last executing test programs:

8.782269209s ago: executing program 1 (id=521):
r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xfffffffd, 0xb7}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x8, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x77359400}, 0x1, 0x4, 0x0, {0x0, r3}}) (async, rerun: 32)
io_uring_enter(r0, 0x3e09, 0x0, 0x4, 0x0, 0x0) (async, rerun: 32)
r4 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000351930404516080036cf000000010902120001000000000904"], 0x0)
syz_usb_control_io(r4, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 64)
syz_usb_control_io(r4, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0)

8.329442873s ago: executing program 2 (id=525):
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x800000008, 0x0) (async)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x800000008, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
open(0x0, 0x0, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x1}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x1}, 0x94)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$audio1(0xffffffffffffff9c, 0x0, 0x4141, 0x0) (async)
r3 = openat$audio1(0xffffffffffffff9c, 0x0, 0x4141, 0x0)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r3, 0x8008f513, &(0x7f0000000400))
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48})
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) (async)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r4, 0x0, 0xd}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x80) (async)
r5 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x80)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000700)='./file1\x00', 0x2000775)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
fcntl$getownex(r5, 0x10, &(0x7f0000000380)) (async)
fcntl$getownex(r5, 0x10, &(0x7f0000000380)={0x0, <r6=>0x0})
ptrace$PTRACE_GETSIGMASK(0x420a, r6, 0x8, &(0x7f0000000440))
chdir(&(0x7f00000001c0)='./bus\x00') (async)
chdir(&(0x7f00000001c0)='./bus\x00')
unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) (async)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)

7.212160853s ago: executing program 1 (id=527):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) (async)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_ifreq(r1, 0x898e, &(0x7f0000000180)={'bond0\x00', @ifru_names='syzkaller0\x00'})
syz_init_net_socket$rose(0xb, 0x5, 0x0) (async)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r4, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001b40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x47, 0x0}}, 0x10)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x100})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2b}}}]}, 0x38}}, 0x0)
socket$unix(0x1, 0x1, 0x0) (async)
r8 = socket$unix(0x1, 0x1, 0x0)
socket$kcm(0x11, 0x3, 0x0) (async)
r9 = socket$kcm(0x11, 0x3, 0x0)
r10 = socket(0x400000000010, 0x3, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x5c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x5, 0x40}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r13)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r14, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000480)="03", 0x1}], 0x1}, 0x4) (async)
sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r14, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000480)="03", 0x1}], 0x1}, 0x4)
bind$rose(r2, &(0x7f00000000c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x4, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40)
connect$rose(r2, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x40)
sendto$rose(r2, 0x0, 0x0, 0x80, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x5, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40)
memfd_secret(0x0)

6.936347749s ago: executing program 0 (id=528):
r0 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0x8dd3, 0x1, 0x42, 0x3a7})
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = fsopen(0x0, 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
prctl$PR_MCE_KILL(0x35, 0x1, 0x8)
prctl$PR_MCE_KILL(0x35, 0x1, 0x2)
r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r8 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
ftruncate(r8, 0xffff)
fcntl$addseals(r8, 0x409, 0x7)
r9 = ioctl$UDMABUF_CREATE(r7, 0x40187542, &(0x7f0000000000)={r8, 0x0, 0x0, 0x8000})
ioctl$DMA_BUF_IOCTL_SYNC(r9, 0x40086200, &(0x7f00000001c0)=0x1)
ioctl$DMA_BUF_IOCTL_SYNC(r9, 0x40086200, &(0x7f00000000c0)=0x7)
close_range(r0, 0xffffffffffffffff, 0x0)
r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r10, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000340)={0x10, 0x30, 0xfa00, {&(0x7f0000000300)={<r11=>0xffffffffffffffff}, 0x0, {0xa, 0x4e21, 0x9, @empty, 0x4}}}, 0x38)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r10, &(0x7f0000000380)={0x11, 0x10, 0xfa00, {&(0x7f0000000180), r11}}, 0x18)

6.190345702s ago: executing program 0 (id=529):
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x6c}}, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="1400010000400000000000000000000000000000140002"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x78, 0x0, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFCTH_NAME={0x0, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0xffffffffffffff51, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x1}]}]}, 0xffffffffffffffe0}}, 0x20000000)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)
madvise(&(0x7f0000d2f000/0x2000)=nil, 0x2000, 0x16)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
lseek(r3, 0x1000000, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001173a6140f41515006ed10102030109022400013600a0000904"], 0x0)

6.047777793s ago: executing program 1 (id=531):
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10000000088}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r6, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$UHID_INPUT(r7, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0)
ioctl$sock_netrom_SIOCDELRT(r7, 0x890c, &(0x7f0000000540)={0x1, @bcast, @rose={'rose', 0x0}, 0x0, 'syz1\x00', @default, 0x4, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @null]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES8=r6], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new ecryptfs use>:}@^/!-{ 00000000000000001024\x00'], 0x2f, 0xfffffffffffffffc)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
semtimedop(0x0, &(0x7f0000000040)=[{0x3, 0x70}, {0x0, 0x0, 0x800}, {0x4, 0x800, 0x800}, {0x1, 0x16e, 0x1800}, {0x0, 0x7, 0x800}, {0x2, 0x800, 0x800}], 0x6, 0x0)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000))
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000500)=[0x1f33])
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x258, 0x268, 0x311, 0x258, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x160, 0x230, 0x258, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x9}}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x0, 0xfffffffc}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xd0, 0x138, 0xe4030000, {}, [@common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
signalfd4(r0, &(0x7f0000000040)={[0xf]}, 0x8, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000440)="4ae652ffe640e9849686d04eeeac29d7c3ff142507d8f059d204a2b0324567f42419d078f2ece1703a08510efecb35a1f7174a4cbc2967c31bcf170788d109442f56f8222ff61ee6157a12b2fdc82c0f3561838322b16b657038fa683915b7e62d9f4bdc633024e9350e9729d8614b33b036e2e9b407a75758dddbc3b7406fad9294df", 0x83}, {&(0x7f00000001c0)="1a00c661fcb3c424b2b01cfac61118d4a10f0131e604e4fe2ca588", 0x1b}, {&(0x7f0000000200)="f7beffa08e28a70c0a5e02124601b6ffb36b7ec083e5f8c4765af7a60d0487ef1363667b8577bf04d34ad0c8600c290b9604593a7562ae74db3168017e463581ae5753bc3c11841bb64e664508037144fcf099f12114163f6ec5fdb7a9f972bb4335c5aa5fa4e1848e04dec7704eec538059fd3d0b050acb2130f0f2de2e9c6f994daeec14b171231816ac27747531d4097716dd8399cf934ac84d1dacde6806d6b6fda8fece6b600dbe47b5c7e86ad3c76754b565efa688293306cdb601c46bf8790c84d9e7f4e0c08bb6d2f5d96e9d9f69bc5a2c0c8020f2ed028fafe75a307853a01953", 0xe5}, {&(0x7f0000000300)="13d15d3e413aa3eede1b7190028d", 0xe}], 0x4)
tkill(0x0, 0x8)

5.798315539s ago: executing program 4 (id=533):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async)
r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x57e, 0x200e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x81, 0x2}}}}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x0, 0x15, 0x5, {0x5, 0x22, "a7ea31"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000980)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21ca0000cf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c98cda2948ef0f440d7cad29567e15a7d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf225571f2487fc86acc2bff7d5664abebd6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552d703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8498856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa086d2a39f13f60b51136a945f780687aad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f91b52fc0b241c2db99a187c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b152d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a66"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000040), &(0x7f0000000180)=r2}, 0x20) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085100000030000001800000000000000000000000000000095000000000000009500000000000000d5b2307878b6a5229917ebb4029a0bea3522c1f874a88524b8256e9616dc84ef9f539900f13815da3cbc479df45e1acd7454a155dd43645345f9a4cddab3d6d9d40e13de56bf656d77b7451f09e02bcb6cf96a4c0fce8ff74fe80460b51e50b4d8105ae605917a45734dbd377e5f99ad246b74853c2ec4862629a63ca0445673c32ad594e33b56f0d0fc6e3a6c84dcd0b6a6746ccfe43cab05ecc5c02583d24d43d968d74062c0f54d148107a22b928921fd"], &(0x7f0000000000)='GPL\x00'}, 0x1a)

4.502545534s ago: executing program 1 (id=534):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYBLOB="9c89a05d132cbbd59631953bbe96a0e281fe0b875a5de9c092", @ANYRES8=r0], 0x6c}, 0x1, 0x0, 0x0, 0x45}, 0x4000021)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff}, 0x6)
setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000180)={0xfffc, [0x5, 0xffffffff]}, 0x10)
pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="070000000000002824000200000014000180061207000200000008000300ac1414aa"], 0x28}}, 0x0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0)=<r5=>0x0, &(0x7f0000000240)=0x4)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280)=<r6=>0x0, &(0x7f0000000380)=0x4)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000500)={{0x1, 0x1, 0x18, <r8=>r0, {0x2}}, './file0\x00'})
setsockopt$inet6_mreq(r8, 0x29, 0x15, &(0x7f0000000540)={@mcast1, r6}, 0x14)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
sendto$inet6(r7, 0x0, 0x0, 0x20040804, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_RX(r7, 0x6, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "4761cc8d1efc5856", "6f0bb479955b1afd938c268e691b0706", "e586344d", "54902b0876c20c13"}, 0x28)
r9 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r10=>0x0})
io_setup(0x5, &(0x7f0000000000)=<r11=>0x0)
r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0)
r13 = inotify_init()
write$6lowpan_enable(r12, &(0x7f0000000580)='0', 0x1)
io_submit(r11, 0x0, &(0x7f0000000640))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20000000130001000000000000000000070000002e86e4a630b400bf5e869b3444cf3b26d94521b7a4995947eb680490ce6227cc35c9ec5542ebf529cf5c205b7fe401c1bacf4b15a64c6804a6cedd63ffca8ede2a6ea1d1bf0c59cdcdab726224d11135ed2b79543e64ff3370ab2a0af57000bf26a1fc5ed4fb2a9245aac8bc20f234fd5515152d6bcfe668dd8a71ff6becad995ef95da00895890cae8d688c04219fdacac9e867660d54f96988a93be72dd47a94c7d1f1d4da1d2fcfc8e8084ed26446c399b0fc6dd2784752b65d816ad1", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00'], 0x20}}, 0x0)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000680)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r4, @ANYBLOB="00022cbd7000ffdbdf250b000000080002000600000020000180080006000000000014000400fe88000000000000000000000000000108000300020000004800068014000400ff010000000000000000000000000001080003006401010008000700", @ANYRES32=r5, @ANYRES8=r13, @ANYRES32=r6, @ANYBLOB="080003007f00000108000700", @ANYRES32=r10, @ANYBLOB="d83b1bec68f99bc2310de1dab711ace019a4079d0e81968bfd382f2e6ab4a088158945f32ac654fe83814c831e73ec4367d8aabd86f789a113b2cd3a01ab9fc52037dc98ad62ca5fb3bac7c619e88b14153da861f19f50fde34ed4c2fb689e544f94723a4f873f22462b21bfcaa5259d20b733455543b9f787f8284362d05929c5e92c5e65800ffcc243d4b8b0f425982741be38593ddcf61f1acee79a90e836d24b8da35e97179f4bf89adaced2c071d250092b2fd5334037ec60dad43b79c199368f52bfd8b7b0e31d1371308dfea78b"], 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x1)
syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e"], 0x0)
r14 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_INITMSG(r14, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x8)

3.944221889s ago: executing program 2 (id=535):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0xb}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x11190}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x88, 0x2, 0x2, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x5}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x6}, @CTA_EXPECT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @broadcast}}}]}, @CTA_EXPECT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x24008010}, 0x800)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb)
close(r3)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc08c5334, &(0x7f0000000040)={0x6, 0x3, 0x1, 'queue0\x00', 0x200})
shmget(0x1, 0x2000, 0x100, &(0x7f0000ffd000/0x2000)=nil)
syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x1a, 0x35, 0x65, 0x20, 0x1a0a, 0x108, 0xefd2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb0, 0x0, 0x0, 0x70, 0x2b, 0x11}}]}}]}}, 0x0)

3.560711268s ago: executing program 0 (id=536):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00'}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r2, &(0x7f0000000180), 0x40010)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000040)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r1, 0x20, &(0x7f0000000380)={&(0x7f0000000080)=""/4, 0x4, <r3=>0x0, &(0x7f00000005c0)=""/134, 0x86}}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r4}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB="fdffffff04000000000000000000000000000000fca38dab7112542edda0f0294eff8b33e7e68e98894771fd1b304a56e279a18275a583bf386e6ec6732bef42660eda496364e0b95000df1e3b860488ec276bab01e4afbd1ccbc6fbba9aa3787f810ea79b7d1fa395e7cce8e114be6eaede011f90ea3ec8ba09e2dab8e1828b4fcae73cb4542028ca45f8c4249b7ad76ff573e2f79fa14cf62ff21aa8d4a78474490269a21b7997875c7d25ed281d23d4f5d72bef561a095eb85c889ec0ae607f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xa0000, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
r6 = signalfd4(r5, &(0x7f0000000040)={[0xc]}, 0x8, 0x80800)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYRES16=r8, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x2004800c}, 0x40040)
sendmsg$TIPC_NL_LINK_GET(r6, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="4000000039f77f454a06bab600001426a2e067a34806ebfead0ea7fd2a032f27c0f11c3cbf1cdfc5aeae7a2acbbafc486d6c398346a5b47d929eb5cdd82a3d2ccec4f5de81d5ab1319832ac7febf1d26c4b6afbe5a2d928cdf9f042eea6196fdefe3c6f6ebab18fb9a2ee9b74bf0b5ba2ed175376492da1c"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000001)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x8f)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)

2.780454436s ago: executing program 4 (id=539):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) (async)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0)
readv(r1, &(0x7f0000000600)=[{&(0x7f0000000380)=""/71, 0x47}], 0x1)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2bf6726f75705f69443d02f4fe7eaec5ba8098716cd46f4fedbbc86f9f0bcb9ad847a9a207fe4e6ea0705d772504d441ca26b386babaa9a669423b8e29210f98cde5bd76e4094c4c7269792e7c4265f09d76fca7cda3876d4be17b8bc30cd2c7cb9a4d40c770cd0cc908e3d9d51252df23594c4499fe84a8595b5f2dad1ffd543c", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2900, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000540)={0x1, 0x0, [{0xce, 0x0, 0x80000021}]}) (async)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0)
ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000080)=0x20)
fcntl$setstatus(r5, 0x4, 0x2400) (async)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000040)={0xf, 0x3, 0x3, "36661dd3fb65d5a57cee94b928d08a127dc3543fdfab1781ee59606583a4596c", 0x34424752}) (async)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000002c0)=0x8000)

2.658916855s ago: executing program 4 (id=540):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r1=>0x0})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r2=>0x0})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002240)=""/102400, 0x19000)
socket$packet(0x11, 0x2, 0x300)
migrate_pages(0x0, 0x50, &(0x7f0000000100)=0x5, &(0x7f000001b2c0)=0x27858206)
syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r2}, 0x18)
sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0xff}}, 0x18, &(0x7f0000000200)={&(0x7f0000000540)="629ddebc253b499178", 0x9}, 0x1, 0x0, 0x0, 0x4000000}, 0xee)
connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18)
mount(&(0x7f00000000c0)=@sr0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='pstore\x00', 0x40c0, &(0x7f00000003c0)='\x00')
sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)

2.601722018s ago: executing program 3 (id=541):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_int(r2, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
write$tun(r0, &(0x7f0000000200)={@val={0xa}, @void, @eth={@multicast, @empty, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x10, 0x11, 0xff, @local, @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x5, 0x100}}}}}}}}}, 0x4a)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x121100, 0x0)
ioctl$FIONREAD(r3, 0x7040, 0x0)

2.097866172s ago: executing program 2 (id=542):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="6c0000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000010800164000000004"], 0x6c}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000003010104000000000000002002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x4048000)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80801)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000500)="a608e5f2e2724fd7d00b71dc97e13f5a2a987046270dc61632cb51d1ec3c7912901302ff866747b05d5e18a21bc5d2d55d87d4683de5d6dc5aa63b9f6e1c4883c3fcae54300a236a34f1fc74e8ca8e2e807635dc41b9bc8ff385223d7d528b631d0f0538f807e106df999fba2f884d84cb60dd41aa1811cf1e995a246881", 0x7e}, {&(0x7f00000006c0)="8d4fb001cf69a4e5d8cea7569c780cc8598d314562f2d2e8bf22047e364764a56d8d35000cc37feb758a43590f1bb28a3713bd28dfa24e670fb5eae6020d6fe9b35b93159c3e7d2cbf38d5f548bd105bee", 0x51}, {&(0x7f0000000780)}, {&(0x7f0000000880)="bf0171aab45469f23a3e11b9c8fb004572d990a78a7a7b3b7b4a4d2def1e711b6d7fb1742ebbca750dca13be6d89a7c1ba6f2af52f77b7735ad9ec4ccb265d37075afa82a0dbb371487e9124126e5b4e245dee2fafc80ac8609a2acd770acccafd112e302e93afbf01f8bfd4262df4ad9a09f59efecff400e2b06fb698b1641a41e82a2369875f9a2fe3e358420a8b3371f3", 0x92}, {&(0x7f0000000940)="a25473c28cca42abe4e2e2ff22c40b099dc8d1401b3d70b005a30c5dee9bb2914b8ab87826d866fa20f13f1e1ea3215b34735fd7c72736516bea3e0ec3dd8bc9164fcb7f6d46dc26d12f4a78890a9492d56ef482f6861fd3d92b5e5f40a6c7362d23a3f9f3f32d32266a8d15882a83ee2d5226afe3ef90088f5082d6c986922dbac25ddabb11695f3317ba3118eb03269fff79cd4fb24c379c832eabf54dea07c0837ff258638f66bcf415e967dbba00e0120e19998eb5c5", 0xb8}], 0x6}}], 0x1, 0x810)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r8 = accept4(r7, 0x0, 0x0, 0x800)
sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="61f61dae21057eb1202daa47a88c60ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff010000000000deffffffffffffff010c00028005000100000000003c0002802c00018014000300fe8000006b8900c9a2d94c9b3e17ac25db9318870000000000000000aa14000400fe8000000000000000000000000000000c000280050001000000000008000740000000001800068014000400ff010000000000000000000000000001"], 0xac}}, 0x0)

2.048579238s ago: executing program 4 (id=543):
socket$unix(0x1, 0x5, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20001890)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
syz_usb_connect(0x0, 0x43, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000043a5aa40801b96e3b1a7000000010902120001000000000904"], 0x0) (async)
syz_usb_connect(0x0, 0x43, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000043a5aa40801b96e3b1a7000000010902120001000000000904"], 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x2}, 0x8)

2.016812516s ago: executing program 3 (id=544):
socket(0x2, 0x80805, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
wait4(r1, &(0x7f0000000100), 0x8, 0x0)
setfsgid(0xffffffffffffffff)
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
open(&(0x7f0000000040)='./file0\x00', 0x10000, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000b25000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000394000/0x2000)=nil)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000000)=ANY=[], 0xd80}, 0x1, 0x0, 0x0, 0x40c0}, 0xc000)
accept4$tipc(r5, 0x0, 0x0, 0x800)
getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/user\x00')
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[], 0x138}}, 0x0)

1.230522504s ago: executing program 1 (id=545):
socket$inet(0x2, 0x4000000000000001, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_extract_tcp_res$synack(&(0x7f00000000c0), 0x1, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r3=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}, 0x10040)
sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000702000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x0)
mkdir(0x0, 0x0)

1.230015115s ago: executing program 0 (id=546):
sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x3f7, 0x10, 0x70bd25, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000880}, 0x4000) (async)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x280, 0x0) (async)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x140f, 0x400, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'umad\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xd, 0x45, 'opa_vnic\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) (async)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async)
r3 = getpgrp(0xffffffffffffffff)
prlimit64(r3, 0xe, 0x0, &(0x7f0000000240)) (async)
fcntl$getownex(r1, 0x10, &(0x7f0000000280)={0x0, <r4=>0x0})
r5 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000002c0), 0x2, 0x0)
write$cgroup_freezer_state(r5, &(0x7f0000000300)='FROZEN\x00', 0x7) (async)
setrlimit(0xa, &(0x7f0000000340)={0x5, 0x5})
socket$inet6_sctp(0xa, 0x1, 0x84)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x541c, &(0x7f0000000380)) (async)
r7 = syz_create_resource$binfmt(&(0x7f00000003c0)='./file0\x00')
execveat$binfmt(r2, r7, &(0x7f0000000440)={[&(0x7f0000000400)='freezer.state\x00']}, &(0x7f0000000580)={[&(0x7f0000000480)='\x00', &(0x7f00000004c0)='/dev/iommu\x00', &(0x7f0000000500)='-]\xcd&,@+\x00', &(0x7f0000000540)='#,/-\x00']}, 0x1000)
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0x80000000, &(0x7f00000005c0)=""/27) (async)
r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
getsockopt$bt_BT_SNDMTU(r8, 0x112, 0xc, &(0x7f0000000600)=0x8000, &(0x7f0000000640)=0x2) (async, rerun: 64)
r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000680)={r8}, 0x8) (rerun: 64)
sendmsg$nl_crypto(r9, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@delrng={0x10, 0x14, 0x2, 0x70bd25, 0x25dfdbfb, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40040}, 0x4c8c5) (async)
syz_clone3(&(0x7f0000000a00)={0x10840000, &(0x7f00000007c0)=<r10=>0xffffffffffffffff, &(0x7f0000000800), &(0x7f0000000840), {0x2e}, &(0x7f0000000880)=""/60, 0x3c, &(0x7f00000008c0)=""/242, &(0x7f00000009c0)=[r4, r3, r4, r3, r3], 0x5, {r9}}, 0x58)
r11 = pidfd_getfd(r10, r0, 0x0)
r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x29, &(0x7f0000000a80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x200}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r11}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x8}, @jmp={0x5, 0x1, 0xc, 0x5, 0x8, 0x10, 0xe68fe6fcdd73f8ea}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10}}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000c00)='syzkaller\x00', 0x800, 0x9f, &(0x7f0000000c40)=""/159, 0x41100, 0x2, '\x00', 0x0, 0x25, r9, 0x8, &(0x7f0000000d00)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000d40)={0x3, 0x0, 0x28ba0771, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000d80)=[r11, r11], 0x0, 0x10, 0x1}, 0x94)
ioctl$sock_kcm_SIOCKCMATTACH(r11, 0x89e0, &(0x7f0000000e80)={r11, r12}) (async, rerun: 32)
socketpair(0x27, 0x800, 0x6, &(0x7f0000000ec0)) (rerun: 32)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
r13 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000f00), 0x2, 0x0)
connect$pppl2tp(r13, &(0x7f0000000f40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0x3, {0xa, 0x4e20, 0x8001, @mcast2, 0x4}}}, 0x32)

580.656517ms ago: executing program 2 (id=547):
r0 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x2200, 0x0)
read$snapshot(r1, &(0x7f0000000840)=""/4096, 0x1000)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
setfsgid(0xee00)
r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f0000001840)={{r2}, "09edd0ca43786a37ef3b1165a214164c12b978927a1166383745f97da06a5e292698040b3f615b829f22eef1e7f3157ed38759c28b6fde0aff25450945a842df447b5c984adbfb6cea1928dfd29c20e07ae851822f9a276ecea80a255374c54d38b957dad39cafe1786d26191184bdf53ab90f2bf164af8581f9e858d02959078370eb4f0ebdf64b356ba3a799888aa68682a66eb01d5cee5dcb0d828e8a986794188038438925c4d0307b340e7c3bd4fbf0d640681f9a05343d4adf27ba024f248d791e5a7230eb87cdbb0b571f0e11a2ee5746755f9879b1e3d39c5a3617f91e117049a6ef0ed7458ca4849add0802f758f5c736366afcb35769fe265c8d7589080d514d7a992561b8d82a25426c1144eff88f93b0ede78d2f1ec1ecd7e5f5dcc1f57766e365605ac591ac2c314819c8d0f2992825a8f06db499d18f8c7b1a43b73be9c4f0588f06d5445c52430f139ef1eada124116a6b91651fad52c017fa771a319c99d6df546c9d75e299e888ab6596915a14975b0dd72a25be61ceae8a7b7103c8215d6869201a4bca3119576c9d5a81f25de20a1aa5fe35630eba70091c388b78c75fa828f71a93db5bd80bf8c7e762efd3da8899f3e901bd5291f18e5ac0d9657e938fabcf68aca41767dc61fbb430cbe18cf95a496b4722c92cb2b836089c1fcd8dd3aaa862a9a5e148cd86be22aa7d71c246560b2c968272c4f97e5327d3913467ddc755cd0631365335d7a52402703d64382f85280ebdd853da0e123677d1764f958c2085e29b257711fd27137382916915fa2faf5dd47016674ad6f135470af4fee9c1a0b929d97d456754e5e7a4a6bc0adb62451f016515a19016fbb2d537d7906e1ca7cf40feb7914391f031d2a2fd5a53a3f4778c888c8af22bb64a977fdcb15d3cc64894ffb9bbd70007a9cac601fd6acd80ae965e6f1d9f1266df3fa214a0abad33eb6f351cb21e8e346b851b4e4c92b9997fdb17a0ab978e3594acbad1e20f6c657a19f931e5ad2f5d8fffa076ebaf3a44f5bf39b7d00360a0a51cab5630500473e4dfab63852ad2acf39df59c63a06b709b825f77c20f0ec1b6d30fde1f496dbe6d7e563004b87bc72e558ad4cb21abf3cf71d15b558ebf3709a9a34c1ca4fb35dd70aeb97df8f396adddcb0deaa3b95a4b85fca508f3043bade2737eed6eb477e8fba50045dcda237498bdbab0346051931ef2a0c5d5f829fabf4e39022658e4e763383629e08f9ff4fdd40640636008c68cbf4e155d52e9769018f8f306accec73aa10a1908015558dcf1fee39c96d9df315cb16de75abe93e8c04ef25acf1345d2c74fa90cbdb00803411c704210bcd14e2f4d173928cfc0f55bfaa2a9203f7c09c3a05c113e2f9fb93415efc9398213dbe897cc511e3325a14d18d00bb9861f26c881147d6df293030ea560e65e39e6f38a1b7c91636e15cafd9dc55acb0f5be75a6b6089e671a18abd886803326f6bc01047ce6f89552cacf91a808a8a48a7e6e9bdcd4142eff2fb369c9666103258a6ad6161b3f18fa66b5baeb8831653003cdeba3bb725bea92fb4c9d4e89b5b0a6bb0ae8e9904adb4a9008b8215f16692c97238887af9faaa38138658874e57a2bfc702444c1707716b3d798270e94293fbf3d13b4c60c67c07f92ef322b60a9337510854f009369c53d1e0e8a53d4ff3b8bea218b2dd42634a94db1a54afee24baf878efb00870953fdad18a9cf9d00dc005b090a9296a9263f2b64e46ad97bc04964ea277d788b71f85f5631c9f72270395947ecc68b7fdeba34a839d9c582c6d85e62036e44d324527bf511e1a39991c104c3a0ad5cee331093a307ef43ada639805f2eecf8b1e6c6c9f97d478ac896501f5e4edbd0944dd13d4b9badf7007d19ec9b12de1f80cae4176fcaada0511f41a229c4450f51d9bf7bf4f1403a1d55fa490c94a88dc91b8fdc41332a708c9509bb556fa5033034f8dcbad2e19c0e86424c7b747a203a44d74303b53bd2bd8417944fb37d2b4d54c79181d4bcb34d890a10cd44f781eb8ef86e69db7aa9ef6484796e52f237ddf4a1e921548f6d06ef669848800ecc801b17396f1634997515cf112697f5ffd6e69462b44ea95c06cbd1e1b1de392affaab6ce5ccfb0574d26d1eaf46a3cd2065a90e7981f9e67eb383b4f38bc98b0ca0ce2aa5a542a0e23af3ad2ee2edf6ec40736197f161cafb87c869277562ca96c44f2babe360ae60449e03e427311e5f3442724c68d1668c7861fcde570310d2aa91f5e3e06340eea6d062b3371f20850b1b43b25d4ae4c0f89c1f86c3ffa266b01b39bd1a1a135f993fbb151aafbc2a674f4165d745a212d8d9a86a24d05f8cdffc6a0e563776b1b7d221e2090a27a4fedada1aa64b9605c275b2eaf8fcb7892020eb21ab339ecb71b75adcc3f9fe214e6db95bcf2902a50aa6e6c62fe9dce826efd5a0a816bf89a9e12ef1ff820b86f02537dc1e4fcaec47285f356e7076c1689bd2d89c3e3d39bc609e49578eba1ea7f3da501872f5a8bc2375639f5fea69843799e71ecf49ea276225ddb6591bee573599450a4530c5ad236c9ceeeb5e8c2c2b54fc34fb41d8cb8d88f9d09ecd5d0ab70579f291086a74dadcb66bfeb9d56eca37e568f8439d900e066baacfcb1ece5ddc79817ccb6d4c3cb692ea1b5c52ca22ca94c067848ddd08d8498199ce9597c9457a3c0e54edc32135be03da3aca96d3eee94a4fe22b77dadf9d47d1d9a459f3d113b935b77e93569bd31ffaf224434041d6b58040a809eca84f2f49e1d52527e03a35bed5741b264814174cd69fea4c21cc8e7621dc05a66c4dc0802ce037a4bb82dec1d7a7fddea8e6399185afc47465632fdb6ba33dc06d4a6d41355c0dd1b3f014676315ca6d6d6298cf9d62fe2eea7817b311ebe0f3ca6a92c2cdc9a392c9af30159fb8d090e6bdeea3211d9fcadc9ab843dc82129e45c60c4ed8bce5625699e6cabbbe85d99896dd733ec80867acd2650805dad7838a235a291f1f8e7d43c9ef4f6707115501823525dc6bdce8f371cc326f0650f96b9970d107acd63bcacc069b630c4646304dac4c3092e4c36538daea7e998bd7055cef12397f1d192047bab0dc6a9d64b9369068b484364fd7c186fa146e5f0609c2f2307ffd3f86f2af11aa41494419636c3ed1b091e06ee50a44591e6ea3d63b52c3c3773ddf2bb1f9122088faa5ae00812e100cfcdc91a311ba45739f7a2fb0a1e06146848aae9f0bbeb5e13e28e0ab663724ca658ce9036f23a322d4cd254a216c96f0dbc0b77aa9a11a581c92d7b9ea446faae4a9794371c5ffaf499a0f92e63fea2a1132d796eada733023aa71c3b44683004158c83ae2c813f4782f1422f0158781e6cbe2c7c5455aa0b20e4ce72973449293471864528929299e694722b7eb41142391663dfdc6fd080c29cd864a84cf6d33c82b27ffb758642e89df3010ec79a93b59fa3d67c9d344e364688d614ba8f7a84954fe89400e4e6c78a3d054065b7772d202c9693e4267509b0598f3ee5e834a100a2bb30696282e421c62f4f60d77585b35d911189936d19fe9843f3d0e9e0e01ce04fc49045bf0d5853b486307b466e0bda55c4771c416e605f2d09ce29589c4dc75548c0f6deb1ac13fdaa02909ff8d6d23392e09174dfb1549617e3326db27f284092fd2e66db30f157a6a714fd28954fc1233ada7ad1832e5cc87c589fe95983ac6b636266de407bc30f58bdf1e130cc84f4a3b39ced59c86bbbfb2fa8015a65adf78574691a5c8a779ec410e363610c7947828e20a3f5ff5015b0c5ea3fe6df0e641937f1a9a7f8382896d8c52961ec50eba6316e9f822761d942b31b1a2f6cc927fcfae1c76ee8be79a6ab876158d1eddc8b7056fc17a360589d2c7446bc584859b9d48b849f6af19d4f5fb5975ead6324e69927e64826a0f4126906c2bc06ea3fb8722c2b895467351667dab172205bfad156ee9659ecbdbb1178beaa6c87f2c565bd0131cefd8f5011cdfd510c77b96fedd48a2048e2d7ebc60baea5e727767823c77cb1436681d34e56105f6d9fb9629a8dd9c0bb390439a776e2c643c66b667b73d11ccc8e4c62dce4a14ad34a3e98ca7644f5e9f6df365cfe16c07167bebf27d1006e41fcde342b09ecb47905ffbf9d073e9696fb2fbe98735a7bf79828d9417627c09c24634fb852d917b9558cb6981c7299c6e23da1599aed51ad1018d22beeb360e1b128b952611fd947acc11fd1081bc695e080f2c2cfe0f9e89ef9806f2457ea6e43211569e0668ba99c34b8293a97285d04123d93229c3849dda8d8aa2982c4d94935678fa61ea5659383877407a972b4606921c491eb6f015bb55bdfb71d79d35e2d227389a5dfd7021bd7ebdbc6b28b5e3c7439456ffdf3c7a822d26fb9ace6773237c23c9162027838000c91e07a4a865a51bc2e372c40bc6349a75a9a321470c034b4ede5eea1988ae282bce1327cfa981b8b3481ee122892fe8ea828f108e6a1e1c6fbf7ed92a5f99f519bb1b1c3d813c16798bb6bdcb997fced03e26f88eea2d6d3959cf0cbb8bb62b3bc47abeef9ecdfa7583b339b65c1f018fffbb3148af1955f4b7c1e1d3205bc86c7db0c284d6d24e9fa627a3ff4a347943b2278500d7e4403a632410562e57b0e90c84ceabf58d1da531f4d6bb8014ef01be33e20962da916584cfe249ac94f0919c805eb3a22771baac04e122fba808256cf185b72da0fcd4bf24440ef3840cc35b3341c34b6cb4fe8cf6237205cd4ac7760661c7cfb8cd4eeddcdaa56ec8fbcf95501d3876c45a0c9fe4e69edb8f17339bc6aceb2bb70b896e0aa4d9cb735a096f0f41ed12bd2ac73985275945ef0a084eeb0300b4aa9e988858d66cb987fd319c970d4e0d168ed75a1de14091e1c66cd4df41844ab611778f8280b961b318ac6c49ea88c27494db65cdfb7371e36d585d8143a3b5bc8c349a20f7dd9fd8b675df5e4aaf4c04e93750bee85dcf12d8d86361d090682982dd5afdb7f3fb4414ed2d1b9737fcc17b75e222ad92e3b27f1365064714d0e1124b46bd8a2f86f9a6a62b4aa215d37864303aaf90e3c6cf43dbd7aaab614f474d83a8408fad34f8c889d1c65f8db659ddeae44dbe23a6fa865232022773d4920abb57379ff6bd8860f439fbd6a2fba8faf702727ab532f97b83fbd2e4a08eefbecbe6f63e1ec742df81cab70cb37d47f01a406e20503f897edbd0fc4534bf49f5b52536f55906b4acb6736790e6d8084ef588679540eee6aef8cc5afe8061794a47ed7a4574c092bae4647987b729567904fa538e56fdfc38c24f8d80e68c0dc3632a4fe77421aa1f3b7b7550ed256e7fc4437b43710d88c348f4efecb4cd5874a8b639d937e7b42c83e38f9f51cc8e930e9418b94163ca145304159a71556a0ad534eeee29591eee339e23f5d5d2db66960e7063e64e887996515c93413f297d1bf21c82c14f9f2bc19caa3f72439dd6f3bb4c3fc9e1ae3c7ab166d727720684311f04a3dc7b67e382d700be2d00f2473cb02de3201bac8a1f282c05498d9d0e7fb6e4bc174a339b18144a9696d800aa5ad0d81939b6cf783c73506e3a547a2cbf4e846d13d43c4cda1f22bf8091643872bb58a8fb16518c22bcd53f60af95473cc2631d0409daa63448d9936544cb75ea2cc4091103d7c646ab1164a36e34efe71f9f2d49da47f5a7c1917a93a3a6d50ce841992d632ba25e168e860597c3f7082d29e80d090aca5fd0022de9db4c3fceb6977a6b29be2101633503ea07ee06128114c21b048c668"})

578.620517ms ago: executing program 3 (id=548):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)

577.85282ms ago: executing program 0 (id=549):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='team0\x00', 0x10)
read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x2020)
prlimit64(r1, 0xb, &(0x7f0000002080)={0xfffffffffffff559, 0x1}, &(0x7f00000020c0))
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000002100)=0x9, &(0x7f0000002140)=0x2)
r3 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bff000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000002440)={0x0, &(0x7f0000002180)=[@wr_crn={0x67, 0x20, {0x4, 0x8}}, @code={0xa, 0x6f, {"650f01c2c4e195e0fb450f01cb6726f30f1ed166b8ad000f00d866baf80cb87e6ab38def66bafc0cb000ee26360f001d0000008066baf80cb8566ff68cef66bafc0c66ed66b80a008ed066baf80cb8ce319983ef66bafc0c66b8007066ef"}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @code={0xa, 0x53, {"f608a82e660f383b972687000066ba200066edb805000000b924a400000f01d98fc978c643002e430f9ed2c461d57d8d9cf35bcc0f2011c4a26999ed66ba430066ed"}}, @enable_nested={0x12c, 0x18}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @cpuid={0x64, 0x18, {0x6, 0x5}}, @wrmsr={0x65, 0x20, {0xad2, 0xb3a3}}, @nested_vmlaunch={0x12f, 0x18}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @wrmsr={0x65, 0x20, {0x658, 0x83e0}}, @wrmsr={0x65, 0x20, {0x978, 0x5}}, @set_irq_handler={0xc8, 0x20, {0x99, 0x1}}, @code={0xa, 0x58, {"460f01c464440fc7346166baf80cb824d9478cef66bafc0ced0f3565f3470f408500700000c4a1fb7c19c403cd7a800f0000003bb9860500000f32c42355686cc00332400f01f8"}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x4a4, 0xacb500000000, 0x7, 0x5}}, @nested_create_vm={0x12d, 0x18, 0x3}], 0x29a})
mprotect(&(0x7f0000ea4000/0x1000)=nil, 0x1000, 0x0)
ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000002480)={0x333, 0x3, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
sched_setscheduler(r1, 0x6, &(0x7f0000007180)=0x8)
ioctl$KVM_CAP_HYPERV_SYNIC(r4, 0x4068aea3, &(0x7f00000071c0))
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, &(0x7f0000007240))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000083c0)={0xffffffffffffffff, 0x0, 0x11, 0x53, &(0x7f0000007280)="7d483c8b24d9014858288d11531f4000df", &(0x7f00000072c0)=""/83, 0x6bd29e54, 0x0, 0x6c, 0x1000, &(0x7f0000007340)="6c77d68b5dc370e66273389741fd2628cc03f2f97f60e501a87af4a997b2a3eeb1003083f5ed503dfd7218bd67f194fa8512cda2e280db1ff0578657db409e8b48f2c9d1aa73803b3c0d6c2af4ad4b1c8d192be51e35f22552ffb9d91ec755c8a01d81ba74fbb3e3c2ade35b", &(0x7f00000073c0)="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", 0x5, 0x0, 0x4}, 0x50)
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000008440), 0x200900)
ioctl$SNDRV_TIMER_IOCTL_STATUS32(r5, 0x80585414, &(0x7f0000008480))
setrlimit(0x3, &(0x7f0000008500)={0x76, 0x10001})
setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000008540)=@ccm_128={{0x304}, "ad94dbd817584d03", "3c82c50e2e2ab1f32a598d0ed13f18db", "01333fd9", "2086be1cdd8e44a2"}, 0x28)
r6 = creat(&(0x7f0000008580)='./file0\x00', 0x112)
getrlimit(0x0, &(0x7f00000085c0))
write$FUSE_NOTIFY_STORE(r6, &(0x7f0000008600)={0x2a, 0x4, 0x0, {0x4, 0x6, 0x2, 0x0, [0x0, 0x0]}}, 0x2a)
syz_open_dev$sndmidi(&(0x7f0000008640), 0x80000000, 0x800)
r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000086c0)={'macvtap0\x00', &(0x7f0000008680)=@ethtool_link_settings={0x4c, 0xfffffff7, 0xe, 0xf7, 0x3, 0x14, 0x80, 0xb, 0x6, 0x9, [0x8, 0x9, 0x7, 0x7, 0x2, 0xd75, 0xe8ee, 0xff], [0x3, 0x7ff]}})
r8 = socket$rxrpc(0x21, 0x2, 0xa)
sendto(r8, &(0x7f0000008700)="9cf629fc5af0887dc923b14a743a8a10453ade33f7ccabde", 0x18, 0x800, &(0x7f0000008740)=@in6={0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffff3}, 0x80)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000087c0)=0x10100801c)
ioctl$KVM_SET_GUEST_DEBUG_x86(r6, 0x4048ae9b, &(0x7f0000008800)={0x80000, 0x0, {[0x3538, 0xb2da, 0x3, 0x0, 0xc0c, 0x6, 0x400, 0x6]}})
munlockall()
socket$key(0xf, 0x3, 0x2)

572.84486ms ago: executing program 2 (id=550):
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_IOC_FAIL(r0, 0x4c81, 0xffffffffffffffb6)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f00000001c0)='bfs\x00', 0x8000, 0x0)

524.993446ms ago: executing program 3 (id=551):
sysfs$1(0x1, &(0x7f0000000000)='@\x00')
sysfs$1(0x1, &(0x7f0000000040)='!$/}-[#\x00')
sysfs$1(0x1, &(0x7f0000000080)='!$/}-[#\x00')
sysfs$1(0x1, &(0x7f00000000c0)='!$/}-[#\x00')
sysfs$1(0x1, &(0x7f0000000100)='!$/}-[#\x00')
sysfs$1(0x1, &(0x7f0000000140)='\']\x00')
sysfs$1(0x1, &(0x7f0000000180)='!$/}-[#\x00')
sysfs$1(0x1, &(0x7f00000001c0)='!$/}-[#\x00')
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x124, r1, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dvmrp0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x31}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xd}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x30}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gre0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x21}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x8801}, 0x10)
sysfs$1(0x1, &(0x7f0000000440)='+):\x00')
sysfs$1(0x1, &(0x7f0000000480)='!$/}-[#\x00')
sysfs$1(0x1, &(0x7f00000004c0)='\x81\x03\x91\x1c\'$#{!\x00')
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000500)={<r2=>r0, 0x2d62, 0x5cd623d4, 0x1})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0xe04, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x8000)
sysfs$1(0x1, &(0x7f0000000640)='&]@/\xab\x00')
sysfs$1(0x1, &(0x7f0000000680)='ip6gre0\x00')
sysfs$1(0x1, &(0x7f00000006c0)='-:-\x00')
sysfs$1(0x1, &(0x7f0000000700)='\x00')
sysfs$1(0x1, &(0x7f0000000740)='@]@\x00')
sysfs$1(0x1, &(0x7f0000000780)='\x9e*@+*\x00')
sysfs$1(0x1, &(0x7f00000007c0)='\x00')
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000cc0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000880)={0x3ac, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x5, 0x48}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x6f8e}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_IE={0xb3, 0x2a, [@fast_bss_trans={0x37, 0x6f, {0x5, 0x2, "9f5324e7b5898e1a9138698a3ee169b2", "0d327ab03ed22c8d2c28e91403f713baa8316bcf40f588aa2f3e69ba07083d66", "211b23f9a2966e7ce01345bfc8cd882e739c4279233fd4787bb0d8fe9d0d1595", [{0x3, 0x1, "8e"}, {0x2, 0x18, "284c3f86cf1f7c702e092c93058a08c77e955a08734b4837"}]}}, @dsss={0x3, 0x1, 0x5}, @ssid={0x0, 0x14, @random="a36296d385776f7a91dd5406052e9293ea082b41"}, @chsw_timing={0x68, 0x4, {0x101, 0x3}}, @dsss={0x3, 0x1, 0x8}, @cf={0x4, 0x6, {0x3, 0x7, 0x1, 0x8001}}, @link_id={0x65, 0x12, {@initial, @device_b}}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x1, 0x37}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_IE={0x29c, 0x2a, [@perr={0x84, 0x103, {0x2, 0x11, [{{}, @device_a, 0x8, @void, 0x13}, {{0x0, 0x1}, @broadcast, 0xd, @value=@broadcast, 0x41}, {{}, @device_b, 0x1, @void, 0x3}, {{}, @device_b, 0x0, @void, 0x13}, {{0x0, 0x1}, @broadcast, 0x1, @value=@device_b, 0x1e}, {{}, @broadcast, 0x1000, @void, 0x6}, {{}, @broadcast, 0x7f, @void, 0x1}, {{0x0, 0x1}, @device_b, 0x9, @value=@broadcast, 0x1000}, {{}, @device_b, 0x2, @void, 0x1a}, {{0x0, 0x1}, @device_b, 0xff, @value=@device_b, 0x8}, {{0x0, 0x1}, @device_b, 0x6, @value=@device_b, 0x1b}, {{}, @device_a, 0x4, @void, 0x13}, {{}, @device_b, 0x3, @void, 0x13}, {{}, @broadcast, 0xac, @void, 0x37}, {{}, @broadcast, 0x6, @void, 0x9}, {{0x0, 0x1}, @device_b, 0x1, @value, 0x9}, {{}, @device_a, 0xfffffff7, @void, 0x2f}]}}, @measure_req={0x26, 0x12, {0x4, 0x1, 0x7, "c69bcf9067aeb117eccc3e4a2e0e05"}}, @random_vendor={0xdd, 0xce, "3f40036f7623cf3144d936cc10d8aac9110633d2b9dd421aeb81a220ae414978810924afb7a4c05d76c811c1a55844baaf83356881127d7dbda359c9efadf6e4c43770e61bb4d14c4dc65b7d748527a686a50d75b858c61fc71f15c373cac6c23ccaa95737669a6211f3c711f7963a5116cd2b04e76cb6bc8b6edfcd79fceead0f6e2d8366abf1efee35efc2a55984db70cfdb6a1ac2f26aa9feb050b84b4b2e946f2c7df1a0c9a0d64d7f53b177ea169eae329356542ed0e452cdb04def40af44cfcc39904a56a4ac0839217c09"}, @fast_bss_trans={0x37, 0x67, {0x0, 0x1, "12aa749833d770e1431a0197173071b5", "74a2fa11464cd5844e7682542938981c7dcae800d70290f5dfa5121b4545f080", "95cf3f341e3052441acb7d9dd53446746d70c046088e72d2098b516120735f1e", [{0x3, 0x13, "dcccdcfba31f43218d4b31d800d47ef28dd91e"}]}}, @rann={0x7e, 0x15, {{0x1, 0x2}, 0x4, 0xe, @device_a, 0x6, 0x6, 0x5}}, @gcr_ga={0xbd, 0x6}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x7f, 0xa, @device_b, 0x5, @value=@broadcast, 0x3c86, 0x3, @broadcast, 0x4}}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x40000}, 0x4800)
socket$packet(0x11, 0x3, 0x300)
sysfs$1(0x1, &(0x7f0000000d00)='IPVS\x00')
sysfs$1(0x1, &(0x7f0000000d40)=']/]@.\x00')
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000d80)={0x0, <r4=>0x0})
sched_setparam(r4, &(0x7f0000000e00)=0x8)

524.680484ms ago: executing program 2 (id=552):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000400)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$kcm(0x11, 0x200000000000002, 0x300)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="030000000400000004000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000180)=ANY=[@ANYRES16=r2, @ANYRESOCT, @ANYRES64=r2, @ANYRESHEX, @ANYRESDEC=r3, @ANYRES64=0x0, @ANYBLOB="e6d5057020c3e3bff2ba8b980e1a2a98908b29006f995cee88e3cdac9b2a8d38da03c9cabbf68dc647185e6de4c4507cbcb589cd2ba3acdb1baa37b18877823ab1aeee4587df1f", @ANYRESOCT=r3], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
io_setup(0x6, &(0x7f0000001000)) (async)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) (async)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, 0x0, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async)
r7 = getpid()
sched_setscheduler(r7, 0x2, &(0x7f0000000040)=0x7) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) (async)
clock_getres(0x6, &(0x7f00000003c0)) (async)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async)
openat$cgroup_ro(r5, &(0x7f0000000180)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)

524.297419ms ago: executing program 3 (id=553):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r0, &(0x7f0000000000)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r1=>0x0})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002240)=""/102400, 0x19000)
socket$packet(0x11, 0x2, 0x300)
migrate_pages(0x0, 0x50, &(0x7f0000000100)=0x5, &(0x7f000001b2c0)=0x27858206)
syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r1}, 0x18)
sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0xff}}, 0x18, &(0x7f0000000200)={&(0x7f0000000540)="629ddebc253b499178", 0x9}, 0x1, 0x0, 0x0, 0x4000000}, 0xee)
connect$can_j1939(r0, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18)
mount(&(0x7f00000000c0)=@sr0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='pstore\x00', 0x40c0, &(0x7f00000003c0)='\x00')
sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)

371.438614ms ago: executing program 4 (id=554):
setitimer(0x2, &(0x7f0000000340)={{0x77359400}, {0x7fffffffffffffff}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 64)
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
io_setup(0x8, &(0x7f0000004200)=<r2=>0x0) (async, rerun: 32)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (rerun: 32)
io_submit(r2, 0x1, &(0x7f0000002740)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) (async)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="16000000", @ANYRES16=r1, @ANYBLOB="010027bd7000fcdbdf2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
r4 = fsopen(&(0x7f0000000180)='ext4\x00', 0x0) (async)
r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) (async)
r6 = socket$kcm(0x10, 0x5, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) (async)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r6, 0x8983, &(0x7f0000000200)={0x6, 'dvmrp0\x00', {0x3}}) (async)
ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x8001, 0x6, 0x1, 0x0, 0x0, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x1002, 0x1, 0x8, 0x4, 0x6, 0xffffffff, 0x10000001, 0x1a449, 0x3, 0x40000003, 0x89, 0x2, 0xf27, 0x6, 0x7, 0x8, 0x5, 0x8, 0x4, 0x10000, 0xfffffff8]}) (async)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) (async)
clock_adjtime(0x17, &(0x7f0000000000)={0xea23, 0x9, 0x379ee6, 0x0, 0x40, 0x7ff, 0x8a, 0x3, 0x6, 0x0, 0x3, 0x2, 0x7fffffffffffffff, 0x80000000000002, 0x1, 0xffffffffffffffff, 0x800000, 0x800000000000002, 0xffffffffffffffff, 0x5, 0x200, 0x3, 0x5, 0x2, 0x40, 0x4})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) (rerun: 32)
read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32)
sendmsg$nl_xfrm(r7, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b80100001b00010026bd7000fcdbdf25fe8000000000000000000000000000aae00000020000000000000000000000004e2207ff4e2000020200a03001000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000400000000000002000000000000000104000000000000000000000000000007000000000000002f4a00000000000002000000000000000180000000000000020000000000000000000000010000000200000000000000080000000000000004000000000000000201000100000000050000000009000008101f00010000000a0010000000000000000000e40006007f000001000000000000000000000000ac1414bb0000000000000000000000004e2300064e2200040a00a0203c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe800000000000000000000000000041000004d533000000ac1e01010000000000000000000000000500000000000000ff0f000000000000ff0f00000000000000000000000001000500000000000000050000000000000000000000000000000000000000000000b1e1a2250000000076000000000000005588000000000000080000000000000002000000000000009c4b000026bd700005350000020002d48000000000000000"], 0x1b8}, 0x1, 0x0, 0x0, 0x4040841}, 0x4010) (async, rerun: 32)
r8 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
r9 = add_key$keyring(&(0x7f0000000100), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r8)
r10 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r9)
r11 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r10)
r12 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r11)
r13 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r12)
r14 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r13)
add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r14)

235.909391ms ago: executing program 3 (id=555):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0])
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040))
chdir(&(0x7f0000000080)='./file0\x00')
setpgid(r0, r0)
setpgid(0x0, r0)
mprotect(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x1)
sched_setaffinity(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0)
write$cgroup_int(r2, &(0x7f0000000040)=0x1f00, 0x12)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB])
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40100, 0x0)
r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4}, './file0\x00'})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, 0x0, &(0x7f0000000100))
io_setup(0xd, &(0x7f0000000380)=<r6=>0x0)
io_destroy(r6)

162.560268ms ago: executing program 0 (id=556):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040090}, 0x40000) (async)
process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000) (async)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
r1 = socket$inet6(0xa, 0x2, 0x0) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)
syz_open_procfs(0x0, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) (async)
unshare(0x8000000) (async)
shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil)
bind$inet6(r1, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_usb_connect(0x3, 0x67, &(0x7f0000008040)={{0x12, 0x1, 0x250, 0x14, 0x3d, 0xfd, 0x8, 0x2c42, 0x16f8, 0x3bda, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa0, 0x1, 0xb0, 0xa, [{{0x9, 0x4, 0xda, 0x91, 0x0, 0xb1, 0xe3, 0x80, 0xe}}]}}]}}, &(0x7f00000087c0)={0x0, 0x0, 0xff72, 0x0, 0xad})
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) (async)
syz_usb_control_io$sierra_net(r2, 0x0, 0x0)
r3 = socket$kcm(0x29, 0x5, 0x0)
r4 = syz_io_uring_setup(0x90c, &(0x7f0000000200)={0x0, 0x5885, 0x0, 0x0, 0xfd}, &(0x7f0000000740)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r3, 0x0, 0x0, 0x5c, 0x10}) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0)
syz_extract_tcp_res(&(0x7f00000000c0), 0x4, 0x5) (async)
syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0)
syz_open_dev$hiddev(&(0x7f0000000040), 0x4, 0x101000) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="070000000400000008000000"], 0x48) (async)
syz_emit_ethernet(0x10c2, &(0x7f0000000780)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, @void, {@mpls_uc={0x8847, {[{0x0, 0x0, 0x1}], @ipv4=@udp={{0x26, 0x4, 0x3, 0x37, 0x10b0, 0x64, 0x0, 0xd5, 0x11, 0x0, @loopback, @rand_addr=0x64010102, {[@lsrr={0x83, 0x17, 0xe4, [@loopback, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @local]}, @ssrr={0x89, 0x23, 0xe9, [@rand_addr=0x294a, @local, @local, @dev={0xac, 0x14, 0x14, 0x42}, @multicast1, @empty, @multicast2, @rand_addr=0x64010102]}, @end, @ssrr={0x89, 0x17, 0xb6, [@remote, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x10}, @loopback]}, @timestamp={0x44, 0x24, 0x7a, 0x0, 0x1, [0xb8, 0x1ff, 0x3, 0xfffffff9, 0x7, 0x8001, 0x9, 0x6]}, @lsrr={0x83, 0x7, 0xc0, [@broadcast]}, @timestamp_addr={0x44, 0x4, 0xf5, 0x1, 0xf}]}}, {0x4e23, 0x4e24, 0x1018, 0x0, @wg=@data={0x4, 0x3, 0x8, "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"}}}}}}}, 0x0)
io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0)

117.119452ms ago: executing program 1 (id=557):
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x872d, {0x2, 0x0, 0x0, 0x7, 0x80002, 0x5, {0x6, 0x0, 0x0, 0x165569d0, 0x80000000, 0x5, 0x4000, 0x4, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0xffffffffffffffff)
syz_fuse_handle_req(r0, 0x0, 0xfffffffffffffe7e, 0x0)
creat(0x0, 0x6)
openat$ppp(0xffffffffffffff9c, &(0x7f0000002840), 0x480300, 0x0)
capset(&(0x7f0000000840)={0x20080522}, &(0x7f0000000880)={0x0, 0xdd1, 0xffffffb3, 0x0, 0x88fd, 0x10})
r1 = syz_open_dev$loop(&(0x7f0000000200), 0xd, 0x840)
ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
geteuid()
lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000400))
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043003b02e1f9d6cbd000016073a4315892eb270e177588368b709238ec7d39f05000000acf057a119821277150bfe33303f1f0a6080124428c8c3de6ba96bf61608ed8060cb8d89eb6a72b7f73e7eea20b41ba032176dddf9302470a17c08b1e8d38f11bda9be180f3f24b357c0f0d7be6eb00d4da6b611afdb89df2ffb978620a3bb9c8e73b832595a6e7bbcd63ee43cef69035fc09bede08f9220ac915b0cfe3ba78a69253cb2863cb9f46f3b907ce0723dcea9b7cfb8fd"], 0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0)
r2 = memfd_create(&(0x7f0000000b80)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;X\x14\x97\xabh\xd1/\x84\x8a\x91$GY\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2\x02\x00\x00\x00\x00\x00\x00\x006\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262<k\xa8\x88\x01\x00fhD\xe7\xb6\x17\x80\x95\xa8\x1e\t\xb01KF\xcb\x00\x1e\x7fE\x7f\x02\x00\x00\x00y<nGR\x94\x99\xb8\x89\x9b\x8f\xd5\xe6\x02\xb5C\xad\"u\xf4>\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x01\x00C\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}\x94\xfd\x00T.\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\x00\x00\x00\x00h\xaa\x15\x9a\xf7\x03\x00%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x9b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\x9c\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%>\x91\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\xb35\x00\xfb\xac8wAph\xb4\x9d\x14\xf6\xec+f\'\xa3\xb9\xaf\x87X\xec\x13\x9c\xc5\x84\xde\x1b\x11\xe8\\}\xf81\xe6U3\xf9~\xdfD[\x1a\x02\x1f\xd2\x1as-\x9c\x01\x86\xa7\xb8\xc5\xeeOg\x99j\xedu\xafO@\x8e\xf24w\xad\x130Z&\xcb\x81\xfcC\x1ag\vP', 0xb)
fchmod(r2, 0x32)
sched_setattr(0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcf\xcb\x92\xf1\x83\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x1bR\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='source', &(0x7f0000000240)='//\\/\x06\b\xa30\\\\\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas\x9d\x14\xe3\v\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7Gl\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x1bR\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o', 0x0)
listen(0xffffffffffffffff, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.time\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0)

0s ago: executing program 4 (id=558):
socket$can_raw(0x1d, 0x3, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
pipe(&(0x7f00000000c0))
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0)
getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d)
syz_usb_connect(0x0, 0x5f, 0x0, 0x0)
r4 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r4, &(0x7f0000000680)={&(0x7f00000001c0)={0x2, 0x1, @multicast2}, 0xfffffffffffffe5f, 0x0, 0x4d, 0x0, 0x0, 0x40001}, 0x8000)
setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0)
write$6lowpan_control(r5, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b)
r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000000340))
readv(r7, &(0x7f0000003400)=[{0x0}, {&(0x7f00000003c0)=""/4096, 0x1000}, {0x0, 0xffffffab}, {0x0}, {0x0}], 0x5)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x3, 0x4, 0x4, 0x6}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r8}, 0x48)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r9, 0x84, 0x20, &(0x7f0000000300), &(0x7f0000000380)=0x4)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)

kernel console output (not intermixed with test programs):

0 audit(1766759598.011:432): avc:  denied  { unmount } for  pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  100.949994][   T30] audit: type=1400 audit(1766759598.121:433): avc:  denied  { ioctl } for  pid=6570 comm="syz.1.144" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x643a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  101.011969][   T30] audit: type=1400 audit(1766759598.141:434): avc:  denied  { create } for  pid=6608 comm="syz.3.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  101.018322][   T24] usbhid 2-1:0.0: can't add hid device: -71
[  101.039550][   T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  101.084670][   T30] audit: type=1400 audit(1766759598.271:435): avc:  denied  { create } for  pid=6583 comm="syz.4.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  101.118279][   T24] usb 2-1: USB disconnect, device number 7
[  101.242126][ T6584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  101.253734][ T6584] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  101.308693][ T5889] usb 5-1: string descriptor 0 read error: -71
[  101.327029][ T5889] usbhid 5-1:0.0: can't add hid device: -71
[  101.346272][ T5889] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  101.440077][ T6626] Zero length message leads to an empty skb
[  101.792745][ T5889] usb 5-1: USB disconnect, device number 8
[  102.240100][ T5931] usb 3-1: new low-speed USB device number 11 using dummy_hcd
[  102.500015][ T5931] usb 3-1: device descriptor read/64, error -71
[  102.559550][ T6645] netlink: 'syz.1.158': attribute type 10 has an invalid length.
[  102.589523][ T6645] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  102.620040][   T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  102.770050][ T5931] usb 3-1: new low-speed USB device number 12 using dummy_hcd
[  102.814693][   T24] usb 5-1: device descriptor read/64, error -71
[  102.949993][ T5931] usb 3-1: device descriptor read/64, error -71
[  103.079983][   T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  103.088027][ T5931] usb usb3-port1: attempt power cycle
[  103.270151][   T24] usb 5-1: device descriptor read/64, error -71
[  103.380322][   T24] usb usb5-port1: attempt power cycle
[  103.480003][ T5931] usb 3-1: new low-speed USB device number 13 using dummy_hcd
[  103.500990][ T5931] usb 3-1: device descriptor read/8, error -71
[  103.730014][   T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  103.741406][ T5931] usb 3-1: new low-speed USB device number 14 using dummy_hcd
[  103.755410][ T6670] netlink: 76 bytes leftover after parsing attributes in process `syz.3.164'.
[  103.769528][   T24] usb 5-1: device descriptor read/8, error -71
[  103.780553][ T5931] usb 3-1: device descriptor read/8, error -71
[  103.892247][ T5931] usb usb3-port1: unable to enumerate USB device
[  104.011099][   T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  104.030474][   T24] usb 5-1: device descriptor read/8, error -71
[  104.132038][ T6691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  104.140794][   T24] usb usb5-port1: unable to enumerate USB device
[  104.188558][ T6691] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  104.341716][ T6698] netlink: zone id is out of range
[  104.346874][ T6698] netlink: zone id is out of range
[  104.352277][ T6698] netlink: zone id is out of range
[  104.357448][ T6698] netlink: zone id is out of range
[  104.363557][ T6698] netlink: zone id is out of range
[  104.369380][ T6698] netlink: zone id is out of range
[  104.375055][ T6698] netlink: zone id is out of range
[  104.380333][ T6698] netlink: zone id is out of range
[  104.385520][ T6698] netlink: zone id is out of range
[  104.390820][ T6698] netlink: zone id is out of range
[  105.267737][   T30] kauditd_printk_skb: 21 callbacks suppressed
[  105.267768][   T30] audit: type=1400 audit(1766759602.111:457): avc:  denied  { bind } for  pid=6703 comm="syz.0.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  105.321999][   T30] audit: type=1400 audit(1766759602.111:458): avc:  denied  { name_bind } for  pid=6703 comm="syz.0.172" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  105.366702][   T30] audit: type=1400 audit(1766759602.111:459): avc:  denied  { node_bind } for  pid=6703 comm="syz.0.172" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[  105.479876][   T30] audit: type=1400 audit(1766759602.111:460): avc:  denied  { write } for  pid=6703 comm="syz.0.172" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  105.968019][   T30] audit: type=1400 audit(1766759602.121:461): avc:  denied  { connect } for  pid=6703 comm="syz.0.172" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  106.044847][ T6717] netlink: 76 bytes leftover after parsing attributes in process `syz.1.176'.
[  106.097202][   T30] audit: type=1400 audit(1766759602.121:462): avc:  denied  { name_connect } for  pid=6703 comm="syz.0.172" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  106.101967][ T6720] NFSD: Failed to start, no listeners configured.
[  106.151362][   T30] audit: type=1400 audit(1766759602.751:463): avc:  denied  { read write } for  pid=6706 comm="syz.3.173" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  106.175805][   T30] audit: type=1400 audit(1766759602.761:464): avc:  denied  { open } for  pid=6706 comm="syz.3.173" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  106.200115][   T30] audit: type=1400 audit(1766759603.361:465): avc:  denied  { mounton } for  pid=6718 comm="syz.4.175" path="/32/file0" dev="tmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  106.239380][   T30] audit: type=1400 audit(1766759603.421:466): avc:  denied  { mount } for  pid=6718 comm="syz.4.175" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  106.411222][ T6734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  106.424626][ T6734] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  106.453042][ T6733] overlayfs: failed to resolve './file1': -2
[  106.850205][   T49] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  107.020100][   T49] usb 3-1: config index 0 descriptor too short (expected 23569, got 27)
[  107.020396][   T49] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  107.040502][   T49] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  107.136108][   T49] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  107.199985][   T49] usb 3-1: Manufacturer: syz
[  107.215028][   T49] usb 3-1: config 0 descriptor??
[  107.282372][   T49] rc_core: IR keymap rc-hauppauge not found
[  107.288285][   T49] Registered IR keymap rc-empty
[  107.346203][   T49] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  107.402142][ T6760] policy can only be matched on NF_INET_PRE_ROUTING
[  107.402160][ T6760] unable to load match
[  107.469963][ T5935] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  107.552602][ T6760] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(13)
[  107.559349][ T6760] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  107.567446][ T6760] vhci_hcd vhci_hcd.0: Device attached
[  107.692426][   T49] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input7
[  108.020124][ T5842] usb 35-1: new high-speed USB device number 2 using vhci_hcd
[  108.097097][    C1] igorplugusb 3-1:0.0: Error: urb status = -32
[  108.245759][ T6762] vhci_hcd: connection reset by peer
[  108.330940][ T5876] usb 3-1: USB disconnect, device number 15
[  108.370689][ T3509] vhci_hcd vhci_hcd.1: stop threads
[  108.407920][ T3509] vhci_hcd vhci_hcd.1: release socket
[  108.445638][ T3509] vhci_hcd vhci_hcd.1: disconnect device
[  108.580820][   T49] usb 5-1: new full-speed USB device number 13 using dummy_hcd
[  108.919584][   T49] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  109.040759][   T49] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  109.116911][   T49] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  109.203783][   T49] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.232868][ T5935] usb 1-1: config index 0 descriptor too short (expected 28277, got 36)
[  109.241448][ T5935] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  109.244334][   T49] usb 5-1: config 0 descriptor??
[  109.252037][ T5935] usb 1-1: config 0 has no interfaces?
[  109.262434][ T5935] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  109.272033][ T5935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.283548][ T5935] usb 1-1: config 0 descriptor??
[  109.564484][ T5935] usb 1-1: USB disconnect, device number 8
[  109.570988][ T6787] kAFS: unable to lookup cell ''
[  110.176795][ T6792] NFSD: Failed to start, no listeners configured.
[  110.233884][ T6787] netlink: 20 bytes leftover after parsing attributes in process `syz.3.190'.
[  110.555626][ T6802] netlink: 76 bytes leftover after parsing attributes in process `syz.2.195'.
[  110.694644][   T49] isku 0003:1E7D:319C.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.4-1/input0
[  110.718465][   T30] kauditd_printk_skb: 14 callbacks suppressed
[  110.718480][   T30] audit: type=1400 audit(1766759607.901:481): avc:  denied  { ioctl } for  pid=6800 comm="syz.0.194" path="socket:[11956]" dev="sockfs" ino=11956 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  110.922397][   T30] audit: type=1400 audit(1766759608.111:482): avc:  denied  { mount } for  pid=6812 comm="syz.0.196" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  111.006932][   T30] audit: type=1400 audit(1766759608.131:483): avc:  denied  { mounton } for  pid=6812 comm="syz.0.196" path="/44/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  111.125494][ T6772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  111.135457][   T30] audit: type=1400 audit(1766759608.131:484): avc:  denied  { mount } for  pid=6812 comm="syz.0.196" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  111.178512][ T6772] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  111.252733][   T30] audit: type=1400 audit(1766759608.131:485): avc:  denied  { read } for  pid=6812 comm="syz.0.196" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  111.312641][   T49] isku 0003:1E7D:319C.0005: couldn't init struct isku_device
[  111.342820][   T49] isku 0003:1E7D:319C.0005: couldn't install keyboard
[  111.359992][ T5876] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  111.361867][   T30] audit: type=1400 audit(1766759608.131:486): avc:  denied  { read } for  pid=6812 comm="syz.0.196" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  111.376629][   T49] isku 0003:1E7D:319C.0005: probe with driver isku failed with error -71
[  111.430290][   T30] audit: type=1400 audit(1766759608.131:487): avc:  denied  { open } for  pid=6812 comm="syz.0.196" path="/44/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  111.480167][   T49] usb 5-1: USB disconnect, device number 13
[  111.519982][ T5876] usb 1-1: device descriptor read/64, error -71
[  111.550310][   T30] audit: type=1400 audit(1766759608.131:488): avc:  denied  { read } for  pid=6812 comm="syz.0.196" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  111.644547][   T30] audit: type=1400 audit(1766759608.271:489): avc:  denied  { watch } for  pid=6812 comm="syz.0.196" path="/44/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  111.698344][   T30] audit: type=1400 audit(1766759608.271:490): avc:  denied  { watch_sb watch_reads } for  pid=6812 comm="syz.0.196" path="/44/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  111.802932][ T5876] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  112.050331][ T5876] usb 1-1: device descriptor read/64, error -71
[  112.190875][ T5876] usb usb1-port1: attempt power cycle
[  112.834103][ T6856] netlink: 20 bytes leftover after parsing attributes in process `syz.1.205'.
[  113.158453][    C0] vcan0: j1939_tp_rxtimer: 0xffff888035ef4000: rx timeout, send abort
[  113.167020][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888035ef4000: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session.
[  113.181440][    C0] vcan0: j1939_tp_rxtimer: 0xffff88802b17d800: rx timeout, send abort
[  113.233795][ T5842] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  113.240901][ T6859] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  113.732753][ T6875] netlink: 76 bytes leftover after parsing attributes in process `syz.3.209'.
[  113.759112][ T6864] NFSD: Failed to start, no listeners configured.
[  113.799988][ T5876] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  113.820627][ T5876] usb 1-1: device descriptor read/8, error -71
[  115.877866][   T30] kauditd_printk_skb: 32 callbacks suppressed
[  115.877882][   T30] audit: type=1400 audit(1766759613.061:523): avc:  denied  { name_bind } for  pid=6914 comm="syz.3.218" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  116.130115][ T5876] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  116.350029][ T5876] usb 2-1: Using ep0 maxpacket: 32
[  116.361866][ T5876] usb 2-1: config 0 interface 0 has no altsetting 0
[  116.389013][ T5876] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  116.576511][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.605125][ T5876] usb 2-1: Product: syz
[  116.609311][ T5876] usb 2-1: Manufacturer: syz
[  116.654362][ T5876] usb 2-1: SerialNumber: syz
[  116.680684][ T5876] usb 2-1: config 0 descriptor??
[  116.777514][ T6937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.221'.
[  116.786601][ T6937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.221'.
[  116.811323][ T6937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.221'.
[  116.820260][ T6937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.221'.
[  116.831318][ T3581] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  116.847645][ T3581] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  116.858210][ T3581] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  116.869783][ T3581] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  116.894083][ T6932] NFSD: Failed to start, no listeners configured.
[  117.376452][ T5876] gs_usb 2-1:0.0: Configuring for 2 interfaces
[  117.933032][ T5876] gs_usb 2-1:0.0: Disabling termination support for channel 0 (-EPROTO)
[  117.957374][ T5876] gs_usb 2-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO)
[  117.991609][ T5876] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71
[  118.036348][ T5876] usb 2-1: USB disconnect, device number 8
[  118.255341][ T6952] netlink: 830 bytes leftover after parsing attributes in process `syz.3.226'.
[  118.418981][ T6952] bond_slave_0: entered promiscuous mode
[  118.424787][ T6952] bond_slave_1: entered promiscuous mode
[  118.464801][   T30] audit: type=1400 audit(1766759615.651:524): avc:  denied  { getattr } for  pid=6953 comm="syz.4.227" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=12221 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  118.542495][ T6958] netlink: 'syz.3.226': attribute type 1 has an invalid length.
[  118.732702][ T6965] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  118.792225][ T6965] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[  118.835242][ T6965] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  118.844653][ T6965] UDF-fs: Scanning with blocksize 512 failed
[  118.934410][ T6965] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  118.982514][ T6965] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[  119.090028][   T24] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  119.101499][ T6965] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  119.109698][ T6965] UDF-fs: Scanning with blocksize 1024 failed
[  119.111551][    C1] vcan0: j1939_tp_rxtimer: 0xffff888059acc800: rx timeout, send abort
[  119.124363][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888059acc800: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session.
[  119.138819][    C1] vcan0: j1939_tp_rxtimer: 0xffff888059acd000: rx timeout, send abort
[  119.139273][ T6965] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  119.300941][ T6965] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[  119.310933][ T6965] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  119.410937][   T24] usb 5-1: Using ep0 maxpacket: 16
[  119.440083][ T6965] UDF-fs: Scanning with blocksize 2048 failed
[  119.497286][   T24] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  119.509037][   T24] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  119.522510][   T24] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  119.523427][ T6965] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  119.553272][   T24] usb 5-1: config 0 interface 0 has no altsetting 0
[  119.553948][ T6965] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[  119.569619][ T6965] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  119.577353][   T24] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  119.577412][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.600078][ T6965] UDF-fs: Scanning with blocksize 4096 failed
[  119.600176][ T5919] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  119.613957][ T6965] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1)
[  119.658186][   T24] usb 5-1: config 0 descriptor??
[  119.821634][ T5919] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86
[  120.118329][ T6983] netlink: 12 bytes leftover after parsing attributes in process `syz.0.233'.
[  120.665523][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  120.678050][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  120.681838][   T30] audit: type=1400 audit(1766759617.441:525): avc:  denied  { ioctl } for  pid=6976 comm="syz.2.234" path="socket:[12258]" dev="sockfs" ino=12258 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  120.910134][   T30] audit: type=1400 audit(1766759617.441:526): avc:  denied  { connect } for  pid=6976 comm="syz.2.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  120.950838][   T24] usbhid 5-1:0.0: can't add hid device: -71
[  121.036546][ T6991] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[  121.047771][ T6991] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[  121.064743][ T6991] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[  121.074722][ T6991] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[  121.092547][ T6991] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[  121.102409][ T6991] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[  121.113581][ T6991] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[  121.123388][ T6991] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[  121.132901][ T6991] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1)
[  121.272484][   T30] audit: type=1400 audit(1766759617.451:527): avc:  denied  { remount } for  pid=6976 comm="syz.2.234" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  121.292493][   T30] audit: type=1400 audit(1766759618.201:528): avc:  denied  { name_bind } for  pid=6988 comm="syz.3.236" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  121.335788][   T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  121.370560][ T5919] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24
[  121.382323][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.417296][ T5919] usb 2-1: Product: syz
[  121.444608][   T24] usb 5-1: USB disconnect, device number 14
[  121.451784][ T5919] usb 2-1: Manufacturer: syz
[  121.495922][ T5919] usb 2-1: SerialNumber: syz
[  121.539847][ T5919] usb 2-1: config 0 descriptor??
[  121.719986][   T49] usb 3-1: new low-speed USB device number 16 using dummy_hcd
[  121.786745][   T30] audit: type=1400 audit(1766759618.971:529): avc:  denied  { connect } for  pid=6995 comm="syz.4.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  121.934687][   T30] audit: type=1400 audit(1766759618.991:530): avc:  denied  { write } for  pid=6995 comm="syz.4.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  122.338141][   T49] usb 3-1: Invalid ep0 maxpacket: 64
[  122.449984][ T5927] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  122.509699][   T30] audit: type=1400 audit(1766759619.691:531): avc:  denied  { name_connect } for  pid=7012 comm="syz.4.243" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  122.530165][   T49] usb 3-1: new low-speed USB device number 17 using dummy_hcd
[  122.535867][ T7013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.243'.
[  122.546672][ T7013] netlink: 4 bytes leftover after parsing attributes in process `syz.4.243'.
[  122.577429][ T7013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.243'.
[  122.586286][ T6536] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  122.595842][   T30] audit: type=1400 audit(1766759619.721:532): avc:  denied  { shutdown } for  pid=7012 comm="syz.4.243" laddr=fe80::12 lport=41309 faddr=fe80::aa fport=65534 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  122.620409][ T6536] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  122.631265][ T6536] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  122.640761][ T6536] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  122.651812][ T7013] netlink: 4 bytes leftover after parsing attributes in process `syz.4.243'.
[  122.664754][ T5927] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  122.696865][ T5927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.739949][   T49] usb 3-1: Invalid ep0 maxpacket: 64
[  122.762049][ T5927] usb 1-1: config 0 descriptor??
[  122.769339][   T49] usb usb3-port1: attempt power cycle
[  122.816777][ T5927] cp210x 1-1:0.0: cp210x converter detected
[  123.039275][   T30] audit: type=1400 audit(1766759620.221:533): avc:  denied  { bind } for  pid=7004 comm="syz.0.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  123.540266][   T49] usb 3-1: new low-speed USB device number 18 using dummy_hcd
[  123.553316][ T5919] powermate: unknown product id 0240
[  123.568232][ T5919] powermate: Expected payload of 3--6 bytes, found 0 bytes!
[  123.582445][   T30] audit: type=1400 audit(1766759620.771:534): avc:  denied  { ioctl } for  pid=7004 comm="syz.0.242" path="socket:[12348]" dev="sockfs" ino=12348 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  123.586159][ T5919] powermate 2-1:0.0: probe with driver powermate failed with error -5
[  123.635783][   T49] usb 3-1: Invalid ep0 maxpacket: 64
[  123.663007][ T5927] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -32
[  123.786410][ T5919] usb 2-1: USB disconnect, device number 9
[  123.792668][ T5927] cp210x 1-1:0.0: querying part number failed
[  123.819942][   T49] usb 3-1: new low-speed USB device number 19 using dummy_hcd
[  123.835722][ T5927] usb 1-1: cp210x converter now attached to ttyUSB0
[  123.867080][   T30] audit: type=1400 audit(1766759621.051:535): avc:  denied  { ioctl } for  pid=7026 comm="syz.4.246" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0x6405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  123.870449][   T49] usb 3-1: Invalid ep0 maxpacket: 64
[  123.905484][   T49] usb usb3-port1: unable to enumerate USB device
[  124.170121][ T5889] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  124.189224][ T5919] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  124.287972][ T7042] overlayfs: conflicting options: metacopy=on,redirect_dir=follow
[  124.551467][ T5889] usb 5-1: config 220 has an invalid interface number: 76 but max is 2
[  124.559975][ T5919] usb 2-1: Using ep0 maxpacket: 16
[  124.567797][ T5889] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  124.571502][ T5919] usb 2-1: config 0 has an invalid interface number: 105 but max is 0
[  124.588487][ T5889] usb 5-1: config 220 has no interface number 2
[  124.600124][ T5889] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  124.610901][ T5919] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  124.627840][ T5919] usb 2-1: config 0 has no interface number 0
[  124.637042][ T5889] usb 5-1: config 220 interface 0 has no altsetting 0
[  124.637601][ T5919] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  124.674783][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.683457][ T5919] usb 2-1: Product: syz
[  124.687777][ T5919] usb 2-1: Manufacturer: syz
[  124.688870][ T5889] usb 5-1: config 220 interface 76 has no altsetting 0
[  124.693892][ T5919] usb 2-1: SerialNumber: syz
[  124.727137][ T5919] usb 2-1: config 0 descriptor??
[  124.728228][ T5889] usb 5-1: config 220 interface 1 has no altsetting 0
[  124.791765][ T5889] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  125.089270][ T5919] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046d:08f3)
[  125.090691][ T7052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  125.103519][ T5919] uvcvideo 2-1:0.105: No valid video chain found.
[  125.109983][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.137264][ T5889] usb 5-1: Product: syz
[  125.147393][ T5889] usb 5-1: Manufacturer: syz
[  125.153801][ T7052] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  125.161004][ T5919] usb 1-1: USB disconnect, device number 13
[  125.173854][ T5889] usb 5-1: SerialNumber: syz
[  125.178263][ T5919] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  125.207654][ T5919] cp210x 1-1:0.0: device disconnected
[  125.290939][   T49] usb 2-1: USB disconnect, device number 10
[  125.416336][ T5889] usb 5-1: selecting invalid altsetting 0
[  125.474966][ T5889] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  125.493695][ T5889] uvcvideo 5-1:220.0: No valid video chain found.
[  125.509963][ T5918] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[  125.521652][ T5889] usb 5-1: selecting invalid altsetting 0
[  125.535750][ T5889] usbtest 5-1:220.1: probe with driver usbtest failed with error -22
[  125.564097][ T5889] usb 5-1: USB disconnect, device number 15
[  125.697333][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  125.708537][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  125.719952][ T5918] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  125.748322][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.762913][ T5918] usb 4-1: config 0 descriptor??
[  125.774558][ T5918] hub 4-1:0.0: USB hub found
[  125.971074][   T30] kauditd_printk_skb: 14 callbacks suppressed
[  125.971088][   T30] audit: type=1400 audit(1766759623.161:550): avc:  denied  { read } for  pid=7062 comm="syz.1.257" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  126.022829][ T5918] hub 4-1:0.0: 2 ports detected
[  126.940767][ T5822] block nbd1: Receive control failed (result -32)
[  126.960918][ T7064] block nbd1: shutting down sockets
[  127.022619][   T30] audit: type=1400 audit(1766759623.811:551): avc:  denied  { bind } for  pid=7055 comm="syz.3.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  127.043998][   T30] audit: type=1400 audit(1766759623.831:552): avc:  denied  { node_bind } for  pid=7055 comm="syz.3.253" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  127.064005][   T30] audit: type=1400 audit(1766759623.831:553): avc:  denied  { write } for  pid=7055 comm="syz.3.253" laddr=::1 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  127.836444][ T5918] usb 4-1: USB disconnect, device number 8
[  127.947806][ T7091] warning: `syz.0.263' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  127.991111][ T5822] Bluetooth: hci5: command 0xfc11 tx timeout
[  127.997526][ T5818] Bluetooth: hci5: Entering manufacturer mode failed (-110)
[  127.998760][   T30] audit: type=1400 audit(1766759625.181:554): avc:  denied  { read write } for  pid=7089 comm="syz.0.263" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  128.240267][   T30] audit: type=1400 audit(1766759625.181:555): avc:  denied  { open } for  pid=7089 comm="syz.0.263" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  128.395610][   T30] audit: type=1400 audit(1766759625.581:556): avc:  denied  { write } for  pid=7096 comm="syz.0.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  128.642558][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880580eec00: rx timeout, send abort
[  128.653794][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880580eec00: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session.
[  128.673396][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880580ecc00: rx timeout, send abort
[  129.029681][   T30] audit: type=1400 audit(1766759625.581:557): avc:  denied  { read append } for  pid=7096 comm="syz.0.265" name="sg0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  129.181596][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880580ecc00: abort rx timeout. Force session deactivation
[  129.375470][   T30] audit: type=1400 audit(1766759625.581:558): avc:  denied  { open } for  pid=7096 comm="syz.0.265" path="/dev/sg0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  129.450766][   T30] audit: type=1400 audit(1766759625.581:559): avc:  denied  { ioctl } for  pid=7096 comm="syz.0.265" path="/dev/sg0" dev="devtmpfs" ino=738 ioctlcmd=0x227b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  130.324935][ T7113] netlink: 'syz.0.267': attribute type 11 has an invalid length.
[  130.540467][ T7117] syz.1.270 uses obsolete (PF_INET,SOCK_PACKET)
[  130.570861][ T7117] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993
[  130.742994][ T5876] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  131.005622][ T5876] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  131.488352][ T5876] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  131.517439][ T5876] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  131.540342][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.575132][ T7115] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  131.599704][ T5876] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  131.746374][ T7128] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  131.839995][ T5918] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  131.849018][   T30] kauditd_printk_skb: 3 callbacks suppressed
[  131.849031][   T30] audit: type=1400 audit(1766759629.031:563): avc:  denied  { connect } for  pid=7130 comm="syz.4.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  131.882499][ T5818] Bluetooth: hci4: link tx timeout
[  131.887739][ T5818] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  131.900748][   T30] audit: type=1400 audit(1766759629.061:564): avc:  denied  { write } for  pid=7130 comm="syz.4.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  132.005098][ T7132] netlink: 12 bytes leftover after parsing attributes in process `syz.3.269'.
[  132.084145][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  132.085348][ T7132] netlink: 12 bytes leftover after parsing attributes in process `syz.3.269'.
[  132.099973][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7
[  132.127107][ T5918] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  132.137496][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.148166][ T5918] usb 3-1: Product: syz
[  132.152850][ T5918] usb 3-1: Manufacturer: syz
[  132.157470][ T5918] usb 3-1: SerialNumber: syz
[  132.169853][ T5918] usb 3-1: config 0 descriptor??
[  132.256778][ T5876] usb 4-1: USB disconnect, device number 9
[  132.314063][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  132.320653][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  132.680005][ T5822] Bluetooth: hci4: link tx timeout
[  132.700680][ T5822] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  133.015521][ T7144] FAULT_INJECTION: forcing a failure.
[  133.015521][ T7144] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  133.017994][   T30] audit: type=1400 audit(1766759630.181:565): avc:  denied  { create } for  pid=7140 comm="syz.0.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  133.113270][   T30] audit: type=1400 audit(1766759630.181:566): avc:  denied  { setopt } for  pid=7140 comm="syz.0.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  133.115585][ T7144] CPU: 1 UID: 0 PID: 7144 Comm: syz.4.278 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  133.115608][ T7144] Tainted: [L]=SOFTLOCKUP
[  133.115614][ T7144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  133.115623][ T7144] Call Trace:
[  133.115628][ T7144]  <TASK>
[  133.115634][ T7144]  dump_stack_lvl+0x16c/0x1f0
[  133.115660][ T7144]  should_fail_ex+0x512/0x640
[  133.115687][ T7144]  copy_fpstate_to_sigframe+0x827/0xad0
[  133.115718][ T7144]  ? do_raw_spin_lock+0x12c/0x2b0
[  133.115743][ T7144]  ? __pfx_copy_fpstate_to_sigframe+0x10/0x10
[  133.115773][ T7144]  ? posixtimer_deliver_signal+0x1c7/0x6b0
[  133.115799][ T7144]  ? x86_task_fpu+0x5f/0x90
[  133.115823][ T7144]  get_sigframe+0x4a8/0x9c0
[  133.115848][ T7144]  ? __pfx_get_sigframe+0x10/0x10
[  133.115869][ T7144]  ? rcu_is_watching+0x12/0xc0
[  133.115884][ T7144]  ? _raw_spin_unlock_irq+0x23/0x50
[  133.115902][ T7144]  ? siginfo_layout+0x177/0x290
[  133.115926][ T7144]  x64_setup_rt_frame+0x129/0xcf0
[  133.115953][ T7144]  ? __pfx_x64_setup_rt_frame+0x10/0x10
[  133.115977][ T7144]  ? __mutex_unlock_slowpath+0x161/0x790
[  133.116001][ T7144]  arch_do_signal_or_restart+0x5da/0x7e0
[  133.116024][ T7144]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  133.116052][ T7144]  ? fput+0x70/0xf0
[  133.116071][ T7144]  exit_to_user_mode_loop+0x8c/0x540
[  133.116097][ T7144]  do_syscall_64+0x4ee/0xf80
[  133.116118][ T7144]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.116134][ T7144] RIP: 0033:0x7ff60978e1ff
[  133.116148][ T7144] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  133.116162][ T7144] RSP: 002b:00007ff60a6f4030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  133.116178][ T7144] RAX: 0000000000000001 RBX: 0000000000000003 RCX: 00007ff60978e1ff
[  133.116187][ T7144] RDX: 0000000000000001 RSI: 00007ff60a6f4090 RDI: 0000000000000003
[  133.116197][ T7144] RBP: 00007ff60a6f4090 R08: 0000000000000000 R09: 00007ff60a6f3df7
[  133.116207][ T7144] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  133.116216][ T7144] R13: 00007ff6099e6038 R14: 00007ff6099e5fa0 R15: 00007fffd40831f8
[  133.116239][ T7144]  </TASK>
[  133.647111][ T7149] netlink: 32 bytes leftover after parsing attributes in process `syz.4.279'.
[  134.159132][ T5822] Bluetooth: hci4: command 0x0406 tx timeout
[  134.242158][   T30] audit: type=1400 audit(1766759630.181:567): avc:  denied  { getopt } for  pid=7140 comm="syz.0.277" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  134.333226][   T30] audit: type=1400 audit(1766759631.491:568): avc:  denied  { create } for  pid=7150 comm="syz.2.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  134.392314][ T5918] usb 3-1: USB disconnect, device number 20
[  134.402457][   T30] audit: type=1400 audit(1766759631.581:569): avc:  denied  { create } for  pid=7155 comm="syz.1.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  134.429983][ T5927] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  134.655389][   T30] audit: type=1400 audit(1766759631.841:570): avc:  denied  { read } for  pid=7163 comm="syz.3.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  134.732576][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  134.786766][ T5927] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  134.817170][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.842094][ T5927] usb 5-1: config 0 descriptor??
[  135.064583][ T7172] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.285'.
[  135.199848][ T5918] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  135.413701][ T5918] usb 3-1: Using ep0 maxpacket: 8
[  135.455325][ T5918] usb 3-1: config 0 has an invalid interface number: 31 but max is 0
[  135.527539][ T5918] usb 3-1: config 0 has no interface number 0
[  135.567103][ T5918] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  135.595018][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.625827][ T5918] usb 3-1: Product: syz
[  135.636284][ T5918] usb 3-1: Manufacturer: syz
[  135.645310][ T5918] usb 3-1: SerialNumber: syz
[  135.657760][ T5918] usb 3-1: config 0 descriptor??
[  135.903070][ T5918] uvcvideo 3-1:0.31: Found Unit with invalid ID 0
[  135.951898][ T5918] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[  135.987361][ T5918] uvcvideo 3-1:0.31: No valid video chain found.
[  136.108152][   T10] usb 3-1: USB disconnect, device number 21
[  136.167526][   T30] audit: type=1400 audit(1766759633.351:571): avc:  denied  { ioctl } for  pid=7194 comm="syz.0.290" path="socket:[12663]" dev="sockfs" ino=12663 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  136.430272][ T5927] usbhid 5-1:0.0: can't add hid device: -71
[  136.496708][ T5927] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  136.512564][ T5927] usb 5-1: USB disconnect, device number 16
[  137.012235][ T7218] process 'syz.2.294' launched './file0' with NULL argv: empty string added
[  137.479339][   T30] audit: type=1400 audit(1766759634.201:572): avc:  denied  { execute } for  pid=7213 comm="syz.2.294" name="file0" dev="tmpfs" ino=325 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  137.512945][ T7217] Driver unsupported XDP return value 0 on prog  (id 77) dev N/A, expect packet loss!
[  137.564058][   T30] audit: type=1400 audit(1766759634.211:573): avc:  denied  { execute_no_trans } for  pid=7213 comm="syz.2.294" path="/59/file0" dev="tmpfs" ino=325 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  137.865673][   T30] audit: type=1326 audit(1766759634.901:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7203 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f593598f749 code=0x7ffc0000
[  138.057864][   T30] audit: type=1326 audit(1766759634.901:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7203 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f593598f749 code=0x7ffc0000
[  138.129593][   T30] audit: type=1326 audit(1766759634.901:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7203 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f593598f749 code=0x7ffc0000
[  138.626080][   T30] audit: type=1400 audit(1766759635.011:577): avc:  denied  { write } for  pid=7203 comm="syz.1.292" name="sg0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  138.669359][   T30] audit: type=1326 audit(1766759635.041:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7203 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f593598f749 code=0x7ffc0000
[  138.747108][   T30] audit: type=1326 audit(1766759635.041:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7203 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f593598f749 code=0x7ffc0000
[  139.000074][   T30] audit: type=1400 audit(1766759636.181:580): avc:  denied  { bind } for  pid=7237 comm="syz.4.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  139.075567][   T30] audit: type=1400 audit(1766759636.261:581): avc:  denied  { write } for  pid=7237 comm="syz.4.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  139.101806][ T7243] NFSD: Failed to start, no listeners configured.
[  139.216976][ T7249] qnx4: no qnx4 filesystem (no root dir).
[  139.231360][ T7247] kAFS: No cell specified
[  139.240415][ T7247] overlayfs: overlapping lowerdir path
[  139.383798][ T7257] netlink: 28 bytes leftover after parsing attributes in process `syz.4.302'.
[  139.412523][ T7257] netlink: 28 bytes leftover after parsing attributes in process `syz.4.302'.
[  139.728207][ T7263] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma?
[  139.975362][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880596af800: rx timeout, send abort
[  139.983756][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880596af800: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session.
[  139.998047][    C0] vcan0: j1939_tp_rxtimer: 0xffff888059696000: rx timeout, send abort
[  140.140043][   T49] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  140.290118][   T49] usb 3-1: device descriptor read/64, error -71
[  140.550326][   T49] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  140.700047][   T49] usb 3-1: device descriptor read/64, error -71
[  140.810663][   T49] usb usb3-port1: attempt power cycle
[  140.961024][ T7288] : entered promiscuous mode
[  141.152012][   T49] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  141.180986][   T49] usb 3-1: device descriptor read/8, error -71
[  141.420120][   T49] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  141.440894][   T49] usb 3-1: device descriptor read/8, error -71
[  141.487765][ T7296] NFSD: Failed to start, no listeners configured.
[  141.550289][   T49] usb usb3-port1: unable to enumerate USB device
[  141.602745][ T5948] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  141.751658][ T5948] usb 4-1: device descriptor read/64, error -71
[  141.903704][ T7305] overlayfs: missing 'lowerdir'
[  142.313268][ T5948] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[  142.329565][ T7305] futex_wake_op: syz.0.317 tries to shift op by -1; fix this program
[  142.460184][ T5948] usb 4-1: device descriptor read/64, error -71
[  142.504204][ T7315] sp0: Synchronizing with TNC
[  142.509684][   T30] kauditd_printk_skb: 14 callbacks suppressed
[  142.509696][   T30] audit: type=1400 audit(1766759639.691:596): avc:  denied  { read } for  pid=5479 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[  142.539559][   T30] audit: type=1400 audit(1766759639.701:597): avc:  denied  { search } for  pid=5479 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  142.561822][   T30] audit: type=1400 audit(1766759639.701:598): avc:  denied  { search } for  pid=5479 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  142.580529][ T5948] usb usb4-port1: attempt power cycle
[  142.583738][   T30] audit: type=1400 audit(1766759639.701:599): avc:  denied  { search } for  pid=5479 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  142.699974][   T30] audit: type=1400 audit(1766759639.701:600): avc:  denied  { read } for  pid=5479 comm="dhcpcd" name="n102" dev="tmpfs" ino=3187 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  142.713931][ T5876] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  142.729599][   T30] audit: type=1400 audit(1766759639.701:601): avc:  denied  { open } for  pid=5479 comm="dhcpcd" path="/run/udev/data/n102" dev="tmpfs" ino=3187 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  142.729648][   T30] audit: type=1400 audit(1766759639.701:602): avc:  denied  { getattr } for  pid=5479 comm="dhcpcd" path="/run/udev/data/n102" dev="tmpfs" ino=3187 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  142.949993][ T5948] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[  142.970388][ T5948] usb 4-1: device descriptor read/8, error -71
[  143.019939][ T5876] usb 1-1: Using ep0 maxpacket: 32
[  143.026118][ T5876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  143.037114][ T5876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  143.046914][ T5876] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  143.059980][ T5889] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  143.060182][ T5876] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  143.077708][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.088401][ T5876] usb 1-1: config 0 descriptor??
[  143.120040][ T5919] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  143.209956][ T5889] usb 5-1: Using ep0 maxpacket: 32
[  143.216266][ T5889] usb 5-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=b2.ac
[  143.225626][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.229932][ T5948] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[  143.238192][ T5889] usb 5-1: config 0 descriptor??
[  143.251507][ T5889] gl620a 5-1:0.0: probe with driver gl620a failed with error -22
[  143.265577][ T5948] usb 4-1: device descriptor read/8, error -71
[  143.280699][ T5919] usb 2-1: Using ep0 maxpacket: 8
[  143.287097][ T5919] usb 2-1: config 0 interface 0 has no altsetting 0
[  143.293747][ T5919] usb 2-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00
[  143.303878][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.313699][ T5919] usb 2-1: config 0 descriptor??
[  143.380867][ T5948] usb usb4-port1: unable to enumerate USB device
[  143.451253][ T5889] usb 5-1: USB disconnect, device number 17
[  143.690402][ T7324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  143.704087][ T7324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  143.832225][ T5876] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0006/input/input9
[  143.843755][ T7313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  143.860681][ T7313] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  143.871411][ T5919] usbhid 2-1:0.0: can't add hid device: -71
[  143.878440][ T5919] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  143.897968][ T5919] usb 2-1: USB disconnect, device number 11
[  143.925075][ T5876] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0006/input/input10
[  143.966428][ T5876] kye 0003:0458:5011.0006: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input0
[  144.020098][ T5876] usb 1-1: USB disconnect, device number 14
[  144.049658][ T7325] fido_id[7325]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[  144.185810][    C0] vcan0: j1939_tp_rxtimer: 0xffff888077b41000: rx timeout, send abort
[  144.194461][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888077b41000: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session.
[  144.208970][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880580ee400: rx timeout, send abort
[  144.232296][ T7329] netlink: 76 bytes leftover after parsing attributes in process `syz.4.324'.
[  144.645580][ T7343] NFSD: Failed to start, no listeners configured.
[  144.734623][   T30] audit: type=1400 audit(1766759641.921:603): avc:  denied  { create } for  pid=7331 comm="syz.2.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  144.790702][   T30] audit: type=1400 audit(1766759641.951:604): avc:  denied  { setopt } for  pid=7331 comm="syz.2.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  144.841148][ T7362] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.330'.
[  144.869631][   T30] audit: type=1400 audit(1766759641.951:605): avc:  denied  { bind } for  pid=7331 comm="syz.2.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  146.703113][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880588c1400: rx timeout, send abort
[  146.711545][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880588c1400: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session.
[  146.725887][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880588c1800: rx timeout, send abort
[  147.016754][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880597d8400: rx timeout, send abort
[  147.025168][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880597d8400: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session.
[  147.039999][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880597d8800: rx timeout, send abort
[  147.216756][ T7425] netlink: 76 bytes leftover after parsing attributes in process `syz.3.340'.
[  147.261193][ T7426] devpts: Bad value for 'max'
[  147.455500][ T7420] netlink: 'syz.4.338': attribute type 29 has an invalid length.
[  147.596473][   T30] kauditd_printk_skb: 11 callbacks suppressed
[  147.596488][   T30] audit: type=1400 audit(1766759644.781:617): avc:  denied  { setattr } for  pid=7433 comm="syz.2.341" name="PPPOL2TP" dev="sockfs" ino=14259 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  148.141589][   T30] audit: type=1400 audit(1766759645.331:618): avc:  denied  { append } for  pid=7455 comm="syz.3.346" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  148.165586][ T7458] loop6: detected capacity change from 0 to 524288000
[  148.516594][ T7468] xt_l2tp: invalid flags combination: 4
[  149.450852][ T5918] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  149.474797][   T30] audit: type=1400 audit(1766759646.661:619): avc:  denied  { create } for  pid=7486 comm="syz.1.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  149.498259][ T7494] netlink: 96 bytes leftover after parsing attributes in process `syz.1.352'.
[  149.601442][   T30] audit: type=1400 audit(1766759646.771:620): avc:  denied  { read } for  pid=7486 comm="syz.1.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  149.641037][ T5918] usb 3-1: too many configurations: 72, using maximum allowed: 8
[  149.658691][ T5918] usb 3-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db
[  149.668799][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.686336][   T30] audit: type=1400 audit(1766759646.871:621): avc:  denied  { execute } for  pid=7499 comm="syz.4.355" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=14471 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  149.688042][ T5918] usb 3-1: config 0 descriptor??
[  149.810485][ T5889] usb 4-1: new full-speed USB device number 14 using dummy_hcd
[  149.890682][ T7504] netlink: 76 bytes leftover after parsing attributes in process `syz.4.357'.
[  149.974037][ T5889] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  149.996596][ T5889] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64
[  150.019614][ T5889] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  150.040979][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.068742][ T7496] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  150.083690][ T7496] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  150.097292][ T5889] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  150.154686][ T5918] usb 3-1: USB disconnect, device number 26
[  150.309446][ T5889] usb 4-1: USB disconnect, device number 14
[  150.367535][ T7521] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nbd4": -EINTR
[  150.600054][ T5918] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  150.619978][ T5876] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  150.672063][ T7534] misc userio: No port type given on /dev/userio
[  150.678525][ T7535] misc userio: No port type given on /dev/userio
[  150.720390][   T30] audit: type=1400 audit(1766759647.911:622): avc:  denied  { shutdown } for  pid=7532 comm="syz.0.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  150.770003][ T5889] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  150.801998][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  150.812941][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  150.823485][ T5918] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  150.829928][ T5876] usb 2-1: Using ep0 maxpacket: 32
[  150.832553][ T5918] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  150.839585][ T5876] usb 2-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config
[  150.856247][ T5876] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  150.865827][ T5918] usb 3-1: Manufacturer: syz
[  150.868145][ T5918] usb 3-1: config 0 descriptor??
[  150.880442][ T5876] usb 2-1: New USB device found, idVendor=2770, idProduct=9051, bcdDevice=4c.3e
[  150.889549][ T5876] usb 2-1: New USB device strings: Mfr=96, Product=129, SerialNumber=249
[  150.898143][ T5876] usb 2-1: Product: syz
[  150.903149][ T5876] usb 2-1: Manufacturer: syz
[  150.907737][ T5876] usb 2-1: SerialNumber: syz
[  150.914193][ T5876] usb 2-1: config 0 descriptor??
[  150.939964][ T5889] usb 5-1: Using ep0 maxpacket: 32
[  150.946284][ T5889] usb 5-1: config 8 has an invalid interface number: 203 but max is 0
[  150.954839][ T5889] usb 5-1: config 8 has no interface number 0
[  150.961943][ T5889] usb 5-1: config 8 interface 203 altsetting 1 has an endpoint descriptor with address 0x93, changing to 0x83
[  150.977399][ T5889] usb 5-1: config 8 interface 203 altsetting 1 bulk endpoint 0x83 has invalid maxpacket 1024
[  150.979202][   T30] audit: type=1400 audit(1766759648.161:623): avc:  denied  { watch watch_reads } for  pid=7536 comm="syz.0.364" path="/77/file0" dev="tmpfs" ino=435 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  150.987639][ T5889] usb 5-1: config 8 interface 203 altsetting 1 endpoint 0xB has invalid wMaxPacketSize 0
[  151.020943][ T5889] usb 5-1: config 8 interface 203 altsetting 1 bulk endpoint 0xB has invalid maxpacket 0
[  151.030810][ T5889] usb 5-1: config 8 interface 203 has no altsetting 0
[  151.039199][ T5889] usb 5-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=eb.7a
[  151.048442][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.056459][ T5889] usb 5-1: Product: syz
[  151.060632][ T5889] usb 5-1: Manufacturer: syz
[  151.065412][ T5889] usb 5-1: SerialNumber: syz
[  151.076765][ T7529] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  151.316795][ T5876] usb 2-1: USB disconnect, device number 12
[  151.433679][ T5918] usbhid 3-1:0.0: can't add hid device: -71
[  151.440852][ T5889] port100 5-1:8.203: NFC: Could not get supported command types
[  151.450378][ T5918] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  151.468909][ T5918] usb 3-1: USB disconnect, device number 27
[  151.485157][ T5889] usb 5-1: USB disconnect, device number 18
[  151.696416][ T7545] team0 (unregistering): Port device team_slave_0 removed
[  151.705774][ T7545] team0 (unregistering): Port device team_slave_1 removed
[  151.746476][   T30] audit: type=1400 audit(1766759648.931:624): avc:  denied  { read } for  pid=7544 comm="syz.0.366" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  151.771267][   T30] audit: type=1400 audit(1766759648.961:625): avc:  denied  { open } for  pid=7544 comm="syz.0.366" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  151.800510][   T30] audit: type=1400 audit(1766759648.981:626): avc:  denied  { ioctl } for  pid=7544 comm="syz.0.366" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  151.849956][   T49] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  152.071619][   T49] usb 4-1: Using ep0 maxpacket: 16
[  152.091317][   T49] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 101, changing to 7
[  152.107308][   T49] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 25714, setting to 1024
[  152.121293][   T49] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  152.152462][   T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.180012][   T49] usb 4-1: Product: syz
[  152.577714][   T49] usb 4-1: Manufacturer: syz
[  152.601214][   T49] usb 4-1: SerialNumber: syz
[  152.608900][   T49] usb 4-1: config 0 descriptor??
[  152.617059][   T49] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  152.626500][   T49] em28xx 4-1:0.0: DVB interface 0 found: isoc
[  152.704792][ T7558] netlink: 76 bytes leftover after parsing attributes in process `syz.1.370'.
[  152.927732][ T7568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  153.040496][   T30] audit: type=1400 audit(1766759650.171:627): avc:  denied  { getopt } for  pid=7553 comm="syz.2.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  153.060551][ T7568] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  153.085540][ T7568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  153.096669][   T30] audit: type=1400 audit(1766759650.171:628): avc:  denied  { ioctl } for  pid=7553 comm="syz.2.368" path="/dev/input/event2" dev="devtmpfs" ino=922 ioctlcmd=0x4580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  153.136640][ T7568] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  153.180271][ T5918] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  153.275706][   T49] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[  153.341991][ T7577] netlink: 'syz.4.372': attribute type 10 has an invalid length.
[  153.381026][   T30] audit: type=1400 audit(1766759650.521:629): avc:  denied  { write } for  pid=7573 comm="syz.4.372" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  153.409331][   T30] audit: type=1400 audit(1766759650.521:630): avc:  denied  { ioctl } for  pid=7573 comm="syz.4.372" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  153.453598][ T7577] 8021q: adding VLAN 0 to HW filter on device team0
[  153.464230][ T7577] bond0: (slave team0): Enslaving as an active interface with an up link
[  153.489029][ T7579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.373'.
[  153.610477][   T30] audit: type=1400 audit(1766759650.651:631): avc:  denied  { create } for  pid=7573 comm="syz.4.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  153.651706][   T30] audit: type=1400 audit(1766759650.671:632): avc:  denied  { setopt } for  pid=7573 comm="syz.4.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  154.026741][   T49] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  154.041208][   T49] em28xx 4-1:0.0: board has no eeprom
[  154.078308][ T7573] delete_channel: no stack
[  154.171584][   T49] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  154.185754][   T49] em28xx 4-1:0.0: dvb set to isoc mode.
[  154.197867][ T5876] em28xx 4-1:0.0: Binding DVB extension
[  154.215447][   T49] usb 4-1: USB disconnect, device number 15
[  154.252158][   T49] em28xx 4-1:0.0: Disconnecting em28xx
[  154.366574][ T5876] em28xx 4-1:0.0: Registering input extension
[  154.375486][   T49] em28xx 4-1:0.0: Closing input extension
[  154.403707][   T49] em28xx 4-1:0.0: Freeing device
[  154.488113][   T30] audit: type=1400 audit(1766759651.671:633): avc:  denied  { connect } for  pid=7596 comm="syz.4.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  154.746596][ T7599] syz.3.378: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  154.761562][ T7599] CPU: 0 UID: 0 PID: 7599 Comm: syz.3.378 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  154.761581][ T7599] Tainted: [L]=SOFTLOCKUP
[  154.761585][ T7599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  154.761592][ T7599] Call Trace:
[  154.761596][ T7599]  <TASK>
[  154.761601][ T7599]  dump_stack_lvl+0x16c/0x1f0
[  154.761621][ T7599]  warn_alloc+0x248/0x3a0
[  154.761635][ T7599]  ? __pfx_warn_alloc+0x10/0x10
[  154.761646][ T7599]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  154.761660][ T7599]  ? lockdep_hardirqs_on+0x7c/0x110
[  154.761676][ T7599]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  154.761694][ T7599]  ? kasan_save_stack+0x42/0x60
[  154.761707][ T7599]  ? kasan_save_stack+0x33/0x60
[  154.761719][ T7599]  ? kasan_save_track+0x14/0x30
[  154.761733][ T7599]  ? xskq_create+0xfb/0x1d0
[  154.761750][ T7599]  __vmalloc_node_range_noprof+0x12c2/0x16b0
[  154.761771][ T7599]  ? xskq_create+0xfb/0x1d0
[  154.761785][ T7599]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  154.761808][ T7599]  ? xskq_create+0xfb/0x1d0
[  154.761819][ T7599]  vmalloc_user_noprof+0x9e/0xe0
[  154.761836][ T7599]  ? xskq_create+0xfb/0x1d0
[  154.761847][ T7599]  xskq_create+0xfb/0x1d0
[  154.761860][ T7599]  xsk_setsockopt+0x932/0xc00
[  154.761879][ T7599]  ? __pfx_xsk_setsockopt+0x10/0x10
[  154.761903][ T7599]  ? selinux_socket_setsockopt+0x6a/0x80
[  154.761917][ T7599]  ? __pfx_xsk_setsockopt+0x10/0x10
[  154.761935][ T7599]  do_sock_setsockopt+0xf3/0x1d0
[  154.761951][ T7599]  __sys_setsockopt+0x1a0/0x230
[  154.761964][ T7599]  __x64_sys_setsockopt+0xbd/0x160
[  154.761974][ T7599]  ? do_syscall_64+0x91/0xf80
[  154.761988][ T7599]  ? lockdep_hardirqs_on+0x7c/0x110
[  154.762001][ T7599]  do_syscall_64+0xcd/0xf80
[  154.762016][ T7599]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.762028][ T7599] RIP: 0033:0x7f9900d8f749
[  154.762037][ T7599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  154.762048][ T7599] RSP: 002b:00007f9901d11038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  154.762058][ T7599] RAX: ffffffffffffffda RBX: 00007f9900fe5fa0 RCX: 00007f9900d8f749
[  154.762065][ T7599] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000e
[  154.762072][ T7599] RBP: 00007f9900e13f91 R08: 0000000000000004 R09: 0000000000000000
[  154.762078][ T7599] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  154.762085][ T7599] R13: 00007f9900fe6038 R14: 00007f9900fe5fa0 R15: 00007ffc7dd3b9a8
[  154.762099][ T7599]  </TASK>
[  154.762103][ T7599] Mem-Info:
[  155.012276][ T7599] active_anon:29709 inactive_anon:0 isolated_anon:0
[  155.012276][ T7599]  active_file:19399 inactive_file:40662 isolated_file:0
[  155.012276][ T7599]  unevictable:768 dirty:218 writeback:0
[  155.012276][ T7599]  slab_reclaimable:11936 slab_unreclaimable:97573
[  155.012276][ T7599]  mapped:34462 shmem:21116 pagetables:1266
[  155.012276][ T7599]  sec_pagetables:0 bounce:0
[  155.012276][ T7599]  kernel_misc_reclaimable:0
[  155.012276][ T7599]  free:1277052 free_pcp:14137 free_cma:0
[  155.057946][ T7599] Node 0 active_anon:118836kB inactive_anon:0kB active_file:77596kB inactive_file:162444kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:137848kB dirty:868kB writeback:0kB shmem:82928kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12872kB pagetables:4920kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  155.089862][ T7599] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  155.119693][ T7599] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  155.149507][ T7599] lowmem_reserve[]: 0 2481 2482 2482 2482
[  155.155234][ T7599] Node 0 DMA32 free:1209248kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0KB free_highatomic:0KB active_anon:118836kB inactive_anon:0kB active_file:77596kB inactive_file:162444kB unevictable:1536kB writepending:868kB zspages:0kB present:3129332kB managed:2540848kB mlocked:0kB bounce:0kB free_pcp:37736kB local_pcp:17664kB free_cma:0kB
[  155.188721][ T7599] lowmem_reserve[]: 0 0 1 1 1
[  155.193419][ T7599] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  155.222952][ T7599] lowmem_reserve[]: 0 0 0 0 0
[  155.227621][ T7599] Node 1 Normal free:3883600kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18808kB local_pcp:10432kB free_cma:0kB
[  155.259839][ T7599] lowmem_reserve[]: 0 0 0 0 0
[  155.264677][ T7599] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  155.277293][ T7599] Node 0 DMA32: 1170*4kB (UE) 862*8kB (UE) 300*16kB (U) 257*32kB (UM) 244*64kB (UME) 156*128kB (UME) 104*256kB (M) 18*512kB (UM) 13*1024kB (ME) 11*2048kB (UME) 263*4096kB (UM) = 1209112kB
[  155.295811][ T7599] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  155.307223][ T7599] Node 1 Normal: 202*4kB (UME) 45*8kB (UME) 48*16kB (UE) 95*32kB (UE) 22*64kB (UME) 7*128kB (UE) 4*256kB (UM) 3*512kB (ME) 3*1024kB (UME) 2*2048kB (UE) 944*4096kB (M) = 3883632kB
[  155.324971][ T7599] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  155.334506][ T7599] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  155.343837][ T7599] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  155.353416][ T7599] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  155.362702][ T7599] 81173 total pagecache pages
[  155.367599][ T7599] 0 pages in swap cache
[  155.371753][ T7599] Free swap  = 124996kB
[  155.375875][ T7599] Total swap = 124996kB
[  155.380013][ T7599] 2097051 pages RAM
[  155.383789][ T7599] 0 pages HighMem/MovableOnly
[  155.388427][ T7599] 429813 pages reserved
[  155.392564][ T7599] 0 pages cma reserved
[  155.401948][   T30] audit: type=1400 audit(1766759651.931:634): avc:  denied  { create } for  pid=7598 comm="syz.3.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  155.446331][    C0] vcan0: j1939_tp_rxtimer: 0xffff888031785000: rx timeout, send abort
[  155.446537][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888031785000: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session.
[  155.446930][    C0] vcan0: j1939_tp_rxtimer: 0xffff888031787c00: rx timeout, send abort
[  155.522845][ T7615] netlink: 76 bytes leftover after parsing attributes in process `syz.4.383'.
[  155.527793][   T30] audit: type=1400 audit(1766759651.931:635): avc:  denied  { setopt } for  pid=7598 comm="syz.3.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  156.040937][   T30] audit: type=1326 audit(1766759653.071:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7624 comm="syz.0.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64c458f749 code=0x7ffc0000
[  156.053295][ T7637] bridge1: entered promiscuous mode
[  156.150642][ T5918] usb 4-1: new full-speed USB device number 16 using dummy_hcd
[  156.270784][ T7637] bridge1: entered allmulticast mode
[  156.294703][ T7637] team0: Port device bridge1 added
[  156.418516][ T7642] bridge0: port 3(team0) entered blocking state
[  156.426825][ T7642] bridge0: port 3(team0) entered disabled state
[  156.437300][ T7642] team0: entered allmulticast mode
[  156.451785][ T7642] team_slave_0: entered allmulticast mode
[  156.452125][ T5918] usb 4-1: config 1 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  156.475912][ T7642] team_slave_1: entered allmulticast mode
[  156.487027][ T5918] usb 4-1: config 1 interface 1 has no altsetting 0
[  156.496743][ T7642] team0: entered promiscuous mode
[  156.569978][ T7642] team_slave_0: entered promiscuous mode
[  156.584788][ T7642] team_slave_1: entered promiscuous mode
[  156.603022][ T5918] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  156.612291][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.620848][ T5918] usb 4-1: Product: syz
[  156.621736][ T7642] bridge0: port 3(team0) entered blocking state
[  156.625189][ T5918] usb 4-1: Manufacturer: syz
[  156.631570][ T7642] bridge0: port 3(team0) entered forwarding state
[  156.639423][ T5918] usb 4-1: SerialNumber: syz
[  157.300344][ T5876] usb 3-1: new full-speed USB device number 28 using dummy_hcd
[  157.487000][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  157.555970][ T5876] usb 3-1: New USB device found, idVendor=04f2, idProduct=1125, bcdDevice= 0.00
[  157.576634][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.611421][ T5876] usb 3-1: config 0 descriptor??
[  158.185006][ T5876] asus 0003:04F2:1125.0007: unknown main item tag 0x0
[  158.194154][ T5876] asus 0003:04F2:1125.0007: unknown main item tag 0x0
[  158.367163][ T5876] asus 0003:04F2:1125.0007: unknown main item tag 0x0
[  158.427813][ T7672] netlink: 12 bytes leftover after parsing attributes in process `syz.4.396'.
[  158.913642][ T5876] asus 0003:04F2:1125.0007: unknown main item tag 0x0
[  158.916966][ T5918] usb 4-1: 2:1 : invalid UAC_AS_GENERAL desc
[  158.921775][ T5876] asus 0003:04F2:1125.0007: unknown main item tag 0x0
[  158.974123][   T30] kauditd_printk_skb: 49 callbacks suppressed
[  158.974139][   T30] audit: type=1400 audit(1766759656.161:686): avc:  denied  { accept } for  pid=7671 comm="syz.1.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  159.002493][ T5876] asus 0003:04F2:1125.0007: unknown main item tag 0x0
[  159.029852][ T5876] asus 0003:04F2:1125.0007: unknown main item tag 0x0
[  159.142468][ T5918] usb 4-1: USB disconnect, device number 16
[  159.636176][ T5876] asus 0003:04F2:1125.0007: hidraw0: USB HID v1.ff Device [HID 04f2:1125] on usb-dummy_hcd.2-1/input0
[  159.673996][ T5876] asus 0003:04F2:1125.0007: Asus input not registered
[  159.701434][ T5876] asus 0003:04F2:1125.0007: probe with driver asus failed with error -12
[  159.757813][ T5876] usb 3-1: USB disconnect, device number 28
[  159.759682][ T7684] netlink: 76 bytes leftover after parsing attributes in process `syz.4.399'.
[  159.864162][ T7682] fido_id[7682]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  160.115874][ T7702] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long
[  160.322800][ T5918] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  160.462970][ T5918] usb 2-1: device descriptor read/64, error -71
[  160.500006][ T5927] usb 4-1: new full-speed USB device number 17 using dummy_hcd
[  160.540119][   T10] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  160.600701][ T7713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.406'.
[  160.750172][ T5918] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  160.810108][   T10] usb 3-1: Using ep0 maxpacket: 16
[  160.825366][   T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11
[  160.837214][   T10] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  160.852116][   T10] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  160.883300][   T10] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  160.893522][   T10] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  160.904553][   T10] usb 3-1: config 1 interface 0 has no altsetting 0
[  160.911361][ T5918] usb 2-1: device descriptor read/64, error -71
[  160.919068][   T10] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  160.928452][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.941205][   T10] ums-sddr09 3-1:1.0: USB Mass Storage device detected
[  160.941727][ T5927] usb 4-1: config 8 has an invalid interface number: 177 but max is 0
[  161.024897][ T5927] usb 4-1: config 8 has no interface number 0
[  161.030705][ T5918] usb usb2-port1: attempt power cycle
[  161.036860][ T5927] usb 4-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xAD, changing to 0x8D
[  161.049058][ T5927] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x8D has invalid maxpacket 1023, setting to 64
[  161.061721][ T5927] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0
[  161.072288][ T5927] usb 4-1: config 8 interface 177 has no altsetting 0
[  161.079179][ T5927] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1
[  161.088602][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.103372][ T7698] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  161.147678][   T10] scsi host1: usb-storage 3-1:1.0
[  161.278297][ T7720] PKCS7: Unknown OID: [4] (bad)
[  161.284462][ T7720] PKCS7: Only support pkcs7_signedData type
[  161.330320][ T5876] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  161.503219][ T5918] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  161.564299][ T5876] usb 1-1: device descriptor read/64, error -71
[  161.590192][   T10] usb 3-1: USB disconnect, device number 29
[  161.610081][ T5918] usb 2-1: device descriptor read/8, error -71
[  161.638945][ T5927] usb 4-1: string descriptor 0 read error: -71
[  161.701469][ T5927] ir_toy 4-1:8.177: required endpoints not found
[  161.757369][ T5927] usb 4-1: USB disconnect, device number 17
[  161.804866][ T7722] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  161.830046][ T7722] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.860151][ T5876] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  161.910071][ T5918] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  161.945753][ T5918] usb 2-1: device descriptor read/8, error -71
[  161.960655][ T7728] NFSD: Failed to start, no listeners configured.
[  161.982232][ T7722] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  161.992773][ T7722] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.010065][ T5876] usb 1-1: device descriptor read/64, error -71
[  162.061978][ T5918] usb usb2-port1: unable to enumerate USB device
[  162.105782][ T7722] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  162.124107][ T7722] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.125590][ T5876] usb usb1-port1: attempt power cycle
[  162.202313][ T7722] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode
[  162.212893][ T7722] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  162.224414][ T7722] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.260527][   T30] audit: type=1400 audit(1766759659.451:687): avc:  denied  { read } for  pid=7737 comm="syz.3.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  162.343520][ T3555] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  162.353343][ T3555] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  162.381330][ T3555] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  162.389615][ T3555] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  162.410104][ T3555] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  162.430436][ T3555] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  162.455010][ T3555] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  162.470008][ T3555] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  162.478337][ T5918] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  162.480032][ T5876] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  162.530579][ T5876] usb 1-1: device descriptor read/8, error -71
[  162.640576][ T5918] usb 3-1: Using ep0 maxpacket: 16
[  162.647747][ T5918] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  162.659298][ T5918] usb 3-1: config 0 interface 0 has no altsetting 0
[  162.666399][ T5918] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.00
[  162.677304][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.689524][ T5918] usb 3-1: config 0 descriptor??
[  162.890461][ T7749] lo speed is unknown, defaulting to 1000
[  162.896628][ T7749] lo speed is unknown, defaulting to 1000
[  162.912615][ T7749] lo speed is unknown, defaulting to 1000
[  162.937006][ T7749] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  162.980907][ T7749] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  163.085045][ T5876] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  163.134711][ T7749] lo speed is unknown, defaulting to 1000
[  163.149093][ T7749] lo speed is unknown, defaulting to 1000
[  163.162224][ T7749] lo speed is unknown, defaulting to 1000
[  163.176165][ T7749] lo speed is unknown, defaulting to 1000
[  163.188862][ T7749] lo speed is unknown, defaulting to 1000
[  163.222458][ T5876] usb 1-1: device descriptor read/8, error -71
[  163.298456][   T30] audit: type=1400 audit(1766759660.481:688): avc:  denied  { append } for  pid=7753 comm="syz.1.416" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  163.302637][ T7754] 9p: Bad value for 'rfdno'
[  163.322682][   T30] audit: type=1400 audit(1766759660.491:689): avc:  denied  { read } for  pid=7753 comm="syz.1.416" dev="sockfs" ino=15711 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  163.349419][ T5876] usb usb1-port1: unable to enumerate USB device
[  163.361774][ T7754] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  163.442842][ T5918] input: HID 05ac:8243 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:05AC:8243.0008/input/input12
[  163.476409][ T7756] netlink: 76 bytes leftover after parsing attributes in process `syz.1.417'.
[  163.569526][ T5918] appleir 0003:05AC:8243.0008: input,hiddev0,hidraw0: USB HID v0.05 Device [HID 05ac:8243] on usb-dummy_hcd.2-1/input0
[  163.857848][ T7736] efs: cannot read volume header
[  163.882369][ T7736] vxfs: unable to read disk superblock at 1
[  163.900513][ T7736] vxfs: unable to read disk superblock at 8
[  163.910303][ T5918] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  163.916806][ T7736] vxfs: can't find superblock.
[  164.015185][   T30] audit: type=1400 audit(1766759661.201:690): avc:  denied  { mount } for  pid=7774 comm="syz.4.420" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  164.057018][   T30] audit: type=1400 audit(1766759661.241:691): avc:  denied  { unmount } for  pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  164.110630][ T5918] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  164.134112][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.146858][ T5918] usb 4-1: Product: syz
[  164.151179][ T5918] usb 4-1: Manufacturer: syz
[  164.155816][ T5918] usb 4-1: SerialNumber: syz
[  164.169421][   T30] audit: type=1400 audit(1766759661.351:692): avc:  denied  { connect } for  pid=7779 comm="syz.4.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  164.200921][ T5918] usb 4-1: config 0 descriptor??
[  164.213061][ T5818] Bluetooth: hci3: Ignoring connect complete event for invalid link type
[  164.284501][ T7784] NFSD: Failed to start, no listeners configured.
[  164.561150][ T7796] netlink: 32 bytes leftover after parsing attributes in process `syz.1.424'.
[  164.570331][ T7796] netlink: 32 bytes leftover after parsing attributes in process `syz.1.424'.
[  165.204315][ T5927] usb 3-1: USB disconnect, device number 30
[  165.259702][ T7796] Process accounting resumed
[  165.433604][ T5918] usb 4-1: Firmware version (0.0) predates our first public release.
[  165.442054][ T5918] usb 4-1: Please update to version 0.2 or newer
[  165.442158][   T30] audit: type=1400 audit(1766759662.571:693): avc:  denied  { name_connect } for  pid=7792 comm="syz.4.425" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1
[  165.627898][ T7810] netlink: 'syz.1.428': attribute type 1 has an invalid length.
[  165.627977][ T7810] netlink: 'syz.1.428': attribute type 2 has an invalid length.
[  165.627989][ T7810] netlink: 'syz.1.428': attribute type 1 has an invalid length.
[  165.628000][ T7810] netlink: 16 bytes leftover after parsing attributes in process `syz.1.428'.
[  166.692639][ T7833] netlink: 76 bytes leftover after parsing attributes in process `syz.1.433'.
[  166.711174][   T49] usb 4-1: USB disconnect, device number 18
[  167.034307][   T30] audit: type=1400 audit(1766759664.221:694): avc:  denied  { map } for  pid=7842 comm="syz.3.434" path="socket:[15322]" dev="sockfs" ino=15322 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  167.081332][   T30] audit: type=1400 audit(1766759664.261:695): avc:  denied  { read accept } for  pid=7842 comm="syz.3.434" path="socket:[15322]" dev="sockfs" ino=15322 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  167.192506][ T7851] netlink: 35 bytes leftover after parsing attributes in process `syz.3.434'.
[  167.480899][ T7851] netlink: 'syz.3.434': attribute type 4 has an invalid length.
[  167.540723][ T5889] lo speed is unknown, defaulting to 1000
[  167.550650][ T5889] syz0: Port: 1 Link DOWN
[  167.616174][ T7858] NFSD: Failed to start, no listeners configured.
[  167.705388][   T30] audit: type=1400 audit(1766759664.891:696): avc:  denied  { connect } for  pid=7863 comm="syz.1.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  167.887598][   T24] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  168.100192][   T24] usb 1-1: Using ep0 maxpacket: 16
[  168.112466][   T24] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[  168.125483][   T30] audit: type=1400 audit(1766759665.311:697): avc:  denied  { setopt } for  pid=7869 comm="syz.2.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  168.160252][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.224081][   T24] usb 1-1: config 0 descriptor??
[  168.253814][   T30] audit: type=1400 audit(1766759665.361:698): avc:  denied  { mount } for  pid=7869 comm="syz.2.441" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  168.298806][   T24] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  168.566592][ T7855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.436'.
[  168.590991][ T7855] net_ratelimit: 2 callbacks suppressed
[  168.591013][ T7855] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  168.642719][ T7879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  168.653168][ T7879] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  168.751277][ T7878] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  169.063368][   T30] audit: type=1400 audit(1766759666.031:699): avc:  denied  { sqpoll } for  pid=7875 comm="syz.2.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  169.099692][   T24] usb 1-1: Detected FT232A
[  169.200792][   T24] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  169.211093][   T24] usb 1-1: USB disconnect, device number 19
[  169.238669][   T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  169.936228][   T24] ftdi_sio 1-1:0.0: device disconnected
[  170.149997][ T5948] usb 5-1: new full-speed USB device number 20 using dummy_hcd
[  170.277407][   T30] audit: type=1400 audit(1766759667.461:700): avc:  denied  { getopt } for  pid=7889 comm="syz.1.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  170.321334][ T5948] usb 5-1: not running at top speed; connect to a high speed hub
[  170.356270][ T5948] usb 5-1: config 5 has an invalid interface number: 148 but max is 0
[  170.360001][ T5889] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  170.377711][ T5948] usb 5-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config
[  170.389182][ T5948] usb 5-1: config 5 has no interface number 0
[  170.397609][ T5948] usb 5-1: config 5 interface 148 altsetting 1 endpoint 0xC has invalid wMaxPacketSize 0
[  170.410309][ T5948] usb 5-1: config 5 interface 148 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  170.425877][ T5948] usb 5-1: config 5 interface 148 has no altsetting 0
[  170.436525][ T5948] usb 5-1: New USB device found, idVendor=05ac, idProduct=d181, bcdDevice=b4.a2
[  170.458620][ T5948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.467066][ T5948] usb 5-1: Product: syz
[  170.472470][ T5948] usb 5-1: Manufacturer: syz
[  170.477273][ T5948] usb 5-1: SerialNumber: syz
[  170.523131][ T5889] usb 4-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00
[  170.532521][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.540667][ T5918] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  170.550566][ T5889] usb 4-1: config 0 descriptor??
[  170.608492][ T7898] netlink: 76 bytes leftover after parsing attributes in process `syz.0.449'.
[  170.700031][ T5918] usb 2-1: Using ep0 maxpacket: 32
[  170.708940][ T5918] usb 2-1: config 3 has an invalid interface number: 168 but max is 1
[  170.718384][ T5918] usb 2-1: config 3 has an invalid interface number: 125 but max is 1
[  170.727960][ T5918] usb 2-1: config 3 has an invalid interface number: 38 but max is 1
[  170.736651][ T5918] usb 2-1: config 3 has 3 interfaces, different from the descriptor's value: 2
[  170.748308][ T5918] usb 2-1: config 3 has no interface number 0
[  170.755091][ T5918] usb 2-1: config 3 has no interface number 1
[  170.763497][ T5918] usb 2-1: config 3 has no interface number 2
[  170.788767][ T5918] usb 2-1: config 3 interface 168 altsetting 242 endpoint 0xB has invalid maxpacket 1023, setting to 64
[  170.810516][ T5918] usb 2-1: config 3 interface 168 altsetting 242 has a duplicate endpoint with address 0x4, skipping
[  170.837497][ T5918] usb 2-1: config 3 interface 168 altsetting 242 has 4 endpoint descriptors, different from the interface descriptor's value: 8
[  170.861707][ T5889] usbhid 4-1:0.0: can't add hid device: -71
[  170.881974][ T5889] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  170.894164][ T5918] usb 2-1: too many endpoints for config 3 interface 125 altsetting 157: 56, using maximum allowed: 30
[  170.925037][ T5889] usb 4-1: USB disconnect, device number 19
[  170.934087][ T5918] usb 2-1: config 3 interface 125 altsetting 157 endpoint 0xF has invalid maxpacket 1023, setting to 64
[  170.952652][ T5918] usb 2-1: config 3 interface 125 altsetting 157 has an invalid descriptor for endpoint zero, skipping
[  170.971300][ T5918] usb 2-1: config 3 interface 125 altsetting 157 has a duplicate endpoint with address 0x9, skipping
[  170.995553][ T5918] usb 2-1: config 3 interface 125 altsetting 157 has 4 endpoint descriptors, different from the interface descriptor's value: 56
[  171.041199][ T5918] usb 2-1: config 3 interface 38 altsetting 7 endpoint 0xC has invalid maxpacket 1023, setting to 64
[  171.064026][ T5918] usb 2-1: config 3 interface 38 altsetting 7 endpoint 0xE has an invalid bInterval 203, changing to 7
[  171.075873][ T5918] usb 2-1: config 3 interface 168 has no altsetting 0
[  171.076112][   T30] audit: type=1400 audit(1766759668.261:701): avc:  denied  { getopt } for  pid=7912 comm="syz.0.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  171.083401][ T5918] usb 2-1: config 3 interface 125 has no altsetting 0
[  171.252004][ T5918] usb 2-1: config 3 interface 38 has no altsetting 0
[  171.354959][ T5918] usb 2-1: New USB device found, idVendor=0bfd, idProduct=000c, bcdDevice=67.cd
[  171.497952][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.509787][ T5918] usb 2-1: Product: ཏꏨ扞첦搔㛟팧暋僥餺戉䭂甐攳皐ᬻ⥙晊鑦䪓洧뮦骆哴趖ﯘॱ⊏戾㛍趙븯靕㲛삢앻哇鬖
[  171.525816][ T5918] usb 2-1: Manufacturer: င
[  171.535837][ T5918] usb 2-1: SerialNumber: Ф
[  171.580081][ T5889] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  171.730114][ T5889] usb 4-1: Using ep0 maxpacket: 8
[  171.740233][ T5889] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  171.752554][ T5889] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  171.771482][ T5918] kvaser_usb 2-1:3.168: error -ENODEV: Cannot get usb endpoint(s)
[  171.781529][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.798766][ T5918] kvaser_usb 2-1:3.125: error -ENODEV: Cannot get usb endpoint(s)
[  171.817283][ T5889] usb 4-1: config 0 descriptor??
[  171.844171][ T5889] iowarrior 4-1:0.0: no interrupt-in endpoint found
[  171.856517][ T5918] kvaser_usb 2-1:3.38: error -ENODEV: Cannot get usb endpoint(s)
[  171.890507][ T5918] usb 2-1: USB disconnect, device number 17
[  172.026981][   T30] audit: type=1400 audit(1766759669.211:702): avc:  denied  { read } for  pid=7926 comm="syz.2.454" dev="sockfs" ino=16501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  172.071231][ T5889] usb 4-1: USB disconnect, device number 20
[  172.144338][ T5948] ipheth 5-1:5.148: Unable to find endpoints
[  172.161999][ T5948] usb 5-1: USB disconnect, device number 20
[  172.463183][ T7941] tmpfs: Bad value for 'mpol'
[  172.472080][   T30] audit: type=1400 audit(1766759669.661:703): avc:  denied  { ioctl } for  pid=7940 comm="syz.4.458" path="socket:[16528]" dev="sockfs" ino=16528 ioctlcmd=0x8910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  172.630873][   T30] audit: type=1400 audit(1766759669.811:704): avc:  denied  { getopt } for  pid=7945 comm="syz.1.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  172.878536][ T7957] lo speed is unknown, defaulting to 1000
[  173.382588][ T7959] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  173.502828][ T7959] batman_adv: batadv0: Removing interface: batadv_slave_1
[  173.690008][ T5918] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  173.719977][ T5889] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  173.841791][ T7967] NFSD: Failed to start, no listeners configured.
[  173.851718][ T5918] usb 4-1: config 0 descriptor has 1 excess byte, ignoring
[  173.864961][ T5918] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30
[  173.878056][ T5918] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129
[  173.895727][ T5918] usb 4-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00
[  173.905900][ T5918] usb 4-1: New USB device strings: Mfr=4, Product=226, SerialNumber=0
[  173.914881][ T5889] usb 5-1: Using ep0 maxpacket: 16
[  173.920982][ T5918] usb 4-1: Product: syz
[  173.932669][ T5889] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  173.942274][ T5918] usb 4-1: Manufacturer: syz
[  173.950609][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.962281][ T5918] usb 4-1: config 0 descriptor??
[  173.962740][   T30] audit: type=1400 audit(1766759671.151:705): avc:  denied  { ioctl } for  pid=7972 comm="syz.0.466" path="socket:[16089]" dev="sockfs" ino=16089 ioctlcmd=0x9409 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  173.970462][ T5889] usb 5-1: Product: syz
[  174.019176][   T30] audit: type=1400 audit(1766759671.181:706): avc:  denied  { write } for  pid=7972 comm="syz.0.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  174.041093][ T5889] usb 5-1: Manufacturer: syz
[  174.054664][ T5889] usb 5-1: SerialNumber: syz
[  174.075080][ T5889] usb 5-1: config 0 descriptor??
[  175.038049][   T30] audit: type=1400 audit(1766759671.731:707): avc:  denied  { create } for  pid=7975 comm="syz.2.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  175.133485][ T5889] visor 5-1:0.0: Sony Clie 3.5 converter detected
[  175.149327][   T30] audit: type=1400 audit(1766759671.741:708): avc:  denied  { bind } for  pid=7975 comm="syz.2.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  175.200231][   T30] audit: type=1400 audit(1766759671.741:709): avc:  denied  { write } for  pid=7975 comm="syz.2.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  175.222779][   T30] audit: type=1400 audit(1766759671.811:710): avc:  denied  { setopt } for  pid=7975 comm="syz.2.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  175.476413][ T5889] usb 5-1: clie_3_5_startup: get config number failed: -71
[  175.492079][   T30] audit: type=1400 audit(1766759672.681:711): avc:  denied  { read } for  pid=7987 comm="syz.0.472" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  175.500639][ T5889] visor 5-1:0.0: probe with driver visor failed with error -71
[  175.590171][   T30] audit: type=1400 audit(1766759672.701:712): avc:  denied  { open } for  pid=7987 comm="syz.0.472" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  175.666468][ T5889] usb 5-1: USB disconnect, device number 21
[  176.481775][ T7989] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  176.488994][ T7989] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  176.492003][ T5876] usb 4-1: USB disconnect, device number 21
[  176.590182][ T7989] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  176.675792][ T7989] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  176.690891][ T7989] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  176.719833][ T7989] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  176.735665][ T8005] lo speed is unknown, defaulting to 1000
[  176.750315][ T7999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.473'.
[  176.762825][ T7989] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  176.779585][ T7999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.473'.
[  176.788994][ T7989] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  176.823280][ T7989] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  176.865960][ T7989] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  176.884107][ T7989] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  176.971258][ T7989] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  176.980559][ T7989] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  177.000060][ T7989] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  177.859997][ T5818] Bluetooth: hci0: command 0x0c1a tx timeout
[  178.719978][ T5818] Bluetooth: hci1: command 0x0c1a tx timeout
[  178.799973][ T5818] Bluetooth: hci2: command 0x0c1a tx timeout
[  178.810842][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880264aa800: rx timeout, send abort
[  178.819181][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880264aa800: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session.
[  178.833593][    C1] vcan0: j1939_tp_rxtimer: 0xffff888059431400: rx timeout, send abort
[  178.880021][ T5818] Bluetooth: hci3: command 0x0c1a tx timeout
[  179.030178][ T5818] Bluetooth: hci4: command 0x0406 tx timeout
[  179.631074][   T30] audit: type=1400 audit(1766759676.821:713): avc:  denied  { map } for  pid=8056 comm="syz.0.487" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  179.882020][   T30] audit: type=1400 audit(1766759676.921:714): avc:  denied  { execute } for  pid=8056 comm="syz.0.487" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  179.910732][ T5818] Bluetooth: hci0: command 0x0c1a tx timeout
[  179.917811][   T30] audit: type=1400 audit(1766759677.101:715): avc:  denied  { ioctl } for  pid=8054 comm="syz.2.486" path="socket:[16306]" dev="sockfs" ino=16306 ioctlcmd=0x4942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  180.171675][   T30] audit: type=1400 audit(1766759677.351:716): avc:  denied  { read } for  pid=8056 comm="syz.0.487" path="socket:[16749]" dev="sockfs" ino=16749 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  180.340146][   T30] audit: type=1400 audit(1766759677.411:717): avc:  denied  { setopt } for  pid=8056 comm="syz.0.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  180.429617][   T30] audit: type=1400 audit(1766759677.561:718): avc:  denied  { shutdown } for  pid=8062 comm="syz.1.488" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  180.551691][ T5889] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  180.614025][ T8077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  180.670176][ T8077] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  180.706216][ T8080] trusted_key: syz.2.491 sent an empty control message without MSG_MORE.
[  180.710255][ T5889] usb 4-1: Using ep0 maxpacket: 16
[  180.745850][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  180.779984][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  180.790570][ T5818] Bluetooth: hci1: command 0x0c1a tx timeout
[  180.810095][ T5889] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  180.830110][ T5935] usb 1-1: new low-speed USB device number 20 using dummy_hcd
[  180.837799][ T5889] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  180.852658][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.870105][ T5818] Bluetooth: hci2: command 0x0c1a tx timeout
[  180.873726][ T5889] usb 4-1: config 0 descriptor??
[  180.946001][ T8091] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32)
[  180.955556][ T5818] Bluetooth: hci3: command 0x0c1a tx timeout
[  180.987909][ T8086] NFSD: Failed to start, no listeners configured.
[  181.002638][ T5935] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 25087, setting to 8
[  181.016516][ T5935] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  181.034607][ T8095] faux_driver vgem: [drm] Unknown color mode 3; guessing buffer size.
[  181.043054][ T5935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.056375][ T8095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  181.066775][ T8073] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  181.066930][   T30] audit: type=1400 audit(1766759678.241:719): avc:  denied  { create } for  pid=8083 comm="syz.1.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[  181.110171][ T5818] Bluetooth: hci4: command 0x0406 tx timeout
[  181.268170][ T5935] usb 1-1: string descriptor 0 read error: -71
[  181.293323][ T5935] hub 1-1:32.0: USB hub found
[  181.299514][ T5935] hub 1-1:32.0: config failed, can't read hub descriptor (err -22)
[  181.412688][ T5889] hid-multitouch 0003:0457:07DA.0009: unknown main item tag 0x0
[  181.505915][ T8100] netlink: 12 bytes leftover after parsing attributes in process `syz.4.495'.
[  181.532302][ T5889] hid-multitouch 0003:0457:07DA.0009: unknown main item tag 0x0
[  181.549593][ T5889] hid-multitouch 0003:0457:07DA.0009: unknown main item tag 0x0
[  181.564858][ T5935] usb 1-1: USB disconnect, device number 20
[  181.581758][ T5889] hid-multitouch 0003:0457:07DA.0009: unknown main item tag 0x0
[  181.948606][ T5889] hid-multitouch 0003:0457:07DA.0009: unknown main item tag 0x0
[  181.960941][ T5889] hid-multitouch 0003:0457:07DA.0009: unknown main item tag 0x0
[  182.012604][ T5818] Bluetooth: hci0: command 0x0c1a tx timeout
[  182.045763][ T5889] hid-multitouch 0003:0457:07DA.0009: unknown main item tag 0x0
[  182.086952][ T5889] hid-multitouch 0003:0457:07DA.0009: unknown main item tag 0x0
[  182.131421][ T5889] hid-multitouch 0003:0457:07DA.0009: unknown main item tag 0x0
[  182.184505][ T5889] hid-multitouch 0003:0457:07DA.0009: unknown main item tag 0x0
[  182.227152][ T5889] hid-multitouch 0003:0457:07DA.0009: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.3-1/input0
[  182.300048][ T5889] usb 4-1: USB disconnect, device number 22
[  182.363443][   T30] audit: type=1400 audit(1766759679.551:720): avc:  denied  { ioctl } for  pid=8106 comm="syz.0.498" path="socket:[16818]" dev="sockfs" ino=16818 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  182.424623][ T8108] fido_id[8108]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  182.878082][ T5818] Bluetooth: hci1: command 0x0c1a tx timeout
[  182.951168][ T5818] Bluetooth: hci2: command 0x0c1a tx timeout
[  182.995725][ T8122] Device name cannot be null; rc = [-22]
[  183.037395][ T5818] Bluetooth: hci3: command 0x0c1a tx timeout
[  183.337567][ T5876] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  183.527013][ T5876] usb 1-1: Using ep0 maxpacket: 16
[  183.538175][ T5876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  183.621986][ T5876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  183.758969][ T5876] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  184.273600][ T5876] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  184.367182][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.436533][ T5876] usb 1-1: config 0 descriptor??
[  184.525085][   T30] audit: type=1400 audit(1766759681.711:721): avc:  denied  { getopt } for  pid=8137 comm="syz.3.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  184.875315][ T8134] NFSD: Failed to start, no listeners configured.
[  185.027276][ T8111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  185.080009][   T49] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  185.144325][   T30] audit: type=1400 audit(1766759682.311:722): avc:  denied  { unlink } for  pid=8133 comm="syz.4.506" name="#b" dev="tmpfs" ino=585 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  185.188648][ T8111] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  185.330163][   T49] usb 4-1: Using ep0 maxpacket: 8
[  185.343225][   T49] usb 4-1: config 0 has an invalid interface number: 189 but max is 0
[  185.393166][   T49] usb 4-1: config 0 has no interface number 0
[  185.402135][   T49] usb 4-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=62.1b
[  185.420588][   T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.434787][ T8111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  185.454910][   T49] usb 4-1: Product: syz
[  185.459154][   T49] usb 4-1: Manufacturer: syz
[  185.471059][ T8111] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  185.485147][   T49] usb 4-1: SerialNumber: syz
[  185.504447][   T49] usb 4-1: config 0 descriptor??
[  185.534959][   T49] usb 4-1: invalid MIDI EP
[  185.539779][   T49] usb 4-1: snd-bcd2000: error during probing
[  185.551988][ T5876] microsoft 0003:045E:07DA.000A: ignoring exceeding usage max
[  185.566175][   T49] snd-bcd2000 4-1:0.189: probe with driver snd-bcd2000 failed with error -22
[  185.566684][ T8152] overlayfs: missing 'lowerdir'
[  185.584183][   T30] audit: type=1400 audit(1766759682.771:723): avc:  denied  { write } for  pid=8151 comm="syz.1.509" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  185.623412][   T30] audit: type=1400 audit(1766759682.811:724): avc:  denied  { watch watch_reads } for  pid=8154 comm="syz.4.510" path="pipe:[4548]" dev="pipefs" ino=4548 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  185.697044][   T30] audit: type=1400 audit(1766759682.861:725): avc:  denied  { map } for  pid=8154 comm="syz.4.510" path="/dev/vcs" dev="devtmpfs" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1
[  185.750417][ T5935] usb 4-1: USB disconnect, device number 23
[  185.764255][ T5876] microsoft 0003:045E:07DA.000A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  185.805596][ T5876] microsoft 0003:045E:07DA.000A: no inputs found
[  185.853767][ T5876] microsoft 0003:045E:07DA.000A: could not initialize ff, continuing anyway
[  185.896230][ T5876] usb 1-1: USB disconnect, device number 21
[  185.920746][ T8167] fido_id[8167]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.000A/report_descriptor': No such device
[  186.336442][   T30] audit: type=1400 audit(1766759683.521:726): avc:  denied  { unmount } for  pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  187.150964][ T8194] loop7: detected capacity change from 0 to 16384
[  187.156668][   T30] audit: type=1400 audit(1766759683.801:727): avc:  denied  { read } for  pid=8191 comm="syz.3.519" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  187.191070][   T30] audit: type=1400 audit(1766759683.801:728): avc:  denied  { open } for  pid=8191 comm="syz.3.519" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  187.373070][ T8194] loop7: detected capacity change from 16384 to 0
[  187.526929][ T8194] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.536562][ T8194] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.579990][ T8194] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.587304][ T8194] bridge0: port 2(bridge_slave_1) entered forwarding state
[  187.595242][ T8194] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.602573][ T8194] bridge0: port 1(bridge_slave_0) entered forwarding state
[  187.625953][ T8194] bridge0: entered promiscuous mode
[  187.631478][ T8194] bridge0: entered allmulticast mode
[  187.699988][   T10] usb 1-1: new full-speed USB device number 22 using dummy_hcd
[  187.892786][   T10] usb 1-1: not running at top speed; connect to a high speed hub
[  187.908263][   T10] usb 1-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  187.938808][   T30] audit: type=1400 audit(1766759685.121:729): avc:  denied  { associate } for  pid=8207 comm="syz.3.523" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  187.960535][   T10] usb 1-1: config 1 interface 0 has no altsetting 0
[  188.010356][   T10] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  188.029379][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.049946][ T5935] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  188.075790][   T10] usb 1-1: Product: syz
[  188.087069][   T10] usb 1-1: Manufacturer: syz
[  188.097228][   T10] usb 1-1: SerialNumber: syz
[  188.231214][ T5935] usb 2-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36
[  188.241652][ T5935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.274531][ T5935] usb 2-1: config 0 descriptor??
[  188.821444][ T5935] kaweth 2-1:0.0: Firmware present in device.
[  188.839832][ T5935] kaweth 2-1:0.0: Statistics collection: 0
[  188.871160][ T5935] kaweth 2-1:0.0: Multicast filter limit: 0
[  188.894651][ T5935] kaweth 2-1:0.0: MTU: 0
[  188.913581][ T5935] kaweth 2-1:0.0: Read MAC address 00:00:00:00:00:00
[  189.167501][ T5935] kaweth 2-1:0.0: probe with driver kaweth failed with error -5
[  189.267879][ T5935] usb 2-1: USB disconnect, device number 18
[  189.288914][   T30] audit: type=1400 audit(1766759686.471:730): avc:  denied  { mounton } for  pid=8222 comm="syz.3.526" path="/bus" dev="ramfs" ino=17621 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[  189.385798][   T30] audit: type=1400 audit(1766759686.501:731): avc:  denied  { mount } for  pid=8222 comm="syz.3.526" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  189.523931][   T30] audit: type=1400 audit(1766759686.531:732): avc:  denied  { ioctl } for  pid=8224 comm="syz.1.527" path="socket:[17628]" dev="sockfs" ino=17628 ioctlcmd=0x898e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  189.713533][   T10] usb 1-1: USB disconnect, device number 22
[  190.331940][ T8235] netlink: 20 bytes leftover after parsing attributes in process `syz.0.529'.
[  190.389723][ T8235] netlink: 20 bytes leftover after parsing attributes in process `syz.0.529'.
[  190.461130][ T8235] netlink: 20 bytes leftover after parsing attributes in process `syz.0.529'.
[  190.920103][ T5948] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  190.930161][   T49] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  191.819953][ T5948] usb 4-1: device descriptor read/64, error -71
[  191.856077][   T49] usb 1-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config
[  191.944040][   T49] usb 1-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e
[  191.974024][   T49] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.001677][   T49] usb 1-1: Product: syz
[  192.019128][   T49] usb 1-1: Manufacturer: syz
[  192.025605][   T49] usb 1-1: SerialNumber: syz
[  192.030644][   T30] audit: type=1400 audit(1766759689.221:733): avc:  denied  { bind } for  pid=8247 comm="syz.1.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  192.063202][ T8248] netlink: 16 bytes leftover after parsing attributes in process `syz.1.534'.
[  192.072809][ T8248] netlink: 16 bytes leftover after parsing attributes in process `syz.1.534'.
[  192.092830][   T49] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state.
[  192.105669][   T49] dvb-usb: bulk message failed: -22 (3/0)
[  192.113003][ T5948] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  192.130090][ T5935] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  192.152484][   T49] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  192.180262][   T49] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0)
[  192.216837][   T49] usb 1-1: media controller created
[  192.241347][   T49] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  192.260151][ T5948] usb 4-1: device descriptor read/64, error -71
[  192.290076][ T5935] usb 5-1: Using ep0 maxpacket: 32
[  192.299186][ T5935] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11
[  192.322691][ T5935] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  192.325584][   T49] DVB: Unable to find symbol mt352_attach()
[  192.352245][   T49] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0'
[  192.362519][ T5935] usb 5-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00
[  192.363020][   T49] dvb-usb: bulk message failed: -22 (3/0)
[  192.390280][ T5948] usb usb4-port1: attempt power cycle
[  192.390324][ T5935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.404173][   T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  192.409981][   T49] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected.
[  192.436258][   T49] usb 1-1: USB disconnect, device number 23
[  192.462009][ T5935] usb 5-1: config 0 descriptor??
[  192.520289][   T49] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected.
[  192.559998][   T10] usb 2-1: device descriptor read/64, error -71
[  192.647341][ T8257] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=514 sclass=netlink_route_socket pid=8257 comm=syz.2.535
[  192.730011][ T5948] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  192.768929][ T5948] usb 4-1: device descriptor read/8, error -71
[  192.820095][   T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  192.930065][ T5876] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  192.960047][   T10] usb 2-1: device descriptor read/64, error -71
[  193.019943][ T5948] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  193.051579][ T5948] usb 4-1: device descriptor read/8, error -71
[  193.070184][   T10] usb usb2-port1: attempt power cycle
[  193.078393][ T5935] usbhid 5-1:0.0: can't add hid device: -71
[  193.084793][ T5935] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  193.108988][ T5876] usb 3-1: Using ep0 maxpacket: 32
[  193.110408][ T5935] usb 5-1: USB disconnect, device number 22
[  193.144707][ T5876] usb 3-1: config 0 has an invalid interface number: 176 but max is 0
[  193.160522][ T5948] usb usb4-port1: unable to enumerate USB device
[  193.175620][ T5876] usb 3-1: config 0 has no interface number 0
[  193.196395][ T5876] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0108, bcdDevice=ef.d2
[  193.210231][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.220200][ T5876] usb 3-1: Product: syz
[  193.225471][ T5876] usb 3-1: Manufacturer: syz
[  193.229984][ T5842] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  193.248168][ T5876] usb 3-1: SerialNumber: syz
[  193.261803][ T5876] usb 3-1: config 0 descriptor??
[  193.292051][ T5876] usb_ehset_test 3-1:0.176: probe with driver usb_ehset_test failed with error -32
[  193.410066][   T10] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  193.430542][   T10] usb 2-1: device descriptor read/8, error -71
[  193.431235][ T5842] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  193.446135][ T5842] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.458632][ T5842] usb 1-1: config 0 descriptor??
[  193.470942][ T5842] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  193.481140][ T5935] usb 3-1: USB disconnect, device number 31
[  193.647827][ T8265] netlink: 12 bytes leftover after parsing attributes in process `syz.3.538'.
[  193.670118][   T10] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  193.701879][   T10] usb 2-1: device descriptor read/8, error -71
[  193.759005][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  193.765850][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  193.822411][   T10] usb usb2-port1: unable to enumerate USB device
[  194.265012][   T30] audit: type=1400 audit(1766759691.451:734): avc:  denied  { ioctl } for  pid=8276 comm="syz.3.541" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x7040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  194.311557][ T8281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.542'.
[  194.322127][   T30] audit: type=1400 audit(1766759691.491:735): avc:  denied  { bind } for  pid=8280 comm="syz.2.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  194.432727][ T8284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  194.456777][ T8284] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  194.547646][ T5842] gspca_stv06xx: I2C: Read error writing address: -71
[  194.573003][ T5842] usb 1-1: USB disconnect, device number 24
[  194.670048][ T5927] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  194.867590][ T5927] usb 5-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1
[  194.927809][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.043977][ T5927] usb 5-1: config 0 descriptor??
[  195.127608][ T5927] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  195.157393][ T5927] dvb_usb_af9015 5-1:0.0: probe with driver dvb_usb_af9015 failed with error -22
[  195.319264][ T5927] usb 5-1: USB disconnect, device number 23
[  195.352737][   T30] audit: type=1400 audit(1766759692.511:736): avc:  denied  { getopt } for  pid=8302 comm="syz.0.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  195.462567][ T8295] NFSD: Failed to start, no listeners configured.
[  195.473284][   T30] audit: type=1400 audit(1766759692.531:737): avc:  denied  { write } for  pid=8302 comm="syz.0.546" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  195.551457][   T30] audit: type=1400 audit(1766759692.741:738): avc:  denied  { setopt } for  pid=8313 comm="syz.0.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  195.582859][ T8316] deleting an unspecified loop device is not supported.
[  195.583739][   T30] audit: type=1400 audit(1766759692.761:739): avc:  denied  { ioctl } for  pid=8313 comm="syz.0.549" path="socket:[17254]" dev="sockfs" ino=17254 ioctlcmd=0x9414 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  195.617176][   T30] audit: type=1400 audit(1766759692.771:740): avc:  denied  { ioctl } for  pid=8313 comm="syz.0.549" path="socket:[17258]" dev="sockfs" ino=17258 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  195.667683][   T30] audit: type=1400 audit(1766759692.841:741): avc:  denied  { write } for  pid=8313 comm="syz.0.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  196.405145][   T30] audit: type=1400 audit(1766759693.591:742): avc:  denied  { mount } for  pid=8335 comm="syz.3.555" name="/" dev="autofs" ino=17304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  196.507320][ T8336] 
[  196.509677][ T8336] ======================================================
[  196.516685][ T8336] WARNING: possible circular locking dependency detected
[  196.523676][ T8336] syzkaller #0 Tainted: G             L     
[  196.529628][ T8336] ------------------------------------------------------
[  196.536633][ T8336] syz.3.555/8336 is trying to acquire lock:
[  196.542492][ T8336] ffff888077b34068 (&pipe->mutex){+.+.}-{4:4}, at: anon_pipe_write+0x15d/0x1bd0
[  196.551519][ T8336] 
[  196.551519][ T8336] but task is already holding lock:
[  196.558860][ T8336] ffff8880223b8948 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x4a6/0xd60
[  196.568593][ T8336] 
[  196.568593][ T8336] which lock already depends on the new lock.
[  196.568593][ T8336] 
[  196.578980][ T8336] 
[  196.578980][ T8336] the existing dependency chain (in reverse order) is:
[  196.587980][ T8336] 
[  196.587980][ T8336] -> #3 (&sbi->pipe_mutex){+.+.}-{4:4}:
[  196.595698][ T8336]        __mutex_lock+0x1aa/0x1ca0
[  196.600803][ T8336]        autofs_notify_daemon+0x4a6/0xd60
[  196.606538][ T8336]        autofs_wait+0x10f3/0x1ac0
[  196.611664][ T8336]        autofs_mount_wait+0x132/0x3c0
[  196.617115][ T8336]        autofs_d_automount+0x4b2/0x960
[  196.622645][ T8336]        __traverse_mounts+0x1b9/0x830
[  196.628102][ T8336]        step_into_slowpath+0x772/0xf50
[  196.633634][ T8336]        path_lookupat+0x627/0xc40
[  196.638736][ T8336]        filename_lookup+0x224/0x5f0
[  196.644005][ T8336]        kern_path+0x35/0x50
[  196.648579][ T8336]        lookup_bdev+0xd8/0x280
[  196.653423][ T8336]        resume_store+0x1d6/0x490
[  196.658437][ T8336]        kobj_attr_store+0x58/0x80
[  196.663540][ T8336]        sysfs_kf_write+0xf2/0x150
[  196.668643][ T8336]        kernfs_fop_write_iter+0x3af/0x570
[  196.674455][ T8336]        vfs_write+0x7d3/0x11d0
[  196.679315][ T8336]        ksys_write+0x12a/0x250
[  196.684172][ T8336]        do_syscall_64+0xcd/0xf80
[  196.689196][ T8336]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.695614][ T8336] 
[  196.695614][ T8336] -> #2 (&of->mutex){+.+.}-{4:4}:
[  196.702822][ T8336]        __mutex_lock+0x1aa/0x1ca0
[  196.707942][ T8336]        kernfs_seq_start+0x4f/0x2a0
[  196.713223][ T8336]        seq_read_iter+0x2c1/0x12d0
[  196.718430][ T8336]        kernfs_fop_read_iter+0x46c/0x610
[  196.724142][ T8336]        copy_splice_read+0x618/0xc20
[  196.729511][ T8336]        do_splice_read+0x285/0x370
[  196.734702][ T8336]        splice_direct_to_actor+0x2a1/0xa30
[  196.740588][ T8336]        do_splice_direct+0x174/0x240
[  196.745952][ T8336]        do_sendfile+0xb06/0xe50
[  196.750882][ T8336]        __x64_sys_sendfile64+0x1d8/0x220
[  196.756600][ T8336]        do_syscall_64+0xcd/0xf80
[  196.761609][ T8336]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.768009][ T8336] 
[  196.768009][ T8336] -> #1 (&p->lock){+.+.}-{4:4}:
[  196.775042][ T8336]        __mutex_lock+0x1aa/0x1ca0
[  196.780159][ T8336]        seq_read_iter+0xe1/0x12d0
[  196.785294][ T8336]        kernfs_fop_read_iter+0x46c/0x610
[  196.791023][ T8336]        copy_splice_read+0x618/0xc20
[  196.796389][ T8336]        do_splice_read+0x285/0x370
[  196.801579][ T8336]        splice_file_to_pipe+0x109/0x120
[  196.807202][ T8336]        do_sendfile+0x400/0xe50
[  196.812133][ T8336]        __x64_sys_sendfile64+0x1d8/0x220
[  196.817845][ T8336]        do_syscall_64+0xcd/0xf80
[  196.822866][ T8336]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.829262][ T8336] 
[  196.829262][ T8336] -> #0 (&pipe->mutex){+.+.}-{4:4}:
[  196.836628][ T8336]        __lock_acquire+0x1669/0x2890
[  196.841990][ T8336]        lock_acquire+0x179/0x330
[  196.847019][ T8336]        __mutex_lock+0x1aa/0x1ca0
[  196.852157][ T8336]        anon_pipe_write+0x15d/0x1bd0
[  196.857523][ T8336]        __kernel_write_iter+0x720/0xb10
[  196.863145][ T8336]        __kernel_write+0xf5/0x140
[  196.868247][ T8336]        autofs_notify_daemon+0x4db/0xd60
[  196.873951][ T8336]        autofs_wait+0x10f3/0x1ac0
[  196.879051][ T8336]        autofs_mount_wait+0x132/0x3c0
[  196.884495][ T8336]        autofs_d_automount+0x4b2/0x960
[  196.890059][ T8336]        __traverse_mounts+0x1b9/0x830
[  196.895533][ T8336]        step_into_slowpath+0x772/0xf50
[  196.901068][ T8336]        path_lookupat+0x627/0xc40
[  196.906168][ T8336]        filename_lookup+0x224/0x5f0
[  196.911440][ T8336]        kern_path+0x35/0x50
[  196.916025][ T8336]        lookup_bdev+0xd8/0x280
[  196.920861][ T8336]        resume_store+0x1d6/0x490
[  196.925893][ T8336]        kobj_attr_store+0x58/0x80
[  196.931026][ T8336]        sysfs_kf_write+0xf2/0x150
[  196.936137][ T8336]        kernfs_fop_write_iter+0x3af/0x570
[  196.941940][ T8336]        vfs_write+0x7d3/0x11d0
[  196.946775][ T8336]        ksys_write+0x12a/0x250
[  196.951619][ T8336]        do_syscall_64+0xcd/0xf80
[  196.956661][ T8336]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.963089][ T8336] 
[  196.963089][ T8336] other info that might help us debug this:
[  196.963089][ T8336] 
[  196.973308][ T8336] Chain exists of:
[  196.973308][ T8336]   &pipe->mutex --> &of->mutex --> &sbi->pipe_mutex
[  196.973308][ T8336] 
[  196.985745][ T8336]  Possible unsafe locking scenario:
[  196.985745][ T8336] 
[  196.993189][ T8336]        CPU0                    CPU1
[  196.998534][ T8336]        ----                    ----
[  197.003882][ T8336]   lock(&sbi->pipe_mutex);
[  197.008370][ T8336]                                lock(&of->mutex);
[  197.014856][ T8336]                                lock(&sbi->pipe_mutex);
[  197.021864][ T8336]   lock(&pipe->mutex);
[  197.026008][ T8336] 
[  197.026008][ T8336]  *** DEADLOCK ***
[  197.026008][ T8336] 
[  197.034130][ T8336] 5 locks held by syz.3.555/8336:
[  197.039156][ T8336]  #0: ffff888079ac1b38 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370
[  197.048212][ T8336]  #1: ffff88803529a420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  197.057169][ T8336]  #2: ffff88807ab4fc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570
[  197.066919][ T8336]  #3: ffff888140e8a008 (kn->active#75){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570
[  197.076957][ T8336]  #4: ffff8880223b8948 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x4a6/0xd60
[  197.087128][ T8336] 
[  197.087128][ T8336] stack backtrace:
[  197.093011][ T8336] CPU: 0 UID: 0 PID: 8336 Comm: syz.3.555 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  197.093032][ T8336] Tainted: [L]=SOFTLOCKUP
[  197.093037][ T8336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  197.093047][ T8336] Call Trace:
[  197.093055][ T8336]  <TASK>
[  197.093061][ T8336]  dump_stack_lvl+0x116/0x1f0
[  197.093083][ T8336]  print_circular_bug+0x275/0x340
[  197.093102][ T8336]  check_noncircular+0x146/0x160
[  197.093120][ T8336]  __lock_acquire+0x1669/0x2890
[  197.093139][ T8336]  ? __kasan_check_byte+0x13/0x50
[  197.093162][ T8336]  lock_acquire+0x179/0x330
[  197.093179][ T8336]  ? anon_pipe_write+0x15d/0x1bd0
[  197.093202][ T8336]  ? __pfx___might_resched+0x10/0x10
[  197.093216][ T8336]  ? rcu_is_watching+0x12/0xc0
[  197.093232][ T8336]  __mutex_lock+0x1aa/0x1ca0
[  197.093252][ T8336]  ? anon_pipe_write+0x15d/0x1bd0
[  197.093272][ T8336]  ? is_bpf_text_address+0x94/0x1a0
[  197.093290][ T8336]  ? kernel_text_address+0x8d/0x100
[  197.093310][ T8336]  ? anon_pipe_write+0x15d/0x1bd0
[  197.093330][ T8336]  ? unwind_get_return_address+0x59/0xa0
[  197.093351][ T8336]  ? __bfs+0x148/0x290
[  197.093363][ T8336]  ? __pfx___mutex_lock+0x10/0x10
[  197.093387][ T8336]  ? check_irq_usage+0xe8/0xbc0
[  197.093406][ T8336]  ? anon_pipe_write+0x15d/0x1bd0
[  197.093426][ T8336]  anon_pipe_write+0x15d/0x1bd0
[  197.093447][ T8336]  ? lockdep_unlock+0x64/0xd0
[  197.093470][ T8336]  ? __lock_acquire+0x12c2/0x2890
[  197.093488][ T8336]  ? __pfx_anon_pipe_write+0x10/0x10
[  197.093510][ T8336]  ? lock_acquire+0x179/0x330
[  197.093528][ T8336]  ? __pfx_anon_pipe_write+0x10/0x10
[  197.093548][ T8336]  __kernel_write_iter+0x720/0xb10
[  197.093568][ T8336]  ? __pfx___kernel_write_iter+0x10/0x10
[  197.093586][ T8336]  ? __mutex_lock+0x27b/0x1ca0
[  197.093605][ T8336]  ? __kernel_text_address+0xd/0x40
[  197.093625][ T8336]  ? autofs_notify_daemon+0x45a/0xd60
[  197.093644][ T8336]  __kernel_write+0xf5/0x140
[  197.093661][ T8336]  ? __pfx___kernel_write+0x10/0x10
[  197.093679][ T8336]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  197.093704][ T8336]  autofs_notify_daemon+0x4db/0xd60
[  197.093722][ T8336]  ? __pfx_autofs_notify_daemon+0x10/0x10
[  197.093738][ T8336]  ? kernfs_fop_write_iter+0x3af/0x570
[  197.093760][ T8336]  ? vfs_write+0x7d3/0x11d0
[  197.093777][ T8336]  ? ksys_write+0x12a/0x250
[  197.093801][ T8336]  ? lockdep_init_map_type+0x5c/0x270
[  197.093820][ T8336]  ? lockdep_init_map_type+0x5c/0x270
[  197.093839][ T8336]  autofs_wait+0x10f3/0x1ac0
[  197.093857][ T8336]  ? __pfx_autofs_wait+0x10/0x10
[  197.093873][ T8336]  ? __pfx_path_check_mount+0x10/0x10
[  197.093887][ T8336]  ? find_held_lock+0x2b/0x80
[  197.093909][ T8336]  ? path_has_submounts+0xcf/0x120
[  197.093926][ T8336]  ? do_raw_spin_unlock+0x172/0x230
[  197.093947][ T8336]  ? find_held_lock+0x2b/0x80
[  197.093970][ T8336]  autofs_mount_wait+0x132/0x3c0
[  197.093986][ T8336]  autofs_d_automount+0x4b2/0x960
[  197.094004][ T8336]  __traverse_mounts+0x1b9/0x830
[  197.094029][ T8336]  step_into_slowpath+0x772/0xf50
[  197.094046][ T8336]  ? __up_read+0x2d1/0x700
[  197.094065][ T8336]  ? __pfx_step_into_slowpath+0x10/0x10
[  197.094083][ T8336]  ? lookup_slow+0x40/0x70
[  197.094100][ T8336]  path_lookupat+0x627/0xc40
[  197.094119][ T8336]  filename_lookup+0x224/0x5f0
[  197.094138][ T8336]  ? __pfx_filename_lookup+0x10/0x10
[  197.094162][ T8336]  ? getname_kernel+0x52/0x370
[  197.094185][ T8336]  ? __asan_memcpy+0x3c/0x60
[  197.094201][ T8336]  kern_path+0x35/0x50
[  197.094219][ T8336]  lookup_bdev+0xd8/0x280
[  197.094239][ T8336]  ? __pfx_lookup_bdev+0x10/0x10
[  197.094259][ T8336]  ? __asan_memcpy+0x3c/0x60
[  197.094274][ T8336]  resume_store+0x1d6/0x490
[  197.094295][ T8336]  ? __pfx_resume_store+0x10/0x10
[  197.094319][ T8336]  ? find_held_lock+0x2b/0x80
[  197.094341][ T8336]  ? __pfx_resume_store+0x10/0x10
[  197.094362][ T8336]  kobj_attr_store+0x58/0x80
[  197.094386][ T8336]  ? __pfx_kobj_attr_store+0x10/0x10
[  197.094405][ T8336]  sysfs_kf_write+0xf2/0x150
[  197.094420][ T8336]  kernfs_fop_write_iter+0x3af/0x570
[  197.094443][ T8336]  ? __pfx_sysfs_kf_write+0x10/0x10
[  197.094458][ T8336]  vfs_write+0x7d3/0x11d0
[  197.094476][ T8336]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  197.094500][ T8336]  ? __pfx_vfs_write+0x10/0x10
[  197.094522][ T8336]  ksys_write+0x12a/0x250
[  197.094540][ T8336]  ? __pfx_ksys_write+0x10/0x10
[  197.094561][ T8336]  do_syscall_64+0xcd/0xf80
[  197.094581][ T8336]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  197.094596][ T8336] RIP: 0033:0x7f9900d8f749
[  197.094610][ T8336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  197.094625][ T8336] RSP: 002b:00007f9901d11038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  197.094638][ T8336] RAX: ffffffffffffffda RBX: 00007f9900fe5fa0 RCX: 00007f9900d8f749
[  197.094648][ T8336] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000004
[  197.094657][ T8336] RBP: 00007f9900e13f91 R08: 0000000000000000 R09: 0000000000000000
[  197.094666][ T8336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  197.094675][ T8336] R13: 00007f9900fe6038 R14: 00007f9900fe5fa0 R15: 00007ffc7dd3b9a8
[  197.094689][ T8336]  </TASK>
[  197.793827][ T8336] PM: Image not found (code -22)
[  197.859947][ T5935] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  197.899648][   T30] audit: type=1400 audit(1766759695.081:743): avc:  denied  { unmount } for  pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  198.009973][ T5935] usb 1-1: Using ep0 maxpacket: 8
[  198.017171][ T5935] usb 1-1: unable to get BOS descriptor or descriptor too short
[  198.025768][ T5935] usb 1-1: config 160 has an invalid interface number: 218 but max is 0
[  198.034199][ T5935] usb 1-1: config 160 has no interface number 0
[  198.040643][ T5935] usb 1-1: config 160 interface 218 has no altsetting 0
[  198.049791][ T5935] usb 1-1: string descriptor 0 read error: -22
[  198.056226][ T5935] usb 1-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=3b.da
[  198.065689][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.483765][ T5927] usb 1-1: USB disconnect, device number 25
[  198.489899][ T5927] f81534a_ctrl 1-1:160.218: failed to set register 0x116: -19
[  198.498015][ T5927] f81534a_ctrl 1-1:160.218: failed to enable ports: -19