last executing test programs:

18m34.096866115s ago: executing program 2 (id=1621):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = syz_open_dev$video4linux(&(0x7f0000001e00), 0x0, 0x0)
getpid()
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
move_pages(r3, 0x0, 0x0, 0x0, 0x0, 0x4)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
shmctl$IPC_STAT(0x0, 0x2, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x88200)
r6 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r6, 0x0, 0x0)
r7 = fsopen(&(0x7f0000000100)='zonefs\x00', 0x1)
r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r8, 0xc02064b9, &(0x7f0000000500)={0x0, &(0x7f0000000280)})
ioctl$DRM_IOCTL_MODE_ATOMIC(r8, 0xc03864bc, &(0x7f0000000040)={0x200, 0x0, 0x0, &(0x7f00000003c0)=[0x7], &(0x7f00000000c0)=[0x0], &(0x7f0000000180)=[0x31], 0x0, 0xff})
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, 0x0, &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getpgid(0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0xe348, 0x11, 0x201a, 0x80001, 0x0, 0x40000, 0x1})
getsockopt$inet_int(r0, 0x0, 0x33, 0x0, &(0x7f0000000080))

18m33.020943344s ago: executing program 2 (id=1625):
r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3ff, 0x2)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000180)=0x1)
r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x401, 0x181, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3fd, 0x4000009, 0x200, 0xe2df, 0x9, 0x1, 0x4, 0x40000, 0x7, 0xf58, 0x6]})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x2)
connect$unix(r4, &(0x7f0000000400)=@abs={0x1, 0x0, 0x4e24}, 0x6e)
r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, &(0x7f00000004c0)}}, 0x40)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x6}, [""]}, 0x14}}, 0x84)
socket$inet(0x2, 0x2, 0x1)
r8 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000140)={'veth0_to_batadv\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2d, 0x4, 0x5, {0xb, @ah_ip6_spec={@ipv4={'\x00', '\xff\xff', @multicast1}, @remote, 0xb, 0x3}, {0x0, @empty, 0x9, 0x401, [0x1, 0x1]}, @usr_ip4_spec={@dev={0xac, 0x14, 0x14, 0x1d}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x1, 0x4, 0x1, 0x94}, {0x0, @local, 0x2, 0x9, [0x100, 0x10]}, 0x102}, 0x2, [0x9000, 0x0]}})
ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x1, 0x80000000})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x84}}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000600)=""/246, 0xf6}], 0x1}, 0x9}], 0x1, 0x2, 0x0)

18m31.453961817s ago: executing program 2 (id=1628):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x8, &(0x7f0000000040))
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/slabinfo\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x20000023896)
close(r0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=<r2=>0x0)
timer_settime(r2, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000000)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0)
r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
listen(r4, 0xa)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x452280, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x102001, 0x0)
r6 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_int(r6, 0x1, 0x22, &(0x7f0000000080)=0x5, 0x4)
ioctl$TIOCGPTPEER(r5, 0x5441, 0xb3d)
ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r1, 0x7b3, &(0x7f0000000240))

18m30.426259872s ago: executing program 2 (id=1631):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a72b7a104c05e102c8e201020301090224000100000000090471020216fa1f000905e702100000fa00090582"], 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x4000884)
r2 = socket(0x400000000010, 0x3, 0x0)
syz_80211_inject_frame(0x0, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2)
sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r4, 0x8, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4c13e67f, 0x5}}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x1fa}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
get_mempolicy(0x0, 0x0, 0x4, &(0x7f0000740000/0x1000)=nil, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newtfilter={0x70, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffd}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_META={0x2c, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x5, 0x40}}}, @TCA_EM_META_LVALUE={0x14, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="c2fd291f", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x8]}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4040054)

18m25.373860094s ago: executing program 2 (id=1640):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r0)
sendmsg$NLBL_MGMT_C_REMOVE(r5, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x84, r6, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x1a}}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010101}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x84}, 0x1, 0x0, 0x0, 0x5}, 0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r7, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15)
r8 = dup(r7)
write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18)
write$FUSE_INIT(r8, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff9, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x20, 0x8}}, 0x50)
r9 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r9, &(0x7f0000003800)={0x2020}, 0x2020)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x28, r1, 0x1, 0x70bd28, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x80080}, 0x24000000)

18m24.003857898s ago: executing program 2 (id=1648):
r0 = syz_usb_connect$uac1(0x0, 0x7f, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000000002b406b1d010140000102030109026d0003010070000904000000010100000a24010040000201020904010000010200000904010101010200000905010920000030000725010000000009040200000102000009040201010102000007240100f90300072401210000000905820910000000080725018100000065a7253045e735abb2e673b3517334e08dd149e80f3a4aed05eddbdcbf08424728031957261064c2c19a2764a9e6ed4a6097f8639aac3862d2de4aafe2b436acb2f65c0ac60053d8e1be0236f90a1e315ae609ccf9de0dcdef1a3d79c4"], 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r0, &(0x7f00000021c0)={0x2c, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x1000000}}, &(0x7f0000000300)='syzkaller\x00'}, 0x94)
r2 = syz_usb_connect(0x0, 0xb16, &(0x7f0000002200)={{0x12, 0x1, 0x0, 0x38, 0x7b, 0x79, 0xff, 0x19d2, 0xffc0, 0x3112, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb04, 0x4, 0x1, 0x7, 0x70, 0x2, [{{0x9, 0x4, 0xaf, 0x7, 0x6, 0xff, 0xff, 0xff, 0x3, [@generic={0x1e, 0xe, "aec5f6801e8ba2811e8a362bd4bc695ca509067b666fd02f95ea3ffa"}], [{{0x9, 0x5, 0xa, 0x18, 0x8, 0x4, 0x3, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xb1}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0xe, 0x4, 0x5, [@generic={0x3d, 0x27, "53f604d497ddcdad55a5ad725051c7a3ca436d08eba505fb2e572ee5daa3ac7f9b1167e2efc634500cfe375f58ed97ff3177f38aad0ee228841b93"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x20, 0xfc, 0x5, 0x64, [@generic={0x101, 0x7, "c9b543a71eaeb43636878ee8500cf57e39637b447aa862d8432a9b4545ad7acf4508548639602cbf61b1a67139b9c72146c3f90f154503434de5d4912fbecdc24f1225b6e9d18c861ec69a27ba668509b1bb48832e9803addb3c026169fa2d41ef88c41f0b55d59ff8296af8e1a906f93dd0231535fac1e7285b32ce27b4a1c2930e1841281d0a90b33422be66f1b86f62ba9360de2c5e1e246d6912edad03c1a5f04a9e9982ab7771b50d6e7467f7ad99f3a5ba7f3abd32458d9bae3fa4b30dacb430b3c6c736882ee59fff0145adb6b446e28ea77aae5e3a19a0d6f3ff49412a7d148096dbc1d1a273730856ac0ae5b9cb7eeefc434a01d4cea8e2ca224a"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x1e, 0xee, 0xf, [@generic={0xdd, 0xe, "5e46c6252d61eef0544ca18e73591d0d135286963f00ecb471e71d2acb2311469db7d1b0d22686053d2a9fb052d60cff3159fda78f09196e506e259534287ec7c22f5dc0776f7fc6a475389576f9f010ed18bdd8292585df52419f6b2696a391b7d7d82e2f0732643dae2c68183dab90df87609d3971b67c063bbdacea8af069383204736473439c76f1000e82e8fabb841f32cf50c9ae5e780f4591b2e2ca8752271969e60119263e679617a8ecae02bb4c65b8acc817b157969a3644d4977ae353aa93d63bbaf7038946fa27c49377930db7aaa20fb951a94b9c"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x8, 0x8, 0xb, 0xf, [@generic={0x79, 0x21, "4492a0c2f2e28df80f8ce6f28f29b9c5ea07c6049391302e95dee7239cdcc9ad5cd954e6895e9ae88165f326c86d95b2ca17886e78521a0d07ddd890bc78d44dded56454d8aa968126d284fa6fe87eef6786a2af737b7822e796a5f07f1a581b277fb9ef360345b799eee6a6ea2cfeff34d3c15ac6c6f2"}]}}, {{0x9, 0x5, 0x4, 0xc, 0x200, 0x6, 0x88, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x37, 0x4}, @generic={0x100, 0x23, "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"}]}}]}}, {{0x9, 0x4, 0x8c, 0x27, 0x5, 0xc7, 0xc2, 0x9d, 0x9, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, 'C'}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x6, 0x8, 0xf6}, [@ncm={0x6, 0x24, 0x1a, 0x4976, 0x2}]}, @generic={0x49, 0x9, "dc4eabe46088dfc03f026ac39e6a6c9db81b4f180ed456c1f9b3fb6e6d113e3af8c970d516bce0fbf457978d1a3b700e45933a437fbfa9a1c2533f48f39bb6813b7504668c0a91"}], [{{0x9, 0x5, 0x8, 0x3, 0x40, 0x8, 0xf, 0x6, [@generic={0xa8, 0xe, "e9456dd496e657f1e7ae0edcbb05a84031b45c0fbf5bee961db603a867455c560b4784ad38803cf39b90ff01f3611909687f52596c9679350d2650f6386247cd5d539ab5c7a419948edc6bd3988adcb7f976604dbfd3e198a39a47086561bbdc8abeb9903c744a379d1b60c2f8b91d9fd4263d6c5a0aedd108658951a15311d80f2879583213794c0b5312a6f5754aeea112bb84c94107074478f7cebe5d8159d53c33d6a314"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x3, 0xa, 0x0, [@generic={0xa4, 0x2, "bcdeed0a8845f9ea51f7cdddcee84b3e1262f99eff84a1dd10b17ecfee4ce4fc7fe52f4743b51456f46999489d999032c7fc2c6fa0fe4c6b51ce47227f2cfc830bb29b2a5b8feed9a34c3d1a3ce6e1d00b724b71750a6112d2893455e2b058e60308ed556fbe0b3b730de52a57ec9c17de7c371e16e3627b1f87a1346ae6ec7b885d32c48373d4a00f0e343ab44e32ddbb08163758dcc4f826ba3849af88c17a1502"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0x2, 0x2, 0xd4, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xd1, 0x3e}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x63, 0x7f}]}}, {{0x9, 0x5, 0x8, 0x4, 0x10, 0x0, 0x7, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x26}]}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x8, 0x6, 0x4, [@generic={0x9f, 0x23, "9cfc0a533bf141f7b082c306a7d440670a654984dc2863f896da868d3e566812664002cb5c3cedaecf36cc3f02bf56b1eb485c15033b8a6fa7a97c2f5758e664d37a6108424a0b12f2dfe56034f7dde71dd8b8de5a04940592042ac070e6a13e7cd2d37945e0d25f2fd9485040e897c30d8ecc5126cd3a01430a557cc680ce5dc141b6099e645ac772667c363c3d6e21aa92b62ea414a070dbdff7bd1e"}]}}]}}, {{0x9, 0x4, 0x56, 0x3, 0x7, 0xd, 0xbb, 0xef, 0x2, [@uac_control={{0xa, 0x24, 0x1, 0x400, 0x4}, [@extension_unit={0x8, 0x24, 0x8, 0x2, 0x5, 0x9, "eb"}, @mixer_unit={0x5, 0x24, 0x4, 0x6, 0xb}, @input_terminal={0xc, 0x24, 0x2, 0x40, 0x202, 0x5, 0x2, 0x1ff, 0x4, 0x40}, @extension_unit={0xb, 0x24, 0x8, 0x2, 0x3, 0x80, "a9c17013"}, @feature_unit={0xd, 0x24, 0x6, 0x3, 0x5, 0x3, [0x1, 0x9, 0x4], 0x5}]}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x1, 0x9, 0x3}, {0x6, 0x24, 0x1a, 0x2b77}, [@mdlm_detail={0x27, 0x24, 0x13, 0x4, "70c038d225866b7cce7893180017c29cd79c13169489d1a9312744c44aa35e0d226502"}, @obex={0x5, 0x24, 0x15, 0xffff}, @mdlm={0x15, 0x24, 0x12, 0x8af4}, @country_functional={0xa, 0x24, 0x7, 0x5, 0x1000, [0x3, 0x1]}]}], [{{0x9, 0x5, 0x5, 0x1, 0x400, 0x2, 0x0, 0x23, [@generic={0xaa, 0x9, "601bbf9a76d6c7102ed605565fbca28c760b9a838d8b53d54b72ba983454819f34b7ebe60ee779da8631905853eba98ef69555e3a1d847d3e9b714ddfcb790c1212ae2cf230814bbdfcb922f8f1f53fef5cc8f2444f8a72378908453d3cc7d635498900316e031352bd7d7ed3bd28f98ed109205af92c8337816864f41c76ca69a83917eb0a22bedf152e93a9bd36469b10eb0f39abbf77011c84a0279dec554e1ab924f3ff70511"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x8, 0x81, 0x62, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xc, 0xd529}]}}, {{0x9, 0x5, 0x1, 0xc, 0x20, 0x3, 0xba, 0x5, [@generic={0x1d, 0x31, "60474ef02618bca165f7397b74bb307555cd842e805cde5fadcc86"}]}}, {{0x9, 0x5, 0x5, 0xc, 0x20, 0x0, 0x3a, 0x1c, [@generic={0xc8, 0x7, "8e18ef3e295c06182308a67239ff9ef48059839d273d5f7d3bb222c5ab4ba82e6c76b745f9d5e8033819e0095b2320654968ade3289048de8b5c5d84e7e6af9fdcb8e6c55626b534aa7a809896bb11ffe87bf04494d47dcd4642e5db8f6787ca6af12f9cfdb529c62d7ae860259f2ef9ee641db76c47e107147a5936a08a433287826f5701371d13ed8988fb8e66ed7ceaab972db7d7b364f6c3316dd9889dc79132893cca96b091923a2ac1607d607430575982f04571f8ffc43fd80b4513fb03b8c4d84609"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x33}]}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0xa, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xfd, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x80}]}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0xad, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x2}]}}, {{0x9, 0x5, 0x80, 0x0, 0x80121b764ecb90b2, 0xb, 0x2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x93, 0x12}]}}]}}, {{0x9, 0x4, 0x5e, 0x2, 0x8, 0xff, 0xff, 0x0, 0xca, [@uac_as={[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xb, 0x2, 0x4, 0x98, "2fd288c322a2ea184a"}, @as_header={0x7, 0x24, 0x1, 0x10, 0xf, 0x1001}]}, @uac_as={[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x40, 0x4, 0x33, 0x94, "2fa8", "4cb2"}, @as_header={0x7, 0x24, 0x1, 0xf, 0x7, 0x4}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x439, 0x72d, 0xff, "3391fe33f627efacf2"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x3}]}], [{{0x9, 0x5, 0xc, 0x0, 0x40, 0x1, 0xc, 0x30, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x86}]}}, {{0x9, 0x5, 0x0, 0x1, 0x3ff, 0x5, 0x1, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xc3, 0x5}]}}, {{0x9, 0x5, 0xf, 0x4, 0x40, 0xfa, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x705}, @generic={0x73, 0x2, "bdc04541cf2b28639ebac85c783c08a8dff1acdbc1e3473293c91258dbdc44a4e112b6ea181105f14fc29eb929fdb48e28e774fee5567e2db87be4aa63baf4663a36bac86af11298ac136968a002b69be6f0daf0e3daf8d5eb567be2075f3f97985495f05cb8efb8935400a0d465ee9349"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x20, 0xea, 0xf0, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x6af}, @generic={0x35, 0x7, "11040fa0c5a6dd3557f2de1417524cd333aca88b39f59fae19edea0e9e722029b8e1cb6b168772d3f898a7a65e53743cb418e2"}]}}, {{0x9, 0x5, 0x4, 0x1, 0x0, 0x9, 0xbd, 0x2c, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x62, 0x8001}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x8, 0xcb, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xd, 0x4}]}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0x5, 0x0, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x87, 0xf7, 0x42b3}, @generic={0x40, 0x31, "0d9d196072f78403c1ac4020a5095ea92cf4aafd06b17dbdecfbeaadf4d55162cb13dee4a4a70d034f12928bc03c899d39d4baa16f8bb1a2a7c6ed7c7369"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x400, 0x9, 0x3, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0xfff7}]}}]}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000b00)={0xa, 0x6, 0x0, 0x3, 0x4, 0x10, 0xff, 0x9}, 0x58, &(0x7f0000000a80)=ANY=[@ANYBLOB="050f5800041c100a00e4ff1f000ff00600c03f00000f000000cf00ff00000000000710020c7940001410040266852951039f78cd77ee9475e30f45751c100a1a247700000f0030c1ed9d44b0f6efad94aa359e4b0309000fc08abb184828f4b2013102"], 0x6, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x81d}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x340a}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x42f}}, {0xf1, &(0x7f0000000400)=@string={0xf1, 0x3, "414ec9d690888b32a238d0691b12be23c8d0b9b0693b57c5678d148e0e071a772759580aebd9c9f4cc6a8a2b9e1c0e4e8defab1e6c5e4879330573f268dee47fd51da443e7f33ff93805de0a3cc3f5fd47ef823734c9737bcc8bbc9cce23a3d2a12208c908651c10927691184cccd59b644d6d945966b4af428d05af6260940c0ca8a8cd7647ed25a2c5eb3ae6c1bbb6e1948907e201f9947d7e6161db595ea6f6712974f564bdae47aad8a3979429c099a73168f72f6a5d2ab2b095151791b977a05dd17b4154d2999da79c452ebb54abbd70d2e490cf9ce4259ed02fc748f6f632a12335349f9af13d9634c6c4b6"}}, {0x10, &(0x7f0000000b40)=ANY=[]}]})
syz_usb_control_io$lan78xx(r2, &(0x7f0000000800)={0x14, &(0x7f0000000680)={0x20, 0x11, 0xdb, {0xdb, 0x21, "6f266fc694fa464b1d5511ba3974f25f6d89b1235996880c729685060293d2e46fd7c04a832e55a205a54d2f1285e20073e10aeb023505fb81ad573524aa398d031538cb0cb31aae1dd0c6e31f58a4e481dae14e38e712925ada89de0b4dc209da21b6b268d6c1e803b00306664f25465159db38bf951b58341ecaa25589a9e602abc52eb07aa25088ac97b170ace4d895e748567f358c188a3fb96c2cd915049ffbe92023f9768de347dbd941304e4b7421d0faf22d5a44662d6147424a35f3e55eeb9f567cda0f824ae4fdb7ad931c64776bc9c52d44ff29"}}, &(0x7f0000000780)={0x0, 0x3, 0x68, @string={0x68, 0x3, "fd464f6be80f06221b8f9ad43f912dfa766d4ff964c9a245768dd37f66c058dedca0b3e141b8ac9d421bd7f3a5e756709ce5511d1c4a8e899d81686845566f1dab2ca95f30ce0f8dff3bf144fdc0f16a2ce0a681b69acbdd2e84b9b577ee202bd4895e0ed754"}}}, &(0x7f0000000a40)={0x34, &(0x7f0000000840)={0x20, 0xf, 0xa8, "8ca06a6e458484c9308eeaacf011544dbd32a7b6c6fba1a162f4000665a6cdf4b3ebaa7fd260ed861fbe529355fa44b3b0a1556cc5090ec013034a78732deccdf5eabf67b658ad8c4ca194f8602f1b0d5e5bc3220bf128e7aee38c0e4fe1de0c0418f9b2998b8ed9af1c773e8e9ee2a5dad5803c7f3209a6c6c26d54ebf203692c4c11421b6814f643059adf4b369afe65710047448fa6db836229a74fbf713cb4289756b0fbbe26"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0xbb}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000980)={0xc0, 0xa1, 0x4, 0x6f20}, &(0x7f00000009c0)={0x40, 0xa0, 0x4, 0x10}, &(0x7f0000000a00)={0xc0, 0xa2, 0x2f, "fa9214e16fc9e2ecb82fb3276eb02fb03b4ca2bfce62deffcabf4d243402b6fa09a2e9d616fff91f55b0d6d5668789"}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0xa883, 0x92)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000080)={r4, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}})
ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x6)
r5 = socket$netlink(0x10, 0x3, 0xa)
dup(r5)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b80)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
prctl$PR_SET_PTRACER(0x59616d61, r6)
connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
socket$kcm(0xa, 0x922000000003, 0x11)

18m8.844276362s ago: executing program 32 (id=1648):
r0 = syz_usb_connect$uac1(0x0, 0x7f, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000000002b406b1d010140000102030109026d0003010070000904000000010100000a24010040000201020904010000010200000904010101010200000905010920000030000725010000000009040200000102000009040201010102000007240100f90300072401210000000905820910000000080725018100000065a7253045e735abb2e673b3517334e08dd149e80f3a4aed05eddbdcbf08424728031957261064c2c19a2764a9e6ed4a6097f8639aac3862d2de4aafe2b436acb2f65c0ac60053d8e1be0236f90a1e315ae609ccf9de0dcdef1a3d79c4"], 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r0, &(0x7f00000021c0)={0x2c, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x1000000}}, &(0x7f0000000300)='syzkaller\x00'}, 0x94)
r2 = syz_usb_connect(0x0, 0xb16, &(0x7f0000002200)={{0x12, 0x1, 0x0, 0x38, 0x7b, 0x79, 0xff, 0x19d2, 0xffc0, 0x3112, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb04, 0x4, 0x1, 0x7, 0x70, 0x2, [{{0x9, 0x4, 0xaf, 0x7, 0x6, 0xff, 0xff, 0xff, 0x3, [@generic={0x1e, 0xe, "aec5f6801e8ba2811e8a362bd4bc695ca509067b666fd02f95ea3ffa"}], [{{0x9, 0x5, 0xa, 0x18, 0x8, 0x4, 0x3, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xb1}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0xe, 0x4, 0x5, [@generic={0x3d, 0x27, "53f604d497ddcdad55a5ad725051c7a3ca436d08eba505fb2e572ee5daa3ac7f9b1167e2efc634500cfe375f58ed97ff3177f38aad0ee228841b93"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x20, 0xfc, 0x5, 0x64, [@generic={0x101, 0x7, "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"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x1e, 0xee, 0xf, [@generic={0xdd, 0xe, "5e46c6252d61eef0544ca18e73591d0d135286963f00ecb471e71d2acb2311469db7d1b0d22686053d2a9fb052d60cff3159fda78f09196e506e259534287ec7c22f5dc0776f7fc6a475389576f9f010ed18bdd8292585df52419f6b2696a391b7d7d82e2f0732643dae2c68183dab90df87609d3971b67c063bbdacea8af069383204736473439c76f1000e82e8fabb841f32cf50c9ae5e780f4591b2e2ca8752271969e60119263e679617a8ecae02bb4c65b8acc817b157969a3644d4977ae353aa93d63bbaf7038946fa27c49377930db7aaa20fb951a94b9c"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x8, 0x8, 0xb, 0xf, [@generic={0x79, 0x21, "4492a0c2f2e28df80f8ce6f28f29b9c5ea07c6049391302e95dee7239cdcc9ad5cd954e6895e9ae88165f326c86d95b2ca17886e78521a0d07ddd890bc78d44dded56454d8aa968126d284fa6fe87eef6786a2af737b7822e796a5f07f1a581b277fb9ef360345b799eee6a6ea2cfeff34d3c15ac6c6f2"}]}}, {{0x9, 0x5, 0x4, 0xc, 0x200, 0x6, 0x88, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x37, 0x4}, @generic={0x100, 0x23, "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"}]}}]}}, {{0x9, 0x4, 0x8c, 0x27, 0x5, 0xc7, 0xc2, 0x9d, 0x9, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, 'C'}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x6, 0x8, 0xf6}, [@ncm={0x6, 0x24, 0x1a, 0x4976, 0x2}]}, @generic={0x49, 0x9, "dc4eabe46088dfc03f026ac39e6a6c9db81b4f180ed456c1f9b3fb6e6d113e3af8c970d516bce0fbf457978d1a3b700e45933a437fbfa9a1c2533f48f39bb6813b7504668c0a91"}], [{{0x9, 0x5, 0x8, 0x3, 0x40, 0x8, 0xf, 0x6, [@generic={0xa8, 0xe, "e9456dd496e657f1e7ae0edcbb05a84031b45c0fbf5bee961db603a867455c560b4784ad38803cf39b90ff01f3611909687f52596c9679350d2650f6386247cd5d539ab5c7a419948edc6bd3988adcb7f976604dbfd3e198a39a47086561bbdc8abeb9903c744a379d1b60c2f8b91d9fd4263d6c5a0aedd108658951a15311d80f2879583213794c0b5312a6f5754aeea112bb84c94107074478f7cebe5d8159d53c33d6a314"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x3, 0xa, 0x0, [@generic={0xa4, 0x2, "bcdeed0a8845f9ea51f7cdddcee84b3e1262f99eff84a1dd10b17ecfee4ce4fc7fe52f4743b51456f46999489d999032c7fc2c6fa0fe4c6b51ce47227f2cfc830bb29b2a5b8feed9a34c3d1a3ce6e1d00b724b71750a6112d2893455e2b058e60308ed556fbe0b3b730de52a57ec9c17de7c371e16e3627b1f87a1346ae6ec7b885d32c48373d4a00f0e343ab44e32ddbb08163758dcc4f826ba3849af88c17a1502"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0x2, 0x2, 0xd4, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xd1, 0x3e}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x63, 0x7f}]}}, {{0x9, 0x5, 0x8, 0x4, 0x10, 0x0, 0x7, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x26}]}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x8, 0x6, 0x4, [@generic={0x9f, 0x23, "9cfc0a533bf141f7b082c306a7d440670a654984dc2863f896da868d3e566812664002cb5c3cedaecf36cc3f02bf56b1eb485c15033b8a6fa7a97c2f5758e664d37a6108424a0b12f2dfe56034f7dde71dd8b8de5a04940592042ac070e6a13e7cd2d37945e0d25f2fd9485040e897c30d8ecc5126cd3a01430a557cc680ce5dc141b6099e645ac772667c363c3d6e21aa92b62ea414a070dbdff7bd1e"}]}}]}}, {{0x9, 0x4, 0x56, 0x3, 0x7, 0xd, 0xbb, 0xef, 0x2, [@uac_control={{0xa, 0x24, 0x1, 0x400, 0x4}, [@extension_unit={0x8, 0x24, 0x8, 0x2, 0x5, 0x9, "eb"}, @mixer_unit={0x5, 0x24, 0x4, 0x6, 0xb}, @input_terminal={0xc, 0x24, 0x2, 0x40, 0x202, 0x5, 0x2, 0x1ff, 0x4, 0x40}, @extension_unit={0xb, 0x24, 0x8, 0x2, 0x3, 0x80, "a9c17013"}, @feature_unit={0xd, 0x24, 0x6, 0x3, 0x5, 0x3, [0x1, 0x9, 0x4], 0x5}]}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x1, 0x9, 0x3}, {0x6, 0x24, 0x1a, 0x2b77}, [@mdlm_detail={0x27, 0x24, 0x13, 0x4, "70c038d225866b7cce7893180017c29cd79c13169489d1a9312744c44aa35e0d226502"}, @obex={0x5, 0x24, 0x15, 0xffff}, @mdlm={0x15, 0x24, 0x12, 0x8af4}, @country_functional={0xa, 0x24, 0x7, 0x5, 0x1000, [0x3, 0x1]}]}], [{{0x9, 0x5, 0x5, 0x1, 0x400, 0x2, 0x0, 0x23, [@generic={0xaa, 0x9, "601bbf9a76d6c7102ed605565fbca28c760b9a838d8b53d54b72ba983454819f34b7ebe60ee779da8631905853eba98ef69555e3a1d847d3e9b714ddfcb790c1212ae2cf230814bbdfcb922f8f1f53fef5cc8f2444f8a72378908453d3cc7d635498900316e031352bd7d7ed3bd28f98ed109205af92c8337816864f41c76ca69a83917eb0a22bedf152e93a9bd36469b10eb0f39abbf77011c84a0279dec554e1ab924f3ff70511"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x8, 0x81, 0x62, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xc, 0xd529}]}}, {{0x9, 0x5, 0x1, 0xc, 0x20, 0x3, 0xba, 0x5, [@generic={0x1d, 0x31, "60474ef02618bca165f7397b74bb307555cd842e805cde5fadcc86"}]}}, {{0x9, 0x5, 0x5, 0xc, 0x20, 0x0, 0x3a, 0x1c, [@generic={0xc8, 0x7, "8e18ef3e295c06182308a67239ff9ef48059839d273d5f7d3bb222c5ab4ba82e6c76b745f9d5e8033819e0095b2320654968ade3289048de8b5c5d84e7e6af9fdcb8e6c55626b534aa7a809896bb11ffe87bf04494d47dcd4642e5db8f6787ca6af12f9cfdb529c62d7ae860259f2ef9ee641db76c47e107147a5936a08a433287826f5701371d13ed8988fb8e66ed7ceaab972db7d7b364f6c3316dd9889dc79132893cca96b091923a2ac1607d607430575982f04571f8ffc43fd80b4513fb03b8c4d84609"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x33}]}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0xa, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xfd, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x80}]}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0xad, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x2}]}}, {{0x9, 0x5, 0x80, 0x0, 0x80121b764ecb90b2, 0xb, 0x2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x93, 0x12}]}}]}}, {{0x9, 0x4, 0x5e, 0x2, 0x8, 0xff, 0xff, 0x0, 0xca, [@uac_as={[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xb, 0x2, 0x4, 0x98, "2fd288c322a2ea184a"}, @as_header={0x7, 0x24, 0x1, 0x10, 0xf, 0x1001}]}, @uac_as={[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x40, 0x4, 0x33, 0x94, "2fa8", "4cb2"}, @as_header={0x7, 0x24, 0x1, 0xf, 0x7, 0x4}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x439, 0x72d, 0xff, "3391fe33f627efacf2"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x3}]}], [{{0x9, 0x5, 0xc, 0x0, 0x40, 0x1, 0xc, 0x30, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x86}]}}, {{0x9, 0x5, 0x0, 0x1, 0x3ff, 0x5, 0x1, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xc3, 0x5}]}}, {{0x9, 0x5, 0xf, 0x4, 0x40, 0xfa, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x705}, @generic={0x73, 0x2, "bdc04541cf2b28639ebac85c783c08a8dff1acdbc1e3473293c91258dbdc44a4e112b6ea181105f14fc29eb929fdb48e28e774fee5567e2db87be4aa63baf4663a36bac86af11298ac136968a002b69be6f0daf0e3daf8d5eb567be2075f3f97985495f05cb8efb8935400a0d465ee9349"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x20, 0xea, 0xf0, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x6af}, @generic={0x35, 0x7, "11040fa0c5a6dd3557f2de1417524cd333aca88b39f59fae19edea0e9e722029b8e1cb6b168772d3f898a7a65e53743cb418e2"}]}}, {{0x9, 0x5, 0x4, 0x1, 0x0, 0x9, 0xbd, 0x2c, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x62, 0x8001}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x8, 0xcb, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xd, 0x4}]}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0x5, 0x0, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x87, 0xf7, 0x42b3}, @generic={0x40, 0x31, "0d9d196072f78403c1ac4020a5095ea92cf4aafd06b17dbdecfbeaadf4d55162cb13dee4a4a70d034f12928bc03c899d39d4baa16f8bb1a2a7c6ed7c7369"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x400, 0x9, 0x3, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0xfff7}]}}]}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000b00)={0xa, 0x6, 0x0, 0x3, 0x4, 0x10, 0xff, 0x9}, 0x58, &(0x7f0000000a80)=ANY=[@ANYBLOB="050f5800041c100a00e4ff1f000ff00600c03f00000f000000cf00ff00000000000710020c7940001410040266852951039f78cd77ee9475e30f45751c100a1a247700000f0030c1ed9d44b0f6efad94aa359e4b0309000fc08abb184828f4b2013102"], 0x6, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x81d}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x340a}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x42f}}, {0xf1, &(0x7f0000000400)=@string={0xf1, 0x3, "414ec9d690888b32a238d0691b12be23c8d0b9b0693b57c5678d148e0e071a772759580aebd9c9f4cc6a8a2b9e1c0e4e8defab1e6c5e4879330573f268dee47fd51da443e7f33ff93805de0a3cc3f5fd47ef823734c9737bcc8bbc9cce23a3d2a12208c908651c10927691184cccd59b644d6d945966b4af428d05af6260940c0ca8a8cd7647ed25a2c5eb3ae6c1bbb6e1948907e201f9947d7e6161db595ea6f6712974f564bdae47aad8a3979429c099a73168f72f6a5d2ab2b095151791b977a05dd17b4154d2999da79c452ebb54abbd70d2e490cf9ce4259ed02fc748f6f632a12335349f9af13d9634c6c4b6"}}, {0x10, &(0x7f0000000b40)=ANY=[]}]})
syz_usb_control_io$lan78xx(r2, &(0x7f0000000800)={0x14, &(0x7f0000000680)={0x20, 0x11, 0xdb, {0xdb, 0x21, "6f266fc694fa464b1d5511ba3974f25f6d89b1235996880c729685060293d2e46fd7c04a832e55a205a54d2f1285e20073e10aeb023505fb81ad573524aa398d031538cb0cb31aae1dd0c6e31f58a4e481dae14e38e712925ada89de0b4dc209da21b6b268d6c1e803b00306664f25465159db38bf951b58341ecaa25589a9e602abc52eb07aa25088ac97b170ace4d895e748567f358c188a3fb96c2cd915049ffbe92023f9768de347dbd941304e4b7421d0faf22d5a44662d6147424a35f3e55eeb9f567cda0f824ae4fdb7ad931c64776bc9c52d44ff29"}}, &(0x7f0000000780)={0x0, 0x3, 0x68, @string={0x68, 0x3, "fd464f6be80f06221b8f9ad43f912dfa766d4ff964c9a245768dd37f66c058dedca0b3e141b8ac9d421bd7f3a5e756709ce5511d1c4a8e899d81686845566f1dab2ca95f30ce0f8dff3bf144fdc0f16a2ce0a681b69acbdd2e84b9b577ee202bd4895e0ed754"}}}, &(0x7f0000000a40)={0x34, &(0x7f0000000840)={0x20, 0xf, 0xa8, "8ca06a6e458484c9308eeaacf011544dbd32a7b6c6fba1a162f4000665a6cdf4b3ebaa7fd260ed861fbe529355fa44b3b0a1556cc5090ec013034a78732deccdf5eabf67b658ad8c4ca194f8602f1b0d5e5bc3220bf128e7aee38c0e4fe1de0c0418f9b2998b8ed9af1c773e8e9ee2a5dad5803c7f3209a6c6c26d54ebf203692c4c11421b6814f643059adf4b369afe65710047448fa6db836229a74fbf713cb4289756b0fbbe26"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0xbb}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000980)={0xc0, 0xa1, 0x4, 0x6f20}, &(0x7f00000009c0)={0x40, 0xa0, 0x4, 0x10}, &(0x7f0000000a00)={0xc0, 0xa2, 0x2f, "fa9214e16fc9e2ecb82fb3276eb02fb03b4ca2bfce62deffcabf4d243402b6fa09a2e9d616fff91f55b0d6d5668789"}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0xa883, 0x92)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000080)={r4, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}})
ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x6)
r5 = socket$netlink(0x10, 0x3, 0xa)
dup(r5)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b80)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
prctl$PR_SET_PTRACER(0x59616d61, r6)
connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
socket$kcm(0xa, 0x922000000003, 0x11)

16m8.333626768s ago: executing program 3 (id=2045):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)

16m7.433366158s ago: executing program 3 (id=2048):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000c00)="f4"}, 0x20)
keyctl$dh_compute(0x17, &(0x7f0000001200), 0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001340)={'hmac(streebog512)\x00'}})
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
syz_usb_connect$cdc_ncm(0x7, 0xd2, &(0x7f0000001680)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc0, 0x2, 0x1, 0x7f, 0x10, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "e82e68"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0xf474, 0xe, 0x3ff, 0x5}, {0x6, 0x24, 0x1a, 0x0, 0x20}, [@mbim_extended={0x8, 0x24, 0x1c, 0x59b0, 0xe, 0x8}, @network_terminal={0x7, 0x24, 0xa, 0xff, 0x9, 0x8, 0x5}, @mdlm_detail={0x1c, 0x24, 0x13, 0x6, "4a501bbf529c35344fa1b5321a7f2e773973be0f9fb2596e"}, @mdlm={0x15, 0x24, 0x12, 0x6}, @mbim={0xc, 0x24, 0x1b, 0x0, 0x7, 0x6, 0x3, 0x100, 0x8}, @mdlm={0x15, 0x24, 0x12, 0x200}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x19, 0x7, 0x81}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x65, 0x5, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x7, 0x8, 0x8}}}}}}}]}}, &(0x7f0000001780)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x0, 0x49, 0x9, 0xe7, 0x10}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x3, [{0x30, &(0x7f0000000280)=@string={0x30, 0x3, "459e98bed5789ac37d252cc67edbbc23c749297a5e0df5ce4f39fda26762d06879ae2019216c6a052a370685f140"}}, {0x77, &(0x7f0000000440)=@string={0x77, 0x3, "59fdce2c502919fdbb717b60ff2d34ddc8dc32d458ef204335ee17ecb80298a6e9131c09984945981f1122332bfb8b7d6da78d1c1c8487de21d43c582943e1444492ea8eecd28c4ae0f538ab51742d6f13f76a3e343cb55646aa3feb6783ce60292e050ecd77f651ef6424f886ef095fce09d0801f"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x43e}}]})
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r2 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x6}}, {0x0, 0x13}}}, 0xa0)
sendfile(r2, r2, &(0x7f0000000080), 0x7f03)
utimes(&(0x7f0000000400)='.\x00', &(0x7f0000000500)={{0x0, 0x2710}})
r3 = open(&(0x7f00000003c0)='.\x00', 0x100, 0x97)
getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8)
r4 = io_uring_setup(0x2e01, &(0x7f0000000040)={0x0, 0xafd2, 0x1000, 0x2, 0x2ca})
io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000540)=[{0x0}], 0x1)
r5 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x653f, 0x0, 0x0, 0x28e, 0x0, r4})
r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x6, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r6, 0x40383d0c, &(0x7f0000000180)={{0x0, 0x80}, {0xfffffffffffffff7, 0x1}, 0x1bb, 0x1})
ioctl$KVM_SET_XSAVE(r3, 0x5000aea5, &(0x7f0000000680)={[0xfffffbff, 0x80, 0x8001, 0xe3, 0x1, 0x9, 0x6, 0x0, 0x5, 0xe00, 0x874d, 0x2, 0x3d9092bd, 0x8, 0x9, 0x9, 0x8, 0x2, 0x4, 0x7f, 0x4, 0x0, 0x9, 0x8, 0x6, 0x1, 0x0, 0x400, 0x4, 0x885, 0xffffffbc, 0x1, 0x8, 0xffff, 0x8, 0x0, 0x32, 0x0, 0x4, 0x3, 0xba, 0x2, 0x7, 0x6, 0xe7, 0x6, 0x9, 0xb, 0x5, 0x4, 0x3, 0x7b, 0x1ff, 0x4, 0x0, 0x6, 0x361, 0x0, 0x40, 0x4a, 0x3, 0x8, 0x66, 0xff, 0x3, 0x8, 0x7, 0x2, 0x7, 0x4, 0x36, 0xfb2, 0x2, 0x3, 0x4, 0xaa, 0x9480, 0x36b1, 0x1, 0x4, 0xc40f, 0x5, 0x4, 0x0, 0x0, 0x8, 0x80000000, 0x3, 0x40, 0x6, 0x4, 0x6, 0x9, 0x2, 0x1, 0x0, 0x4, 0x7, 0x341a, 0x3, 0x81, 0x6, 0x7, 0x10001, 0xfffffff8, 0x43, 0x0, 0x40, 0x81, 0x2, 0x94, 0x3, 0x1000, 0x1, 0x9, 0xa, 0x5, 0x80000001, 0x2, 0x4, 0x35, 0x0, 0x0, 0x46, 0x45bb, 0x9, 0x1, 0xd, 0x3, 0x3, 0x5, 0x6, 0x9, 0x3726, 0x3, 0x8, 0x1, 0x5623, 0x3503, 0x8000, 0x5, 0x10, 0x6, 0x7, 0x5, 0x4, 0x3, 0x6, 0xffffff20, 0x6, 0x40, 0x1, 0x7ff, 0x1, 0x7, 0x6, 0x4, 0x3, 0x401, 0x3fd, 0x4, 0x0, 0xfff, 0xcf, 0x60d, 0x5, 0xe, 0x70a, 0x4, 0x1, 0x5, 0xe98, 0x5a253222, 0x1, 0x9c, 0xcb, 0x3, 0x1000, 0x200, 0x2, 0x101, 0x7, 0x1, 0x743, 0x5, 0x4, 0x1, 0x5, 0x6, 0x2, 0x9, 0x1, 0x2, 0x80000, 0x6, 0xa48, 0x5575d5eb, 0xe, 0x4, 0x3, 0x7, 0x8000, 0x8, 0x9, 0x5, 0x7fffffff, 0x401, 0x8001, 0x2, 0x9, 0x9, 0xfffffffc, 0x2, 0x8, 0xc05, 0x56, 0x7, 0xfffffffd, 0x40, 0x0, 0x6, 0x1, 0x4, 0x4, 0x1, 0x80000001, 0x5, 0x1c91e0, 0x800, 0x0, 0x7, 0x1, 0x5, 0x5, 0x7, 0x1000, 0x6, 0xfe0000, 0x8, 0x328, 0xa3, 0x800, 0x8, 0x8, 0x9, 0x5, 0x5, 0x8, 0x8, 0xd45, 0x5, 0x0, 0x6, 0x3, 0x2, 0x7, 0xdd9, 0xfffffff8, 0x101, 0xcd, 0x400000, 0x3ff, 0x7, 0x17b8, 0x6, 0x3, 0x1, 0xc, 0xfff, 0x7, 0x7fffffff, 0x9, 0xfffffff7, 0x5, 0xfff, 0x9, 0xd40b, 0xffffffff, 0x2, 0xfffff54a, 0x4, 0x80000000, 0x1, 0xffffb812, 0xda3, 0xab9, 0x3, 0x5, 0x9, 0x600, 0x51be, 0x200, 0x2, 0x1, 0x6, 0xfffffffe, 0x1, 0x6, 0x90, 0x0, 0xc3c, 0x8, 0x0, 0x3, 0xffff, 0x3, 0x15, 0x9, 0x1000, 0x9, 0x0, 0x3, 0x1, 0x101, 0x4, 0x7fff, 0x10, 0x8, 0x10, 0x4, 0x81, 0x2, 0x6, 0xfffffff4, 0x3, 0x8, 0x2, 0xc, 0x6, 0xfffffffb, 0x3, 0xff, 0x1, 0x9, 0xdde0, 0xffff, 0x10001, 0xffff, 0x6, 0x4, 0x2, 0x80000000, 0x3, 0x8001, 0xa, 0xd4, 0x5, 0x2, 0xb, 0xfffffffb, 0xd, 0x4, 0x3a0, 0x5b8, 0x3, 0x8, 0x6, 0x9, 0xff, 0x8000, 0x4, 0xe12, 0x6, 0xffffff01, 0x4, 0xfdbf, 0x3, 0x6, 0x8, 0xfffffffb, 0x10000, 0x892c, 0x31b, 0xfffffff8, 0x7367, 0xfffffffb, 0x6, 0x8000, 0x80, 0x1, 0x8, 0x6, 0x4, 0x80, 0x5, 0x4, 0x0, 0xca, 0x6, 0x4, 0x4, 0x735, 0x10000, 0x6, 0x8, 0xffff0b69, 0x6, 0xb8c4, 0x8000, 0x8, 0x0, 0xe, 0x6, 0x4, 0x9, 0x7fff, 0x42, 0xcf2b, 0xfffffffc, 0x2, 0x0, 0x49fa, 0xb549, 0xffff, 0x2de, 0x1, 0x2a3f, 0x3080, 0x7fffffff, 0x0, 0x2, 0x5b, 0x8, 0x2, 0xd, 0x7fff, 0x41a0000, 0x1ff, 0x2d, 0x8f0b, 0x5, 0x8000, 0x2, 0x7, 0x86, 0x10001, 0x34, 0xf57, 0xfffffff5, 0x6bff, 0x6, 0x6, 0x7, 0xfff, 0xc, 0x48, 0x81, 0x9, 0x3, 0x10000000, 0x3, 0x9, 0x3, 0x7, 0x8, 0xa, 0x4, 0x30000000, 0x5, 0x38, 0x7, 0x1, 0xfffffff9, 0x7, 0x8, 0xd2, 0x3ff, 0xc96, 0x4, 0x4, 0xe0, 0x10, 0x4, 0x101, 0x100, 0x1, 0xff, 0x7f, 0x6, 0x6, 0x16f1c, 0x6d, 0xffff617b, 0x0, 0x8, 0x5, 0x1e, 0xffffffff, 0x2, 0x60, 0xff, 0xfffffffd, 0x0, 0x4, 0xd1, 0xff, 0x9, 0x1, 0xfffff000, 0x3, 0xffffffff, 0xa, 0x0, 0xfffffff9, 0x0, 0x4, 0x9, 0x6, 0x8, 0x6, 0x5, 0x94, 0x100, 0x7fffffff, 0x5, 0x8, 0x2, 0x4, 0x5, 0xfffffff8, 0x8, 0x9, 0x2, 0x8, 0xaf37, 0x1, 0x0, 0x26, 0x5, 0x2, 0x7, 0xff, 0x0, 0x7, 0x37, 0xffffffff, 0x8, 0x5, 0x9, 0x2, 0x2, 0x1, 0xa, 0x9, 0x8, 0x8, 0x62e1, 0x101, 0xfffff733, 0x1000, 0x518a, 0x2804, 0x87b, 0xfffffffc, 0xa8, 0x7fff, 0x400, 0x8, 0x1, 0x9, 0x68170000, 0x9, 0x7, 0x1e, 0x3ff, 0x1, 0x8, 0xfffffff7, 0x200, 0xffff0001, 0x2, 0x74, 0x7, 0xe74a, 0xfffffe01, 0xb074, 0x6a, 0x5, 0x9, 0x400, 0xc, 0x10001, 0x4b46, 0x642f, 0x80000000, 0x8, 0x8000, 0x80000001, 0x80000001, 0x6, 0x510, 0x3, 0x3, 0xffffffff, 0x3, 0x3, 0x5, 0x80, 0x10, 0x4, 0x1, 0x3, 0x9, 0xd44, 0x7, 0x4, 0x0, 0x9, 0x3, 0x2, 0x609, 0x1, 0x9, 0x9, 0xffff9757, 0x8000, 0x7f, 0x9, 0x5, 0x95, 0x80000000, 0x4, 0x3, 0x7fff, 0x9, 0x4, 0xb, 0x2, 0x38e, 0x7, 0x9d, 0x10001, 0xfff, 0x7f, 0x15a38cb0, 0xfffffffa, 0xe8b3, 0x100, 0x47b, 0x0, 0x10, 0xe22, 0x5, 0x7, 0x0, 0x2, 0x80000001, 0x9, 0xfff, 0x8, 0x7, 0x5, 0x0, 0x3ff, 0x7002, 0x6, 0x8, 0x4, 0xed, 0xf4, 0xde38, 0x200, 0x2, 0x7, 0x8340, 0xb, 0x2, 0x5, 0x6, 0x8000, 0x7, 0x1ff, 0x7fffffff, 0x8, 0x0, 0x7fffffff, 0xf, 0x5, 0x7, 0x2, 0x7, 0x7fff, 0x3, 0x7fffffff, 0x1, 0x1, 0x80000000, 0xea, 0x692, 0xc9f, 0x7, 0x9, 0x7ff, 0x1, 0x59e2, 0x3, 0x0, 0x8000, 0x3, 0x6, 0xfffff64b, 0x6, 0xa6, 0x0, 0x9, 0x7, 0x2, 0xffff, 0x2dc1, 0x3, 0x5, 0x5, 0x4, 0x1, 0x7, 0x26, 0x5, 0x1000, 0x10, 0x2, 0xad, 0xb, 0x8, 0xcc, 0x1b9f, 0x3ff, 0x4d17, 0x8, 0x4, 0x6, 0x24, 0xfff, 0x1000, 0x4dd0, 0xff, 0x7fff, 0x7, 0x8, 0x9, 0x5, 0x10000, 0x9, 0xffffffda, 0x7f, 0x2, 0x0, 0x6, 0x1ff, 0x93ae, 0x7fff, 0x4, 0x1, 0xa00, 0x1ff, 0x7, 0x10000, 0x10, 0x8, 0x6, 0x6, 0x6, 0x9, 0x3, 0x3, 0x40, 0x7, 0x40, 0x2, 0x200, 0xfffffff9, 0x80000000, 0x6, 0xfffffff8, 0x6, 0x1, 0x1, 0x1c63, 0x9, 0xfaf, 0x8, 0x3, 0x9, 0x4, 0x3, 0x8, 0x3, 0x7, 0xfffffffb, 0xff, 0xb096, 0x4, 0xcb, 0x401, 0x8c6, 0x10000, 0x920, 0x0, 0xffffffa2, 0x3, 0x8, 0x6, 0x18, 0x7, 0x7, 0x4, 0x7, 0x664, 0x8, 0xcba, 0x2, 0x401, 0x2, 0x3, 0x3331316e, 0x7, 0xf, 0x2, 0x4, 0x6, 0x3, 0x4, 0x2, 0x4, 0x2, 0x7, 0x7, 0x6c19, 0x2, 0x6, 0x1, 0x4, 0x1, 0x8000, 0x5, 0x1, 0x311, 0x4, 0x7ff, 0xff, 0x7, 0xdb, 0x7f, 0x9, 0x1, 0x8, 0x4, 0xb6b, 0x9, 0x7, 0x3, 0x9, 0x5, 0x7, 0x0, 0x10000, 0x1, 0x7, 0x4, 0x5, 0xc, 0x0, 0x9, 0xfffffff7, 0x3, 0x1, 0x5b, 0x5, 0x3, 0x6, 0xd, 0x8000, 0x0, 0x2, 0x0, 0x40, 0xffffe42f, 0x3, 0x0, 0x8, 0x9, 0xa1e, 0x401, 0x3, 0x51, 0x2, 0x1000, 0x2, 0x753c, 0x1e, 0x7, 0x6, 0x94, 0x4, 0x2, 0x10001, 0x40, 0x5d3, 0x28b2, 0xf, 0x3, 0x0, 0x2ee, 0x1, 0x9, 0xf, 0x5, 0x84b, 0x10001, 0x2, 0x2, 0x1, 0x9, 0xfffffda9, 0x2fe, 0x4, 0x4, 0x5, 0x545, 0x6, 0x7, 0x0, 0x650, 0x3, 0x9, 0xb9, 0x5, 0x79, 0x2, 0x9, 0x101, 0x1, 0x38, 0xef0, 0x2cb, 0xfa06, 0x200, 0x7, 0x80000000, 0xffff3818, 0xd0, 0x5, 0x9, 0x7f, 0xff, 0x4, 0x1, 0x7, 0xf736, 0x8, 0x23c6, 0x7, 0x401, 0x100, 0x5, 0x2, 0xfffffff8, 0x5, 0x2, 0xbf1, 0x467c8826, 0xffff, 0x4, 0x7ff, 0x6, 0x5, 0x6, 0x1000, 0x7ff, 0x1, 0x9, 0x0, 0x3a9, 0x7, 0xb, 0xc, 0x9, 0x1, 0x10, 0x0, 0x2, 0x8, 0xa4, 0x7, 0x0, 0x3, 0x9, 0x10000000, 0x7, 0x6, 0xf, 0x7, 0x5, 0x5, 0xb3aa, 0x2, 0xab9, 0x0, 0x49, 0x9, 0x4, 0x0, 0x4f9, 0x7fff, 0x7, 0x3, 0x9000, 0x6, 0x8, 0x3, 0x10000, 0x7, 0x6, 0x8, 0x793c, 0x4, 0x56a, 0x7, 0x3, 0x886, 0x5, 0x8, 0x0, 0x7fffffff, 0xe34]})
io_uring_register$IORING_REGISTER_FILES(r5, 0x1e, &(0x7f0000000000)=[r4], 0x1)

16m3.878051887s ago: executing program 3 (id=2056):
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0)
ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000001180)=ANY=[@ANYBLOB='quota,usrquota_inode_hardlimit=7'])
chdir(&(0x7f0000000240)='./file0\x00')
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0xb0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r0 = open(&(0x7f0000000140)='./file0\x00', 0x10000, 0x0)
mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x1000, 0x1)
chdir(&(0x7f00000003c0)='./bus\x00')
open(&(0x7f0000000040)='.\x00', 0x418601, 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
gettid()

16m2.415569133s ago: executing program 3 (id=2058):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet6(r1, 0x0, 0x0, 0x4000000)

16m2.089184768s ago: executing program 3 (id=2062):
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0)
syz_usb_connect(0x2, 0x36, &(0x7f0000001280)=ANY=[], 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x3, 0x300)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x2, 0x300)
socket(0x200000000000011, 0x2, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10)
setgid(0x0)
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002dc0)=0x14)
sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)
mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x4000, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, 0x0)

15m58.387426878s ago: executing program 3 (id=2075):
r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0)
mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x8, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x20000023896)
close(r0)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x102001, 0x0)
move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0)
ioctl$TIOCGPTPEER(r3, 0x5441, 0xb3d)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x808000}, 0x8)

15m42.815637938s ago: executing program 33 (id=2075):
r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0)
mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x8, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x20000023896)
close(r0)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x102001, 0x0)
move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0)
ioctl$TIOCGPTPEER(r3, 0x5441, 0xb3d)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x808000}, 0x8)

11.75298257s ago: executing program 4 (id=4845):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x0)
getpid()
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/comedi4\x00', 0x600, 0x0)
ioctl$COMEDI_BUFCONFIG(r0, 0x8020640d, &(0x7f0000000040)={0xffffffff, 0x1003, 0x10})
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102368, 0x18fe0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x2040600)
r2 = add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000002240)="d790", 0x2, 0xfffffffffffffffe)
syz_emit_ethernet(0x76, 0x0, 0x0)
r3 = fsmount(0xffffffffffffffff, 0x0, 0x6)
read$msr(r3, &(0x7f0000000300)=""/137, 0x89)
socket$inet6_tcp(0xa, 0x1, 0x0)
pipe2$watch_queue(0x0, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r2, 0xffffffffffffffff, 0x90)
keyctl$update(0x2, r2, &(0x7f0000000240)="ac", 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3a}}, 0x8000000, 0x1, 0xff, 0x1}, 0x20)
r5 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_CONTINUE(r5, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000aaa000/0xe000)=nil, 0xe0fe}})
syz_usb_connect(0x0, 0x34, &(0x7f0000000440)=ANY=[@ANYRESOCT=r2], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})

11.12759785s ago: executing program 5 (id=4851):
r0 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1a, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x40, 0xc, 0x77, 0x2}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x20, 0x21, 0x7, {0x7, 0x11, "e4ff14eca8"}}, 0x0}, 0x0)
syz_usb_control_io$sierra_net(r0, &(0x7f0000000800)={0x14, &(0x7f00000001c0)={0x40, 0xb, 0x8d, {0x8d, 0x3, "6ea51e340468501c6fa2af770858877676c363eb900605c985317ab0e717f2e51d87e4cf1899e5f625e39b7ba263f90ac1ccbc3272175d98550f8d60ce6a4032f4e7250b3e1414501537ed54f7102c2d69b1290c9599439ce02ff211b5fd2ee3c71045627465265b43c78cab17a84e67a0758f0c2eb86a66af74bc79c3142dd495831e3cad5e7ed28d5be3"}}, &(0x7f0000000280)={0x0, 0x3, 0x35, @string={0x35, 0x3, "44e5deabe5b151a2a2665a2e5da1765d9ee15aa391bfff89257ea2ed68542930ef3b8f6205738227b55ad56664b0b1936e2f90"}}}, &(0x7f00000007c0)={0x1c, &(0x7f0000000840)={0x40, 0x3, 0x94, "72651c60af21782b33b43e8abae2dda8a55a38efb11d07f1d12c227cd36955e35e7ee070f2be39a762a129c7d165fd7826de0b735ddd86fbcb733cb7d7b3924cf5107ae291635b1cee150917556cb1a6fcd9a0cf37c05251b709359645d7a20eac78b8bba7b4d5e411df5adb795455e5b1f03a401b406ef03c127902b39333d20d1340d64d47a592aac9aa0e132114ae90e9ebce"}, &(0x7f0000000340)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000780)={0x21, 0x0, 0x4, "497aba7e"}})

8.927308968s ago: executing program 6 (id=4857):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00')
r1 = syz_open_dev$swradio(&(0x7f0000002a40), 0x1, 0x2)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r4, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e00030000000300000005000700080000008e9363c4c553ed462c985832579f4dacc9eb9273954201a3272706dafa5114ce0875ac03d836cd8057e02095ec225f81c53015755d99f73c34f53873cb9f1192bb923542dd94e868827372da"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0)
syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
sendmsg$unix(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@rights={{0x14, 0x1, 0x1, [r7]}}], 0x18, 0x800}, 0x0)
recvmsg(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002d00)=""/78, 0x4e}, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x2)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x12, 0x4, 0x8, 0xb}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x200000000000011, 0x2, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x4, 0x0, 0x5374}, 0x1d, [0x8000, 0x78, 0xf, 0x2, 0x80, 0x2, 0x203, 0x7e, 0x4, 0x4b, 0x39cc1919, 0x40, 0x9, 0x5, 0xffff2d37, 0x881, 0x6, 0x3, 0x0, 0x5, 0x4, 0x3, 0x5, 0x3c5d, 0x1, 0x0, 0x9, 0x2, 0x15bb, 0x2, 0xe65f, 0x3, 0x7, 0x3, 0x7fff, 0x7, 0x80000000, 0xa72, 0x3, 0x7, 0x0, 0x71, 0xe, 0x5, 0x1, 0x5, 0x9, 0x3a, 0xffffff7f, 0x6, 0x6, 0xfffbffff, 0x5, 0x4, 0x8, 0x0, 0x80, 0x2, 0x4, 0x9, 0x8, 0x7, 0x1f, 0x40], [0x10000007, 0x3, 0x800, 0x8000, 0x10, 0xffeffff3, 0x8, 0x200c7, 0xf9, 0x10, 0x2bf, 0x6c9, 0xfff, 0xfffffffc, 0x5, 0x0, 0xd14, 0x5, 0x2f, 0xe, 0x4312, 0x7c, 0xea4, 0x0, 0x4, 0x22, 0x8000, 0x40009, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x7f9, 0x5, 0x2, 0x2, 0x9, 0x5, 0x9, 0x8, 0x800000d, 0x88da, 0x2007, 0xd, 0x1, 0xfe000000, 0x10002, 0x2, 0x7b, 0x9, 0x3, 0x3, 0x8, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x1000042, 0xffff], [0x7, 0xf5fd, 0x0, 0x5, 0x1, 0x100, 0xa, 0x9, 0x800003, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x5, 0x20000005, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x0, 0x3e7, 0xa, 0x5, 0x200, 0x5, 0x3, 0x8, 0x8, 0x6cfc, 0x5, 0x39, 0x7, 0x200, 0x80, 0x3, 0x4e0a, 0x7, 0x1000, 0xa2, 0x7, 0x5, 0x3, 0x6, 0xac8, 0xffffffff, 0x2, 0x11, 0x7ff, 0xfffffff9, 0x0, 0x10000, 0xffff, 0x2b98, 0x1, 0x4, 0x120000, 0xbe, 0x0, 0xa2ed, 0x2, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x3, 0xa, 0x80000006, 0x0, 0x5, 0x7d, 0xc9, 0x6, 0x6, 0x8, 0x57b, 0x7, 0x10000, 0x6, 0x7ffd, 0xfffd, 0x4, 0x20002, 0x5, 0xe8a0556, 0x2, 0x14c, 0x3, 0x6, 0x6, 0x3, 0x80000000, 0x5, 0x8, 0xce, 0xee1, 0xfffff000, 0x179, 0x3, 0x7e, 0x100, 0x9600, 0x56e, 0x2, 0x1007, 0x40000006, 0x1, 0x0, 0x8, 0x4, 0x30b1d693, 0xa1f, 0xc, 0x800007, 0xfffffffe, 0x3, 0x0, 0xffff, 0x8000007, 0x2bf, 0x3, 0x200, 0x7fffffff, 0x2]}, 0x45c)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r11=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r11, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40)
ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000002b00)=@mmap={0x100, 0x7, 0x4, 0x800, 0x5, {0x77359400}, {0x2, 0x2, 0xf9, 0x5, 0xf, 0x0, "c41ae572"}, 0x8, 0x1, {}, 0xc7f5})
fchdir(r0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240400c4}, 0xc004000)
r12 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000000000008d904c2a000000000000109022400010000b000090400faff030001000921f6f40001220500090581030800030009e3be2cd8697ebc78"], 0x0)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, 0x9, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004004}, 0x4004001)
syz_usb_control_io$hid(r12, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

8.890972813s ago: executing program 1 (id=4858):
r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0xfffffffffffffffe, 0x10120)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_qrtr_SIOCGIFADDR(r1, 0x8915, 0x0)
ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000480)={0x0, 0xffffffffffffffff})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f00000000c0), 0x1000082, &(0x7f0000000100)={[], [{@obj_role={'obj_role', 0x3d, '/dev/\xecE\x89\xe6\xb6\x95k\xf5\xff\xff\xff\xff\xff\xff\x0f{\xad\xd4s\x04S2\xe6\xfbmA\xe3&\x84\x96\xbf\xc2\xe3ARYv]\xadE\x82\xaa\xdbb'}}]})
accept$phonet_pipe(r0, &(0x7f0000000080), &(0x7f0000000140)=0x10)
socket$nl_route(0x10, 0x3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x80000018})
shutdown(0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x10000, 0x1, 0x8000000, 0x1000, &(0x7f0000ffe000/0x1000)=nil})
epoll_create1(0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, 0x0, 0xc000)
sched_setaffinity(0x0, 0xff02, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r4, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d", 0x63}], 0x1}}], 0x1, 0x20008000)
setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca4bb6", "9ecb592c6ee49fbd"}, 0x28)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
socket$netlink(0x10, 0x3, 0x10)
readv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000240)=""/50, 0x32}, {&(0x7f0000000280)=""/203, 0xcb}, {&(0x7f0000000380)=""/11, 0xb}, {&(0x7f00000003c0)=""/235, 0xeb}, {&(0x7f00000004c0)=""/226, 0xe2}], 0x5)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x400000}, 0xc)

8.661967205s ago: executing program 4 (id=4859):
r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007e9eb4104c053800f516010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x42}, 0x0, 0x0})
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000f40), 0x40, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000001000), 0x181cc0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000740)={0x1c, &(0x7f0000000280)={0x40}, 0x0, 0x0})
syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007e9eb4104c053800f516010203010902120001000000000904"], 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x42}, 0x0, 0x0}) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000f40), 0x40, 0x0) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000001000), 0x181cc0, 0x0) (async)
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000740)={0x1c, &(0x7f0000000280)={0x40}, 0x0, 0x0}) (async)

8.355203137s ago: executing program 1 (id=4860):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sysfs$1(0x1, &(0x7f0000000380)='\x00')
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, 0xffffffffffffffff, 0x100000000)
mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00003eb000/0x1000)=nil)
socket$netlink(0x10, 0x3, 0x12)
r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
read$FUSE(r3, &(0x7f0000005e40)={0x2020, 0x0, <r4=>0x0, <r5=>0x0, <r6=>0x0}, 0x2020)
write$FUSE_ATTR(r3, &(0x7f0000005340)={0x78, 0x0, r4, {0x2000000007, 0x400, 0x0, {0x6, 0xfffe000000000000, 0xfffffffffffffffb, 0xff, 0x694, 0x3, 0x7b, 0x9, 0x800, 0x6000, 0x2, r5, r6, 0xb, 0x8, 0x1000000}}}, 0x78)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001100010027bd7000fddbff250000000009"], 0x20}, 0x1, 0x0, 0x0, 0x8855}, 0x80)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004050000000000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES16=r1, @ANYRES16=r5, @ANYBLOB='\x00'/28], 0x48)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000140)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000400)={0x48, 0x2, r9, 0x0, 0x0, 0x0, <r10=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r7, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r10, r8, 0x0, 0x0, 0x0, 0x0, 0x0})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b002edd06f95bce46786fdf38000075000000000000000000000400000000", @ANYRESHEX=r5, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0500"/28], 0x2f)
capset(&(0x7f0000000480)={0x19980330}, &(0x7f0000000040)={0x0, 0x3, 0x2, 0x89, 0xfffffffb})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x15, 0x1c, &(0x7f0000000640)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES64, @ANYBLOB="0000000000000000b702000014000000b7060000050000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff0000000065090000000000007baaf0ff00000000ad9900000000000007080000f8ffffffa400000000000007040000f0ffffffc7020000080000001826000000", @ANYRESDEC=r5, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60)
getsockopt$inet_buf(r0, 0x118, 0x2, 0x0, &(0x7f00000003c0))

7.696776247s ago: executing program 5 (id=4862):
syz_open_procfs(0x0, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_pidfd_open(0x0, 0x0)
setns(r0, 0x8020000)
symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x2, 0x4}, &(0x7f0000000380)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_MSG_RING={0x28, 0x7b, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)="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", 0x600, 0x3, 0x1})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000004c00)=""/102392, 0x18ff8)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r5 = syz_io_uring_setup(0xa0, &(0x7f0000000100)={0x0, 0x200089be, 0x1, 0x5, 0x248}, &(0x7f0000000240)=<r6=>0x0, &(0x7f0000000440)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000040)=0xffffdffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0xc000000, 0x0, 0x0, 0x1e})
io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0)
setxattr(0x0, &(0x7f00000001c0)=@known='trusted.overlay.metacopy\x00', 0x0, 0x0, 0x1)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000000000000000050006000900000005000200fc801800"], 0x3c}}, 0x0)
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r9 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r9, 0x65, 0x2, &(0x7f0000000080)=0x8, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000001c0)={'vcan0\x00'})

7.185022968s ago: executing program 1 (id=4863):
socket$inet(0x2, 0x2, 0x1)
clock_adjtime(0x3, 0x0)
socket$inet6(0xa, 0x1, 0x0)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f0000304000/0x3000)=nil, 0x3000, 0x9)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r5, 0xffffffffffffffff, 0x0, 0x5)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000180)={0x0, 0x2, 0x1, "6e6a022b19e9a2f416fb109e2be58b281178b8d46c5d87ebcdba051ac8086181", 0x33363248})
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
close(0xffffffffffffffff)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4062d13c}}}}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0xf0, r7, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0xb4, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x64, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_ALLOWEDIPS={0x28, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x4}, {0x4}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

7.183520573s ago: executing program 6 (id=4864):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e21, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}}, 0x0, 0x0, 0x2a, 0x0, "b25dd300350731437df94f0a338977934d6951cdd6c61e31cc7172c856b141e3f4e87e6ab615ea379a12c5a6f5c6e8b30138f5f3570909f89f3e47f8090000c30a1c48cdff030000fad4624800"}, 0xd8)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
syz_emit_ethernet(0xd7, &(0x7f00000003c0)={@local, @random="e462e98700", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0xc9, 0x64, 0x0, 0x3, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x7, 0x0, 0xe7}, {"9537a46f78a8279dbbe3f5664b557be136b68e30d96ab68a95018ec57bc85d19f7f103383702974edc6b4fde0c3cbb5387c10d61cf29fd30870a8b79224d729f01b1682ed8b451b60726fb41f7b1dbefa523dcab4fbe181f67eacc89345c3b29cc296fe1dfdece7c9da77a5b419b12ca738deb6af4571e483db7ca5d2636ab9c14a84c8e4d8455adca1eec05ce1803bc5141b2d5b740c8c0616b0e98c628cd848f"}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="b700000050000008bca30000000000002403000040feffff7b1af0ff0000000079a4f0ff000000001f030000000000002e030200000000002604fdffffff000e61141800000000001d430000000000007a0a00fe0000001f6114140000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f2440000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c9494963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94)
bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r3 = socket$unix(0x1, 0x2, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg(0xffffffffffffffff, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0)
connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x10000000)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="23002abd7000fcdbdf2501000000000000000c410000000c0014197588c0105e40df"], 0x28}, 0x1, 0x0, 0x0, 0x48010}, 0x4040050)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)

6.967475495s ago: executing program 6 (id=4865):
prlimit64(0x0, 0xe, 0x0, 0x0) (async, rerun: 32)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) (async, rerun: 32)
sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) (async)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x101542, 0x0) (async)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x10000010}) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$SNDCTL_SEQ_PANIC(r0, 0x5111)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) (async)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0xfffc, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10)
setsockopt$inet_int(r3, 0x0, 0x1, &(0x7f00000009c0)=0x1234, 0x4)

6.487462573s ago: executing program 5 (id=4866):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xcb}, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000080)=0x1c)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, 0x0, 0x0, 0x40800)
recvmsg$qrtr(r1, 0x0, 0x0, 0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = socket(0x1d, 0x2, 0x6)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x6a, 0x3, 0x0, &(0x7f0000000180))
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x50)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff000900000009050a", @ANYRES16], 0x0)
syz_usb_ep_read(r5, 0xa, 0x0, 0x0)
setns(r4, 0x24020000)
mount$9p_xen(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x44000, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x8, 0x3, 0x4})

6.465273269s ago: executing program 4 (id=4867):
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
chdir(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x71, r2}, 0x38)
unshare(0x66000080) (fail_nth: 1)
syz_usb_connect(0x0, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001b3ebd40d80483009c83010203010902"], 0x0)
socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/18, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYBLOB="9b00000000000000070000faffffff", @ANYRES32=0x0, @ANYRES32, @ANYRES16=r0], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x18, 0x0, &(0x7f00000000c0)=[@dead_binder_done, @free_buffer], 0x11, 0x0, &(0x7f0000000140)="7497c6a6b8c09e2112877e76c941c9c499"})
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={r5, &(0x7f0000000380), &(0x7f0000000400)=""/236}, 0x20)
socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x20100, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_PIT2(r7, 0x4070aea0, &(0x7f0000000040)={[{0x2, 0x1, 0x81, 0x7f, 0x6, 0x7, 0x1, 0x7f, 0x7, 0x5, 0x7f, 0x92, 0x80000}, {0x8ab, 0x0, 0x1, 0x40, 0x7, 0x9, 0x8, 0xfa, 0x0, 0x6d, 0x6, 0x9, 0xa32}, {0x5, 0x6, 0x78, 0xa1, 0xd, 0x8, 0x6, 0x1, 0x1, 0x5, 0x1, 0xff, 0x7}], 0x7})
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)

6.127638184s ago: executing program 1 (id=4868):
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
chdir(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x71, r2}, 0x38)
unshare(0x66000080)
syz_usb_connect(0x0, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001b3ebd40d80483009c83010203010902"], 0x0)
socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/18, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYBLOB="9b00000000000000070000faffffff", @ANYRES32=0x0, @ANYRES32, @ANYRES16=r0], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x18, 0x0, &(0x7f00000000c0)=[@dead_binder_done, @free_buffer], 0x11, 0x0, &(0x7f0000000140)="7497c6a6b8c09e2112877e76c941c9c499"})
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={r5, &(0x7f0000000380), &(0x7f0000000400)=""/236}, 0x20)
socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x20100, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_PIT2(r7, 0x4070aea0, &(0x7f0000000040)={[{0x2, 0x1, 0x81, 0x7f, 0x6, 0x7, 0x1, 0x7f, 0x7, 0x5, 0x7f, 0x92, 0x80000}, {0x8ab, 0x0, 0x1, 0x40, 0x7, 0x9, 0x8, 0xfa, 0x0, 0x6d, 0x6, 0x9, 0xa32}, {0x5, 0x6, 0x78, 0xa1, 0xd, 0x8, 0x6, 0x1, 0x1, 0x5, 0x1, 0xff, 0x7}], 0x7})
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)

5.334540823s ago: executing program 6 (id=4871):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000300)={@loopback, <r2=>0x0}, &(0x7f0000000340)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100850}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@ipv4_newaddr={0x3c, 0x14, 0x100, 0x70bd2a, 0x25dfdbfd, {0x2, 0x38, 0x10, 0xff, r2}, [@IFA_LABEL={0x14, 0x3, 'pimreg1\x00'}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3ff}, @IFA_BROADCAST={0x8, 0x4, @broadcast}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x40)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x4d)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x8800}, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x69}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r5}, 0x18)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c00010062"], 0x3c}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000100009060000", @ANYRES32=0x0, @ANYBLOB="a7ffa888000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r11, @ANYBLOB], 0x44}}, 0x0)
r12 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r12, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r13], 0x5c}}, 0x40)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036571a20cd0c8000fe67010203010902120001000000000904"], 0x0)
r14 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)

5.242119635s ago: executing program 0 (id=4872):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00'}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x176)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) (fail_nth: 11)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c)

4.314528169s ago: executing program 0 (id=4873):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="34000000000803000000000000000000000000000900010073797e30000000000600024088a800000500030001000000040004"], 0x34}}, 0x800)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="b00000000208010200000000000000000500000109000100"], 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x45, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x6081}, 0x4020881)

4.191491669s ago: executing program 0 (id=4874):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff0000}, {0x8, 0x7, 0x66, 0x5}, {0x2, 0xf, 0x9, 0xca5}, {0x5, 0x8, 0xc, 0x7}]})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x3a85ef35342a412e)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xceca, 0x1c800, 0x2, 0x25f})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x583a, 0x5, 0xa, 0x4000000000, 0x6, 0x2, 0x1041, 0x4, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x9, 0x800005, 0x6a], 0x1, 0x1000d6})
ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x890c, &(0x7f0000000000)=@add_del={0x2, 0x0})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x95}, 0x1c)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
madvise(&(0x7f0000c46000/0x3000)=nil, 0x3000, 0xa)
munmap(&(0x7f000026a000/0x12000)=nil, 0x12000)
connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e)
mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil)
membarrier(0x2, 0x0)

4.136746024s ago: executing program 0 (id=4875):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00'}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x176)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0xf00, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c)

3.843638306s ago: executing program 4 (id=4876):
openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="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", 0xfd}], 0x1}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c", 0x3d}, {&(0x7f0000000a40)}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000640)="5506", 0x2}], 0x1}}], 0x3, 0x11)
r1 = accept4(r0, 0x0, 0x0, 0x800)
r2 = openat$audio1(0xffffffffffffff9c, &(0x7f00000007c0), 0x800, 0x0)
write$dsp(r2, &(0x7f0000000800)="a8209ba6", 0x4)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000900)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f00000bd000), 0x492492492492846, 0x0)
connect$unix(r4, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e)
ioctl$sock_bt_hci(r3, 0x800448d3, &(0x7f0000000080)="dcd7c1d5f0bf09399a7f39de26d0f7709fba56f5951f1432d6e06bd8336d47cee11f707bd8761b5bc1527cb03853d30479041476cd09d29d4f2573b7b7bd2222ac63f7cc54e7")
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a0000000000c000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="040000000000000050001100ac1414aa000000000000000000000000ffffffff00"/43], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000540)={'wlan1\x00'})

3.277220366s ago: executing program 1 (id=4877):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000017c0), r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_usb_connect$cdc_ncm(0x4, 0x76, 0x0, 0x0)
socket$inet6(0xa, 0xa, 0x108000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0)
ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000000080)={0xc000003, 0x3, &(0x7f0000000580)=[0x21, 0x8004, 0x1, 0x4, 0x9, 0x1ed, 0x2, 0x2, 0xbb, 0xc58f, 0x2060, 0xfed, 0xfffffffa, 0x1ac, 0xfffffff8], 0x0, 0x2})
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8)
r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000080)={0x5, 0x2, 0x1, "6705f8a090b30f40032abcd30cfaa74ed04eafba2a466ae693f6e48e9ae4bba7", 0x32314d54})
syz_open_dev$sg(0x0, 0xa, 0x241)
sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000001840)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040001}, 0x80)
r5 = socket$inet(0x2, 0x3, 0x4)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
r6 = userfaultfd(0x801)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000000)={&(0x7f000000c000/0x3000)=nil, &(0x7f000000d000/0x1000)=nil, 0x3000, 0x3})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e80)={0x6, 0x0, 0x0, 0x0, 0x8, 0x36, &(0x7f0000000c00)=""/54, 0x41000, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000e00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000e40)=[{0x126f2af, 0x5, 0x2, 0x9}, {0x1, 0x3, 0x6, 0x9}], 0x10, 0x5}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000004d00)=@newqdisc={0x148, 0x24, 0xf0b, 0x1000000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfffe}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x9, 0x3, 0x488f, 0x16, 0xf, 0x7}}, @TCA_RED_STAB={0x104, 0x2, "8b5d92b27abf1ca08736186ed37d549dbfc3691ec2aa55be5c67b16e00063e342bdf6ce2208d212a5f719bcfd0e81681864328a15ddc61b34da0f9007ee435f193a13a1a884ffd99547cd256559837e4203b1c69d9eaed6d8964a66d2e304c16b23dce7c17e2d9ad79fd50a10be5f82203e6e5ed280524c80d2177b42fb566a5f1fa86b2241b161d3dcb73b2b6c1c7cf7d873cd654db1c6fe576115f9383d7f8fa1f691b04e231ed2cd07335166cc1a27a2a1f64657db9fe3d156b304f44238fdaafae016234549a027f2617c7bfa22ee254c6f63be8109993837d1b18eaae58ad6994219690d819a71552e3f027449fc6aecd6403467495d5784f704964c31c"}]}}]}, 0x148}}, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@o_path={0x0, r2, 0x4000, r3}, 0x18)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x404c054)
openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)

2.715366418s ago: executing program 5 (id=4878):
socket$inet(0x2, 0x2, 0x1)
clock_adjtime(0x3, 0x0)
socket$inet6(0xa, 0x1, 0x0)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f0000304000/0x3000)=nil, 0x3000, 0x9)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r5, 0xffffffffffffffff, 0x0, 0x5)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000180)={0x0, 0x2, 0x1, "6e6a022b19e9a2f416fb109e2be58b281178b8d46c5d87ebcdba051ac8086181", 0x33363248})
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
close(0xffffffffffffffff)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4062d13c}}}}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0xf0, r7, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0xb4, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x64, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_ALLOWEDIPS={0x28, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x4}, {0x4}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

2.597237172s ago: executing program 4 (id=4879):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000017c0), r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_usb_connect$cdc_ncm(0x4, 0x76, 0x0, 0x0)
socket$inet6(0xa, 0xa, 0x108000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0)
ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000000080)={0xc000003, 0x3, &(0x7f0000000580)=[0x21, 0x8004, 0x1, 0x4, 0x9, 0x1ed, 0x2, 0x2, 0xbb, 0xc58f, 0x2060, 0xfed, 0xfffffffa, 0x1ac, 0xfffffff8], 0x0, 0x2})
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8)
syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0)
sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000001840)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040001}, 0x80)
r4 = socket$inet(0x2, 0x3, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
r5 = userfaultfd(0x801)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000000)={&(0x7f000000c000/0x3000)=nil, &(0x7f000000d000/0x1000)=nil, 0x3000, 0x3})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e80)={0x6, 0x0, 0x0, 0x0, 0x8, 0x36, &(0x7f0000000c00)=""/54, 0x41000, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000e00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000e40)=[{0x126f2af, 0x5, 0x2, 0x9}, {0x1, 0x3, 0x6, 0x9}], 0x10, 0x5}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000004d00)=@newqdisc={0x148, 0x24, 0xf0b, 0x1000000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfffe}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x9, 0x3, 0x488f, 0x16, 0xf, 0x7}}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@o_path={0x0, r2, 0x4000, r3}, 0x18)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x404c054)
openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)

2.583090899s ago: executing program 0 (id=4880):
socket$inet(0x2, 0x2, 0x1)
clock_adjtime(0x3, 0x0)
socket$inet6(0xa, 0x1, 0x0)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f0000304000/0x3000)=nil, 0x3000, 0x9)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r6, 0xffffffffffffffff, 0x0, 0x5)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000180)={0x0, 0x2, 0x1, "6e6a022b19e9a2f416fb109e2be58b281178b8d46c5d87ebcdba051ac8086181", 0x33363248})
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
close(0xffffffffffffffff)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x2)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4062d13c}}}}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0xe0, r8, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0xb8, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x68, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x4}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x4}, {0x4}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)

1.871384945s ago: executing program 6 (id=4881):
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x64, 0x30, 0xffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4}}}, @TCA_IFE_METALST={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) (fail_nth: 2)

1.80567669s ago: executing program 5 (id=4882):
socket(0x2, 0x2, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f000001b000)=""/102400, 0x19000)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff}, './file0\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)
r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7})
ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000000)=0x1)
preadv(r2, &(0x7f0000005280)=[{&(0x7f0000004280)=""/4096, 0x1000}], 0x1, 0x9, 0x6)
mount$tmpfs(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB])
r3 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd)
quotactl_fd$Q_GETQUOTA(r3, 0xffffffff80000700, 0x0, &(0x7f00000001c0))
ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000000280)={0x1, 0x1, @raw_data=[0x8, 0x58, 0x1, 0x7, 0x1, 0xd, 0x1b8, 0x4, 0x82, 0x7, 0x5, 0x1, 0x100, 0x5, 0x766f275b, 0x9]})
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000061401"], 0x28}}, 0x20040080)
r5 = socket$inet6(0xa, 0x2, 0x0)
r6 = socket$nl_audit(0x10, 0x3, 0x9)
bind$netlink(r6, &(0x7f0000000500)={0x10, 0x0, 0x25dfdbfb, 0x200}, 0xc)
syz_emit_vhci(&(0x7f0000009c40)=ANY=[], 0x17)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000140))
mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c23c000, 0x3, 0x2, @thr={0x0, 0x0}})
ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}})
sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)=@deltaction={0x1f4, 0x31, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x15d2}}, {0x10, 0x418, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x7c, 0x1, [{0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x14, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x100}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x54, 0x1, [{0x14, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x129}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x56}}]}, @TCA_ACT_TAB={0x4}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x801}, 0x8001)
openat$audio1(0xffffffffffffff9c, 0x0, 0x40, 0x0)
mremap(&(0x7f000000d000/0x4000)=nil, 0x4000, 0x3000, 0x7, &(0x7f0000ffb000/0x3000)=nil)

1.061486201s ago: executing program 0 (id=4883):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000009440)=<r2=>0x0)
bind$nfc_llcp(r1, &(0x7f0000009480)={0x27, r2, 0xffffffffffffffff, 0x5, 0x1, 0x6, "be8e19b6a865e7ab561f559d74a73485c8abd6554271850320b9571ca0d8f47c1e1a12c085d196fd2eb6853571e830e500", 0x30}, 0x60)
syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100153a48e08f00a71729188010203010902240001060000000904000002ffffff0009050b0000000000000905ec"], 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) (async)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000009440)) (async)
bind$nfc_llcp(r1, &(0x7f0000009480)={0x27, r2, 0xffffffffffffffff, 0x5, 0x1, 0x6, "be8e19b6a865e7ab561f559d74a73485c8abd6554271850320b9571ca0d8f47c1e1a12c085d196fd2eb6853571e830e500", 0x30}, 0x60) (async)
syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100153a48e08f00a71729188010203010902240001060000000904000002ffffff0009050b0000000000000905ec"], 0x0) (async)

921.291477ms ago: executing program 1 (id=4884):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4850}, 0x8000)
sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8000, 0x4f}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24004804}, 0x800)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20008000)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0xd0f, 0x0, 0x25dfdb7c, {0x60, 0x0, 0x0, r8, {}, {0x1, 0x2}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x40000)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r9 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r9, &(0x7f0000002700)=""/102392, 0x18ff8)
r10 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0)
mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000002000010027bd70000009000002000000000000070000000014000200fe800000000000000000000000000101080018004e234e23"], 0x38}, 0x1, 0x0, 0x0, 0x24048844}, 0x0)

429.717833ms ago: executing program 5 (id=4885):
r0 = socket(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan0\x00'})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x10100, 0x139)
faccessat2(r4, &(0x7f0000000200)='./file0\x00', 0x88, 0x100)
r5 = syz_open_dev$dri(0x0, 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044060}, 0x40000)
socket$netlink(0x10, 0x3, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xaa100, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB])
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x48)
r10 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r10, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c)
setsockopt$sock_linger(r10, 0x1, 0x3c, 0x0, 0x0)
sendmmsg$inet6(r10, &(0x7f0000003cc0)=[{{0x0, 0xe00, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x4}, 0x0, 0x8000}})

375.151509ms ago: executing program 6 (id=4886):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f0000000340)='./file0\x00')
link(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1)
getdents64(r0, &(0x7f00000007c0)=""/85, 0x55)

0s ago: executing program 4 (id=4887):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0x749}, 0x94)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
fsopen(0x0, 0x1)
openat$dir(0xffffffffffffff9c, 0x0, 0x8880, 0x85)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)=0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x43)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x8, <r4=>r0, 0x80000})
connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)

kernel console output (not intermixed with test programs):

or??
[ 1609.313077][   T24] usb 6-1: new high-speed USB device number 77 using dummy_hcd
[ 1609.443262][ T6642] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[ 1609.502235][   T24] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[ 1609.512630][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1609.538790][   T24] usb 6-1: config 0 descriptor??
[ 1609.643141][ T6642] usb 2-1: Using ep0 maxpacket: 32
[ 1609.655206][ T6642] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1609.703950][ T6642] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[ 1609.715619][ T6642] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1609.724155][ T6642] usb 2-1: Product: syz
[ 1609.728564][ T6642] usb 2-1: Manufacturer: syz
[ 1609.767152][   T10] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[ 1609.779596][ T6642] usb 2-1: SerialNumber: syz
[ 1609.793697][ T6642] usb 2-1: config 0 descriptor??
[ 1609.806753][ T6642] gs_usb 2-1:0.0: Required endpoints not found
[ 1610.061382][ T6642] usb 2-1: USB disconnect, device number 20
[ 1610.099052][T22967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1610.108655][T22967] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1610.202813][T22976] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1610.444003][T22976] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[ 1610.774629][T22995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1610.783297][T22995] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1610.824646][T22976] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4482'.
[ 1610.836603][   T24] usb 6-1: Cannot set autoneg
[ 1610.841454][   T24] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[ 1610.856757][   T24] usb 6-1: USB disconnect, device number 77
[ 1611.104744][   T30] audit: type=1400 audit(2000001064.261:3891): avc:  denied  { execute } for  pid=22993 comm="syz.0.4488" name="file0" dev="tmpfs" ino=1882 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[ 1611.127130][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1611.948966][   T30] audit: type=1400 audit(2000001064.261:3892): avc:  denied  { execute_no_trans } for  pid=22993 comm="syz.0.4488" path="/342/file0" dev="tmpfs" ino=1882 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[ 1611.972540][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1612.169208][T23010] veth0: entered promiscuous mode
[ 1612.205236][T23010] veth0: left promiscuous mode
[ 1612.425297][T16811] usb 5-1: USB disconnect, device number 32
[ 1612.717890][   T30] audit: type=1400 audit(2000001064.621:3893): avc:  denied  { create } for  pid=23003 comm="syz.6.4490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[ 1612.737807][   T30] audit: type=1400 audit(2000001064.831:3894): avc:  denied  { ioctl } for  pid=23005 comm="syz.6.4491" path="socket:[97382]" dev="sockfs" ino=97382 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1612.775069][   T30] audit: type=1400 audit(2000001065.321:3895): avc:  denied  { ioctl } for  pid=23008 comm="syz.1.4492" path="socket:[97396]" dev="sockfs" ino=97396 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1612.832778][T23018] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4495'.
[ 1612.886297][   T30] audit: type=1400 audit(2000001065.331:3896): avc:  denied  { setopt } for  pid=23008 comm="syz.1.4492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1612.980856][   T30] audit: type=1400 audit(2000001065.431:3897): avc:  denied  { read write } for  pid=23008 comm="syz.1.4492" name="sg0" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[ 1613.013605][   T30] audit: type=1400 audit(2000001065.431:3898): avc:  denied  { open } for  pid=23008 comm="syz.1.4492" path="/dev/sg0" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[ 1613.343097][   T42] usb 6-1: new high-speed USB device number 78 using dummy_hcd
[ 1613.522993][   T42] usb 6-1: Using ep0 maxpacket: 32
[ 1613.540917][   T42] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe
[ 1613.558150][   T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1613.669131][   T42] usb 6-1: Product: syz
[ 1613.693695][   T42] usb 6-1: Manufacturer: syz
[ 1613.698373][   T42] usb 6-1: SerialNumber: syz
[ 1613.723597][T16811] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[ 1613.766051][   T42] usb 6-1: config 0 descriptor??
[ 1613.883870][T16811] usb 2-1: Using ep0 maxpacket: 32
[ 1613.978374][T16811] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1613.982739][   T42] snd-usb-6fire 6-1:0.0: unable to receive device firmware state.
[ 1614.141522][   T42] snd-usb-6fire 6-1:0.0: probe with driver snd-usb-6fire failed with error -71
[ 1614.163833][T16811] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[ 1614.164855][   T42] usb 6-1: USB disconnect, device number 78
[ 1614.178613][T16811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1614.208228][T16811] usb 2-1: Product: syz
[ 1614.212391][T16811] usb 2-1: Manufacturer: syz
[ 1614.227557][T16811] usb 2-1: SerialNumber: syz
[ 1614.455456][T16811] usb 2-1: config 0 descriptor??
[ 1614.505168][T16811] gs_usb 2-1:0.0: Required endpoints not found
[ 1614.714416][T16811] usb 2-1: USB disconnect, device number 21
[ 1614.737003][T23046] CIFS: VFS: Malformed UNC in devname
[ 1614.967141][T23047] binder: 23041:23047 unknown command 0
[ 1614.972773][T23047] binder: 23041:23047 ioctl c0306201 200000000080 returned -22
[ 1615.083662][   T30] kauditd_printk_skb: 1 callbacks suppressed
[ 1615.083695][   T30] audit: type=1400 audit(2000001068.081:3900): avc:  denied  { bind } for  pid=23041 comm="syz.0.4503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1615.268619][   T30] audit: type=1400 audit(2000001068.101:3901): avc:  denied  { node_bind } for  pid=23041 comm="syz.0.4503" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[ 1615.288774][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1615.561052][   T30] audit: type=1400 audit(2000001068.121:3902): avc:  denied  { ioctl } for  pid=23041 comm="syz.0.4503" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 1615.601240][   T30] audit: type=1400 audit(2000001068.121:3903): avc:  denied  { set_context_mgr } for  pid=23041 comm="syz.0.4503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[ 1615.683698][   T30] audit: type=1400 audit(2000001068.841:3904): avc:  denied  { mounton } for  pid=23050 comm="syz.0.4506" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[ 1616.865662][T16811] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[ 1617.442690][T16811] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1617.454258][T16811] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1617.485703][T16811] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1617.498683][T16811] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1617.515831][T16811] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1617.534034][T16811] usb 5-1: config 0 descriptor??
[ 1618.480008][T16811] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[ 1618.491472][T23087] SELinux:  Context system_u:object is not valid (left unmapped).
[ 1618.492365][   T30] audit: type=1400 audit(2000001071.631:3905): avc:  denied  { mac_admin } for  pid=23079 comm="syz.1.4515" capability=33  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1618.526930][T18566] usb 7-1: new full-speed USB device number 103 using dummy_hcd
[ 1618.544670][   T30] audit: type=1400 audit(2000001071.711:3906): avc:  denied  { relabelto } for  pid=23079 comm="syz.1.4515" name="cgroup.procs" dev="cgroup" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object"
[ 1618.584711][   T30] audit: type=1400 audit(2000001071.711:3907): avc:  denied  { associate } for  pid=23079 comm="syz.1.4515" name="cgroup.procs" dev="cgroup" ino=62 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object"
[ 1618.585599][T23084] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4515'.
[ 1618.748422][T18566] usb 7-1: config 0 has an invalid interface number: 20 but max is 0
[ 1618.756550][T18566] usb 7-1: config 0 has no interface number 0
[ 1618.772826][T18566] usb 7-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[ 1618.796065][T18566] usb 7-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[ 1618.813143][T18566] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1618.821298][T18566] usb 7-1: Product: syz
[ 1618.822010][T23065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1618.831420][T18566] usb 7-1: Manufacturer: syz
[ 1618.844114][T23065] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1618.862942][T18566] usb 7-1: SerialNumber: syz
[ 1618.873213][T18566] usb 7-1: config 0 descriptor??
[ 1618.906111][T23076] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[ 1618.924174][T18566] usb-storage 7-1:0.20: USB Mass Storage device detected
[ 1618.972660][T18566] usb-storage 7-1:0.20: Quirks match for vid 04e6 pid 000b: 4
[ 1618.986248][T23091] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4516'.
[ 1619.197499][T23100] FAT-fs (loop1): unable to read boot sector
[ 1619.200011][T23076] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4513'.
[ 1619.213057][   T30] audit: type=1400 audit(2000001072.351:3908): avc:  denied  { mounton } for  pid=23097 comm="syz.0.4519" path="/346/file0" dev="tmpfs" ino=1905 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[ 1619.249078][   T30] audit: type=1400 audit(2000001072.361:3909): avc:  denied  { create } for  pid=23075 comm="syz.6.4513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 1619.365974][ T5965] usb 6-1: new high-speed USB device number 79 using dummy_hcd
[ 1619.376073][T16811] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[ 1619.508265][T23076] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4513'.
[ 1619.524303][T23104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1619.539978][T23104] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1619.651521][T23076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1619.663201][ T5965] usb 6-1: Using ep0 maxpacket: 32
[ 1619.667466][T23076] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1619.677898][ T5965] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe
[ 1619.687287][T16811] usb 2-1: Using ep0 maxpacket: 32
[ 1619.689606][T18566] scsi host1: usb-storage 7-1:0.20
[ 1619.692561][ T5965] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1619.703497][T18566] usb 7-1: USB disconnect, device number 103
[ 1619.708238][T16811] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1619.721002][ T5965] usb 6-1: Product: syz
[ 1619.729124][ T5965] usb 6-1: Manufacturer: syz
[ 1619.735583][T16811] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[ 1619.745779][T16811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1619.754007][T16811] usb 2-1: Product: syz
[ 1619.758661][ T5965] usb 6-1: SerialNumber: syz
[ 1619.763360][T16811] usb 2-1: Manufacturer: syz
[ 1619.767987][T16811] usb 2-1: SerialNumber: syz
[ 1619.777634][ T5965] usb 6-1: config 0 descriptor??
[ 1619.805340][T16811] usb 2-1: config 0 descriptor??
[ 1619.849641][T16811] gs_usb 2-1:0.0: Required endpoints not found
[ 1619.992467][ T5965] snd-usb-6fire 6-1:0.0: unable to receive device firmware state.
[ 1620.001088][ T5965] snd-usb-6fire 6-1:0.0: probe with driver snd-usb-6fire failed with error -71
[ 1620.014211][ T5965] usb 6-1: USB disconnect, device number 79
[ 1620.047176][ T6642] usb 2-1: USB disconnect, device number 22
[ 1621.097238][   T10] usb 5-1: USB disconnect, device number 33
[ 1625.844947][T18566] usb 6-1: new high-speed USB device number 80 using dummy_hcd
[ 1625.892520][   T30] kauditd_printk_skb: 1 callbacks suppressed
[ 1625.892535][   T30] audit: type=1400 audit(2000001079.051:3911): avc:  denied  { create } for  pid=23143 comm="syz.1.4530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[ 1625.978256][   T30] audit: type=1400 audit(2000001079.051:3912): avc:  denied  { write } for  pid=23143 comm="syz.1.4530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[ 1626.085602][   T30] audit: type=1400 audit(2000001079.121:3913): avc:  denied  { ioctl } for  pid=23143 comm="syz.1.4530" path="socket:[97629]" dev="sockfs" ino=97629 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[ 1626.110284][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1626.118336][T18566] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1626.129574][T18566] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1626.151371][   T30] audit: type=1400 audit(2000001079.281:3914): avc:  denied  { read } for  pid=5177 comm="acpid" name="mouse6" dev="devtmpfs" ino=3542 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1
[ 1626.178232][T23147] kvm: pic: non byte read
[ 1626.182659][T18566] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1626.216947][T23141] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=23141 comm=syz.4.4529
[ 1626.341636][   T30] audit: type=1400 audit(2000001079.281:3915): avc:  denied  { open } for  pid=5177 comm="acpid" path="/dev/input/mouse6" dev="devtmpfs" ino=3542 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1
[ 1626.343652][T23147] kvm: pic: level sensitive irq not supported
[ 1626.429459][T23147] kvm: pic: non byte read
[ 1626.440201][T23147] kvm: pic: level sensitive irq not supported
[ 1626.440255][T23147] kvm: pic: non byte read
[ 1626.450815][T23147] kvm: pic: level sensitive irq not supported
[ 1626.450865][T23147] kvm: pic: non byte read
[ 1626.470678][   T30] audit: type=1400 audit(2000001079.281:3916): avc:  denied  { ioctl } for  pid=5177 comm="acpid" path="/dev/input/mouse6" dev="devtmpfs" ino=3542 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1
[ 1626.718789][T18566] usb 6-1: config 0 descriptor??
[ 1626.816399][T23147] kvm: pic: level sensitive irq not supported
[ 1626.816464][T23147] kvm: pic: non byte read
[ 1626.857520][T23147] kvm: pic: level sensitive irq not supported
[ 1626.857581][T23147] kvm: pic: non byte read
[ 1626.868293][T23147] kvm: pic: level sensitive irq not supported
[ 1626.868354][T23147] kvm: pic: non byte read
[ 1626.888875][T23147] kvm: pic: level sensitive irq not supported
[ 1626.888957][T23147] kvm: pic: non byte read
[ 1627.590372][T18566] keytouch 0003:0926:3333.001E: fixing up Keytouch IEC report descriptor
[ 1627.667385][T18566] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.001E/input/input81
[ 1627.817596][T23181] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4535'.
[ 1627.826929][T23183] netlink: 'syz.4.4534': attribute type 1 has an invalid length.
[ 1627.865807][T18566] keytouch 0003:0926:3333.001E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0
[ 1628.001619][T23134] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 1628.010018][T23134] overlayfs: failed to set xattr on upper
[ 1628.016461][T23134] overlayfs: ...falling back to redirect_dir=nofollow.
[ 1628.023646][   T30] audit: type=1400 audit(2000001081.161:3917): avc:  denied  { mount } for  pid=23133 comm="syz.5.4528" name="/" dev="ramfs" ino=97672 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[ 1628.046086][T23134] overlayfs: ...falling back to metacopy=off.
[ 1628.052912][T23134] overlayfs: ...falling back to uuid=null.
[ 1628.062493][   T30] audit: type=1400 audit(2000001081.161:3918): avc:  denied  { mounton } for  pid=23133 comm="syz.5.4528" path="/bus" dev="ramfs" ino=97675 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[ 1628.085199][   T30] audit: type=1400 audit(2000001081.221:3919): avc:  denied  { mount } for  pid=23133 comm="syz.5.4528" name="/" dev="overlay" ino=97674 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[ 1628.119340][T18566] usb 6-1: USB disconnect, device number 80
[ 1628.143032][   T10] usb 7-1: new high-speed USB device number 104 using dummy_hcd
[ 1628.237212][T23183] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1628.256540][T23185] erspan0: entered allmulticast mode
[ 1628.313075][   T10] usb 7-1: Using ep0 maxpacket: 32
[ 1628.326018][   T10] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe
[ 1628.336403][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1628.472952][   T10] usb 7-1: Product: syz
[ 1628.487916][   T10] usb 7-1: Manufacturer: syz
[ 1628.538197][   T10] usb 7-1: SerialNumber: syz
[ 1628.567574][   T10] usb 7-1: config 0 descriptor??
[ 1628.601385][   T10] snd-usb-6fire 7-1:0.0: too many cards registered.
[ 1629.245761][   T30] audit: type=1400 audit(2000001081.841:3920): avc:  denied  { create } for  pid=23187 comm="syz.0.4536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[ 1629.277460][T23191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4537'.
[ 1629.283030][ T5965] usb 7-1: USB disconnect, device number 104
[ 1630.992405][   T30] kauditd_printk_skb: 6 callbacks suppressed
[ 1630.992423][   T30] audit: type=1400 audit(2000001083.801:3927): avc:  denied  { connect } for  pid=23212 comm="syz.5.4545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 1631.082973][T18566] usb 7-1: new high-speed USB device number 105 using dummy_hcd
[ 1631.300845][T18566] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1631.465139][T18566] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1631.647216][T18566] usb 7-1: Product: syz
[ 1631.656195][T18566] usb 7-1: Manufacturer: syz
[ 1631.881590][T18566] usb 7-1: SerialNumber: syz
[ 1632.005709][T23231] FAT-fs (loop3): unable to read boot sector
[ 1633.592360][T23210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1633.593856][T18566] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[ 1633.824459][T23246] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4553'.
[ 1634.090261][T23210] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1635.467236][   T30] audit: type=1400 audit(2000001087.431:3928): avc:  denied  { unlink } for  pid=23247 comm="syz.0.4554" name="#f9" dev="tmpfs" ino=1965 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[ 1635.489650][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1635.701443][T18566] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO
[ 1635.727619][   T30] audit: type=1800 audit(2000001087.461:3929): pid=23250 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.4554" name="bus" dev="overlay" ino=1967 res=0 errno=0
[ 1635.812223][   T30] audit: type=1400 audit(2000001087.671:3930): avc:  denied  { read write } for  pid=23247 comm="syz.0.4554" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[ 1636.060901][   T30] audit: type=1400 audit(2000001087.671:3931): avc:  denied  { open } for  pid=23247 comm="syz.0.4554" path="/dev/ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[ 1636.113193][T18566] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[ 1636.126235][T18566] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1636.157077][   T30] audit: type=1400 audit(2000001087.681:3932): avc:  denied  { ioctl } for  pid=23247 comm="syz.0.4554" path="/dev/ptp0" dev="devtmpfs" ino=1264 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[ 1636.214036][T18566] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1636.252331][T18566] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71
[ 1636.370737][T18566] usb 7-1: USB disconnect, device number 105
[ 1636.460746][T23259] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64
[ 1636.468673][T23259] audit: out of memory in audit_log_start
[ 1636.881186][   T30] audit: type=1400 audit(2000001090.041:3933): avc:  denied  { unmount } for  pid=16713 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[ 1636.902471][T23255] syzkaller1: entered promiscuous mode
[ 1636.908043][T23255] syzkaller1: entered allmulticast mode
[ 1636.939928][T23255] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4032
[ 1638.604307][   T30] audit: type=1400 audit(2000001091.771:3934): avc:  denied  { create } for  pid=23270 comm="syz.4.4560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[ 1638.626300][T23271] input: syz1 as /devices/virtual/input/input82
[ 1638.770302][   T30] audit: type=1400 audit(2000001091.791:3935): avc:  denied  { write } for  pid=23270 comm="syz.4.4560" name="uinput" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[ 1638.793626][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1639.112963][   T42] usb 7-1: new high-speed USB device number 106 using dummy_hcd
[ 1639.473287][   T30] audit: type=1400 audit(2000001092.361:3936): avc:  denied  { write } for  pid=23277 comm="syz.0.4562" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[ 1640.203003][   T42] usb 7-1: Using ep0 maxpacket: 16
[ 1640.209692][   T42] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1640.226602][   T42] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1640.300324][   T42] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1640.317199][   T42] usb 7-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00
[ 1640.393032][   T42] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1640.425650][   T42] usb 7-1: config 0 descriptor??
[ 1640.642688][T23302] vimc link validate: Scaler:src:16x16 (0x33424752, 1, 1, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1641.535682][T23306] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4567'.
[ 1642.103257][   T42] usbhid 7-1:0.0: can't add hid device: -71
[ 1642.109902][   T42] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 1642.130443][   T42] usb 7-1: USB disconnect, device number 106
[ 1643.484140][T23333] FAULT_INJECTION: forcing a failure.
[ 1643.484140][T23333] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1644.039114][T23333] CPU: 1 UID: 0 PID: 23333 Comm: syz.5.4573 Not tainted syzkaller #0 PREEMPT(full) 
[ 1644.039142][T23333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1644.039153][T23333] Call Trace:
[ 1644.039160][T23333]  <TASK>
[ 1644.039167][T23333]  dump_stack_lvl+0x16c/0x1f0
[ 1644.039205][T23333]  should_fail_ex+0x512/0x640
[ 1644.039236][T23333]  _copy_to_user+0x32/0xd0
[ 1644.039265][T23333]  simple_read_from_buffer+0xcb/0x170
[ 1644.039286][T23333]  proc_fail_nth_read+0x197/0x240
[ 1644.039310][T23333]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1644.039334][T23333]  ? rw_verify_area+0xcf/0x6c0
[ 1644.039361][T23333]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1644.039383][T23333]  vfs_read+0x1e1/0xcf0
[ 1644.039405][T23333]  ? __pfx___mutex_lock+0x10/0x10
[ 1644.039429][T23333]  ? __pfx_vfs_read+0x10/0x10
[ 1644.039452][T23333]  ? __fget_files+0x20e/0x3c0
[ 1644.039478][T23333]  ksys_read+0x12a/0x250
[ 1644.039496][T23333]  ? __pfx_ksys_read+0x10/0x10
[ 1644.039522][T23333]  do_syscall_64+0xcd/0x4e0
[ 1644.039550][T23333]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1644.039568][T23333] RIP: 0033:0x7f5c6ad8d8dc
[ 1644.039583][T23333] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1644.039600][T23333] RSP: 002b:00007f5c6bc14030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1644.039618][T23333] RAX: ffffffffffffffda RBX: 00007f5c6afe5fa0 RCX: 00007f5c6ad8d8dc
[ 1644.039630][T23333] RDX: 000000000000000f RSI: 00007f5c6bc140a0 RDI: 0000000000000006
[ 1644.039640][T23333] RBP: 00007f5c6bc14090 R08: 0000000000000000 R09: 0000000000000000
[ 1644.039651][T23333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1644.039661][T23333] R13: 00007f5c6afe6038 R14: 00007f5c6afe5fa0 R15: 00007fff0866aed8
[ 1644.039686][T23333]  </TASK>
[ 1644.220978][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1645.642962][   T24] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[ 1645.643215][   T10] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[ 1645.753139][ T5965] usb 6-1: new high-speed USB device number 81 using dummy_hcd
[ 1646.941561][   T24] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1646.941594][   T24] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1646.941619][   T24] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1646.941656][   T24] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[ 1646.941678][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1646.970842][T23348] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1646.996529][   T30] audit: type=1400 audit(2000001100.161:3937): avc:  denied  { read } for  pid=23354 comm="syz.6.4579" name="card1" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[ 1646.996579][   T30] audit: type=1400 audit(2000001100.161:3938): avc:  denied  { open } for  pid=23354 comm="syz.6.4579" path="/dev/dri/card1" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[ 1646.999984][   T30] audit: type=1400 audit(2000001100.161:3939): avc:  denied  { ioctl } for  pid=23354 comm="syz.6.4579" path="/dev/dri/card1" dev="devtmpfs" ino=627 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[ 1647.022577][   T30] audit: type=1400 audit(2000001100.181:3940): avc:  denied  { mount } for  pid=23354 comm="syz.6.4579" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[ 1647.052715][   T10] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1647.052739][   T10] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1647.052763][   T10] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1647.052796][   T10] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[ 1647.052814][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1647.053976][T23362] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4581'.
[ 1647.055372][T23352] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[ 1647.110890][ T5965] usb 6-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1647.110912][ T5965] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1647.110927][ T5965] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1647.110962][ T5965] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[ 1647.110981][ T5965] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1647.272940][   T30] audit: type=1400 audit(2000001100.401:3941): avc:  denied  { create } for  pid=23363 comm="syz.0.4582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1647.320924][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1647.893057][T23347] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1647.923160][   T24] aiptek 5-1:17.0: Aiptek using 400 ms programming speed
[ 1647.931842][   T24] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input83
[ 1647.953660][ T5965] usb 6-1: can't set config #17, error -71
[ 1647.960269][ T5965] usb 6-1: USB disconnect, device number 81
[ 1647.989874][   T24] usb 5-1: USB disconnect, device number 34
[ 1647.989945][    C1] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[ 1647.991261][   T30] audit: type=1400 audit(2000001100.711:3942): avc:  denied  { ioctl } for  pid=23363 comm="syz.0.4582" path="socket:[98099]" dev="sockfs" ino=98099 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1648.213295][   T10] aiptek 2-1:17.0: Aiptek using 400 ms programming speed
[ 1648.215681][   T10] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input84
[ 1648.221685][   T10] usb 2-1: USB disconnect, device number 23
[ 1648.221756][    C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[ 1648.928902][T23372] debugfs: 'ttyS3' already exists in 'caif_serial'
[ 1649.682983][ T5965] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[ 1649.825731][T23382] debugfs: 'ttyS3' already exists in 'caif_serial'
[ 1649.963242][ T5965] usb 5-1: Using ep0 maxpacket: 16
[ 1649.973007][ T5965] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[ 1649.994019][ T5965] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1650.002036][ T5965] usb 5-1: Product: syz
[ 1650.164913][ T5965] usb 5-1: Manufacturer: syz
[ 1650.169626][ T5965] usb 5-1: SerialNumber: syz
[ 1650.503929][ T5965] usb 5-1: config 0 descriptor??
[ 1650.811501][T23379] netlink: del zone limit has 8 unknown bytes
[ 1650.889566][   T30] audit: type=1400 audit(2000001104.021:3943): avc:  denied  { connect } for  pid=23391 comm="syz.5.4590" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1650.911369][   T30] audit: type=1400 audit(2000001104.041:3944): avc:  denied  { create } for  pid=23377 comm="syz.6.4586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[ 1650.938120][ T5965] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[ 1650.976876][ T5965] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1650.988546][ T5965] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[ 1651.000716][ T5965] usb 5-1: media controller created
[ 1651.039407][ T5965] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1651.138810][ T5965] zl10353_read_register: readreg error (reg=127, ret==0)
[ 1651.147374][ T5965] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[ 1651.156940][ T5965] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[ 1651.281161][ T5965] usb 5-1: USB disconnect, device number 35
[ 1651.306855][ T5965] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[ 1651.751688][   T30] audit: type=1400 audit(2000001104.561:3945): avc:  denied  { mount } for  pid=23396 comm="syz.6.4591" name="/" dev="rpc_pipefs" ino=98162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[ 1651.810104][   T30] audit: type=1400 audit(2000001104.571:3946): avc:  denied  { write } for  pid=23396 comm="syz.6.4591" path="socket:[98178]" dev="sockfs" ino=98178 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1653.196624][T23406] fuse: Bad value for 'fd'
[ 1653.482933][  T866] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[ 1653.681458][   T30] audit: type=1400 audit(2000001106.841:3947): avc:  denied  { connect } for  pid=23410 comm="syz.6.4595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 1653.701310][  T866] usb 5-1: Using ep0 maxpacket: 16
[ 1653.717354][   T30] audit: type=1400 audit(2000001106.881:3948): avc:  denied  { getopt } for  pid=23410 comm="syz.6.4595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 1653.739995][  T866] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88
[ 1653.750419][  T866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1653.758706][  T866] usb 5-1: Product: syz
[ 1653.775899][  T866] usb 5-1: Manufacturer: syz
[ 1653.791078][  T866] usb 5-1: SerialNumber: syz
[ 1653.813685][  T866] usb 5-1: config 0 descriptor??
[ 1654.083265][ T5903] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[ 1654.084074][  T866] speedtch 5-1:0.0: speedtch_bind: data interface not found!
[ 1654.128446][  T866] speedtch 5-1:0.0: usbatm_usb_probe: bind failed: -19!
[ 1654.233942][T23419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4598'.
[ 1654.262976][ T5965] usb 7-1: new high-speed USB device number 107 using dummy_hcd
[ 1654.263110][   T24] usb 5-1: USB disconnect, device number 36
[ 1654.294537][ T5903] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[ 1654.311215][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1654.322510][ T5903] usb 2-1: config 0 descriptor??
[ 1654.377973][   T30] audit: type=1400 audit(2000001107.541:3949): avc:  denied  { write } for  pid=23420 comm="syz.0.4599" name="file0" dev="tmpfs" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[ 1654.420947][T23421] block device autoloading is deprecated and will be removed.
[ 1654.425595][ T5965] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1654.428708][   T30] audit: type=1400 audit(2000001107.561:3950): avc:  denied  { open } for  pid=23420 comm="syz.0.4599" path="/367/file0" dev="tmpfs" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[ 1654.458099][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1654.503435][ T5965] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[ 1654.523193][ T5965] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1654.523620][   T30] audit: type=1400 audit(2000001107.661:3951): avc:  denied  { ioctl } for  pid=16713 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=3564 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[ 1654.531195][ T5965] usb 7-1: Product: syz
[ 1654.531210][ T5965] usb 7-1: Manufacturer: syz
[ 1654.531224][ T5965] usb 7-1: SerialNumber: syz
[ 1654.548072][ T5965] usb 7-1: config 0 descriptor??
[ 1654.555976][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1654.614886][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1654.624911][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1654.644576][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1654.681792][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1654.697048][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1654.724136][T12349] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1654.731533][T12349] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1654.739638][T12349] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1654.747948][T12349] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1654.756198][T12349] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1654.783022][   T30] audit: type=1400 audit(2000001107.931:3952): avc:  denied  { mounton } for  pid=23424 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[ 1654.844690][   T30] audit: type=1400 audit(2000001107.991:3953): avc:  denied  { write } for  pid=23427 comm="syz.4.4601" name="card1" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[ 1654.981164][ T6112] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1655.053637][T23413] tipc: Started in network mode
[ 1655.153041][T23413] tipc: Node identity 1e1a276d7eab, cluster identity 4711
[ 1655.160484][T23413] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1655.688089][T23413] syzkaller0: entered promiscuous mode
[ 1656.302692][   T42] tipc: Node number set to 1622222701
[ 1656.313622][T23413] syzkaller0: entered allmulticast mode
[ 1656.422990][ T5965] usb 7-1: USB disconnect, device number 107
[ 1656.430604][ T6112] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1656.567986][T23413] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[ 1656.618458][ T6112] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1656.716171][T23434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4596'.
[ 1656.836274][T12349] Bluetooth: hci4: command tx timeout
[ 1656.888926][ T6112] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1658.061084][T23413] tipc: Resetting bearer <eth:syzkaller0>
[ 1658.085190][ T5903] usb 2-1: Cannot set autoneg
[ 1658.091317][ T5903] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[ 1658.245855][T23413] tipc: Resetting bearer <eth:syzkaller0>
[ 1658.267458][ T5903] usb 2-1: USB disconnect, device number 24
[ 1658.503131][  T866] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[ 1658.721142][T23413] tipc: Disabling bearer <eth:syzkaller0>
[ 1658.733563][T23424] chnl_net:caif_netlink_parms(): no params data found
[ 1658.904419][T12349] Bluetooth: hci4: command tx timeout
[ 1658.904477][  T866] usb 5-1: Using ep0 maxpacket: 32
[ 1659.067142][  T866] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1659.088614][  T866] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[ 1659.115066][  T866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1659.128536][  T866] usb 5-1: Product: syz
[ 1659.132723][  T866] usb 5-1: Manufacturer: syz
[ 1659.137528][  T866] usb 5-1: SerialNumber: syz
[ 1659.150829][  T866] usb 5-1: config 0 descriptor??
[ 1659.293212][  T866] gs_usb 5-1:0.0: Required endpoints not found
[ 1659.905100][T23463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4609'.
[ 1659.928979][  T866] usb 5-1: USB disconnect, device number 37
[ 1660.233901][T23424] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1660.241885][T23424] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1660.249176][T23424] bridge_slave_0: entered allmulticast mode
[ 1660.257709][T23424] bridge_slave_0: entered promiscuous mode
[ 1660.269186][T23424] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1660.277145][T23424] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1660.284470][T23424] bridge_slave_1: entered allmulticast mode
[ 1660.291863][T23424] bridge_slave_1: entered promiscuous mode
[ 1660.389422][T23471] kvm: MWAIT instruction emulated as NOP!
[ 1660.982944][T12349] Bluetooth: hci4: command tx timeout
[ 1662.097992][   T30] audit: type=1400 audit(2000001115.261:3954): avc:  denied  { create } for  pid=23488 comm="syz.4.4615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[ 1662.163639][   T30] audit: type=1400 audit(2000001115.281:3955): avc:  denied  { setopt } for  pid=23488 comm="syz.4.4615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[ 1662.714408][   T30] audit: type=1400 audit(2000001115.881:3956): avc:  denied  { write } for  pid=23495 comm="syz.1.4616" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[ 1662.737189][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1662.778093][   T30] audit: type=1400 audit(2000001115.941:3957): avc:  denied  { write } for  pid=23497 comm="syz.1.4617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1663.063015][T12349] Bluetooth: hci4: command tx timeout
[ 1663.429085][   T30] audit: type=1400 audit(2000001116.201:3958): avc:  denied  { append } for  pid=23497 comm="syz.1.4617" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[ 1663.615565][ T6112] bond0 (unregistering): Released all slaves
[ 1663.650259][T23504] lo speed is unknown, defaulting to 1000
[ 1663.656794][T23504] lo speed is unknown, defaulting to 1000
[ 1663.664035][T23504] lo speed is unknown, defaulting to 1000
[ 1663.672763][T23504] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[ 1663.684752][T23504] infiniband 3yz0: RDMA CMA: cma_listen_on_dev, error -98
[ 1663.706709][T23504] lo speed is unknown, defaulting to 1000
[ 1663.714559][T23504] lo speed is unknown, defaulting to 1000
[ 1663.721913][T23504] lo speed is unknown, defaulting to 1000
[ 1663.728370][T23504] lo speed is unknown, defaulting to 1000
[ 1663.734745][T23504] lo speed is unknown, defaulting to 1000
[ 1663.741840][T23504] lo speed is unknown, defaulting to 1000
[ 1663.809860][T23424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1663.862578][T23424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1663.882374][ T6112] tipc: Disabling bearer <eth:vlan0>
[ 1663.937069][ T6112] tipc: Disabling bearer <eth:syzkaller0>
[ 1663.961786][ T6112] tipc: Left network mode
[ 1664.124204][T23424] team0: Port device team_slave_0 added
[ 1664.437446][T23424] team0: Port device team_slave_1 added
[ 1665.157523][T23424] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1665.166005][T23424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1665.191898][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1665.360636][T23424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1665.530773][ T6112] hsr_slave_0: left promiscuous mode
[ 1665.536603][ T6112] hsr_slave_1: left promiscuous mode
[ 1666.005243][ T6112] veth1_macvtap: left promiscuous mode
[ 1666.010797][ T6112] veth0_macvtap: left promiscuous mode
[ 1666.016461][ T6112] veth1_vlan: left promiscuous mode
[ 1666.021708][ T6112] veth0_vlan: left promiscuous mode
[ 1666.742283][   T30] audit: type=1400 audit(2000001119.901:3959): avc:  denied  { create } for  pid=23536 comm="syz.0.4626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[ 1666.818682][T23537] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4626'.
[ 1667.758251][T23424] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1667.765908][T23424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1667.791848][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1667.861729][T23424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1667.895740][T23526] tunl0 speed is unknown, defaulting to 1000
[ 1667.903416][T23526] tunl0 speed is unknown, defaulting to 1000
[ 1667.909878][T23526] tunl0 speed is unknown, defaulting to 1000
[ 1667.987697][T23526] infiniband syz1: set active
[ 1667.992673][T23526] infiniband syz1: added tunl0
[ 1668.015066][T23526] RDS/IB: syz1: added
[ 1668.075233][   T42] tunl0 speed is unknown, defaulting to 1000
[ 1668.127019][T23526] tunl0 speed is unknown, defaulting to 1000
[ 1668.201980][T23424] hsr_slave_0: entered promiscuous mode
[ 1668.230256][T23424] hsr_slave_1: entered promiscuous mode
[ 1668.332128][T23424] debugfs: 'hsr0' already exists in 'hsr'
[ 1668.342866][T23424] Cannot create hsr debugfs directory
[ 1668.352420][T23526] tunl0 speed is unknown, defaulting to 1000
[ 1668.373364][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[ 1668.379758][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[ 1668.490811][T23549] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4627'.
[ 1668.948643][T23526] tunl0 speed is unknown, defaulting to 1000
[ 1669.111853][T23526] tunl0 speed is unknown, defaulting to 1000
[ 1669.286778][T23526] tunl0 speed is unknown, defaulting to 1000
[ 1669.465544][T23551] debugfs: 'ttyS3' already exists in 'caif_serial'
[ 1669.752970][T16811] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[ 1669.981236][T16811] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1670.022625][T16811] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1670.063046][T16811] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1670.102896][T16811] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1670.152689][T16811] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1670.185668][T16811] usb 5-1: config 0 descriptor??
[ 1670.238824][T23424] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1670.267070][T23424] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1670.307680][T23424] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1670.358208][T23424] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1670.600686][T16811] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[ 1670.628896][T23424] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1670.682272][T23424] 8021q: adding VLAN 0 to HW filter on device team0
[ 1670.697599][ T6117] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1670.704822][ T6117] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1670.801533][T23551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1670.859524][T23551] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1670.904407][T17218] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1670.911467][T17218] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1670.949691][T23424] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1670.962010][T23424] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1672.224907][T23424] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1672.905008][T14258] usb 5-1: USB disconnect, device number 38
[ 1674.037907][T23601] syzkaller0: entered promiscuous mode
[ 1674.133629][   T30] audit: type=1400 audit(2000001127.291:3960): avc:  denied  { map } for  pid=23608 comm="syz.1.4637" path="/dev/dri/card0" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[ 1674.192933][   T30] audit: type=1400 audit(2000001127.291:3961): avc:  denied  { execute } for  pid=23608 comm="syz.1.4637" path="/dev/dri/card0" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[ 1674.262926][T23601] syzkaller0: entered allmulticast mode
[ 1674.915783][T23614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4638'.
[ 1675.222928][T14258] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[ 1675.394497][T14258] usb 5-1: Using ep0 maxpacket: 8
[ 1675.407742][T14258] usb 5-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30
[ 1675.433390][T14258] usb 5-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[ 1675.448990][T14258] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1675.456850][T14258] usb 5-1: New USB device found, idVendor=04d9, idProduct=a0c2, bcdDevice= 0.00
[ 1675.466161][T14258] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1675.484074][T14258] usb 5-1: config 0 descriptor??
[ 1675.964906][T23620] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4639'.
[ 1678.706352][T23424] veth0_vlan: entered promiscuous mode
[ 1678.748214][T14258] usbhid 5-1:0.0: can't add hid device: -71
[ 1678.755721][T14258] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 1678.756966][T23424] veth1_vlan: entered promiscuous mode
[ 1678.758305][T14258] usb 5-1: USB disconnect, device number 39
[ 1678.788763][T23424] veth0_macvtap: entered promiscuous mode
[ 1678.792385][T23424] veth1_macvtap: entered promiscuous mode
[ 1678.806107][T23424] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1678.818474][T23424] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1678.943206][ T6112] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1679.113123][ T6112] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1679.199758][ T6112] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1679.299772][   T30] audit: type=1400 audit(2000001132.461:3962): avc:  denied  { bind } for  pid=23645 comm="syz.1.4646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 1679.328927][T23647] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4646'.
[ 1680.651969][ T6112] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1680.746735][ T6117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1680.765738][ T6117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1680.807560][ T2948] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1680.816357][ T2948] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1680.853044][   T30] audit: type=1400 audit(2000001134.001:3963): avc:  denied  { mounton } for  pid=23424 comm="syz-executor" path="/root/syzkaller.CNvZ0G/syz-tmp" dev="sda1" ino=2057 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[ 1680.926795][   T30] audit: type=1400 audit(2000001134.001:3964): avc:  denied  { mount } for  pid=23424 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[ 1680.960256][   T30] audit: type=1400 audit(2000001134.001:3965): avc:  denied  { mounton } for  pid=23424 comm="syz-executor" path="/root/syzkaller.CNvZ0G/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[ 1680.987052][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1680.996692][   T30] audit: type=1400 audit(2000001134.001:3966): avc:  denied  { mounton } for  pid=23424 comm="syz-executor" path="/root/syzkaller.CNvZ0G/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=100536 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[ 1681.024419][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1681.031340][   T30] audit: type=1400 audit(2000001134.041:3967): avc:  denied  { mounton } for  pid=23424 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2782 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[ 1681.042917][T16811] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[ 1681.054411][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1681.070137][   T30] audit: type=1400 audit(2000001134.041:3968): avc:  denied  { mount } for  pid=23424 comm="syz-executor" name="/" dev="gadgetfs" ino=8466 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[ 1681.096081][   T30] audit: type=1400 audit(2000001134.041:3969): avc:  denied  { mount } for  pid=23424 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[ 1681.119717][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1681.128532][   T30] audit: type=1400 audit(2000001134.041:3970): avc:  denied  { mounton } for  pid=23424 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[ 1681.152512][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1681.232941][T16811] usb 2-1: Using ep0 maxpacket: 32
[ 1681.239467][T16811] usb 2-1: config 4 has an invalid interface number: 128 but max is 0
[ 1681.248284][T16811] usb 2-1: config 4 has no interface number 0
[ 1681.298297][T16811] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1681.324681][T16811] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1681.335667][T16811] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1681.347309][T16811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1681.359972][T16811] hub 2-1:4.128: USB hub found
[ 1681.560949][T16811] hub 2-1:4.128: 6 ports detected
[ 1681.566162][T16811] hub 2-1:4.128: Using single TT (err -22)
[ 1681.572287][T16811] hub 2-1:4.128: insufficient power available to use all downstream ports
[ 1681.683334][T23662] loop4: detected capacity change from 0 to 2560
[ 1681.696504][T23662] buffer_io_error: 6 callbacks suppressed
[ 1681.696522][T23662] Buffer I/O error on dev loop4, logical block 0, lost async page write
[ 1681.711982][T23662] Buffer I/O error on dev loop4, logical block 1, lost async page write
[ 1681.720630][T23662] Buffer I/O error on dev loop4, logical block 2, lost async page write
[ 1681.729023][T23662] Buffer I/O error on dev loop4, logical block 3, lost async page write
[ 1681.742956][T23662] Buffer I/O error on dev loop4, logical block 4, lost async page write
[ 1681.751376][T23662] Buffer I/O error on dev loop4, logical block 5, lost async page write
[ 1681.768886][T23662] Buffer I/O error on dev loop4, logical block 6, lost async page write
[ 1681.779903][T23662] Buffer I/O error on dev loop4, logical block 7, lost async page write
[ 1681.790360][T23662] Buffer I/O error on dev loop4, logical block 8, lost async page write
[ 1681.799032][T23662] Buffer I/O error on dev loop4, logical block 9, lost async page write
[ 1682.344940][T23667] vlan2: entered promiscuous mode
[ 1682.350011][T23667] bridge0: entered promiscuous mode
[ 1682.355403][T23667] vlan2: entered allmulticast mode
[ 1682.360538][T23667] bridge0: entered allmulticast mode
[ 1682.434476][   T30] audit: type=1400 audit(2000001135.591:3971): avc:  denied  { setopt } for  pid=23666 comm="syz.5.4652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1682.460522][T23675] syz.6.4654 (23675): /proc/23674/oom_adj is deprecated, please use /proc/23674/oom_score_adj instead.
[ 1682.494727][T23672] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1682.528157][T23672] afs: Unknown parameter '	
[ 1682.528157][T23672] '
[ 1683.057040][ T5965] hub 2-1:4.128: hub_ext_port_status failed (err = -32)
[ 1683.125037][  T866] usb 2-1: USB disconnect, device number 25
[ 1683.600370][T16811] usb 7-1: new high-speed USB device number 108 using dummy_hcd
[ 1683.963167][T16811] usb 7-1: Using ep0 maxpacket: 16
[ 1684.337068][T23703] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1684.453081][   T30] audit: type=1400 audit(2000001137.481:3972): avc:  denied  { mount } for  pid=23694 comm="syz.0.4659" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[ 1684.742998][  T866] usb 6-1: new high-speed USB device number 82 using dummy_hcd
[ 1684.906393][  T866] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1684.922990][   T30] audit: type=1400 audit(2000001138.071:3973): avc:  denied  { unmount } for  pid=16713 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[ 1684.924499][  T866] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1685.116077][  T866] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1685.132996][  T866] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1685.142646][  T866] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1685.377029][  T866] usb 6-1: config 0 descriptor??
[ 1685.652026][T23713] netlink: 7 bytes leftover after parsing attributes in process `syz.4.4664'.
[ 1685.987611][   T30] audit: type=1400 audit(2000001138.811:3974): avc:  denied  { read } for  pid=23710 comm="syz.4.4664" name="fb0" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[ 1686.052442][T23700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1686.056164][  T866] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[ 1686.083876][T23700] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1686.537961][T23719] netlink: 5668 bytes leftover after parsing attributes in process `syz.4.4665'.
[ 1686.903515][T16811] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1686.919716][T16811] usb 7-1: unable to read config index 0 descriptor/start: -71
[ 1686.946364][T16811] usb 7-1: can't read configurations, error -71
[ 1687.084198][T23725] vlan2: entered promiscuous mode
[ 1687.089368][T23725] vlan2: entered allmulticast mode
[ 1687.094540][T23725] bridge0: entered allmulticast mode
[ 1687.236796][T23725] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1687.244082][T23725] bridge0: port 2(bridge_slave_1) entered listening state
[ 1687.251340][T23725] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1687.258468][T23725] bridge0: port 1(bridge_slave_0) entered listening state
[ 1687.273209][T23725] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1687.476412][T14258] tunl0 speed is unknown, defaulting to 1000
[ 1688.047316][T23735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4669'.
[ 1688.056888][T23735] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4669'.
[ 1688.065806][T14258] usb 6-1: reset high-speed USB device number 82 using dummy_hcd
[ 1688.192950][T14258] usb 6-1: device descriptor read/64, error -32
[ 1688.701443][   T30] audit: type=1400 audit(2000001141.861:3975): avc:  denied  { create } for  pid=23741 comm="syz.1.4671" name="#100" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[ 1688.722641][T23745] FAULT_INJECTION: forcing a failure.
[ 1688.722641][T23745] name failslab, interval 1, probability 0, space 0, times 0
[ 1688.735901][T23745] CPU: 1 UID: 0 PID: 23745 Comm: syz.1.4671 Not tainted syzkaller #0 PREEMPT(full) 
[ 1688.735917][T23745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1688.735924][T23745] Call Trace:
[ 1688.735928][T23745]  <TASK>
[ 1688.735932][T23745]  dump_stack_lvl+0x16c/0x1f0
[ 1688.735953][T23745]  should_fail_ex+0x512/0x640
[ 1688.735970][T23745]  ? kmem_cache_alloc_lru_noprof+0x66/0x6e0
[ 1688.735990][T23745]  should_failslab+0xc2/0x120
[ 1688.736005][T23745]  kmem_cache_alloc_lru_noprof+0x79/0x6e0
[ 1688.736023][T23745]  ? map_id_range_up+0x2ce/0x3b0
[ 1688.736040][T23745]  ? __d_alloc+0x32/0xae0
[ 1688.736056][T23745]  ? __d_alloc+0x32/0xae0
[ 1688.736069][T23745]  __d_alloc+0x32/0xae0
[ 1688.736084][T23745]  d_alloc_parallel+0x111/0x1480
[ 1688.736106][T23745]  ? __lock_acquire+0xb97/0x1ce0
[ 1688.736119][T23745]  ? __pfx_d_alloc_parallel+0x10/0x10
[ 1688.736138][T23745]  ? lockdep_init_map_type+0x5c/0x280
[ 1688.736151][T23745]  ? lockdep_init_map_type+0x5c/0x280
[ 1688.736166][T23745]  __lookup_slow+0x193/0x460
[ 1688.736183][T23745]  ? __pfx___lookup_slow+0x10/0x10
[ 1688.736208][T23745]  ? lookup_fast+0x156/0x610
[ 1688.736220][T23745]  walk_component+0x353/0x5b0
[ 1688.736232][T23745]  path_lookupat+0x142/0x6d0
[ 1688.736245][T23745]  filename_lookup+0x224/0x5f0
[ 1688.736258][T23745]  ? __pfx_filename_lookup+0x10/0x10
[ 1688.736279][T23745]  ? __might_fault+0xe3/0x190
[ 1688.736290][T23745]  ? __might_fault+0xe3/0x190
[ 1688.736299][T23745]  ? __might_fault+0x13b/0x190
[ 1688.736312][T23745]  vfs_statx+0x101/0x3f0
[ 1688.736327][T23745]  ? __pfx_vfs_statx+0x10/0x10
[ 1688.736341][T23745]  ? getname_flags.part.0+0x1c5/0x550
[ 1688.736361][T23745]  __do_sys_newstat+0xa8/0x130
[ 1688.736376][T23745]  ? __pfx___do_sys_newstat+0x10/0x10
[ 1688.736398][T23745]  ? __pfx_ksys_write+0x10/0x10
[ 1688.736412][T23745]  ? rcu_is_watching+0x12/0xc0
[ 1688.736429][T23745]  do_syscall_64+0xcd/0x4e0
[ 1688.736446][T23745]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1688.736458][T23745] RIP: 0033:0x7f905978eec9
[ 1688.736467][T23745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1688.736478][T23745] RSP: 002b:00007f905a68b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000004
[ 1688.736489][T23745] RAX: ffffffffffffffda RBX: 00007f90599e6090 RCX: 00007f905978eec9
[ 1688.736496][T23745] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000200000000180
[ 1688.736503][T23745] RBP: 00007f905a68b090 R08: 0000000000000000 R09: 0000000000000000
[ 1688.736509][T23745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1688.736516][T23745] R13: 00007f90599e6128 R14: 00007f90599e6090 R15: 00007ffd74531548
[ 1688.736529][T23745]  </TASK>
[ 1689.003756][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1689.011859][   T30] audit: type=1400 audit(2000001141.861:3976): avc:  denied  { link } for  pid=23741 comm="syz.1.4671" name="#100" dev="tmpfs" ino=1672 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[ 1689.034440][   T30] audit: type=1400 audit(2000001141.861:3977): avc:  denied  { rename } for  pid=23741 comm="syz.1.4671" name="#101" dev="tmpfs" ino=1672 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[ 1689.183433][   T30] audit: type=1400 audit(2000001142.351:3978): avc:  denied  { name_bind } for  pid=23747 comm="syz.5.4674" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1
[ 1689.205351][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1689.212448][   T30] audit: type=1400 audit(2000001142.351:3979): avc:  denied  { setopt } for  pid=23747 comm="syz.5.4674" laddr=172.20.20.170 lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1689.234532][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1689.241045][   T30] audit: type=1400 audit(2000001142.401:3980): avc:  denied  { create } for  pid=23747 comm="syz.5.4674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[ 1689.266630][   T30] audit: type=1400 audit(2000001142.431:3981): avc:  denied  { create } for  pid=23747 comm="syz.5.4674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[ 1689.286092][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1689.443931][ T5903] usb 6-1: USB disconnect, device number 82
[ 1689.632911][T16811] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[ 1690.268375][   T30] audit: type=1400 audit(2000001143.421:3982): avc:  denied  { sqpoll } for  pid=23759 comm="syz.0.4678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[ 1690.326745][T16811] usb 2-1: Using ep0 maxpacket: 16
[ 1690.363354][T16811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1690.387127][T16811] usb 2-1: New USB device found, idVendor=046d, idProduct=c51b, bcdDevice= 0.00
[ 1690.410047][T16811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1690.460398][T16811] usb 2-1: config 0 descriptor??
[ 1690.586246][T23765] netlink: 'syz.4.4681': attribute type 1 has an invalid length.
[ 1691.140332][T16811] logitech-djreceiver 0003:046D:C51B.0021: hidraw0: USB HID v0.09 Device [HID 046d:c51b] on usb-dummy_hcd.1-1/input0
[ 1691.493407][T23776] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4683'.
[ 1691.502477][T23776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4683'.
[ 1692.518816][  T866] usb 2-1: USB disconnect, device number 26
[ 1692.859588][   T30] audit: type=1400 audit(2000001146.021:3983): avc:  denied  { mount } for  pid=23785 comm="syz.1.4686" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[ 1692.983147][   T30] audit: type=1400 audit(2000001146.041:3984): avc:  denied  { unmount } for  pid=23785 comm="syz.1.4686" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[ 1693.003046][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1693.015292][T23780] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1693.262345][T23794] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb
[ 1693.640040][   T30] audit: type=1400 audit(2000001146.791:3985): avc:  denied  { append } for  pid=23795 comm="syz.4.4689" name="sg0" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[ 1693.927946][T23802] FAT-fs (loop1): unable to read boot sector
[ 1694.985139][T23812] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=42 sclass=netlink_tcpdiag_socket pid=23812 comm=syz.1.4694
[ 1695.041096][T23812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4694'.
[ 1695.078891][   T30] audit: type=1400 audit(2000001148.231:3986): avc:  denied  { ioctl } for  pid=23813 comm="syz.4.4695" path="/dev/sg0" dev="devtmpfs" ino=743 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[ 1695.104340][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1695.243255][T23820] FAULT_INJECTION: forcing a failure.
[ 1695.243255][T23820] name failslab, interval 1, probability 0, space 0, times 0
[ 1695.257203][T23820] CPU: 1 UID: 0 PID: 23820 Comm: syz.1.4696 Not tainted syzkaller #0 PREEMPT(full) 
[ 1695.257228][T23820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1695.257238][T23820] Call Trace:
[ 1695.257245][T23820]  <TASK>
[ 1695.257252][T23820]  dump_stack_lvl+0x16c/0x1f0
[ 1695.257284][T23820]  should_fail_ex+0x512/0x640
[ 1695.257309][T23820]  ? __kmalloc_cache_noprof+0x5f/0x780
[ 1695.257340][T23820]  should_failslab+0xc2/0x120
[ 1695.257363][T23820]  __kmalloc_cache_noprof+0x72/0x780
[ 1695.257391][T23820]  ? alloc_pipe_info+0x10e/0x590
[ 1695.257417][T23820]  ? alloc_pipe_info+0x10e/0x590
[ 1695.257439][T23820]  alloc_pipe_info+0x10e/0x590
[ 1695.257464][T23820]  splice_direct_to_actor+0x77d/0xa30
[ 1695.257485][T23820]  ? __lock_acquire+0x62e/0x1ce0
[ 1695.257504][T23820]  ? __pfx_direct_splice_actor+0x10/0x10
[ 1695.257526][T23820]  ? find_held_lock+0x2b/0x80
[ 1695.257550][T23820]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 1695.257567][T23820]  ? get_pid_task+0xfc/0x250
[ 1695.257592][T23820]  do_splice_direct+0x174/0x240
[ 1695.257611][T23820]  ? __pfx_do_splice_direct+0x10/0x10
[ 1695.257631][T23820]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 1695.257653][T23820]  ? rw_verify_area+0xcf/0x6c0
[ 1695.257681][T23820]  do_sendfile+0xb06/0xe50
[ 1695.257702][T23820]  ? __pfx_do_sendfile+0x10/0x10
[ 1695.257726][T23820]  ? __fget_files+0x20e/0x3c0
[ 1695.257752][T23820]  __x64_sys_sendfile64+0x1d8/0x220
[ 1695.257774][T23820]  ? ksys_write+0x1ac/0x250
[ 1695.257790][T23820]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 1695.257821][T23820]  do_syscall_64+0xcd/0x4e0
[ 1695.257847][T23820]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1695.257864][T23820] RIP: 0033:0x7f905978eec9
[ 1695.257878][T23820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1695.257895][T23820] RSP: 002b:00007f905a6ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 1695.257912][T23820] RAX: ffffffffffffffda RBX: 00007f90599e5fa0 RCX: 00007f905978eec9
[ 1695.257922][T23820] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 1695.257931][T23820] RBP: 00007f905a6ac090 R08: 0000000000000000 R09: 0000000000000000
[ 1695.257940][T23820] R10: 000000000000bc44 R11: 0000000000000246 R12: 0000000000000001
[ 1695.257948][T23820] R13: 00007f90599e6038 R14: 00007f90599e5fa0 R15: 00007ffd74531548
[ 1695.257968][T23820]  </TASK>
[ 1695.493690][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1696.608532][T23839] vlan2: entered promiscuous mode
[ 1696.613815][T23839] vlan2: entered allmulticast mode
[ 1696.618982][T23839] bridge0: entered allmulticast mode
[ 1696.725986][T23844] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1696.859694][T23839] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1696.866872][T23839] bridge0: port 2(bridge_slave_1) entered listening state
[ 1696.874216][T23839] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1696.881321][T23839] bridge0: port 1(bridge_slave_0) entered listening state
[ 1696.911021][T23839] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1697.246451][T23849] debugfs: 'ttyS3' already exists in 'caif_serial'
[ 1698.674392][   T30] audit: type=1400 audit(2000001151.771:3987): avc:  denied  { setopt } for  pid=23861 comm="syz.1.4707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1699.142421][   T30] audit: type=1400 audit(2000001152.261:3988): avc:  denied  { connect } for  pid=23880 comm="syz.5.4713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1699.593012][   T30] audit: type=1400 audit(2000001152.271:3989): avc:  denied  { getopt } for  pid=23880 comm="syz.5.4713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1699.593042][   T30] audit: type=1400 audit(2000001152.341:3990): avc:  denied  { setopt } for  pid=23885 comm="syz.4.4714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 1699.593066][   T30] audit: type=1400 audit(2000001152.341:3991): avc:  denied  { mount } for  pid=23885 comm="syz.4.4714" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 1699.684481][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1701.605105][T23908] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4719'.
[ 1701.687747][T23911] debugfs: 'ttyS3' already exists in 'caif_serial'
[ 1702.403662][ T5965] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[ 1702.595540][ T5965] usb 5-1: Using ep0 maxpacket: 8
[ 1702.616050][ T5965] usb 5-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30
[ 1702.627510][ T5965] usb 5-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[ 1702.640936][ T5965] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1702.648044][ T5965] usb 5-1: New USB device found, idVendor=04d9, idProduct=a0c2, bcdDevice= 0.00
[ 1702.657221][ T5965] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1702.669916][ T5965] usb 5-1: config 0 descriptor??
[ 1702.722900][T14258] usb 7-1: new high-speed USB device number 110 using dummy_hcd
[ 1702.863859][T23923] FAULT_INJECTION: forcing a failure.
[ 1702.863859][T23923] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1702.906115][T14258] usb 7-1: config 1 has an invalid interface number: 7 but max is 0
[ 1702.922539][T14258] usb 7-1: config 1 has no interface number 0
[ 1702.939449][T14258] usb 7-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[ 1702.971164][T23923] CPU: 1 UID: 0 PID: 23923 Comm: syz.1.4723 Not tainted syzkaller #0 PREEMPT(full) 
[ 1702.971191][T23923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1702.971202][T23923] Call Trace:
[ 1702.971208][T23923]  <TASK>
[ 1702.971215][T23923]  dump_stack_lvl+0x16c/0x1f0
[ 1702.971245][T23923]  should_fail_ex+0x512/0x640
[ 1702.971275][T23923]  _copy_from_user+0x2e/0xd0
[ 1702.971309][T23923]  snd_pcm_oss_write2+0x1c2/0x410
[ 1702.971330][T23923]  ? __pfx_snd_pcm_oss_write2+0x10/0x10
[ 1702.971347][T23923]  ? snd_pcm_kernel_ioctl+0x267/0x2e0
[ 1702.971376][T23923]  snd_pcm_oss_write+0x710/0xa10
[ 1702.971396][T23923]  ? security_file_permission+0x71/0x210
[ 1702.971430][T23923]  ? __pfx_snd_pcm_oss_write+0x10/0x10
[ 1702.971447][T23923]  vfs_write+0x29d/0x11d0
[ 1702.971473][T23923]  ? __pfx_vfs_write+0x10/0x10
[ 1702.971489][T23923]  ? find_held_lock+0x2b/0x80
[ 1702.971515][T23923]  ? __fget_files+0x204/0x3c0
[ 1702.971538][T23923]  ? __fget_files+0x20e/0x3c0
[ 1702.971565][T23923]  ksys_write+0x12a/0x250
[ 1702.971583][T23923]  ? __pfx_ksys_write+0x10/0x10
[ 1702.971609][T23923]  do_syscall_64+0xcd/0x4e0
[ 1702.971637][T23923]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1702.971654][T23923] RIP: 0033:0x7f905978eec9
[ 1702.971669][T23923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1702.971685][T23923] RSP: 002b:00007f905a68b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1702.971703][T23923] RAX: ffffffffffffffda RBX: 00007f90599e6090 RCX: 00007f905978eec9
[ 1702.971715][T23923] RDX: 0000000000004000 RSI: 00002000000012c0 RDI: 0000000000000007
[ 1702.971725][T23923] RBP: 00007f905a68b090 R08: 0000000000000000 R09: 0000000000000000
[ 1702.971736][T23923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1702.971747][T23923] R13: 00007f90599e6128 R14: 00007f90599e6090 R15: 00007ffd74531548
[ 1702.971772][T23923]  </TASK>
[ 1702.971899][T14258] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[ 1703.088308][ T5965] usbhid 5-1:0.0: can't add hid device: -71
[ 1703.178927][T16811] usb 6-1: new high-speed USB device number 83 using dummy_hcd
[ 1703.239995][ T5965] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 1703.251376][ T5965] usb 5-1: USB disconnect, device number 40
[ 1703.353491][T16811] usb 6-1: Using ep0 maxpacket: 8
[ 1703.359818][T16811] usb 6-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30
[ 1703.371064][T16811] usb 6-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[ 1703.382843][T14258] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64
[ 1703.423125][T14258] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1703.428666][T16811] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1703.444381][T16811] usb 6-1: New USB device found, idVendor=04d9, idProduct=a0c2, bcdDevice= 0.00
[ 1703.454344][T16811] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1703.464205][T16811] usb 6-1: config 0 descriptor??
[ 1703.556708][T14258] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[ 1703.571857][T14258] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1703.586673][T14258] usb 7-1: Product: syz
[ 1703.590875][T14258] usb 7-1: Manufacturer: syz
[ 1703.599261][T14258] usb 7-1: SerialNumber: syz
[ 1703.613090][T23916] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[ 1703.620358][T23916] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[ 1703.773007][T23934] netlink: 'syz.4.4727': attribute type 10 has an invalid length.
[ 1703.906011][T16811] usbhid 6-1:0.0: can't add hid device: -71
[ 1703.915344][T16811] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1703.938210][T23916] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[ 1703.945472][T16811] usb 6-1: USB disconnect, device number 83
[ 1703.952757][T23916] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[ 1704.140771][T23938] fuse: Bad value for 'fd'
[ 1704.238496][T14258] usb 7-1: Incompatible driver and firmware versions
[ 1704.413018][T16811] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[ 1704.504820][T23943] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4730'.
[ 1704.733868][T16811] usb 2-1: Using ep0 maxpacket: 8
[ 1704.741285][T16811] usb 2-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5
[ 1704.750684][T16811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1704.764839][T16811] usb 2-1: config 0 descriptor??
[ 1704.772567][T16811] uvcvideo 2-1:0.0: probe with driver uvcvideo failed with error -22
[ 1704.894488][T23946] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4731'.
[ 1704.975109][T23940] tmpfs: Group quota block hardlimit too large.
[ 1704.988528][T23940] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 1705.186125][T23940] UDF-fs: Scanning with blocksize 512 failed
[ 1705.194584][T23940] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 1705.202268][T23940] UDF-fs: Scanning with blocksize 1024 failed
[ 1705.209043][T23940] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 1705.302926][T23940] UDF-fs: Scanning with blocksize 2048 failed
[ 1705.322323][   T30] audit: type=1400 audit(2000001158.481:3992): avc:  denied  { ioctl } for  pid=23939 comm="syz.1.4729" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[ 1705.348824][T23940] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 1705.356723][T23940] UDF-fs: Scanning with blocksize 4096 failed
[ 1705.371141][T14258] usb 2-1: USB disconnect, device number 27
[ 1705.508897][T18566] usb 7-1: USB disconnect, device number 110
[ 1707.112479][T23973] vimc link validate: Scaler:src:16x16 (0x33424752, 1, 1, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1708.507737][T23982] debugfs: 'ttyS3' already exists in 'caif_serial'
[ 1709.370459][T23991] fuse: Bad value for 'fd'
[ 1709.612952][   T30] audit: type=1400 audit(2000001162.771:3993): avc:  denied  { read write } for  pid=23994 comm="syz.5.4742" name="rdma_cm" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[ 1709.721643][   T30] audit: type=1400 audit(2000001162.771:3994): avc:  denied  { open } for  pid=23994 comm="syz.5.4742" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[ 1710.003028][T23996] netlink: 'syz.5.4742': attribute type 11 has an invalid length.
[ 1710.011618][   T30] audit: type=1400 audit(2000001163.151:3995): avc:  denied  { bind } for  pid=23994 comm="syz.5.4742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[ 1710.086241][   T30] audit: type=1400 audit(2000001163.161:3996): avc:  denied  { write } for  pid=23994 comm="syz.5.4742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[ 1710.537768][T16811] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[ 1710.730367][T16811] usb 2-1: Using ep0 maxpacket: 32
[ 1710.799108][T16811] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe
[ 1710.808185][T16811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1710.816287][T16811] usb 2-1: Product: syz
[ 1710.820440][T16811] usb 2-1: Manufacturer: syz
[ 1710.841501][T16811] usb 2-1: SerialNumber: syz
[ 1710.866032][T16811] usb 2-1: config 0 descriptor??
[ 1710.895089][T16811] snd-usb-6fire 2-1:0.0: too many cards registered.
[ 1711.392220][T23941] Set syz1 is full, maxelem 65536 reached
[ 1711.406829][T16811] usb 2-1: USB disconnect, device number 28
[ 1712.503775][    C1] bridge0: port 1(bridge_slave_0) entered learning state
[ 1712.512521][    C1] bridge0: port 2(bridge_slave_1) entered learning state
[ 1712.742933][T18566] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[ 1712.913434][T18566] usb 2-1: Using ep0 maxpacket: 8
[ 1712.950380][T18566] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[ 1712.958802][T18566] usb 2-1: config 179 has no interface number 0
[ 1712.980433][T18566] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 1713.000467][T18566] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[ 1713.080845][ T5965] usb 6-1: new high-speed USB device number 84 using dummy_hcd
[ 1713.124048][T18566] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1713.263621][T18566] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[ 1713.292947][ T5965] usb 6-1: Using ep0 maxpacket: 32
[ 1713.301584][ T5965] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1713.325095][T18566] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1713.334016][ T5965] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[ 1713.383850][ T5965] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1713.391869][ T5965] usb 6-1: Product: syz
[ 1713.533061][T18566] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 1713.542123][T18566] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1713.544977][ T5965] usb 6-1: Manufacturer: syz
[ 1713.572862][ T5965] usb 6-1: SerialNumber: syz
[ 1713.614065][ T5965] usb 6-1: config 0 descriptor??
[ 1713.620010][ T5965] gs_usb 6-1:0.0: Required endpoints not found
[ 1713.630965][T24025] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 1713.830633][ T5965] usb 6-1: USB disconnect, device number 84
[ 1713.865307][T24022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1713.894528][T24022] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1715.503094][   T42] usb 2-1: USB disconnect, device number 29
[ 1715.509038][    C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[ 1715.509084][    C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 1715.644635][T24056] fuse: Bad value for 'fd'
[ 1716.263583][T23993] Set syz1 is full, maxelem 65536 reached
[ 1717.052898][T18566] usb 7-1: new high-speed USB device number 111 using dummy_hcd
[ 1717.334184][T18566] usb 7-1: Using ep0 maxpacket: 8
[ 1717.340818][T18566] usb 7-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30
[ 1717.352361][T18566] usb 7-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[ 1717.396759][T18566] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1717.412827][T18566] usb 7-1: New USB device found, idVendor=04d9, idProduct=a0c2, bcdDevice= 0.00
[ 1717.463489][T18566] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1717.536231][T18566] usb 7-1: config 0 descriptor??
[ 1717.624458][    C1] bridge0: port 1(bridge_slave_0) entered learning state
[ 1717.632335][    C1] bridge0: port 2(bridge_slave_1) entered learning state
[ 1717.994215][T16811] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[ 1718.095817][T18566] usbhid 7-1:0.0: can't add hid device: -71
[ 1718.101790][T18566] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 1718.126258][T18566] usb 7-1: USB disconnect, device number 111
[ 1718.142928][T16811] usb 5-1: device descriptor read/64, error -71
[ 1718.382902][T16811] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[ 1718.523133][T16811] usb 5-1: device descriptor read/64, error -71
[ 1718.543860][ T5965] usb 6-1: new high-speed USB device number 85 using dummy_hcd
[ 1718.633098][T16811] usb usb5-port1: attempt power cycle
[ 1718.702886][ T5965] usb 6-1: Using ep0 maxpacket: 32
[ 1718.713888][ T5965] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1718.722488][ T5965] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[ 1718.732516][ T5965] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1718.770865][ T5965] usb 6-1: Product: syz
[ 1718.775635][ T5965] usb 6-1: Manufacturer: syz
[ 1718.780313][ T5965] usb 6-1: SerialNumber: syz
[ 1718.787283][ T5965] usb 6-1: config 0 descriptor??
[ 1718.794497][ T5965] gs_usb 6-1:0.0: Required endpoints not found
[ 1719.051656][ T5965] usb 6-1: USB disconnect, device number 85
[ 1719.104377][T16811] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[ 1719.133802][T16811] usb 5-1: device descriptor read/8, error -71
[ 1719.403029][T16811] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[ 1719.433851][T16811] usb 5-1: device descriptor read/8, error -71
[ 1719.573256][T16811] usb usb5-port1: unable to enumerate USB device
[ 1719.903766][   T30] audit: type=1400 audit(2000001173.071:3997): avc:  denied  { read } for  pid=24096 comm="syz.0.4770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[ 1720.972337][T24101] netlink: 168 bytes leftover after parsing attributes in process `syz.5.4771'.
[ 1720.982046][   T30] audit: type=1326 audit(2000001173.771:3998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24100 comm="syz.5.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2510d8eec9 code=0x7ffc0000
[ 1721.141201][   T30] audit: type=1326 audit(2000001173.771:3999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24100 comm="syz.5.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2510d8eec9 code=0x7ffc0000
[ 1721.165256][   T30] audit: type=1326 audit(2000001173.871:4000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24100 comm="syz.5.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f2510d8eec9 code=0x7ffc0000
[ 1721.236110][   T30] audit: type=1326 audit(2000001173.871:4001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24100 comm="syz.5.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2510d8eec9 code=0x7ffc0000
[ 1721.303909][   T30] audit: type=1326 audit(2000001173.871:4002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24100 comm="syz.5.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2510d8eec9 code=0x7ffc0000
[ 1721.335735][   T30] audit: type=1326 audit(2000001173.971:4003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24100 comm="syz.5.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f2510d8eec9 code=0x7ffc0000
[ 1721.655922][T24116] netlink: 27 bytes leftover after parsing attributes in process `syz.4.4773'.
[ 1721.732406][   T30] audit: type=1326 audit(2000001173.971:4004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24100 comm="syz.5.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2510d8eec9 code=0x7ffc0000
[ 1721.763221][   T30] audit: type=1326 audit(2000001173.971:4005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24100 comm="syz.5.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2510d8eec9 code=0x7ffc0000
[ 1721.817525][   T30] audit: type=1326 audit(2000001174.071:4006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24100 comm="syz.5.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2510d8d710 code=0x7ffc0000
[ 1723.362391][T24134] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4779'.
[ 1723.501848][T24126] infiniband syz2: set active
[ 1723.506702][T24126] infiniband syz2: added bond0
[ 1723.512300][T24126] syz2: rxe_create_cq: returned err = -12
[ 1723.518848][T24126] infiniband syz2: Couldn't create ib_mad CQ
[ 1723.590754][T24126] infiniband syz2: Couldn't open port 1
[ 1723.632050][T24126] RDS/IB: syz2: added
[ 1723.693852][   T42] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[ 1723.852923][   T42] usb 5-1: Using ep0 maxpacket: 8
[ 1723.883802][   T42] usb 5-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30
[ 1723.933037][   T42] usb 5-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[ 1723.947125][   T42] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1723.954017][   T42] usb 5-1: New USB device found, idVendor=04d9, idProduct=a0c2, bcdDevice= 0.00
[ 1723.963103][   T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1723.991870][   T42] usb 5-1: config 0 descriptor??
[ 1724.421728][   T42] usbhid 5-1:0.0: can't add hid device: -71
[ 1724.444221][   T42] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 1724.460601][T24062] Set syz1 is full, maxelem 65536 reached
[ 1724.492517][   T42] usb 5-1: USB disconnect, device number 45
[ 1724.928242][T24146] FAULT_INJECTION: forcing a failure.
[ 1724.928242][T24146] name failslab, interval 1, probability 0, space 0, times 0
[ 1724.941004][T24146] CPU: 0 UID: 0 PID: 24146 Comm: syz.6.4784 Not tainted syzkaller #0 PREEMPT(full) 
[ 1724.941025][T24146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1724.941032][T24146] Call Trace:
[ 1724.941037][T24146]  <TASK>
[ 1724.941041][T24146]  dump_stack_lvl+0x16c/0x1f0
[ 1724.941062][T24146]  should_fail_ex+0x512/0x640
[ 1724.941079][T24146]  ? fs_reclaim_acquire+0xae/0x150
[ 1724.941095][T24146]  should_failslab+0xc2/0x120
[ 1724.941110][T24146]  __kmalloc_noprof+0xdd/0x880
[ 1724.941126][T24146]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[ 1724.941147][T24146]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[ 1724.941163][T24146]  tomoyo_realpath_from_path+0xc2/0x6e0
[ 1724.941181][T24146]  ? tomoyo_profile+0x47/0x60
[ 1724.941194][T24146]  tomoyo_path_number_perm+0x245/0x580
[ 1724.941207][T24146]  ? tomoyo_path_number_perm+0x237/0x580
[ 1724.941223][T24146]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1724.941238][T24146]  ? find_held_lock+0x2b/0x80
[ 1724.941266][T24146]  ? find_held_lock+0x2b/0x80
[ 1724.941282][T24146]  ? hook_file_ioctl_common+0x145/0x410
[ 1724.941297][T24146]  ? __fget_files+0x20e/0x3c0
[ 1724.941312][T24146]  security_file_ioctl+0x9b/0x240
[ 1724.941329][T24146]  __x64_sys_ioctl+0xb7/0x210
[ 1724.941347][T24146]  do_syscall_64+0xcd/0x4e0
[ 1724.941364][T24146]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1724.941376][T24146] RIP: 0033:0x7feb1ef8eec9
[ 1724.941385][T24146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1724.941396][T24146] RSP: 002b:00007feb1fdca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1724.941408][T24146] RAX: ffffffffffffffda RBX: 00007feb1f1e5fa0 RCX: 00007feb1ef8eec9
[ 1724.941415][T24146] RDX: 00002000000000c0 RSI: 00000000000007a5 RDI: 0000000000000003
[ 1724.941422][T24146] RBP: 00007feb1fdca090 R08: 0000000000000000 R09: 0000000000000000
[ 1724.941428][T24146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1724.941435][T24146] R13: 00007feb1f1e6038 R14: 00007feb1f1e5fa0 R15: 00007ffec7a7e5c8
[ 1724.941448][T24146]  </TASK>
[ 1724.941453][T24146] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1725.151447][T16811] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[ 1725.283364][T16811] usb 2-1: device descriptor read/64, error -71
[ 1725.662898][T16811] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[ 1725.793734][T16811] usb 2-1: device descriptor read/64, error -71
[ 1726.081574][T16811] usb usb2-port1: attempt power cycle
[ 1726.582984][T16811] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[ 1726.614017][T16811] usb 2-1: device descriptor read/8, error -71
[ 1727.862931][    C1] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1727.870203][    C1] bridge0: topology change detected, propagating
[ 1727.876939][    C1] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1727.884165][    C1] bridge0: topology change detected, propagating
[ 1728.223119][T16811] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[ 1728.263220][  T866] usb 5-1: new low-speed USB device number 46 using dummy_hcd
[ 1728.602087][T16811] usb 2-1: device not accepting address 33, error -71
[ 1728.661976][T16811] usb usb2-port1: unable to enumerate USB device
[ 1728.948724][  T866] usb 5-1: config index 0 descriptor too short (expected 29, got 27)
[ 1728.968221][  T866] usb 5-1: config 7 has an invalid interface number: 252 but max is 0
[ 1728.983006][  T866] usb 5-1: config 7 has no interface number 0
[ 1729.049749][  T866] usb 5-1: config 7 interface 252 altsetting 8 endpoint 0xF has an invalid bInterval 232, changing to 4
[ 1729.107458][  T866] usb 5-1: config 7 interface 252 altsetting 8 endpoint 0xF has invalid maxpacket 64, setting to 0
[ 1729.352921][T16811] usb 7-1: new full-speed USB device number 112 using dummy_hcd
[ 1729.376080][  T866] usb 5-1: config 7 interface 252 has no altsetting 0
[ 1729.401714][  T866] usb 5-1: string descriptor 0 read error: -22
[ 1729.408602][  T866] usb 5-1: New USB device found, idVendor=0681, idProduct=b464, bcdDevice=56.c0
[ 1729.417707][  T866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1729.512890][T16811] usb 7-1: device descriptor read/64, error -71
[ 1729.568227][T24193] ptm ptm0: ldisc open failed (-12), clearing slot 0
[ 1729.661969][   T30] kauditd_printk_skb: 11 callbacks suppressed
[ 1729.661985][   T30] audit: type=1400 audit(2000001182.821:4018): avc:  denied  { create } for  pid=24172 comm="syz.4.4793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[ 1729.691788][   T42] usb 5-1: USB disconnect, device number 46
[ 1729.728246][   T30] audit: type=1400 audit(2000001182.821:4019): avc:  denied  { ioctl } for  pid=24172 comm="syz.4.4793" path="socket:[102604]" dev="sockfs" ino=102604 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[ 1729.736518][T24205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4801'.
[ 1729.774476][T16811] usb 7-1: new full-speed USB device number 113 using dummy_hcd
[ 1729.790097][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[ 1729.799337][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[ 1729.933103][T16811] usb 7-1: device descriptor read/64, error -71
[ 1730.053245][T16811] usb usb7-port1: attempt power cycle
[ 1730.070415][   T30] audit: type=1400 audit(2000001183.231:4020): avc:  denied  { attach_queue } for  pid=24209 comm="syz.1.4802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[ 1730.244030][T24213] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4802'.
[ 1730.402863][T16811] usb 7-1: new full-speed USB device number 114 using dummy_hcd
[ 1730.433704][T16811] usb 7-1: device descriptor read/8, error -71
[ 1730.730531][   T30] audit: type=1400 audit(2000001183.831:4021): avc:  denied  { connect } for  pid=24216 comm="syz.4.4803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[ 1730.750109][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1731.074799][T16811] usb 7-1: new full-speed USB device number 115 using dummy_hcd
[ 1731.114774][T16811] usb 7-1: device descriptor read/8, error -71
[ 1731.257824][T16811] usb usb7-port1: unable to enumerate USB device
[ 1731.536488][T24235] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4806'.
[ 1731.632962][T16811] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[ 1732.322916][T16811] usb 2-1: device descriptor read/64, error -71
[ 1732.832983][T16811] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[ 1732.850302][T24251] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4810'.
[ 1733.903933][T16811] usb 2-1: device descriptor read/64, error -71
[ 1734.083398][T16811] usb usb2-port1: attempt power cycle
[ 1734.289926][T24264] fuse: Bad value for 'fd'
[ 1734.339286][   T30] audit: type=1400 audit(2000001187.471:4022): avc:  denied  { write } for  pid=24254 comm="syz.6.4813" path="socket:[102728]" dev="sockfs" ino=102728 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[ 1734.382246][T24268] 9pnet_fd: Insufficient options for proto=fd
[ 1734.472589][T24272] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4813'.
[ 1735.211783][T24281] FAULT_INJECTION: forcing a failure.
[ 1735.211783][T24281] name failslab, interval 1, probability 0, space 0, times 0
[ 1735.261110][   T10] usb 7-1: new high-speed USB device number 116 using dummy_hcd
[ 1735.665171][T24284] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1735.713020][T24281] CPU: 1 UID: 0 PID: 24281 Comm: syz.5.4820 Not tainted syzkaller #0 PREEMPT(full) 
[ 1735.713038][T24281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1735.713045][T24281] Call Trace:
[ 1735.713048][T24281]  <TASK>
[ 1735.713054][T24281]  dump_stack_lvl+0x16c/0x1f0
[ 1735.713074][T24281]  should_fail_ex+0x512/0x640
[ 1735.713091][T24281]  ? __kmalloc_noprof+0xca/0x880
[ 1735.713110][T24281]  should_failslab+0xc2/0x120
[ 1735.713129][T24281]  __kmalloc_noprof+0xdd/0x880
[ 1735.713146][T24281]  ? vhost_dev_set_owner+0x287/0xa50
[ 1735.713165][T24281]  ? vhost_dev_set_owner+0x287/0xa50
[ 1735.713181][T24281]  vhost_dev_set_owner+0x287/0xa50
[ 1735.713201][T24281]  vhost_net_ioctl+0xe1e/0x1840
[ 1735.713215][T24281]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1735.713233][T24281]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[ 1735.713251][T24281]  ? __pfx_vhost_net_ioctl+0x10/0x10
[ 1735.713268][T24281]  ? hook_file_ioctl_common+0x145/0x410
[ 1735.713285][T24281]  ? selinux_file_ioctl+0xb4/0x270
[ 1735.713302][T24281]  ? __pfx_vhost_net_ioctl+0x10/0x10
[ 1735.713317][T24281]  __x64_sys_ioctl+0x18b/0x210
[ 1735.713335][T24281]  do_syscall_64+0xcd/0x4e0
[ 1735.713352][T24281]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1735.713364][T24281] RIP: 0033:0x7f2510d8eec9
[ 1735.713374][T24281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1735.713385][T24281] RSP: 002b:00007f2511be1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1735.713396][T24281] RAX: ffffffffffffffda RBX: 00007f2510fe5fa0 RCX: 00007f2510d8eec9
[ 1735.713403][T24281] RDX: 0000000000000000 RSI: 000040000000af01 RDI: 0000000000000003
[ 1735.713410][T24281] RBP: 00007f2511be1090 R08: 0000000000000000 R09: 0000000000000000
[ 1735.713416][T24281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1735.713423][T24281] R13: 00007f2510fe6038 R14: 00007f2510fe5fa0 R15: 00007ffecd6a7fc8
[ 1735.713436][T24281]  </TASK>
[ 1735.915142][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1736.125484][   T30] audit: type=1400 audit(2000001189.291:4023): avc:  denied  { append } for  pid=24294 comm="syz.1.4824" name="001" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[ 1736.173012][   T10] usb 7-1: Using ep0 maxpacket: 8
[ 1736.269025][T24296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4822'.
[ 1736.377298][   T10] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1736.394103][   T10] usb 7-1: config 7 has an invalid interface number: 58 but max is 0
[ 1736.530903][   T10] usb 7-1: config 7 has no interface number 0
[ 1736.543963][   T10] usb 7-1: config 7 interface 58 altsetting 3 endpoint 0xE has an invalid bInterval 0, changing to 7
[ 1736.555089][   T10] usb 7-1: No eUSB2 isoc ep 14 companion for config 7 interface 58 altsetting 3
[ 1736.577676][   T10] usb 7-1: config 7 interface 58 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1736.590772][   T10] usb 7-1: config 7 interface 58 has no altsetting 0
[ 1736.658522][   T10] usb 7-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=48.0f
[ 1736.673775][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1736.681999][   T10] usb 7-1: Product: syz
[ 1736.695058][   T10] usb 7-1: Manufacturer: Ь
[ 1736.699678][   T10] usb 7-1: SerialNumber: syz
[ 1737.122891][ T5965] usb 6-1: new high-speed USB device number 86 using dummy_hcd
[ 1737.263557][   T10] usb 7-1: USB disconnect, device number 116
[ 1737.298308][ T5965] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86
[ 1737.360664][T16811] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[ 1737.963065][ T5965] usb 6-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24
[ 1738.004826][T16811] usb 2-1: device descriptor read/64, error -71
[ 1738.614038][ T5965] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1738.626521][ T5965] usb 6-1: Product: syz
[ 1738.630782][ T5965] usb 6-1: Manufacturer: syz
[ 1738.635859][ T5965] usb 6-1: SerialNumber: syz
[ 1738.643439][ T5965] usb 6-1: config 0 descriptor??
[ 1738.752866][T16811] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[ 1738.852700][ T5965] powermate: unknown product id 0240
[ 1738.859928][ T5965] input: Griffin SoundKnob as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input87
[ 1738.872501][    C0] powermate: config urb returned -71
[ 1738.877977][    C0] powermate: config urb returned -71
[ 1738.884784][    C0] powermate: config urb returned -71
[ 1738.890282][    C0] powermate: config urb returned -71
[ 1738.895756][ T5965] usb 6-1: USB disconnect, device number 86
[ 1738.901691][    C0] powermate 6-1:0.0: powermate_irq - usb_submit_urb failed with result: -19
[ 1738.922893][T16811] usb 2-1: device descriptor read/64, error -71
[ 1739.032889][   T10] usb 7-1: new high-speed USB device number 117 using dummy_hcd
[ 1739.040854][T16811] usb usb2-port1: attempt power cycle
[ 1739.192871][   T10] usb 7-1: Using ep0 maxpacket: 16
[ 1739.199506][   T10] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1739.211256][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1739.225766][   T10] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1739.235079][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1739.243100][   T10] usb 7-1: Product: syz
[ 1739.247302][   T10] usb 7-1: Manufacturer: syz
[ 1739.251894][   T10] usb 7-1: SerialNumber: syz
[ 1739.258783][   T10] usb 7-1: config 0 descriptor??
[ 1739.267865][   T10] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1739.278676][   T10] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class)
[ 1739.385707][T16811] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[ 1739.414374][T16811] usb 2-1: device descriptor read/8, error -71
[ 1740.380667][   T10] em28xx 7-1:0.0: unknown em28xx chip ID (0)
[ 1740.419694][   T10] em28xx 7-1:0.0: Config register raw data: 0xe0
[ 1740.452522][   T10] em28xx 7-1:0.0: I2S Audio (1 sample rate(s))
[ 1740.580456][   T10] em28xx 7-1:0.0: No AC97 audio processor
[ 1740.721583][   T30] audit: type=1400 audit(2000001193.881:4024): avc:  denied  { setopt } for  pid=24336 comm="syz.5.4836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 1740.907144][T24345] bridge0: Device is already in use.
[ 1740.926761][   T30] audit: type=1400 audit(2000001193.881:4025): avc:  denied  { bind } for  pid=24336 comm="syz.5.4836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 1741.009310][   T30] audit: type=1400 audit(2000001193.881:4026): avc:  denied  { listen } for  pid=24336 comm="syz.5.4836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 1741.033200][   T30] audit: type=1400 audit(2000001194.041:4027): avc:  denied  { write } for  pid=24336 comm="syz.5.4836" path="socket:[103747]" dev="sockfs" ino=103747 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 1741.510436][   T10] usb 7-1: USB disconnect, device number 117
[ 1741.565655][T24351] vimc link validate: Scaler:src:16x16 (0x33424752, 1, 1, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1741.902376][T24362] netlink: 'syz.0.4843': attribute type 8 has an invalid length.
[ 1741.957719][T24364] netlink: 'syz.0.4844': attribute type 8 has an invalid length.
[ 1741.968577][T24364] bridge0: port 3(erspan0) entered blocking state
[ 1741.978657][T24364] bridge0: port 3(erspan0) entered disabled state
[ 1741.985928][T24364] erspan0: entered allmulticast mode
[ 1741.994013][T24364] erspan0: entered promiscuous mode
[ 1742.132500][ T5965] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[ 1742.332892][   T10] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[ 1742.341342][T24369] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4846'.
[ 1742.343849][ T5965] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[ 1742.361944][ T5965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1742.370621][ T5965] usb 2-1: Product: syz
[ 1742.374890][ T5965] usb 2-1: Manufacturer: syz
[ 1742.379520][ T5965] usb 2-1: SerialNumber: syz
[ 1742.392424][ T5965] r8152-cfgselector 2-1: Unknown version 0x0000
[ 1742.398969][ T5965] r8152-cfgselector 2-1: config 0 descriptor??
[ 1742.414415][   T30] audit: type=1400 audit(2000001195.581:4028): avc:  denied  { create } for  pid=24370 comm="syz.6.4847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[ 1742.503104][   T10] usb 5-1: device descriptor read/64, error -71
[ 1742.783382][   T10] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[ 1742.853149][  T866] usb 6-1: new high-speed USB device number 87 using dummy_hcd
[ 1742.901663][ T5965] r8152-cfgselector 2-1: USB disconnect, device number 41
[ 1743.022966][   T10] usb 5-1: device descriptor read/64, error -71
[ 1743.054213][  T866] usb 6-1: config 1 has an invalid interface number: 7 but max is 0
[ 1743.062255][  T866] usb 6-1: config 1 has no interface number 0
[ 1743.068843][  T866] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[ 1743.080464][  T866] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[ 1743.090320][  T866] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64
[ 1743.100401][  T866] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1743.115684][  T866] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[ 1743.124990][  T866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1743.133049][  T866] usb 6-1: Product: syz
[ 1743.137445][   T10] usb usb5-port1: attempt power cycle
[ 1743.142862][  T866] usb 6-1: Manufacturer: syz
[ 1743.148372][  T866] usb 6-1: SerialNumber: syz
[ 1743.155100][T24380] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22
[ 1743.162439][T24380] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22
[ 1743.385752][T24380] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22
[ 1743.396510][T24380] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22
[ 1743.432341][   T30] audit: type=1400 audit(2000001196.591:4029): avc:  denied  { bind } for  pid=24383 comm="syz.6.4852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[ 1743.432745][T24384] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64
[ 1743.459827][T24384] audit: out of memory in audit_log_start
[ 1743.483357][   T10] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[ 1743.650984][T24388] netlink: 'syz.1.4853': attribute type 3 has an invalid length.
[ 1743.696360][  T866] usb 6-1: Incompatible driver and firmware versions
[ 1743.706787][   T10] usb 5-1: device descriptor read/8, error -71
[ 1743.770267][T24392] fuse: Bad value for 'fd'
[ 1743.812463][T24394] devpts: Invalid uid '0x00000000ffffffff'
[ 1743.816834][   T30] audit: type=1400 audit(2000001196.971:4030): avc:  denied  { getopt } for  pid=24390 comm="syz.6.4854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 1743.870999][   T30] audit: type=1400 audit(2000001196.971:4031): avc:  denied  { remount } for  pid=24390 comm="syz.6.4854" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[ 1743.984769][T24397] netlink: 'syz.1.4855': attribute type 8 has an invalid length.
[ 1743.984836][   T10] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[ 1744.025525][   T10] usb 5-1: device descriptor read/8, error -71
[ 1744.044619][T24399] vxlan0: entered promiscuous mode
[ 1744.049969][T24399] vxlan0: entered allmulticast mode
[ 1744.055790][   T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1744.073414][   T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1744.082440][   T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1744.091560][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1744.133556][   T10] usb usb5-port1: unable to enumerate USB device
[ 1744.766831][T24405] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4857'.
[ 1744.813939][   T30] audit: type=1400 audit(2000001197.981:4032): avc:  denied  { ioctl } for  pid=24406 comm="syz.1.4858" path="socket:[102990]" dev="sockfs" ino=102990 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[ 1744.818401][T24407] overlay: Unknown parameter 'obj_role'
[ 1745.012884][   T42] usb 7-1: new high-speed USB device number 118 using dummy_hcd
[ 1745.172838][   T42] usb 7-1: Using ep0 maxpacket: 8
[ 1745.180487][   T42] usb 7-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30
[ 1745.192008][   T42] usb 7-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[ 1745.205348][   T42] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1745.212155][   T42] usb 7-1: New USB device found, idVendor=04d9, idProduct=a0c2, bcdDevice= 0.00
[ 1745.221800][   T42] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1745.243526][   T42] usb 7-1: config 0 descriptor??
[ 1745.528856][   T10] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[ 1745.539861][T24417] CUSE: info not properly terminated
[ 1745.548002][T24417] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1745.703033][   T10] usb 5-1: Using ep0 maxpacket: 16
[ 1745.917579][   T10] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[ 1745.926356][   T42] usbhid 7-1:0.0: can't add hid device: -71
[ 1745.934550][   T42] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 1745.934775][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1745.950683][   T10] usb 5-1: Product: syz
[ 1745.955440][   T10] usb 5-1: Manufacturer: syz
[ 1745.960060][   T10] usb 5-1: SerialNumber: syz
[ 1745.962704][ T5903] usb 6-1: USB disconnect, device number 87
[ 1745.981582][   T10] usb 5-1: config 0 descriptor??
[ 1745.988713][   T10] visor 5-1:0.0: Sony Clie 3.5 converter detected
[ 1745.998655][   T42] usb 7-1: USB disconnect, device number 118
[ 1746.516965][T24426] debugfs: 'ttyS3' already exists in 'caif_serial'
[ 1746.638431][   T30] audit: type=1400 audit(2000001199.801:4033): avc:  denied  { associate } for  pid=24410 comm="syz.4.4859" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[ 1746.660344][   T10] usb 5-1: clie_3_5_startup: get interface number bad return length: 0
[ 1746.669009][   T10] visor 5-1:0.0: probe with driver visor failed with error -5
[ 1747.120763][T24411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1747.155104][T24411] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1747.172854][   T30] audit: type=1400 audit(2000001200.311:4034): avc:  denied  { open } for  pid=24432 comm="syz.6.4865" path="/dev/ptyr1" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[ 1747.215614][T14258] usb 5-1: USB disconnect, device number 51
[ 1747.303490][T24440] FAULT_INJECTION: forcing a failure.
[ 1747.303490][T24440] name failslab, interval 1, probability 0, space 0, times 0
[ 1747.316243][T24440] CPU: 0 UID: 0 PID: 24440 Comm: syz.4.4867 Not tainted syzkaller #0 PREEMPT(full) 
[ 1747.316268][T24440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1747.316278][T24440] Call Trace:
[ 1747.316285][T24440]  <TASK>
[ 1747.316292][T24440]  dump_stack_lvl+0x16c/0x1f0
[ 1747.316319][T24440]  should_fail_ex+0x512/0x640
[ 1747.316335][T24440]  ? kmem_cache_alloc_noprof+0x62/0x6e0
[ 1747.316355][T24440]  should_failslab+0xc2/0x120
[ 1747.316369][T24440]  kmem_cache_alloc_noprof+0x75/0x6e0
[ 1747.316386][T24440]  ? create_new_namespaces+0x30/0xa90
[ 1747.316406][T24440]  ? create_new_namespaces+0x30/0xa90
[ 1747.316422][T24440]  create_new_namespaces+0x30/0xa90
[ 1747.316438][T24440]  ? bpf_lsm_capable+0x9/0x10
[ 1747.316452][T24440]  ? security_capable+0x7e/0x260
[ 1747.316468][T24440]  unshare_nsproxy_namespaces+0xc0/0x1f0
[ 1747.316486][T24440]  ksys_unshare+0x45b/0xa40
[ 1747.316497][T24440]  ? __pfx_ksys_unshare+0x10/0x10
[ 1747.316507][T24440]  ? ksys_write+0x1ac/0x250
[ 1747.316523][T24440]  __x64_sys_unshare+0x31/0x40
[ 1747.316533][T24440]  do_syscall_64+0xcd/0x4e0
[ 1747.316550][T24440]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1747.316562][T24440] RIP: 0033:0x7f2a9138eec9
[ 1747.316571][T24440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1747.316581][T24440] RSP: 002b:00007f2a92231038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[ 1747.316593][T24440] RAX: ffffffffffffffda RBX: 00007f2a915e6090 RCX: 00007f2a9138eec9
[ 1747.316600][T24440] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000066000080
[ 1747.316606][T24440] RBP: 00007f2a92231090 R08: 0000000000000000 R09: 0000000000000000
[ 1747.316613][T24440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1747.316619][T24440] R13: 00007f2a915e6128 R14: 00007f2a915e6090 R15: 00007ffdb69c4108
[ 1747.316635][T24440]  </TASK>
[ 1747.702866][    C1] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1747.710115][    C1] bridge0: topology change detected, propagating
[ 1747.716584][    C1] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1747.723771][    C1] bridge0: topology change detected, propagating
[ 1747.853272][   T30] audit: type=1400 audit(2000001201.021:4035): avc:  denied  { append } for  pid=24445 comm="syz.0.4869" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1747.891378][   T30] audit: type=1400 audit(2000001201.041:4036): avc:  denied  { getopt } for  pid=24444 comm="syz.5.4866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 1748.180633][T14258] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[ 1748.212350][T24449] lo speed is unknown, defaulting to 1000
[ 1748.222234][T24449] tunl0 speed is unknown, defaulting to 1000
[ 1748.395483][T14258] usb 5-1: config 0 has no interfaces?
[ 1748.402960][T14258] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c
[ 1748.434415][T14258] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1748.442729][T14258] usb 5-1: Product: syz
[ 1748.451374][T14258] usb 5-1: Manufacturer: syz
[ 1748.456083][   T42] usb 6-1: new high-speed USB device number 88 using dummy_hcd
[ 1748.464591][T14258] usb 5-1: SerialNumber: syz
[ 1748.470790][T14258] usb 5-1: config 0 descriptor??
[ 1748.503025][   T24] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[ 1748.542261][T24459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4872'.
[ 1748.556091][T24459] FAULT_INJECTION: forcing a failure.
[ 1748.556091][T24459] name failslab, interval 1, probability 0, space 0, times 0
[ 1748.569546][T24459] CPU: 1 UID: 0 PID: 24459 Comm: syz.0.4872 Not tainted syzkaller #0 PREEMPT(full) 
[ 1748.569572][T24459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1748.569584][T24459] Call Trace:
[ 1748.569592][T24459]  <TASK>
[ 1748.569601][T24459]  dump_stack_lvl+0x16c/0x1f0
[ 1748.569634][T24459]  should_fail_ex+0x512/0x640
[ 1748.569665][T24459]  should_failslab+0xc2/0x120
[ 1748.569690][T24459]  __kmalloc_cache_noprof+0x72/0x780
[ 1748.569720][T24459]  ? sctp_add_bind_addr+0xae/0x3f0
[ 1748.569748][T24459]  ? sctp_add_bind_addr+0xae/0x3f0
[ 1748.569771][T24459]  sctp_add_bind_addr+0xae/0x3f0
[ 1748.569803][T24459]  sctp_copy_local_addr_list+0x349/0x550
[ 1748.569833][T24459]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[ 1748.569862][T24459]  ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360
[ 1748.569898][T24459]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1748.569927][T24459]  sctp_bind_addr_copy+0xe0/0x530
[ 1748.569957][T24459]  sctp_connect_new_asoc+0x1c9/0x770
[ 1748.569979][T24459]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[ 1748.570000][T24459]  ? sctp_endpoint_lookup_assoc+0x15c/0x2a0
[ 1748.570043][T24459]  __sctp_connect+0x3f3/0xc60
[ 1748.570066][T24459]  ? do_raw_spin_lock+0x12c/0x2b0
[ 1748.570091][T24459]  ? __pfx___sctp_connect+0x10/0x10
[ 1748.570112][T24459]  ? __pfx_sctp_inet_connect+0x10/0x10
[ 1748.570133][T24459]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1748.570159][T24459]  ? __pfx_sctp_inet_connect+0x10/0x10
[ 1748.570177][T24459]  sctp_inet_connect+0x15f/0x200
[ 1748.570198][T24459]  __sys_connect_file+0x13e/0x1a0
[ 1748.570225][T24459]  __sys_connect+0x13b/0x160
[ 1748.570247][T24459]  ? __pfx___sys_connect+0x10/0x10
[ 1748.570286][T24459]  __x64_sys_connect+0x72/0xb0
[ 1748.570307][T24459]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1748.570337][T24459]  do_syscall_64+0xcd/0x4e0
[ 1748.570366][T24459]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1748.570385][T24459] RIP: 0033:0x7fc63038eec9
[ 1748.570400][T24459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1748.570417][T24459] RSP: 002b:00007fc6311a4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[ 1748.570435][T24459] RAX: ffffffffffffffda RBX: 00007fc6305e6090 RCX: 00007fc63038eec9
[ 1748.570448][T24459] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000005
[ 1748.570459][T24459] RBP: 00007fc6311a4090 R08: 0000000000000000 R09: 0000000000000000
[ 1748.570470][T24459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1748.570480][T24459] R13: 00007fc6305e6128 R14: 00007fc6305e6090 R15: 00007fffa2ff4c98
[ 1748.570505][T24459]  </TASK>
[ 1748.824403][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1748.834220][T24439] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4867'.
[ 1748.843979][   T42] usb 6-1: device descriptor read/64, error -71
[ 1749.092931][   T42] usb 6-1: new high-speed USB device number 89 using dummy_hcd
[ 1749.235654][   T24] usb 2-1: config 0 has no interfaces?
[ 1749.298242][   T24] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c
[ 1749.330073][T24456] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4871'.
[ 1749.352852][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1749.392886][   T42] usb 6-1: device descriptor read/64, error -71
[ 1749.408032][   T24] usb 2-1: Product: syz
[ 1749.415883][   T24] usb 2-1: Manufacturer: syz
[ 1749.424018][T24464] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4873'.
[ 1749.433277][   T24] usb 2-1: SerialNumber: syz
[ 1749.441395][T24460] usb 5-1: USB disconnect, device number 52
[ 1749.448356][   T24] usb 2-1: config 0 descriptor??
[ 1749.503189][   T42] usb usb6-port1: attempt power cycle
[ 1749.624228][T24470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4875'.
[ 1749.669979][T24443] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4868'.
[ 1749.722882][   T24] usb 7-1: new high-speed USB device number 119 using dummy_hcd
[ 1749.747140][   T10] usb 2-1: USB disconnect, device number 42
[ 1750.080017][T24474] netlink: 'syz.4.4876': attribute type 1 has an invalid length.
[ 1750.440282][   T42] usb 6-1: new high-speed USB device number 90 using dummy_hcd
[ 1750.643615][   T42] usb 6-1: device descriptor read/8, error -71
[ 1750.802810][   T24] usb 7-1: Using ep0 maxpacket: 32
[ 1750.979717][   T24] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe
[ 1751.079819][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1751.567561][   T24] usb 7-1: Product: syz
[ 1751.571763][   T24] usb 7-1: Manufacturer: syz
[ 1751.576663][   T24] usb 7-1: SerialNumber: syz
[ 1751.594840][   T24] usb 7-1: config 0 descriptor??
[ 1751.687918][   T24] usb 7-1: can't set config #0, error -71
[ 1752.583364][   T24] usb 7-1: USB disconnect, device number 119
[ 1752.747288][   T30] audit: type=1400 audit(2000001205.911:4037): avc:  denied  { bind } for  pid=24491 comm="syz.0.4883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[ 1752.795956][T24499] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4882'.
[ 1752.832581][   T30] audit: type=1400 audit(2000001205.991:4038): avc:  denied  { audit_read } for  pid=24490 comm="syz.5.4882" capability=37  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1752.835744][T24502] FAULT_INJECTION: forcing a failure.
[ 1752.835744][T24502] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1753.048255][T24502] CPU: 0 UID: 0 PID: 24502 Comm: syz.6.4881 Not tainted syzkaller #0 PREEMPT(full) 
[ 1753.048273][T24502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1753.048280][T24502] Call Trace:
[ 1753.048284][T24502]  <TASK>
[ 1753.048288][T24502]  dump_stack_lvl+0x16c/0x1f0
[ 1753.048309][T24502]  should_fail_ex+0x512/0x640
[ 1753.048328][T24502]  _copy_from_user+0x2e/0xd0
[ 1753.048346][T24502]  kstrtouint_from_user+0xd6/0x1d0
[ 1753.048360][T24502]  ? __pfx_kstrtouint_from_user+0x10/0x10
[ 1753.048372][T24502]  ? __lock_acquire+0xb97/0x1ce0
[ 1753.048391][T24502]  proc_fail_nth_write+0x83/0x220
[ 1753.048406][T24502]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1753.048423][T24502]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1753.048436][T24502]  vfs_write+0x29d/0x11d0
[ 1753.048450][T24502]  ? __pfx___mutex_lock+0x10/0x10
[ 1753.048466][T24502]  ? __pfx_vfs_write+0x10/0x10
[ 1753.048481][T24502]  ? __fget_files+0x20e/0x3c0
[ 1753.048498][T24502]  ksys_write+0x12a/0x250
[ 1753.048509][T24502]  ? __pfx_ksys_write+0x10/0x10
[ 1753.048525][T24502]  do_syscall_64+0xcd/0x4e0
[ 1753.048542][T24502]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1753.048553][T24502] RIP: 0033:0x7feb1ef8d97f
[ 1753.048563][T24502] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 1753.048574][T24502] RSP: 002b:00007feb1fd88030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 1753.048585][T24502] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007feb1ef8d97f
[ 1753.048592][T24502] RDX: 0000000000000001 RSI: 00007feb1fd880a0 RDI: 0000000000000005
[ 1753.048599][T24502] RBP: 00007feb1fd88090 R08: 0000000000000000 R09: 0000000000000000
[ 1753.048605][T24502] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[ 1753.048612][T24502] R13: 00007feb1f1e6218 R14: 00007feb1f1e6180 R15: 00007ffec7a7e5c8
[ 1753.048631][T24502]  </TASK>
[ 1753.705974][T24508] ==================================================================
[ 1753.714045][T24508] BUG: KASAN: slab-use-after-free in radix_tree_next_chunk+0x987/0xb20
[ 1753.722284][T24508] Read of size 1 at addr ffff888057233c80 by task syz.6.4886/24508
[ 1753.730155][T24508] 
[ 1753.732469][T24508] CPU: 1 UID: 0 PID: 24508 Comm: syz.6.4886 Not tainted syzkaller #0 PREEMPT(full) 
[ 1753.732485][T24508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1753.732491][T24508] Call Trace:
[ 1753.732497][T24508]  <TASK>
[ 1753.732502][T24508]  dump_stack_lvl+0x116/0x1f0
[ 1753.732522][T24508]  print_report+0xcd/0x630
[ 1753.732536][T24508]  ? __virt_addr_valid+0x81/0x610
[ 1753.732555][T24508]  ? __phys_addr+0xe8/0x180
[ 1753.732573][T24508]  ? radix_tree_next_chunk+0x987/0xb20
[ 1753.732587][T24508]  kasan_report+0xe0/0x110
[ 1753.732601][T24508]  ? radix_tree_next_chunk+0x987/0xb20
[ 1753.732618][T24508]  radix_tree_next_chunk+0x987/0xb20
[ 1753.732634][T24508]  idr_get_next_ul+0x227/0x2e0
[ 1753.732650][T24508]  ? __pfx_idr_get_next_ul+0x10/0x10
[ 1753.732666][T24508]  ? __pfx_filldir64+0x10/0x10
[ 1753.732683][T24508]  idr_get_next+0x9b/0x150
[ 1753.732698][T24508]  ? __pfx_idr_get_next+0x10/0x10
[ 1753.732713][T24508]  ? __pfx_filldir64+0x10/0x10
[ 1753.732729][T24508]  afs_dynroot_readdir+0x72b/0xb70
[ 1753.732745][T24508]  ? __pfx_afs_dynroot_readdir+0x10/0x10
[ 1753.732762][T24508]  ? selinux_file_permission+0x126/0x660
[ 1753.732789][T24508]  iterate_dir+0x296/0xaf0
[ 1753.732811][T24508]  __x64_sys_getdents64+0x13c/0x2c0
[ 1753.732822][T24508]  ? __x64_sys_futex+0x1e9/0x4c0
[ 1753.732834][T24508]  ? __pfx___x64_sys_getdents64+0x10/0x10
[ 1753.732845][T24508]  ? __pfx_filldir64+0x10/0x10
[ 1753.732864][T24508]  do_syscall_64+0xcd/0x4e0
[ 1753.732881][T24508]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1753.732899][T24508] RIP: 0033:0x7feb1ef8eec9
[ 1753.732908][T24508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1753.732920][T24508] RSP: 002b:00007feb1fdca038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[ 1753.732932][T24508] RAX: ffffffffffffffda RBX: 00007feb1f1e5fa0 RCX: 00007feb1ef8eec9
[ 1753.732940][T24508] RDX: 0000000000000055 RSI: 00002000000007c0 RDI: 0000000000000003
[ 1753.732947][T24508] RBP: 00007feb1f011f91 R08: 0000000000000000 R09: 0000000000000000
[ 1753.732955][T24508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1753.732963][T24508] R13: 00007feb1f1e6038 R14: 00007feb1f1e5fa0 R15: 00007ffec7a7e5c8
[ 1753.732974][T24508]  </TASK>
[ 1753.732978][T24508] 
[ 1753.954954][T24508] Allocated by task 24508:
[ 1753.959338][T24508]  kasan_save_stack+0x33/0x60
[ 1753.963988][T24508]  kasan_save_track+0x14/0x30
[ 1753.968637][T24508]  __kasan_slab_alloc+0x89/0x90
[ 1753.973457][T24508]  kmem_cache_alloc_noprof+0x250/0x6e0
[ 1753.978894][T24508]  radix_tree_node_alloc.constprop.0+0x7c/0x350
[ 1753.985107][T24508]  idr_get_free+0x528/0xa30
[ 1753.989605][T24508]  idr_alloc_u32+0x190/0x2f0
[ 1753.994181][T24508]  idr_alloc_cyclic+0x10b/0x230
[ 1753.999026][T24508]  afs_lookup_cell+0xe68/0x1680
[ 1754.003859][T24508]  afs_dynroot_lookup+0x2e2/0xa90
[ 1754.008857][T24508]  __lookup_slow+0x251/0x460
[ 1754.013421][T24508]  walk_component+0x353/0x5b0
[ 1754.018067][T24508]  path_lookupat+0x142/0x6d0
[ 1754.022633][T24508]  filename_lookup+0x224/0x5f0
[ 1754.027378][T24508]  do_linkat+0x14c/0x5a0
[ 1754.031598][T24508]  __x64_sys_link+0x7d/0xa0
[ 1754.036079][T24508]  do_syscall_64+0xcd/0x4e0
[ 1754.040564][T24508]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1754.046445][T24508] 
[ 1754.048738][T24508] Freed by task 24481:
[ 1754.052778][T24508]  kasan_save_stack+0x33/0x60
[ 1754.057440][T24508]  kasan_save_track+0x14/0x30
[ 1754.062084][T24508]  __kasan_save_free_info+0x3b/0x60
[ 1754.067258][T24508]  __kasan_slab_free+0x5f/0x80
[ 1754.071990][T24508]  kmem_cache_free+0x2d4/0x6c0
[ 1754.076722][T24508]  rcu_core+0x799/0x1530
[ 1754.080943][T24508]  handle_softirqs+0x219/0x8e0
[ 1754.085687][T24508]  __irq_exit_rcu+0x109/0x170
[ 1754.090337][T24508]  irq_exit_rcu+0x9/0x30
[ 1754.094555][T24508]  sysvec_apic_timer_interrupt+0xa4/0xc0
[ 1754.100159][T24508]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1754.106105][T24508] 
[ 1754.108404][T24508] Last potentially related work creation:
[ 1754.114084][T24508]  kasan_save_stack+0x33/0x60
[ 1754.118731][T24508]  kasan_record_aux_stack+0xa7/0xc0
[ 1754.123905][T24508]  __call_rcu_common.constprop.0+0xa5/0xa10
[ 1754.129779][T24508]  delete_node+0x1fc/0x8d0
[ 1754.134165][T24508]  __radix_tree_delete+0x193/0x3d0
[ 1754.139252][T24508]  radix_tree_delete_item+0xea/0x230
[ 1754.144512][T24508]  afs_cell_destroy+0x1db/0x310
[ 1754.149337][T24508]  rcu_core+0x799/0x1530
[ 1754.153566][T24508]  handle_softirqs+0x219/0x8e0
[ 1754.158305][T24508]  __irq_exit_rcu+0x109/0x170
[ 1754.162954][T24508]  irq_exit_rcu+0x9/0x30
[ 1754.167168][T24508]  sysvec_apic_timer_interrupt+0xa4/0xc0
[ 1754.172774][T24508]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1754.178745][T24508] 
[ 1754.181045][T24508] The buggy address belongs to the object at ffff888057233c80
[ 1754.181045][T24508]  which belongs to the cache radix_tree_node of size 576
[ 1754.195426][T24508] The buggy address is located 0 bytes inside of
[ 1754.195426][T24508]  freed 576-byte region [ffff888057233c80, ffff888057233ec0)
[ 1754.209037][T24508] 
[ 1754.211343][T24508] The buggy address belongs to the physical page:
[ 1754.217720][T24508] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57230
[ 1754.226458][T24508] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1754.234923][T24508] memcg:ffff88802934dd01
[ 1754.239134][T24508] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 1754.246645][T24508] page_type: f5(slab)
[ 1754.250600][T24508] raw: 00fff00000000040 ffff88801b071000 dead000000000100 dead000000000122
[ 1754.259153][T24508] raw: 0000000000000000 0000000080170017 00000000f5000000 ffff88802934dd01
[ 1754.267710][T24508] head: 00fff00000000040 ffff88801b071000 dead000000000100 dead000000000122
[ 1754.276358][T24508] head: 0000000000000000 0000000080170017 00000000f5000000 ffff88802934dd01
[ 1754.284997][T24508] head: 00fff00000000002 ffffea00015c8c01 00000000ffffffff 00000000ffffffff
[ 1754.293635][T24508] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[ 1754.302270][T24508] page dumped because: kasan: bad access detected
[ 1754.308666][T24508] page_owner tracks the page as allocated
[ 1754.314364][T24508] page last allocated via order 2, migratetype Reclaimable, gfp_mask 0x52810(GFP_NOWAIT|__GFP_RECLAIMABLE|__GFP_NORETRY|__GFP_COMP), pid 6251, tgid 6250 (syz.0.68), ts 98070770466, free_ts 15564256623
[ 1754.333902][T24508]  post_alloc_hook+0x1c0/0x230
[ 1754.338644][T24508]  get_page_from_freelist+0x10a3/0x3a30
[ 1754.344164][T24508]  __alloc_frozen_pages_noprof+0x25f/0x2470
[ 1754.350031][T24508]  alloc_pages_mpol+0x1fb/0x550
[ 1754.354854][T24508]  new_slab+0x24a/0x360
[ 1754.358984][T24508]  ___slab_alloc+0xdc4/0x1ae0
[ 1754.363632][T24508]  __slab_alloc.constprop.0+0x63/0x110
[ 1754.369063][T24508]  kmem_cache_alloc_lru_noprof+0x443/0x6e0
[ 1754.374930][T24508]  xas_alloc+0x34f/0x460
[ 1754.379157][T24508]  xas_create+0x72b/0x1460
[ 1754.383548][T24508]  xas_store+0x90/0x1910
[ 1754.387758][T24508]  shmem_add_to_page_cache+0x7b3/0xa70
[ 1754.393199][T24508]  shmem_alloc_and_add_folio+0x668/0xc20
[ 1754.398810][T24508]  shmem_get_folio_gfp+0x67f/0x1610
[ 1754.403982][T24508]  shmem_fault+0x1fe/0xa30
[ 1754.408366][T24508]  __do_fault+0x10d/0x490
[ 1754.412661][T24508] page last free pid 1 tgid 1 stack trace:
[ 1754.418430][T24508]  __free_frozen_pages+0x7df/0x1160
[ 1754.423604][T24508]  free_contig_range+0x183/0x4b0
[ 1754.428517][T24508]  destroy_args+0xb69/0x12e0
[ 1754.433080][T24508]  debug_vm_pgtable+0x1a32/0x3640
[ 1754.438075][T24508]  do_one_initcall+0x120/0x6e0
[ 1754.442810][T24508]  kernel_init_freeable+0x5c2/0x910
[ 1754.447995][T24508]  kernel_init+0x1c/0x2b0
[ 1754.452293][T24508]  ret_from_fork+0x56a/0x730
[ 1754.456851][T24508]  ret_from_fork_asm+0x1a/0x30
[ 1754.461597][T24508] 
[ 1754.463892][T24508] Memory state around the buggy address:
[ 1754.469487][T24508]  ffff888057233b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1754.477518][T24508]  ffff888057233c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1754.485548][T24508] >ffff888057233c80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1754.493574][T24508]                    ^
[ 1754.497609][T24508]  ffff888057233d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1754.505642][T24508]  ffff888057233d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1754.513670][T24508] ==================================================================
[ 1754.521764][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1754.547037][T24508] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1754.554242][T24508] CPU: 0 UID: 0 PID: 24508 Comm: syz.6.4886 Not tainted syzkaller #0 PREEMPT(full) 
[ 1754.563612][T24508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1754.573678][T24508] Call Trace:
[ 1754.576941][T24508]  <TASK>
[ 1754.579849][T24508]  dump_stack_lvl+0x3d/0x1f0
[ 1754.584422][T24508]  vpanic+0x640/0x6f0
[ 1754.588376][T24508]  panic+0xca/0xd0
[ 1754.592066][T24508]  ? __pfx_panic+0x10/0x10
[ 1754.596457][T24508]  ? radix_tree_next_chunk+0x987/0xb20
[ 1754.601889][T24508]  ? preempt_schedule_common+0x44/0xc0
[ 1754.607321][T24508]  ? preempt_schedule_thunk+0x16/0x30
[ 1754.612671][T24508]  check_panic_on_warn+0xab/0xb0
[ 1754.617581][T24508]  end_report+0x107/0x170
[ 1754.621885][T24508]  kasan_report+0xee/0x110
[ 1754.626275][T24508]  ? radix_tree_next_chunk+0x987/0xb20
[ 1754.631718][T24508]  radix_tree_next_chunk+0x987/0xb20
[ 1754.636979][T24508]  idr_get_next_ul+0x227/0x2e0
[ 1754.641721][T24508]  ? __pfx_idr_get_next_ul+0x10/0x10
[ 1754.646985][T24508]  ? __pfx_filldir64+0x10/0x10
[ 1754.651729][T24508]  idr_get_next+0x9b/0x150
[ 1754.656121][T24508]  ? __pfx_idr_get_next+0x10/0x10
[ 1754.661121][T24508]  ? __pfx_filldir64+0x10/0x10
[ 1754.665866][T24508]  afs_dynroot_readdir+0x72b/0xb70
[ 1754.671054][T24508]  ? __pfx_afs_dynroot_readdir+0x10/0x10
[ 1754.676673][T24508]  ? selinux_file_permission+0x126/0x660
[ 1754.682292][T24508]  iterate_dir+0x296/0xaf0
[ 1754.686703][T24508]  __x64_sys_getdents64+0x13c/0x2c0
[ 1754.691885][T24508]  ? __x64_sys_futex+0x1e9/0x4c0
[ 1754.696794][T24508]  ? __pfx___x64_sys_getdents64+0x10/0x10
[ 1754.702485][T24508]  ? __pfx_filldir64+0x10/0x10
[ 1754.707237][T24508]  do_syscall_64+0xcd/0x4e0
[ 1754.711718][T24508]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1754.717596][T24508] RIP: 0033:0x7feb1ef8eec9
[ 1754.721981][T24508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1754.741564][T24508] RSP: 002b:00007feb1fdca038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[ 1754.749965][T24508] RAX: ffffffffffffffda RBX: 00007feb1f1e5fa0 RCX: 00007feb1ef8eec9
[ 1754.757910][T24508] RDX: 0000000000000055 RSI: 00002000000007c0 RDI: 0000000000000003
[ 1754.765854][T24508] RBP: 00007feb1f011f91 R08: 0000000000000000 R09: 0000000000000000
[ 1754.773804][T24508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1754.781761][T24508] R13: 00007feb1f1e6038 R14: 00007feb1f1e5fa0 R15: 00007ffec7a7e5c8
[ 1754.789721][T24508]  </TASK>
[ 1754.793165][T24508] Kernel Offset: disabled
[ 1754.797463][T24508] Rebooting in 86400 seconds..