last executing test programs:

12.188392563s ago: executing program 1 (id=1782):
r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={0x0, 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x20084814)
userfaultfd(0x80001)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x185)
r2 = socket$inet(0x2, 0x1, 0x100)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r2, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67a", 0x2a, 0x11, 0x0, 0x0)
r3 = epoll_create1(0x0)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0xa000000d})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000040))
sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x8000)
socket$key(0xf, 0x3, 0x2)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}}, 0x4004010)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
mkdir(0x0, 0x0)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_int(r7, 0x0, 0x2, 0x0)
sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x18}], 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$RNDADDENTROPY(r0, 0x40085203, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x1002, 0x0)

10.84980039s ago: executing program 1 (id=1786):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12b383, 0x0)
mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000100)='ufs\x00', 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x14, &(0x7f0000000040)={0x0, 0x0})
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000000580)=""/102392, 0x18ff8)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007400000000b1800068014000400200100"/168], 0xac}}, 0x0)
signalfd(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, 0xac}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020001000003be8c5ee1768810006c00020100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880000d6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3da400001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500394100000000000affff02dfccebf6ba00085d024f0298e9e90554062a80e605007f7117", 0xb6)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000005240)=ANY=[@ANYBLOB="12010002020000202505a1a440000102030109023b00010103300009040001020206000f0524060000052400e2000d240f0151350000d90b01040b0905820200000309d709050302080007ff67"], &(0x7f0000005380)={0x0, 0x0, 0x0, 0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x38, r6, 0x701, 0x0, 0x10, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x4, 0xd}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8000000}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x10b0}]}, 0x38}}, 0x0)
sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20048041}, 0x4040)
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)

9.832167079s ago: executing program 4 (id=1789):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="24000000021401006abd700002dcdf2508000100000000"], 0x29}, 0x1, 0x0, 0x0, 0x14000801}, 0x40810)
socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000300)={'filter\x00', 0x0, 0x3, 0x0, [0x4b62, 0x93, 0x3, 0xfa7, 0x5, 0xfefffffffffffffb], 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x78)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000002c0)="b9800000c00f3235010000000f3066baf80c0f2337ef66bafc0c66ed66c0bdcb945a0878f30f09b9830300000f320f01c80f3235002000000f30260f0174d48f660f66cd65650fa34cfe06650f00921a4c3c17", 0x1b}], 0x1, 0x43, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000980)=[@text32={0x20, 0x0}], 0x1, 0x51, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa97c4864ef7a30800490000240064000000879078ac1414bbac14140c8907efe000000d860600000000000000"], 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0)
read$midi(0xffffffffffffffff, 0x0, 0x43)
r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x102000000)
r6 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x200403, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x121441, 0x0)
ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x40187013, 0x0)
socket$isdn(0x22, 0x2, 0x25)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x4001100, 0x0, 0x0, 0x0, 0x0, 0x0)

9.830596829s ago: executing program 2 (id=1790):
r0 = fsopen(&(0x7f00000000c0)='ceph\x00', 0x0)
setrlimit(0x1, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$uinput(0xffffff9c, 0x0, 0x802, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
setresgid(0x0, 0x0, 0x0)
fcntl$getown(r1, 0x9)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000d00))
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5d8, 0x0, 0x2f8, 0x420, 0x1b8, 0x2f8, 0x508, 0x508, 0x508, 0x508, 0x508, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x3}}}, {{@ipv6={@mcast1, @local, [0x0, 0xffffff00], [], 'dvmrp0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x36, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x100, 0x140, 0x0, {}, [@common=@frag={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x2}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x9, 0x9, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e22}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @mcast1, [0xff000000, 0xffffffff, 0xffffff00, 0xff000000], [0x0, 0xffffffff, 0xff000000, 0xff], 'netdevsim0\x00', 'erspan0\x00', {}, {0xff}, 0x26, 0xc8, 0x1, 0x22}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x101], 0x2000}}, @inet=@rpfilter={{0x28}, {0xf}}]}, @inet=@DSCP={0x28}}, {{@ipv6={@remote, @mcast1, [0xff000000, 0xff000000, 0x0, 0xff000000], [0xff, 0xff, 0xff], 'team0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x87, 0x5, 0x6, 0x10}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x8684, @ipv4=@local, 0x4e21}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x638)
read$FUSE(0xffffffffffffffff, &(0x7f0000000d80)={0x2020}, 0x2020)
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000300)={{{@in=@broadcast, @in6}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000100)=0xe8)
getegid()
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
openat$dma_heap(0xffffffffffffff9c, 0x0, 0x22180, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000003000), 0x400201, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003700), 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xa5f]}, 0x8, 0xc0000)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

9.452180531s ago: executing program 2 (id=1793):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000400)="9acd0b1b568c4c2d7b14c2a6ee3c000000001a8681ed39", 0x8}], 0x1}}], 0x1, 0x20008000)
setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28)
socket$netlink(0x10, 0x3, 0x9)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000022c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797ad00000000014000000110001"], 0x7c}}, 0x0)
umount2(0x0, 0x1)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r3, 0xffffffffffffffff, 0x0)
r4 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20048810)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="0201"], 0x70}}, 0x0)
sendmmsg(r5, &(0x7f0000000240)=[{{&(0x7f00000002c0)=@generic={0x25, "7b82316a9a9375e9f7b9bdd0b893f2de58230bc6bce99667321bd1582a105e5d864e159102662ad7e45c8d25a59cd653e34b6795ad9debf867ed1e78fa217f49302e170e4da6a9debea210efaa40180af747cf251e9b2937c440a31a07288355b0f1aa045d06565ac64a093a947dcbf09e6bff457af405e737552447466f"}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000140)="69aa5927303b37fbf37284e15fa2bc5e75d5a4c61cc224b2c043f1f29b0f362eb022f1894b9951996e89a0a3d02c711a", 0x30}, {&(0x7f00000005c0)="1f774f1bbe3c568acad679e8a61ba3867aa724b90487843b6029512a05a9be3eedca52e83e1854800b734123effec574ee62c4f696764a8262d7feebc5383e6c0aeab2028a6da479ad09a7dd726e1cda5dea9fd510f77fcc77ed8fadab8d779e41eb3dba5222a7407fa90e69d3c6fe3b783a7be91d8e8c2678f5cf4aeb216cc36bcb1ab5f743288241a54cb44a8b2b0fc5d7d62544000532f7743d3ef408d3269415292ee92c443d69d21e9059c42ab939992e03695851cd0c888098a790f74ac987be9a0d29c5bdcd174542ec3e6024856d92b947e381995d5d33c95aa66416f029a99a50e77e4edd2fafc6585d26bef955675efa6384d432", 0xf9}, {&(0x7f0000000380)="4371670e92922b882dea08e06c65c0f5773424f58a82061195109754cfc12e3ca83dd9477931c15588c4e3b6d902a4ce808454a05f1584fbc7cbb27f662e924eb3b1522cf177348b81d0e70534af5a1901dc8aba4a01fea38c91c04e16043ceaea5cfb9878c2229804ff9e5d71056fcacbdbe56b0191c53d847e", 0x7a}, {&(0x7f00000006c0)="2f6c0dd7ef49b3e4df7dc40af4adec44ca3b3f71ea87455283623ad17302b228095ed7f3ae3d7d44a3289ff4b14fe4d9751490c21bba2f408366713953b9fcfc374a5d3bf72bb007e8e24e57c7f1c53251a47fb1d8693d270f6fc5541c355db01ad5c5ff267c4d40881deaaab6479b71535be67ff1fdaf1b1dc58eb5a6b62d4f18f4655b3b56b5d4d9ef9ad4a7e50102a8d3db03636b9bb8655c4775be80b6e336d10b560699c288971ef3d89c18bd406dd75ea553960178b469bd49fb49c5157bbe034355291abd223a37bc0bbca51a7565c0fed6a2dc788ac9cdf90a718ad5612074f1ffd6a9329a1c", 0xea}, {&(0x7f00000007c0)="1b8b2490ece3068de276409c7b2720883afe86c32f7473891ad236547a0356d9fe39452c535b0c9c633715a9d5133a54770fc343b50077b05691300485eca775ecb0bbcfe7d0460f899b67e3783897737dc7d26923bf1d39bafb1a7e3eb994e19338a60aa01e233932a4ea83d1ffdde3ee69bb029b90a01d9bd50842c566097c9e7702fdce20512a36412417ad62ebafe83e10ae914fef521891c4454baebbfae41fff6da84e2a86f48f4f02dc59f22574f18983417b6bfaae352277ff6a713b7c4ecd2879be49b62b1e2f1a5066d75a35751a74373105096a872a214fbaa4c84926", 0xe2}], 0x5, &(0x7f00000008c0)=ANY=[@ANYBLOB="f0000000000000003a000000ff070000ef4020f0a93165e5356ea313f7b802eaddf0965698a815f5602c38acb2cd7736eb4d53cc9520dfd55ba802f204eb043e14012b91b0f9c72979e7ba4f42ce09586468d77a060c5ec955af4a3556e4225aabbf1e5db7dc016aa1922fa8127e68c403b4f8bad12d42a8015d8a7c7d3835d1efcc4133ee9b03a5bb8ddfbcc337c2b27e681218780d6ced17836847dcf38ad03233f6410d7a2763ed596b7c96d90c2ec68061d5c2cf8ea87ae44db6a2133b93c1b4243f536ba98258152ab6850174f7e15749cae4455636fc7731513320e4eba7422e02f253d537d645913d5386a799b800000000000000ff000000060000004d05fb1c1ef5a7c8765ab62203b886a4efb005615bf5983ee92a9d53b620e8fc5fbe54db7f41e29813fcf30d9d009d9acaeb89b538b8cd14c1a1ad9f42d87df84b2c844ee534775924b272e9b7e04d1011c03cff34c954900700d50523e2e79b21f20b4d8bae73dace9779dcaf3a41df78172e6155ad2f0cdf934eb6b3ab9c3bafeb88f599f3e993a1dbc05e10b9e89ed9b19d05733358b2fcb6a777b5d5db1007e3139c35fbf700"], 0x1a8}}], 0x1, 0x404004c)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r6, @ANYBLOB="14000b000040000000000000000000000000000014000200fe"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80)
syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e010000084101", @ANYBLOB="32d33c1f83223027407a18c82a49a7cbcb4191"], 0x0)
write$binfmt_aout(r4, 0x0, 0xffffffdb)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94)
syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00')
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = eventfd2(0x0, 0x80000)
ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, 0x0)
ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000000)={0x7c, 0x3000, 0x2, r9})

9.369905521s ago: executing program 1 (id=1794):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000240))
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
prlimit64(0x0, 0x5, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x5, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x12, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x4)
r5 = socket(0x15, 0x5, 0x0)
getsockopt(r5, 0x200000000114, 0x270e, &(0x7f0000019580)=""/102393, &(0x7f0000000040)=0x18ff9)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r6 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r6, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x10, 0x0, 0x800000, 0x10000}, 0xc)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="60000000020601080000000000000000000000080900020073797a310000000005"], 0x60}}, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0xfe, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000000000000000004000000000060000000000000001000040"])

8.264239868s ago: executing program 2 (id=1796):
ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x4a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x0)
r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000240), &(0x7f0000000380)=r2}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0900000004000067178345000100000000000000234199ebdf06984ed1c5c8ec3ffbdc577610cd21df3bd100a210cabf281942b8ec3c9a7f24b00e", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001000000018110000", @ANYRES32=r6, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe00}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x3, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x3, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {0x2}, {}, {0xffffffff, 0xfffffffd}, {}, {}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x80, 0x0, 0x0, 0x0, 0x0, 0x400}, {0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {0x0, 0x0, 0x0, 0x8510}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {0x10}, {0x5}, {}, {}, {0x200000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x200}, {}, {}, {0x5}, {0x0, 0xea25}, {}, {}, {0x0, 0x101, 0x0, 0x0, 0x3, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x1, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6, 0x0, 0x0, 0x0, 0x1}, {0x7f, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x2, 0xb3a, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2, 0x0, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x8, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x2000000, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000, 0xfffffffe}, {0x0, 0x80000000, 0x0, 0x7fff800}], [{}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x4}, {0x5}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x7, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0)

8.152884551s ago: executing program 0 (id=1797):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2)
clock_nanosleep(0x8, 0x0, &(0x7f0000000280), 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
io_setup(0xc, &(0x7f0000000180)=<r2=>0x0)
io_cancel(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0xfff2, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0x99cb1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$dri(0x0, 0x0, 0x0)
socket(0x2a, 0x2, 0x0)
r5 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2)
writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000080)="02", 0x1}], 0x20)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
r7 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r8=>0x0}, 0x0)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000000)={r8}, &(0x7f00000000c0)=0x8)
r9 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x90}}, 0x0)
ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x8, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "244cb303"}, 0x0, 0x1, {0x0}})
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
open(&(0x7f0000000300)='.\x02\x00', 0x14927e, 0x44)
syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)

7.202713282s ago: executing program 2 (id=1800):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0)
syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000680), r1)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000012c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001280)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57)
sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r1, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
sendmsg$nl_generic(r0, 0x0, 0xc000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000080)})
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x9, 0x34, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
socket$inet_udplite(0x2, 0x2, 0x88)

6.134667764s ago: executing program 0 (id=1802):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a5000000230000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r5, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x40000103})
io_uring_enter(0xffffffffffffffff, 0x46f3, 0x0, 0x0, 0x0, 0x0)
write(r4, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000280), 0x240000)
setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000240)={0x1, 0x4}, 0x4)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000008c0)="d8000000180081000181f782db4cb904021d0800ff007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5a02000000ca9ec855eff0eb3f365d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505dba36efab70cdb67e8d1cc5c7b06b1eab31f7b05da962834cedde6fdfcf45add8e51ff159ca9680d0", 0xd8}], 0x1}, 0x300)

6.022067881s ago: executing program 3 (id=1803):
r0 = fsopen(&(0x7f00000000c0)='ceph\x00', 0x0)
setrlimit(0x1, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$uinput(0xffffff9c, 0x0, 0x802, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
setresgid(0x0, 0x0, 0x0)
fcntl$getown(r1, 0x9)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000d00))
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5d8, 0x0, 0x2f8, 0x420, 0x1b8, 0x2f8, 0x508, 0x508, 0x508, 0x508, 0x508, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x3}}}, {{@ipv6={@mcast1, @local, [0x0, 0xffffff00], [], 'dvmrp0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x36, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x100, 0x140, 0x0, {}, [@common=@frag={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x2}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x9, 0x9, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e22}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @mcast1, [0xff000000, 0xffffffff, 0xffffff00, 0xff000000], [0x0, 0xffffffff, 0xff000000, 0xff], 'netdevsim0\x00', 'erspan0\x00', {}, {0xff}, 0x26, 0xc8, 0x1, 0x22}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x101], 0x2000}}, @inet=@rpfilter={{0x28}, {0xf}}]}, @inet=@DSCP={0x28}}, {{@ipv6={@remote, @mcast1, [0xff000000, 0xff000000, 0x0, 0xff000000], [0xff, 0xff, 0xff], 'team0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x87, 0x5, 0x6, 0x10}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x8684, @ipv4=@local, 0x4e21}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x638)
read$FUSE(0xffffffffffffffff, &(0x7f0000000d80)={0x2020}, 0x2020)
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000300)={{{@in=@broadcast, @in6}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000100)=0xe8)
getegid()
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
openat$dma_heap(0xffffffffffffff9c, 0x0, 0x22180, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000003000), 0x400201, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003700), 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xa5f]}, 0x8, 0xc0000)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

4.939294969s ago: executing program 3 (id=1804):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x44080)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0xf2ffffffffff}, 0x4000)

4.772819434s ago: executing program 1 (id=1805):
socket$inet6(0xa, 0x11, 0x7)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42)
ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000c80)={r4, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffc]}})
r6 = dup(r5)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc2c45512, &(0x7f0000000500)={{0x8, 0x2, 0xfffffffd, 0xff, 'syz1\x00', 0x80000800}, 0x1, [0x56, 0x4, 0xa71, 0x4, 0x10000, 0x4, 0x0, 0xfffffff7, 0xfffffff8, 0x2, 0x0, 0x80000001, 0x3e, 0x10001, 0x1ff, 0x8, 0x70, 0x1, 0x8, 0x7d0f, 0x6, 0xf, 0x9, 0xb, 0x8, 0x3, 0x6, 0x0, 0xfffffff7, 0x3, 0x1, 0x80, 0x2, 0x6, 0x9, 0x100000, 0x40c1f881, 0x29b0, 0x1, 0x1d, 0x6, 0x6, 0x4, 0x8, 0x6, 0x6, 0xfff, 0x2, 0x5, 0xe1, 0x6, 0x3b233bf5, 0x1a, 0x81, 0x9, 0x4, 0x9, 0x10001, 0xc, 0x10001, 0x7d60, 0x64c2, 0x1000, 0x6, 0x81, 0x6, 0xfffffff9, 0x80000000, 0xd8, 0x6, 0x1, 0x9, 0x1, 0x7, 0x4, 0x10000, 0x5, 0xffffffff, 0x1000, 0x8, 0xd49b, 0x7f, 0x4, 0x2, 0xffff8001, 0x7, 0x4, 0x2e8d, 0x2, 0x2, 0x5, 0x800, 0x3, 0x1f, 0xffff, 0x7, 0xa7d, 0xfff, 0x6, 0x2, 0x1, 0x5, 0x9f0, 0x4, 0x8, 0x80000000, 0x2b5d, 0x8, 0x8724, 0x800, 0xffffffba, 0x4, 0x7f, 0x10001, 0x2, 0x5, 0x9, 0x6, 0xff, 0xffff, 0x73af9db5, 0xa4c, 0x6, 0x9072ee6, 0x5, 0x3, 0x5, 0x9]})
write$UHID_INPUT(r6, &(0x7f0000001c00)={0x8, {"b0476b76ba5d044f65271519727e4ff1ff0d12c0e6bdf3ea1f52e24f60ca698457b32832b83d7e96694c1feb5809bd67002f71e0b97c0d5270c04ffa64f63b2e18ee4b7b572fe2f4d03cad38bcd106ff12f53b443ac6fc81da518f54b9004a44859529c07a2b1b8feddc0180a0f37b13babba1dd0813b7ea56dac4b7ffe9a2ef54221439ecc55223ef2d40f4ba8108c10387ddffbaed25d41e7692bf26ddfa747a666caff49843e38c86cac7323f784a17df6beaa49c3f4a98fb4013f4e573e2ef77b0965d4bfbdf7d5eada69406ca93f422495e00addfca1518085a40f10284ff59388ecf476a12ef1a540163922098d600519ae8cf3ef544344e9d968f341af618503b455f3976b76975270e94d714302382c63de5b7c1fad1fa373b369916cb3b4d583a9ebbaeb262884d25a0e1d9fb141de60df7e64cb38b6f7167991f8fba06bffe2d49133bbb462cd8a9493177eee5f03875b15c7a92c3cd6a3fdfc64f236e14fa05a0e8d3c45f13eecd22e13528c74186dc50e0e2af44177e26bded1161e5533375508dadb83db5126cc810f4e30d4e24ec12c3b99e5220aacf42c58f2960bd43c337dbd318aeeb5c9a6cd5ffd3bf1497bb48ab7bcb32c9c33c9f5b9bc4645b96f23f9e0d826b780030444ffb925f55df587ef5ca5ea74ccd66afc7981da496d6f037efbb0b08f3f5078c60ffb4db18d1b59996bd9b1513442785bf4ece8587b39d8176dc9c735d5ea25133b2053bba227b81faab7220326f8814a9df4eba4ecc6acdd82f70b653b56a18cc9dfa4deb0a112c797ab89a51a103c3a9085d828523370c4d79d9484f4dc910735a2c9b5b85197cd9c073df7a54b40df8e1bf595bab957900c2a1a7dc40e88ed0c55c362ffbb7f88a0725a6ae73b936a639e951faf9c45ae74a2ece2f6f88e425ee41d2c60cb083a2fd6d07381908a7f629e32f89a553cf0794f54b8bdc7bd541d88464a4f80ac0b8b625a803a55de4b05a95fc7f8fc3d6d79858ccb269b7b8b21657654164a9aa29f4e8462377e9d234a41ea69841a4aaa1e5f89f9b074f6f71cb1ffaa450c3160b0e319ec81ad30101db66218b0c69f97c234465dc45849fcfd62d396f2b50ddcc0ed7dd8651431534232ab6d1186d7760770a1fc6c77553a79d0297194f794997ee47781094a76d9dccf632dcbb527b3e68950d9bb534245c7f08ae1d6ef2750292ae28e5e6dcfe2a69737dd7a1e453f3902ae90789e98c212905422099904d3bfb949bde187682a59c01aa8e6a9972a63d6aaef4d4139b10a24e063707f1aba79bd59e3f9709a873dff401d1f356c4be5e449ae0e2633a1fe50ed367fe56b0499957c3b6cabb42256547995ea998f3937d153897d1c83f1ad922d6835bdfa3b986dc6f4bd927a4ca13fbaa99b7b43758e2329d588f40fac718b16cca855468643f3818496b4915fe9a2bdd3e68889fea24bc1dfa6287a801d49a7bb84654147448550d2919e4df3a943a88cf616befea4e7a4fddb7969311c6837f9529966241be1e57ed2d773debc542986d09866905a3f63b6e1820086d52a70f039154e839da7ea852c33bf3722a048f61bbf068519e050b8788370fb130a42e9f5322dfff65b15d588f9e926b70e4530e8b66697cabb1e8514831431fa0eaecb49f9613ed5fd7bc50f897bda36d24d4296e143e2480e325ec09a77c03a07b4f86eb703085313ebeee94ef5b1cde3f6a7efd785772eb4034039f598c07819b769416a223fab824c4ac50086e78042a1ccf47b6c7ede8540cded4bd4c920ce6c2b7493a5634c5e96bb761373623ab473b121d555bfd5a8bc3f5c5418bed83ffd0d6492840550fccc0c35746370396d0190b7b1d2cadcc150877e0d197f692f97cec790c95e3d3959dc7c68aca37306c1bc13ad33848395dba5e3c9ce8090bc0e7e8312091773641be56411921e3d473321c6d8bd10b7d3f5aedd6620bcaa06474bbb298bc77297b8b5dcb9e6b33dbe676460cca825609857724cee245306d07fda287d5fe57c424c27cf9b6cf0f16d2c6a8071bd57c826d7371841cf43dab1b42421ce416d0d3a9c80bc807d2e6761e53f06b3e63c0af1b4548d820118421205f040f4ab35307871e4c7a21ff28082c29e02e89486064661898c0eb1811c70a6124c1f25d62c38794a3e87c312c870db7b60d0df8b57860c94d1a9c561b327fae3a68ce9ff4551e418eb00766f0341c5e796e3cbbbe6b4864928b966110256d5475eb1fd7b2893b60e19e859baaf23c9233a1b064771671ee2d07c151e2e99c37a116a338788052a726a8519b8335e9ff4f71d00ab634543c20ddea1bf57d4f2b797182ff19618b6974d2b69d9f052934d527a1830bf2785842f35eaf32b65b7c9fdd6f0c41756072a59c0cce0b7305740729f1daa14e0092da9d022321b726d658fcef55affa2bbf36ad788f1f423b7dfd328435b4d5df315143d8b8028ba4bea6134a3dc9720c73d5e66b8b8168752eea6b78c75f04efd9677dbe419f13f5e1c9764276a83821b710307d8f85359b34d038ff17de45e8739d4b647fd1a8d794a3273d922af3374f5d3c75b8345b9dfdabb2c0418a358921e0e73d0fe88caab1741b913673e22ff4b59afa0f653a423d9b2bb20cbf07951a349eea18a891b4f4dc6df8e42a6181284f643de5fd2924ae54f672a1920343476c67333e1e8205bf4877b1251a83f417936714edb1c6975ba7969d2fcc2e69024a4669ac2f998116ade1bd84568b8f3f1fccbe95df9ed21db77315b7469f30bfae418415d9cb5aeea627ba6811e30d56d4f4bfe5f794ea4243e3cdfad3ef55199699b8433083b6f72f95effc5f2f613cfcefaf0b94e801ebcb7095a1474ee93142b82c9bf9886617b6bf69d08c83c76cd21d4cce5872d99de8e54bbff915ab923b2d24bb3aa178dd50b44fd0eb880ef33ca51d4bf5f0fbc8ffe18afe4245397f277e4efad955baa10cf56613481253d69c02e7661714b68be0fd64f29bdafbc8b4a0b30bd6709c67fe8e8915d0479b3902b1d0169fb5486b02e966ad5d8a2bcf42ecba59177cd85e17239667f6b045d1f873ce24733ae17e2d8432709062e786a32ac925121f1b0d46c66d4fb9088f4aa0cfe2149f6c2cb5b75d45349bc88fbd47e01ea07e7cd573335aab8d389846566800dd084bc3caa95f7632719c651f2d33be0fb56347c063b3c6e3e75c5e58caeb4c37574859b78c1ed018fbeed788a4305a9ee1c1ef65a0c83a7cd717a8c08ecd4e86370ffffd6d40a89a0b1e8c15a10ad5406e867e49319ad83bfbb925d5e240b4bd44fd751e7510d5ea03a6cab95f37155d1fd69aaea1db4a1f53714eb90e669209cf634f84a50c85bdc51838ebbb545b4387790df67f0122740c2abc910cf83230394172a56c9ffda6675bb8bb39846730a1bf764aeb92407c90a194da880cb8a4efb5b57a8311d864209c7fd226b93582b6b11eec559abfbba653c0569c219d3a2e60555cb739f9d32d564f23c4e98be78aa553610822af426f961df0df2185c61ccaa22b2a6aa6fb3e917bdfb2be9c3ffb8a50821321119c4cf4917db39548abc17bfba267fa50f6af15c560a21055f967f1ca6f656ddb556f9c7e17a771eeef7e80940d1c14ddf2c27647686fd0526460036aeea395fb10abef2be2ea96c9bb380370c08d1568d30eea0f3e6b7cf8f7edc7b36d4d0affd249330707b54ee620f208d885791171eb67a25a80fcc6922e0258c9673b6576564949dfa5bed9a0299bf952aade654de16e22d54fcd391ded6adab94ff621efcd91ef69acf8dfa1b22692ba3e49cd1d3fbed6db1402065ab37e457056877977ebac33ef566f28a19b9acb67a9cc53feb156814e880b3dd5a9119ffdbc5a45c20ea375f2882575b9a28740eebf63f2895d9ffac1ec33cbdcdede98a201424d000df1efd64dd7268cc1b2366ccfb09754822dafdb1821de5e6ebee09608e82e679fafb7a5100172f26998d31d7f27c2b310f0372c3b5e888f8e6efb56074177bf6a2a5bbd9ed070ad5aaf23ce144d1ac86cad110e5916a8a57e1e7fc3d37353f84f2f6d43d92ab8b35040467f3f8b1d23fac021bbac3710edc8e2e26d794db38e48020f63e94d4b4dca3e015537a8e3008274d55f81af931a0faf1a438444b6a0489b93f7b88f81f761eae0f82e60cb0cf2745ca8c9e30d3cc189c1405b1994ed71b00d90ea7a94102916cdc915620c363d04e51eabaaca6c2814a7c1e7aaeec80bdc13135b813e6d0eea83446a5c57ec29695c302c0d8da65b61fe8ada51a36e1aff34d449f9eb70cb94931226121ab121a971c2fc070ca84272d122c1696f52fbd5ed06783abe188dcf133c4d41e10295f6ffda69fa8c5a7c0fec3425a2d60523a60d280b5ce34eac5911268172e772fefba63a6f5c6dafa9e500a5e1355fb614613f8fc1ef5e5466fa19212bcdc349a865f4cee6ea80b11a410bb6e4ad677393973e38621d25ff6c4876ef8a8d2ba651be4a78d2ba9fafadcea8eff9cca3f4ab71a0b84917794e521220dad099ac8aaf32abd162348879e4299e4d46395f9d55267b635e18ca2e2fc96146b96c8a8055130b8d8cb10cc31382df34057bd8637f86e48adc854af408226752a04df8d0362db263e0959f2bd7e8a4d33a8c4b257e19d308280baf40cced1b3cd3a86ee22df0da49d750539eee1104e99a9f8a065e5499c73125a8a8430eda7aee156821a97c237611b50f682a2cccd0969304f0a50ae98800dfb32ee1bcfeab98182c34a51e67fa5bd738c22c44fc1269ce73f464edd2f31296e92e62df51cf55798ae2e3c33c57b09f4ecd13469122095a3563f95f0a04cf58dcea4aed5e8bdda7617863cbc37a97ebadb46d679f7e30014d96d0ac7ce9484368fa5fd19cbc3d139410a2bd7ffacef1bdf76dd1d5f34d2392fcb91c7585fc1ae7d8ba2aa8ded9645d5a5e76e2279b6e0692101137da946dfbd3836476f5dad7fed70115d716dce87b5ad755e5653a709f5aa42265ec9657ed406cc9256af3628c0116b8e1d23306983e9adbc19dec354870c98e2e76566895df933a80c4c36b617db4bbda1a4ca7d6c80a43734471fc92d0bdeacfc125dddd73febd8f7ef84f221d52ae71372cee802d59013a15958e850f8fdf46d8fd3b874633daf3b1f346470456c05722258480959dd6afcffa1f3f2ca033011339c5cb85b7d1c9b5916fb8dc9c2783df64eb5cca5af83a74fe5bb259f93722842eb4ac851e71f3cfd67a39590e7f8e20f018744b9277e6eb46b5f211df5f767ef29dc9a972e14c40ea2d4624f187f301c1116d3a61adeb5c6f7ccc021ac5e18d8b40d7f1f19daf4445c06e72db8701c267c0144c92cddd49af7a87aca5aa05d0e380dd27cc780d2f7db3bef26cc4fd358543e19d73179b879f7bdc702ab405270c93a3ed64153e20b5b663773a2ad4e8e3e1e8eaf39ec80d75d02f74ff94f0e095240a564eeece4fc9bcf19bf2243c700e1dae14a1b0217013977bfa05f681abc37714fe462d0a632044ce52fdaa1c1a806b1eb4370e23ca0247e536165aa9f1c2af8adfea369ee1f4a2c7823a7baef028a1e77501db48db6aa0d7e30969f7197368db02d443803b53b2899315f7e2ba9c5ae952a3866b4ea60f3d669e0a91f7ef640cd938646bf8822fe455f0302fccf87c7fad6daf38fde038fa596b83a9fd5bf675669a6cb2bab44c6617f07950bf34edb93bbcb4174630f275dbda7a0631c4b456e5f80eb6258c1874e77d426743e478917fe44b73dc203baa2cc442b84b5818409abae99d97a28754969bd393df", 0x1000}}, 0xfffffe38)
socket$inet6_tcp(0xa, 0x1, 0x0)
keyctl$setperm(0x5, 0x0, 0x220c)
add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000000c0)={0xfffffe00, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff)
r7 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000200)='source', &(0x7f00000002c0)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x02\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\xda\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xa1\xc3j$v\xefw\x96/\xff\xa2\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00', {0x0, 0x4, 0x0, 0x2}, 0x4f, [0x0, 0x0, 0x0, 0x0, 0x3, 0x6, 0x0, 0xffff9519, 0x40000000, 0x0, 0x2, 0xb, 0x0, 0xfffffe00, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x40000, 0x8000, 0x2, 0x3, 0x3, 0x7, 0x0, 0x5ff339ba, 0x200, 0x8, 0x0, 0xa345, 0x0, 0xa, 0x0, 0x1, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x1, 0x800, 0x0, 0x0, 0x0, 0x8, 0xf, 0x3562, 0x69e, 0xfffffffe, 0x0, 0x0, 0x2104, 0x0, 0x200, 0x10000, 0x1000, 0x0, 0x3, 0x0, 0x3, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x400000, 0x0, 0x1, 0x6, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x1, 0x100, 0x1, 0x3ff1, 0x0, 0xfffffffb, 0x80, 0xfffffffd, 0x0, 0x4, 0x4, 0x16f50, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0x1000, 0x4000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x20000000, 0x0, 0x0, 0x6], [0x0, 0x707, 0x101, 0x0, 0x7, 0x0, 0x6, 0x0, 0xfffffffd, 0x53, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x9, 0x10000000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x483534d7, 0x6, 0x1, 0x8, 0x6, 0xd, 0x10001, 0x4, 0xfffffffd, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0xc4, 0x10000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, 0x7, 0x1000, 0x3b6, 0x68, 0x2, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffe, 0x1], [0x0, 0x0, 0x5, 0x200003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, 0x2, 0x4, 0x7fffffff, 0x5, 0x0, 0x0, 0x5, 0x48, 0x0, 0xffff, 0x4, 0x0, 0x0, 0x0, 0x81, 0x87c9, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004, 0x0, 0x0, 0x1, 0x10000, 0x9, 0x101, 0x7, 0x0, 0x0, 0x40000]}, 0x45c)

4.652535432s ago: executing program 0 (id=1806):
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x4)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, @void, @value, @void, @value}, 0x50)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', <r2=>0x0})
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4)
r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x60)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_buf(r5, 0x6, 0xe, &(0x7f0000000040)="7d7f643e42", 0x5)
write$UHID_INPUT(r4, &(0x7f0000002140)={0x8, {"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", 0x1000}}, 0x1006)
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='\x00', 0x89801)
fspick(r6, &(0x7f0000000000)='.\x00', 0x0)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xf, &(0x7f00000000c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xbb}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_fd={0x18, 0x3, 0x1, 0x0, r1}], &(0x7f0000000140)='GPL\x00', 0x81, 0x29, &(0x7f0000000180)=""/41, 0x41000, 0x20, '\x00', r2, 0x0, r3, 0x8, &(0x7f00000002c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x8, 0xff, 0x101}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r4, r6, r7, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x800, @void, @value}, 0x94)
r8 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$nfc_llcp(r8, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x4, 0x0, 0x3, "e88509de7f1939e8abff005597c8ef039a5be42200", 0x28}, 0x60)
sendmsg$inet(r8, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4008000)

4.651551403s ago: executing program 3 (id=1807):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0x2284, &(0x7f00000000c0)={0x0, 0x2083, 0x0, 0x0})
r1 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fffffffffffffff, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) (async)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="0800b685f75b000200fc00ff05ffdf00da8075392313db00", 0x18) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async)
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) (async)
ioctl$sock_netdev_private(r8, 0x8914, &(0x7f0000000000))
r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r9, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x0, @bcast, @bpq0, 0x2, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), r10) (async)
sendmsg$IPVS_CMD_GET_CONFIG(r10, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRESHEX=r9, @ANYBLOB="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"/268], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4810) (async)
r11 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r11, 0x890b, &(0x7f0000000580)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x2000, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0, 0x8, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})

4.452304361s ago: executing program 0 (id=1808):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x2, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x2, 0x0, 0x4, 0xe5ce}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8100}, @TCA_MPLS_TTL={0x5, 0x7, 0x1}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0xffffffe4}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x24008041}, 0x10000880)

3.768522952s ago: executing program 0 (id=1809):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x25, &(0x7f00000000c0))
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1})
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed00000001090224000100000000090400000303000000092100000001220500090581"], 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000200)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, @val={@void, {0x8100, 0x2, 0x1, 0x1}}, {@ipv4={0x800, @icmp={{0xd, 0x4, 0x0, 0x5, 0x3c, 0x66, 0x0, 0x9, 0x1, 0x0, @rand_addr=0x64010101, @broadcast, {[@ssrr={0x89, 0x3, 0x5a}, @ssrr={0x89, 0x1b, 0x83, [@remote, @multicast2, @local, @local, @remote, @broadcast]}]}}, @address_request={0x11, 0x0, 0x0, 0x101}}}}}, 0x0)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)={@cgroup=r5, r5, 0x2f, 0x2000, 0x4, @value}, 0x20)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[], 0x10)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000140)={0x4})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
close(r0)

3.559271699s ago: executing program 4 (id=1810):
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1})
r3 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={0x398, r3, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xc4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9197}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd88}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8000}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x671}]}, @TIPC_NLA_NODE={0x1a0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "5d0031d3efa79190b83a65167db7e0f3ffeb60cc14c7a86b"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xf4, 0x3, "f49fdacfe26111a8eaac198c70091afb2ac6089d1625a4e44327635b777f1e63531b770f88b17221e19073129cf4afd598cf0801731cb567c81435d020d012c5a60de1c5f75622d625e425413b4b8a63d1d84698cccce4acd678988ae47fbf466a5edc3cbebb2516b0a70261c8c0a70181ba6cd30d0fe0dae3ddc8b874a5555a8872753407674e50a95746439475597da28334283cf68e6620452ce698314bbf9bf027cdb42b551464d44ddeb91e52ca6a191822747a768f1572af6df50dc43708f351d227f895a3ecf5fe76b14f509bf385735e16670a3233dab9cf75c0878f477e141d6191147b1c897f8736f39cce"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "95be3ef8e5612445049a74d98fbc01c8c3f2cdc8423d187df2b6ba42d5d12cf677be57"}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}}}}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x84}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}]}, 0x398}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)
r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}})
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5, 0x0, 0xffffffffffffffff}, 0x18)
r6 = socket$l2tp(0x2, 0x2, 0x73)
connect$inet(r6, &(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x10)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10)
ioctl$VIDIOC_QBUF(r4, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800})

2.400336024s ago: executing program 4 (id=1811):
syz_io_uring_setup(0xd1, 0x0, &(0x7f00000000c0), 0x0)
socket$alg(0x26, 0x5, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050)
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
openat$nvram(0xffffffffffffff9c, 0x0, 0x121880, 0x0)
syz_io_uring_setup(0x6d9d, &(0x7f0000000780)={0x0, 0xbc9d, 0x10100, 0x0, 0x21e}, &(0x7f0000000100), &(0x7f0000000340))
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000100)=0x3)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
r4 = bpf$ITER_CREATE(0xb, 0x0, 0x0)
close(r4)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')

2.215244954s ago: executing program 2 (id=1812):
rseq(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
ioperm(0x0, 0x44, 0x7)
r0 = syz_clone(0x0, &(0x7f00000000c0)="e0d8e5e5002a83043b67e8dc2f143ef011151f86d5941a6b095016c4271feef2621bfff61e8d8e3126fd191061b8ae05b52c7967a116c0d4bd417f6c", 0x3c, 0x0, 0x0, 0x0)
dup(0xffffffffffffffff)
socket$alg(0x26, 0x5, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c)
ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000000))
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x1000000, 0x0)
open(&(0x7f0000000040)='./bus\x00', 0x311e01, 0x180)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = syz_open_procfs(0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
clock_gettime(0x6, &(0x7f0000000080))
mq_timedreceive(r4, &(0x7f0000000040)=""/62, 0x3e, 0x0, &(0x7f00000001c0))
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00'})
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f0000000000))
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000002700)=""/102392, 0x18ff8)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)

1.753975331s ago: executing program 1 (id=1813):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe(&(0x7f00000002c0)={<r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2000009)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x0, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00'}, 0x10)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r5 = syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = syz_pidfd_open(r5, 0x0)
pidfd_getfd(r6, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00')
sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f00000011c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001080)={&(0x7f0000001100)={0x84, 0xe, 0x6, 0x301, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x890)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
io_setup(0x200, &(0x7f00000010c0)=<r7=>0x0)
io_submit(r7, 0x0, &(0x7f0000000800))

1.573954763s ago: executing program 4 (id=1814):
r0 = fsopen(&(0x7f00000000c0)='ceph\x00', 0x0)
setrlimit(0x1, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$uinput(0xffffff9c, 0x0, 0x802, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
setresgid(0x0, 0x0, 0x0)
fcntl$getown(r1, 0x9)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000d00))
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5d8, 0x0, 0x2f8, 0x420, 0x1b8, 0x2f8, 0x508, 0x508, 0x508, 0x508, 0x508, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x3}}}, {{@ipv6={@mcast1, @local, [0x0, 0xffffff00], [], 'dvmrp0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x36, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x100, 0x140, 0x0, {}, [@common=@frag={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x2}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x9, 0x9, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e22}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @mcast1, [0xff000000, 0xffffffff, 0xffffff00, 0xff000000], [0x0, 0xffffffff, 0xff000000, 0xff], 'netdevsim0\x00', 'erspan0\x00', {}, {0xff}, 0x26, 0xc8, 0x1, 0x22}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x101], 0x2000}}, @inet=@rpfilter={{0x28}, {0xf}}]}, @inet=@DSCP={0x28}}, {{@ipv6={@remote, @mcast1, [0xff000000, 0xff000000, 0x0, 0xff000000], [0xff, 0xff, 0xff], 'team0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x87, 0x5, 0x6, 0x10}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x8684, @ipv4=@local, 0x4e21}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x638)
read$FUSE(0xffffffffffffffff, &(0x7f0000000d80)={0x2020}, 0x2020)
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000300)={{{@in=@broadcast, @in6}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000100)=0xe8)
getegid()
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
openat$dma_heap(0xffffffffffffff9c, 0x0, 0x22180, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000003000), 0x400201, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003700), 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xa5f]}, 0x8, 0xc0000)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

449.693942ms ago: executing program 4 (id=1815):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a00000000000000feffffff0300060000000e0002000000e00000090000000000000000170001000001000000000001ffdf0000030005003c00000002"], 0x50}}, 0x0)

340.527684ms ago: executing program 3 (id=1816):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xcb}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x44080)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x700000000000000}, 0x4000)

339.93226ms ago: executing program 4 (id=1817):
r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920001000109021b1901000000d40904150001da40df000905", @ANYRES64], 0x0)
r1 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x8400)
syz_emit_ethernet(0x42, &(0x7f00000018c0)={@local, @local, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x2, @broadcast, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={0xfe, 0x80, '\x00', 0xc}}}}}, &(0x7f0000001940)={0x1, 0x4, [0x8e2, 0x877, 0x35e, 0xb43]})
ioctl$I2C_FUNCS(r1, 0x705, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

259.601835ms ago: executing program 3 (id=1818):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000780), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) (async)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) (async)
openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async)
openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) (async)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000340)={0xff05, 0x4f34, 0x800, 0x9, 0x0, "5f730000a9003f00"}) (async)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000240)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="150000000000000000007ff4254d4f2409a52665ffff0010000008003950323030302e75"], 0x15) (async)
r6 = dup(r5)
write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) (async)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
write$FUSE_INIT(r7, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x81, 0x1005, 0x5, 0x3, 0x0, 0x0, 0x8}}, 0x50) (async)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}], [], 0x6b}}) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r8, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\f'], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r8, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x50) (async)
sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01fb27bd7000fddbdf2510000000e978ed95", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x14) (async)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32=r10, @ANYBLOB='7'], 0x20) (async)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r11, 0x6, 0x1f, &(0x7f0000000000), 0x4)

221.571843ms ago: executing program 2 (id=1819):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local})
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8f1, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xcf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x0, 0x7, 0x800, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6], 0x1, 0x400})
ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, &(0x7f00000003c0)={@hyper, 0x1})
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x2)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x7)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)

156.065613ms ago: executing program 1 (id=1820):
r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001200010003050000000000000a0900000000000000000000000000000100ffffee9e000000000000000000000000ffff"], 0x4c}}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
prlimit64(r2, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'geneve1\x00', <r8=>0x0})
sendto$packet(r7, &(0x7f0000000200)="0b03f6ffe0ff00004b68a9173b32ee04fe16ef85bd8fb5ed", 0x18, 0x0, &(0x7f0000000140)={0x11, 0x8100, r8, 0x1, 0x2}, 0x14)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000006900)="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", 0x101, 0xfffffffffffffffe)
fsetxattr$security_ima(r0, &(0x7f0000000040), &(0x7f0000000080)=@ng={0x4, 0x11}, 0x2, 0x0)
write$binfmt_script(r0, &(0x7f0000002040)={'#! ', './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x1002)
r9 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_JOIN_FILTERS(r9, 0x65, 0x6, &(0x7f00000001c0)=0x1, 0x4)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

146.752992ms ago: executing program 3 (id=1821):
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0x2284, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280), 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x60}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r4}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

0s ago: executing program 0 (id=1822):
write(0xffffffffffffffff, &(0x7f0000000080)="a204d2278115cfed425ec4f14cc889b0adad2a039446852ec2aafa2cc361a7074926fe9e790ba6a4a24be8d564958983774bed4ce81e3d061e7297d3cc62848d439e0d31e620b84ff675b61680606b640881d4ccbcb9111791b0bdd94c0a327fdfa5766e6a6cf802fcabd721201e16d3d9172cafc116e201d9a49335c7fb48a48058d2b1fafcabe6a952108d919803c2fd3fb770bf1f8ff64bc8e465c5e0a3f72f2be9f3", 0xa4)
sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="20040000", @ANYRES16, @ANYBLOB="000225bd7000fddbdf25640000000c"], 0x20}, 0x1, 0x0, 0x0, 0x8050}, 0x44044) (async)
sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000506010200000000000000000a000001"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x800)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a310000000070000000060a010400000000000000000100000008000b400000000048000480440001800b0001006578746864720000340002"], 0x248}}, 0x0)
write$tun(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="1c0000f5"], 0xfdef) (async)
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000480)={0x3, &(0x7f0000000440)=[{0x7c4, 0x7, 0xc, 0x9}, {0x1, 0x6, 0x8, 0x6}, {0x0, 0x0, 0x6, 0x7}]})
r3 = socket$igmp6(0xa, 0x3, 0x2)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000004c0)={<r4=>0xffffffffffffffff}, 0x13f, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000d80)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x3, @empty, 0x2}, {0xa, 0x4e22, 0x77, @local, 0x6}, r4, 0x6}}, 0x48) (async)
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) (async)
syz_usb_connect(0x2, 0x70f, &(0x7f0000000640)={{0x12, 0x1, 0x310, 0x1e, 0x48, 0xab, 0xff, 0x1b3d, 0x141, 0xcf64, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6fd, 0x3, 0xc, 0x8b, 0x40, 0x27, [{{0x9, 0x4, 0xdf, 0x5, 0x0, 0xbb, 0x5d, 0x2, 0x10, [@generic={0x8c, 0x1, "8c3b42b1cdf27f9c5cdb8aa611542ce81e9486f152d3ed32738127376ee5a28cb36c7c06cb1144386d43bda66885c5bd552275298e0a0f0f202059483b84f2384b2d26dbd7134efdbf5738d299affe66b2557c6edf932669e19920c275bf9b2e03a7a808ac35273bd111d98cf913f030ef5cd061da8702fbf68fd18123176304b39570291a8bcb897374"}]}}, {{0x9, 0x4, 0xa7, 0xff, 0x3, 0x2c, 0x72, 0x6a, 0xc, [@uac_control={{0xa, 0x24, 0x1, 0xfad9, 0x64}}, @hid_hid={0x9, 0x21, 0xeb0c, 0x3, 0x1, {0x22, 0x648}}], [{{0x9, 0x5, 0xc, 0x0, 0x40, 0x10, 0xfb, 0x6}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x3, 0x2, 0xd, [@generic={0xd2, 0xc, "bc64df7841f9e6f94ee6f96576d7d28772d82af40c626ea5efbb0ce45f348437fd56390df6f6fa4566f3645dfe891761689465a6867e5130d29370922e10eef4862b5d1cd554a80f2777c150de5fc6a79e5faac109141fcc444e87c4dc967255452e0d32451347e08fe45004c06f50ac120bcba80d95ef929e685c6b28b47331235fbfb3140a93787a18c5477665daa62948ce52bcc8bc1218b033db60b061252146394f39dba78556cf069c237bd00550d669cf4c3f43ca615ff243f4a78c5d875421c4013a1127ac3cd2a35bee1e9d"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0x0, 0x7, 0x2}}]}}, {{0x9, 0x4, 0x3b, 0xa, 0xe, 0xe2, 0xb1, 0x93, 0x5, [@uac_control={{0xa, 0x24, 0x1, 0xf}, [@selector_unit={0x7, 0x24, 0x5, 0x4, 0x14, "370e"}, @selector_unit={0x5, 0x24, 0x5, 0x2, 0x10}, @extension_unit={0x8, 0x24, 0x8, 0x1, 0x7, 0x6, '3'}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x201, 0x4, 0x8, 0x200, 0x6, 0x6}, @extension_unit={0xc, 0x24, 0x8, 0x4, 0x25c0, 0x8, "b4881a56c9"}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x304, 0x6, 0x5}]}, @cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "6d2ca1"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x1, 0x5, 0xab}, [@ncm={0x6, 0x24, 0x1a, 0x1, 0x21}, @dmm={0x7, 0x24, 0x14, 0x8, 0xfa29}, @acm={0x4, 0x24, 0x2, 0x1}, @mdlm={0x15, 0x24, 0x12, 0x674c}, @mbim={0xc, 0x24, 0x1b, 0xf801, 0x3, 0x0, 0xff, 0x400, 0x40}, @mbim_extended={0x8, 0x24, 0x1c, 0x3468, 0x8, 0x2}]}], [{{0x9, 0x5, 0x9, 0xc, 0x20, 0xe, 0x9, 0x84, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8e, 0x8000}, @generic={0xa4, 0x24, "d619ca95c92f4af058523b2e6ef6b3410330c3f6be35ae9ae780fc02d44c3b9a701cc7f8595fe0e6331c1d80fd50f062c42d4059530c96e72849aeaf5f8e5c97a8244285f81d00e6315237104389b50b380c714c3109382e491df914edab0f0cd906bbd902397d9905b517a209bd8bb8f3cedc1728580791adcce712c93aad7b91182ea08a2360988de3efdf980472171c7efbe3a5d5c9e74bffe3005d1cafecbc7a"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x10, 0x5, 0x9, 0x3}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0x1, 0x1, 0x40}}, {{0x9, 0x5, 0x4, 0x4, 0x40, 0xb, 0x5, 0xc0, [@generic={0xec, 0xd, "f165d09d9ff23779243bebae9f72e00e63ddb3888e80b6e1e3013e4cdd7d1a30c4fc79778cfd8934f570cc0864ea4a3dc057b00e463f6b2db0dc00bdf53eec5083b949e56d35618b27c4f6acacc982df06026b277b4488fcf816efe04935cd216116e7f61222e547c547b9bbd313e450598ed7c6e16e031c30d10a3122200ce1141b51e764dc90ba9d218bcb14ff10a019b8d3a94755c06e41a9ad1470f365707f84703a39e2eb288560c9a0b252ba4afd221526c2457840587317fbe4891e55c05a622492ae3707d8a4cc5024deab613e886d7ebf9e6fa566b088bc6cac21cf09f28ea8fa7a6ff597c0"}, @generic={0xe5, 0x6, "80f2427a3f0a28cd65968e1b4561ed83e402e7a1174a703e867be1fbeff42a8901515938407c8dca3af5935a66f1f63ea59a7080cbd384357b7f4a431905b973d11366a7b1260faa4287d80e718f050dc94565d5eba98289374459682e37d83e8a4fbc87df5ac20d77997ed64a3451578b424046d9522c4307473284643b171458ea27d619a47c74e2a13bcf15b99c942848e2a9665d7c11b73d4e3fa00931057d1515a436e4c63409b314c2af6f2e764f7bce8adab98c428fdf66a803a8f93490a946ab2e1d31bd8e13bdac66a8f50d2eef2d7e1e7a79d50d1db1fc2c28134b1255f3"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x200, 0x9, 0x5, 0x8c}}, {{0x9, 0x5, 0x8, 0x10, 0x8, 0x17, 0x6, 0x6, [@generic={0x91, 0x2, "bf269e9b16db11101d978f480b33c47f51a2321d8f8fd6d219bafe7538ed6f40f0ff06bc9fde82b82d13334f88bd07c3d4f376de3869fc0b8547194bee7cd71a53461901f082b758faed209ca8dc2a42f3000396adbb160b5fe4ad1105e019c3f727bc536a8fe5c44cb42838918ce4e7b00b0f15487c478c850dd6104da36f874dd6163a7ccead7c3a9024c37aeaea"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x9, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7f, 0xb}, @generic={0x9d, 0x7, "2f3dbddd41436433773183296382ebac4a792dac0a2d6f954c53565c80a377daba0904cd0b3f44b6438d111fe375940159aeb274ccc7f87a0d82e54b1bdee17b8ba1718aa732c5053485b3c7ff42686600f0bb7fd618b589f263eff708e3a54bfc83f3e8c3f104e0e8eaafe596c6cc98255100f4b792cf7bff8102df1b4343cef81851e7349c30f06478329eb657876c63b348ee18aa9efa356283"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x7f, 0x3d, 0x5, [@generic={0x78, 0x21, "55fe1512e4d993084472f759a071c02715ab7168624ecaa6722ad1f36b20565f8cc8cbf30efddcdd1199a9b216d7c2545d786fe17a16cb5279e5d06f68478cb4313c5a98545f15b5b9c48f175f02c2556fdec60e46c079481c6867ef978b9fc10c299cda807ceb64d62e0fe9c2335641620dacc640cf"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0x1, 0x2, 0x7}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0x8, 0xf8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x102, 0x8, 0x8}]}}, {{0x9, 0x5, 0x9, 0x4, 0x20, 0xb, 0x3, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf2, 0x7ff}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x7, 0x3, 0x80}}, {{0x9, 0x5, 0x7, 0x1, 0x8, 0x6, 0x80, 0x6}}, {{0x9, 0x5, 0xb, 0xc, 0x20, 0x3, 0x1, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xff, 0x7}]}}]}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x3, 0xf9, 0x1, 0x10, 0xe}, 0x7a, &(0x7f0000000240)={0x5, 0xf, 0x7a, 0x6, [@generic={0x23, 0x10, 0x4, "8b576908763d218d38aae7c5ef251bed01f53f3d18fd2c3a45f8c7d742c4ee6d"}, @ssp_cap={0x20, 0x10, 0xa, 0x52, 0x5, 0x4, 0x0, 0x401, [0x3f00, 0xc0, 0xc000, 0x30, 0xff0021]}, @ss_container_id={0x14, 0x10, 0x4, 0x82, "1c6d2dc2d2b392f0c52ae0fa41e380b6"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x1, 0x1, 0x80}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "2e9fe548cb0780e565f37f3db116f887"}, @ptm_cap={0x3}]}, 0x2, [{0x85, &(0x7f0000000340)=@string={0x85, 0x3, "e4164f50f7457a00140efae97b3b5455c5ea016765d754d71def9040323102d8cee424a0ed0c50fb5a44641018b6273a6ae3e40ded8073beeb9ef9511adbc8cd970bbb9a29f14c63c00a693d4ead0c4e891ab073559d7b6ed9b5e4bb4622b24dcf864d926dda76bb40368526e4c08feb4ad29cec5cbdeff12ef9474ecc3eedb7cdec9c"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x410}}]})
write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72)

kernel console output (not intermixed with test programs):

-1:0.55: Interrupt in endpoint not found
[  435.481420][T10423] futex_wake_op: syz.3.1257 tries to shift op by -1; fix this program
[  435.804107][ T5913] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  436.418325][ T5866] usb 5-1: USB disconnect, device number 63
[  436.617706][ T5913] usb 3-1: Using ep0 maxpacket: 32
[  436.629858][ T5913] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  436.658350][ T5913] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  436.676195][ T5913] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  436.685778][ T5913] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  436.695703][ T5913] usb 3-1: Product: syz
[  436.700200][ T5913] usb 3-1: Manufacturer: syz
[  437.006461][ T5913] hub 3-1:4.0: USB hub found
[  437.221701][ T5913] hub 3-1:4.0: config failed, can't read hub descriptor (err -22)
[  437.251657][ T5913] usb 3-1: USB disconnect, device number 54
[  437.302278][ T5864] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  438.125186][ T5864] usb 2-1: Using ep0 maxpacket: 8
[  438.143256][ T5864] usb 2-1: config 0 has an invalid interface number: 55 but max is 0
[  438.217923][ T5864] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  438.228958][ T5864] usb 2-1: config 0 has no interface number 0
[  438.235373][ T5864] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  438.246765][ T5864] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  438.256760][ T5864] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  438.413479][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  438.426723][ T5864] usb 2-1: config 0 descriptor??
[  438.434394][ T5864] ldusb 2-1:0.55: Interrupt in endpoint not found
[  438.566703][T10458] 9pnet_virtio: no channels available for device syz
[  439.220047][T10459] No control pipe specified
[  439.872918][    T9] usb 2-1: USB disconnect, device number 49
[  440.275965][T10479] loop6: detected capacity change from 0 to 524287999
[  440.443206][T10481] CIFS: Unable to determine destination address
[  440.841145][ T5866] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  441.018979][ T5866] usb 4-1: Using ep0 maxpacket: 8
[  441.066153][ T5866] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  441.086107][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  441.105623][ T5866] usb 4-1: Product: syz
[  441.127816][ T5866] usb 4-1: Manufacturer: syz
[  441.150486][ T5866] usb 4-1: SerialNumber: syz
[  441.315939][ T5866] usb 4-1: config 0 descriptor??
[  441.680822][ T5866] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  441.796837][T10501] overlayfs: workdir and upperdir must reside under the same mount
[  442.677557][T10474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  442.705789][T10474] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  442.767809][T10474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  442.934540][T10474] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  445.161773][T10541] FAULT_INJECTION: forcing a failure.
[  445.161773][T10541] name failslab, interval 1, probability 0, space 0, times 0
[  445.189215][T10541] CPU: 1 UID: 0 PID: 10541 Comm: syz.4.1287 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) 
[  445.189241][T10541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  445.189251][T10541] Call Trace:
[  445.189256][T10541]  <TASK>
[  445.189263][T10541]  dump_stack_lvl+0x16c/0x1f0
[  445.189291][T10541]  should_fail_ex+0x512/0x640
[  445.189314][T10541]  ? __kmalloc_cache_noprof+0x57/0x3e0
[  445.189341][T10541]  should_failslab+0xc2/0x120
[  445.189360][T10541]  __kmalloc_cache_noprof+0x6a/0x3e0
[  445.189384][T10541]  ? copy_mount_options+0x55/0x190
[  445.189409][T10541]  copy_mount_options+0x55/0x190
[  445.189431][T10541]  __x64_sys_mount+0x1ac/0x310
[  445.189450][T10541]  ? __pfx___x64_sys_mount+0x10/0x10
[  445.189476][T10541]  do_syscall_64+0xcd/0x260
[  445.189500][T10541]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  445.189516][T10541] RIP: 0033:0x7f37de98e969
[  445.189529][T10541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  445.189544][T10541] RSP: 002b:00007f37df85c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  445.189560][T10541] RAX: ffffffffffffffda RBX: 00007f37debb6080 RCX: 00007f37de98e969
[  445.189571][T10541] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000000
[  445.189581][T10541] RBP: 00007f37df85c090 R08: 0000200000000380 R09: 0000000000000000
[  445.189590][T10541] R10: 0000000000020020 R11: 0000000000000246 R12: 0000000000000001
[  445.189600][T10541] R13: 0000000000000001 R14: 00007f37debb6080 R15: 00007ffd78408638
[  445.189623][T10541]  </TASK>
[  445.348254][    C1] vkms_vblank_simulate: vblank timer overrun
[  445.387956][ T5866] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  445.398711][ T5866] dvbdev: DVB: registering new adapter (Terratec H7)
[  445.407310][ T5866] usb 4-1: media controller created
[  445.524433][ T5866] usb read operation failed. (-71)
[  445.532349][ T5866] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5
[  445.793787][ T5866] usb 4-1: USB disconnect, device number 53
[  447.843028][ T5864] usb 3-1: new low-speed USB device number 55 using dummy_hcd
[  448.040482][ T5864] usb 3-1: device descriptor read/64, error -71
[  448.173908][T10569] ALSA: mixer_oss: invalid index 40000
[  448.539022][T10571] loop6: detected capacity change from 0 to 524287999
[  448.682820][T10572] CIFS: Unable to determine destination address
[  448.949808][ T5864] usb 3-1: new low-speed USB device number 56 using dummy_hcd
[  449.080424][   T30] audit: type=1326 audit(1747655917.918:2291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10575 comm="syz.3.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07b38e969 code=0x7ffc0000
[  449.131165][ T5864] usb 3-1: device descriptor read/64, error -71
[  449.140187][   T30] audit: type=1326 audit(1747655917.918:2292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10575 comm="syz.3.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07b38e969 code=0x7ffc0000
[  449.163660][    C1] vkms_vblank_simulate: vblank timer overrun
[  449.228770][   T30] audit: type=1326 audit(1747655917.918:2293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10575 comm="syz.3.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc07b38e969 code=0x7ffc0000
[  449.228817][   T30] audit: type=1326 audit(1747655917.918:2294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10575 comm="syz.3.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07b38e969 code=0x7ffc0000
[  449.228855][   T30] audit: type=1326 audit(1747655917.918:2295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10575 comm="syz.3.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc07b38e969 code=0x7ffc0000
[  449.228970][   T30] audit: type=1326 audit(1747655918.030:2296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10575 comm="syz.3.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07b38e969 code=0x7ffc0000
[  449.229010][   T30] audit: type=1326 audit(1747655918.030:2297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10575 comm="syz.3.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07b38e969 code=0x7ffc0000
[  449.229049][   T30] audit: type=1326 audit(1747655918.039:2298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10575 comm="syz.3.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc07b38e969 code=0x7ffc0000
[  449.229092][   T30] audit: type=1326 audit(1747655918.039:2299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10575 comm="syz.3.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07b38e969 code=0x7ffc0000
[  449.229130][   T30] audit: type=1326 audit(1747655918.049:2300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10575 comm="syz.3.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07b38e969 code=0x7ffc0000
[  449.465537][ T5864] usb usb3-port1: attempt power cycle
[  450.196138][ T5864] usb 3-1: new low-speed USB device number 57 using dummy_hcd
[  450.381331][ T5864] usb 3-1: device descriptor read/8, error -71
[  451.411421][ T5864] usb 3-1: new low-speed USB device number 58 using dummy_hcd
[  451.713755][ T5864] usb 3-1: device not accepting address 58, error -71
[  451.878873][ T5864] usb usb3-port1: unable to enumerate USB device
[  453.703522][T10603] delete_channel: no stack
[  453.766121][ T5913] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  453.892127][T10629] overlayfs: workdir and upperdir must reside under the same mount
[  453.900487][ T5864] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[  453.933062][ T5913] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  454.047219][T10631] netlink: 'syz.0.1311': attribute type 7 has an invalid length.
[  454.522473][ T5913] usb 4-1: config 0 has no interfaces?
[  454.532629][ T5913] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  454.542087][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  454.777708][ T5913] usb 4-1: config 0 descriptor??
[  454.824146][ T5864] usb 3-1: Using ep0 maxpacket: 8
[  454.845294][ T5864] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[  454.879526][ T5864] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  454.916702][ T5864] usb 3-1: config 0 has no interface number 0
[  454.928029][ T5864] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  454.940402][ T5864] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  454.966083][ T5864] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  454.989241][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  455.189196][ T5864] usb 3-1: config 0 descriptor??
[  455.200684][ T5864] ldusb 3-1:0.55: Interrupt in endpoint not found
[  456.256671][ T5866] usb 2-1: new low-speed USB device number 50 using dummy_hcd
[  456.290605][ T5862] usb 3-1: USB disconnect, device number 59
[  456.422065][ T5866] usb 2-1: device descriptor read/64, error -71
[  457.286258][ T5866] usb 2-1: new low-speed USB device number 51 using dummy_hcd
[  457.347497][ T5862] usb 4-1: USB disconnect, device number 54
[  457.432519][ T5866] usb 2-1: device descriptor read/64, error -71
[  457.482148][T10660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1321'.
[  457.558645][ T5866] usb usb2-port1: attempt power cycle
[  457.675570][T10665] loop6: detected capacity change from 0 to 524287999
[  457.840876][T10668] CIFS: Unable to determine destination address
[  458.264593][T10665] Dev loop6: unable to read RDB block 8
[  458.270450][T10665]  loop6: unable to read partition table
[  458.276930][T10665] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³˜) failed (rc=-5)
[  458.368248][T10674] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  458.403656][T10674] bio_check_eod: 2 callbacks suppressed
[  458.403672][T10674] syz.3.1324: attempt to access beyond end of device
[  458.403672][T10674] loop3: rw=0, sector=0, nr_sectors = 2 limit=0
[  458.481399][T10675] xt_l2tp: v2 doesn't support IP mode
[  458.528001][T10677] overlayfs: workdir and upperdir must reside under the same mount
[  458.569835][   T30] kauditd_printk_skb: 39 callbacks suppressed
[  458.569849][   T30] audit: type=1326 audit(1747655926.795:2340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10678 comm="syz.2.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f106bd8e969 code=0x7ffc0000
[  458.644958][   T30] audit: type=1326 audit(1747655926.804:2341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10678 comm="syz.2.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f106bd8e969 code=0x7ffc0000
[  459.646137][   T30] audit: type=1326 audit(1747655926.832:2342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10678 comm="syz.2.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f106bd8e969 code=0x7ffc0000
[  459.821370][   T30] audit: type=1326 audit(1747655926.832:2343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10678 comm="syz.2.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f106bd8e969 code=0x7ffc0000
[  459.846205][   T30] audit: type=1326 audit(1747655926.832:2344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10678 comm="syz.2.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f106bd8e969 code=0x7ffc0000
[  460.418342][   T30] audit: type=1326 audit(1747655926.832:2345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10678 comm="syz.2.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f106bd8e969 code=0x7ffc0000
[  460.441799][    C0] vkms_vblank_simulate: vblank timer overrun
[  460.517209][   T30] audit: type=1326 audit(1747655926.832:2346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10678 comm="syz.2.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f106bd8e969 code=0x7ffc0000
[  460.970558][   T30] audit: type=1326 audit(1747655926.832:2347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10678 comm="syz.2.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f106bd8e969 code=0x7ffc0000
[  460.994045][    C0] vkms_vblank_simulate: vblank timer overrun
[  461.207828][ T5913] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[  461.420754][ T5913] usb 3-1: Using ep0 maxpacket: 8
[  461.469914][ T5913] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  461.547331][   T30] audit: type=1326 audit(1747655926.832:2348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10678 comm="syz.2.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f106bd8e969 code=0x7ffc0000
[  461.578948][ T5913] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  461.591051][   T30] audit: type=1326 audit(1747655926.832:2349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10678 comm="syz.2.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f106bd8e969 code=0x7ffc0000
[  461.604703][ T5913] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  461.632044][ T5913] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  461.652853][ T5913] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  461.662590][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  461.676842][ T5862] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  461.902985][ T5862] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  461.910894][ T5913] usb 3-1: GET_CAPABILITIES returned 0
[  461.922696][ T5862] usb 4-1: config 0 has no interfaces?
[  461.924430][ T5913] usbtmc 3-1:16.0: can't read capabilities
[  461.933079][ T5862] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  461.938119][T10707] 9pnet_fd: Insufficient options for proto=fd
[  461.976299][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  462.016776][ T5862] usb 4-1: config 0 descriptor??
[  462.148107][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  462.171967][T10699] afs: Unknown parameter 'dyn€cá³Ôw_úþn?èy±pµóׂ~'
[  462.200641][   T58] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  462.738357][ T5862] usb 3-1: USB disconnect, device number 60
[  462.881909][   T58] usb 1-1: Using ep0 maxpacket: 8
[  462.903549][   T58] usb 1-1: config 0 has an invalid interface number: 55 but max is 0
[  462.912934][   T58] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  462.924039][   T58] usb 1-1: config 0 has no interface number 0
[  462.934104][   T58] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  462.990821][   T58] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  463.017331][   T58] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  463.079482][   T58] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  463.178108][ T3505] Bluetooth: hci5: Frame reassembly failed (-84)
[  463.344974][   T58] usb 1-1: config 0 descriptor??
[  463.382944][   T58] ldusb 1-1:0.55: Interrupt in endpoint not found
[  463.904125][T10727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  463.917721][T10728] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1340'.
[  463.929084][T10727] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  463.940651][T10728] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1340'.
[  464.116233][ T5862] usb 1-1: USB disconnect, device number 46
[  464.728232][T10738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1343'.
[  465.155273][   T58] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  465.221313][T10747] loop6: detected capacity change from 0 to 524287999
[  465.286276][T10748] CIFS: Unable to determine destination address
[  465.322502][   T58] usb 1-1: Using ep0 maxpacket: 8
[  465.337587][   T58] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  465.355663][ T5862] usb 4-1: USB disconnect, device number 55
[  465.364347][   T58] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  465.382270][ T5125] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  465.389102][ T5829] Bluetooth: hci5: command 0x1003 tx timeout
[  465.418520][   T58] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  465.427675][   T58] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  465.449125][   T58] usbtmc 1-1:16.0: bulk endpoints not found
[  465.675123][   T30] kauditd_printk_skb: 33 callbacks suppressed
[  465.675140][   T30] audit: type=1326 audit(1747655933.445:2383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10756 comm="syz.1.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48db98e969 code=0x7ffc0000
[  465.749285][   T30] audit: type=1326 audit(1747655933.445:2384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10756 comm="syz.1.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48db98e969 code=0x7ffc0000
[  465.809226][   T30] audit: type=1326 audit(1747655933.445:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10756 comm="syz.1.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48db98e969 code=0x7ffc0000
[  465.865866][   T30] audit: type=1326 audit(1747655933.455:2386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10756 comm="syz.1.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48db98e969 code=0x7ffc0000
[  465.988987][   T30] audit: type=1326 audit(1747655933.455:2387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10756 comm="syz.1.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48db98e969 code=0x7ffc0000
[  466.069105][   T30] audit: type=1326 audit(1747655933.455:2388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10756 comm="syz.1.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48db98e969 code=0x7ffc0000
[  466.069157][   T30] audit: type=1326 audit(1747655933.501:2389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10756 comm="syz.1.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48db98e969 code=0x7ffc0000
[  466.069198][   T30] audit: type=1326 audit(1747655933.511:2390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10756 comm="syz.1.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48db98e969 code=0x7ffc0000
[  466.069236][   T30] audit: type=1326 audit(1747655933.520:2391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10756 comm="syz.1.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f48db98e969 code=0x7ffc0000
[  466.069276][   T30] audit: type=1326 audit(1747655933.520:2392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10756 comm="syz.1.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48db98e969 code=0x7ffc0000
[  466.172394][    C0] vkms_vblank_simulate: vblank timer overrun
[  468.006317][T10778] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1354'.
[  468.208610][    T9] usb 1-1: USB disconnect, device number 47
[  469.673576][ T5913] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  469.751798][T10795] input: syz1 as /devices/virtual/input/input47
[  469.910905][ T5913] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  469.924599][ T5913] usb 1-1: config 0 has no interfaces?
[  469.931080][ T5913] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  469.940544][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  469.955029][ T5913] usb 1-1: config 0 descriptor??
[  469.985278][T10801] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.1361'.
[  471.348023][   T30] kauditd_printk_skb: 71 callbacks suppressed
[  471.348054][   T30] audit: type=1326 audit(1747655938.749:2464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10818 comm="syz.4.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37de98e969 code=0x7ffc0000
[  471.442117][   T30] audit: type=1326 audit(1747655938.796:2465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10818 comm="syz.4.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37de98e969 code=0x7ffc0000
[  471.465643][    C0] vkms_vblank_simulate: vblank timer overrun
[  471.477786][   T30] audit: type=1326 audit(1747655938.796:2466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10818 comm="syz.4.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37de98e969 code=0x7ffc0000
[  471.501303][    C0] vkms_vblank_simulate: vblank timer overrun
[  471.517302][T10822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  471.538064][T10822] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  472.414449][   T30] audit: type=1326 audit(1747655938.796:2467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10818 comm="syz.4.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37de98e969 code=0x7ffc0000
[  472.452738][   T30] audit: type=1326 audit(1747655938.796:2468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10818 comm="syz.4.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37de98e969 code=0x7ffc0000
[  472.479995][   T30] audit: type=1326 audit(1747655938.796:2469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10818 comm="syz.4.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37de98e969 code=0x7ffc0000
[  472.512827][   T30] audit: type=1326 audit(1747655938.796:2470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10818 comm="syz.4.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37de98e969 code=0x7ffc0000
[  472.622947][   T30] audit: type=1326 audit(1747655938.796:2471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10818 comm="syz.4.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f37de98e969 code=0x7ffc0000
[  472.684018][   T30] audit: type=1326 audit(1747655938.796:2472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10818 comm="syz.4.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37de98e969 code=0x7ffc0000
[  472.712045][   T30] audit: type=1326 audit(1747655938.796:2473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10818 comm="syz.4.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37de98e969 code=0x7ffc0000
[  473.038826][T10835] syz.4.1370: attempt to access beyond end of device
[  473.038826][T10835] nbd4: rw=0, sector=64, nr_sectors = 1 limit=0
[  473.053098][T10835] syz.4.1370: attempt to access beyond end of device
[  473.053098][T10835] nbd4: rw=0, sector=256, nr_sectors = 1 limit=0
[  473.066194][T10835] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[  473.075961][T10835] syz.4.1370: attempt to access beyond end of device
[  473.075961][T10835] nbd4: rw=0, sector=512, nr_sectors = 1 limit=0
[  473.089171][T10835] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[  473.099474][T10835] syz.4.1370: attempt to access beyond end of device
[  473.099474][T10835] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0
[  473.113278][T10835] syz.4.1370: attempt to access beyond end of device
[  473.113278][T10835] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0
[  473.126519][T10835] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[  473.136153][T10835] syz.4.1370: attempt to access beyond end of device
[  473.136153][T10835] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0
[  473.149193][T10835] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[  473.159481][T10835] syz.4.1370: attempt to access beyond end of device
[  473.159481][T10835] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0
[  473.172472][T10835] syz.4.1370: attempt to access beyond end of device
[  473.172472][T10835] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0
[  473.185504][T10835] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[  473.195402][T10835] syz.4.1370: attempt to access beyond end of device
[  473.195402][T10835] nbd4: rw=0, sector=2048, nr_sectors = 4 limit=0
[  473.208446][T10835] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[  473.219175][T10835] syz.4.1370: attempt to access beyond end of device
[  473.219175][T10835] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0
[  473.232495][T10835] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[  473.242144][T10835] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[  473.251659][T10835] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1)
[  473.260962][    T9] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  473.431587][    T9] usb 2-1: Using ep0 maxpacket: 8
[  473.625974][    T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  473.636793][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  473.695916][    T9] usb 2-1: Product: syz
[  473.700123][    T9] usb 2-1: Manufacturer: syz
[  473.709095][ T5866] usb 1-1: USB disconnect, device number 48
[  473.723095][    T9] usb 2-1: SerialNumber: syz
[  473.737957][    T9] usb 2-1: config 0 descriptor??
[  473.866167][T10842] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1
[  473.885803][T10842] ref_ctr increment failed for inode: 0x59e offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88807773b200
[  474.006723][    T9] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  474.639661][T10828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  474.676284][T10828] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  475.051308][T10828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  475.094222][T10828] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  475.863235][ T5913] usb 1-1: new full-speed USB device number 49 using dummy_hcd
[  476.059173][ T5913] usb 1-1: no configurations
[  476.528885][ T5913] usb 1-1: can't read configurations, error -22
[  476.764963][ T5913] usb 1-1: new full-speed USB device number 50 using dummy_hcd
[  477.029974][ T5913] usb 1-1: no configurations
[  477.083851][ T5913] usb 1-1: can't read configurations, error -22
[  477.110882][ T5913] usb usb1-port1: attempt power cycle
[  477.147495][ T5862] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[  477.163216][T10868] fuse: Unknown parameter '0x000000000000000b'
[  477.269799][T10878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1383'.
[  477.319001][ T5862] usb 5-1: Using ep0 maxpacket: 16
[  477.326389][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  477.359661][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  477.369493][ T5862] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  477.386410][ T5862] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  477.395865][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  477.406905][ T5862] usb 5-1: config 0 descriptor??
[  477.509771][ T5913] usb 1-1: new full-speed USB device number 51 using dummy_hcd
[  477.509928][    T9] usb write operation failed. (-71)
[  477.528945][    T9] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  477.547473][ T5913] usb 1-1: no configurations
[  477.552297][    T9] dvbdev: DVB: registering new adapter (Terratec H7)
[  477.552364][    T9] usb 2-1: media controller created
[  477.552711][    T9] usb read operation failed. (-71)
[  477.553062][    T9] usb write operation failed. (-71)
[  477.558018][    T9] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5
[  477.576065][ T5913] usb 1-1: can't read configurations, error -22
[  477.636032][    T9] usb 2-1: USB disconnect, device number 53
[  477.985446][ T5913] usb 1-1: new full-speed USB device number 52 using dummy_hcd
[  478.016375][ T5862] shield 0003:0955:7214.000E: unknown main item tag 0x0
[  478.020416][ T5913] usb 1-1: no configurations
[  478.024671][ T5862] shield 0003:0955:7214.000E: unknown main item tag 0x0
[  478.046646][ T5862] shield 0003:0955:7214.000E: unknown main item tag 0x0
[  478.053660][ T5913] usb 1-1: can't read configurations, error -22
[  478.053961][ T5862] shield 0003:0955:7214.000E: unknown main item tag 0x0
[  478.075490][ T5913] usb usb1-port1: unable to enumerate USB device
[  478.233160][ T5862] shield 0003:0955:7214.000E: unknown main item tag 0x0
[  478.241940][ T5862] input: HID 0955:7214 Haptics as /devices/virtual/input/input48
[  478.261569][ T5862] shield 0003:0955:7214.000E: Registered Thunderstrike controller
[  478.429136][T10897] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  478.476719][    T9] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  478.499096][ T5862] shield 0003:0955:7214.000E: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0
[  478.686604][   T10] shield 0003:0955:7214.000E: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  478.773251][   T10] shield 0003:0955:7214.000E: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  478.803737][   T10] shield 0003:0955:7214.000E: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  478.815690][ T5862] usb 5-1: USB disconnect, device number 64
[  478.829524][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  478.877690][   T10] shield 0003:0955:7214.000E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  478.891127][T10896] netlink: 'syz.2.1388': attribute type 5 has an invalid length.
[  478.924164][    T9] usb 2-1: config 0 has no interfaces?
[  478.929694][    T9] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  478.952796][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  478.963478][    T9] usb 2-1: config 0 descriptor??
[  479.125378][   T10] kernel read not supported for file /929/oom_adj (pid: 10 comm: kworker/0:1)
[  479.531341][    T9] usb 1-1: new full-speed USB device number 53 using dummy_hcd
[  479.825613][    T9] usb 1-1: config 0 has an invalid interface number: 46 but max is 8
[  479.916360][    T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  479.927057][    T9] usb 1-1: config 0 has no interface number 0
[  479.933248][    T9] usb 1-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  479.945806][    T9] usb 1-1: config 0 interface 46 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  479.963227][    T9] usb 1-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01
[  479.973843][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  479.987172][    T9] usb 1-1: Product: syz
[  480.048541][    T9] usb 1-1: Manufacturer: syz
[  480.053173][    T9] usb 1-1: SerialNumber: syz
[  480.077601][    T9] usb 1-1: config 0 descriptor??
[  480.094608][T10903] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  480.164957][    T9] ums-karma 1-1:0.46: USB Mass Storage device detected
[  480.276502][T10926] input: syz0 as /devices/virtual/input/input49
[  480.371277][    T9] ums-karma 1-1:0.46: probe with driver ums-karma failed with error -5
[  480.990379][    T9] usb 2-1: USB disconnect, device number 54
[  481.027326][T10931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  481.090987][T10931] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  481.145349][T10930] xt_connbytes: Forcing CT accounting to be enabled
[  481.150927][   T30] kauditd_printk_skb: 45 callbacks suppressed
[  481.150942][   T30] audit: type=1400 audit(1747656203.909:2519): avc:  denied  { shutdown } for  pid=10921 comm="syz.3.1396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  481.179953][T10930] set match dimension is over the limit!
[  481.326333][   T30] audit: type=1400 audit(1747656204.068:2520): avc:  denied  { listen } for  pid=10902 comm="syz.0.1390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  481.416442][T10937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  481.454517][T10937] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  481.464788][   T30] audit: type=1400 audit(1747656204.068:2521): avc:  denied  { accept } for  pid=10902 comm="syz.0.1390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  481.753438][T10940] lo speed is unknown, defaulting to 1000
[  482.162491][T10953] random: crng reseeded on system resumption
[  482.168514][   T30] audit: type=1400 audit(1747656204.872:2522): avc:  denied  { append } for  pid=10950 comm="syz.3.1402" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  482.218852][T10954] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1402'.
[  482.281802][   T30] audit: type=1400 audit(1747656204.985:2523): avc:  denied  { getopt } for  pid=10939 comm="syz.4.1399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  482.671794][T10960] 9pnet_fd: Insufficient options for proto=fd
[  482.673190][   T58] usb 1-1: USB disconnect, device number 53
[  482.694236][ T5913] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[  482.865541][ T5913] usb 2-1: Using ep0 maxpacket: 16
[  482.878930][ T5913] usb 2-1: config 0 interface 0 has no altsetting 0
[  482.885735][ T5913] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  482.895077][ T5864] usb 4-1: new low-speed USB device number 56 using dummy_hcd
[  482.906672][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  482.922441][ T5913] usb 2-1: config 0 descriptor??
[  483.059445][ T5864] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  483.068766][    T9] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[  483.071995][ T5864] usb 4-1: config 0 has no interface number 0
[  483.082518][ T5864] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  483.093660][ T5864] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  483.104665][ T5864] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  483.114791][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  483.125514][ T5864] usb 4-1: config 0 descriptor??
[  483.131113][T10958] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22
[  483.147264][ T5864] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  483.235717][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  483.246008][    T9] usb 5-1: config 0 has no interfaces?
[  483.251658][    T9] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  483.260812][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  483.270730][    T9] usb 5-1: config 0 descriptor??
[  483.363673][    T9] usb 4-1: USB disconnect, device number 56
[  483.370071][    C0] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[  483.595124][T10971] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1409'.
[  485.507367][T10988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  485.523804][T10988] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  485.627739][ T5864] usb 4-1: new low-speed USB device number 57 using dummy_hcd
[  485.684106][ T5913] usb 2-1: USB disconnect, device number 55
[  485.804296][ T5864] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  485.909620][ T5864] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[  485.962519][ T5864] usb 4-1: config 0 interface 0 has no altsetting 0
[  485.989921][   T30] audit: type=1400 audit(1747656208.455:2524): avc:  denied  { append } for  pid=10992 comm="syz.2.1414" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  486.019658][ T5864] usb 4-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00
[  486.020491][T10993] program syz.2.1414 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  486.028721][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  486.057742][ T5864] usb 4-1: config 0 descriptor??
[  486.085997][T10982] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  486.180472][T10997] FAULT_INJECTION: forcing a failure.
[  486.180472][T10997] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  486.196806][T10997] CPU: 0 UID: 0 PID: 10997 Comm: syz.0.1415 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) 
[  486.196832][T10997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  486.196843][T10997] Call Trace:
[  486.196849][T10997]  <TASK>
[  486.196855][T10997]  dump_stack_lvl+0x16c/0x1f0
[  486.196885][T10997]  should_fail_ex+0x512/0x640
[  486.196914][T10997]  _copy_to_user+0x32/0xd0
[  486.196944][T10997]  copy_siginfo_to_user+0x27/0xc0
[  486.196972][T10997]  x64_setup_rt_frame+0x811/0xcf0
[  486.197003][T10997]  ? __pfx_x64_setup_rt_frame+0x10/0x10
[  486.197035][T10997]  arch_do_signal_or_restart+0x5e6/0x7d0
[  486.197062][T10997]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  486.197092][T10997]  ? selinux_file_fcntl+0x93/0x170
[  486.197122][T10997]  syscall_exit_to_user_mode+0x150/0x2a0
[  486.197148][T10997]  do_syscall_64+0xda/0x260
[  486.197174][T10997]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  486.197192][T10997] RIP: 0033:0x7fd7cef8e967
[  486.197207][T10997] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89
[  486.197224][T10997] RSP: 002b:00007fd7ccdf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048
[  486.197241][T10997] RAX: 0000000000000048 RBX: 00007fd7cf1b5fa0 RCX: 00007fd7cef8e969
[  486.197252][T10997] RDX: 0000200000000000 RSI: 0000000000000026 RDI: 0000000000000004
[  486.197263][T10997] RBP: 00007fd7ccdf6090 R08: 0000000000000000 R09: 0000000000000000
[  486.197273][T10997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  486.197283][T10997] R13: 0000000000000000 R14: 00007fd7cf1b5fa0 R15: 00007ffe7658da88
[  486.197306][T10997]  </TASK>
[  486.450825][   T30] audit: type=1400 audit(1747656208.885:2525): avc:  denied  { bind } for  pid=10998 comm="syz.2.1416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  486.474808][   T30] audit: type=1400 audit(1747656208.904:2526): avc:  denied  { name_bind } for  pid=10998 comm="syz.2.1416" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  486.501669][   T30] audit: type=1400 audit(1747656208.932:2527): avc:  denied  { setopt } for  pid=10998 comm="syz.2.1416" laddr=::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  486.664165][ T5864] usbhid 4-1:0.0: can't add hid device: -71
[  486.703304][ T5864] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  486.783281][ T5864] usb 4-1: USB disconnect, device number 57
[  486.907716][    T9] usb 5-1: USB disconnect, device number 65
[  487.046302][T11011] 9pnet_fd: Insufficient options for proto=fd
[  487.349109][T11025] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1423'.
[  487.501858][T11035] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.1427'.
[  488.135151][T11045] 9pnet_fd: Insufficient options for proto=fd
[  488.982998][T11055] CIFS: Unable to determine destination address
[  489.337963][    T9] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  489.456137][T11061] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1435'.
[  489.477420][ T5913] usb 3-1: new full-speed USB device number 61 using dummy_hcd
[  489.532826][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  489.560071][    T9] usb 4-1: config 0 has no interfaces?
[  489.565601][    T9] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  489.580232][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  489.591344][    T9] usb 4-1: config 0 descriptor??
[  489.638593][T11061] lo speed is unknown, defaulting to 1000
[  489.656029][ T5913] usb 3-1: config 0 has an invalid interface number: 23 but max is 0
[  489.666183][ T5913] usb 3-1: config 0 has no interface number 0
[  489.674258][ T5913] usb 3-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 1.7b
[  489.684941][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  489.700251][ T5913] usb 3-1: Product: syz
[  489.711010][ T5913] usb 3-1: Manufacturer: syz
[  489.717065][T11060] delete_channel: no stack
[  489.722731][ T5913] usb 3-1: SerialNumber: syz
[  489.732133][ T5913] usb 3-1: config 0 descriptor??
[  489.851967][ T5913] ftdi_sio 3-1:0.23: FTDI USB Serial Device converter detected
[  489.876055][ T5913] usb 3-1: Detected SIO
[  489.891403][ T5913] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  491.029174][T11085] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1440'.
[  491.311864][    T9] usb 4-1: USB disconnect, device number 58
[  491.947281][   T10] usb 3-1: USB disconnect, device number 61
[  492.011778][   T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  492.038956][   T10] ftdi_sio 3-1:0.23: device disconnected
[  492.151957][T11103] bio_check_eod: 2 callbacks suppressed
[  492.151972][T11103] syz.3.1444: attempt to access beyond end of device
[  492.151972][T11103] nbd3: rw=0, sector=64, nr_sectors = 1 limit=0
[  492.170996][T11103] syz.3.1444: attempt to access beyond end of device
[  492.170996][T11103] nbd3: rw=0, sector=256, nr_sectors = 1 limit=0
[  492.187481][T11103] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[  492.197186][T11103] syz.3.1444: attempt to access beyond end of device
[  492.197186][T11103] nbd3: rw=0, sector=512, nr_sectors = 1 limit=0
[  492.210738][T11103] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[  492.220935][T11103] syz.3.1444: attempt to access beyond end of device
[  492.220935][T11103] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0
[  492.233966][T11103] syz.3.1444: attempt to access beyond end of device
[  492.233966][T11103] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0
[  492.248496][T11103] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[  492.258904][T11103] syz.3.1444: attempt to access beyond end of device
[  492.258904][T11103] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0
[  492.261912][T11106] overlayfs: workdir and upperdir must reside under the same mount
[  492.272328][T11103] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[  492.272821][T11103] syz.3.1444: attempt to access beyond end of device
[  492.272821][T11103] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0
[  492.303253][T11103] syz.3.1444: attempt to access beyond end of device
[  492.303253][T11103] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0
[  492.316669][T11103] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[  492.326459][T11103] syz.3.1444: attempt to access beyond end of device
[  492.326459][T11103] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0
[  492.341354][T11103] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[  492.351347][T11103] syz.3.1444: attempt to access beyond end of device
[  492.351347][T11103] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0
[  492.364682][T11103] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[  492.375131][T11103] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[  492.384651][T11103] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1)
[  493.262637][T11110] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1446'.
[  493.273830][T11110] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  493.391170][T11114] tipc: Enabling of bearer <dth:s> rejected, media not registered
[  493.549343][T11122] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1450'.
[  493.680670][T11128] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1453'.
[  493.962934][   T10] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[  494.144288][   T10] usb 5-1: Using ep0 maxpacket: 8
[  494.154798][ T5864] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[  494.158275][   T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  494.177790][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  494.186843][   T10] usb 5-1: Product: syz
[  494.191089][   T10] usb 5-1: Manufacturer: syz
[  494.217022][   T10] usb 5-1: SerialNumber: syz
[  494.236107][   T10] usb 5-1: config 0 descriptor??
[  494.287861][   T30] audit: type=1400 audit(1747656216.210:2528): avc:  denied  { search } for  pid=5480 comm="dhcpcd" name="netdev:wlan2" dev="debugfs" ino=28410 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  494.327780][ T5913] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[  494.339701][ T5864] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  494.365012][ T5864] usb 2-1: config 0 has no interfaces?
[  494.372604][ T5864] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  494.412018][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  494.426988][ T5864] usb 2-1: config 0 descriptor??
[  494.485034][   T10] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  494.572571][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  494.592035][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  494.696251][ T5913] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  494.775289][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  494.941360][ T5913] usb 4-1: config 0 descriptor??
[  495.506383][   T30] audit: type=1400 audit(1747656217.341:2529): avc:  denied  { create } for  pid=11140 comm="syz.3.1456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  496.094015][T11182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  496.143405][T11182] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  496.686826][T11189] xt_hashlimit: size too large, truncated to 1048576
[  496.888252][   T30] audit: type=1400 audit(1747656218.454:2530): avc:  denied  { accept } for  pid=11181 comm="syz.0.1462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  497.203410][ T5913] usbhid 4-1:0.0: can't add hid device: -71
[  497.210553][ T5913] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  497.247838][ T5913] usb 4-1: USB disconnect, device number 59
[  497.363660][   T10] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  497.451323][T11203] futex_wake_op: syz.0.1465 tries to shift op by -1; fix this program
[  497.642308][T11202] SELinux: ebitmap: truncated map
[  497.651150][T11202] SELinux: failed to load policy
[  497.711992][T11202] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed
[  498.222447][T11207] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  498.377193][T11207] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  499.089842][ T5913] usb 2-1: USB disconnect, device number 56
[  499.341747][   T10] dvbdev: DVB: registering new adapter (Terratec H7)
[  499.348525][   T10] usb 5-1: media controller created
[  499.357706][   T10] usb read operation failed. (-71)
[  499.366673][   T10] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -5
[  499.378871][   T10] usb 5-1: USB disconnect, device number 66
[  500.379767][T11216] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  500.750770][T11228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1469'.
[  501.867692][T11246] openvswitch: netlink: Actions may not be safe on all matching packets
[  502.058356][   T10] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[  502.087753][T11250] FAULT_INJECTION: forcing a failure.
[  502.087753][T11250] name failslab, interval 1, probability 0, space 0, times 0
[  502.120253][T11250] CPU: 0 UID: 0 PID: 11250 Comm: syz.0.1479 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) 
[  502.120279][T11250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  502.120292][T11250] Call Trace:
[  502.120299][T11250]  <TASK>
[  502.120306][T11250]  dump_stack_lvl+0x16c/0x1f0
[  502.120335][T11250]  should_fail_ex+0x512/0x640
[  502.120358][T11250]  ? fs_reclaim_acquire+0xae/0x150
[  502.120384][T11250]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  502.120408][T11250]  should_failslab+0xc2/0x120
[  502.120426][T11250]  __kmalloc_noprof+0xd2/0x510
[  502.120459][T11250]  tomoyo_realpath_from_path+0xc2/0x6e0
[  502.120487][T11250]  ? tomoyo_profile+0x47/0x60
[  502.120508][T11250]  tomoyo_path_number_perm+0x245/0x580
[  502.120530][T11250]  ? tomoyo_path_number_perm+0x237/0x580
[  502.120554][T11250]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  502.120578][T11250]  ? find_held_lock+0x2b/0x80
[  502.120622][T11250]  ? find_held_lock+0x2b/0x80
[  502.120642][T11250]  ? hook_file_ioctl_common+0x145/0x410
[  502.120667][T11250]  ? __fget_files+0x20e/0x3c0
[  502.120689][T11250]  security_file_ioctl+0x9b/0x240
[  502.120715][T11250]  __x64_sys_ioctl+0xb7/0x200
[  502.120740][T11250]  do_syscall_64+0xcd/0x260
[  502.120768][T11250]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  502.120785][T11250] RIP: 0033:0x7fd7cef8e969
[  502.120799][T11250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  502.120816][T11250] RSP: 002b:00007fd7ccdf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  502.120832][T11250] RAX: ffffffffffffffda RBX: 00007fd7cf1b5fa0 RCX: 00007fd7cef8e969
[  502.120843][T11250] RDX: 0000200000000c00 RSI: 00000000c0189378 RDI: 0000000000000006
[  502.120853][T11250] RBP: 00007fd7ccdf6090 R08: 0000000000000000 R09: 0000000000000000
[  502.120863][T11250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  502.120873][T11250] R13: 0000000000000000 R14: 00007fd7cf1b5fa0 R15: 00007ffe7658da88
[  502.120898][T11250]  </TASK>
[  502.122093][T11250] ERROR: Out of memory at tomoyo_realpath_from_path.
[  502.174262][   T30] audit: type=1400 audit(1747656223.543:2531): avc:  denied  { getopt } for  pid=11253 comm="syz.4.1480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  502.279557][   T10] usb 2-1: Using ep0 maxpacket: 8
[  502.546240][   T10] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  502.564761][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  502.600133][    T9] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[  502.607850][ T5862] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[  502.620402][   T10] usb 2-1: Product: syz
[  502.625119][   T10] usb 2-1: Manufacturer: syz
[  502.630216][   T10] usb 2-1: SerialNumber: syz
[  502.637723][   T10] usb 2-1: config 0 descriptor??
[  502.777796][    T9] usb 3-1: Using ep0 maxpacket: 8
[  502.786870][    T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  502.796811][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  502.814357][    T9] usb 3-1: Product: syz
[  502.819304][ T5862] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  502.913121][ T5125] Bluetooth: hci2: command 0x0406 tx timeout
[  502.935137][ T5862] usb 4-1: config 0 has no interfaces?
[  502.936093][    T9] usb 3-1: Manufacturer: syz
[  503.496565][    T9] usb 3-1: SerialNumber: syz
[  503.569626][ T5862] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  503.580743][    T9] usb 3-1: config 0 descriptor??
[  503.591216][   T10] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  503.673024][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  503.814637][ T5862] usb 4-1: config 0 descriptor??
[  503.841461][    T9] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  504.030206][T11241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  504.039119][T11241] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  504.321692][ T5913] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  504.493514][ T5913] usb 1-1: Using ep0 maxpacket: 16
[  504.532865][ T5913] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  504.575842][ T5913] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  504.609755][ T5913] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  504.663795][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  504.687820][ T5913] usb 1-1: config 0 descriptor??
[  505.208055][T11294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  505.218745][T11294] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  505.272902][ T5864] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[  505.297513][T11295] random: crng reseeded on system resumption
[  505.444088][ T5864] usb 5-1: Using ep0 maxpacket: 16
[  505.451519][ T5864] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  505.463422][ T5864] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  505.474444][ T5864] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  505.489556][ T5864] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  505.498657][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  505.510747][ T5864] usb 5-1: config 0 descriptor??
[  505.734825][T11298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  505.744793][T11298] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  505.756644][ T5864] microsoft 0003:045E:07DA.0010: ignoring exceeding usage max
[  505.781076][ T5864] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0010/input/input51
[  505.809826][   T10] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  505.821868][   T10] dvbdev: DVB: registering new adapter (Terratec H7)
[  505.828581][   T10] usb 2-1: media controller created
[  505.855824][ T5864] microsoft 0003:045E:07DA.0010: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  505.933906][   T10] usb 2-1: dvb_usb_v2: MAC address: c6:3a:f4:6c:6b:b7
[  505.956233][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  505.970212][ T5819] usb 5-1: USB disconnect, device number 67
[  506.019553][   T10] DVB: Unable to find symbol drxk_attach()
[  506.029349][    T9] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  506.043892][    T9] dvbdev: DVB: registering new adapter (Terratec H7)
[  506.051280][    T9] usb 3-1: media controller created
[  506.070479][   T10] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -22
[  506.191415][ T5819] usb 2-1: USB disconnect, device number 57
[  506.242290][    T9] usb read operation failed. (-71)
[  506.256022][    T9] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5
[  506.271693][    T9] usb 3-1: USB disconnect, device number 62
[  506.523938][ T5864] usb 4-1: USB disconnect, device number 60
[  506.929432][T11308] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1493'.
[  509.306061][T11314] CIFS: Unable to determine destination address
[  509.442947][ T5864] usb 1-1: USB disconnect, device number 54
[  509.684549][T11321] futex_wake_op: syz.1.1496 tries to shift op by -1; fix this program
[  510.703670][ T5864] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  510.783256][    T9] usb 4-1: new full-speed USB device number 61 using dummy_hcd
[  510.969968][ T5819] usb 5-1: new high-speed USB device number 68 using dummy_hcd
[  511.509674][ T5864] usb 1-1: device descriptor read/64, error -71
[  511.515238][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[  511.552278][    T9] usb 4-1: unable to read config index 0 descriptor/start: -71
[  511.568394][    T9] usb 4-1: can't read configurations, error -71
[  511.644971][ T5819] usb 5-1: Using ep0 maxpacket: 16
[  511.654325][ T5819] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  511.675315][ T5819] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  511.707413][ T5819] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  511.738882][ T5819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  511.769369][ T5819] usb 5-1: config 0 descriptor??
[  511.773032][ T5864] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  511.774447][   T10] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[  511.796250][ T5819] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  511.933306][ T5864] usb 1-1: device descriptor read/64, error -71
[  512.009493][   T10] usb 2-1: Using ep0 maxpacket: 16
[  512.095915][ T5864] usb usb1-port1: attempt power cycle
[  512.208268][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  512.231736][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  512.241737][   T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  512.254656][   T10] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  512.263744][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  512.290154][   T10] usb 2-1: config 0 descriptor??
[  512.413434][T11365] random: crng reseeded on system resumption
[  512.499744][ T5864] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  512.533342][ T5864] usb 1-1: device descriptor read/8, error -71
[  512.702869][    T9] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[  512.788296][ T5864] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  512.810079][ T5864] usb 1-1: device descriptor read/8, error -71
[  512.884717][    T9] usb 4-1: Using ep0 maxpacket: 8
[  512.893196][    T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  512.902698][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  512.910808][    T9] usb 4-1: Product: syz
[  512.914997][    T9] usb 4-1: Manufacturer: syz
[  512.919635][    T9] usb 4-1: SerialNumber: syz
[  512.926173][    T9] usb 4-1: config 0 descriptor??
[  512.930838][ T5864] usb usb1-port1: unable to enumerate USB device
[  513.149037][    T9] usb read operation failed. (-32)
[  513.285455][   T30] audit: type=1326 audit(1747656233.982:2532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11369 comm="syz.2.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f106bd8e969 code=0x7ffc0000
[  513.312291][   T30] audit: type=1326 audit(1747656233.982:2533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11369 comm="syz.2.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f106bd8e969 code=0x7ffc0000
[  513.336610][   T30] audit: type=1326 audit(1747656234.001:2534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11369 comm="syz.2.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f106bd8e969 code=0x7ffc0000
[  513.360566][   T30] audit: type=1326 audit(1747656234.001:2535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11369 comm="syz.2.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f106bd8e969 code=0x7ffc0000
[  513.384987][   T30] audit: type=1326 audit(1747656234.001:2536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11369 comm="syz.2.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f106bd8e969 code=0x7ffc0000
[  513.408458][    C0] vkms_vblank_simulate: vblank timer overrun
[  513.419422][   T30] audit: type=1326 audit(1747656234.010:2537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11369 comm="syz.2.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f106bd8e969 code=0x7ffc0000
[  513.443996][   T30] audit: type=1326 audit(1747656234.104:2538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11369 comm="syz.2.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f106bd8e969 code=0x7ffc0000
[  513.468176][   T30] audit: type=1326 audit(1747656234.104:2539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11369 comm="syz.2.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f106bd8e969 code=0x7ffc0000
[  513.492934][   T30] audit: type=1326 audit(1747656234.113:2540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11369 comm="syz.2.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f106bd8e969 code=0x7ffc0000
[  513.516431][    C0] vkms_vblank_simulate: vblank timer overrun
[  513.564277][   T30] audit: type=1326 audit(1747656234.113:2541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11369 comm="syz.2.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f106bd8e969 code=0x7ffc0000
[  513.587855][    C0] vkms_vblank_simulate: vblank timer overrun
[  513.630780][    T9] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in cold state
[  513.648914][    T9] usb 4-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2
[  514.469305][    T9] usb 4-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw
[  514.684485][   T10] usbhid 2-1:0.0: can't add hid device: -71
[  514.692454][   T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  514.817797][ T5864] usb 5-1: USB disconnect, device number 68
[  514.924200][   T10] usb 2-1: USB disconnect, device number 58
[  515.046183][T11392] futex_wake_op: syz.4.1511 tries to shift op by -1; fix this program
[  515.063839][T11391] random: crng reseeded on system resumption
[  515.345589][T11397] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1512'.
[  517.144182][   T10] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[  517.163941][T11418] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4)
[  517.170468][T11418] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  517.178608][T11418] vhci_hcd vhci_hcd.0: Device attached
[  517.201651][T11419] vhci_hcd: connection closed
[  517.203166][ T6047] vhci_hcd: stop threads
[  517.213286][ T6047] vhci_hcd: release socket
[  517.218554][ T6047] vhci_hcd: disconnect device
[  517.331112][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  517.687388][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  517.698003][   T10] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  517.711049][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  517.722112][   T10] usb 2-1: config 0 descriptor??
[  518.497897][   T10] hid-steam 0003:28DE:1142.0011: unknown main item tag 0x0
[  518.516804][   T10] hid-steam 0003:28DE:1142.0011: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0
[  518.605949][   T10] hid-steam 0003:28DE:1142.0011: Steam wireless receiver connected
[  518.614134][   T10] hid-steam 0003:28DE:1142.0011: No HID_FEATURE_REPORT submitted -  nothing to read
[  518.629111][   T10] hid-steam 0003:28DE:1142.0012: unknown main item tag 0x0
[  518.648412][   T10] hid-steam 0003:28DE:1142.0012: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0
[  518.764041][T11441] netlink: 337 bytes leftover after parsing attributes in process `syz.4.1526'.
[  518.814865][ T5829] block nbd0: Receive control failed (result -32)
[  518.817780][T11422] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[  518.827433][ T5864] usb 2-1: USB disconnect, device number 59
[  518.852815][ T5864] hid-steam 0003:28DE:1142.0011: Steam wireless receiver disconnected
[  519.214671][T11422] usb 3-1: Using ep0 maxpacket: 8
[  519.224119][T11422] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  519.234543][T11422] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  519.246658][T11422] usb 3-1: Product: syz
[  519.263021][T11422] usb 3-1: Manufacturer: syz
[  519.274976][T11422] usb 3-1: SerialNumber: syz
[  519.291798][T11422] usb 3-1: config 0 descriptor??
[  519.550657][T11422] usb read operation failed. (-32)
[  519.737499][   T10] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  520.025409][T11457] futex_wake_op: syz.1.1531 tries to shift op by -1; fix this program
[  520.079637][T11422] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in cold state
[  520.849489][   T10] usb 1-1: device descriptor read/64, error -71
[  521.270622][   T10] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[  522.111018][   T10] usb 1-1: device descriptor read/64, error -71
[  522.521775][   T10] usb usb1-port1: attempt power cycle
[  523.198370][   T10] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  523.361248][   T10] usb 1-1: device descriptor read/8, error -71
[  523.939646][T11493] netlink: 'syz.0.1540': attribute type 1 has an invalid length.
[  524.817386][T11508] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  525.128984][T11518] overlayfs: workdir and upperdir must reside under the same mount
[  525.506524][T11513] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1546'.
[  526.696796][ T5913] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  526.768535][   T30] kauditd_printk_skb: 90 callbacks suppressed
[  526.768552][   T30] audit: type=1400 audit(1747656246.591:2632): avc:  denied  { watch } for  pid=11523 comm="syz.4.1548" path="/proc/1060/fdinfo" dev="proc" ino=29245 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  526.938192][ T5913] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  526.952240][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  526.963169][ T5913] usb 1-1: Product: syz
[  526.975151][ T5913] usb 1-1: Manufacturer: syz
[  526.980510][ T5913] usb 1-1: SerialNumber: syz
[  527.047379][T11533] loop8: detected capacity change from 0 to 7
[  527.127843][T11533] Dev loop8: unable to read RDB block 7
[  527.133563][T11533]  loop8: AHDI p1 p3 p4
[  527.137976][T11533] loop8: partition table partially beyond EOD, truncated
[  527.146191][T11533] loop8: p1 start 975770946 is beyond EOD, truncated
[  527.152975][T11533] loop8: p3 start 6514546 is beyond EOD, truncated
[  527.203094][ T5913] usb 1-1: config 0 descriptor??
[  527.460989][   T30] audit: type=1326 audit(1747656247.246:2633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11537 comm="syz.4.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37de98e969 code=0x7ffc0000
[  527.523900][   T30] audit: type=1326 audit(1747656247.246:2634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11537 comm="syz.4.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37de98e969 code=0x7ffc0000
[  527.548561][   T30] audit: type=1326 audit(1747656247.265:2635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11537 comm="syz.4.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37de98e969 code=0x7ffc0000
[  527.592924][   T30] audit: type=1326 audit(1747656247.265:2636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11537 comm="syz.4.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37de98e969 code=0x7ffc0000
[  527.630090][   T30] audit: type=1326 audit(1747656247.265:2637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11537 comm="syz.4.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37de98e969 code=0x7ffc0000
[  527.654199][   T30] audit: type=1326 audit(1747656247.265:2638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11537 comm="syz.4.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37de98e969 code=0x7ffc0000
[  527.679642][   T30] audit: type=1326 audit(1747656247.274:2639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11537 comm="syz.4.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37de98e969 code=0x7ffc0000
[  527.703491][   T30] audit: type=1326 audit(1747656247.274:2640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11537 comm="syz.4.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f37de98e969 code=0x7ffc0000
[  527.728794][   T30] audit: type=1326 audit(1747656247.274:2641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11537 comm="syz.4.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37de98e969 code=0x7ffc0000
[  528.136821][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  528.395389][   T10] usb 1-1: USB disconnect, device number 63
[  528.684190][T11553] overlayfs: workdir and upperdir must reside under the same mount
[  531.608612][T11584] netlink: 'syz.1.1565': attribute type 3 has an invalid length.
[  531.642431][T11584] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1565'.
[  531.688939][T11584] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1565'.
[  531.743141][T11584] netlink: 'syz.1.1565': attribute type 3 has an invalid length.
[  531.868295][T11584] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1565'.
[  531.897281][T11584] netlink: 'syz.1.1565': attribute type 3 has an invalid length.
[  531.916012][T11584] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1565'.
[  531.999099][T11588] bio_check_eod: 2 callbacks suppressed
[  531.999115][T11588] syz.4.1566: attempt to access beyond end of device
[  531.999115][T11588] nbd4: rw=0, sector=64, nr_sectors = 1 limit=0
[  532.018805][T11588] syz.4.1566: attempt to access beyond end of device
[  532.018805][T11588] nbd4: rw=0, sector=256, nr_sectors = 1 limit=0
[  532.034095][T11588] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[  532.043810][T11588] syz.4.1566: attempt to access beyond end of device
[  532.043810][T11588] nbd4: rw=0, sector=512, nr_sectors = 1 limit=0
[  532.056699][T11588] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[  532.067012][T11588] syz.4.1566: attempt to access beyond end of device
[  532.067012][T11588] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0
[  532.080090][T11588] syz.4.1566: attempt to access beyond end of device
[  532.080090][T11588] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0
[  532.093347][T11588] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[  532.103193][T11588] syz.4.1566: attempt to access beyond end of device
[  532.103193][T11588] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0
[  532.116573][T11588] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[  532.126364][T11588] syz.4.1566: attempt to access beyond end of device
[  532.126364][T11588] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0
[  532.139425][T11588] syz.4.1566: attempt to access beyond end of device
[  532.139425][T11588] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0
[  532.152386][T11588] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[  532.161973][T11588] syz.4.1566: attempt to access beyond end of device
[  532.161973][T11588] nbd4: rw=0, sector=2048, nr_sectors = 4 limit=0
[  532.175704][T11588] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[  532.185402][T11588] syz.4.1566: attempt to access beyond end of device
[  532.185402][T11588] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0
[  532.198271][T11588] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[  532.208058][T11588] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[  532.217881][T11588] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1)
[  532.297482][   T30] kauditd_printk_skb: 84 callbacks suppressed
[  532.297497][   T30] audit: type=1326 audit(1747656251.764:2726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11592 comm="syz.0.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7cef8e969 code=0x7ffc0000
[  532.301521][T11591] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1567'.
[  532.307211][   T30] audit: type=1326 audit(1747656251.773:2727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11592 comm="syz.0.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7cef8e969 code=0x7ffc0000
[  532.508209][   T30] audit: type=1326 audit(1747656251.830:2728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11592 comm="syz.0.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7cef8e969 code=0x7ffc0000
[  532.532418][   T30] audit: type=1326 audit(1747656251.830:2729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11592 comm="syz.0.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7cef8e969 code=0x7ffc0000
[  532.558931][   T30] audit: type=1326 audit(1747656251.830:2730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11592 comm="syz.0.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7cef8e969 code=0x7ffc0000
[  533.439991][   T30] audit: type=1326 audit(1747656251.830:2731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11592 comm="syz.0.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7cef8e969 code=0x7ffc0000
[  533.532820][   T30] audit: type=1326 audit(1747656251.830:2732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11592 comm="syz.0.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd7cef8e969 code=0x7ffc0000
[  533.561385][   T30] audit: type=1326 audit(1747656251.830:2733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11592 comm="syz.0.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7cef8e969 code=0x7ffc0000
[  533.635049][   T30] audit: type=1326 audit(1747656251.830:2734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11592 comm="syz.0.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7cef8e969 code=0x7ffc0000
[  533.650728][T11605] overlayfs: workdir and upperdir must reside under the same mount
[  533.720161][   T30] audit: type=1326 audit(1747656251.830:2735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11592 comm="syz.0.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7cef8e969 code=0x7ffc0000
[  535.830571][T11640] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1580'.
[  535.846884][T11640] usb usb8: usbfs: process 11640 (syz.0.1580) did not claim interface 0 before use
[  536.089607][T11639] erofs (device nullb0): cannot find valid erofs superblock
[  536.628961][T11649] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  536.795765][T11650] lo speed is unknown, defaulting to 1000
[  536.869158][   T10] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[  537.466080][   T10] usb 2-1: too many configurations: 9, using maximum allowed: 8
[  537.491587][   T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  537.672128][   T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 48, changing to 9
[  537.684481][   T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 8326, setting to 1024
[  537.696773][   T10] usb 2-1: config 0 interface 0 has no altsetting 0
[  537.717123][   T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  537.795205][T11666] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1587'.
[  538.092793][   T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 48, changing to 9
[  538.119431][   T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 8326, setting to 1024
[  538.153035][   T10] usb 2-1: config 0 interface 0 has no altsetting 0
[  538.161419][   T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  538.179302][   T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 48, changing to 9
[  538.190636][   T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 8326, setting to 1024
[  538.216559][   T10] usb 2-1: config 0 interface 0 has no altsetting 0
[  538.233447][   T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  538.250254][   T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 48, changing to 9
[  538.267744][T11669] bio_check_eod: 2 callbacks suppressed
[  538.267759][T11669] syz.0.1588: attempt to access beyond end of device
[  538.267759][T11669] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0
[  538.286803][T11669] syz.0.1588: attempt to access beyond end of device
[  538.286803][T11669] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0
[  538.299819][T11669] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[  538.310605][   T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 8326, setting to 1024
[  538.310636][   T10] usb 2-1: config 0 interface 0 has no altsetting 0
[  538.312108][   T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  538.323435][T11669] syz.0.1588: attempt to access beyond end of device
[  538.323435][T11669] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0
[  538.347792][   T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 48, changing to 9
[  538.352199][T11669] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[  538.372543][T11669] syz.0.1588: attempt to access beyond end of device
[  538.372543][T11669] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0
[  538.385663][T11669] syz.0.1588: attempt to access beyond end of device
[  538.385663][T11669] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0
[  538.399272][T11669] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[  538.409347][T11669] syz.0.1588: attempt to access beyond end of device
[  538.409347][T11669] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0
[  538.422391][T11669] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[  538.432335][T11669] syz.0.1588: attempt to access beyond end of device
[  538.432335][T11669] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0
[  538.445596][T11669] syz.0.1588: attempt to access beyond end of device
[  538.445596][T11669] nbd0: rw=0, sector=2048, nr_sectors = 8 limit=0
[  538.459468][T11669] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[  538.469321][T11669] syz.0.1588: attempt to access beyond end of device
[  538.469321][T11669] nbd0: rw=0, sector=4096, nr_sectors = 8 limit=0
[  538.482382][T11669] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[  538.491832][T11669] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1)
[  538.542875][   T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 8326, setting to 1024
[  538.554083][   T10] usb 2-1: config 0 interface 0 has no altsetting 0
[  538.561797][   T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  538.587518][   T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 48, changing to 9
[  538.603665][   T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 8326, setting to 1024
[  538.615496][   T10] usb 2-1: config 0 interface 0 has no altsetting 0
[  538.623660][   T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  538.636990][   T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 48, changing to 9
[  538.666718][   T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 8326, setting to 1024
[  538.694377][   T10] usb 2-1: config 0 interface 0 has no altsetting 0
[  538.713547][   T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  538.733313][   T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 48, changing to 9
[  538.756390][   T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 8326, setting to 1024
[  538.767665][   T10] usb 2-1: config 0 interface 0 has no altsetting 0
[  538.776363][   T10] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  538.789597][   T10] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  538.798118][   T10] usb 2-1: Product: syz
[  538.803734][   T10] usb 2-1: Manufacturer: syz
[  538.808399][   T10] usb 2-1: SerialNumber: syz
[  538.905249][   T10] usb 2-1: config 0 descriptor??
[  539.276708][   T10] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0
[  539.507953][ T5866] usb 2-1: USB disconnect, device number 60
[  539.516785][ T5866] yurex 2-1:0.0: USB YUREX #0 now disconnected
[  540.081050][ T5866] usb 5-1: new full-speed USB device number 69 using dummy_hcd
[  540.657548][T11688] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1594'.
[  541.015013][ T5866] usb 5-1: config 0 has an invalid interface number: 56 but max is 0
[  541.036508][ T5866] usb 5-1: config 0 has no interface number 0
[  541.068310][ T5866] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64
[  541.090951][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  541.101494][ T5866] usb 5-1: Product: syz
[  541.112919][ T5866] usb 5-1: Manufacturer: syz
[  541.118836][ T5866] usb 5-1: SerialNumber: syz
[  541.133234][ T5866] usb 5-1: config 0 descriptor??
[  541.151791][ T5866] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state.
[  541.166030][ T5866] pctv452e: pctv452e_power_ctrl: 1
[  541.166030][ T5866] 
[  541.183216][ T5866] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22
[  541.183216][ T5866] 
[  541.196295][ T5866] dvb-usb: bulk message failed: -22 (5/0)
[  541.241395][ T5866] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  541.260550][ T5866] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19)
[  541.471531][ T5913] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[  541.484493][ T5866] usb 5-1: USB disconnect, device number 69
[  541.632321][ T5913] usb 2-1: Using ep0 maxpacket: 16
[  541.638723][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  541.649911][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  541.659811][ T5913] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  541.669384][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  541.679531][ T5913] usb 2-1: config 0 descriptor??
[  541.901996][T11712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1601'.
[  541.906893][T11692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  541.936494][T11692] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  542.213263][ T5913] hid-multitouch 0003:1FD2:6007.0013: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0
[  542.388802][T11721] syz.2.1602: attempt to access beyond end of device
[  542.388802][T11721] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0
[  542.404170][T11721] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256
[  542.413986][T11721] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512
[  542.424531][T11721] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256
[  542.434607][T11721] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512
[  542.444906][T11721] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256
[  542.454544][T11721] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512
[  542.464659][T11721] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256
[  542.474650][T11721] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512
[  542.484154][T11721] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1)
[  542.499004][ T5866] usb 2-1: USB disconnect, device number 61
[  542.753362][ T5862] kernel read not supported for file /1098/oom_adj (pid: 5862 comm: kworker/0:4)
[  543.471699][T11732] kvm: pic: non byte write
[  544.516419][T11755] random: crng reseeded on system resumption
[  544.570303][T11756] FAULT_INJECTION: forcing a failure.
[  544.570303][T11756] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  544.601122][T11756] CPU: 1 UID: 0 PID: 11756 Comm: syz.1.1614 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) 
[  544.601148][T11756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  544.601159][T11756] Call Trace:
[  544.601165][T11756]  <TASK>
[  544.601172][T11756]  dump_stack_lvl+0x16c/0x1f0
[  544.601202][T11756]  should_fail_ex+0x512/0x640
[  544.601232][T11756]  _copy_from_user+0x2e/0xd0
[  544.601258][T11756]  restore_sigcontext+0xcb/0x6a0
[  544.601284][T11756]  ? __pfx_restore_sigcontext+0x10/0x10
[  544.601328][T11756]  ? __pfx_restore_altstack+0x10/0x10
[  544.601357][T11756]  ? _raw_spin_unlock_irq+0x23/0x50
[  544.601379][T11756]  ? lockdep_hardirqs_on+0x7c/0x110
[  544.601408][T11756]  __do_sys_rt_sigreturn+0x1bb/0x230
[  544.601433][T11756]  ? __pfx___do_sys_rt_sigreturn+0x10/0x10
[  544.601467][T11756]  do_syscall_64+0xcd/0x260
[  544.601494][T11756]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  544.601511][T11756] RIP: 0033:0x7f48db92ab39
[  544.601526][T11756] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25
[  544.601543][T11756] RSP: 002b:00007f48dc873340 EFLAGS: 00000206 ORIG_RAX: 000000000000000f
[  544.601560][T11756] RAX: ffffffffffffffda RBX: 00007f48dbbb5fa0 RCX: 00007f48db92ab39
[  544.601571][T11756] RDX: 00007f48dc873340 RSI: 00007f48dc873470 RDI: 0000000000000021
[  544.601582][T11756] RBP: 00007f48dc874090 R08: 0000000000000000 R09: 0000000000000000
[  544.601592][T11756] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001
[  544.601602][T11756] R13: 0000000000000000 R14: 00007f48dbbb5fa0 R15: 00007ffc2ab84728
[  544.601627][T11756]  </TASK>
[  544.602467][T11758] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1615'.
[  545.026606][T11767] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1618'.
[  545.266750][ T5911] usb 5-1: new high-speed USB device number 70 using dummy_hcd
[  545.801227][ T5911] usb 5-1: too many configurations: 23, using maximum allowed: 8
[  545.825317][ T5911] usb 5-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e
[  545.840976][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=19
[  545.846466][T11776] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  545.853247][ T5911] usb 5-1: SerialNumber: syz
[  545.873940][ T5911] usb 5-1: config 0 descriptor??
[  546.046543][T11779] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  546.069230][   T30] kauditd_printk_skb: 38 callbacks suppressed
[  546.069245][   T30] audit: type=1400 audit(1747656520.652:2774): avc:  denied  { sendto } for  pid=5911 comm="kworker/1:5" saddr=fe80::1b daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1
[  546.147247][   T30] audit: type=1400 audit(1747656520.708:2775): avc:  denied  { bind } for  pid=11782 comm="syz.2.1625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  546.157626][T11783] veth1_to_batadv: entered promiscuous mode
[  546.196785][T11783] macsec1: entered promiscuous mode
[  546.212982][ T5866] usb 5-1: USB disconnect, device number 70
[  546.947278][T11801] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4)
[  546.953819][T11801] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  546.961480][T11801] vhci_hcd vhci_hcd.0: Device attached
[  546.978303][T11802] vhci_hcd: connection closed
[  546.979691][ T6027] vhci_hcd: stop threads
[  546.982065][   T30] audit: type=1326 audit(1747656521.503:2776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11804 comm="syz.4.1631" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f37de98e969 code=0x0
[  546.984385][ T6027] vhci_hcd: release socket
[  546.984407][ T6027] vhci_hcd: disconnect device
[  547.011709][    C1] vkms_vblank_simulate: vblank timer overrun
[  547.313816][T11812] x_tables: ip6_tables: tcpmss match: only valid for protocol 6
[  548.591481][ T5911] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[  549.076433][ T5911] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  549.090565][ T5911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  549.111202][ T5911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  549.121956][ T5911] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  549.142690][ T5911] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  549.152925][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  549.257894][T11834] loop8: detected capacity change from 0 to 7
[  549.265952][T11834] Dev loop8: unable to read RDB block 7
[  549.271627][T11834]  loop8: AHDI p1 p3 p4
[  549.276498][T11834] loop8: partition table partially beyond EOD, truncated
[  549.284293][T11834] loop8: p1 start 975770946 is beyond EOD, truncated
[  549.291071][T11834] loop8: p3 start 6514546 is beyond EOD, truncated
[  549.677604][ T5913] usb 5-1: new high-speed USB device number 71 using dummy_hcd
[  549.702693][ T5911] usb 1-1: config 0 descriptor??
[  549.842339][ T5913] usb 5-1: Using ep0 maxpacket: 8
[  549.854941][ T5913] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  549.868131][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  549.876957][ T5913] usb 5-1: Product: syz
[  549.881212][ T5913] usb 5-1: Manufacturer: syz
[  549.887717][ T5913] usb 5-1: SerialNumber: syz
[  549.898713][ T5913] usb 5-1: config 0 descriptor??
[  549.936401][T11836] ieee802154 phy0 wpan0: encryption failed: -22
[  550.038835][ T5866] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[  550.168902][ T5913] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  550.199260][T11845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1642'.
[  550.262041][ T5866] usb 2-1: Using ep0 maxpacket: 32
[  550.267174][ T5911] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving
[  550.421258][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  550.428980][ T5911] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  550.441423][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  550.552879][ T5866] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  550.562809][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  550.583492][ T5866] usb 2-1: config 0 descriptor??
[  551.169917][ T5866] savu 0003:1E7D:2D5A.0015: hiddev1,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0
[  551.352139][ T5866] usb 1-1: USB disconnect, device number 64
[  551.379105][ T5864] usb 2-1: USB disconnect, device number 62
[  552.208105][T11857] loop6: detected capacity change from 0 to 524287999
[  552.211562][ T5913] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  552.419828][T11860] CIFS: Unable to determine destination address
[  552.465754][T11861] CIFS: Unable to determine destination address
[  552.596109][ T5913] dvbdev: DVB: registering new adapter (Terratec H7)
[  552.674333][ T5913] usb 5-1: media controller created
[  552.719758][ T5913] usb 5-1: dvb_usb_v2: MAC address: c6:3a:f4:6c:6b:b7
[  552.745881][ T5913] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  552.838032][ T5913] DVB: Unable to find symbol drxk_attach()
[  552.875081][ T5913] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -22
[  553.048659][ T5866] usb 5-1: USB disconnect, device number 71
[  554.434236][T11869] tipc: Enabling of bearer <dth:s> rejected, media not registered
[  556.884813][ T5862] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[  558.181001][ T5862] usb 2-1: Using ep0 maxpacket: 16
[  558.422569][T11924] ALSA: mixer_oss: invalid index 40000
[  559.382317][ T5862] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  559.401285][ T5862] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  559.570191][ T5862] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  560.333909][   T30] audit: type=1400 audit(1747656533.495:2777): avc:  denied  { mount } for  pid=11910 comm="syz.1.1662" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  560.437697][ T5862] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  560.536166][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  560.902684][ T5862] usb 2-1: config 0 descriptor??
[  561.386730][T11935] CIFS: Unable to determine destination address
[  562.530003][   T30] audit: type=1326 audit(1747656535.974:2778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11937 comm="syz.0.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7cef8e969 code=0x7ffc0000
[  562.819417][   T30] audit: type=1326 audit(1747656535.974:2779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11937 comm="syz.0.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7cef8e969 code=0x7ffc0000
[  562.927384][   T30] audit: type=1326 audit(1747656535.983:2780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11937 comm="syz.0.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7cef8e969 code=0x7ffc0000
[  562.982028][   T30] audit: type=1326 audit(1747656536.011:2781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11937 comm="syz.0.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7cef8e969 code=0x7ffc0000
[  563.213142][   T30] audit: type=1326 audit(1747656536.020:2782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11937 comm="syz.0.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7cef8e969 code=0x7ffc0000
[  563.603537][   T30] audit: type=1326 audit(1747656536.114:2783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11937 comm="syz.0.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7cef8e969 code=0x7ffc0000
[  563.631564][   T30] audit: type=1326 audit(1747656536.114:2784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11937 comm="syz.0.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7cef8e969 code=0x7ffc0000
[  563.656143][   T30] audit: type=1326 audit(1747656536.133:2785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11937 comm="syz.0.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7cef8e969 code=0x7ffc0000
[  563.679748][   T30] audit: type=1326 audit(1747656536.133:2786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11937 comm="syz.0.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd7cef8e969 code=0x7ffc0000
[  563.740111][ T5862] usbhid 2-1:0.0: can't add hid device: -71
[  563.747032][ T5862] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  563.760140][ T5862] usb 2-1: USB disconnect, device number 63
[  563.959041][T11948] sch_tbf: burst 1399 is lower than device veth0_to_team mtu (1514) !
[  564.125069][T11957] netlink: 'syz.1.1674': attribute type 12 has an invalid length.
[  566.081757][ T5862] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  566.351834][ T5862] usb 1-1: Using ep0 maxpacket: 8
[  566.448777][ T5862] usb 1-1: config 0 has an invalid interface number: 55 but max is 0
[  566.495157][ T5862] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  566.580422][ T5862] usb 1-1: config 0 has no interface number 0
[  566.614813][ T5862] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  566.684471][ T5862] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  566.743118][ T5862] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  566.774733][ T5862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  566.885765][T11979] overlayfs: failed to resolve './file1': -2
[  566.967880][ T5862] usb 1-1: config 0 descriptor??
[  566.972513][T11986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  566.988558][ T5862] ldusb 1-1:0.55: Interrupt in endpoint not found
[  566.989395][T11986] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  567.080270][T11989] overlayfs: workdir and upperdir must reside under the same mount
[  567.562371][ T5864] usb 1-1: USB disconnect, device number 65
[  568.762013][   T30] kauditd_printk_skb: 37 callbacks suppressed
[  568.762031][   T30] audit: type=1400 audit(1747656541.876:2824): avc:  denied  { bind } for  pid=12006 comm="syz.0.1688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  569.363897][T12018] x_tables: ip6_tables: TPROXY.1 target: invalid size 32 (kernel) != (user) 22
[  570.031466][   T30] audit: type=1400 audit(1747656543.064:2825): avc:  denied  { write } for  pid=12035 comm="syz.1.1696" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  570.057174][T12040] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1694'.
[  570.079507][ T5864] kernel read not supported for file /1138/oom_adj (pid: 5864 comm: kworker/1:4)
[  570.509353][T12051] openvswitch: netlink: Missing key (keys=40, expected=100)
[  570.536965][  T974] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[  571.357126][T12053] netlink: 'syz.1.1701': attribute type 1 has an invalid length.
[  571.394456][  T974] usb 1-1: Using ep0 maxpacket: 8
[  571.400888][  T974] usb 1-1: config 0 has an invalid interface number: 55 but max is 0
[  571.410015][  T974] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  571.422835][  T974] usb 1-1: config 0 has no interface number 0
[  571.431888][T12053] 8021q: adding VLAN 0 to HW filter on device bond3
[  571.438642][  T974] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  571.919536][  T974] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  571.929353][  T974] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  571.938383][  T974] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  571.948650][  T974] usb 1-1: config 0 descriptor??
[  572.236549][T12064] x_tables: ip6_tables: TPROXY.1 target: invalid size 32 (kernel) != (user) 22
[  572.252864][  T974] ldusb 1-1:0.55: Interrupt in endpoint not found
[  572.317385][ T5911] usb 1-1: USB disconnect, device number 66
[  572.666584][  T974] usb 2-1: new low-speed USB device number 64 using dummy_hcd
[  572.838990][  T974] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  572.847047][  T974] usb 2-1: config 0 has no interface number 0
[  572.853473][  T974] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  572.864479][  T974] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  572.875334][  T974] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  572.884916][  T974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  572.896761][  T974] usb 2-1: config 0 descriptor??
[  572.910095][T12073] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  572.924037][  T974] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  573.222640][  T974] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[  574.044978][   T30] audit: type=1400 audit(1747656802.812:2826): avc:  denied  { ioctl } for  pid=12082 comm="syz.4.1710" path="socket:[31607]" dev="sockfs" ino=31607 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  574.687135][  T974] usb 1-1: Using ep0 maxpacket: 8
[  575.457964][T12091] bio_check_eod: 11 callbacks suppressed
[  575.458036][T12091] syz.3.1711: attempt to access beyond end of device
[  575.458036][T12091] nbd3: rw=0, sector=64, nr_sectors = 1 limit=0
[  575.488574][T12091] syz.3.1711: attempt to access beyond end of device
[  575.488574][T12091] nbd3: rw=0, sector=256, nr_sectors = 1 limit=0
[  575.503524][T12091] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[  575.520819][T12091] syz.3.1711: attempt to access beyond end of device
[  575.520819][T12091] nbd3: rw=0, sector=512, nr_sectors = 1 limit=0
[  575.535970][T12091] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[  575.566295][T12091] syz.3.1711: attempt to access beyond end of device
[  575.566295][T12091] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0
[  575.584922][T12091] syz.3.1711: attempt to access beyond end of device
[  575.584922][T12091] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0
[  575.599021][T12091] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[  575.614060][T12091] syz.3.1711: attempt to access beyond end of device
[  575.614060][T12091] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0
[  575.627685][T12091] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[  575.657844][T12091] syz.3.1711: attempt to access beyond end of device
[  575.657844][T12091] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0
[  575.676280][T12091] syz.3.1711: attempt to access beyond end of device
[  575.676280][T12091] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0
[  575.691690][T12091] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[  575.704082][T12091] syz.3.1711: attempt to access beyond end of device
[  575.704082][T12091] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0
[  575.718467][T12091] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[  575.733621][T12091] syz.3.1711: attempt to access beyond end of device
[  575.733621][T12091] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0
[  575.749934][T12091] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[  575.761494][T12091] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[  575.771605][T12091] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1)
[  575.790341][ T5864] usb 5-1: new high-speed USB device number 72 using dummy_hcd
[  575.911463][  T974] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  575.920866][  T974] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  575.930083][  T974] usb 1-1: Product: syz
[  575.934274][  T974] usb 1-1: Manufacturer: syz
[  575.938886][  T974] usb 1-1: SerialNumber: syz
[  575.945346][  T974] usb 1-1: config 0 descriptor??
[  575.956752][  T974] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  575.977482][ T5866] usb 2-1: USB disconnect, device number 64
[  576.051947][ T5864] usb 5-1: Using ep0 maxpacket: 8
[  576.090760][ T5864] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  576.137868][ T5864] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  576.185248][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  576.220028][  T974] gspca_sonixj: reg_w1 err -71
[  576.225905][  T974] sonixj 1-1:0.0: probe with driver sonixj failed with error -71
[  576.257915][  T974] usb 1-1: USB disconnect, device number 67
[  577.020270][T12095] ceph: No mds server is up or the cluster is laggy
[  577.369533][T12089] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1712'.
[  578.036144][  T974] usb 1-1: new full-speed USB device number 68 using dummy_hcd
[  578.259149][  T974] usb 1-1: config 0 has an invalid interface number: 56 but max is 0
[  578.267312][  T974] usb 1-1: config 0 has no interface number 0
[  578.275529][  T974] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64
[  578.302512][  T974] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  578.331408][  T974] usb 1-1: Product: syz
[  578.342785][  T974] usb 1-1: Manufacturer: syz
[  578.357738][  T974] usb 1-1: SerialNumber: syz
[  578.387982][  T974] usb 1-1: config 0 descriptor??
[  578.460698][ T5911] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[  578.485342][  T974] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state.
[  578.513118][  T974] pctv452e: pctv452e_power_ctrl: 1
[  578.513118][  T974] 
[  578.633099][  T974] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22
[  578.633099][  T974] 
[  578.644042][  T974] dvb-usb: bulk message failed: -22 (5/0)
[  578.652713][  T974] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  578.676248][ T5911] usb 2-1: Using ep0 maxpacket: 8
[  578.772354][ T5911] usb 2-1: config 0 has an invalid interface number: 55 but max is 0
[  578.791318][ T5911] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  578.815983][ T5911] usb 2-1: config 0 has no interface number 0
[  578.816118][  T974] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19)
[  578.870740][ T5911] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  578.948791][ T5911] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  579.015796][ T5911] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  579.084956][ T5864] usb 1-1: USB disconnect, device number 68
[  579.107279][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  579.461896][ T5911] usb 2-1: config 0 descriptor??
[  579.544797][ T5931] usb 5-1: USB disconnect, device number 72
[  579.568112][ T5911] ldusb 2-1:0.55: Interrupt in endpoint not found
[  579.864661][ T5931] usb 2-1: USB disconnect, device number 65
[  580.264338][ T5866] usb 5-1: new high-speed USB device number 73 using dummy_hcd
[  580.449312][ T5866] usb 5-1: Using ep0 maxpacket: 32
[  580.498393][ T5866] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  580.685640][ T5866] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  580.809755][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  580.849164][ T5866] usb 5-1: Product: syz
[  580.873145][ T5866] usb 5-1: Manufacturer: syz
[  580.892080][ T5866] usb 5-1: SerialNumber: syz
[  580.920108][ T5866] usb 5-1: config 0 descriptor??
[  582.380312][   T30] audit: type=1400 audit(1747656810.613:2827): avc:  denied  { name_bind } for  pid=12205 comm="syz.0.1734" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1
[  582.462552][T11422] usb 3-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -2). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  582.482724][    T9] usb 4-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  583.207370][T11422] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -2
[  583.216761][    T9] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -110
[  583.228955][T11422] usb 3-1: USB disconnect, device number 63
[  583.245120][    T9] usb 4-1: USB disconnect, device number 62
[  583.287337][  T974] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[  583.352081][T12218] netlink: 'syz.3.1736': attribute type 1 has an invalid length.
[  583.375386][T12218] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1736'.
[  583.485437][  T974] usb 2-1: Using ep0 maxpacket: 8
[  583.494550][  T974] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  583.505710][  T974] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  583.532239][  T974] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  583.539853][ T5931] usb 5-1: USB disconnect, device number 73
[  583.549439][  T974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  583.573496][  T974] usbtmc 2-1:16.0: bulk endpoints not found
[  583.602905][T11422] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[  583.787709][T11422] usb 3-1: Using ep0 maxpacket: 16
[  583.796107][T11422] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  583.908764][T11422] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  583.937771][T11422] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  583.956574][T11422] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  583.967014][  T974] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[  584.069555][T11422] usb 3-1: config 0 descriptor??
[  584.096117][T11422] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  584.661441][  T974] usb 4-1: Using ep0 maxpacket: 8
[  584.669527][  T974] usb 4-1: config 0 has an invalid interface number: 55 but max is 0
[  584.679097][  T974] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  584.702400][  T974] usb 4-1: config 0 has no interface number 0
[  584.712363][  T974] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  584.732768][  T974] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  584.754491][  T974] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  584.773550][  T974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  584.800706][  T974] usb 4-1: config 0 descriptor??
[  584.808458][  T974] ldusb 4-1:0.55: Interrupt in endpoint not found
[  584.953525][ T5931] usb 2-1: USB disconnect, device number 66
[  585.036988][T12255] random: crng reseeded on system resumption
[  586.369399][ T5931] usb 4-1: USB disconnect, device number 63
[  586.491127][ T5864] usb 3-1: USB disconnect, device number 64
[  587.701838][T12276] loop6: detected capacity change from 0 to 524287999
[  587.864402][T12278] CIFS: Unable to determine destination address
[  588.149616][T12279] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1748'.
[  588.377689][T12276]  loop6: unable to read partition table
[  588.383470][T12276] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³˜) failed (rc=-5)
[  588.689041][T12285] x_tables: ip6_tables: TPROXY.1 target: invalid size 32 (kernel) != (user) 22
[  589.073545][T12291] bond0: (slave macsec1): Error -34 calling dev_set_mtu
[  589.345310][T12299] 9pnet_virtio: no channels available for device syz
[  589.985011][T12308] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  589.992001][T12308] /dev/nullb0: Can't open blockdev
[  590.188001][T12312] sock: sock_timestamping_bind_phc: sock not bind to device
[  591.681287][T12352] x_tables: ip6_tables: TPROXY.1 target: invalid size 32 (kernel) != (user) 22
[  591.897171][T12357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1765'.
[  593.408126][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  593.678549][T12375] SELinux:  policydb version -651124278 does not match my version range 15-34
[  593.728826][T12375] SELinux: failed to load policy
[  594.778754][ T5913] hid-generic 0000:FFFFFFFD:0000.0016: unknown main item tag 0x0
[  594.798131][ T5913] hid-generic 0000:FFFFFFFD:0000.0016: unknown main item tag 0x0
[  594.809647][ T5913] hid-generic 0000:FFFFFFFD:0000.0016: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  595.198306][   T30] audit: type=1400 audit(1747656822.605:2828): avc:  denied  { read } for  pid=12395 comm="syz.3.1778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  595.265738][ T5931] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[  595.387935][   T30] audit: type=1400 audit(1747656822.651:2829): avc:  denied  { setopt } for  pid=12395 comm="syz.3.1778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  595.472363][T11422] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[  595.522907][ T5931] usb 3-1: Using ep0 maxpacket: 32
[  595.529906][ T5931] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  595.548532][ T5931] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  595.559366][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  595.567865][ T5931] usb 3-1: Product: syz
[  595.572065][ T5931] usb 3-1: Manufacturer: syz
[  595.577109][ T5931] usb 3-1: SerialNumber: syz
[  595.583992][ T5931] usb 3-1: config 0 descriptor??
[  595.589586][T12394] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  595.622212][T11422] usb 1-1: device descriptor read/64, error -71
[  595.897555][T11422] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[  596.208587][T11422] usb 1-1: device descriptor read/64, error -71
[  596.534112][T11422] usb usb1-port1: attempt power cycle
[  596.742496][ T5931] usb 3-1: USB disconnect, device number 66
[  597.065632][T12427] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1784'.
[  597.081010][T12427] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1784'.
[  597.176782][T12428] CIFS: Unable to determine destination address
[  597.581366][T11422] usb 1-1: new high-speed USB device number 71 using dummy_hcd
[  597.620817][T11422] usb 1-1: device descriptor read/8, error -71
[  598.543332][T12446] netlink: 'syz.2.1788': attribute type 1 has an invalid length.
[  598.551216][T12446] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1788'.
[  598.595250][T11422] usb 1-1: new high-speed USB device number 72 using dummy_hcd
[  598.676162][T12448] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1789'.
[  598.710954][ T5864] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[  598.749065][T12452] x_tables: ip6_tables: TPROXY.1 target: invalid size 32 (kernel) != (user) 22
[  598.893307][T11422] usb 1-1: device not accepting address 72, error -71
[  598.987585][T11422] usb usb1-port1: unable to enumerate USB device
[  599.008432][ T5864] usb 4-1: Using ep0 maxpacket: 16
[  599.019125][ T5864] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  599.076129][ T5864] usb 4-1: config 0 has no interfaces?
[  599.092662][ T5864] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  599.140506][   T30] audit: type=1326 audit(1747656826.281:2830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12455 comm="syz.0.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7cef8e969 code=0x7ffc0000
[  599.169852][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  599.307844][ T5864] usb 4-1: config 0 descriptor??
[  599.313580][   T30] audit: type=1326 audit(1747656826.281:2831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12455 comm="syz.0.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7cef8e969 code=0x7ffc0000
[  599.337044][    C1] vkms_vblank_simulate: vblank timer overrun
[  599.346481][   T30] audit: type=1326 audit(1747656826.290:2832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12455 comm="syz.0.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7cef8e969 code=0x7ffc0000
[  599.868317][   T30] audit: type=1326 audit(1747656826.290:2833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12455 comm="syz.0.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7cef8e969 code=0x7ffc0000
[  599.906356][    T9] usb 4-1: USB disconnect, device number 64
[  600.036325][   T30] audit: type=1326 audit(1747656826.290:2834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12455 comm="syz.0.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7cef8e969 code=0x7ffc0000
[  600.119853][   T30] audit: type=1326 audit(1747656826.318:2835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12455 comm="syz.0.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7cef8e969 code=0x7ffc0000
[  600.149362][T12447] delete_channel: no stack
[  600.151936][   T30] audit: type=1326 audit(1747656826.318:2836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12455 comm="syz.0.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7cef8e969 code=0x7ffc0000
[  600.277932][   T30] audit: type=1326 audit(1747656826.318:2837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12455 comm="syz.0.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7cef8e969 code=0x7ffc0000
[  601.211309][   T30] kauditd_printk_skb: 82 callbacks suppressed
[  601.211323][   T30] audit: type=1326 audit(1747656828.236:2920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12469 comm="syz.2.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f106bd8e969 code=0x7ffc0000
[  601.275553][T12482] syzkaller1: entered promiscuous mode
[  601.288112][T12482] syzkaller1: entered allmulticast mode
[  602.050502][T12491] vivid-000: kernel_thread() failed
[  602.142378][T12496] random: crng reseeded on system resumption
[  602.233089][T12498] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1801'.
[  602.600898][T12502] x_tables: ip6_tables: TPROXY.1 target: invalid size 32 (kernel) != (user) 22
[  603.075016][T12505] netlink: 'syz.0.1802': attribute type 7 has an invalid length.
[  604.131552][   T30] audit: type=1400 audit(1747656830.948:2921): avc:  denied  { ioctl } for  pid=12512 comm="syz.3.1807" path="socket:[33619]" dev="sockfs" ino=33619 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  604.321329][T12522] loop6: detected capacity change from 0 to 524287999
[  604.630016][T12520] CIFS: Unable to determine destination address
[  604.859067][T12522] Dev loop6: unable to read RDB block 9
[  605.023945][T12522]  loop6: unable to read partition table
[  605.029993][T12522] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³˜) failed (rc=-5)
[  605.219612][    T9] usb 1-1: new high-speed USB device number 73 using dummy_hcd
[  605.412055][    T9] usb 1-1: Using ep0 maxpacket: 16
[  605.729195][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  605.761650][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  605.802035][    T9] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  605.823335][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  605.862126][    T9] usb 1-1: config 0 descriptor??
[  605.869177][    T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  606.164081][T12545] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.1811'.
[  606.638575][T12548] random: crng reseeded on system resumption
[  607.052336][T12556] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma?
[  607.401819][T12562] x_tables: ip6_tables: TPROXY.1 target: invalid size 32 (kernel) != (user) 22
[  607.693315][   T30] audit: type=1400 audit(1747656834.082:2922): avc:  denied  { getopt } for  pid=12549 comm="syz.2.1812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  608.438228][ T5864] usb 5-1: new high-speed USB device number 74 using dummy_hcd
[  608.463941][T12577] sp0: Synchronizing with TNC
[  608.477706][    T9] usb 1-1: USB disconnect, device number 73
[  608.631616][T12146] 
[  608.633942][T12146] =====================================================
[  608.640842][T12146] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected
[  608.648264][T12146] 6.15.0-rc7-syzkaller #0 Not tainted
[  608.653602][T12146] -----------------------------------------------------
[  608.660501][T12146] kworker/u8:39/12146 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire:
[  608.668458][T12146] ffffffff8f57a798 (disc_data_lock#4){.+.+}-{3:3}, at: sp_get+0x18/0xf0
[  608.676786][T12146] 
[  608.676786][T12146] and this task is already holding:
[  608.684131][T12146] ffffffff9adff0b8 (&port_lock_key){-.-.}-{3:3}, at: uart_write+0x13b/0xb30
[  608.692804][T12146] which would create a new lock dependency:
[  608.698659][T12146]  (&port_lock_key){-.-.}-{3:3} -> (disc_data_lock#4){.+.+}-{3:3}
[  608.706458][T12146] 
[  608.706458][T12146] but this new dependency connects a HARDIRQ-irq-safe lock:
[  608.715875][T12146]  (&port_lock_key){-.-.}-{3:3}
[  608.715889][T12146] 
[  608.715889][T12146] ... which became HARDIRQ-irq-safe at:
[  608.728452][T12146]   lock_acquire+0x179/0x350
[  608.733034][T12146]   _raw_spin_lock_irqsave+0x3a/0x60
[  608.738312][T12146]   serial8250_handle_irq+0x95/0xcb0
[  608.743577][T12146]   serial8250_default_handle_irq+0x9a/0x210
[  608.749532][T12146]   serial8250_interrupt+0x106/0x210
[  608.754794][T12146]   __handle_irq_event_percpu+0x229/0x7d0
[  608.760488][T12146]   handle_irq_event+0xab/0x1e0
[  608.765318][T12146]   handle_edge_irq+0x263/0xd10
[  608.770140][T12146]   __common_interrupt+0xe2/0x250
[  608.775151][T12146]   common_interrupt+0xba/0xe0
[  608.779885][T12146]   asm_common_interrupt+0x26/0x40
[  608.784975][T12146]   pv_native_safe_halt+0xf/0x20
[  608.789885][T12146]   default_idle+0x13/0x20
[  608.794282][T12146]   default_idle_call+0x6d/0xb0
[  608.799115][T12146]   do_idle+0x391/0x510
[  608.803243][T12146]   cpu_startup_entry+0x4f/0x60
[  608.808068][T12146]   start_secondary+0x21d/0x2b0
[  608.812898][T12146]   common_startup_64+0x13e/0x148
[  608.817905][T12146] 
[  608.817905][T12146] to a HARDIRQ-irq-unsafe lock:
[  608.824902][T12146]  (disc_data_lock#4){.+.+}-{3:3}
[  608.824923][T12146] 
[  608.824923][T12146] ... which became HARDIRQ-irq-unsafe at:
[  608.837758][T12146] ...
[  608.837762][T12146]   lock_acquire+0x179/0x350
[  608.844881][T12146]   _raw_read_lock+0x5f/0x70
[  608.849443][T12146]   sp_get+0x18/0xf0
[  608.853317][T12146]   sixpack_receive_buf+0x59/0x1c90
[  608.858495][T12146]   tty_ldisc_receive_buf+0x157/0x1a0
[  608.863847][T12146]   tty_port_default_receive_buf+0x70/0xb0
[  608.869636][T12146]   flush_to_ldisc+0x26b/0x780
[  608.874371][T12146]   process_one_work+0x9cf/0x1b70
[  608.879377][T12146]   worker_thread+0x6c8/0xf10
[  608.884036][T12146]   kthread+0x3c2/0x780
[  608.888164][T12146]   ret_from_fork+0x45/0x80
[  608.892635][T12146]   ret_from_fork_asm+0x1a/0x30
[  608.897460][T12146] 
[  608.897460][T12146] other info that might help us debug this:
[  608.897460][T12146] 
[  608.907658][T12146]  Possible interrupt unsafe locking scenario:
[  608.907658][T12146] 
[  608.915945][T12146]        CPU0                    CPU1
[  608.921279][T12146]        ----                    ----
[  608.926615][T12146]   lock(disc_data_lock#4);
[  608.931092][T12146]                                local_irq_disable();
[  608.937816][T12146]                                lock(&port_lock_key);
[  608.944633][T12146]                                lock(disc_data_lock#4);
[  608.951631][T12146]   <Interrupt>
[  608.955055][T12146]     lock(&port_lock_key);
[  608.959528][T12146] 
[  608.959528][T12146]  *** DEADLOCK ***
[  608.959528][T12146] 
[  608.967640][T12146] 6 locks held by kworker/u8:39/12146:
[  608.973063][T12146]  #0: ffff88801b481148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  608.984160][T12146]  #1: ffffc90003e77d18 ((work_completion)(&buf->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  608.995181][T12146]  #2: ffff8880258f8ca0 (&buf->lock){+.+.}-{4:4}, at: flush_to_ldisc+0x34/0x780
[  609.004193][T12146]  #3: ffff8880507130a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x80
[  609.013462][T12146]  #4: ffffffff9adff0b8 (&port_lock_key){-.-.}-{3:3}, at: uart_write+0x13b/0xb30
[  609.022562][T12146]  #5: ffff8880507130a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x80
[  609.031841][T12146] 
[  609.031841][T12146] the dependencies between HARDIRQ-irq-safe lock and the holding lock:
[  609.042215][T12146] -> (&port_lock_key){-.-.}-{3:3} {
[  609.047394][T12146]    IN-HARDIRQ-W at:
[  609.051346][T12146]                     lock_acquire+0x179/0x350
[  609.057476][T12146]                     _raw_spin_lock_irqsave+0x3a/0x60
[  609.064301][T12146]                     serial8250_handle_irq+0x95/0xcb0
[  609.071124][T12146]                     serial8250_default_handle_irq+0x9a/0x210
[  609.078655][T12146]                     serial8250_interrupt+0x106/0x210
[  609.085478][T12146]                     __handle_irq_event_percpu+0x229/0x7d0
[  609.092744][T12146]                     handle_irq_event+0xab/0x1e0
[  609.099143][T12146]                     handle_edge_irq+0x263/0xd10
[  609.105543][T12146]                     __common_interrupt+0xe2/0x250
[  609.112120][T12146]                     common_interrupt+0xba/0xe0
[  609.118417][T12146]                     asm_common_interrupt+0x26/0x40
[  609.125072][T12146]                     pv_native_safe_halt+0xf/0x20
[  609.131545][T12146]                     default_idle+0x13/0x20
[  609.137493][T12146]                     default_idle_call+0x6d/0xb0
[  609.143875][T12146]                     do_idle+0x391/0x510
[  609.149573][T12146]                     cpu_startup_entry+0x4f/0x60
[  609.155962][T12146]                     start_secondary+0x21d/0x2b0
[  609.162345][T12146]                     common_startup_64+0x13e/0x148
[  609.168905][T12146]    IN-SOFTIRQ-W at:
[  609.172865][T12146]                     lock_acquire+0x179/0x350
[  609.178993][T12146]                     _raw_spin_lock_irqsave+0x3a/0x60
[  609.185815][T12146]                     serial8250_handle_irq+0x95/0xcb0
[  609.192637][T12146]                     serial8250_default_handle_irq+0x9a/0x210
[  609.200164][T12146]                     serial8250_interrupt+0x106/0x210
[  609.206988][T12146]                     __handle_irq_event_percpu+0x229/0x7d0
[  609.214245][T12146]                     handle_irq_event+0xab/0x1e0
[  609.220629][T12146]                     handle_edge_irq+0x263/0xd10
[  609.227012][T12146]                     __common_interrupt+0xe2/0x250
[  609.233575][T12146]                     common_interrupt+0x61/0xe0
[  609.239873][T12146]                     asm_common_interrupt+0x26/0x40
[  609.246520][T12146]                     _raw_spin_unlock_irqrestore+0x31/0x80
[  609.253789][T12146]                     debug_object_deactivate+0x1ec/0x3a0
[  609.260871][T12146]                     rcu_core+0x72e/0x14e0
[  609.266734][T12146]                     handle_softirqs+0x216/0x8e0
[  609.273126][T12146]                     __irq_exit_rcu+0x109/0x170
[  609.279426][T12146]                     irq_exit_rcu+0x9/0x30
[  609.285290][T12146]                     sysvec_call_function_single+0xa4/0xc0
[  609.292550][T12146]                     asm_sysvec_call_function_single+0x1a/0x20
[  609.300157][T12146]                     unix_dgram_recvmsg+0x59/0x110
[  609.306719][T12146]                     sock_recvmsg+0x1f9/0x250
[  609.312845][T12146]                     sock_read_iter+0x2b9/0x3b0
[  609.319145][T12146]                     vfs_read+0xaa3/0xc70
[  609.324924][T12146]                     ksys_read+0x205/0x240
[  609.330789][T12146]                     do_syscall_64+0xcd/0x260
[  609.336920][T12146]                     entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  609.344432][T12146]    INITIAL USE at:
[  609.348302][T12146]                    lock_acquire+0x179/0x350
[  609.354352][T12146]                    _raw_spin_lock_irqsave+0x3a/0x60
[  609.361084][T12146]                    serial8250_do_set_termios+0x310/0x1710
[  609.368340][T12146]                    serial8250_set_termios+0x6e/0x80
[  609.375072][T12146]                    uart_set_options+0x31a/0x5f0
[  609.381453][T12146]                    serial8250_console_setup+0x189/0x450
[  609.388536][T12146]                    univ8250_console_setup+0x1eb/0x2e0
[  609.395443][T12146]                    try_enable_preferred_console+0x2fd/0x530
[  609.402871][T12146]                    register_console+0x3ab/0x11b0
[  609.409341][T12146]                    univ8250_console_init+0x5f/0x90
[  609.415990][T12146]                    console_init+0x14f/0x680
[  609.422026][T12146]                    start_kernel+0x29f/0x4d0
[  609.428061][T12146]                    x86_64_start_reservations+0x18/0x30
[  609.435060][T12146]                    x86_64_start_kernel+0xb0/0xc0
[  609.441537][T12146]                    common_startup_64+0x13e/0x148
[  609.448007][T12146]  }
[  609.450476][T12146]  ... key      at: [<ffffffff9adfe320>] port_lock_key+0x0/0x40
[  609.458078][T12146] 
[  609.458078][T12146] the dependencies between the lock to be acquired
[  609.458084][T12146]  and HARDIRQ-irq-unsafe lock:
[  609.471538][T12146] -> (disc_data_lock#4){.+.+}-{3:3} {
[  609.476894][T12146]    HARDIRQ-ON-R at:
[  609.480842][T12146]                     lock_acquire+0x179/0x350
[  609.486970][T12146]                     _raw_read_lock+0x5f/0x70
[  609.493093][T12146]                     sp_get+0x18/0xf0
[  609.498535][T12146]                     sixpack_receive_buf+0x59/0x1c90
[  609.505272][T12146]                     tty_ldisc_receive_buf+0x157/0x1a0
[  609.512205][T12146]                     tty_port_default_receive_buf+0x70/0xb0
[  609.519552][T12146]                     flush_to_ldisc+0x26b/0x780
[  609.525858][T12146]                     process_one_work+0x9cf/0x1b70
[  609.532413][T12146]                     worker_thread+0x6c8/0xf10
[  609.538622][T12146]                     kthread+0x3c2/0x780
[  609.544309][T12146]                     ret_from_fork+0x45/0x80
[  609.550342][T12146]                     ret_from_fork_asm+0x1a/0x30
[  609.556727][T12146]    SOFTIRQ-ON-R at:
[  609.560675][T12146]                     lock_acquire+0x179/0x350
[  609.566803][T12146]                     _raw_read_lock+0x5f/0x70
[  609.572928][T12146]                     sp_get+0x18/0xf0
[  609.578359][T12146]                     sixpack_receive_buf+0x59/0x1c90
[  609.585095][T12146]                     tty_ldisc_receive_buf+0x157/0x1a0
[  609.592000][T12146]                     tty_port_default_receive_buf+0x70/0xb0
[  609.599340][T12146]                     flush_to_ldisc+0x26b/0x780
[  609.605637][T12146]                     process_one_work+0x9cf/0x1b70
[  609.612209][T12146]                     worker_thread+0x6c8/0xf10
[  609.618434][T12146]                     kthread+0x3c2/0x780
[  609.624126][T12146]                     ret_from_fork+0x45/0x80
[  609.630174][T12146]                     ret_from_fork_asm+0x1a/0x30
[  609.636578][T12146]    INITIAL READ USE at:
[  609.640884][T12146]                         lock_acquire+0x179/0x350
[  609.647367][T12146]                         _raw_read_lock+0x5f/0x70
[  609.653843][T12146]                         sp_get+0x18/0xf0
[  609.659629][T12146]                         sixpack_receive_buf+0x59/0x1c90
[  609.666713][T12146]                         tty_ldisc_receive_buf+0x157/0x1a0
[  609.673977][T12146]                         tty_port_default_receive_buf+0x70/0xb0
[  609.681668][T12146]                         flush_to_ldisc+0x26b/0x780
[  609.688311][T12146]                         process_one_work+0x9cf/0x1b70
[  609.695227][T12146]                         worker_thread+0x6c8/0xf10
[  609.701783][T12146]                         kthread+0x3c2/0x780
[  609.707818][T12146]                         ret_from_fork+0x45/0x80
[  609.714199][T12146]                         ret_from_fork_asm+0x1a/0x30
[  609.720934][T12146]  }
[  609.723401][T12146]  ... key      at: [<ffffffff8f57a798>] disc_data_lock+0x18/0xfe0
[  609.731269][T12146]  ... acquired at:
[  609.735045][T12146]    lock_acquire+0x179/0x350
[  609.739696][T12146]    _raw_read_lock+0x5f/0x70
[  609.744342][T12146]    sp_get+0x18/0xf0
[  609.748299][T12146]    sixpack_write_wakeup+0x20/0x390
[  609.753575][T12146]    tty_wakeup+0xe5/0x120
[  609.757961][T12146]    tty_port_default_wakeup+0x2a/0x40
[  609.763390][T12146]    serial8250_tx_chars+0x68e/0x860
[  609.768656][T12146]    __start_tx+0x3e9/0x4a0
[  609.773128][T12146]    serial8250_start_tx+0x368/0x530
[  609.778385][T12146]    __uart_start+0x292/0x4c0
[  609.783036][T12146]    uart_write+0x218/0xb30
[  609.787507][T12146]    sixpack_receive_buf+0x3d0/0x1c90
[  609.792852][T12146]    tty_ldisc_receive_buf+0x157/0x1a0
[  609.798281][T12146]    tty_port_default_receive_buf+0x70/0xb0
[  609.804155][T12146]    flush_to_ldisc+0x26b/0x780
[  609.808983][T12146]    process_one_work+0x9cf/0x1b70
[  609.814064][T12146]    worker_thread+0x6c8/0xf10
[  609.818799][T12146]    kthread+0x3c2/0x780
[  609.823008][T12146]    ret_from_fork+0x45/0x80
[  609.827566][T12146]    ret_from_fork_asm+0x1a/0x30
[  609.832478][T12146] 
[  609.834770][T12146] 
[  609.834770][T12146] stack backtrace:
[  609.840638][T12146] CPU: 1 UID: 0 PID: 12146 Comm: kworker/u8:39 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) 
[  609.840653][T12146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  609.840661][T12146] Workqueue: events_unbound flush_to_ldisc
[  609.840674][T12146] Call Trace:
[  609.840680][T12146]  <TASK>
[  609.840686][T12146]  dump_stack_lvl+0x116/0x1f0
[  609.840703][T12146]  check_irq_usage+0x7dc/0x920
[  609.840722][T12146]  ? check_path.constprop.0+0x24/0x50
[  609.840739][T12146]  ? __lock_acquire+0x1189/0x1ba0
[  609.840755][T12146]  __lock_acquire+0x1189/0x1ba0
[  609.840773][T12146]  ? lock_acquire+0x179/0x350
[  609.840790][T12146]  lock_acquire+0x179/0x350
[  609.840806][T12146]  ? sp_get+0x18/0xf0
[  609.840822][T12146]  ? ldsem_down_read_trylock+0x11a/0x180
[  609.840837][T12146]  ? ldsem_down_read_trylock+0x120/0x180
[  609.840852][T12146]  ? __pfx_sixpack_write_wakeup+0x10/0x10
[  609.840869][T12146]  _raw_read_lock+0x5f/0x70
[  609.840882][T12146]  ? sp_get+0x18/0xf0
[  609.840897][T12146]  sp_get+0x18/0xf0
[  609.840913][T12146]  ? __pfx_sixpack_write_wakeup+0x10/0x10
[  609.840930][T12146]  sixpack_write_wakeup+0x20/0x390
[  609.840947][T12146]  ? __pfx_sixpack_write_wakeup+0x10/0x10
[  609.840964][T12146]  tty_wakeup+0xe5/0x120
[  609.840973][T12146]  tty_port_default_wakeup+0x2a/0x40
[  609.840987][T12146]  serial8250_tx_chars+0x68e/0x860
[  609.841003][T12146]  __start_tx+0x3e9/0x4a0
[  609.841016][T12146]  serial8250_start_tx+0x368/0x530
[  609.841031][T12146]  __uart_start+0x292/0x4c0
[  609.841048][T12146]  uart_write+0x218/0xb30
[  609.841061][T12146]  sixpack_receive_buf+0x3d0/0x1c90
[  609.841079][T12146]  ? ldsem_down_read_trylock+0x120/0x180
[  609.841094][T12146]  ? __pfx_ldsem_down_read_trylock+0x10/0x10
[  609.841110][T12146]  ? __pfx_sixpack_receive_buf+0x10/0x10
[  609.841127][T12146]  tty_ldisc_receive_buf+0x157/0x1a0
[  609.841140][T12146]  tty_port_default_receive_buf+0x70/0xb0
[  609.841154][T12146]  flush_to_ldisc+0x26b/0x780
[  609.841166][T12146]  ? rcu_is_watching+0x12/0xc0
[  609.841180][T12146]  process_one_work+0x9cf/0x1b70
[  609.841194][T12146]  ? __pfx_process_one_work+0x10/0x10
[  609.841208][T12146]  ? assign_work+0x1a0/0x250
[  609.841219][T12146]  worker_thread+0x6c8/0xf10
[  609.841233][T12146]  ? __kthread_parkme+0x19e/0x250
[  609.841248][T12146]  ? __pfx_worker_thread+0x10/0x10
[  609.841260][T12146]  kthread+0x3c2/0x780
[  609.841270][T12146]  ? __pfx_kthread+0x10/0x10
[  609.841287][T12146]  ? __pfx_kthread+0x10/0x10
[  609.841296][T12146]  ? __pfx_kthread+0x10/0x10
[  609.841306][T12146]  ? __pfx_kthread+0x10/0x10
[  609.841316][T12146]  ? rcu_is_watching+0x12/0xc0
[  609.841328][T12146]  ? __pfx_kthread+0x10/0x10
[  609.841338][T12146]  ret_from_fork+0x45/0x80
[  609.841348][T12146]  ? __pfx_kthread+0x10/0x10
[  609.841358][T12146]  ret_from_fork_asm+0x1a/0x30
[  609.841376][T12146]  </TASK>
[  610.555033][ T5864] usb 5-1: Using ep0 maxpacket: 8
[  610.563654][ T5864] usb 5-1: config index 0 descriptor too short (expected 6427, got 27)
[  610.571990][ T5864] usb 5-1: config 0 has an invalid interface number: 21 but max is 0
[  610.586842][ T5864] usb 5-1: config 0 has no interface number 0
[  610.592914][ T5864] usb 5-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  610.614621][ T5864] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  610.672027][ T5864] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  610.684742][ T5864] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  610.694051][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[  610.702048][ T5864] usb 5-1: Product: syz
[  610.707642][ T5864] usb 5-1: config 0 descriptor??
[  610.713929][T12569] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  611.385001][ T5864] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.21/input/input60
[  611.603961][    T9] usb 5-1: USB disconnect, device number 74
[  611.604082][    C1] keyspan_remote 5-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19