20}}, 0x4018095)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f000001b000)='projid_map\x00')
pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000000)={0x0, @adiantum, 0x0, @desc2})
preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000001180)=""/4113, 0x1011}], 0x1, 0x16, 0xfffffff9)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10)
listen(r2, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040), 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
accept4(r4, 0x0, 0x0, 0x800)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)

4.66486348s ago: executing program 7 (id=3518):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000f80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xe9}], 0x1}, 0x40080) (async, rerun: 32)
syz_usb_connect(0x6, 0x6d, &(0x7f0000000440)=ANY=[@ANYBLOB="7ef0a88050d210de17c8294aa493ead8aa5602d9cf913e1b987e7ca0db6962b94922fd355540ab873f7f2ba3549225e0b6cbd7ffed3108d4890ca73308ba2ac95dca7010b36b0af78e0c1c677ffad09d53d76e748ac7b6b3dd38b4df8f359af500e2cec2ea15fb0f447b706cf87ee4f3a940b480c1ff655e5fb66e70680fdeafa25b5d79fe7884b00ce13decdd1a04a5505047fc7307708f9dfe7ad413dfc0d7e1da076178cc59c6bb12b39e32a5ba1d9c7bd09ff29e999dbad339a40b6abc11830c28360d0af1c729c03f9a224c916acdcf49df5dacb94c4b8ff57285847065eee973948a349544d74ba85d8c", @ANYBLOB="d77704e0c1aae17546893883322c5d245fc4fec10b8e98633292844f85f3e345bc600ab12178b095882fdfb8a04beb2702a80dbae172f8b5ac29a9be47c3795bdee4e340e46403c10de6cb035c3c79609e1ebd725d6019b106d6879ea9e09f23a90db47ca3777508eab18e99b365ab7683ee2a64d2127b51c007f85df5a5f68239734b045f3e3e38ac31b0120fa86b02bd518a7984c06c125ed28b6eb136dd0d5733f58deb379d4e4201af81f3cc3476888884c8c7b88c0d2052de4de648b6a642274058763f65632e7655423a1086795d6b6acfdc396caf182f74d4d602b4518df0fdd7dd79f74da94e31fb6fdbb11b", @ANYRES64=r0], 0x0) (async, rerun: 32)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$I2C(0x0, 0x0, 0x40)
r3 = socket$inet_udp(0x2, 0x2, 0x0) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) (async)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64)
sched_setattr(0x0, 0x0, 0x0) (rerun: 64)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) (async, rerun: 32)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) (rerun: 32)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) (async)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r2)
sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="01000000000000000000300000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030001000000"], 0x3c}}, 0x48800)
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r2)

4.549033996s ago: executing program 8 (id=3520):
syz_emit_ethernet(0x19, &(0x7f00000001c0)={@link_local, @broadcast, @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x8100, 0x0, 0x0, 0x4}}, {@x25={0x8100, {0x2, 0x0, 0xfb}}}}, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) (async)
readv(r0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) (async)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async)
r3 = syz_socket_connect_nvme_tcp()
ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000040)={'virt_wifi0\x00'})
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x33)

3.332372372s ago: executing program 5 (id=3522):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
sigaltstack(&(0x7f0000000200)={0x0, 0x0, 0xfffffca4}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000f2ffffff00000000ff000000850000002a000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='itimer_state\x00', r1}, 0x10)
setitimer(0x1, 0x0, 0x0)
sigaltstack(0x0, &(0x7f00000001c0)={0x0})
syz_usb_disconnect(r0)
syz_usb_connect$cdc_ncm(0x0, 0xf3, &(0x7f0000000240)=ANY=[@ANYBLOB="12011001020000402505a1a44000010203010902"], 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0)
setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xe6544e0b4eb1ffb1, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
syz_emit_ethernet(0xa8, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaa16aa0000000000008848000004000000000004bc456107ae7a4a37b8faf5f33f3b918946810f54caa9085a842238fde6d299add26ee0f7d87acb677355f2bf2c47d27a19bd8858aaec882473b331b3f4e1ce81bd621469f514c17b8d5bd9af1e030104ed472ac3659594dede13b5cbbe70c74385e57b325a98ed6aedafcbadfe9a249022d14649e5b61ce346df443d1861ec6eb0bf8a066b798f04f109ed301368d8fa11"], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x0, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x28c00)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
r7 = dup2(r6, r6)
ioctl$DRM_IOCTL_WAIT_VBLANK(r7, 0xc018643a, &(0x7f00000001c0)={0x14000000, 0xffffffff})
pselect6(0x40, &(0x7f0000000240)={0x9, 0x3, 0x7, 0x3, 0x9, 0x8, 0x3, 0x5}, &(0x7f00000000c0)={0x1d, 0xfffffffffffffffe, 0xfffffffffffffff4, 0x7efc, 0x4, 0x1, 0x2, 0x10000b}, 0x0, 0x0, 0x0)

3.282010326s ago: executing program 2 (id=3523):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r3 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2)
dup3(r3, r2, 0x0)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd7000000000001400000018000180140002006e657464657673696d3000000000000005000c000300000008001600ffffffff080003000d00000008000f00050000000800040019dc0000050019"], 0x5c}}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

3.160287202s ago: executing program 7 (id=3525):
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x20800, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x400000000000069, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x276f, 0x3010}, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109)
sendfile(r5, r5, 0x0, 0xb)
io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0)
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x20800, 0x0) (async)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) (async)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x400000000000069, 0x0) (async)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x276f, 0x3010}, &(0x7f0000000040), &(0x7f0000000140)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async)
syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) (async)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) (async)
sendfile(r5, r5, 0x0, 0xb) (async)
io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) (async)

3.095049936s ago: executing program 1 (id=3526):
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, 0x0)
syz_io_uring_setup(0x6af3, &(0x7f0000000140)={0x0, 0x2e40, 0x800, 0x2, 0x2e5}, &(0x7f0000000000)=<r0=>0x0, &(0x7f00000000c0))
r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x68e2dc3d03a22baa, 0x4000010, 0xffffffffffffffff, 0x10000000)
open$dir(&(0x7f00000001c0)='./file0\x00', 0x30000, 0x100) (async)
r2 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x30000, 0x100)
syz_io_uring_submit(r0, r1, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0xa, 0x0, r2, &(0x7f00000002c0), &(0x7f0000000200)='./file0\x00', 0x200, 0x6000}) (async)
syz_io_uring_submit(r0, r1, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0xa, 0x0, r2, &(0x7f00000002c0), &(0x7f0000000200)='./file0\x00', 0x200, 0x6000})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0xc, 0x18, 0x0, 0x0, @binary="0aac0f0004ac0f00"}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0)

3.094751669s ago: executing program 8 (id=3527):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4)
socket(0xa, 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000300)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
r4 = syz_usb_connect(0x3, 0x24, &(0x7f0000001640)=ANY=[@ANYBLOB="12010000e1476040d61000220200000003010902"], 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000001c0)={0xd350, <r5=>r2, 0x2})
ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0xe32}}, './file0\x00'})
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x8d8, 0x5, 0x36315247, 0x6, 0x8000002, 0xb, 0x0, 0xffffffff, 0x0, 0x6, 0x0, 0x4}})
connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x4e21, 0x3, 'lc\x00', 0x1, 0x4, 0x4f}, 0x2c)
syz_usb_ep_read(r4, 0x4, 0x15, &(0x7f00000002c0)=""/21)
socket$kcm(0xa, 0x2, 0x0)
r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)={0x30, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_TAGLST={0x4}]}, 0x30}}, 0x0)
r8 = syz_open_dev$video(&(0x7f0000000080), 0x9, 0x0)
ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000180)={0xd, @pix_mp={0xd965, 0x3, 0x55595659, 0x7, 0x7, [{0x80000001, 0x2}, {0x3, 0xe}, {0x9, 0x2}, {0x7, 0x6}, {0x8, 0x2}, {0x1, 0x3ffc00}, {0x68f9, 0x5}, {0x2679, 0x4}], 0x3, 0xf, 0x6, 0x1, 0x2}})

2.85251667s ago: executing program 2 (id=3528):
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0xa, [@typedef={0x7, 0x0, 0x0, 0x8, 0x5}, @enum={0x6, 0x1, 0x0, 0x6, 0x4, [{0x5, 0xa62}]}]}, {0x0, [0x30, 0x0, 0x0, 0x0, 0x0, 0x30, 0xffdf25dfbf143f80, 0x2e]}}, &(0x7f0000000000)=""/30, 0x42, 0x1e}, 0x28)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}})
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)

2.669345816s ago: executing program 2 (id=3529):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x10000000)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003a00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="102bf827b75bd5875a84f407573d336890e09fa9fe3888f860afbe3d064a982fdda6dd0a781fe58e5394fbb866523a0cc1c6d0368f78dc6788481df224785dffe880367b54ba8ae4de37567e94518ed60d2d17fdef9cf6488c441a", 0x5b}], 0x1}}], 0x1, 0x40010)
r0 = syz_clone(0x180c8800, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0))
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x80000)
ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000080)={0x1, 0x0, [{0x1, 0x7, 0x7, 0x9, 0x7}]})
ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f00000000c0)=0x3)
ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000440)={"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"})
r5 = io_uring_setup(0x2e4c, &(0x7f0000001080)={0x0, 0x6370, 0x4000, 0x0, 0xfe})
io_uring_enter(r5, 0x77b0, 0x1f8e, 0x8, &(0x7f0000001100)={[0x1000]}, 0x8)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
shutdown(0xffffffffffffffff, 0x0)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0)
listen(0xffffffffffffffff, 0x8)
mbind(&(0x7f0000ffd000/0x2000)=nil, 0xfaff, 0x4003, &(0x7f0000000000)=0x106, 0x5, 0x2)

2.320732398s ago: executing program 8 (id=3530):
r0 = syz_open_procfs(0x0, &(0x7f0000002480)='net/raw6\x00')
read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020)
r1 = socket$xdp(0x2c, 0x3, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
syz_emit_ethernet(0x0, 0x0, 0x0)
io_submit(0x0, 0x1, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000003c0)}])
fsmount(0xffffffffffffffff, 0x0, 0xa)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x3, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000024c0), 0xffffffffffffa19a, 0x0)
read$FUSE(r0, &(0x7f0000002800)={0x2020}, 0x2020)
read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, 0x0)
sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000027c0)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x4041030}, 0xc, &(0x7f0000002780)={&(0x7f0000002540)={0x220, 0x1, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xa2, 0x6, "79ab5a38da457c202bf4bb783af1e9be484650c525ec70099878ef8c265a79b3c477c5f382be550f558358812dc228587ef98e25f12833aa972266fa3a434f423f2b0dcd032ccc539bbea2570dd884f24378ddbd625e8acfdd7887a313a03cec35bd5d400282ef1d96d34a14a72963b358333454147709eeebc1d9aadf600cd5f32fc29cf092d72c9461fe7038dd25f6c24fb2f6b9270061a672da9ad07b"}, @NFTA_TABLE_USERDATA={0x71, 0x6, "8fdac659be83088f082907143ce433395896deb3e728a4887a17d78ee5e8615eef9d4f183f5876606d38efda852197530bb462b2cb68b306316e1543317dccc34f2e9eff6cad53133730d161e8f45811924dc6ac2b9629d8cd5412e481e6d3275304ac52c7733586d22f39cdc8"}, @NFTA_TABLE_USERDATA={0xdd, 0x6, "13ab9b0f44c281245fd5df32fe5e6f50fddb8de5fc1863f690be35b620539ec4de38c7aeb683fd38980d7ace190c8ee195832ef417cdb0abf503da23aae1ce6ac8a43daab74f5c76965a46da9710ae65d400aab7ea1ce607b5c2e07f4e9a913eb4be04eef0f870f6a48e4bc9cd64ecd0a9c820e6e18c2567f4c0881326a0e5f4257920df59b31900f951bfd8fb6908e794955033df8a5e89d97ddce5000c93a711ef379f43b01eadf320d1ca998ff9c172a96fa223d49582809e9173f963aeb32f0d7fc5d0a017d887f617001325278210ed7003c878d72338"}]}, 0x220}, 0x1, 0x0, 0x0, 0x20000080}, 0x4091)
getsockopt$XDP_STATISTICS(r1, 0x11b, 0x8, &(0x7f0000000040), &(0x7f0000000000)=0x30)
getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000000c0)={'broute\x00', 0x0, 0x4, 0x36, [0x7, 0x2, 0x0, 0x2, 0x80000000, 0xfffffffffffffffb], 0x3, &(0x7f0000000000)=[{}, {}, {}], &(0x7f0000000080)=""/54}, &(0x7f0000000140)=0x78)
r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb250400000008000400020000000c0005"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080)
r6 = fcntl$dupfd(r4, 0x0, r4)
ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0x10017, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
ioctl$USBDEVFS_REAPURB(r6, 0x4004550c, &(0x7f0000000380))

2.048486982s ago: executing program 1 (id=3531):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='sys_exit\x00', r0}, 0x18)
mlockall(0x7)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f00000001c0)=0x4)
socket$netlink(0x10, 0x3, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0)
preadv2(r2, &(0x7f0000000140)=[{0x0}], 0x1, 0xbcf, 0x40, 0x6)
socket$kcm(0x10, 0x2, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xffffffc0)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000808000500", @ANYRES64=r3], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)

1.888902867s ago: executing program 8 (id=3532):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x5)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SCUDMATCHLEN(r2, 0x89e7, &(0x7f0000000000)={0x2f})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000680)={0x2, 0x0, [{0x10, 0x0, 0x1783}, {0x10, 0x0, 0x3fb}]})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d01, 0x0, 0xaf}]})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r6, 0x4068aea3, &(0x7f00000002c0)={0xbe, 0x0, 0x1})
ioctl$KVM_CAP_SYNC_REGS(r6, 0x4068aea3, &(0x7f0000000180))
ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]})
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x3d, 0xa0, 0xaf, 0x40, 0x93b, 0xa005, 0xff88, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7a, 0x0, 0x1, 0xfd, 0x3d, 0xd4, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x1ff, 0x0, 0x8}}]}}]}}]}}, 0x0)

1.741142107s ago: executing program 2 (id=3533):
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x8c, 0x200)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1a, 0x4, 0x7fe2, 0x1, 0x40, 0xffffffffffffffff, 0x8}, 0x48)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000040)={0x11, 0x0, 0x0})

1.592097432s ago: executing program 1 (id=3534):
r0 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000))
getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@private1, <r1=>0x0}, &(0x7f0000000080)=0x14)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xdeacee523dda3b0}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r4, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x307}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008001)
r6 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000240)={{0x3, @netrom}, [@netrom, @remote, @netrom, @null, @default, @bcast, @bcast, @netrom]}, &(0x7f00000002c0)=0x48, 0x800)
bind$netrom(r6, &(0x7f0000000300)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48)
r7 = dup(r0)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x200602)
pipe(&(0x7f00000003c0)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xb, 0x810, r10, 0x0)
r12 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000008, 0x10, r7, 0x10000000)
r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0)
syz_io_uring_submit(r11, r12, &(0x7f0000000480)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x100, 0x0, &(0x7f0000000400)="09361f3dbffb19184cefafa4a615ae4ab733fb5f2518a66d398b4fb3d8aa20c96c5c8d3b97a5d08cf630963b55e74a0906007162b999b46f0a9e210dde53533a9b471ebdaa8289619c51dd709305d82d41b3a197af3789c5e5a2a072d2ee727be4a02d1a8c0b045c8fe90f4b7a846e982a28d79a792dbdc3", 0xfffffc01, 0x0, 0x1, {0x2, r13}})
fcntl$getownex(r9, 0x10, &(0x7f0000000500)={0x0, <r14=>0x0})
ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000540)={'\x00', 0xfffe, 0x7f, 0xc, 0x2f, 0x1, <r15=>0x0})
sendmsg$nl_generic(r7, &(0x7f0000001980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1200010}, 0xc, &(0x7f0000001940)={&(0x7f00000005c0)={0x1360, 0x40, 0x400, 0x70bd2b, 0x25dfdbfc, {0xd}, [@nested={0x108, 0x13c, 0x0, 0x1, [@typed={0x8, 0xd5, 0x0, 0x0, @fd=r8}, @generic="029ee7d96725a15eadad0fe008ae1cc0d3f1b9faddcda956148cd160d0f301c5c2aac818918b98db1f86e093d1c07de12e47d74662c1c825f42c8be528b6c89494b7ed74664ed13b50ee8084c0c0b01ef8de359e0156c9d1cbc08717b3176c5d42dee1c5c505da083c8d58d1344b153b9cb09fa7b185339f8681441068b1822bd1e38bfec5dc585cdd6ce0461090dfcd5dd92d6d1b9065d6661f5d40488b9d95f28b02da0cad47077cf3ed830d8d9873d027906526b80ffbc671c51c4def9007e44d4ce9b4d1e7584605278a4c9c1cf01e9e728bf6249f86e3dd4615311170276f49e40b0439c23d022e8ef39550533c", @typed={0x8, 0x4b, 0x0, 0x0, @pid=r14}, @nested={0x4, 0x4b}]}, @nested={0x136, 0x7e, 0x0, 0x1, [@nested={0x4, 0xa9}, @generic="909586fe63800d0f1471daa2be5f37027c55cb269764548cbedddfcea8cab05ae56cf88df7e0eddef3f74deaf0056e78e16fd2cee612cb835a844fff50548ee1e7ad213d91d950d341812b9de11b6ff46ecc4d176922e5e46a98fa0963fd653b30c01ae258af9d78e0628e096c6dd6696bf78a82fc2c35442a14c7c0ae4ebad96b666867adbbb200dc2cecf510c75a754bdf5d4775c72a81120a101c4eb373c220ebf2a485be790da44d86b72804c899", @nested={0x4, 0xc6}, @generic="57f294afcc45264ca6534c7d7c6f0e15939b386a4fcac68b8b358684cc7255e02cda4a9ccb007a8f8376b30adb1910be72da5f92225a1b2284dc0445e93c6a302737bc465853ae9da945ae0888887429e89b0490e73603343e1cfc2d3dc9aeac8b9ebe51aa0b8867f3739745056f06775e6ac674a6aab7b3df98"]}, @nested={0xf1, 0xb1, 0x0, 0x1, [@generic="764c7216da972c7415c17b7fe2bb720898aa88e4ed66070f9b7f54f403dffeb79cd2dffe48db9f4e54bbb580db9276a77bad7e63e4d23e3896f182aaa1ee5a6e1426efdacc9bb78a47323d9bb47ce957639f83dd7129b04edcb95c480ec9a0980e0c11d0ec74ab90e0a266fb8384521c523a1269161dff6be7f6433193a2752e4175a2feec23c72e6e4476a23d64b9f67436b973358b6ad48659b8855adfd2abd9d81e3a55b3cb9be554659739e8f1992df501aa2f7aa0f49bb8f090a492828a6c68e8087eab7a6d5fb62b5296ac8f0333079c7487", @nested={0x4, 0x2b}, @typed={0x8, 0xb4, 0x0, 0x0, @pid=r15}, @nested={0x4, 0x1e}, @nested={0x4, 0x12f}, @nested={0x4, 0xff}]}, @typed={0x1004, 0xee, 0x0, 0x0, @binary="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"}, @typed={0x11, 0x96, 0x0, 0x0, @str='/dev/snd/seq\x00'}]}, 0x1360}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs/custom1\x00', 0x2, 0x0)
ioctl$sock_SIOCDELRT(r10, 0x890c, &(0x7f0000001a40)={0x0, @ax25={0x3, @bcast, 0x7}, @in={0x2, 0x4e24, @remote}, @xdp={0x2c, 0x8, r1, 0x2d}, 0x401, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001a00)='geneve0\x00', 0x6, 0x16cf1f82, 0x1000})
msgget$private(0x0, 0x200)
sendmsg$key(r7, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x2, 0x5, 0xc, 0x3, 0x7, 0x0, 0x70bd2b, 0x25dfdbff, [@sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e22, @private=0xa010102}}]}, 0x38}}, 0x80)
ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f0000001b80)=<r16=>0x0)
ioctl$BTRFS_IOC_START_SYNC(r7, 0x80089418, &(0x7f0000001bc0)=<r17=>0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000001c00)={"bc470b9d8aca3366f1a79704117339bf", r16, r17, {0x9, 0xa}, {0x3ff, 0x7}, 0xfffffffffffffffb, [0x6, 0x6, 0xfffffffffffffff9, 0x1, 0x6, 0x3, 0x9, 0x8, 0x2, 0x10, 0xa6, 0x10, 0x5, 0x401, 0x28, 0x100000000]})
openat$kvm(0xffffffffffffff9c, &(0x7f0000001d00), 0x8000, 0x0)
openat$comedi(0xffffffffffffff9c, &(0x7f0000001d40)='/dev/comedi0\x00', 0x40000, 0x0)
r18 = accept4$tipc(r10, &(0x7f0000001d80)=@name, &(0x7f0000001dc0)=0x10, 0x80000)
setsockopt$sock_int(r18, 0x1, 0x3, &(0x7f0000001e00)=0xb0, 0x4)

1.560925828s ago: executing program 2 (id=3535):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'geneve1\x00', &(0x7f0000000380)=@ethtool_drvinfo={0x3, "9b801fa626270b87991d2e37a13eaa000000000200093bb4c83e787f49659355", "446e0d0fb9079ae357c460edb46e57f20700e3b56ce16711e400d6fee1b700", "05d64ba2349278361a13fa5d0489397b90b4d3ffbdaf41f88896771a54be03db", "d44a9f35a6cf85ebd47357121749cf809fe925de8f135bddba07ee891d45a5ef", "c249dbf490eb72bf5dce7d2225003e5dcc4907e997e2ec42fa0ab05b50be5b6b", "b768c92574b06339bb1ea332", 0x6, 0x0, 0xa, 0x3, 0x5d}})
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
connect$unix(r1, &(0x7f0000000100)=@abs={0x27, 0x0, 0x2}, 0x6e)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa4}, [@ldst={0x7, 0x3, 0x0, 0x1c10a1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)

1.332840623s ago: executing program 1 (id=3536):
r0 = socket$netlink(0x10, 0x3, 0x0)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000e40), 0x4682, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1b0000001d00070f000000000000000007"], 0x2c}}, 0x4000890)
r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
ioctl$BLKRRPART(r1, 0x125f, 0x0)

1.197272558s ago: executing program 1 (id=3537):
flistxattr(0xffffffffffffffff, &(0x7f0000000000), 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) (async)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume_offset', 0x101000, 0xd0)
ioctl$VHOST_VDPA_SET_STATUS(r0, 0x4001af72, &(0x7f00000000c0)=0x1) (async)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)=',!#\x00', &(0x7f0000000140)='-\\[\x00', 0x0) (async)
connect$802154_dgram(r0, &(0x7f0000000180)={0x24, @short={0x2, 0x1}}, 0x14) (async)
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000200)={0x18, 0x0, 0x2, 0x0, &(0x7f00000001c0)=[{0x3, 0x80}, {0x9, 0x9}]})
ioctl$VHOST_VDPA_SET_GROUP_ASID(r0, 0x4008af7c, &(0x7f0000000240)) (async, rerun: 64)
r1 = syz_open_dev$vcsu(&(0x7f0000000280), 0x760e, 0x200) (rerun: 64)
ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r1, 0x3b70, &(0x7f00000002c0)={0x50, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}]}}) (async, rerun: 64)
ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, &(0x7f0000000340)) (async, rerun: 64)
write$P9_RSTAT(r1, &(0x7f0000000380)={0x48, 0x7d, 0x2, {0x0, 0x41, 0x2, 0x3, {0x1, 0x0, 0x2}, 0x8000000, 0x6, 0x2, 0x5, 0x9, '/dev/kvm\x00', 0x4, '-\\[\x00', 0x1, '.'}}, 0x48) (async)
ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000400)={0x1, 0x4, 0x0, [{0x10, 0x10, 0x0, 0x1, 0x2, 0x7, 0x8, '\x00', 0xad}, {0x6, 0x8, 0xfffffffffffffffa, 0x0, 0x7f, 0x5, 0x7, '\x00', 0x2}, {0x18, 0x81, 0xe2, 0x2, 0x9, 0x8, 0x7, '\x00', 0x8000}, {0x400, 0xd, 0x9, 0x4, 0x81, 0x4, 0xc, '\x00', 0x6}]}) (async)
ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000000540)={0x0, 0x800}) (async)
sendto$inet6(r1, &(0x7f0000000580)="85992b0e8ba8a658354605db72a4064cfcabbc33335c079ebd3a2659b68763ef3623dc5febb80a9f40dc479c62eb8592d9169eb51d970b64694765d919dd7e0e95d44d7e29ade0c09d8febdabce516a73dfacb45dd459bf5e9c574c1efdc90dcdb6878d8b56e4e2a409502e39b20747eb7356ce26fc38249f397c7d009c8b8e5b3b6fb8374d5ad3f438bedf0", 0x8c, 0x20060000, &(0x7f0000000640)={0xa, 0x4e24, 0xb608, @remote, 0x5}, 0x1c) (async)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000006c0), r1)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x8c, r2, 0x20, 0xe2b3, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x4008004)
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000840), 0x200000, 0x0)
io_uring_enter(r1, 0x695a, 0x8691, 0x3, &(0x7f0000000880)={[0x6f]}, 0x8)
sendmsg$NFT_BATCH(r3, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0xa}}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWTABLE={0x40, 0x0, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0xd0}, 0x1, 0x0, 0x0, 0x24048041}, 0x20004800) (async)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000a80)={[0x3d, 0xffffffffffffffff, 0xfff, 0x9, 0x7fffffffffffffff, 0x7ff, 0x4, 0x73a0, 0x2, 0x8, 0x1, 0xe, 0x2, 0x4, 0x0, 0x1], 0x4000, 0x82006})
getsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000b40)=""/161, &(0x7f0000000c00)=0xa1) (async)
connect$unix(r1, &(0x7f0000000c40)=@abs={0x1, 0x0, 0x4e24}, 0x6e) (async, rerun: 64)
r4 = getpid() (rerun: 64)
prlimit64(r4, 0xb, &(0x7f0000000cc0)={0x178b, 0x200}, &(0x7f0000000d00)) (async, rerun: 32)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001ec0)={r3, 0x0, 0x26, 0xbe, &(0x7f0000000d40)="511692730ec5574b622f0155ff679e67415da6a57498d59308c6da04cc2f105c7e5e36d9d5e4", &(0x7f0000000d80)=""/190, 0x3, 0x0, 0x73, 0x1000, &(0x7f0000000e40)="555a30b09c84d8c6b1b6b7bc928d07ffb68a338335fd299d4786ef7a8d376962e6c1d2a89ea5904695a784dcbbafeceaa307dd080931c34134725405b0220c0efe2cf228d9b00e7accfe2fc0406cd0273eb32bc1f987ddd79ebf15b7fe8bcd0ad620258c4a3123e9ebb0a3e1cb5d8ab854b206", &(0x7f0000000ec0)="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", 0x0, 0x0, 0xb1}, 0x50) (async, rerun: 32)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000001f40), 0xc8901, 0x0)
ioctl$IOMMU_VFIO_IOAS$CLEAR(r5, 0x3b88, &(0x7f0000001f80)={0xc}) (async)
r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001fc0), 0x2, 0x0)
write$FUSE_WRITE(r6, &(0x7f0000002000)={0x18, 0x8630e8c590dbe457, 0x0, {0xbfb}}, 0x18)

1.184748669s ago: executing program 2 (id=3538):
timer_create(0x3, 0x0, &(0x7f0000044000))
r0 = socket$nl_route(0x10, 0x3, 0x0)
pipe2(&(0x7f0000001040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
tee(r2, r1, 0xfffff7fffffffc01, 0xf)
write$binfmt_aout(r2, &(0x7f0000000380)={{0x10b, 0x4, 0x7f, 0x32d, 0x3d4, 0x3, 0x204, 0x3}, "f1c9d674d46d885d6b8d6c519ba7d2295e5cd37d7ab0979f9b9e068b7f00c036b6eeff08e8291de11c30dde4ad69c3b60fc5a98e15e30316c93b2a0f807bd1333d38ed981ad4c1780ef7be4a184e5f57f8b33544b8b1c9f82f15236b19d1f5568b85de82bc5c1674998906cdcde67c8e0822ece742883f288a10af68e44bf1505b75568f6edb52f090378e06", ['\x00', '\x00', '\x00']}, 0x3ac)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r3 = fsopen(0x0, 0x1)
fsmount(r3, 0x0, 0x81)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040), 0x10)
fsopen(0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, 0x0, 0xc004004)
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000000c0)={@private2, 0x19})
openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r6 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0)
sendfile(r6, r6, 0x0, 0x4800000009)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtclass={0x110, 0x28, 0x20, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfffc, 0xf}, {0x8, 0x8}, {0xfff2, 0xe}}, [@tclass_kind_options=@c_tbf={0x8}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @tclass_kind_options=@c_hfsc={{0x9}, {0xa4, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0x3, 0x8, 0x8}}, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0xe9c5}}, @TCA_HFSC_USC={0x10, 0x3, {0x4d2f, 0x421e, 0x732}}, @TCA_HFSC_RSC={0x10, 0x1, {0x6, 0x18, 0xfffffffd}}, @TCA_HFSC_FSC={0x10, 0x2, {0x3, 0xfffffffb, 0x1ff}}, @TCA_HFSC_RSC={0x10, 0x1, {0x5, 0x4, 0x569}}, @TCA_HFSC_RSC={0x10, 0x1, {0x4, 0xfffffff5, 0xfffffffd}}, @TCA_HFSC_FSC={0x10, 0x2, {0x6, 0x7, 0x3}}, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x2d71}}, @TCA_HFSC_RSC={0x10, 0x1, {0xbc7d, 0x6, 0x1}}]}}, @tclass_kind_options=@c_red={0x8}, @tclass_kind_options=@c_tbf={0x8}, @TCA_RATE={0x6, 0x5, {0x5, 0x7}}, @TCA_RATE={0x6, 0x5, {0x9, 0x3}}, @tclass_kind_options=@c_cake={0x9}]}, 0x110}}, 0x0)
timer_create(0x2, 0x0, &(0x7f0000044000)=<r7=>0x0)
r8 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000000000081e040128870000000001090209004100000000090400000103000000092102004001220500090581030000018000"], 0x0)
syz_usb_control_io$hid(r8, 0x0, 0x0)
syz_usb_control_io(r8, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000005000000faff"], 0x0, 0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
timer_settime(r7, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)

1.121373519s ago: executing program 7 (id=3539):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB], 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
fsopen(0x0, 0x1)
read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0x1c, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f00000001c0)=ANY=[], 0x5)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580), 0x4)
sysinfo(&(0x7f0000000180)=""/65)

1.095448255s ago: executing program 1 (id=3540):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4)
socket(0xa, 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000300)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
r4 = syz_usb_connect(0x3, 0x24, &(0x7f0000001640)=ANY=[@ANYBLOB="12010000e1476040d61000220200000003010902"], 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000001c0)={0xd350, <r5=>r2, 0x2})
ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0xe32}}, './file0\x00'})
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x8d8, 0x5, 0x36315247, 0x6, 0x8000002, 0xb, 0x0, 0xffffffff, 0x0, 0x6, 0x0, 0x4}})
connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x4e21, 0x3, 'lc\x00', 0x1, 0x4, 0x4f}, 0x2c)
syz_usb_ep_read(r4, 0x4, 0x15, &(0x7f00000002c0)=""/21)
socket$kcm(0xa, 0x2, 0x0)
r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)={0x30, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_TAGLST={0x4}]}, 0x30}}, 0x0)
r8 = syz_open_dev$video(&(0x7f0000000080), 0x9, 0x0)
ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000180)={0xd, @pix_mp={0xd965, 0x3, 0x55595659, 0x7, 0x7, [{0x80000001, 0x2}, {0x3, 0xe}, {0x9, 0x2}, {0x7, 0x6}, {0x8, 0x2}, {0x1, 0x3ffc00}, {0x68f9, 0x5}, {0x2679, 0x4}], 0x3, 0xf, 0x6, 0x1, 0x2}})

786.308296ms ago: executing program 8 (id=3541):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
setrlimit(0x2, &(0x7f0000000240)={0x80, 0x81})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x28, 0x2, 0xfd, 0x5ae9}, {0x6, 0x0, 0x5, 0x7}]}, 0x10)
r5 = socket(0x10, 0x2, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
ioctl$SNDCTL_TMR_TIMEBASE(r7, 0xc0045401, &(0x7f0000000080)=0x387)
connect$inet6(r6, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffdfe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38)
write$binfmt_script(r6, &(0x7f0000000500)={'#! ', './file0'}, 0xb)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4)
getpeername$netlink(r5, &(0x7f0000000280), &(0x7f0000000300)=0xc)
close_range(r5, r6, 0x0)
sendmmsg$inet(r3, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0)

461.19943ms ago: executing program 7 (id=3542):
socket(0x28, 0x5, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f, 0x4}}, 0x20)
mount$fuseblk(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0)
memfd_secret(0x80000)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r1 = fcntl$dupfd(r0, 0x406, r0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000040)=0xdf9, 0x5)
r2 = syz_io_uring_setup(0x5ce, &(0x7f0000000480)={0x0, 0x0, 0x400, 0xffffffff, 0x138}, &(0x7f00000000c0)=<r3=>0x0, &(0x7f0000000540)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x3c, &(0x7f0000000200)=[{0x30, 0x1, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r2, 0x47bc, 0x0, 0x21, 0x0, 0x0)

0s ago: executing program 7 (id=3543):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/profiling', 0x22042, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) (async)
splice(r0, 0x0, r2, 0x0, 0xbfd1, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async)
r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0)
ioctl$int_in(r6, 0x5452, &(0x7f0000003140)=0xffffffff) (async, rerun: 32)
read$FUSE(r6, &(0x7f0000003180)={0x2020, 0x0, <r7=>0x0}, 0x2020) (rerun: 32)
write$FUSE_INIT(r6, &(0x7f0000000240)={0x50, 0x0, r7, {0x7, 0x2b, 0x200, 0x10, 0x100, 0x8, 0x1, 0x2, 0x0, 0x0, 0x180, 0xfffffffe}}, 0x50)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0) (async)
socketpair$unix(0x1, 0x3, 0x0, 0x0) (async)
r8 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=<r9=>0x0, &(0x7f0000000040)=<r10=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x3, 0x0, 0x200, 0x0, 0x1, {0x1, r11}}) (async)
r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="180100002f0001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
r13 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r13, 0xc018aa3f, &(0x7f0000000140)) (async)
ioctl$UFFDIO_COPY(r13, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x4000})
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) (async)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)

kernel console output (not intermixed with test programs):

dVendor=10d6, idProduct=2200, bcdDevice= 0.02
[  968.056703][ T6111] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  968.064969][ T6111] usb 2-1: SerialNumber: syz
[  968.073002][ T6004] usb 6-1: config index 0 descriptor too short (expected 23569, got 27)
[  968.082918][ T6111] usb 2-1: config 0 descriptor??
[  968.089374][ T6004] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  968.099421][ T6004] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  968.107822][ T6004] usb 6-1: Manufacturer: syz
[  968.114541][ T6004] usb 6-1: config 0 descriptor??
[  968.166979][ T6004] rc_core: IR keymap rc-hauppauge not found
[  968.173492][ T6004] Registered IR keymap rc-empty
[  968.180583][ T6004] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  968.193225][ T6004] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input63
[  968.790209][T18137] 9pnet_virtio: no channels available for device syz
[  968.812949][T18137] lo speed is unknown, defaulting to 1000
[  969.246529][    C0] igorplugusb 6-1:0.0: receive overflow, at least 27 lost
[  969.549306][ T6004] usb 6-1: USB disconnect, device number 108
[  969.662292][T18137] lo speed is unknown, defaulting to 1000
[  970.646911][T14370] usb 2-1: USB disconnect, device number 112
[  970.927469][T18155] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2912'.
[  971.978364][T18158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2912'.
[  972.083978][T18169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  972.104978][T18169] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  972.318047][T18172] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2918'.
[  972.436960][T14370] usb 2-1: new high-speed USB device number 113 using dummy_hcd
[  972.968830][T14370] usb 2-1: Using ep0 maxpacket: 32
[  973.258085][T14370] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  973.279717][T14370] usb 2-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  973.297102][T14370] usb 2-1: config 0 interface 0 has no altsetting 0
[  973.305636][T14370] usb 2-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00
[  973.314917][T14370] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  973.345774][T14370] usb 2-1: config 0 descriptor??
[  973.525047][ T6007] usb 3-1: new full-speed USB device number 116 using dummy_hcd
[  973.688736][ T6007] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  973.709970][ T6007] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  973.724839][ T6007] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  973.760992][ T6007] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  973.770686][ T6007] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  973.785204][T14370] usb 2-1: string descriptor 0 read error: -71
[  973.796412][T14370] uclogic 0003:5543:0045.0024: failed retrieving string descriptor #200: -71
[  973.810274][T14370] uclogic 0003:5543:0045.0024: failed retrieving pen parameters: -71
[  973.941883][ T6007] usb 3-1: config 0 descriptor??
[  973.947716][T14370] uclogic 0003:5543:0045.0024: failed probing pen v2 parameters: -71
[  974.224153][T18210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  974.410155][T18210] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  974.414047][T14370] uclogic 0003:5543:0045.0024: failed probing parameters: -71
[  974.426192][T14370] uclogic 0003:5543:0045.0024: probe with driver uclogic failed with error -71
[  974.456284][ T6007] hid_parser_main: 1 callbacks suppressed
[  974.456305][ T6007] hid-multitouch 0003:0457:07DA.0025: unknown main item tag 0x0
[  974.546163][T14370] usb 2-1: USB disconnect, device number 113
[  974.573119][ T6007] hid-multitouch 0003:0457:07DA.0025: unknown main item tag 0x0
[  974.586246][ T6007] hid-multitouch 0003:0457:07DA.0025: unknown main item tag 0x0
[  974.595971][ T6007] hid-multitouch 0003:0457:07DA.0025: unknown main item tag 0x0
[  974.604747][ T6007] hid-multitouch 0003:0457:07DA.0025: unknown main item tag 0x0
[  974.613630][ T6007] hid-multitouch 0003:0457:07DA.0025: unknown main item tag 0x0
[  974.621382][ T6007] hid-multitouch 0003:0457:07DA.0025: unknown main item tag 0x0
[  974.629117][ T6007] hid-multitouch 0003:0457:07DA.0025: unknown main item tag 0x0
[  974.637077][ T6007] hid-multitouch 0003:0457:07DA.0025: unknown main item tag 0x0
[  974.709290][ T6007] hid-multitouch 0003:0457:07DA.0025: unknown main item tag 0x0
[  974.737718][ T6007] hid-multitouch 0003:0457:07DA.0025: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.2-1/input0
[  974.755167][ T6007] usb 3-1: USB disconnect, device number 116
[  974.974771][T18219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  974.986426][T18219] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  975.417017][T14370] usb 2-1: new high-speed USB device number 114 using dummy_hcd
[  975.427991][T18217] fido_id[18217]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  975.634870][T14370] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  975.643984][T14370] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  975.655052][T14370] usb 2-1: Product: syz
[  975.661632][T14370] usb 2-1: Manufacturer: syz
[  975.670362][T14370] usb 2-1: SerialNumber: syz
[  975.717399][T18229] binder: 18220:18229 ioctl c0306201 200000000300 returned -22
[  976.795516][T18233] /dev/nullb0: Can't open blockdev
[  976.842544][T14370] net_ratelimit: 14 callbacks suppressed
[  976.842560][T14370] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[  976.899230][T14370] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  976.953303][T14370] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  977.062082][T14370] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71
[  977.452315][T14370] usb 2-1: USB disconnect, device number 114
[  977.800521][T18254] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2936'.
[  978.078837][T18258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  978.122722][T18258] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  978.361565][T18265] Mount JFS Failure: -5
[  978.365756][T18265] jfs_mount failed w/return code = -5
[  979.466926][ T6004] usb 3-1: new high-speed USB device number 117 using dummy_hcd
[  979.904621][ T6004] usb 3-1: config 0 has an invalid interface number: 207 but max is 0
[  979.913013][ T6004] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  979.933738][ T6004] usb 3-1: config 0 has no interface number 0
[  979.949913][ T6004] usb 3-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd
[  979.968222][ T6004] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  979.976379][ T6004] usb 3-1: Product: syz
[  979.986508][ T6004] usb 3-1: Manufacturer: syz
[  980.027162][ T6004] usb 3-1: SerialNumber: syz
[  980.036460][ T6004] usb 3-1: config 0 descriptor??
[  980.241956][ T6004] qmi_wwan 3-1:0.207: probe with driver qmi_wwan failed with error -22
[  980.315815][T18304] netlink: 'syz.5.2949': attribute type 21 has an invalid length.
[  980.327855][T18299] lo speed is unknown, defaulting to 1000
[  980.335874][T18304] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2949'.
[  980.370279][T18304] netlink: 'syz.5.2949': attribute type 4 has an invalid length.
[  980.396961][T18304] netlink: 'syz.5.2949': attribute type 5 has an invalid length.
[  980.426070][T18304] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2949'.
[  980.457715][ T1115] wlan0: Trigger new scan to find an IBSS to join
[  980.486920][T14370] usb 2-1: new high-speed USB device number 115 using dummy_hcd
[  980.508119][ T6007] usb 3-1: USB disconnect, device number 117
[  980.548119][T18299] lo speed is unknown, defaulting to 1000
[  980.656876][T14370] usb 2-1: Using ep0 maxpacket: 32
[  980.725193][T14370] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  980.751859][T14370] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  980.774210][T14370] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  980.794329][T14370] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  980.828877][T14370] usb 2-1: config 0 descriptor??
[  981.278397][   T30] kauditd_printk_skb: 12 callbacks suppressed
[  981.278415][   T30] audit: type=1400 audit(1766530042.764:1508): avc:  denied  { create } for  pid=18314 comm="syz.5.2952" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1
[  981.338113][T14370] hid_parser_main: 5 callbacks suppressed
[  981.338134][T14370] ft260 0003:0403:6030.0026: unknown main item tag 0x0
[  981.351334][T14370] ft260 0003:0403:6030.0026: unknown main item tag 0x0
[  981.691935][T18326] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2953'.
[  981.701357][T18326] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2953'.
[  981.712565][   T30] audit: type=1400 audit(1766530043.204:1509): avc:  denied  { accept } for  pid=18323 comm="syz.5.2953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  982.781690][T18336] syz_tun: entered allmulticast mode
[  982.862486][T18337] tmpfs: Unknown parameter 'lrpquota_QLõ›žÉƒ5[SGbkinode_hardlimit'
[  982.876204][T18337] netlink: 'syz.7.2957': attribute type 2 has an invalid length.
[  983.183107][T14370] ft260 0003:0403:6030.0026: failed to retrieve chip version
[  983.191995][T14370] ft260 0003:0403:6030.0026: probe with driver ft260 failed with error -71
[  983.208681][T18341] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2959'.
[  983.209012][T18339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  983.226579][T18339] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  983.257597][T14370] usb 2-1: USB disconnect, device number 115
[  983.425433][   T30] audit: type=1400 audit(1766530044.914:1510): avc:  denied  { view } for  pid=18338 comm="syz.8.2958" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  983.509615][T18344] lo speed is unknown, defaulting to 1000
[  983.588556][T18344] lo speed is unknown, defaulting to 1000
[  983.848052][T18343] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2960'.
[  984.384175][T18365] PKCS7: Unknown OID: [4] (bad)
[  984.399165][T18365] PKCS7: Only support pkcs7_signedData type
[  984.853884][T18379] netlink: 'syz.7.2970': attribute type 32 has an invalid length.
[  984.891628][T18379] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2970'.
[  985.503181][ T4133] wlan0: Trigger new scan to find an IBSS to join
[  985.587134][ T6004] usb 2-1: new high-speed USB device number 116 using dummy_hcd
[  985.759192][ T6004] usb 2-1: Using ep0 maxpacket: 32
[  985.767140][ T6004] usb 2-1: config 0 has an invalid interface number: 91 but max is 0
[  985.790525][ T6004] usb 2-1: config 0 has an invalid descriptor of length 50, skipping remainder of the config
[  985.826402][ T6004] usb 2-1: config 0 has no interface number 0
[  985.845022][ T6004] usb 2-1: config 0 interface 91 altsetting 1 endpoint 0x8 has invalid maxpacket 512, setting to 64
[  985.904153][ T6004] usb 2-1: config 0 interface 91 altsetting 1 bulk endpoint 0x5 has invalid maxpacket 32
[  985.916002][ T6004] usb 2-1: config 0 interface 91 altsetting 1 endpoint 0xC has invalid maxpacket 512, setting to 64
[  985.927776][ T6004] usb 2-1: config 0 interface 91 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F
[  985.939669][ T6004] usb 2-1: config 0 interface 91 altsetting 1 endpoint 0x8F has an invalid bInterval 134, changing to 11
[  985.951647][ T6004] usb 2-1: config 0 interface 91 altsetting 1 endpoint 0x8F has invalid maxpacket 8782, setting to 1024
[  985.963185][ T6004] usb 2-1: config 0 interface 91 altsetting 1 has 6 endpoint descriptors, different from the interface descriptor's value: 8
[  986.006123][ T6004] usb 2-1: config 0 interface 91 has no altsetting 0
[  986.194853][ T6004] usb 2-1: New USB device found, idVendor=0b05, idProduct=9f12, bcdDevice=27.01
[  986.204055][ T6004] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  986.212167][ T6004] usb 2-1: Product: syz
[  986.216379][ T6004] usb 2-1: Manufacturer: syz
[  986.221010][ T6004] usb 2-1: SerialNumber: syz
[  986.236949][ T6004] usb 2-1: config 0 descriptor??
[  986.242713][T18396] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  986.618234][  T493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  987.310816][T18425] futex_wake_op: syz.8.2979 tries to shift op by -1; fix this program
[  987.421012][T18422] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2979'.
[  987.475892][T18428] delete_channel: no stack
[  988.158043][T18436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  988.166724][T18436] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  988.366693][ T6004] usb 2-1: USB disconnect, device number 116
[  991.287794][T13311] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  991.297342][T13311] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  992.220421][T13311] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  992.229047][T13311] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  992.239204][T13311] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  992.259604][ T5826] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  992.276015][ T5826] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  992.290360][ T5826] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  992.300990][ T5826] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  992.594631][ T5826] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  992.619200][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  992.625836][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  992.696509][T18484] netlink: 'syz.8.2997': attribute type 30 has an invalid length.
[  992.766365][T18485] netlink: 'syz.8.2997': attribute type 30 has an invalid length.
[  992.849413][T18486] 9pnet_virtio: no channels available for device syz
[  993.541411][T13600] syz_tun (unregistering): left allmulticast mode
[  993.587507][T18502] netlink: 'syz.7.2999': attribute type 4 has an invalid length.
[  993.613340][T18490] lo speed is unknown, defaulting to 1000
[  993.818730][ T4133] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  993.866890][T14370] usb 6-1: new high-speed USB device number 109 using dummy_hcd
[  994.051672][T18479] lo speed is unknown, defaulting to 1000
[  994.067098][T18490] lo speed is unknown, defaulting to 1000
[  994.075630][T14370] usb 6-1: config 0 has an invalid interface number: 50 but max is 0
[  994.083937][T14370] usb 6-1: config 0 has no interface number 0
[  994.102146][T14370] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 255, changing to 11
[  994.136098][T14370] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 59391, setting to 1024
[  994.179206][T14370] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  994.188586][T14370] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  994.196566][T14370] usb 6-1: Product: syz
[  994.200829][T14370] usb 6-1: Manufacturer: syz
[  994.205423][T14370] usb 6-1: SerialNumber: syz
[  994.212266][T14370] usb 6-1: config 0 descriptor??
[  994.217999][T18504] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  994.240395][T14370] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0
[  994.321228][ T4133] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  994.423518][ T4133] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  994.466519][T18479] lo speed is unknown, defaulting to 1000
[  994.561361][ T4133] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  994.618718][T14370] usb 2-1: new high-speed USB device number 117 using dummy_hcd
[  994.638069][ T6004] usb 6-1: USB disconnect, device number 109
[  994.660186][ T6004] yurex 6-1:0.50: USB YUREX #0 now disconnected
[  994.779417][ T5826] Bluetooth: hci5: command tx timeout
[  994.808416][T14370] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  994.839982][T14370] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  994.883602][T14370] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  994.894984][ T4133] bond1: left promiscuous mode
[  994.920392][ T4133] bridge0: port 3(bond1) entered disabled state
[  994.938658][T14370] usb 2-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16
[  994.957162][T14370] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  994.995812][T14370] usb 2-1: Product: syz
[  995.017884][T14370] usb 2-1: Manufacturer: syz
[  995.033610][T14370] usb 2-1: SerialNumber: syz
[  995.057134][T14370] usb 2-1: config 0 descriptor??
[  995.082634][T14370] kvaser_usb 2-1:0.0: error -ENODEV: Cannot get usb endpoint(s)
[  995.290670][T14370] usb 2-1: USB disconnect, device number 117
[  995.321043][T18525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  995.338552][T18525] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  995.363605][T18525] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3004'.
[  995.513517][ T4133] dvmrp0 (unregistering): left allmulticast mode
[  995.520004][T18527] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18527 comm=syz.5.3005
[  995.764957][ T4133] bond0 (unregistering): Released all slaves
[  995.923520][ T4133] bond1 (unregistering): Released all slaves
[  995.943955][T18479] chnl_net:caif_netlink_parms(): no params data found
[  996.057634][ T4133] tipc: Left network mode
[  996.085733][ T4133] IPVS: stopping backup sync thread 17448 ...
[  996.233308][T18538] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000007'
[  996.527441][T18479] bridge0: port 1(bridge_slave_0) entered blocking state
[  996.535364][T18479] bridge0: port 1(bridge_slave_0) entered disabled state
[  996.546562][T18479] bridge_slave_0: entered allmulticast mode
[  996.553657][T18479] bridge_slave_0: entered promiscuous mode
[  996.573247][ T6111] usb 6-1: new high-speed USB device number 110 using dummy_hcd
[  996.581114][T18479] bridge0: port 2(bridge_slave_1) entered blocking state
[  996.588504][T18479] bridge0: port 2(bridge_slave_1) entered disabled state
[  996.607399][T18479] bridge_slave_1: entered allmulticast mode
[  996.617736][T18479] bridge_slave_1: entered promiscuous mode
[  996.736874][ T6004] usb 2-1: new high-speed USB device number 118 using dummy_hcd
[  996.747382][ T6111] usb 6-1: Using ep0 maxpacket: 16
[  996.756480][ T6111] usb 6-1: config 3 has an invalid interface number: 155 but max is 0
[  996.769733][ T6111] usb 6-1: config 3 has an invalid interface association descriptor of length 3, skipping
[  996.787201][ T6111] usb 6-1: config 3 has an invalid descriptor of length 102, skipping remainder of the config
[  996.798564][T18556] netlink: 'syz.7.3012': attribute type 4 has an invalid length.
[  996.807937][ T6111] usb 6-1: config 3 has no interface number 0
[  996.813547][T18479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  996.826952][ T6111] usb 6-1: config 3 interface 155 has no altsetting 0
[  996.838624][ T6111] usb 6-1: New USB device found, idVendor=05a9, idProduct=264a, bcdDevice=e5.4c
[  996.844436][T18479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  996.857904][ T5826] Bluetooth: hci5: command tx timeout
[  996.863369][ T6111] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  996.871590][ T6111] usb 6-1: Product: syz
[  996.875754][ T6111] usb 6-1: Manufacturer: syz
[  996.887227][ T6111] usb 6-1: SerialNumber: syz
[  996.897027][ T6004] usb 2-1: Using ep0 maxpacket: 32
[  996.908411][ T6004] usb 2-1: config 0 has an invalid interface number: 132 but max is 0
[  996.925994][ T6004] usb 2-1: config 0 has no interface number 0
[  996.932317][ T6004] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 32, changing to 7
[  996.944876][ T6004] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid maxpacket 1730, setting to 1024
[  996.958381][ T6004] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  996.967718][ T6004] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  996.975926][ T6004] usb 2-1: Product: syz
[  996.980614][ T6004] usb 2-1: Manufacturer: syz
[  996.985546][ T6004] usb 2-1: SerialNumber: syz
[  996.999738][ T6004] usb 2-1: config 0 descriptor??
[  997.044420][ T6004] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  997.069274][T18479] team0: Port device team_slave_0 added
[  997.072841][ T6004] em28xx 2-1:0.132: Video interface 132 found: isoc
[  997.191232][T18548] Can't find a SQUASHFS superblock on nullb0
[  997.205590][ T6111] uvcvideo 6-1:3.155: probe with driver uvcvideo failed with error -22
[  997.218694][T18479] team0: Port device team_slave_1 added
[  997.231736][ T4133] hsr_slave_0: left promiscuous mode
[  997.263396][ T6111] usb 6-1: USB disconnect, device number 110
[  997.279533][ T4133] hsr_slave_1: left promiscuous mode
[  997.287325][ T6004] em28xx 2-1:0.132: unknown em28xx chip ID (0)
[  997.299013][ T4133] veth1_macvtap: left promiscuous mode
[  997.304556][ T4133] veth0_macvtap: left promiscuous mode
[  997.313013][ T4133] veth1_vlan: left promiscuous mode
[  997.319354][ T4133] veth0_vlan: left promiscuous mode
[  997.350929][ T6004] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  997.363122][ T6004] em28xx 2-1:0.132: board has no eeprom
[  997.429571][ T6004] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  997.438956][ T6004] em28xx 2-1:0.132: analog set to isoc mode.
[  997.445166][ T5930] em28xx 2-1:0.132: Registering V4L2 extension
[  997.482020][ T6004] usb 2-1: USB disconnect, device number 118
[  997.489286][ T6004] em28xx 2-1:0.132: Disconnecting em28xx
[  997.632925][ T5930] em28xx 2-1:0.132: Config register raw data: 0xffffffed
[  997.643144][ T5930] em28xx 2-1:0.132: AC97 chip type couldn't be determined
[  997.669265][ T5930] em28xx 2-1:0.132: No AC97 audio processor
[  997.669517][T18568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  997.681509][ T5930] usb 2-1: Decoder not found
[  997.692593][T18568] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  997.705998][ T5930] em28xx 2-1:0.132: failed to create media graph
[  997.712607][ T5930] em28xx 2-1:0.132: V4L2 device video103 deregistered
[  997.733903][ T5930] em28xx 2-1:0.132: Remote control support is not available for this card.
[  997.767374][ T6004] em28xx 2-1:0.132: Closing input extension
[  997.818073][ T6004] em28xx 2-1:0.132: Freeing device
[  998.700426][ T1107] smc: removing ib device !yz!
[  999.007164][ T5826] Bluetooth: hci5: command tx timeout
[  999.172629][ T6004] usb 2-1: new high-speed USB device number 119 using dummy_hcd
[  999.351621][ T6004] usb 2-1: Using ep0 maxpacket: 32
[  999.405261][T18589] 9pnet_virtio: no channels available for device syz
[  999.855512][T18589] overlayfs: overlapping lowerdir path
[ 1000.309011][ T6004] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1000.327028][ T6004] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1000.352418][ T6004] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 1000.602215][T18479] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1000.609576][T18479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1000.638000][T18479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1000.657030][ T6004] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1000.667044][ T6004] usb 2-1: config 0 descriptor??
[ 1000.687794][T18479] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1000.694773][T18479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1000.734635][T18479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1001.029395][ T5826] Bluetooth: hci5: command tx timeout
[ 1001.291978][ T6004] usbhid 2-1:0.0: can't add hid device: -71
[ 1001.321297][T18604] netlink: 'syz.7.3022': attribute type 4 has an invalid length.
[ 1001.321365][ T6004] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1001.425655][ T6004] usb 2-1: USB disconnect, device number 119
[ 1001.525088][T18479] hsr_slave_0: entered promiscuous mode
[ 1001.562560][T18479] hsr_slave_1: entered promiscuous mode
[ 1001.618874][T18479] debugfs: 'hsr0' already exists in 'hsr'
[ 1001.656486][T18479] Cannot create hsr debugfs directory
[ 1001.730761][T18615] dvmrp0: entered allmulticast mode
[ 1001.937395][ T6111] usb 6-1: new high-speed USB device number 111 using dummy_hcd
[ 1002.137246][ T6111] usb 6-1: Using ep0 maxpacket: 16
[ 1002.150934][ T6111] usb 6-1: config 0 has an invalid interface number: 126 but max is 0
[ 1002.182948][ T6111] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1002.222104][ T6111] usb 6-1: config 0 has no interface number 0
[ 1002.246943][ T6111] usb 6-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87
[ 1002.286979][ T6111] usb 6-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024
[ 1002.328720][ T6111] usb 6-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64
[ 1002.355154][ T6111] usb 6-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C
[ 1002.395675][ T6111] usb 6-1: config 0 interface 126 altsetting 0 endpoint 0x8C has invalid maxpacket 28001, setting to 1024
[ 1002.433034][ T6111] usb 6-1: config 0 interface 126 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024
[ 1002.454737][ T6111] usb 6-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[ 1002.502695][ T6111] usb 6-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88
[ 1002.555037][ T6111] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1002.576227][ T6111] usb 6-1: config 0 descriptor??
[ 1002.597764][T18616] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1002.617074][T18616] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1002.639022][ T6111] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[ 1002.717908][T18628] netlink: 'syz.8.3030': attribute type 11 has an invalid length.
[ 1002.757717][T18628] netlink: 199828 bytes leftover after parsing attributes in process `syz.8.3030'.
[ 1002.833434][T18615] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3025'.
[ 1002.944820][ T6111] usb 6-1: USB disconnect, device number 111
[ 1003.233531][T18643] netlink: 'syz.8.3033': attribute type 30 has an invalid length.
[ 1003.294850][T18644] netlink: 'syz.8.3033': attribute type 30 has an invalid length.
[ 1003.405917][T18643] 9pnet_virtio: no channels available for device syz
[ 1003.652283][ T4133] IPVS: stop unused estimator thread 0...
[ 1004.141431][   T30] audit: type=1400 audit(1766530065.634:1511): avc:  denied  { write } for  pid=18645 comm="syz.5.3034" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[ 1004.149047][   T49] kworker/1:1 (49) used greatest stack depth: 14952 bytes left
[ 1005.153262][T18656] netlink: 92 bytes leftover after parsing attributes in process `syz.8.3036'.
[ 1005.304451][T18479] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1005.389819][T18479] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1005.493835][T18479] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1005.510884][T18479] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1006.551667][T18479] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1006.584510][T18685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1006.589095][T18479] 8021q: adding VLAN 0 to HW filter on device team0
[ 1006.691956][T18685] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1006.883106][ T6535] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1006.890255][ T6535] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1007.036730][ T6535] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1007.043928][ T6535] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1007.343901][T18692] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1007.617826][T18697] netlink: 666 bytes leftover after parsing attributes in process `syz.5.3047'.
[ 1008.187877][T18479] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1008.298726][T18479] veth0_vlan: entered promiscuous mode
[ 1008.307966][T18479] veth1_vlan: entered promiscuous mode
[ 1008.349289][T18479] veth0_macvtap: entered promiscuous mode
[ 1008.364781][T18479] veth1_macvtap: entered promiscuous mode
[ 1008.394449][T18479] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1008.415217][T18479] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1008.434160][ T1002] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1008.454246][ T1002] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1008.473631][ T1002] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1008.493370][ T1002] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1008.507077][ T6111] usb 6-1: new high-speed USB device number 112 using dummy_hcd
[ 1008.656629][ T3521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1008.664628][ T3521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1008.673563][ T6111] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1008.715068][ T6111] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1008.738583][ T6111] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 1008.762761][ T6111] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[ 1008.787733][ T6111] usb 6-1: Manufacturer: syz
[ 1008.800596][T18716] ip6t_rpfilter: unknown options
[ 1008.811685][ T1002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1008.821629][ T1002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1008.836410][ T6111] usb 6-1: config 0 descriptor??
[ 1009.517165][T18721] overlayfs: missing 'lowerdir'
[ 1010.197117][ T6111] input: syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0027/input/input65
[ 1010.287042][ T6111] input: syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0027/input/input66
[ 1010.339713][ T6111] input: syz Touch Strip as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0027/input/input67
[ 1010.368476][T18728] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[ 1010.389248][    T9] usb 3-1: new high-speed USB device number 118 using dummy_hcd
[ 1010.412712][ T6111] input: syz Dial as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0027/input/input68
[ 1010.447984][T13311] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1010.448031][T18728] netlink: 'syz.8.3056': attribute type 10 has an invalid length.
[ 1010.448079][T18728] team0: Device ipvlan1 failed to enter team mode
[ 1010.472455][T13311] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1010.482223][T13311] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1010.493175][T13311] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1010.501061][T13311] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1010.520132][ T6111] uclogic 0003:256C:006D.0027: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.5-1/input0
[ 1010.546907][    T9] usb 3-1: Using ep0 maxpacket: 32
[ 1010.553272][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 222, changing to 11
[ 1010.621440][    T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[ 1010.648085][T18728] team0: Device ipvlan1 failed to enter team mode
[ 1010.677819][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1010.721303][T18733] blktrace: Concurrent blktraces are not allowed on nullb0
[ 1010.762378][T18729] lo speed is unknown, defaulting to 1000
[ 1010.798183][    T9] usb 3-1: config 0 descriptor??
[ 1011.264434][    T9] savu 0003:1E7D:2D5A.0028: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0
[ 1011.367027][T14370] usb 6-1: reset high-speed USB device number 112 using dummy_hcd
[ 1011.404304][T18729] chnl_net:caif_netlink_parms(): no params data found
[ 1011.885290][   T12] team0: Port device netdevsim0 removed
[ 1012.028497][ T6004] usb 3-1: USB disconnect, device number 118
[ 1012.197502][T18761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1012.208998][T18761] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1012.261728][T18729] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1012.271529][T18729] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1012.281422][T18729] bridge_slave_0: entered allmulticast mode
[ 1012.289495][T14370] usb 6-1: device descriptor read/64, error -71
[ 1012.300325][T18729] bridge_slave_0: entered promiscuous mode
[ 1012.309525][T18729] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1012.316910][T18729] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1012.324200][T18729] bridge_slave_1: entered allmulticast mode
[ 1012.337074][T18729] bridge_slave_1: entered promiscuous mode
[ 1012.424775][T18729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1012.480018][T18729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1012.537904][T14370] usb 6-1: reset high-speed USB device number 112 using dummy_hcd
[ 1012.545987][T13311] Bluetooth: hci2: command tx timeout
[ 1012.555050][T14370] usb 6-1: device reset changed ep0 maxpacket size!
[ 1012.574899][ T6007] usb 6-1: USB disconnect, device number 112
[ 1012.590866][   T12] bridge_slave_1: left allmulticast mode
[ 1012.596537][   T12] bridge_slave_1: left promiscuous mode
[ 1012.602837][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1012.616423][   T12] bridge_slave_0: left allmulticast mode
[ 1012.627085][   T12] bridge_slave_0: left promiscuous mode
[ 1012.632786][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1012.785200][   T12] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator
[ 1012.809020][   T12] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface
[ 1012.820038][   T12] bond1 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - f2:02:e7:4f:55:26 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[ 1012.967881][ T6007] usb 6-1: new high-speed USB device number 113 using dummy_hcd
[ 1013.092126][T18747] orangefs_mount: mount request failed with -4
[ 1013.250768][   T30] audit: type=1400 audit(1766530074.744:1512): avc:  denied  { listen } for  pid=18766 comm="syz.8.3063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1013.617022][ T6007] usb 6-1: Using ep0 maxpacket: 32
[ 1013.671260][ T6007] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 175, using maximum allowed: 30
[ 1013.743918][ T6007] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 175
[ 1013.772219][ T6007] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1013.848726][ T6007] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1013.884408][ T6007] usb 6-1: config 0 descriptor??
[ 1014.106386][ T6007] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[ 1014.120539][ T6007] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1014.140854][ T6007] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[ 1014.149136][ T6007] usb 6-1: media controller created
[ 1014.164875][ T6007] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1014.359685][T14370] usb 3-1: new low-speed USB device number 119 using dummy_hcd
[ 1014.589020][T14370] usb 3-1: Invalid ep0 maxpacket: 32
[ 1014.616963][T13311] Bluetooth: hci2: command tx timeout
[ 1014.799498][T14370] usb 3-1: new low-speed USB device number 120 using dummy_hcd
[ 1014.883769][   T12] bond1 (unregistering): (slave macvlan2): Releasing backup interface
[ 1014.903756][   T12] bond1 (unregistering): Released all slaves
[ 1015.387933][T14370] usb 3-1: Invalid ep0 maxpacket: 32
[ 1015.398143][T14370] usb usb3-port1: attempt power cycle
[ 1015.440895][T18787] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[ 1015.650141][T18793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1015.717626][T18793] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1015.796965][T14370] usb 3-1: new low-speed USB device number 121 using dummy_hcd
[ 1015.827695][T14370] usb 3-1: Invalid ep0 maxpacket: 32
[ 1015.957807][T14370] usb 3-1: new low-speed USB device number 122 using dummy_hcd
[ 1016.162266][   T12] bond2 (unregistering): Released all slaves
[ 1016.167266][T14370] usb 3-1: Invalid ep0 maxpacket: 32
[ 1016.182293][T18729] team0: Port device team_slave_0 added
[ 1016.188089][T14370] usb usb3-port1: unable to enumerate USB device
[ 1016.222710][ T6007] az6027: usb out operation failed. (-110)
[ 1016.237196][ T6007] az6027: usb out operation failed. (-32)
[ 1016.243753][ T6007] stb0899_attach: Driver disabled by Kconfig
[ 1016.266868][ T6007] az6027: no front-end attached
[ 1016.266868][ T6007] 
[ 1016.277104][ T6007] az6027: usb out operation failed. (-32)
[ 1016.288747][T18729] team0: Port device team_slave_1 added
[ 1016.301964][ T6007] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[ 1016.365980][ T6007] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input69
[ 1016.415642][ T6007] dvb-usb: schedule remote query interval to 400 msecs.
[ 1016.437896][ T6007] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[ 1016.488248][   T12] tipc: Left network mode
[ 1016.494100][T18729] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1016.559483][T18729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1016.599569][T18729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1016.668547][   T30] audit: type=1326 audit(1766530078.154:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18803 comm="syz.7.3072" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f56b3d8f749 code=0x0
[ 1016.707273][T13311] Bluetooth: hci2: command tx timeout
[ 1016.957808][T18729] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1016.976109][T18729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1017.028780][T18729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1017.389966][T18815] lo speed is unknown, defaulting to 1000
[ 1017.500047][T18729] hsr_slave_0: entered promiscuous mode
[ 1017.506489][T18729] hsr_slave_1: entered promiscuous mode
[ 1017.522647][T18729] debugfs: 'hsr0' already exists in 'hsr'
[ 1017.536969][T18729] Cannot create hsr debugfs directory
[ 1017.756922][ T6007] usb 3-1: new full-speed USB device number 123 using dummy_hcd
[ 1017.989000][ T6007] usb 3-1: device descriptor read/64, error -71
[ 1018.001763][    T9] usb 6-1: USB disconnect, device number 113
[ 1018.058298][    T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[ 1018.067885][T18824] syzkaller0: entered promiscuous mode
[ 1018.091691][T18824] syzkaller0: entered allmulticast mode
[ 1018.215742][   T12] hsr_slave_0: left promiscuous mode
[ 1018.231570][   T12] hsr_slave_1: left promiscuous mode
[ 1018.243618][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1018.256926][ T6007] usb 3-1: new full-speed USB device number 124 using dummy_hcd
[ 1018.273809][   T12] veth0_macvtap: left allmulticast mode
[ 1018.298713][   T12] veth0_vlan: left promiscuous mode
[ 1018.846945][T13311] Bluetooth: hci2: command tx timeout
[ 1019.323032][ T6007] usb 3-1: device descriptor read/64, error -71
[ 1019.399931][   T12] pim6reg9 (unregistering): left allmulticast mode
[ 1019.498110][ T6007] usb usb3-port1: attempt power cycle
[ 1019.847001][ T6007] usb 3-1: new full-speed USB device number 125 using dummy_hcd
[ 1019.867566][ T6007] usb 3-1: device descriptor read/8, error -71
[ 1020.107091][ T6007] usb 3-1: new full-speed USB device number 126 using dummy_hcd
[ 1020.127648][ T6007] usb 3-1: device descriptor read/8, error -71
[ 1020.191667][   T12] team0 (unregistering): Port device team_slave_1 removed
[ 1020.247230][ T6007] usb usb3-port1: unable to enumerate USB device
[ 1020.338108][   T12] team0 (unregistering): Port device team_slave_0 removed
[ 1021.046236][T18857] kernel read not supported for file /ns¿áÈEà€r‘7kjœLÎZ™øQ%#-ÓÒèÜáýÞïò§Ò«—Âe'ü… (pid: 18857 comm: syz.2.3082)
[ 1021.064838][   T30] audit: type=1800 audit(1766530082.554:1514): pid=18857 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.3082" name=6E73BF12E10BC845E0807291376B6A9C4CCE5A99F85125232DD3D213E8DCE1FDDEEFF2A7D2AB97C26527FC108503 dev="mqueue" ino=73809 res=0 errno=0
[ 1021.093568][T18848] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3078'.
[ 1021.102621][T18848] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3078'.
[ 1021.552346][T18869] binder: Bad value for 'max'
[ 1021.779174][   T30] audit: type=1400 audit(1766530083.274:1515): avc:  denied  { listen } for  pid=18879 comm="syz.5.3088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 1021.808446][T18880] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3088'.
[ 1021.961127][T18884] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3089'.
[ 1022.014276][   T12] IPVS: stop unused estimator thread 0...
[ 1022.143618][T18729] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1022.158054][T18729] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1022.172189][T18729] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1022.194656][T18729] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1022.341805][   T30] audit: type=1400 audit(1766530083.804:1516): avc:  denied  { mounton } for  pid=18885 comm="syz.5.3090" path="/508/file0" dev="autofs" ino=74069 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1
[ 1022.834118][T18729] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1022.863537][T18729] 8021q: adding VLAN 0 to HW filter on device team0
[ 1022.879413][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1022.886543][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1022.914086][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1022.921195][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1023.071779][T18910] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3092'.
[ 1023.272101][T18909] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3095'.
[ 1023.635592][T14370] usb 6-1: new high-speed USB device number 114 using dummy_hcd
[ 1023.826382][T18729] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1023.826923][T14370] usb 6-1: Using ep0 maxpacket: 32
[ 1023.865819][T14370] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[ 1023.877628][T14370] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1024.004553][T18927] netlink: 'syz.2.3099': attribute type 30 has an invalid length.
[ 1024.064418][T18926] netlink: 'syz.2.3099': attribute type 30 has an invalid length.
[ 1024.125317][T18928] 9pnet_virtio: no channels available for device syz
[ 1025.340824][T14370] usb 6-1: config 0 descriptor??
[ 1025.411338][T14370] as10x_usb: device has been detected
[ 1025.417087][ T5826] Bluetooth: hci2: command 0x0405 tx timeout
[ 1025.418234][T14370] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[ 1025.758340][T14370] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[ 1025.823757][T18729] veth0_vlan: entered promiscuous mode
[ 1025.929789][T14370] as10x_usb: error during firmware upload part1
[ 1025.936312][T14370] Registered device nBox DVB-T Dongle
[ 1026.468763][T18940] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 1026.499001][   T30] audit: type=1400 audit(1766530087.954:1517): avc:  denied  { mounton } for  pid=18936 comm="syz.5.3102" path="/511/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[ 1026.581405][T18729] veth1_vlan: entered promiscuous mode
[ 1027.064944][T14370] usb 6-1: USB disconnect, device number 114
[ 1027.230782][T14370] Unregistered device nBox DVB-T Dongle
[ 1027.247811][   T30] audit: type=1326 audit(1766530088.744:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18948 comm="syz.5.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd710f8f749 code=0x7ffc0000
[ 1027.248494][T14370] as10x_usb: device has been disconnected
[ 1027.256537][T18729] veth0_macvtap: entered promiscuous mode
[ 1027.367256][   T30] audit: type=1326 audit(1766530088.854:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18948 comm="syz.5.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd710f8f749 code=0x7ffc0000
[ 1027.416413][T18729] veth1_macvtap: entered promiscuous mode
[ 1027.486931][T18954] ieee802154 phy0 wpan0: encryption failed: -22
[ 1027.496533][   T30] audit: type=1326 audit(1766530088.864:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18948 comm="syz.5.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd710f8f749 code=0x7ffc0000
[ 1027.532494][T18729] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1027.558956][   T30] audit: type=1326 audit(1766530088.864:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18948 comm="syz.5.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd710f8f749 code=0x7ffc0000
[ 1027.623583][T18729] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1027.687815][ T8501] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1027.720470][ T8501] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1027.740358][   T30] audit: type=1326 audit(1766530088.864:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18948 comm="syz.5.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fd710f8f749 code=0x7ffc0000
[ 1027.777458][ T8501] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1027.798940][ T8501] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1027.839212][   T30] audit: type=1326 audit(1766530088.864:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18948 comm="syz.5.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd710f8f749 code=0x7ffc0000
[ 1027.916938][   T30] audit: type=1326 audit(1766530088.864:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18948 comm="syz.5.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fd710f8f749 code=0x7ffc0000
[ 1028.008638][   T30] audit: type=1326 audit(1766530088.864:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18948 comm="syz.5.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd710f8f749 code=0x7ffc0000
[ 1028.048469][T18049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1028.056312][T18049] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1028.102618][ T8501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1028.108675][   T30] audit: type=1326 audit(1766530088.864:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18948 comm="syz.5.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd710f8f749 code=0x7ffc0000
[ 1028.111436][ T8501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1028.283344][T18955] sp0: Synchronizing with TNC
[ 1028.407916][T18965] netlink: 860 bytes leftover after parsing attributes in process `syz.1.3055'.
[ 1028.584323][T18969] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32)
[ 1028.690484][T18969] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1030.231190][T18980] Invalid source name
[ 1030.235240][T18980] UBIFS error (pid: 18980): cannot open "./file0", error -22
[ 1030.280180][T18980] fuse: Bad value for 'fd'
[ 1030.870088][T18991] netlink: 'syz.5.3114': attribute type 30 has an invalid length.
[ 1030.983379][T18993] netlink: 'syz.5.3114': attribute type 30 has an invalid length.
[ 1031.062648][T18995] 9pnet_virtio: no channels available for device syz
[ 1031.352045][T18992] netlink: 'syz.2.3113': attribute type 21 has an invalid length.
[ 1032.354135][T18992] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3113'.
[ 1032.695272][T19012] netlink: 'syz.5.3118': attribute type 2 has an invalid length.
[ 1032.704478][T19011] netlink: 'syz.5.3118': attribute type 2 has an invalid length.
[ 1034.138444][ T5930] usb 3-1: new high-speed USB device number 127 using dummy_hcd
[ 1034.431008][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1034.447034][ T5930] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1034.456096][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1034.518061][ T5930] usb 3-1: config 0 descriptor??
[ 1034.969048][ T5930] usbhid 3-1:0.0: can't add hid device: -71
[ 1034.985515][ T5930] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1035.014055][ T5930] usb 3-1: USB disconnect, device number 127
[ 1035.567490][T19045] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3126'.
[ 1035.779087][T19055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1035.797230][T19055] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1035.946837][ T5930] usb 2-1: new high-speed USB device number 120 using dummy_hcd
[ 1036.018323][T19065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1036.027843][T19065] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1036.097085][T19055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1036.142561][T19055] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1036.147079][ T5930] usb 2-1: Using ep0 maxpacket: 32
[ 1036.191507][ T5930] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1036.204626][ T5930] usb 2-1: config 234 has an invalid interface number: 196 but max is 0
[ 1036.223339][ T5930] usb 2-1: config 234 has no interface number 0
[ 1036.238823][ T5930] usb 2-1: config 234 interface 196 has no altsetting 0
[ 1036.258024][ T5930] usb 2-1: New USB device found, idVendor=182d, idProduct=021c, bcdDevice=68.47
[ 1036.270009][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1036.279896][ T5930] usb 2-1: Product: syz
[ 1036.284051][ T5930] usb 2-1: Manufacturer: syz
[ 1036.293670][ T5930] usb 2-1: SerialNumber: syz
[ 1036.542315][ T5930] sisusb 2-1:234.196: Invalid USB2VGA device
[ 1036.553465][ T5930] sisusb 2-1:234.196: probe with driver sisusb failed with error -22
[ 1036.586631][ T5930] usb 2-1: USB disconnect, device number 120
[ 1036.655271][T19073] ubi31: attaching mtd0
[ 1036.961538][T19073] ubi31: scanning is finished
[ 1038.604404][T19073] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[ 1039.038632][T19090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1039.049950][T19090] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1039.347780][T19084] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3134'.
[ 1039.816348][   T30] kauditd_printk_skb: 11 callbacks suppressed
[ 1039.816363][   T30] audit: type=1400 audit(1766530101.304:1538): avc:  denied  { read open } for  pid=19095 comm="syz.1.3138" path="/" dev="configfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 1040.036333][   T30] audit: type=1400 audit(1766530101.524:1539): avc:  denied  { execute } for  pid=19099 comm="syz.8.3139" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=75636 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[ 1041.323270][T19122] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3144'.
[ 1042.001443][T19139] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6)
[ 1042.008063][T19139] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1042.072708][T19139] vhci_hcd vhci_hcd.0: Device attached
[ 1042.428630][ T5930] usb 48-1: SetAddress Request (2) to port 0
[ 1042.485323][ T5930] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd
[ 1042.669650][T19159] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3151'.
[ 1042.741323][T19161] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0
[ 1042.743258][T19160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1042.854155][T19140] vhci_hcd: connection reset by peer
[ 1042.866548][T19160] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1042.877023][ T1115] vhci_hcd vhci_hcd.7: stop threads
[ 1042.895337][ T1115] vhci_hcd vhci_hcd.7: release socket
[ 1042.915739][ T1115] vhci_hcd vhci_hcd.7: disconnect device
[ 1043.334603][ T6007] usb 2-1: new high-speed USB device number 121 using dummy_hcd
[ 1044.063536][ T6007] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1044.072368][ T6007] usb 2-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36
[ 1044.087339][ T6007] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1044.115592][ T6007] usb 2-1: config 0 descriptor??
[ 1044.214032][T19175] SELinux: syz.2.3156 (19175) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[ 1044.238636][T19139] syz.7.3148 (19139): drop_caches: 2
[ 1044.392013][ T6007] kaweth 2-1:0.0: Firmware present in device.
[ 1044.419673][T19181] netlink: 'syz.8.3157': attribute type 30 has an invalid length.
[ 1044.516757][T19179] netlink: 'syz.8.3157': attribute type 30 has an invalid length.
[ 1044.600833][ T6007] kaweth 2-1:0.0: Statistics collection: 0
[ 1044.634966][ T6007] kaweth 2-1:0.0: Multicast filter limit: 0
[ 1044.658586][T19186] 9pnet_virtio: no channels available for device syz
[ 1044.669271][ T6007] kaweth 2-1:0.0: MTU: 0
[ 1044.690045][ T6007] kaweth 2-1:0.0: Read MAC address 00:00:00:00:00:00
[ 1045.339743][T19190] team0: No ports can be present during mode change
[ 1045.390078][ T6007] kaweth 2-1:0.0: kaweth interface created at eth17
[ 1045.612235][   T30] audit: type=1400 audit(1766530107.104:1540): avc:  denied  { write } for  pid=19196 comm="syz.8.3163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[ 1045.811871][T19201] sock: sock_timestamping_bind_phc: sock not bind to device
[ 1045.996042][    T9] usb 2-1: USB disconnect, device number 121
[ 1046.168716][   T30] audit: type=1400 audit(1766530107.664:1541): avc:  denied  { read } for  pid=19210 comm="syz.8.3165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 1046.190561][T19211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1046.202591][T19211] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1047.096881][T19224] Mount JFS Failure: -5
[ 1047.101137][T19224] jfs_mount failed w/return code = -5
[ 1047.657091][ T5930] usb 48-1: device descriptor read/8, error -110
[ 1047.992243][T19230] netlink: 'syz.8.3170': attribute type 4 has an invalid length.
[ 1048.078587][ T5930] usb usb48-port1: attempt power cycle
[ 1048.136928][    T9] usb 2-1: new high-speed USB device number 122 using dummy_hcd
[ 1048.297165][    T9] usb 2-1: Using ep0 maxpacket: 32
[ 1048.309296][    T9] usb 2-1: config 0 has an invalid interface number: 4 but max is 0
[ 1048.325621][    T9] usb 2-1: config 0 has no interface number 0
[ 1048.336921][    T9] usb 2-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1048.356102][    T9] usb 2-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1048.366089][    T9] usb 2-1: config 0 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1048.379375][    T9] usb 2-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00
[ 1048.388998][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1048.399574][    T9] usb 2-1: config 0 descriptor??
[ 1048.667892][ T5930] usb usb48-port1: unable to enumerate USB device
[ 1048.701014][T19235] netlink: 'syz.5.3172': attribute type 2 has an invalid length.
[ 1048.726421][T19235] : entered promiscuous mode
[ 1048.809413][T19236] GUP no longer grows the stack in syz.5.3172 (19236): 200000005000-200000008000 (200000004000)
[ 1048.820909][T19236] CPU: 1 UID: 0 PID: 19236 Comm: syz.5.3172 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1048.820942][T19236] Tainted: [L]=SOFTLOCKUP
[ 1048.820949][T19236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1048.820960][T19236] Call Trace:
[ 1048.820967][T19236]  <TASK>
[ 1048.820974][T19236]  dump_stack_lvl+0x16c/0x1f0
[ 1048.821003][T19236]  gup_vma_lookup+0x1d2/0x220
[ 1048.821030][T19236]  fixup_user_fault+0x26e/0x540
[ 1048.821051][T19236]  ? futex_lock_pi+0x687/0x7c0
[ 1048.821070][T19236]  fault_in_user_writeable+0x70/0xe0
[ 1048.821095][T19236]  futex_lock_pi+0x690/0x7c0
[ 1048.821118][T19236]  ? __pfx_futex_lock_pi+0x10/0x10
[ 1048.821134][T19236]  ? __futex_wait+0x24b/0x2f0
[ 1048.821173][T19236]  ? futex_private_hash_put+0x160/0x1b0
[ 1048.821202][T19236]  ? __pfx_futex_wake_mark+0x10/0x10
[ 1048.821236][T19236]  do_futex+0x11a/0x350
[ 1048.821262][T19236]  ? __pfx_do_futex+0x10/0x10
[ 1048.821289][T19236]  ? __vm_munmap+0x1d2/0x380
[ 1048.821315][T19236]  __x64_sys_futex+0x1e0/0x4c0
[ 1048.821346][T19236]  ? __pfx___x64_sys_futex+0x10/0x10
[ 1048.821373][T19236]  ? xfd_validate_state+0x61/0x180
[ 1048.821402][T19236]  do_syscall_64+0xcd/0xf80
[ 1048.821429][T19236]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1048.821449][T19236] RIP: 0033:0x7fd710f8f749
[ 1048.821465][T19236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1048.821483][T19236] RSP: 002b:00007fd711e6f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1048.821502][T19236] RAX: ffffffffffffffda RBX: 00007fd7111e6360 RCX: 00007fd710f8f749
[ 1048.821515][T19236] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000
[ 1048.821528][T19236] RBP: 00007fd711013f91 R08: 0000000000000000 R09: 0000000000000000
[ 1048.821548][T19236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1048.821561][T19236] R13: 00007fd7111e63f8 R14: 00007fd7111e6360 R15: 00007ffd114c4e08
[ 1048.821589][T19236]  </TASK>
[ 1048.829519][    T9] uclogic 0003:28BD:0905.0029: interface is invalid, ignoring
[ 1049.196468][T19239] openvswitch: netlink: Flow key attr not present in new flow.
[ 1049.754856][    T9] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[ 1050.055685][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1050.078674][    T9] usb 3-1: not running at top speed; connect to a high speed hub
[ 1050.120304][    T9] usb 3-1: config 17 has an invalid interface number: 8 but max is 1
[ 1050.135936][    T9] usb 3-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config
[ 1050.150688][    T9] usb 3-1: config 17 has 1 interface, different from the descriptor's value: 2
[ 1050.172888][    T9] usb 3-1: config 17 has no interface number 0
[ 1050.183065][    T9] usb 3-1: config 17 interface 8 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1050.216420][   T30] audit: type=1400 audit(1766530111.704:1542): avc:  denied  { getopt } for  pid=19243 comm="syz.7.3174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[ 1050.238175][    T9] usb 3-1: config 17 interface 8 has no altsetting 0
[ 1050.248829][    T9] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff
[ 1050.258033][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1050.266247][    T9] usb 3-1: Product: syz
[ 1050.292431][    T9] usb 3-1: Manufacturer: syz
[ 1050.298422][    T9] usb 3-1: SerialNumber: syz
[ 1050.544910][T19252] vim2m vim2m.0: Fourcc format (0x31384142) invalid.
[ 1050.553897][   T30] audit: type=1400 audit(1766530112.044:1543): avc:  denied  { accept } for  pid=19251 comm="syz.7.3177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[ 1050.706402][    T9] usb 3-1: selecting invalid altsetting 0
[ 1050.759391][    T9] usb 3-1: USB disconnect, device number 2
[ 1050.899470][T19000] udevd[19000]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1050.934323][ T6007] usb 2-1: USB disconnect, device number 122
[ 1051.201740][T19268] team0: Unable to change to the same mode the team is in
[ 1051.220721][   T30] audit: type=1326 audit(1766530112.714:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19267 comm="syz.1.3181" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa24f58f749 code=0x0
[ 1051.468909][T19274] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3183'.
[ 1052.324222][T19283] overlayfs: failed to resolve './file0': -2
[ 1052.452645][T19284] batman_adv: batadv0: Interface deactivated: macvtap1
[ 1052.474237][T19284] batman_adv: batadv0: Removing interface: macvtap1
[ 1053.279695][ T6007] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[ 1053.288775][T19300] ip6t_srh: unknown srh invflags 4000
[ 1053.296754][T18958] usb 2-1: new full-speed USB device number 123 using dummy_hcd
[ 1053.458636][T18958] usb 2-1: config 0 has an invalid interface number: 133 but max is 0
[ 1053.467059][T18958] usb 2-1: config 0 has no interface number 0
[ 1053.474982][ T6007] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1053.534706][ T6007] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1053.605719][T18958] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[ 1053.618397][ T6007] usb 3-1: Product: syz
[ 1053.622586][ T6007] usb 3-1: Manufacturer: syz
[ 1053.627542][T18958] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1053.635798][T18958] usb 2-1: Product: syz
[ 1053.641393][T18958] usb 2-1: Manufacturer: syz
[ 1053.644669][T19308] team0: No ports can be present during mode change
[ 1053.646221][T18958] usb 2-1: SerialNumber: syz
[ 1053.657855][ T6007] usb 3-1: SerialNumber: syz
[ 1053.675915][T18958] usb 2-1: config 0 descriptor??
[ 1053.696102][ T6007] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1053.718886][T10082] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1054.069404][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.077014][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[ 1054.258329][T18958] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected
[ 1054.288656][T18958] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81
[ 1054.296666][T18958] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1
[ 1054.325547][T18958] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2
[ 1054.349202][T18958] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[ 1054.482518][    T9] usb 2-1: USB disconnect, device number 123
[ 1054.517885][    T9] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[ 1054.564561][    T9] keyspan 2-1:0.133: device disconnected
[ 1054.778582][T10082] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 1054.796014][T10082] ath9k_htc: Failed to initialize the device
[ 1054.848173][T10082] usb 3-1: ath9k_htc: USB layer deinitialized
[ 1055.068440][    T9] usb 3-1: USB disconnect, device number 3
[ 1055.858042][T19346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1055.916858][T19346] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1055.957342][T19349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1056.911765][T19349] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1056.912780][T19354] team0: No ports can be present during mode change
[ 1057.037056][T18958] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[ 1057.063529][T19358] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3207'.
[ 1057.075886][T19358] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3207'.
[ 1057.197209][T18958] usb 3-1: Using ep0 maxpacket: 32
[ 1057.203803][T18958] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[ 1057.223697][T18958] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1057.248976][T18958] usb 3-1: config 0 descriptor??
[ 1057.262507][T18958] gspca_main: sunplus-2.14.0 probing 041e:400b
[ 1057.497615][T18958] gspca_sunplus: reg_w_riv err -71
[ 1057.502783][T18958] sunplus 3-1:0.0: probe with driver sunplus failed with error -71
[ 1057.527615][ T6007] usb 6-1: new high-speed USB device number 115 using dummy_hcd
[ 1057.538683][T18958] usb 3-1: USB disconnect, device number 4
[ 1057.554801][T19366] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1057.796875][    T9] usb 2-1: new high-speed USB device number 124 using dummy_hcd
[ 1057.836968][ T6007] usb 6-1: Using ep0 maxpacket: 32
[ 1057.845829][ T6007] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1057.868023][ T6007] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1057.897657][ T6007] usb 6-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00
[ 1057.907114][ T6007] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1057.928752][ T6007] usb 6-1: config 0 descriptor??
[ 1057.956940][    T9] usb 2-1: Using ep0 maxpacket: 8
[ 1057.971953][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1058.034304][    T9] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1058.048491][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1058.070551][    T9] usb 2-1: config 0 descriptor??
[ 1058.192940][   T30] audit: type=1400 audit(1766530119.684:1545): avc:  denied  { unmount } for  pid=12489 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[ 1058.944507][ T6007] elo 0003:04E7:0009.002A: unknown main item tag 0x0
[ 1058.976348][ T6007] elo 0003:04E7:0009.002A: unknown main item tag 0x0
[ 1058.987192][ T6007] elo 0003:04E7:0009.002A: unknown main item tag 0x0
[ 1058.994629][ T6007] elo 0003:04E7:0009.002A: unknown main item tag 0x0
[ 1059.002513][    T9] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1059.020090][ T6007] elo 0003:04E7:0009.002A: hidraw0: USB HID v0.00 Device [HID 04e7:0009] on usb-dummy_hcd.5-1/input0
[ 1059.846754][T19392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1059.924560][T19392] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1060.779383][T18958] usb 6-1: USB disconnect, device number 115
[ 1061.190202][T19080] usb 2-1: USB disconnect, device number 124
[ 1061.446888][T18958] usb 6-1: new high-speed USB device number 116 using dummy_hcd
[ 1061.462786][T19427] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 1061.606874][T18958] usb 6-1: device descriptor read/64, error -71
[ 1061.746844][ T6007] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[ 1061.857006][T18958] usb 6-1: new high-speed USB device number 117 using dummy_hcd
[ 1061.988388][T19434] binder: 19430:19434 ioctl 8108551b 200000000200 returned -22
[ 1062.034912][ T6007] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1062.047729][T18958] usb 6-1: device descriptor read/64, error -71
[ 1062.074876][ T6007] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1062.100528][ T6007] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1062.125975][ T6007] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1062.148965][ T6007] usb 3-1: SerialNumber: syz
[ 1062.159001][T18958] usb usb6-port1: attempt power cycle
[ 1062.309908][T19439] FAULT_INJECTION: forcing a failure.
[ 1062.309908][T19439] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1062.415917][T19412] [U] 
[ 1062.421682][ T6007] usb 3-1: 0:2 : does not exist
[ 1062.434558][ T6007] usb 3-1: unit 5 not found!
[ 1062.439677][T19439] CPU: 1 UID: 0 PID: 19439 Comm: syz.7.3227 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1062.439704][T19439] Tainted: [L]=SOFTLOCKUP
[ 1062.439711][T19439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1062.439722][T19439] Call Trace:
[ 1062.439729][T19439]  <TASK>
[ 1062.439736][T19439]  dump_stack_lvl+0x16c/0x1f0
[ 1062.439764][T19439]  should_fail_ex+0x512/0x640
[ 1062.439796][T19439]  _copy_to_iter+0x463/0x1710
[ 1062.439827][T19439]  ? __pfx__copy_to_iter+0x10/0x10
[ 1062.439853][T19439]  ? __kvmalloc_node_noprof+0x3c9/0xa40
[ 1062.439876][T19439]  ? __pfx_sync_info_debugfs_show+0x10/0x10
[ 1062.439894][T19439]  ? seq_read_iter+0x830/0x12d0
[ 1062.439921][T19439]  seq_read_iter+0xd02/0x12d0
[ 1062.439954][T19439]  seq_read+0x3a3/0x570
[ 1062.439975][T19439]  ? __pfx_seq_read+0x10/0x10
[ 1062.439998][T19439]  ? lock_acquire+0x179/0x330
[ 1062.440023][T19439]  ? __pfx___might_resched+0x10/0x10
[ 1062.440039][T19439]  ? avc_policy_seqno+0x9/0x20
[ 1062.440070][T19439]  ? rw_verify_area+0xcf/0x6c0
[ 1062.440087][T19439]  ? __pfx_seq_read+0x10/0x10
[ 1062.440108][T19439]  vfs_read+0x1e4/0xcf0
[ 1062.440128][T19439]  ? __pfx___mutex_lock+0x10/0x10
[ 1062.440151][T19439]  ? __pfx_vfs_read+0x10/0x10
[ 1062.440176][T19439]  ? __fget_files+0x20e/0x3c0
[ 1062.440209][T19439]  ksys_read+0x12a/0x250
[ 1062.440230][T19439]  ? __pfx_ksys_read+0x10/0x10
[ 1062.440260][T19439]  do_syscall_64+0xcd/0xf80
[ 1062.440286][T19439]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1062.440304][T19439] RIP: 0033:0x7f56b3d8f749
[ 1062.440318][T19439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1062.440335][T19439] RSP: 002b:00007f56b4c6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1062.440351][T19439] RAX: ffffffffffffffda RBX: 00007f56b3fe5fa0 RCX: 00007f56b3d8f749
[ 1062.440363][T19439] RDX: 0000000000002020 RSI: 0000200000000800 RDI: 0000000000000005
[ 1062.440374][T19439] RBP: 00007f56b4c6f090 R08: 0000000000000000 R09: 0000000000000000
[ 1062.440384][T19439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1062.440401][T19439] R13: 00007f56b3fe6038 R14: 00007f56b3fe5fa0 R15: 00007ffc4c642438
[ 1062.440426][T19439]  </TASK>
[ 1062.672595][ T6007] usb 3-1: USB disconnect, device number 5
[ 1062.695430][T19000] udevd[19000]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1062.747171][T18958] usb 6-1: new high-speed USB device number 118 using dummy_hcd
[ 1062.767452][T18958] usb 6-1: device descriptor read/8, error -71
[ 1062.827584][T19443] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1062.846096][T19443] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1063.009778][T18958] usb 6-1: new high-speed USB device number 119 using dummy_hcd
[ 1063.037453][T18958] usb 6-1: device descriptor read/8, error -71
[ 1063.147266][T18958] usb usb6-port1: unable to enumerate USB device
[ 1063.694694][T19453] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1063.793585][T19455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1063.805188][T19455] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1063.829573][T19455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1063.891928][T19455] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1064.487644][T19466] team0: No ports can be present during mode change
[ 1064.588695][T19468] FAULT_INJECTION: forcing a failure.
[ 1064.588695][T19468] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1064.621093][T19468] CPU: 0 UID: 0 PID: 19468 Comm: syz.8.3238 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1064.621114][T19468] Tainted: [L]=SOFTLOCKUP
[ 1064.621118][T19468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1064.621125][T19468] Call Trace:
[ 1064.621129][T19468]  <TASK>
[ 1064.621134][T19468]  dump_stack_lvl+0x16c/0x1f0
[ 1064.621153][T19468]  should_fail_ex+0x512/0x640
[ 1064.621173][T19468]  _copy_to_user+0x32/0xd0
[ 1064.621191][T19468]  simple_read_from_buffer+0xcb/0x170
[ 1064.621208][T19468]  proc_fail_nth_read+0x197/0x240
[ 1064.621221][T19468]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1064.621234][T19468]  ? rw_verify_area+0xcf/0x6c0
[ 1064.621246][T19468]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1064.621258][T19468]  vfs_read+0x1e4/0xcf0
[ 1064.621273][T19468]  ? __pfx___mutex_lock+0x10/0x10
[ 1064.621290][T19468]  ? __pfx_vfs_read+0x10/0x10
[ 1064.621309][T19468]  ? __fget_files+0x20e/0x3c0
[ 1064.621329][T19468]  ksys_read+0x12a/0x250
[ 1064.621343][T19468]  ? __pfx_ksys_read+0x10/0x10
[ 1064.621361][T19468]  do_syscall_64+0xcd/0xf80
[ 1064.621377][T19468]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1064.621389][T19468] RIP: 0033:0x7fb8da18e15c
[ 1064.621399][T19468] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1064.621410][T19468] RSP: 002b:00007fb8db017030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1064.621422][T19468] RAX: ffffffffffffffda RBX: 00007fb8da3e5fa0 RCX: 00007fb8da18e15c
[ 1064.621429][T19468] RDX: 000000000000000f RSI: 00007fb8db0170a0 RDI: 0000000000000006
[ 1064.621435][T19468] RBP: 00007fb8db017090 R08: 0000000000000000 R09: 0000000000000000
[ 1064.621442][T19468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1064.621448][T19468] R13: 00007fb8da3e6038 R14: 00007fb8da3e5fa0 R15: 00007fffe5c762d8
[ 1064.621463][T19468]  </TASK>
[ 1065.017725][    T9] usb 6-1: new low-speed USB device number 120 using dummy_hcd
[ 1065.198500][    T9] usb 6-1: config index 0 descriptor too short (expected 1307, got 27)
[ 1065.216616][    T9] usb 6-1: config 0 has an invalid interface number: 0 but max is -1
[ 1065.224787][    T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 1065.233750][    T9] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[ 1065.244816][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1065.254571][    T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[ 1065.267874][T19478] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 1065.292330][    T9] usb 6-1: string descriptor 0 read error: -22
[ 1065.308968][    T9] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[ 1065.334447][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1065.378452][    T9] usb 6-1: config 0 descriptor??
[ 1065.392026][    T9] hub 6-1:0.0: bad descriptor, ignoring hub
[ 1065.408162][    T9] hub 6-1:0.0: probe with driver hub failed with error -5
[ 1066.557029][T18958] usb 6-1: USB disconnect, device number 120
[ 1066.661948][T19499] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3245'.
[ 1066.732227][T19502] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3245'.
[ 1067.069617][T19512] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3248'.
[ 1067.184630][T19512] netlink: 72 bytes leftover after parsing attributes in process `syz.8.3248'.
[ 1067.318687][T19519] ipt_ECN: cannot use operation on non-tcp rule
[ 1068.540894][   T30] audit: type=1400 audit(1766530129.684:1546): avc:  denied  { connect } for  pid=19531 comm="syz.7.3257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[ 1068.979335][T19548] overlayfs: failed to resolve './file1': -2
[ 1069.004225][T19542] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=100 sclass=netlink_tcpdiag_socket pid=19542 comm=syz.5.3258
[ 1069.750826][T19559] bridge2: entered allmulticast mode
[ 1070.445344][T19561] can0: slcan on ttyS3.
[ 1070.628966][T19561] can0 (unregistered): slcan off ttyS3.
[ 1070.746881][ T6007] usb 2-1: new high-speed USB device number 125 using dummy_hcd
[ 1070.778417][T19572] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma?
[ 1070.909901][ T4046] Bluetooth: hci0: Frame reassembly failed (-84)
[ 1070.911187][T13311] Bluetooth: hci0: unexpected event 0x0f length: 0 < 4
[ 1070.917111][ T6007] usb 2-1: Using ep0 maxpacket: 16
[ 1070.948275][ T6007] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1070.961496][ T4046] Bluetooth: hci0: Frame reassembly failed (-84)
[ 1070.968068][ T6007] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1070.979074][ T6007] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1070.990754][ T6007] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1071.000730][ T6007] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1071.014818][ T6007] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1071.024606][ T6007] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1071.032950][ T6007] usb 2-1: Manufacturer: syz
[ 1071.040487][ T6007] usb 2-1: config 0 descriptor??
[ 1071.186484][   T30] audit: type=1400 audit(1766530132.674:1547): avc:  denied  { accept } for  pid=19584 comm="syz.7.3271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1071.226958][   T30] audit: type=1400 audit(1766530132.714:1548): avc:  denied  { getattr } for  pid=19570 comm="syz.5.3267" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=78482 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1071.316849][ T6007] rc_core: IR keymap rc-hauppauge not found
[ 1071.322779][ T6007] Registered IR keymap rc-empty
[ 1071.450950][ T6007] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1071.496985][ T6007] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1071.516546][T19595] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3271'.
[ 1071.578907][ T6007] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[ 1071.592781][   T30] audit: type=1400 audit(1766530133.064:1549): avc:  denied  { mount } for  pid=19586 comm="syz.2.3272" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[ 1071.619602][ T6007] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input74
[ 1071.676179][ T6007] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1071.749135][ T6007] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1071.777533][ T6007] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1071.797311][ T6007] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1071.817038][    T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[ 1071.817960][ T6007] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1071.867036][ T6007] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1071.887021][ T6007] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1071.910481][ T6007] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1071.936929][ T6007] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1071.967304][ T6007] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1072.000663][ T6007] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1072.012005][ T6007] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1072.031228][    T9] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1072.041739][    T9] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1072.077887][ T6007] usb 2-1: USB disconnect, device number 125
[ 1072.093022][    T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1072.124677][    T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1072.182521][    T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1072.210855][    T9] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1072.231612][    T9] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1072.246422][    T9] usb 3-1: Product: syz
[ 1072.254936][    T9] usb 3-1: Manufacturer: syz
[ 1072.276457][    T9] cdc_wdm 3-1:1.0: skipping garbage
[ 1072.287090][    T9] cdc_wdm 3-1:1.0: skipping garbage
[ 1072.300665][    T9] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[ 1072.313881][    T9] cdc_wdm 3-1:1.0: Unknown control protocol
[ 1072.938529][T13311] Bluetooth: hci0: command 0x1003 tx timeout
[ 1072.947919][ T5826] Bluetooth: hci0: Opcode 0x1003 failed: -110
[ 1073.302128][T19617] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3275'.
[ 1073.422191][T19620] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3277'.
[ 1073.456371][T19617] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 1073.466952][T19620] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3277'.
[ 1074.485923][    T9] usb 3-1: USB disconnect, device number 6
[ 1074.526363][T19636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1074.542101][T19636] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1074.592367][T19636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1074.651901][T19636] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1074.777810][T19080] usb 2-1: new high-speed USB device number 126 using dummy_hcd
[ 1075.276835][T19080] usb 2-1: Using ep0 maxpacket: 32
[ 1075.283564][T19080] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1075.294762][T19080] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1075.319393][T19080] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 1075.358454][T19080] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1075.514791][T19080] usb 2-1: config 0 descriptor??
[ 1075.530557][T19647] overlay: Bad value for 'workdir'
[ 1075.740717][T19652] overlayfs: failed to resolve './file1': -2
[ 1075.916959][ T5930] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[ 1075.999132][T19080] ft260 0003:0403:6030.002B: unknown main item tag 0x7
[ 1076.078389][ T5930] usb 3-1: Using ep0 maxpacket: 16
[ 1076.078463][   T24] usb 6-1: new high-speed USB device number 121 using dummy_hcd
[ 1076.256121][ T5930] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11
[ 1076.260810][T19080] ft260 0003:0403:6030.002B: chip code: 6424 8183
[ 1076.276335][ T5930] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[ 1076.358045][   T24] usb 6-1: Using ep0 maxpacket: 32
[ 1076.378123][   T24] usb 6-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[ 1076.387506][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1076.395540][   T24] usb 6-1: Product: syz
[ 1076.410713][ T5930] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[ 1076.414248][   T24] usb 6-1: Manufacturer: syz
[ 1076.431198][ T5930] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[ 1076.441216][   T24] usb 6-1: SerialNumber: syz
[ 1076.460423][   T24] usb 6-1: config 0 descriptor??
[ 1076.460474][T19080] ft260 0003:0403:6030.002B: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0
[ 1076.476847][ T5930] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[ 1076.488107][ T5930] usb 3-1: config 1 interface 0 has no altsetting 0
[ 1076.659093][   T24] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[ 1076.831711][T19080] ft260 0003:0403:6030.002B: failed to retrieve status: -32, no wakeup
[ 1076.840133][ T5930] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[ 1076.849422][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1076.880851][ T5930] ums-sddr09 3-1:1.0: USB Mass Storage device detected
[ 1077.000452][T19677] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input75
[ 1077.028440][T19679] ft260 0003:0403:6030.002B: unsupported smbus transaction size 4
[ 1077.054566][T19679] i2c i2c-1: adapter quirk: msg too long (addr 0x0000, size 3, write)
[ 1077.132078][T19637] netlink: 'syz.1.3281': attribute type 12 has an invalid length.
[ 1077.140014][T19637] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.3281'.
[ 1077.173179][ T5930] ums-sddr09 3-1:1.0: probe with driver ums-sddr09 failed with error -22
[ 1077.211986][ T5930] usb 3-1: USB disconnect, device number 7
[ 1077.377583][T19694] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR
[ 1078.342512][ T6007] usb 2-1: USB disconnect, device number 126
[ 1078.360354][   T24] gspca_topro: reg_r err -71
[ 1078.369754][   T24] gspca_topro: Sensor soi763a
[ 1078.394973][   T24] usb 6-1: USB disconnect, device number 121
[ 1079.181496][T19737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3308'.
[ 1079.486875][ T5930] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[ 1079.758102][ T5930] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1079.768864][ T5930] usb 3-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1079.921875][ T5930] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1079.934627][ T5930] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1080.006916][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1080.051870][ T5930] usb 3-1: Product: syz
[ 1080.255056][ T5930] usb 3-1: Manufacturer: syz
[ 1080.262940][ T5930] usb 3-1: SerialNumber: syz
[ 1080.328739][ T5930] usb 3-1: config 0 descriptor??
[ 1080.696254][T19765] overlayfs: missing 'lowerdir'
[ 1080.696254][T19739] overlayfs: missing 'lowerdir'
[ 1080.722263][ T5930] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22
[ 1080.885335][T19688] udevd[19688]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1080.904388][T19770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3311'.
[ 1080.904388][T19765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3311'.
[ 1080.904411][T19765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3311'.
[ 1080.913399][T19770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3311'.
[ 1081.089160][T19778] netlink: 'syz.1.3319': attribute type 30 has an invalid length.
[ 1081.161582][T19779] netlink: 'syz.1.3319': attribute type 30 has an invalid length.
[ 1081.300482][T19781] 9pnet_virtio: no channels available for device syz
[ 1082.285715][T19080] usb 3-1: USB disconnect, device number 8
[ 1082.817091][T19801] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3325'.
[ 1082.851637][T19801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1082.875918][T19801] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1083.748021][T19834] netlink: 'syz.5.3333': attribute type 30 has an invalid length.
[ 1083.801732][T19836] netlink: 'syz.5.3333': attribute type 30 has an invalid length.
[ 1083.920749][T19839] 9pnet_virtio: no channels available for device syz
[ 1084.488883][   T24] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[ 1084.723756][   T24] usb 3-1: config index 0 descriptor too short (expected 45, got 36)
[ 1084.731924][   T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1084.743846][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1084.764247][   T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1084.842386][   T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1084.857017][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1084.889096][   T24] usb 3-1: config 0 descriptor??
[ 1084.953614][T19852] overlayfs: overlapping lowerdir path
[ 1084.992810][   T24] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 1086.296875][T19080] usb 2-1: new full-speed USB device number 127 using dummy_hcd
[ 1086.400254][T19882] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1086.411323][T19882] Bluetooth: hci5: Opcode 0x0406 failed: -4
[ 1086.459655][T19882] Bluetooth: hci5: Opcode 0x0406 failed: -4
[ 1086.469901][T19080] usb 2-1: config 0 has an invalid interface number: 227 but max is 0
[ 1086.490954][T19080] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1086.511295][T19882] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1086.519430][T19080] usb 2-1: config 0 has no interface number 0
[ 1086.525666][T19882] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 1086.534581][T19080] usb 2-1: config 0 interface 227 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64
[ 1086.548632][T19080] usb 2-1: config 0 interface 227 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64
[ 1086.563595][T19882] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 1086.579131][T19080] usb 2-1: config 0 interface 227 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 11
[ 1086.714532][T19080] usb 2-1: New USB device found, idVendor=046d, idProduct=0920, bcdDevice=49.d0
[ 1086.723848][T19080] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1086.732030][T19080] usb 2-1: Product: syz
[ 1086.736297][T19080] usb 2-1: Manufacturer: syz
[ 1086.741469][T19080] usb 2-1: SerialNumber: syz
[ 1086.751951][T19080] usb 2-1: config 0 descriptor??
[ 1087.267273][T19080] gspca_main: tv8532-2.14.0 probing 046d:0920
[ 1087.308225][T19080] usb 2-1: USB disconnect, device number 127
[ 1087.324261][   T30] audit: type=1400 audit(1766530148.814:1550): avc:  denied  { ioctl } for  pid=19892 comm="syz.8.3347" path="socket:[80277]" dev="sockfs" ino=80277 ioctlcmd=0x64bf scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 1087.355265][T19893] vlan2: entered promiscuous mode
[ 1087.362669][T19893] bridge0: entered promiscuous mode
[ 1087.891254][T19080] usb 3-1: USB disconnect, device number 9
[ 1088.297058][T13311] Bluetooth: hci5: command 0x0c1a tx timeout
[ 1088.525610][T19907] trusted_key: encrypted_key: insufficient parameters specified
[ 1088.597335][T13311] Bluetooth: hci2: command 0x0405 tx timeout
[ 1089.092405][T19080] usb 6-1: new high-speed USB device number 122 using dummy_hcd
[ 1089.601620][T19929] netlink: 88 bytes leftover after parsing attributes in process `syz.7.3358'.
[ 1089.658671][T19080] usb 6-1: config 0 has no interfaces?
[ 1089.770808][T19080] usb 6-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02
[ 1089.788703][T19080] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1089.799023][T19080] usb 6-1: SerialNumber: syz
[ 1089.811241][T19080] usb 6-1: config 0 descriptor??
[ 1089.955057][T19935] Mount JFS Failure: -5
[ 1089.959324][T19935] jfs_mount failed w/return code = -5
[ 1090.214697][T19938] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3361'.
[ 1090.337995][T19938] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[ 1090.376838][T13311] Bluetooth: hci5: command 0x0c1a tx timeout
[ 1090.840478][ T5826] Bluetooth: hci2: command 0x0405 tx timeout
[ 1090.987056][T19080] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[ 1091.007053][T18958] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[ 1091.357030][T18958] usb 3-1: Using ep0 maxpacket: 32
[ 1091.395754][T18958] usb 3-1: config index 0 descriptor too short (expected 6683, got 27)
[ 1091.404232][T19080] usb 2-1: Using ep0 maxpacket: 8
[ 1091.411085][T19080] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[ 1091.419544][T19080] usb 2-1: config 179 has no interface number 0
[ 1091.424561][T18958] usb 3-1: config 0 has an invalid interface number: 85 but max is 0
[ 1091.425831][T19080] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[ 1091.484757][T18958] usb 3-1: config 0 has no interface number 0
[ 1091.485118][T19080] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[ 1091.502791][T19080] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[ 1091.514327][T19080] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[ 1091.526091][T19080] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1091.526847][T18958] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1091.551395][T18958] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1091.571590][T18958] usb 3-1: config 0 interface 85 has no altsetting 0
[ 1091.606012][T19080] usb 2-1: config 179 interface 65 has no altsetting 0
[ 1091.608781][T18958] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[ 1091.628499][T18958] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1091.636634][T18958] usb 3-1: Product: syz
[ 1091.641050][T18958] usb 3-1: Manufacturer: syz
[ 1091.645721][T18958] usb 3-1: SerialNumber: syz
[ 1091.651902][T19080] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[ 1091.654015][T18958] usb 3-1: config 0 descriptor??
[ 1091.701032][T19080] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1091.808491][   T24] usb 6-1: USB disconnect, device number 122
[ 1091.852310][T19080] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input77
[ 1091.870456][T19952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1091.897387][T19952] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1091.960477][T18958] appletouch 3-1:0.85: Failed to read mode from device.
[ 1091.967716][ T5173] input input77: unable to receive magic message: -110
[ 1092.101455][T18958] appletouch 3-1:0.85: probe with driver appletouch failed with error -5
[ 1092.123660][ T5173] input input77: unable to receive magic message: -32
[ 1092.142839][T19938] 9p: Could not find request transport: f–€ådÃqG0x000000000000000d
[ 1092.149322][T18958] usb 3-1: USB disconnect, device number 10
[ 1092.167481][ T5173] input input77: unable to receive magic message: -32
[ 1092.187048][T19981] dlm: no locking on control device
[ 1092.197960][ T5173] input input77: unable to receive magic message: -32
[ 1092.271808][ T5173] input input77: unable to receive magic message: -32
[ 1092.334653][ T5173] input input77: unable to receive magic message: -32
[ 1092.345460][ T5173] input input77: unable to receive magic message: -32
[ 1092.373832][T19987] block device autoloading is deprecated and will be removed.
[ 1092.387381][T19080] usb 2-1: USB disconnect, device number 2
[ 1092.393249][    C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 1092.393278][    C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[ 1092.468444][ T5826] Bluetooth: hci5: command 0x0c1a tx timeout
[ 1092.511499][T19990] program syz.5.3372 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1092.858821][ T5826] Bluetooth: hci2: command 0x0405 tx timeout
[ 1092.883901][T19998] netlink: 'syz.5.3377': attribute type 1 has an invalid length.
[ 1092.913668][T19998] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1092.970536][T19998] bond2: (slave veth3): Enslaving as an active interface with a down link
[ 1092.996862][T19998] vlan3: entered allmulticast mode
[ 1093.000462][T19992] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3374'.
[ 1093.002007][T19998] bond_slave_1: entered allmulticast mode
[ 1093.060481][T19998] bond2: (slave vlan3): Opening slave failed
[ 1093.086839][ T5930] usb 3-1: new full-speed USB device number 11 using dummy_hcd
[ 1094.118557][ T5930] usb 3-1: not running at top speed; connect to a high speed hub
[ 1094.137423][ T5930] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 1094.162594][ T5930] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1094.186887][ T5930] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1095.518190][T20023] netlink: 'syz.1.3382': attribute type 30 has an invalid length.
[ 1095.624631][T20025] netlink: 'syz.1.3382': attribute type 30 has an invalid length.
[ 1095.746935][T20026] 9pnet_virtio: no channels available for device syz
[ 1096.398399][ T5930] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1096.411492][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1096.445048][ T5930] usb 3-1: Product: �ꋒ伬᫛㢸�࿞駨㱾�졔禙ꚪ驶ἦ稯ガ枋Ｕ펣
[ 1096.486954][ T5930] usb 3-1: can't set config #1, error -71
[ 1096.498790][ T5930] usb 3-1: USB disconnect, device number 11
[ 1096.731439][   T24] libceph: connect (1)[c::]:6789 error -101
[ 1096.737619][   T24] libceph: mon0 (1)[c::]:6789 connect error
[ 1097.017837][ T5930] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[ 1097.024122][   T24] libceph: connect (1)[c::]:6789 error -101
[ 1097.067133][   T24] libceph: mon0 (1)[c::]:6789 connect error
[ 1097.072461][T20034] ceph: No mds server is up or the cluster is laggy
[ 1097.236882][ T5930] usb 3-1: Using ep0 maxpacket: 32
[ 1097.242341][  T493] Bluetooth: Error in BCSP hdr checksum
[ 1097.260577][ T5930] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 175, using maximum allowed: 30
[ 1097.274642][ T5930] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 175
[ 1097.312140][ T5930] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1097.323262][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1097.334810][ T5930] usb 3-1: config 0 descriptor??
[ 1097.559353][ T5930] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[ 1097.600900][ T5930] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1097.617527][ T5930] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[ 1097.636824][ T5930] usb 3-1: media controller created
[ 1097.671291][ T5930] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1099.025181][T13311] Bluetooth: hci0: command 0x1003 tx timeout
[ 1099.033017][ T5826] Bluetooth: hci0: Opcode 0x1003 failed: -110
[ 1099.756950][ T5930] az6027: usb out operation failed. (-110)
[ 1099.767186][ T5930] az6027: usb out operation failed. (-32)
[ 1099.772924][ T5930] stb0899_attach: Driver disabled by Kconfig
[ 1099.778977][ T5930] az6027: no front-end attached
[ 1099.778977][ T5930] 
[ 1099.799109][ T5930] az6027: usb out operation failed. (-32)
[ 1099.804861][ T5930] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[ 1099.844637][ T5930] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input78
[ 1099.866269][ T5930] dvb-usb: schedule remote query interval to 400 msecs.
[ 1099.873793][ T5930] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[ 1099.930406][   T24] usb 3-1: USB disconnect, device number 12
[ 1100.273161][   T24] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[ 1100.789175][T20089] Mount JFS Failure: -5
[ 1100.793374][T20089] jfs_mount failed w/return code = -5
[ 1101.520021][T20103] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 1101.856634][T20114] vivid-007: =================  START STATUS  =================
[ 1101.864463][T20114] vivid-007: FM Deviation: 75000
[ 1101.871498][T20114] vivid-007: ==================  END STATUS  ==================
[ 1102.246987][   T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[ 1102.356799][ T5930] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[ 1102.495552][T20126] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1102.657403][ T5930] usb 2-1: Using ep0 maxpacket: 8
[ 1102.685995][ T5930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1102.701829][ T5930] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1102.721036][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1102.752227][ T5930] usb 2-1: config 0 descriptor??
[ 1102.788945][   T24] usb 3-1: config 0 has no interfaces?
[ 1102.799244][   T24] usb 3-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02
[ 1102.820596][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1102.839709][   T24] usb 3-1: SerialNumber: syz
[ 1102.854445][   T24] usb 3-1: config 0 descriptor??
[ 1102.963567][ T5930] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1102.978102][ T8325] usb 6-1: new high-speed USB device number 123 using dummy_hcd
[ 1103.130059][   T24] IPVS: starting estimator thread 0...
[ 1103.148113][ T8325] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1103.216887][T20132] IPVS: using max 45 ests per chain, 108000 per kthread
[ 1103.295030][ T8325] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1103.305199][ T8325] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1103.313303][ T8325] usb 6-1: Product: syz
[ 1103.317556][ T8325] usb 6-1: Manufacturer: syz
[ 1103.322214][ T8325] usb 6-1: SerialNumber: syz
[ 1103.445561][T20138] netlink: 'syz.7.3410': attribute type 4 has an invalid length.
[ 1103.558211][T20131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1103.617459][T20131] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1103.716505][T20141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1103.790989][T20141] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1104.148687][T20130] ALSA: mixer_oss: invalid OSS volume '8ée°nÚ—HN'
[ 1104.155838][ T5930] usb 6-1: USB disconnect, device number 123
[ 1104.855826][ T5930] usb 3-1: USB disconnect, device number 13
[ 1106.608227][T20166] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3417'.
[ 1106.621381][T20166] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=20166 comm=syz.7.3417
[ 1107.207211][   T24] usb 2-1: USB disconnect, device number 3
[ 1107.385945][T20176] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3420'.
[ 1107.409744][T20176] bridge_slave_1: left allmulticast mode
[ 1107.415480][T20176] bridge_slave_1: left promiscuous mode
[ 1107.420379][T20179] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7)
[ 1107.427549][T20179] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1107.678889][T20176] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1107.760729][T20179] vhci_hcd vhci_hcd.0: Device attached
[ 1107.829997][ T5930] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[ 1107.861163][T20176] bridge_slave_0: left allmulticast mode
[ 1107.869108][T20186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1107.878210][T20176] bridge_slave_0: left promiscuous mode
[ 1107.887190][T20186] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1107.896086][T20176] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1107.911603][T20179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1107.928108][T20189] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1107.948773][T20179] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1108.016936][    T9] usb 49-1: new low-speed USB device number 2 using vhci_hcd
[ 1108.055033][T20191] netlink: 'syz.1.3424': attribute type 21 has an invalid length.
[ 1108.063464][ T5930] usb 3-1: Using ep0 maxpacket: 32
[ 1108.100248][ T5930] usb 3-1: config 0 has an invalid interface number: 172 but max is 0
[ 1108.108782][ T5930] usb 3-1: config 0 has no interface number 0
[ 1108.114885][ T5930] usb 3-1: config 0 interface 172 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1108.126030][ T5930] usb 3-1: config 0 interface 172 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1108.137739][ T5930] usb 3-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39
[ 1108.149786][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1108.158732][ T5930] usb 3-1: Product: syz
[ 1108.163028][ T5930] usb 3-1: Manufacturer: syz
[ 1108.168362][ T5930] usb 3-1: SerialNumber: syz
[ 1108.174453][ T5930] usb 3-1: config 0 descriptor??
[ 1108.181616][T20180] usb 49-1: recv xbuf, 0
[ 1108.181718][ T5930] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b
[ 1108.186211][ T3521] vhci_hcd vhci_hcd.8: stop threads
[ 1108.200390][ T3521] vhci_hcd vhci_hcd.8: release socket
[ 1108.205839][ T3521] vhci_hcd vhci_hcd.8: disconnect device
[ 1108.236906][T14761] usb 6-1: new high-speed USB device number 124 using dummy_hcd
[ 1108.256888][    T9] vhci_hcd vhci_hcd.8: vhci_device speed not set
[ 1108.318040][T19080] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[ 1108.879031][T14761] usb 6-1: device descriptor read/64, error -71
[ 1108.937232][T19080] usb 2-1: device descriptor read/64, error -71
[ 1108.944604][T20205] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 1109.195113][T20208] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3428'.
[ 1109.204317][T14761] usb 6-1: new high-speed USB device number 125 using dummy_hcd
[ 1109.212205][T19080] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[ 1109.347595][T14761] usb 6-1: device descriptor read/64, error -71
[ 1109.353953][T19080] usb 2-1: device descriptor read/64, error -71
[ 1109.361746][ T5930] input: gspca_pac7302 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input79
[ 1109.477256][T14761] usb usb6-port1: attempt power cycle
[ 1109.483207][T19080] usb usb2-port1: attempt power cycle
[ 1109.602387][    T9] usb 3-1: USB disconnect, device number 14
[ 1109.797547][T20219] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=48 sclass=netlink_tcpdiag_socket pid=20219 comm=syz.8.3431
[ 1109.826846][T19080] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[ 1109.834407][T14761] usb 6-1: new high-speed USB device number 126 using dummy_hcd
[ 1109.901255][T14761] usb 6-1: device descriptor read/8, error -71
[ 1109.964094][T19080] usb 2-1: device descriptor read/8, error -71
[ 1109.978043][T20225] netlink: 92 bytes leftover after parsing attributes in process `syz.8.3432'.
[ 1110.057541][   T30] audit: type=1400 audit(1766530171.534:1551): avc:  denied  { write } for  pid=20228 comm="syz.8.3434" path="socket:[81280]" dev="sockfs" ino=81280 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[ 1110.171443][T20237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1110.188180][T20237] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1110.199320][T20237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1110.217075][T14761] usb 6-1: new high-speed USB device number 127 using dummy_hcd
[ 1110.220471][T20237] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1110.255117][T14761] usb 6-1: device descriptor read/8, error -71
[ 1110.266944][T19080] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[ 1110.298541][T19080] usb 2-1: device descriptor read/8, error -71
[ 1110.301205][T20237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1110.353872][T20237] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1110.399933][T20237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1110.402868][T14761] usb usb6-port1: unable to enumerate USB device
[ 1110.419517][T19080] usb usb2-port1: unable to enumerate USB device
[ 1110.597826][T20237] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1110.606669][T20237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1110.616632][T20237] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1111.623620][T20250] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 1111.967141][    T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[ 1112.167001][T20271] lo speed is unknown, defaulting to 1000
[ 1112.173068][T20271] lo speed is unknown, defaulting to 1000
[ 1112.184573][T20271] lo speed is unknown, defaulting to 1000
[ 1112.254649][T20271] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[ 1112.512738][    T9] usb 2-1: Using ep0 maxpacket: 32
[ 1112.517506][T20271] lo speed is unknown, defaulting to 1000
[ 1112.525454][T20271] lo speed is unknown, defaulting to 1000
[ 1112.533112][T20271] lo speed is unknown, defaulting to 1000
[ 1112.533451][    T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 175, using maximum allowed: 30
[ 1112.540187][T20271] lo speed is unknown, defaulting to 1000
[ 1112.557761][T20271] lo speed is unknown, defaulting to 1000
[ 1112.583609][    T9] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 175
[ 1112.646240][    T9] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1112.683736][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1112.716076][T20280] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3446'.
[ 1112.755061][T20280] team0: No ports can be present during mode change
[ 1112.808639][    T9] usb 2-1: config 0 descriptor??
[ 1113.084884][T20288] netlink: 'syz.5.3447': attribute type 30 has an invalid length.
[ 1113.149121][    T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[ 1113.180078][T20286] netlink: 'syz.5.3447': attribute type 30 has an invalid length.
[ 1113.254441][T20290] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1113.295967][T20291] 9pnet_virtio: no channels available for device syz
[ 1113.361097][    T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1114.432792][    T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[ 1114.528216][    T9] usb 2-1: media controller created
[ 1114.605958][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1115.061699][    T9] az6027: usb out operation failed. (-71)
[ 1115.070179][    T9] az6027: usb out operation failed. (-71)
[ 1115.080372][    T9] stb0899_attach: Driver disabled by Kconfig
[ 1115.096337][    T9] az6027: no front-end attached
[ 1115.096337][    T9] 
[ 1115.124724][    T9] az6027: usb out operation failed. (-71)
[ 1115.134803][    T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[ 1115.143108][    T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input80
[ 1115.241294][    T9] dvb-usb: schedule remote query interval to 400 msecs.
[ 1115.271825][    T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[ 1115.299207][    T9] usb 2-1: USB disconnect, device number 8
[ 1115.463397][    T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[ 1115.500735][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[ 1115.509588][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[ 1115.696972][T20322] team0: No ports can be present during mode change
[ 1115.722775][T20323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1115.828447][T20323] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1116.590332][ T8325] libceph: connect (1)[c::]:6789 error -101
[ 1116.606505][ T8325] libceph: mon0 (1)[c::]:6789 connect error
[ 1117.027033][T20334] ceph: No mds server is up or the cluster is laggy
[ 1117.107091][T20340] ªªªªªªÿ·: renamed from lo (while UP)
[ 1118.222088][T20353] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3463'.
[ 1118.407619][T20359] netlink: 'syz.7.3462': attribute type 11 has an invalid length.
[ 1118.418049][T20359] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3462'.
[ 1119.117072][ T8325] libceph: connect (1)[c::]:6789 error -101
[ 1119.123180][ T8325] libceph: mon0 (1)[c::]:6789 connect error
[ 1119.389195][ T8325] libceph: connect (1)[c::]:6789 error -101
[ 1119.395210][ T8325] libceph: mon0 (1)[c::]:6789 connect error
[ 1119.587091][    T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[ 1120.716725][ T8325] libceph: connect (1)[c::]:6789 error -101
[ 1120.718780][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1120.722990][ T8325] libceph: mon0 (1)[c::]:6789 connect error
[ 1120.750451][T20372] ceph: No mds server is up or the cluster is laggy
[ 1120.790538][    T9] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[ 1121.128004][T20398] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3475'.
[ 1121.246811][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1121.289597][    T9] usb 2-1: config 0 descriptor??
[ 1121.404354][T20400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1121.479256][T20400] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1121.619503][   T30] audit: type=1400 audit(1766530183.114:1552): avc:  denied  { connect } for  pid=20405 comm="syz.5.3478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[ 1121.715155][    T9] lenovo 0003:17EF:6047.002C: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.1-1/input0
[ 1121.736856][   T30] audit: type=1326 audit(1766530183.194:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20405 comm="syz.5.3478" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd710f8f749 code=0x0
[ 1122.790631][ T8325] usb 2-1: USB disconnect, device number 9
[ 1122.955535][    T9] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[ 1122.976908][T20432] netlink: 'syz.2.3481': attribute type 4 has an invalid length.
[ 1123.579719][    T9] usb 6-1: device descriptor read/64, error -71
[ 1123.786289][T20437] netlink: 'syz.7.3483': attribute type 7 has an invalid length.
[ 1123.818083][T20437] netlink: 'syz.7.3483': attribute type 7 has an invalid length.
[ 1123.836393][    T9] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[ 1123.854145][T20437] netlink: 152 bytes leftover after parsing attributes in process `syz.7.3483'.
[ 1124.003296][    T9] usb 6-1: device descriptor read/64, error -71
[ 1124.152574][T20447] Mount JFS Failure: -5
[ 1124.156873][T20447] jfs_mount failed w/return code = -5
[ 1124.547081][    T9] usb usb6-port1: attempt power cycle
[ 1124.555919][T20449] netlink: 92 bytes leftover after parsing attributes in process `syz.8.3485'.
[ 1124.878626][T20457] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 1124.966876][    T9] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[ 1125.083126][T20466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1125.115664][T19080] IPVS: starting estimator thread 0...
[ 1125.123126][T20466] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1125.137731][    T9] usb 6-1: device descriptor read/8, error -71
[ 1125.216948][T20467] IPVS: using max 45 ests per chain, 108000 per kthread
[ 1125.386889][    T9] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[ 1125.457503][    T9] usb 6-1: device descriptor read/8, error -71
[ 1125.594164][    T9] usb usb6-port1: unable to enumerate USB device
[ 1126.072996][T20487] netlink: 'syz.8.3495': attribute type 4 has an invalid length.
[ 1127.121821][T20499] Mount JFS Failure: -5
[ 1127.126055][T20499] jfs_mount failed w/return code = -5
[ 1128.277069][ T8325] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[ 1128.297056][ T6007] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[ 1128.337310][T20509] hfsplus: unable to find HFS+ superblock
[ 1128.468043][ T6007] usb 2-1: Using ep0 maxpacket: 16
[ 1128.730723][ T8325] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1128.745441][ T6007] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 65, using maximum allowed: 30
[ 1128.758167][ T8325] usb 6-1: not running at top speed; connect to a high speed hub
[ 1128.768362][ T6007] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1128.786275][ T8325] usb 6-1: config 5 has an invalid interface number: 2 but max is 0
[ 1128.797890][ T6007] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 65
[ 1128.810983][ T8325] usb 6-1: config 5 has no interface number 0
[ 1128.817149][ T8325] usb 6-1: config 5 interface 2 has no altsetting 0
[ 1128.823823][ T6007] usb 2-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00
[ 1128.836603][ T8325] usb 6-1: string descriptor 0 read error: -22
[ 1128.847580][ T8325] usb 6-1: New USB device found, idVendor=09fb, idProduct=602e, bcdDevice=a9.9d
[ 1128.857581][ T6007] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1128.867970][ T8325] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1128.877611][ T6007] usb 2-1: config 0 descriptor??
[ 1129.048362][ T8325] ftdi_sio 6-1:5.2: FTDI USB Serial Device converter detected
[ 1129.329110][ T8325] ftdi_sio ttyUSB0: unknown device type: 0xa99d
[ 1129.766996][T20518] wireguard0: entered promiscuous mode
[ 1129.790650][T20518] wireguard0: entered allmulticast mode
[ 1129.792966][T20523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1129.807396][T20523] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1129.916183][T20518] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54442 sclass=netlink_route_socket pid=20518 comm=syz.8.3503
[ 1129.933705][ T6007] samsung 0003:0419:0001.002D: unknown main item tag 0x0
[ 1130.130355][ T6007] samsung 0003:0419:0001.002D: unknown main item tag 0x0
[ 1130.139583][ T6007] samsung 0003:0419:0001.002D: unknown main item tag 0x0
[ 1130.150693][ T6007] samsung 0003:0419:0001.002D: unknown main item tag 0x0
[ 1130.158042][ T6007] samsung 0003:0419:0001.002D: unknown main item tag 0x0
[ 1130.169102][ T6007] samsung 0003:0419:0001.002D: unknown main item tag 0x0
[ 1130.176373][ T6007] samsung 0003:0419:0001.002D: unknown main item tag 0x0
[ 1130.298923][ T6007] samsung 0003:0419:0001.002D: unknown main item tag 0x0
[ 1130.619551][ T8325] usb 6-1: USB disconnect, device number 6
[ 1130.639647][ T8325] ftdi_sio 6-1:5.2: device disconnected
[ 1130.646090][ T6007] samsung 0003:0419:0001.002D: unknown main item tag 0x0
[ 1130.657937][ T6007] samsung 0003:0419:0001.002D: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.1-1/input0
[ 1130.757538][ T6007] usb 2-1: USB disconnect, device number 10
[ 1130.808621][T20534] fido_id[20534]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[ 1131.327005][ T6007] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[ 1131.508570][ T6007] usb 2-1: config 0 has no interfaces?
[ 1131.519189][ T6007] usb 2-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02
[ 1131.531179][ T6007] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1131.541848][ T6007] usb 2-1: SerialNumber: syz
[ 1131.549138][ T6007] usb 2-1: config 0 descriptor??
[ 1131.585781][T20548] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3512'.
[ 1131.594792][T20548] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3512'.
[ 1131.603907][T20548] tipc: MTU too low for tipc bearer
[ 1131.610955][T20552] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20552 comm=syz.2.3514
[ 1131.644706][T20552] netlink: 'syz.2.3514': attribute type 1 has an invalid length.
[ 1131.697912][T20552] vlan2: entered allmulticast mode
[ 1131.706434][T20552] bond1: entered allmulticast mode
[ 1131.902927][    T9] usb 2-1: USB disconnect, device number 11
[ 1132.651674][T20563] netlink: 'syz.2.3516': attribute type 4 has an invalid length.
[ 1133.185341][T20572] netlink: 'syz.7.3518': attribute type 7 has an invalid length.
[ 1133.416844][ T5930] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[ 1133.568087][ T5930] usb 3-1: Using ep0 maxpacket: 8
[ 1133.575344][ T5930] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1133.584946][ T5930] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1133.598255][ T5930] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0104, bcdDevice=44.2b
[ 1133.607675][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1133.615770][ T5930] usb 3-1: Product: syz
[ 1133.620422][ T5930] usb 3-1: Manufacturer: syz
[ 1133.625441][ T5930] usb 3-1: SerialNumber: syz
[ 1133.838733][ T5930] kvaser_usb 3-1:1.0: error -ENODEV: Cannot get usb endpoint(s)
[ 1133.857238][ T5930] usb 3-1: USB disconnect, device number 15
[ 1134.726231][T20600] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1134.852379][T20603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1134.861312][T20603] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1134.947258][ T5930] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[ 1134.958173][T20610] netlink: 'syz.2.3528': attribute type 10 has an invalid length.
[ 1134.987712][T20610] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1135.007564][T20610] bond0: (slave batadv0): Enslaving as an active interface with an up link
[ 1135.127282][ T5930] usb 6-1: config 0 has no interfaces?
[ 1135.315449][ T5930] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1135.325736][ T5930] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1135.334014][ T5930] usb 6-1: Product: syz
[ 1135.338570][ T5930] usb 6-1: Manufacturer: syz
[ 1135.343166][ T5930] usb 6-1: SerialNumber: syz
[ 1135.366323][ T5930] usb 6-1: config 0 descriptor??
[ 1135.943773][T20622] kvm: user requested TSC rate below hardware speed
[ 1135.995965][T20622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1136.006914][T20622] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1136.234347][   T30] audit: type=1400 audit(1766530197.724:1554): avc:  denied  { map } for  pid=20626 comm="syz.1.3534" path="pipe:[83488]" dev="pipefs" ino=83488 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[ 1136.817178][   T30] audit: type=1400 audit(1766530198.234:1555): avc:  denied  { write } for  pid=20636 comm="syz.2.3538" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[ 1137.257016][   T24] usb 3-1: new low-speed USB device number 16 using dummy_hcd
[ 1137.726846][ T5930] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[ 1137.739616][ T6007] usb 6-1: USB disconnect, device number 7
[ 1137.767937][T20657] 
[ 1137.770293][T20657] ======================================================
[ 1137.777287][T20657] WARNING: possible circular locking dependency detected
[ 1137.784285][T20657] syzkaller #0 Tainted: G             L     
[ 1137.790234][T20657] ------------------------------------------------------
[ 1137.797226][T20657] syz.7.3543/20657 is trying to acquire lock:
[ 1137.803266][T20657] ffff888035d46888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570
[ 1137.812548][T20657] 
[ 1137.812548][T20657] but task is already holding lock:
[ 1137.819892][T20657] ffff888058a12468 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80
[ 1137.828160][T20657] 
[ 1137.828160][T20657] which lock already depends on the new lock.
[ 1137.828160][T20657] 
[ 1137.838547][T20657] 
[ 1137.838547][T20657] the existing dependency chain (in reverse order) is:
[ 1137.847548][T20657] 
[ 1137.847548][T20657] -> #2 (&pipe->mutex){+.+.}-{4:4}:
[ 1137.854917][T20657]        __mutex_lock+0x1aa/0x1ca0
[ 1137.860016][T20657]        anon_pipe_write+0x15d/0x1bd0
[ 1137.865381][T20657]        __kernel_write_iter+0x720/0xb10
[ 1137.871025][T20657]        __kernel_write+0xf5/0x140
[ 1137.876136][T20657]        autofs_notify_daemon+0x4db/0xd60
[ 1137.881844][T20657]        autofs_wait+0x10f3/0x1ac0
[ 1137.886968][T20657]        autofs_do_expire_multi+0x14e/0x500
[ 1137.892857][T20657]        autofs_expire_multi+0x68/0x90
[ 1137.898312][T20657]        autofs_root_ioctl_unlocked+0x6c7/0x920
[ 1137.904546][T20657]        autofs_root_ioctl+0x41/0x60
[ 1137.909822][T20657]        __x64_sys_ioctl+0x18e/0x210
[ 1137.915088][T20657]        do_syscall_64+0xcd/0xf80
[ 1137.920105][T20657]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1137.926502][T20657] 
[ 1137.926502][T20657] -> #1 (&sbi->pipe_mutex){+.+.}-{4:4}:
[ 1137.934220][T20657]        __mutex_lock+0x1aa/0x1ca0
[ 1137.939342][T20657]        autofs_notify_daemon+0x4a6/0xd60
[ 1137.945064][T20657]        autofs_wait+0x10f3/0x1ac0
[ 1137.950164][T20657]        autofs_mount_wait+0x132/0x3c0
[ 1137.955628][T20657]        autofs_d_automount+0x4b2/0x960
[ 1137.961170][T20657]        __traverse_mounts+0x1b9/0x830
[ 1137.966616][T20657]        step_into_slowpath+0x772/0xf50
[ 1137.972150][T20657]        path_lookupat+0x627/0xc40
[ 1137.977258][T20657]        filename_lookup+0x224/0x5f0
[ 1137.982525][T20657]        kern_path+0x35/0x50
[ 1137.987099][T20657]        lookup_bdev+0xd8/0x280
[ 1137.991946][T20657]        resume_store+0x1d6/0x490
[ 1137.996961][T20657]        kobj_attr_store+0x58/0x80
[ 1138.002066][T20657]        sysfs_kf_write+0xf2/0x150
[ 1138.007175][T20657]        kernfs_fop_write_iter+0x3af/0x570
[ 1138.012977][T20657]        vfs_write+0x7d3/0x11d0
[ 1138.017814][T20657]        ksys_write+0x12a/0x250
[ 1138.022664][T20657]        do_syscall_64+0xcd/0xf80
[ 1138.027681][T20657]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1138.034086][T20657] 
[ 1138.034086][T20657] -> #0 (&of->mutex){+.+.}-{4:4}:
[ 1138.041273][T20657]        __lock_acquire+0x1669/0x2890
[ 1138.046623][T20657]        lock_acquire+0x179/0x330
[ 1138.051629][T20657]        __mutex_lock+0x1aa/0x1ca0
[ 1138.056737][T20657]        kernfs_fop_write_iter+0x28f/0x570
[ 1138.062547][T20657]        iter_file_splice_write+0xa24/0x12b0
[ 1138.068525][T20657]        do_splice+0x1478/0x1fc0
[ 1138.073458][T20657]        __do_splice+0x32a/0x360
[ 1138.078388][T20657]        __x64_sys_splice+0x187/0x250
[ 1138.083752][T20657]        do_syscall_64+0xcd/0xf80
[ 1138.088768][T20657]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1138.095180][T20657] 
[ 1138.095180][T20657] other info that might help us debug this:
[ 1138.095180][T20657] 
[ 1138.105389][T20657] Chain exists of:
[ 1138.105389][T20657]   &of->mutex --> &sbi->pipe_mutex --> &pipe->mutex
[ 1138.105389][T20657] 
[ 1138.117790][T20657]  Possible unsafe locking scenario:
[ 1138.117790][T20657] 
[ 1138.125231][T20657]        CPU0                    CPU1
[ 1138.130585][T20657]        ----                    ----
[ 1138.135933][T20657]   lock(&pipe->mutex);
[ 1138.140071][T20657]                                lock(&sbi->pipe_mutex);
[ 1138.147094][T20657]                                lock(&pipe->mutex);
[ 1138.153767][T20657]   lock(&of->mutex);
[ 1138.157734][T20657] 
[ 1138.157734][T20657]  *** DEADLOCK ***
[ 1138.157734][T20657] 
[ 1138.165854][T20657] 2 locks held by syz.7.3543/20657:
[ 1138.171044][T20657]  #0: ffff88803476e420 (sb_writers#8){.+.+}-{0:0}, at: __do_splice+0x32a/0x360
[ 1138.180092][T20657]  #1: ffff888058a12468 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80
[ 1138.188778][T20657] 
[ 1138.188778][T20657] stack backtrace:
[ 1138.194654][T20657] CPU: 0 UID: 0 PID: 20657 Comm: syz.7.3543 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1138.194672][T20657] Tainted: [L]=SOFTLOCKUP
[ 1138.194676][T20657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1138.194683][T20657] Call Trace:
[ 1138.194689][T20657]  <TASK>
[ 1138.194697][T20657]  dump_stack_lvl+0x116/0x1f0
[ 1138.194723][T20657]  print_circular_bug+0x275/0x340
[ 1138.194744][T20657]  check_noncircular+0x146/0x160
[ 1138.194764][T20657]  __lock_acquire+0x1669/0x2890
[ 1138.194778][T20657]  ? __do_splice+0x32a/0x360
[ 1138.194795][T20657]  ? do_syscall_64+0xcd/0xf80
[ 1138.194810][T20657]  lock_acquire+0x179/0x330
[ 1138.194822][T20657]  ? kernfs_fop_write_iter+0x28f/0x570
[ 1138.194848][T20657]  ? __pfx___might_resched+0x10/0x10
[ 1138.194866][T20657]  __mutex_lock+0x1aa/0x1ca0
[ 1138.194887][T20657]  ? kernfs_fop_write_iter+0x28f/0x570
[ 1138.194910][T20657]  ? kernfs_fop_write_iter+0x28f/0x570
[ 1138.194927][T20657]  ? __asan_memcpy+0x3c/0x60
[ 1138.194939][T20657]  ? _copy_from_iter+0x161/0x16c0
[ 1138.194955][T20657]  ? __pfx___mutex_lock+0x10/0x10
[ 1138.194971][T20657]  ? __pfx__copy_from_iter+0x10/0x10
[ 1138.194996][T20657]  ? trace_kmalloc+0x2b/0xb0
[ 1138.195016][T20657]  ? __kmalloc_noprof+0x35d/0x910
[ 1138.195041][T20657]  ? kernfs_fop_write_iter+0x237/0x570
[ 1138.195061][T20657]  ? kernfs_fop_write_iter+0x28f/0x570
[ 1138.195077][T20657]  kernfs_fop_write_iter+0x28f/0x570
[ 1138.195094][T20657]  iter_file_splice_write+0xa24/0x12b0
[ 1138.195116][T20657]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 1138.195149][T20657]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 1138.195174][T20657]  do_splice+0x1478/0x1fc0
[ 1138.195196][T20657]  ? __lock_acquire+0x436/0x2890
[ 1138.195210][T20657]  ? __pfx_do_splice+0x10/0x10
[ 1138.195236][T20657]  ? __pfx_pipe_clear_nowait+0x10/0x10
[ 1138.195251][T20657]  ? find_held_lock+0x2b/0x80
[ 1138.195275][T20657]  __do_splice+0x32a/0x360
[ 1138.195299][T20657]  ? __pfx___do_splice+0x10/0x10
[ 1138.195326][T20657]  __x64_sys_splice+0x187/0x250
[ 1138.195345][T20657]  do_syscall_64+0xcd/0xf80
[ 1138.195360][T20657]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1138.195372][T20657] RIP: 0033:0x7f56b3d8f749
[ 1138.195382][T20657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1138.195393][T20657] RSP: 002b:00007f56b4c4e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113
[ 1138.195407][T20657] RAX: ffffffffffffffda RBX: 00007f56b3fe6090 RCX: 00007f56b3d8f749
[ 1138.195418][T20657] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000004
[ 1138.195427][T20657] RBP: 00007f56b3e13f91 R08: 000000000000bfd1 R09: 0000000000000000
[ 1138.195437][T20657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1138.195446][T20657] R13: 00007f56b3fe6128 R14: 00007f56b3fe6090 R15: 00007ffc4c642438
[ 1138.195462][T20657]  </TASK>
[ 1138.768274][   T24] usb 3-1: config 0 has too many interfaces: 65, using maximum allowed: 32
[ 1138.778189][ T5930] usb 2-1: config 0 has no interfaces?
[ 1138.794633][ T5930] usb 2-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02
[ 1138.813126][   T24] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 65
[ 1138.822870][   T24] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.87
[ 1138.832154][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1138.843022][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1138.844797][   T24] usb 3-1: config 0 descriptor??
[ 1138.872751][ T5930] usb 2-1: SerialNumber: syz
[ 1138.893582][ T5930] usb 2-1: config 0 descriptor??
[ 1139.114392][   T24] usb 2-1: USB disconnect, device number 12
[ 1140.791680][ T6007] usb 3-1: USB disconnect, device number 16