last executing test programs:

6m37.329738232s ago: executing program 0 (id=62):
syz_emit_ethernet(0x3a, &(0x7f0000000180)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @multicast1}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data}}}}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x4e00, 0x0, 0x0, 0xbdff, 0x4, "fdffffffffffffff"}) (async, rerun: 64)
write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xfffffeb7) (rerun: 64)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x90, 0x1b, "00bf46f8bbde7047bcd4a280000400"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) (async, rerun: 64)
syz_emit_ethernet(0xd2, &(0x7f0000001600)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800450000c4000000000001907864010100ac1414aa0b009078032c000048000000000000000089000000000000ac1414aa862a00000000000d5e000000ff00000000000000054eb8a600129606053d0006ff00800000b61af93a93831300ac1414007f0000017f000001e0000002864500000000000cdf61168c24ac88ad078c000a2189ea4382149b840012ffd11634eea26b0faffa0dea2e903528000902a20948fd7406000eccf0294e2a3bdb4aa40b249e44080000000000000000a815a23da43974ff"], 0x0) (async, rerun: 64)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r3) (async, rerun: 64)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64)
listen(r4, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async, rerun: 32)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (rerun: 32)
socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$packet(0x11, 0x3, 0x300)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff})
getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1200000003000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000082353300000000000006000000000000000000000000000002000000"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r10}, &(0x7f0000000040), &(0x7f0000000140)=r9}, 0x20) (async)
shutdown(r8, 0x0)
sendmmsg(r5, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r7}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) (async)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r12, @ANYRES32=r11, @ANYBLOB='\a\x00'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r12, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20) (async)
sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x14}}, 0x0)

6m36.979488827s ago: executing program 0 (id=64):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000006bc0), 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x7041, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) (async)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) (async)
openat$nvram(0xffffffffffffff9c, &(0x7f0000006bc0), 0x0, 0x0) (async)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x7041, 0x0) (async)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)

6m36.803708847s ago: executing program 0 (id=66):
r0 = socket$inet6(0xa, 0x3, 0x9)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000140)={0x7f, {{0x29, 0x0, 0x2000000, @mcast1, 0x200d41}}}, 0x88)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r1, r2, 0x6, 0x0, @void}, 0x10)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@cgroup=r3, 0x6, 0x1, 0x0, &(0x7f000001f380)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r7 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00')
r8 = openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff)
close(r8)
r9 = openat$binfmt(0xffffffffffffff9c, r7, 0x2, 0x0)
read$msr(r2, &(0x7f0000000240)=""/25, 0x19)
write(r9, &(0x7f0000000180)="01", 0x1)
close(r9)
execveat$binfmt(0xffffffffffffff9c, r7, 0x0, 0x0, 0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r10, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r10, 0xfff)

6m35.733477598s ago: executing program 0 (id=70):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x3127099, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
move_mount(r0, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x100) (fail_nth: 1)

6m35.637395708s ago: executing program 4 (id=72):
syz_open_dev$loop(&(0x7f00000000c0), 0x207, 0x161a81)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
socket$can_raw(0x1d, 0x3, 0x1)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r2 = fcntl$dupfd(r1, 0x0, r1)
sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0)
sendmsg$inet6(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000400)="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", 0x2d6}], 0x2}, 0x40001080)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "fd9192068590ef44", "4ded6853efa14266912ec2cb350be183", "15861006", "84d6d4ab8749281f"}, 0x28)

6m35.407055155s ago: executing program 0 (id=73):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020750d0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_usb_connect$uac1(0x0, 0x71, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x70, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x40, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x80}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x2, 0x40}}}}}}}]}}, 0x0)

6m33.72623076s ago: executing program 0 (id=76):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r0, &(0x7f0000001340)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c)
socket$tipc(0x1e, 0x5, 0x0)
shutdown(r0, 0x1)
syz_emit_ethernet(0x0, 0x0, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000100)="f257a8ea7bc273dfaeab96854305", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1009, 0x0, 0xa48}, &(0x7f0000000140)=0x10)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x4]}, 0x8, 0x800)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000002c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, <r4=>0x0})
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000004c0)={<r5=>0x0, 0xda4a01c0000, 0x1, [0x2, 0x5, 0x10000, 0x6, 0x2], [0x9, 0x1, 0x2, 0x10000, 0x0, 0x1, 0x1, 0x2, 0x3, 0x2, 0x1ff, 0xdc7, 0x6, 0x1, 0x4, 0x8000000000000001, 0x1, 0x9, 0x2, 0x6, 0x4, 0xff, 0x5, 0x3, 0x8, 0x7905, 0x101, 0x5, 0xfffffffffffffffc, 0xe5, 0xb4, 0x1000, 0x5, 0x101, 0x800, 0x0, 0x1, 0x40, 0xe7b, 0x800, 0x1, 0x2, 0x8, 0x7, 0x8000000000000000, 0xffffffff, 0x9, 0xbde4, 0x5, 0x45, 0x6, 0x6, 0xe211, 0x5, 0x4, 0xd, 0x10, 0xa7c, 0x5, 0x6, 0x6cc5, 0x17, 0x3, 0x0, 0x8, 0x4, 0x3, 0x3, 0x8, 0x7, 0x8, 0x19, 0x3, 0x8bca, 0x101, 0x7, 0xffffffffffffff2c, 0x7, 0x5, 0x3ff, 0x6, 0x800, 0x6, 0xfffffffffffffffe, 0x6, 0x9, 0x0, 0xffffffffffffffff, 0x6, 0x3, 0x0, 0x200, 0x8, 0x9, 0xb35, 0x6, 0x4, 0x8000, 0x2, 0x13, 0x900000, 0x10, 0x100000001, 0x8, 0x8, 0x10, 0x80000000, 0x3, 0x562e, 0x7, 0x8, 0x8, 0xd9, 0x9, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8000000000000001, 0xbb02]})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000001380)={{r3}, r4, 0x8, @inherit={0x50, &(0x7f0000000080)={0x1, 0x1, 0x9, 0x8950, {0x5, 0xffffffff, 0xbd, 0x5, 0xffffffffffffffe5}, [0x6]}}, @devid=r5})

6m33.554503229s ago: executing program 32 (id=76):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r0, &(0x7f0000001340)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c)
socket$tipc(0x1e, 0x5, 0x0)
shutdown(r0, 0x1)
syz_emit_ethernet(0x0, 0x0, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000100)="f257a8ea7bc273dfaeab96854305", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1009, 0x0, 0xa48}, &(0x7f0000000140)=0x10)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x4]}, 0x8, 0x800)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000002c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, <r4=>0x0})
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000004c0)={<r5=>0x0, 0xda4a01c0000, 0x1, [0x2, 0x5, 0x10000, 0x6, 0x2], [0x9, 0x1, 0x2, 0x10000, 0x0, 0x1, 0x1, 0x2, 0x3, 0x2, 0x1ff, 0xdc7, 0x6, 0x1, 0x4, 0x8000000000000001, 0x1, 0x9, 0x2, 0x6, 0x4, 0xff, 0x5, 0x3, 0x8, 0x7905, 0x101, 0x5, 0xfffffffffffffffc, 0xe5, 0xb4, 0x1000, 0x5, 0x101, 0x800, 0x0, 0x1, 0x40, 0xe7b, 0x800, 0x1, 0x2, 0x8, 0x7, 0x8000000000000000, 0xffffffff, 0x9, 0xbde4, 0x5, 0x45, 0x6, 0x6, 0xe211, 0x5, 0x4, 0xd, 0x10, 0xa7c, 0x5, 0x6, 0x6cc5, 0x17, 0x3, 0x0, 0x8, 0x4, 0x3, 0x3, 0x8, 0x7, 0x8, 0x19, 0x3, 0x8bca, 0x101, 0x7, 0xffffffffffffff2c, 0x7, 0x5, 0x3ff, 0x6, 0x800, 0x6, 0xfffffffffffffffe, 0x6, 0x9, 0x0, 0xffffffffffffffff, 0x6, 0x3, 0x0, 0x200, 0x8, 0x9, 0xb35, 0x6, 0x4, 0x8000, 0x2, 0x13, 0x900000, 0x10, 0x100000001, 0x8, 0x8, 0x10, 0x80000000, 0x3, 0x562e, 0x7, 0x8, 0x8, 0xd9, 0x9, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8000000000000001, 0xbb02]})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000001380)={{r3}, r4, 0x8, @inherit={0x50, &(0x7f0000000080)={0x1, 0x1, 0x9, 0x8950, {0x5, 0xffffffff, 0xbd, 0x5, 0xffffffffffffffe5}, [0x6]}}, @devid=r5})

6m33.417933646s ago: executing program 4 (id=80):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f00000003c0))
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0x1002, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10)
r6 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x80000, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[], 0x48)
finit_module(r6, 0x0, 0x3)
sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={0x0}}, 0x4015)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000005c0)={"b5133fd4c1917a453a1e79c938565a11", 0x0, <r7=>0x0, {0xffffffffffffff80, 0x6}, {0x1eb, 0x1}, 0x3, [0x4, 0x3, 0xff, 0x8, 0x4, 0xd052, 0x9c, 0x10001, 0xf000000000000, 0x83, 0x7fffffff, 0x2, 0x5, 0x260, 0x6, 0x9]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000c00)={{r5}, r7, 0x0, @unused=[0x7fffffff, 0x8, 0x6, 0x4aee], @subvolid})
mount(&(0x7f0000000100)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000000)='ntfs3\x00', 0x0, &(0x7f0000000340))
r8 = socket(0x10, 0x400000000080803, 0x0)
ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x0, 0x5, 0x4, 0x8fc3, 0x1, 0x20000, 0x0, 0xf}})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

6m32.41868832s ago: executing program 4 (id=82):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125b2ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb03bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2033aae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b85b7b26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1111c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c669bb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b2967cbfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d6748c2ce5bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4658098549646bd63175adf77b5cdcf102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4baea02fa76fb4830aebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f8426a9049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21abfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e0068607000000fb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9fb4000000f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002afea6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b46e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae66444a8f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0xdd52d6c}}, 0x1006)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="09004eeb51508a8b03030000080000f3e40000002d21937818acdd2fb8dc38fbf12349384edb35225cca6dce6c0e2ef555ed319709d477a0520dff7f49a356026cb36dddd533981f8c910fa12ab5b14f09293313ff4e07c1c01aebfe7028df81959b633a1f201bd23cd7573a42130dc2ede76b27c56661b426bfde5677014f9fa7e99c194b924250f55c9f2ff9512c1535ce8f80d68a88f8aeefc061d2ccfc0b194af312cbe23d170b15641bac57f6848ba605656bb95b85f8c79578618f0c157a31cf1e8661be76dd684d4e4c99891f5c11016a02250bd0167ca006c25a4e58b097d642d2e90d41116c43f69f0b70b9e1ceafedf8e03f2e7af22fa2b7c95f8fe34bd120748e9aa947cd32483693c69c293bd455b89232394d4014", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', <r2=>0x0, 0x2f, 0x3, 0x2, 0x5, 0x22, @mcast2, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x721, 0x10, 0x0, 0x7}})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='i2c_write\x00', r5}, 0x10)
r6 = syz_open_dev$I2C(&(0x7f0000000800), 0x0, 0x0)
ioctl$I2C_RDWR(r6, 0x707, &(0x7f00000002c0)={&(0x7f0000000840)=[{0x0, 0x0, 0x0, 0x0}], 0x1})
socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
io_setup(0x6, &(0x7f0000000080)=<r7=>0x0)
io_cancel(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xffff, 0xffffffffffffffff, 0x0}, 0x0)

6m31.717563894s ago: executing program 4 (id=83):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x3127099, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
move_mount(r0, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x100) (fail_nth: 2)

6m31.106503498s ago: executing program 4 (id=86):
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x9, 0x3, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
landlock_create_ruleset(0x0, 0xffffffffffffff87, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x100008b}, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x400204, 0x0)
pread64(r2, &(0x7f00000002c0)=""/150, 0x96, 0x4)
timer_create(0x6, 0x0, 0x0)
futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r4, 0x6, &(0x7f0000000000)={0x1})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r5, 0x26, &(0x7f0000000000)={0x1})
fcntl$lock(r4, 0x26, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe)
r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
write$binfmt_aout(r6, &(0x7f0000000000)=ANY=[], 0xc8)

6m29.023190036s ago: executing program 4 (id=96):
inotify_init1(0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x230000, 0x184)
r1 = fanotify_init(0x200, 0x0)
fanotify_mark(r1, 0x201, 0x4800003e, r0, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f0000000300), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000280)={0xe, 0x1, 0x0, "8eb8a828e93b87f1dd06da7a413acb165448beb159ec098c68d900", 0x4f424752})
r3 = dup2(r1, r0)
r4 = inotify_init()
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, 0x0)
inotify_add_watch(r4, &(0x7f0000000000)='.\x00', 0x400017e)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00')
getdents64(r5, &(0x7f0000000180)=""/236, 0xec)

6m28.768253477s ago: executing program 33 (id=96):
inotify_init1(0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x230000, 0x184)
r1 = fanotify_init(0x200, 0x0)
fanotify_mark(r1, 0x201, 0x4800003e, r0, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f0000000300), 0x401, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000280)={0xe, 0x1, 0x0, "8eb8a828e93b87f1dd06da7a413acb165448beb159ec098c68d900", 0x4f424752})
r3 = dup2(r1, r0)
r4 = inotify_init()
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, 0x0)
inotify_add_watch(r4, &(0x7f0000000000)='.\x00', 0x400017e)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00')
getdents64(r5, &(0x7f0000000180)=""/236, 0xec)

6m25.06596534s ago: executing program 1 (id=107):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r0, 0x0, 0x92, 0xa5, &(0x7f0000000740)="7127e7648d732f69f4f84ed6143b29c8b27474b07aeb4e8c78c2249616d473e1433716c048357e334d468eef2a04bf4e4c39a16d510de098e0dc439026d2ef3060f19d2fba8a7d5c6a216c61cf5c5fae8b2b1a6810e22c2daec7625835fdf806e4a6a1d6f4c95e0d2d5a6d8861ff2631b0e4c94dbb2e43c709c7101d92f0c207c4ab41dc68a657eeee95ec1a978d36a1a2af", &(0x7f0000000280)=""/165, 0x9, 0x0, 0xb3, 0xbe, &(0x7f0000000380)="9e8bc819866b878c97ec1eec5b699e6eda542e1e4565e11ec7d7f91456273be57761e0b7b8501a43dd9ddcf4fd964da0df42770bc3cf639da879f4f9a812c71a031ee0936f6d5100c542540c2312f1f68cd41888ff6dd1e7d81a19f8328e0024ac1a884f0c3858616900c1c5733534b503bbfdaceea292363c6ef1b3b5e5dd819c4bac2343bc0ebc32c8fc1b9dac4e18c83e3ab8ffbc71a1be2ae39ecb655ebf586ec50b1e615f415d5b8038adcb9a0efbbb6e", &(0x7f0000000840)="e11e169f15af58208e3749e39a184da9edd36a15fc2c261e52c886a25e65cfd55087f169bbd39ee04a54ba356533e0e2bf7e5c6ee28f8136572533595a9746ad00a409ce1ec393b77b5b9ddfa23f4d9a4f73fae57a06c783d258889e385819b238d785c9ea1c8c253c7c069ce5aafb26798ff8ef6fab15013f1dff347da1724485d33bb8a0dc8e1bac34c44ccb4441b416d8b0260d247eb23682329fab09a2ec0932c31b5947e67118ce19c95740581437d0514b0eb6a418083b8c3efdd1", 0x5, 0x0, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000, @void, @value}, 0x94)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30dd3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000240)=0x5, 0x4)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
io_setup(0x801, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}])
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000)
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r9, 0x4138ae84, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
r10 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000009c0)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r10, &(0x7f0000000a00)=r1, 0x12)
sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)={0x14, 0x14, 0x1, 0x70bd2d, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0)

6m23.460600829s ago: executing program 1 (id=110):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x58, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0xc8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x6}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc8}}, 0x0) (async)
socket$inet6_sctp(0xa, 0x1, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
r1 = getpid() (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) (async, rerun: 32)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
r4 = socket(0x1, 0x2, 0x0)
bind$unix(r4, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) (async)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="71756f74612c67727071756f74615f626c6f636b5f686172646c696d69743d01366fee362c00"])
r5 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, &(0x7f0000000100)) (async)
setregid(0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
setresgid(0x0, 0x0, 0x0) (async, rerun: 32)
r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x7, 0x101040) (rerun: 32)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000180)={0x401, 0xfffffffa, 0x9})
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r7 = syz_open_dev$vim2m(&(0x7f0000000400), 0x8000, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000000)={0x3, 0x2, 0x2}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0d05605, &(0x7f0000000440)={0x2, 0x0, 0x0, "5d4a03c0d6b1f7891dd5efb410ad15591ada81da3c2f10483741a6bd19dd2c23"}) (async)
prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4) (async)
r8 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000040)=@id, &(0x7f0000000080)=0x10, 0x81000)
setsockopt$TIPC_MCAST_BROADCAST(r8, 0x10f, 0x85)

6m23.048637645s ago: executing program 1 (id=111):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00'})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x800, 0x70bd2c, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_setup(0x7c45, &(0x7f0000000080)={0x0, 0x20, 0x13100, 0x0, 0xfffffffc}, 0x0, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = syz_io_uring_setup(0x117, &(0x7f0000000100), 0x0, &(0x7f0000000200)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4)
syz_io_uring_submit(0x0, r6, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc})
io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='hfs\x00', 0x8200, 0x0)
r7 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2={0xff, 0x3}, 0x0, 0x0, 0xfffffffe, 0xffffffff}})

6m18.450035607s ago: executing program 1 (id=114):
socket$nl_route(0x10, 0x3, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@loopback, 0x20009, 0x1, 0x100, 0x1, 0x1ff, 0x4007}, 0x20)
pipe2(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x84800)
r1 = syz_io_uring_setup(0x34b3, &(0x7f0000000180)={0x0, 0x0, 0x30c0, 0x1}, &(0x7f0000000100), &(0x7f0000000140))
r2 = epoll_create(0xaf2)
epoll_pwait2(r2, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0xe000200f})
syz_emit_ethernet(0x79, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "11b700", 0x43, 0x2c, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x0, 0x8}], {{0x0, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"e7d098758ab616cc98ff5a46e37833a90db7310f03183793121f88122080583472a99ffc9d2f39"}}}}}}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="1400000010000100000000000000e72048b6508f0eafaa7227e97a57cb2b5efc6927000a14000000"], 0x28}}, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0)
syz_usb_connect$uac1(0x5, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0)

6m11.788964503s ago: executing program 1 (id=119):
r0 = socket$nl_route(0x10, 0x3, 0x0)
fanotify_init(0x1200, 0x0)
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c00000010000304000000010000000000007400", @ANYRES32=r2, @ANYBLOB="00000000031201002c0012800b00010062726964676500001c0002800500190007000000080005000100000005001700"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x10)

6m7.779713632s ago: executing program 1 (id=122):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x10, &(0x7f0000000000))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x50, 0xffffffffffffffff, 0x69bff000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r0 = eventfd(0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = eventfd(0x0)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000100)={r0, 0x13, 0x2, r3})
set_mempolicy_home_node(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8)
bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x0, 0x80}]}, 0x10)
write$binfmt_misc(r5, &(0x7f0000000100), 0x6)
quotactl_fd$Q_SETQUOTA(r4, 0x0, 0xee01, &(0x7f0000000080)={0xb6f1, 0xd, 0x0, 0xac, 0x5, 0x3, 0x80, 0x3, 0x6b756ee9})

5m52.245926422s ago: executing program 34 (id=122):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x10, &(0x7f0000000000))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x50, 0xffffffffffffffff, 0x69bff000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r0 = eventfd(0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = eventfd(0x0)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000100)={r0, 0x13, 0x2, r3})
set_mempolicy_home_node(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8)
bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x0, 0x80}]}, 0x10)
write$binfmt_misc(r5, &(0x7f0000000100), 0x6)
quotactl_fd$Q_SETQUOTA(r4, 0x0, 0xee01, &(0x7f0000000080)={0xb6f1, 0xd, 0x0, 0xac, 0x5, 0x3, 0x80, 0x3, 0x6b756ee9})

5m38.282416822s ago: executing program 2 (id=141):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24)
listen(r3, 0x4) (async)
listen(r3, 0x4)
recvmmsg(r3, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async)
recvmmsg(r3, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r4 = signalfd(r3, &(0x7f0000000300)={[0xa]}, 0xffffffffffffffbf)
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0) (async)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) (async)
recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
fsmount(r5, 0x0, 0x0) (async)
r6 = fsmount(r5, 0x0, 0x0)
openat$cgroup_ro(r6, &(0x7f0000000000)='cpu.stat\x00', 0x300, 0x0) (async)
r7 = openat$cgroup_ro(r6, &(0x7f0000000000)='cpu.stat\x00', 0x300, 0x0)
read$char_usb(r7, &(0x7f0000000000)=""/74, 0x4a)
bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYRESDEC=r2, @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10)
r9 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mknodat$null(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x1944, 0x103)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x1f4, 0xa, 0x0, &(0x7f0000000100)="ff412f66b0833efc88ca", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x1f4, 0xa, 0x0, &(0x7f0000000100)="ff412f66b0833efc88ca", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50)

5m37.451676546s ago: executing program 2 (id=143):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x62, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004e0000540000000000019078ac1e0001ac1414aa44042a818917ede0000001e0000002ac1efe01ac141428000000004408448000000400000400906803090000bb9fc2ae58be5a6500000000ac14142aac141437"], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
r2 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc1105511, &(0x7f00000000c0)={{0xc, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x7ffc, 0x0, 0x9, 0x100000000, 0x0, 0x4, 0x8, 0x0, 0x0, 0x7f, 0x3cb7, 0x0, 0x8000000, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000000, 0x100000000, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x80000, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xdf9cd90, 0x8000000, 0x6, 0x2, 0x0, 0x0, 0x0, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7ffffffd, 0x0, 0x0, 0xffffffffffff2328, 0xffffffffffffffff, 0x3, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0x3ff, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800]})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}})
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}})
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82})
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0x19})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000200)={0x15, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r8, 0x0, <r9=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r9, 0x0, 0x1, 0x0, 0x10000, 0x0, 0x32bf91})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ee222})
r10 = dup(r0)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r11, 0x0)
read$char_usb(r10, &(0x7f0000000080)=""/139, 0xfdef)
ioctl$AUTOFS_IOC_READY(r11, 0x9360, 0x0)

5m34.103606297s ago: executing program 2 (id=146):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000c0ff100009"], 0x48)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000280))
r4 = io_uring_setup(0x3ad2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xfffffffd})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1cfef524", @ANYRES16=0x0, @ANYBLOB="200027bd7000ffdbdf250b0000000500290001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000081)
ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000280)={0x0, 0x0, 0x3, 0x0})
r6 = socket(0x15, 0x5, 0x0)
r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$FUSE_DIRENTPLUS(r7, 0x0, 0x10)
getsockopt(r6, 0x200000000114, 0x271b, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
r8 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x64c81, 0x0)
r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x80010, 0xffffffffffffffff, 0x8000000)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x104, &(0x7f0000000040)=0xa3, 0x0, 0x4)
ioctl$FBIOBLANK(r8, 0x4611, 0x1)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53, 0x4}, 0x20)
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0)

5m32.771852482s ago: executing program 2 (id=147):
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0)
tkill(0x0, 0x7)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000014000000090a01040000001e0000000007000000140000001e0a0501000000000000000007000000140000001000010000000000000000000084000a"], 0x70}}, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000001d40)={0x2020, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x2020)
process_vm_readv(r3, &(0x7f0000000740)=[{&(0x7f0000000340)=""/183, 0xb7}, {&(0x7f0000000600)=""/118, 0x76}, {&(0x7f0000000680)=""/141, 0x8d}, {&(0x7f0000003d80)=""/4096, 0x1000}, {&(0x7f0000000100)=""/21, 0x15}], 0x5, &(0x7f0000000200)=[{&(0x7f00000007c0)=""/215, 0xd7}, {&(0x7f00000008c0)=""/101, 0x65}], 0x2, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
chdir(0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14, r5, 0x303, 0x0, 0xfffffffc}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0)
quotactl_fd$Q_GETINFO(r6, 0xffffffff80000501, 0xffffffffffffffff, 0x0)
unshare(0x2c020400)
r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x9]}, 0x8, 0x80000)
io_setup(0x1, &(0x7f0000000b80)=<r8=>0x0)
io_submit(r8, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}])
signalfd4(r7, &(0x7f0000000140), 0x8, 0x0)
write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRESOCT=0x0], 0x15)
dup(r0)

5m23.442237596s ago: executing program 2 (id=149):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a1281)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid() (async)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x6c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x6}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x6}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x3d, &(0x7f0000000340)={&(0x7f0000000340)=ANY=[], 0xec}, 0x1, 0x0, 0x0, 0x20000801}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
socket$nl_sock_diag(0x10, 0x3, 0x4)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async)
r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r8 = eventfd2(0x2, 0x800)
io_cancel(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x6, 0xfffc, r7, &(0x7f0000000240)="60598268f68413127d2d9e7cd552161e105785417bf120252879b6e5c60c15651782c0350cde2dccf2d3b47f920001870b4d8dd0312bcb1287a7276a69a154fe800933dcc26db7d7536c9eb4ee23127f6edf56c2d03f8d33a992b5b1dcbb4f061bfcbe4ddd514c1739743e1102e77c", 0x6f, 0x8, 0x0, 0x3, r8}, &(0x7f0000000300)) (async)
io_cancel(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x6, 0xfffc, r7, &(0x7f0000000240)="60598268f68413127d2d9e7cd552161e105785417bf120252879b6e5c60c15651782c0350cde2dccf2d3b47f920001870b4d8dd0312bcb1287a7276a69a154fe800933dcc26db7d7536c9eb4ee23127f6edf56c2d03f8d33a992b5b1dcbb4f061bfcbe4ddd514c1739743e1102e77c", 0x6f, 0x8, 0x0, 0x3, r8}, &(0x7f0000000300))
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00'})
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x5522, 0x0) (async)
ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x5522, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000440)=[{0x6, 0xfd, 0x0, 0x7fff0000}]})
socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r9)

5m22.336586792s ago: executing program 2 (id=150):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYRES64], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000000)={0x40, 0xe, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, &(0x7f0000000040)={0x0, 0xb, 0x7, {0x7, 0x8, "7117a4f230"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x814}}, &(0x7f0000000400)={0x0, 0x22, 0x8, {[@local=@item_4={0x3, 0x2, 0x3, "2316185c"}, @global=@item_012={0x2, 0x1, 0x4, "e435"}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8001, 0x8, 0x1, {0x22, 0xf9b}}}}, &(0x7f00000003c0)={0x2c, &(0x7f0000000180)={0x20, 0x16, 0x82, "5f7d60f35e5a5dd169ae51e3c48ae7464c37332ab74c5b6dffc45daf2dd7492b58c6e735957aab99b11b727baed2c5affbbcf347331d51415e98e5ca7bbc52761e8b2b31645a71bec4e32206f5ec462cd797dddfc349f758b29ee2e0e46972300acb130543b403f9109056a062e6cfd1a599b79b9184de534d1840d61936b30e3d5e"}, &(0x7f0000000240)={0x0, 0xa, 0x1}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x10}, &(0x7f00000002c0)={0x20, 0x1, 0x8d, "f573097bbdf92ecca938e853c0b66e0b037bfb3b275168e2f22fc86ad664f014e2381be1d0a16979ad216b5cec0a53bab412b033cddb518b52d7fe68e8576faa085058639bc0285b4e4f2674cfdfb8f83a4a9b34a8430d449603382e887633ea4f6a92936536064f2d8948ca15878c43f373664f2f1517e96ec46a1ba0ae401060124eb7c0e0b04532eda1e38b"}, &(0x7f0000000380)={0x20, 0x3, 0x1, 0xe}}) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{0x1, <r1=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000440)}, 0x20) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'macsec0\x00', <r3=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c00000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000428000001c00128009000100766c616e000000000c000280060001000200000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x4c}}, 0x0) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000006c0)={0x7, <r5=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xc, 0xc, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xc}, @exit, @exit]}, &(0x7f0000000540)='GPL\x00', 0x7, 0xab, &(0x7f0000000580)=""/171, 0x41100, 0x41, '\x00', r3, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000680)={0x0, 0x8, 0x2, 0x8}, 0x10, r5, 0xffffffffffffffff, 0x1, &(0x7f0000000700), &(0x7f0000000740)=[{0x4, 0x1, 0x4}], 0x10, 0x6000, @void, @value}, 0x94)

5m7.06751521s ago: executing program 35 (id=150):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYRES64], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000000)={0x40, 0xe, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, &(0x7f0000000040)={0x0, 0xb, 0x7, {0x7, 0x8, "7117a4f230"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x814}}, &(0x7f0000000400)={0x0, 0x22, 0x8, {[@local=@item_4={0x3, 0x2, 0x3, "2316185c"}, @global=@item_012={0x2, 0x1, 0x4, "e435"}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8001, 0x8, 0x1, {0x22, 0xf9b}}}}, &(0x7f00000003c0)={0x2c, &(0x7f0000000180)={0x20, 0x16, 0x82, "5f7d60f35e5a5dd169ae51e3c48ae7464c37332ab74c5b6dffc45daf2dd7492b58c6e735957aab99b11b727baed2c5affbbcf347331d51415e98e5ca7bbc52761e8b2b31645a71bec4e32206f5ec462cd797dddfc349f758b29ee2e0e46972300acb130543b403f9109056a062e6cfd1a599b79b9184de534d1840d61936b30e3d5e"}, &(0x7f0000000240)={0x0, 0xa, 0x1}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x10}, &(0x7f00000002c0)={0x20, 0x1, 0x8d, "f573097bbdf92ecca938e853c0b66e0b037bfb3b275168e2f22fc86ad664f014e2381be1d0a16979ad216b5cec0a53bab412b033cddb518b52d7fe68e8576faa085058639bc0285b4e4f2674cfdfb8f83a4a9b34a8430d449603382e887633ea4f6a92936536064f2d8948ca15878c43f373664f2f1517e96ec46a1ba0ae401060124eb7c0e0b04532eda1e38b"}, &(0x7f0000000380)={0x20, 0x3, 0x1, 0xe}}) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{0x1, <r1=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000440)}, 0x20) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'macsec0\x00', <r3=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c00000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000428000001c00128009000100766c616e000000000c000280060001000200000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x4c}}, 0x0) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000006c0)={0x7, <r5=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xc, 0xc, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xc}, @exit, @exit]}, &(0x7f0000000540)='GPL\x00', 0x7, 0xab, &(0x7f0000000580)=""/171, 0x41100, 0x41, '\x00', r3, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000680)={0x0, 0x8, 0x2, 0x8}, 0x10, r5, 0xffffffffffffffff, 0x1, &(0x7f0000000700), &(0x7f0000000740)=[{0x4, 0x1, 0x4}], 0x10, 0x6000, @void, @value}, 0x94)

2m13.966996525s ago: executing program 7 (id=647):
r0 = socket$packet(0x11, 0x2, 0x300)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async)
ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0)
getpid() (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr={0x0, 0x0, 0x0, 0x4}, @func={0x4, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r2, 0x0, '\x00', 0x0, r1, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) (async)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) (async)
r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x0, 0x0)
r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
open_by_handle_at(r8, &(0x7f0000000100)=ANY=[@ANYBLOB="0c000000fe00010004"], 0x408100)
userfaultfd(0x80001)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6}]}, 0x10)
syz_emit_ethernet(0x3e, &(0x7f0000000980)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0xa, 0xb, 0x0, {0x5, 0x4, 0x2, 0x2, 0x9094, 0x66, 0xf9, 0x3, 0x1d, 0x0, @remote, @empty}}}}}}, 0x0)

2m12.518918008s ago: executing program 7 (id=651):
socket$netlink(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x2}]}, &(0x7f0000000d40)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa004)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2)
r5 = epoll_create(0x207fff)
r6 = dup3(r4, r5, 0x0)
write$FUSE_INIT(r6, 0x0, 0x0)
r7 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x121100, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f00000000c0)={0x6, "1f938a7b853b3a9b0b00000000000000008900", <r9=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x200, "1f138a91b80f3795181800c70511603979e1ef3b3a9b0b8c7d6a2ef124708900"})
ioctl$SYNC_IOC_MERGE(r9, 0xc0303e03, 0x0)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000002840)={0xff}, &(0x7f0000002880)={0x0, 0x989680}, 0x0)
syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x8242)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r10}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
rt_tgsigqueueinfo(0x0, 0x0, 0x12, &(0x7f00000000c0)={0x3, 0x0, 0x8})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)

2m11.59155222s ago: executing program 7 (id=653):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus/file0\x00', 0x50) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x20001, 0x4) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff})
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x0, 0x0) (async)
r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)=0x10e)
r4 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10120, 0x400000}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000080)=<r6=>0x0) (async)
socket(0x10, 0x3, 0x0)
syz_io_uring_submit(r5, r6, &(0x7f00000003c0)=@IORING_OP_TEE={0x21, 0xc, 0x0, @fd, 0x0, 0x0, 0x82, 0xb, 0x1, {0x0, 0x0, r2}})
io_uring_enter(r4, 0x27e2, 0x0, 0x0, 0x0, 0x0) (async)
r7 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x10b442, 0x0) (async, rerun: 32)
r8 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) (rerun: 32)
write$dsp(r7, &(0x7f00000004c0)="e2", 0x1) (async)
ioctl$SNDCTL_DSP_SYNC(r7, 0x5001, 0x0) (async)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r8, 0x4122, 0x0) (async)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@index_off}]})
r9 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x101000, 0x0)
r10 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r10, &(0x7f0000001600)='./file1\x00', 0xc000, 0x0) (async)
chdir(&(0x7f0000000140)='./bus\x00') (async, rerun: 32)
linkat(r9, &(0x7f0000000100)='./bus\x00', r9, &(0x7f0000000240)='./bus\x00', 0x0) (rerun: 32)

2m11.407081113s ago: executing program 7 (id=654):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x15, 0x0, 'wrr\x00'}, 0x2c)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000180)={0x2, 0x14, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10)

2m11.28545555s ago: executing program 7 (id=655):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000797000/0x4000)=nil, 0x4000}, 0x1})
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0x1, 0x8000, {<r1=>0x0}, {0xee01}, 0x400, 0x3})
move_pages(r1, 0x1, &(0x7f0000000000)=[&(0x7f0000bc9000/0x3000)=nil], 0x0, 0xfffffffffffffffe, 0x2)

2m11.093044268s ago: executing program 7 (id=658):
r0 = openat$snapshot(0xffffff9c, &(0x7f0000000000), 0x6b043, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r1}, 0x11)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@deltaction={0x38, 0x18, 0x1, 0x70bd27, 0x0, {0xa}, [@TCA_ACT_TAB={0x24, 0x1, [{0x14, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x38}}, 0x0)
r3 = socket(0x10, 0x2, 0x0)
sendto$inet6(r3, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006020a0000000d0085a168d0bf46d32345653600648d07000b000a00070849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e218d1dd3b6ed538f6523250", 0x78, 0x0, 0x0, 0x0)
socket$kcm(0x29, 0x7, 0x0)
fsopen(&(0x7f0000000040)='securityfs\x00', 0x0)
write$P9_RLINK(r0, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001e80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000090000000060a010400000000000000000100000008000b400000000068000480300001800e000100696d6d6564696174650000001c0002800800014000000000100002800c0002800800018000000000340001800c00010062697477697365002400028008000340000000040800024000000000080006400000000008000140000000200900010073797a30"], 0x104}}, 0x0)
r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb)
r6 = add_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="02", 0x1, r5)
keyctl$chown(0x4, r6, 0xee00, 0xffffffffffffffff)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280))
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f00000003c0))

1m55.291387673s ago: executing program 36 (id=658):
r0 = openat$snapshot(0xffffff9c, &(0x7f0000000000), 0x6b043, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r1}, 0x11)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@deltaction={0x38, 0x18, 0x1, 0x70bd27, 0x0, {0xa}, [@TCA_ACT_TAB={0x24, 0x1, [{0x14, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x38}}, 0x0)
r3 = socket(0x10, 0x2, 0x0)
sendto$inet6(r3, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006020a0000000d0085a168d0bf46d32345653600648d07000b000a00070849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e218d1dd3b6ed538f6523250", 0x78, 0x0, 0x0, 0x0)
socket$kcm(0x29, 0x7, 0x0)
fsopen(&(0x7f0000000040)='securityfs\x00', 0x0)
write$P9_RLINK(r0, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001e80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000090000000060a010400000000000000000100000008000b400000000068000480300001800e000100696d6d6564696174650000001c0002800800014000000000100002800c0002800800018000000000340001800c00010062697477697365002400028008000340000000040800024000000000080006400000000008000140000000200900010073797a30"], 0x104}}, 0x0)
r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb)
r6 = add_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="02", 0x1, r5)
keyctl$chown(0x4, r6, 0xee00, 0xffffffffffffffff)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280))
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f00000003c0))

10.101823303s ago: executing program 8 (id=1128):
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000180)=ANY=[], 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r1}, 0x18)
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000200)=@other={'unlock', ' ', 'none'}, 0xc)
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000380)={0x0, 0xfffffffffffffc3f})
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x2)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet6(0xa, 0xa, 0x10000)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x6, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x71a}, 0x1c)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x24, r4, 0x400, 0x70bd2a, 0x25dfcbfc, {}, [@NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008841}, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) (async)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000180)=ANY=[], 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r1}, 0x18) (async)
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000200)=@other={'unlock', ' ', 'none'}, 0xc) (async)
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000380)={0x0, 0xfffffffffffffc3f}) (async)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x2) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$inet6(0xa, 0xa, 0x10000) (async)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x6, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x71a}, 0x1c) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) (async)
sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x24, r4, 0x400, 0x70bd2a, 0x25dfcbfc, {}, [@NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008841}, 0x0) (async)

8.463807964s ago: executing program 5 (id=1130):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = epoll_create1(0x0)
r2 = epoll_create1(0x0)
r3 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r3)
keyctl$KEYCTL_MOVE(0x1e, r3, r3, r4, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0xe000202b})
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40, 0x103)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f0000000340), 0x4000)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'})
r6 = socket$inet6_dccp(0xa, 0x6, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x18, &(0x7f00000001c0)=0x3, 0x4)
r7 = socket$packet(0x11, 0x3, 0x300)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r8)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000))
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@bridge_getlink={0x28, 0x12, 0x8, 0x70bd2d, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x2dc0, 0x60802}, [@IFLA_PROMISCUITY={0x8, 0x1e, 0x3}]}, 0x28}}, 0x0)

8.37222141s ago: executing program 8 (id=1131):
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="090000000a000000008000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000030000000000000000000000000000000000000b008b7e51fe771c5a1be00e3bfb602bc19373167aab803a897c17542d2d050edd51310a"], 0x50)
socketpair$nbd(0x1, 0x1, 0x0, 0x0) (async)
mkdirat(0xffffffffffffffff, 0x0, 0x16b) (async)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x1f) (async)
socket(0xa, 0x2, 0x7fff) (async)
r0 = openat$dlm_monitor(0xffffff9c, &(0x7f00000016c0), 0x0, 0x0)
openat$dlm_monitor(0xffffff9c, &(0x7f0000001d40), 0x64200, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008a}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x2) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) (async)
readv(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000060000000090a01040000000000000000070000000800"], 0xa8}}, 0x0) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r4)
sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100fcff7f00000000002100000009001f0070687930000000000c000500000000000000000005002000000000004ae6a5c62d8df0fc4927c578dd7eb2acf57386cb69c696b7e84f1aafcf32059d5b1bc4ef67950a34295e4b8410924fbc834f7dc1c430007990b5c6fdd09c830d8fceb9c0bf00524563ec59926996b0e4b1dfe4b3ff26a0a7ccb1b8383ba8b9575aa29b953d0fa9fad8b37109f6fc5316c1bdbc9f9c04656eebdaf1f1e74447f7caaaa14e1ac40a0fb4b71a8a6fe99b8043759270"], 0x34}}, 0x0) (async)
socket(0x10, 0x803, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r6, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0)
r7 = syz_usb_connect$printer(0x2, 0x0, 0x0, 0x0)
syz_usb_control_io(r7, &(0x7f00000015c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x200001, 0x0) (async)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000340)="3e02fc4d1b17e364a383fe27aebdbd4b7149b96734f7ea382b4b01ae94ca492ba5e9ae35f3a72c4c67d788ff0f7d450668f80387d313ef7a4625f7afa19b666b2f69fa7870f6dc559ca93e51a5fb65789b731e16d228d946f72ddd2ef84bd9737f37d4dbc0c56371a158bfc6c4db77f78c6adcccd23c91d738c2c8f88b084b631b3f79f06569a05488f5488ca0a1b219", 0x20000000}, 0x20)

7.97982193s ago: executing program 8 (id=1132):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000000)=0x93e9, 0x4) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={<r1=>r0, 0x1, 0x4, 0x5b})
ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000080)) (async, rerun: 64)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) (async, rerun: 64)
ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000100)=0x4)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={<r2=>0x0, @multicast2, @empty}, &(0x7f0000000180)=0xc)
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000001c0)={@mcast1, @mcast1, @rand_addr=' \x01\x00', 0x401, 0x4, 0x7, 0x100, 0x9, 0x80000, r2})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) (async)
recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000280)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000300)=""/185, 0xb9}, {&(0x7f00000003c0)=""/129, 0x81}], 0x2}, 0x88bc}], 0x1, 0x0, 0x0)
write$yama_ptrace_scope(r1, &(0x7f0000000500)='2\x00', 0x2)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000540)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
ioctl$IOMMU_GET_HW_INFO(r1, 0x3b8a, &(0x7f0000000680)={0x28, 0x0, r3, 0x81, &(0x7f00000005c0)=""/129}) (async)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0xb, [@union={0xe, 0x5, 0x0, 0x5, 0x1, 0xfff, [{0x2, 0x3, 0xe}, {0xd, 0x1, 0x40}, {0xc, 0x0, 0x3}, {0x9, 0x1, 0x845d}, {0x3, 0x3}]}, @restrict]}, {0x0, [0x5f, 0x61, 0x2e, 0x61, 0x0, 0x0, 0x5f, 0x0, 0x30]}}, &(0x7f0000000740)=""/145, 0x77, 0x91, 0x0, 0x4, 0x10000, @value=r1}, 0x28)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0xfffffffc, 0x0, r1, 0x3, '\x00', 0x0, r4, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async, rerun: 32)
write$tun(r1, &(0x7f00000008c0)={@val={0x0, 0xfbfb}, @val={0x0, 0x80, 0x1ff, 0x3, 0x9, 0x1}, @x25={0x0, 0xe3, 0x17, "abb2decefc4f36057b6c2802ed27152ed6959fa212911c65591a8747b845e3f64d0c9ccebc47eb4cb0c9a3eef1062b09954027d13b2e5c2efb2096cba1125737cc484547ea85770357c4b262b5a532bcc30296a7d3cbfbebfd84d66e57d5e2fe65e11216ccf5d37c4570d382cbefe76eb4935423f77a784d269028deab4cd3a16029ccc3eb05159cdce6fd68940a32fb076f2af978ba9c7eabb79b8e41f40e268c616932aaed1ce37fbfa1eb15f86ed0099dc2"}}, 0xc4) (async, rerun: 32)
sendto$unix(r1, &(0x7f00000009c0)="d70ddd40760420671892f2df00368d381cc3ec2b739abb1eabd42bee6a63cdbdf6eff91ad74f39da901254d09f0d73805e2eb3abeebcc7899b3cc9f360", 0x3d, 0x20000000, &(0x7f0000000a00)=@file={0x0, './file0\x00'}, 0x6e)
r5 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000a80)={0x0, {{0x2, 0x4e21, @local}}, 0x1, 0x4, [{{0x2, 0x4e21, @private=0xa010101}}, {{0x2, 0x4e21, @private=0xa010100}}, {{0x2, 0x4e23, @private=0xa010102}}, {{0x2, 0x4e23, @multicast1}}]}, 0x290) (async, rerun: 64)
r6 = socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 64)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r6, 0x28, 0x0, &(0x7f0000000d40)=0x10001, 0x8) (async)
sched_setscheduler(0xffffffffffffffff, 0x6, &(0x7f0000000d80)=0x7) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000dc0)={0x7, {{0x2, 0x4e24, @local}}, 0x0, 0x1, [{{0x2, 0x4e22, @multicast1}}]}, 0x110) (async, rerun: 64)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000f00)={0x1, <r7=>r6, 0x2}) (rerun: 64)
ioctl$AUTOFS_IOC_FAIL(r7, 0x9361, 0x3) (async, rerun: 32)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000f80), r1) (rerun: 32)
sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x1c, r8, 0x20, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000001080)={<r9=>0x0, 0x0, r1})
ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f00000010c0)={r9})

7.948195856s ago: executing program 5 (id=1134):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0) (async)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201003c63000010d804dd0000000000000109022400010000000009040000010300000009210500000122050009052612d778000007d21b23373c9958bf2f218a8d76b073ed2e074159bc08558d8c34e72b23d4f41d5e0c9c4759a2f7b87bc4acc4ff2e94817f63af77143f2038b13fe722b63a13414c02e9fa98b7d8642b"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x4, &(0x7f0000000140)="914f5720") (async)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb7, 0x53, 0xb5, 0x8, 0x46d, 0x896, 0x3a11, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc0, 0xda, 0xfa}}]}}]}}, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121)
r3 = dup(r2)
write$6lowpan_enable(r3, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)

7.897704466s ago: executing program 3 (id=1136):
syz_open_procfs(0x0, &(0x7f0000000080)='net/vlan/vlan0\x00')
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r0, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40})
set_mempolicy(0x6, 0x0, 0xe0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x2, 0x4e1d, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @private=0x3}}}], 0x20}, 0x80)
r2 = add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)="429e3f26bd790a1b96367c9cc853c56718db3386ffc2257f777abdce318826d619a2c85bad91f373ccefefc264cff264906beaef93ddc981ab237becf8baa59b5d187337ab8a4da2e3f00e963cfdeea5da6114d6702eb26872d31f6f70ee3b4bc811835a35393e22698e8a5a525e88546d35c9b98f46b5b41e03b3bc4babd0906b23678b17192163e79d70c55c79091b5c7e9db9d09af5adf2278b9f1000f34ba05dcc9422ae44a610653ea3b036cbdaf2437b98ae9512c22b713b93eab7e27a6f50542be80cfcaf151004f2", 0xcc, r2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000003000000003800000700000011000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000ffe6fef8ab701462188597308efe01439b50000000"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18)
socket$nl_xfrm(0x10, 0x3, 0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20040080)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r4=>r3, {0x2}}, './file0\x00'})
ioctl$FBIO_WAITFORVSYNC(r4, 0x40044620, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$msr(r5, &(0x7f000001b700)=""/102392, 0x18ff8)
socket$inet_tcp(0x2, 0x1, 0x0)
r6 = socket(0x80000000000000a, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4040040)

7.346758513s ago: executing program 8 (id=1137):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x120, 0x800072d}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0xfff)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0180f2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x3}}}}}}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x20, 0x0, 0x0, 0x41}}}}}}}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x28, 0x3f, 0xb, 0x70bd25, 0x0, {0x2}, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x5}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xb5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
socket$kcm(0x29, 0x5, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000006000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r6}, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="250200000000000000001500000018000180140002006e657464657673696d30"], 0x2c}}, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r8, 0x100000000)
r9 = gettid()
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
tkill(r9, 0x12)

7.034286735s ago: executing program 3 (id=1139):
r0 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x58, &(0x7f0000000240), 0x1}, 0x60040d5)
flock(r0, 0xc)
syz_emit_ethernet(0x42, &(0x7f0000000140)=ANY=[@ANYBLOB="0180050000000000000000000c1100fc010000000000000000000000000000ff02000034cfe7d6341f8944f6f83500000000000000000000000100000e22000c907801000000"], 0x0)
socket(0x10, 0x3, 0x0)
futex(&(0x7f0000000040)=0x2, 0x8, 0x1, &(0x7f0000000080), &(0x7f0000000100)=0x1, 0x0)
umount2(&(0x7f0000000000)='./file0\x00', 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x8, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10)
r8 = socket$inet(0x2, 0x2000000080002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x238, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}, 0x2b0)
setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000180], 0x0, 0x0, &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108)
setgroups(0x0, 0x0)
fsetxattr$trusted_overlay_redirect(r5, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

6.971562724s ago: executing program 9 (id=1140):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = dup(0xffffffffffffffff)
ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82)
ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x101, 0x100}})
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000206050000000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a300000000005000400004000000500050002000000050001000600000014000780080006400000000008001340"], 0x64}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x0)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r6, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
r7 = dup(r6)
write$FUSE_BMAP(r7, &(0x7f0000000740)={0x18, 0x0, 0x0, {0x1000000003}}, 0x18)
write$FUSE_DIRENTPLUS(r7, &(0x7f0000000600)=ANY=[], 0xb0)
r8 = accept4$unix(r0, 0x0, 0x0, 0x0)
recvmmsg(r8, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000200)=""/128, 0x80}], 0x1}}], 0x1, 0x0, 0x0)

6.674596028s ago: executing program 8 (id=1141):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
r1 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}}}, 0x24}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}}}, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xc, 0x10}}]}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xc, 0x10}}]}}]}, 0x38}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, &(0x7f0000000540)={0x20, 0x9, 0x2, {0x2, 0x3}}, 0x0}, 0x0) (async)
syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, &(0x7f0000000540)={0x20, 0x9, 0x2, {0x2, 0x3}}, 0x0}, 0x0)
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r4, 0x5b02, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x92902, 0x0) (async)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x92902, 0x0)

5.702715704s ago: executing program 3 (id=1142):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
fsopen(0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000020c0)=@generic={&(0x7f0000002080)='./file1\x00', 0x0, 0x28}, 0x18)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r5=>0x0})
r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r6, &(0x7f00000002c0)={0x1, 0x5}, 0x2)
write$USERIO_CMD_REGISTER(r6, &(0x7f00000000c0), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r6, &(0x7f0000000100)={0x2, 0x3}, 0x2)
bind$packet(r4, &(0x7f0000000300)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETSW(r7, 0x5403, &(0x7f0000000100)={0x0, 0xf3, 0x0, 0x0, 0x0, "0abac4ea29e3c7ad447e30c48c00"})
r8 = dup(r7)
write$UHID_INPUT(r8, &(0x7f0000001040)={0x8, {"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", 0x101c}}, 0x20002046)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r9 = syz_open_procfs(0xffffffffffffffff, 0x0)
read$FUSE(r9, &(0x7f0000000040)={0x2020}, 0x2020)

5.437122724s ago: executing program 9 (id=1143):
r0 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2, &(0x7f0000000480)={0x77359400})
setsockopt$sock_int(r0, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) (async)
r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(r2, 0x4068aea3, 0x0)
ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000040)={0x2710, 0x0, &(0x7f0000ffd000/0x3000)=nil}) (async)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0x63f8, 0x4) (async)
r3 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r4, &(0x7f0000000400)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800010f5e05000003000000810000004a0000009cd2b5367ed6af6ef36f0563042517314b2829eff041ec92c61600d2c1f6be0a7214ca6eb229149db8ac0ef1875b1f7a39b5f6f0586f31b30de6d7fd160747cfd0c7dfc9b010340602dc39cec7aaef9f9c272d5add2524a82b5e5c76a5be20f0d40d74030386b7904ebca28c097caee80b50bc9a0c6e554898686e056df29800e9373e4a5fe9a778613a8f96673891ba30d725e4a5e27ea69a4b02296648432e1d07709d3287b13f4418b8bd757aaa60bb3f6c4ee32717508a4647e133ffffff7f5f5d4e4fff1d42"], 0x1e0) (async)
write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) (async, rerun: 32)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) (rerun: 32)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0)

4.455131786s ago: executing program 9 (id=1144):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
r2 = syz_io_uring_setup(0x3892, &(0x7f00000003c0)={0x0, 0x8000000, 0x100, 0x0, 0x220}, &(0x7f0000000280)=<r3=>0x0, &(0x7f0000000380)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r2, 0xce3, 0x0, 0x0, 0x0, 0x0)
r5 = dup(r1)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000180)={0x626f, 0xc, 0x9, 0x7, <r6=>0x0}, &(0x7f00000002c0)=0x10)
sendmsg$inet_sctp(r5, &(0x7f0000000340)={&(0x7f0000000100)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10, &(0x7f0000000140)=[{&(0x7f00000003c0)="94f711a1ad7c907f9c3b7f5afe243c64079f499c552caa85d13b4a12733c7d2cd2b321e38a869111818cf960b42c932ebddc05babd98187d5d643216e98a124bd1806eb726c026845945efde1ef1a11145f4b335ea5f7cee6131d566e0b98c8c282691de5bb6d9faabfb68a022839ec5d35c5928ed5b727f0d9287927fe24cc5257b308e99ccc745841cad895a5aec674776920b341e0c2f65d77b9b3ac8badb839a8d86c9cbc5986c1adfd667e624a2befdecbe426dbb4139c41f6dc6d87e16c880ad5e345bdbc724f6eafc96", 0xcd}, {&(0x7f00000004c0)="827b00e1aa3a694be766a5d3a84036bd9c9c64f4e9548853a237c7811b4a3ae09c2da47113d2cb598ff899c529b1000c09b6148f7ad78dceca549fa40237a28ccf01bbd0ec4e3a3cb024a0938bc6213af5651231be4fbf2a07359c169fe2fe91da1ec17ff365517da74a41b47aa2a8f4143e284ff74094bcb03678a1e5368e14fce961415167d7d89c457b7b45d338d27b49a9463b99a667b4c55b8203185f096ea99286c7b5b740201090edb73911546cae32fc9bf858bce21de407ca48f467f74974e6ab0f7fb9c23cc8079ff59a66516dbddfd9a39128924dcd575cf5fb15e3f15c951863da673788c54f3aa8f8c15e2c5d75f7b224f92ececee2", 0xfc}, {&(0x7f00000005c0)="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", 0x1000}], 0x3, &(0x7f0000000300)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x0, 0xffff, 0x7, r6}}, @init={0x18, 0x84, 0x0, {0x6, 0x2, 0xe9c0, 0xffe0}}], 0x38}, 0x4045)
r7 = socket(0x40000000002, 0x3, 0x2)
recvmmsg(r7, &(0x7f0000000280), 0x0, 0x2, 0x0)
r8 = socket(0x40000000002, 0x3, 0x80000000002)
setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, 0x0, 0x0)
sendto$unix(r8, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x6e)
sendto$inet(r5, &(0x7f00000015c0)="986d37acf31d255043b0a37a9dd80ec22a36a3b00a4f5a4c910f95702ddd294ce767e0a8bdadaef1e46a4fd83d83371298412f43376d9ec4ceaaa89a94e4ba67347edb9ca4b0a4c82994878243048e520648fd564f9be704043e0d97a3498a595dcc0e50800c69d8468f0e34f607107dc4d0", 0x72, 0x8080, &(0x7f0000001640)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r10 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
writev(r9, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900232b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x28}], 0x2)
ioctl$PIO_CMAP(r5, 0x4b71, &(0x7f0000000000)={0x6, 0x6, 0x4, 0x1, 0x0, 0x6})
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x98}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x20000000)
socket$nl_netfilter(0x10, 0x3, 0xc)
r11 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00'})
socket$inet6_tcp(0xa, 0x1, 0x0)

4.356526804s ago: executing program 3 (id=1146):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
creat(&(0x7f0000000040)='./file0\x00', 0x0)
lremovexattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=@known='system.posix_acl_access\x00')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x301000, 0x0)
io_uring_setup(0x1009, &(0x7f0000000040)={0x0, 0x9f3, 0x400, 0x0, 0x4})
r1 = dup(0xffffffffffffffff)
write$cgroup_pid(r1, 0x0, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect(r2, &(0x7f00000004c0)=@rc={0x1f, @none, 0x4}, 0x80)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect(r3, &(0x7f00000002c0)=@rc={0x1f, @none, 0x8}, 0x80)
close_range(r0, 0xffffffffffffffff, 0x0)
ioperm(0x0, 0x82, 0x1e)
socket$alg(0x26, 0x5, 0x0)
r4 = semget(0x3, 0x4, 0x610)
semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000040)=[0x7])
semget(0x1, 0x4, 0x243)
semget(0x1, 0x4, 0x302)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4)
getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000140)={@initdev, <r6=>0x0}, &(0x7f0000000180)=0x14)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', r6, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000001840)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x6, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x8, 0xa, 0x4}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x0}, {}, {0x18, 0x2, 0x2, 0x0, r5}, {0x7, 0x0, 0xb, 0x2}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

4.194621392s ago: executing program 5 (id=1147):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1400000013000100000000000000000006"], 0x14}], 0x1}, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001a00010028bd7000fedbdf24811480030000009604bb2f761731e840b3b1b28095d22a8f32a548dbac000000000088370edf1dffa2cae1c59ee519512904be230c171f6b9e890748eaaaf07d20cf0af8e6945a07c68e38114a4dd1711f4de7d140dda4f810427cba0191d712b07873702ad012f23e03f8378aabd6e6c047eb51c1837aa77fd2f0bdb46f56b194fc1145d0f564995bf04f3914127885786f069667910c4cde556793807be965a99492356e2bc80b"], 0x1c}}, 0x884) (async)
syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="92010000fdd796405e0484022c6a010203010902240001000000000904"], 0x0)

3.609937801s ago: executing program 3 (id=1148):
mkdir(&(0x7f0000000640)='./file0\x00', 0xa0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
creat(0x0, 0x0)
chdir(0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
fchown(0xffffffffffffffff, 0xee01, 0x0)
r2 = accept$unix(r1, &(0x7f00000001c0), &(0x7f0000000240)=0x6e)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'ip6gre0\x00'})
openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x11c, 0x11c, 0x3, [@typedef={0x6, 0x0, 0x0, 0x8, 0x2}, @enum64={0x5, 0x7, 0x0, 0x13, 0x1, 0x0, [{0xf, 0x2, 0xe9}, {0xa, 0x10000, 0x10}, {0xc, 0x800}, {0x5, 0x1, 0x7}, {0xf, 0x0, 0x9}, {0xc, 0xffff7fff, 0xffffffff}, {0x3, 0x7fffffff, 0x400}]}, @const={0xb, 0x0, 0x0, 0xa, 0x3}, @int={0x5, 0x0, 0x0, 0x1, 0x0, 0x43, 0x0, 0x28, 0x1}, @enum64={0x2, 0xa, 0x0, 0x13, 0x1, 0x8, [{0x8, 0x8}, {0x10, 0x8, 0x5}, {0xa, 0x80, 0xd4}, {0x9, 0x9, 0x1}, {0xc, 0xb, 0x800}, {0x6, 0x54b, 0x2}, {0x2, 0x7, 0x3}, {0xb, 0x8001, 0x1}, {0xb, 0x7, 0x2}, {0x10, 0x1, 0xfc1}]}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0x38, 0x0, 0x7c, 0x2}]}, {0x0, [0x61]}}, &(0x7f0000000b40)=""/4096, 0x137, 0x1000, 0x1, 0x7, 0x0, @void, @value}, 0x28)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10)
setsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4)
sendmmsg$inet(r3, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044)
sendto$inet(r3, &(0x7f00000000c0)="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", 0xffe3, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000b00)=0x6)
io_setup(0x7, &(0x7f0000000280)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}])
ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000080)=0x3ff)

3.51121846s ago: executing program 3 (id=1149):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x40, 0xd, 0x2, {0x2, 0x9}}, 0x0}, &(0x7f0000000200)={0x1c, 0x0, 0x0, 0x0})
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = dup(r2)
write$UHID_INPUT(r3, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc)
r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8)
r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x8, r4}, 0x18)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r3, 0x20, &(0x7f0000000380)={&(0x7f0000000240)=""/108, 0x6c, <r6=>0x0, &(0x7f00000002c0)=""/174, 0xae}}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x6, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x94}, @map_val={0x18, 0x7, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0xd41}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc)

3.286215494s ago: executing program 8 (id=1151):
r0 = syz_open_dev$vim2m(&(0x7f0000000440), 0x8, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x7, 0x2, 0x4})
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405668, &(0x7f0000000100)={0x2, 0x3, 0x2, 0x880})
syz_open_dev$MSR(&(0x7f00000008c0), 0x8000000000000000, 0x0)
syz_usb_connect$uac1(0x0, 0xcf, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_connect$cdc_ncm(0x2, 0xb8, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa6, 0x2, 0x1, 0xe, 0x0, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "fa0a1303a835"}, {0x5, 0x24, 0x0, 0x200}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x8, 0x1ff, 0x7}, {0x6, 0x24, 0x1a, 0xeb7, 0x4}, [@mdlm={0x15, 0x24, 0x12, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x1, 0x8, 0x140}, @mdlm_detail={0x1b, 0x24, 0x13, 0x7, "e052cf096779d684471ed43604c2407c74365ed412bacb"}, @dmm={0x7, 0x24, 0x14, 0x1, 0x2}, @obex={0x5, 0x24, 0x15, 0xe}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x9, 0x7f, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x5, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0xc6, 0x4, 0x9}}}}}}}]}}, &(0x7f0000000800)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x310, 0x2, 0x3, 0x2, 0x20, 0x23}, 0x8, &(0x7f0000000300)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0xa, [{0xf4, &(0x7f0000000340)=@string={0xf4, 0x3, "e65517f9a545316ed2cc0a34b1796e32b64ac12bed017060d0310579c60449fddfc5c7205aa03714587120f6d504435a0fb34ba8a225974b18416a1a713f31d6b790287a6feb93943d1078134e966775524fd4f6653ca602cc40979b2e98308009a542b117e1e44541e9def5a7ac4b8e31ce7926a311d51d5ef15a3d810baa812418f797b9ae018a4320145f8c6ccc4ec673a322019eee8abd8b21d60d198054d8c4dc754b7b9bd558d40f90ad3748133f74597f08da1808814f483511dc51023eea4fe451b0e41d68e859d14498a6481a7a8853636958255c4dd4a12dff4d9c5fc0178ff8c79191358c502ec88728c177a9"}}, {0xc, &(0x7f0000000480)=@string={0xc, 0x3, "32b42cf274b7b36c90b3"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0xc0a}}, {0x7b, &(0x7f0000000500)=@string={0x7b, 0x3, "271fbc4402daec1641d0e88e6f0dd9a198fabef70c5261f8b132460da66922ea2026840b6d641256e291e4bd33b5f8fd83c08198e9637670f81f68bf4842e7461e16f086cb239d8ccc00d230ac9f8e70ecaf9d0f6f5c63d89e9b1770a99e02819c035ba55d886ef90f89fe5ee301f98edb8a754533f21b0be1"}}, {0xe6, &(0x7f0000000580)=@string={0xe6, 0x3, "4d210abc68d9bb6570c38fb5c0c8d8d2db77d83f7fe8d0747e6951eb361bce9b6ccab107842d3cf6f941e892f111a77b8981ff8d89171da6ed30034ff9ed3e861289b18613afd650a51aa71211d46857f22ddb6d173125c936f50d84d66084beca07f4c6f46f2210770458d25a1ea32941a60cf813381b48278921d0e8f1bf7d1ed4a0dad83aa604678954569576c317a6186b88102abf5dc973cdffd24dd67b0057f83d8c721574945af0a8913cab8a6b5a06e08d5307bce4cf14584907af880195a019d018e35e77533a8d0e0f265b673a3dab11d7dbe21d42d1fe6ea4fcb6d340ea5b"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x81a}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x425}}, {0x7e, &(0x7f0000000700)=@string={0x7e, 0x3, "3b6a24a8c89a469d57cf03f7ce931ee485f87f9abd31795c746054f6be603c931f69e3e0dfae2349fdd951e52a0e3fb4d238a56ae4a5f8ed025c66379a63e2878ed37ea71023cdd732fb8570312d4b1bbbe596cc9041d96c57de99c493945c0837c8cee75ec9a89d54f47db77f9aa8bcdea4c9ec3793fc0e93eba694"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x3401}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x44b}}]})

3.284918074s ago: executing program 9 (id=1152):
io_setup(0x5ff, &(0x7f0000000040)=<r0=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x109480) (async)
r2 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x109480)
ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000040)={0x0, 0x20, 0x0, 0xfffffffe, "00207d2000000000201b14700c1e0ac74f000000001200000000000900"})
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/crypto\x00', 0x0, 0x0) (async)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/crypto\x00', 0x0, 0x0)
io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0xffffffffdf707945}])

2.32010035s ago: executing program 6 (id=1153):
iopl(0x3) (async)
set_mempolicy(0x0, 0x0, 0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) (async)
syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) (async)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
add_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0xfe95, 0xffffffffffffffff) (async)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) (async, rerun: 64)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (rerun: 64)
r4 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000100)={0x80000000, &(0x7f0000000180)=[{}, {<r5=>0x80000000, <r6=>0x0}], 0x0})
ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000000280)={{0x80000000, 0x0, 0x6, [0x7ff, 0x19a7]}, {r5, r6, 0x3, [0x983, 0x80000000]}, 0x0, [0x0, 0x80000001]}) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000080)='syzkaller\x00', 0x800, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 64)
r8 = socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 64)
connect$vsock_stream(r8, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000840)='virtio_transport_alloc_pkt\x00', r7}, 0x18) (async, rerun: 64)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r8, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) (async, rerun: 64)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) (async)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0)

2.282370683s ago: executing program 5 (id=1154):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, <r3=>r1})
ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00')
ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000540)=0x1)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]})
openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800040001"], 0x50)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

1.91499168s ago: executing program 6 (id=1155):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x1}}, './file0\x00'})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x5, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r0, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000004000000ff0f0000ffffffff00020000", @ANYRES32=r1, @ANYBLOB="07000000000000000000000000000000000000002633694081d99ea807d36a03b605e96f911119318d8989fae7921719075ec77068925cfc5f682e9b84b9386eb24cd661636f33090403a3233b84bca42ddfe3f9269b1370231b52f59862af6f655adb8c3abfdade0efa4c953271042f04cc5b752f338c0690f985e4b06674ee11495b0b75f956c3677a05dedf4f98d2dd9307ab6e92b87f41a79f98f553164b4ceb755560e930e247407bb13dfea28a794f156c7ed77f9847aee25075eed3eabdfd1d107ba7c4d6c3f47c0c13fe3b5464ebd8f4871cca8e7f2e213f0b529a4e3354126a2e0dff67cf8500b5ed97695db0e3b5dedef15f115f", @ANYRES32=r3, @ANYRES32=r0, @ANYBLOB="05000000030000000400"/28], 0x50)
getpid()
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000480)={0x0, 0x0})
setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0xf, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
r6 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
write$UHID_INPUT(r6, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
ioctl(r7, 0x8b1a, &(0x7f0000000040))
socket$nl_generic(0x10, 0x3, 0x10)
openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)

1.613350195s ago: executing program 6 (id=1156):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, 0x2, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10)

1.516894555s ago: executing program 6 (id=1157):
r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0xdfc, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0x7ddb2ffec8b20c86, 0x5, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x6, {0x9, 0x21, 0x8000, 0x6, 0x1, {0x22, 0x779}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x81, 0x9, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x5, 0x1, 0xd}}]}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x1, 0xf0, 0x9, 0x40, 0x4}, 0xd9, &(0x7f0000000080)={0x5, 0xf, 0xd9, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0xd, 0x6, 0x2ed5760, 0xf00, 0x1ff, [0xffc000, 0xff0030, 0xff0000, 0x3f00, 0xcf, 0xff00c0]}, @generic={0x78, 0x10, 0x3, "c58460f9e314fca3a4089be85ec87f13c1e74716f4dbb0abb7b37647f1bb64a32ab4a7bb0c963ca8af6053386a015afb7735b9228e1a476256b48272b1ebeb3278564e87da40f0d98adce146e5f2987077053aa53443c6e74930efac0c98473b833ff58e2e2defc421970a8943e2fae52a1e184feb"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "d1dd3904d104a47a70a7e1d5d4982ce3"}, @ss_container_id={0x14, 0x10, 0x4, 0xa, "5d43bf6c4ff71f7933f04c845cdc021f"}, @ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0xa, 0xf00, 0x2, [0x3f00]}]}, 0x9, [{0x8e, &(0x7f0000000180)=@string={0x8e, 0x3, "10acea703bf8f3ff95684f62ff5904266fc743dac24e16079ee24aa6043506aabc295696fc3b767786657d4d790bdef363feeb5c5855680f7767df33c08ab9429543e2a643087a58f4b0bf4511e6995cf07d8b0631e06c90368bc14f43fc1602b1a8eab3573f84d883f49abc5c81aa8d962b7f7d5fec8ecb46bd4041450aab023fa296409a1ab8faaacba321"}}, {0xc9, &(0x7f0000000240)=@string={0xc9, 0x3, "8651327e112f2f6e6ba094568b0842da15003a9ce1874c165f10749edaec0c86b67861454088d50464875e0d0df5661aa3b6f8c2d6d5db186d0a6195b8e5a2aabbf6d565264a9fb9ca04e5a325d6cec0a92454282a9c72ac56a03d3db3f48ea0c6680365d24c8349067fc792d98f8ab9b38f5764659d0182440e884b21fb9fd6719c9cd40961b2cf53802c21fa384ff8d6964363e97efce549faa7222f90008c30b10aca8b64c73092f5dd55f25f4be712fd2d686d592c7a305b5be902113844028c64a7bab21d"}}, {0x39, &(0x7f0000000340)=@string={0x39, 0x3, "3a6d63ebdfbb16b57b8881b7ac06e2de5af96a058cb5fa55110b9573c39eff52e41b91d5fc3035886fa3b827fb06b9c6b515ddbd9a4104"}}, {0xfc, &(0x7f0000000380)=@string={0xfc, 0x3, "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"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x810}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x4c3c}}, {0x7b, &(0x7f0000000500)=@string={0x7b, 0x3, "95e525a3cdd487d94d6a5b0196416adc729807b47e754f67f30c21dcc6a07d5acbcd4a81d2849202ab0d06f69ae9dba7fd81ec2bc120f4e45ca76202abc0979519fb5d66d85d8c4cb00d3e3acaf906356bc0dd910c841635c944d103702872e6161234d37e8d01e736c7a48bc2ef35288c14c82fb2051eec7a"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x500a}}, {0xe6, &(0x7f00000005c0)=@string={0xe6, 0x3, "49ea39a1db55da3bc610123a666e3fb202ed7fef0d643372d6bc794fbeaf45956b9104d6125d458502dacb614aa6440d9c887a3cb60a3140b58617656543f71f6fe68dc10601527d04327beb2ed1e46960f1ea63daf6c684d1503673b873908d4473c0d61db513b39fef06703f2b3be197372885ff3af187f8fabdcfef98781322df43cb651d1c9b52f3fe980248118389eb3d55d6eb12ae9c2349366c020d40346fa578ffa294a064a0d03fe65f1f7e02ba1b714ec62ef2a1a3a15c135faac603241cdb972690b7490f6ad4236d427027a5c4c74513491ae41c5a40093da03989c4cb18"}}]})
syz_usb_control_io$hid(r0, &(0x7f00000008c0)={0x24, &(0x7f0000000780)={0x20, 0xe, 0x42, {0x42, 0x9, "068c38dd54c87be648ad37e33fdcdb45e78998dc55ae2f51c9a6672e95e34ef4c115b686ce1b5b18208bd0e8f44f81e19f2ae108ac0054e8d6459618daa4d069"}}, &(0x7f0000000800)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100c}}, &(0x7f0000000840)={0x0, 0x22, 0x10, {[@local=@item_012={0x2, 0x2, 0x2, '[ '}, @local=@item_4={0x3, 0x2, 0x4, "e2c1e35b"}, @global=@item_012={0x2, 0x1, 0x9, "9959"}, @global=@item_4={0x3, 0x1, 0x5, "34036f88"}]}}, &(0x7f0000000880)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x43, 0x1, {0x22, 0xd11}}}}, &(0x7f0000000ac0)={0x2c, &(0x7f0000000900)={0x40, 0x30, 0x40, "b51f7573683deeac2cc66d16cef64101f7c482ae8ec97fed9b2fe0e459781e4cfc365a8dce558690289ce27ffda427cf87db4bfdb31da6a44ffac73b16f801f2"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000009c0)={0x0, 0x8, 0x1}, &(0x7f0000000a00)={0x20, 0x1, 0x41, "f1b8d839fff8900a8a02b1f86f28a7cd0266be0895303184d0a7f3f63994ca75e37dd395c79308477f8c9664f2113be0152cf487e701dd45114606c41ba4616ce4"}, &(0x7f0000000a80)={0x20, 0x3, 0x1, 0x8}}) (async)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000fc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000f80)={&(0x7f0000000b40)={0x428, 0x3f4, 0x1, 0x70bd2d, 0x25dfdbfb, {0x6, 0x0, 0x40, [0xffffffff, 0xff3, 0x3, 0x3add64db, 0x7, 0xfffffffb, 0x8d8, 0x6, 0xffffffff, 0x4d, 0x1ff, 0xfffffffe, 0x8, 0x9, 0x128f00f4, 0x80000001, 0xffffffa8, 0x3ff, 0x8, 0xc, 0xffffdf92, 0x401, 0x800, 0xffff, 0x8, 0x8, 0x7, 0xab, 0x2, 0xa8, 0xa2c7, 0x5, 0x70000000, 0x81, 0x4b7, 0x4, 0x83, 0x7fff, 0x7, 0x2, 0xe, 0x9, 0x9, 0xffffff80, 0xa00, 0xe83, 0x6, 0x2, 0x5, 0x0, 0xa, 0x10000, 0x9, 0x6, 0x644, 0x9, 0x1, 0xe, 0x8, 0x8, 0x1, 0x471, 0x7, 0x6], [0x18, 0xffffd5a8, 0x0, 0x8, 0x0, 0x7, 0x9, 0x2, 0x407f, 0x80, 0x2, 0x3, 0x0, 0x5, 0x8, 0x26, 0x2, 0x1, 0xfffffffd, 0x7, 0x6, 0x4, 0x7fff, 0x4, 0x3ff, 0x8, 0x400, 0xe57b, 0x4, 0x0, 0x9, 0x2, 0xc5f, 0x7e6, 0x80, 0x6, 0x7, 0x80, 0x8, 0x6, 0x8, 0x3ae1, 0x1, 0x6, 0x1, 0xff, 0x81, 0x8, 0x80000000, 0x7f, 0x0, 0xffffffff, 0x917e, 0x7ff, 0x3, 0x2, 0x8, 0xf, 0x6, 0x6, 0x800, 0x6, 0x5, 0x339], [0x2, 0x3, 0x8, 0x101, 0x8, 0x2, 0x4, 0x0, 0xfff, 0x8, 0x7, 0x7, 0x10000, 0x7, 0x8, 0x5, 0x8000, 0x7, 0x5, 0x7, 0x3ca6, 0x6, 0x1, 0x83, 0x311a, 0x7, 0x20000000, 0x81, 0x5, 0x2, 0x1000, 0x4, 0x400, 0x9, 0x4700, 0x1, 0x3, 0x5, 0x1, 0x393c, 0xffffffff, 0x47, 0x9, 0x4, 0x5d3a2c4d, 0xfffffa5b, 0x5, 0xfffff800, 0x4, 0x6, 0x8, 0x6, 0x3, 0x1, 0x0, 0x3, 0x1000, 0x3, 0x19d, 0x0, 0x7, 0x9, 0x3, 0x1], [0x5, 0x0, 0x67a1, 0x187, 0x81, 0x7, 0x3, 0x400, 0xfffffff0, 0x4, 0x10000, 0x5b139b5d, 0x8, 0x939, 0x4, 0x6e25, 0x5, 0x9, 0xd, 0x101, 0x8, 0x782d, 0x5, 0x2bfb, 0x6, 0x8, 0xd4, 0x4, 0x4, 0x1c1, 0xc, 0x1, 0x8, 0x7, 0x0, 0x7f, 0x3, 0x1c000000, 0x8, 0xc, 0x81, 0x3, 0x1, 0x9, 0xd, 0x0, 0x0, 0x2, 0x0, 0x7, 0xd, 0x7, 0x8, 0x81, 0x46, 0x7e, 0x1, 0x4, 0xffff, 0x10000, 0x25df84f6, 0x1fbe4275, 0x2, 0x2], 0x6, ['\x00', '\x00', '-%\\\x00']}, ["", "", "", "", "", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000000) (async)
ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000001000)='ipvlan0\x00') (async)
syz_usb_control_io(r0, &(0x7f0000001280)={0x2c, &(0x7f0000001040)={0x20, 0x3e, 0xaa, {0xaa, 0x31, "eec8b90ee962673dcf95a3967027cd32e4d9fa3ff081301c04e8bbb30c7f03a3a25012c4ac8cd8528e785101ba3984dbfc964059d7ad3cd4c966c0f0f48f9f61495659176f38602d7aa69e89bbb7c49fa140e97897cff6d2fddc9d65242e640afd0d3be5e094ad0fd320cc85074d9693e8f13f963c76d0e16746350e9d60f383aec5e7b81e6f1c5d30d1d78fd79def22aefa2d18a24f6cde77b9e8c184b28699ec1276c9b35795c9"}}, &(0x7f0000001100)={0x0, 0x3, 0x59, @string={0x59, 0x3, "95211039a4af9d4e0ecfeca62be3fa6623d8896675ce2be227bede72256705e0ab5253ae02c17604f1cf5c35951ff312dba6c3c0e00001dc396431aeb47c3b2bef76a527a4f41aa084cb8428681f000e5ea3a4037e03bd"}}, &(0x7f0000001180)={0x0, 0xf, 0x4b, {0x5, 0xf, 0x4b, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x5, 0x7f, 0xfff, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x9, 0x6, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x8, 0xc, 0x1}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x3, 0xff, 0xfffd, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "8d17b3639470b7e01977e9dc738e7ba7"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x9f, 0x9, 0x3, 0xa}]}}, &(0x7f0000001200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x99, 0x0, 0x8, 0x6, "b89c12d5", "af1b1116"}}, &(0x7f0000001240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x10, 0x3, 0xc, 0x4, 0xf048}}}, &(0x7f0000001700)={0x84, &(0x7f00000012c0)={0x40, 0x10, 0x50, "2fab93c6dd38ab4ff76c9cfa5232b0af4b76f1788a72dd2fde22996b31054abf3e6f8bcbd793c79eb399e01b0cf47ab54838ef6cdbb410519cfa6f37ae9fb2ffd21d7a666cfae8793fb74e700c463836"}, &(0x7f0000001340)={0x0, 0xa, 0x1, 0x52}, &(0x7f0000001380)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000013c0)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000001400)={0x20, 0x0, 0x8, {0x1b2, 0x1, [0xf0f]}}, &(0x7f0000001440)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000001480)={0x40, 0x9, 0x1, 0x4}, &(0x7f00000014c0)={0x40, 0xb, 0x2, "3b0f"}, &(0x7f0000001500)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000001540)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000001580)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f00000015c0)={0x40, 0x19, 0x2, "8f4b"}, &(0x7f0000001600)={0x40, 0x1a, 0x2, 0xd}, &(0x7f0000001640)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000001680)={0x40, 0x1e, 0x1, 0x7}, &(0x7f00000016c0)={0x40, 0x21, 0x1, 0x8}})
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000017c0)={<r2=>0x0}, &(0x7f0000001800)=0xc)
ioprio_get$pid(0x0, r2) (async)
tgkill(r2, r2, 0x19) (async)
r3 = signalfd(r1, &(0x7f0000001840)={[0xae0]}, 0x8)
ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000001880)={0x0, 0x2})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f00000018c0), 0x4) (async)
ioctl$SIOCGETNODEID(r3, 0x89e1, &(0x7f0000001900)={0x4}) (async, rerun: 32)
lseek(r1, 0x9, 0x4) (async, rerun: 32)
syz_open_dev$sg(&(0x7f0000001940), 0x6, 0x400800) (async)
ptrace$peeksig(0x4209, r2, &(0x7f0000001980)={0x46d, 0x0, 0x1}, &(0x7f00000019c0)=[{}]) (async, rerun: 32)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000001a80)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000001a40), 0x2, 0xa}}, 0x20) (async, rerun: 32)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001b00), r3) (async)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000001bc0)={'erspan0\x00', &(0x7f0000001b40)={'gre0\x00', <r5=>0x0, 0x8, 0x8038, 0x3, 0xfb, {{0xc, 0x4, 0x3, 0x1, 0x30, 0x68, 0x0, 0xbd, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @broadcast, {[@ssrr={0x89, 0x17, 0x69, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @multicast1, @empty, @loopback]}, @ra={0x94, 0x4}]}}}}}) (async, rerun: 32)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000001d40)={'syztnl0\x00', &(0x7f0000001c00)={'gre0\x00', <r6=>0x0, 0x8, 0x1, 0x800, 0x7, {{0x3f, 0x4, 0x3, 0x8, 0xfc, 0x65, 0x0, 0x9, 0x2f, 0x0, @remote, @multicast2, {[@rr={0x7, 0xb, 0xa2, [@remote, @empty]}, @timestamp_prespec={0x44, 0x3c, 0xa6, 0x3, 0x5, [{@local, 0x8}, {@empty, 0x3b3}, {@multicast2, 0x2}, {@local}, {@broadcast, 0x1098}, {@multicast1}, {@private=0xa010100, 0x10001}]}, @rr={0x7, 0x27, 0x77, [@dev={0xac, 0x14, 0x14, 0x3f}, @dev={0xac, 0x14, 0x14, 0x2b}, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x12}, @dev={0xac, 0x14, 0x14, 0x3e}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @local]}, @timestamp_addr={0x44, 0x14, 0xce, 0x1, 0x5, [{@remote, 0x3a25c8d6}, {@private=0xa010101, 0xfffffe40}]}, @timestamp_prespec={0x44, 0x1c, 0x39, 0x3, 0x7, [{@rand_addr=0x64010101, 0x7fff}, {@broadcast, 0xd}, {@private=0xa010100, 0x7}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x10, 0x18, 0x0, 0x4, [0x8000, 0x0, 0x4]}, @rr={0x7, 0x1f, 0x6b, [@dev={0xac, 0x14, 0x14, 0x1b}, @private=0xa010102, @broadcast, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0x17, 0x74, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) (async, rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000001d80)={'wg2\x00', <r7=>0x0})
sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000001ec0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001dc0)={0xa0, r4, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x39}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x1) (async)
read$FUSE(r3, &(0x7f0000001f00)={0x2020, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}, 0x2020) (async, rerun: 64)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000004080)={0x14, &(0x7f0000003f40)={0x0, 0x2, 0x6c, {0x6c, 0x23, "371d1bf034eb18be2cb3cc0d10ccf2faef2cfbdc11aa457ba45c1c93dd861df91ac23adb63e08432039a1847f98617a37cbad15831a77c40b304af95636d630ea66d00747065c1ec5306e117d30ef53370ca8ccaff7b1ef3c9c00a0540d42f583bc65e56c95665fb282f"}}, &(0x7f0000003fc0)={0x0, 0x3, 0xa3, @string={0xa3, 0x3, "f8d555c6a099512d5182ad26cfd937da3f4a82a35521bb5b9199afd550468bae451ee3eee6441cb0ba836fb6c66ae94f646edef1500a642812395c3bef5825f94ac737a3fe80052d63fa8fec0ebdee99c621059985bb41f235ec87afe3fe26ec8b6bdd56842305c31b6bccc5dccad1e1cbec9a6772702c686e4eebfa01e79eedae65a57b014dbf4f9a7b79e700cdffd6637443ff15b705a39d38493eca5b48200e"}}}, &(0x7f0000004300)={0x44, &(0x7f00000040c0)={0x0, 0xbb6be0a80d1099d6, 0x65, "bd23122bb9f27047cd857d4408345ae05eab7e22f3a84d9d334c0c9fed99ac518cdf198ae09761070b134e4b23e1ac1326dc7c59dad70f19a8d09add94b4df236042fb0af493358a1e3a2493b46e73febd455cdcb4dc51c3fc9e8dc7f02698f5b05ae442f1"}, &(0x7f0000004140)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000004180)={0x0, 0x8, 0x1, 0x49}, &(0x7f00000041c0)={0x20, 0x81, 0x3, "cca2f9"}, &(0x7f0000004200)={0x20, 0x82, 0x2, "a5fc"}, &(0x7f0000004240)={0x20, 0x83, 0x1, "f7"}, &(0x7f0000004280)={0x20, 0x84, 0x4, "f9469cbd"}, &(0x7f00000042c0)={0x20, 0x85, 0x3, "7cc607"}}) (rerun: 64)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000004480)={@cgroup=r3, 0xd, 0x0, 0x0, &(0x7f0000004380)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000043c0)=[0x0], &(0x7f0000004400)=[0x0, 0x0, 0x0], &(0x7f0000004440)=[0x0]}, 0x40)
r9 = syz_usb_connect$cdc_ecm(0x6, 0xbf, &(0x7f00000044c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xad, 0x1, 0x1, 0xb, 0x40, 0x7, [{{0x9, 0x4, 0x0, 0xb6, 0x2, 0x2, 0x6, 0x0, 0x8, {{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x80, 0x2, 0x6, 0x9}, [@network_terminal={0x7, 0x24, 0xa, 0x0, 0x0, 0x5, 0x40}, @mdlm_detail={0x4b, 0x24, 0x13, 0x3, "7952e8bafdb2b477f6c84305c18fc79061c2f0f0533dea36ef6f473564b6c9f0d0025185db3e779feeb8b4a481d09062096d917cc7fe61fdc206f42a09d934855711349488ed8b"}, @mbim_extended={0x8, 0x24, 0x1c, 0x2, 0xc9, 0xc}, @dmm={0x7, 0x24, 0x14, 0x1ff, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x200, 0xe, 0xc}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x8, 0x2, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0xc, 0x26, 0xdc}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x2, 0x7f, 0x5}}}}}]}}]}}, &(0x7f0000004700)={0xa, &(0x7f0000004580)={0xa, 0x6, 0x300, 0x0, 0xa, 0x3, 0xff, 0x1}, 0x10, &(0x7f00000045c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x68, 0x1, 0xb, 0xffc0, 0x7f}]}, 0x3, [{0x4, &(0x7f0000004600)=@lang_id={0x4, 0x3, 0x816}}, {0x4, &(0x7f0000004640)=@lang_id={0x4, 0x3, 0x240a}}, {0x46, &(0x7f0000004680)=@string={0x46, 0x3, "bbf502461a3e693a6138e37f14027ef6dda7373cccb2a8befd4ab160fc04fe3120ed8beb01b121be2a0e5afa709552def85fca11077955fc15316b381110e1c76384e3f7"}}]})
syz_usb_control_io$cdc_ecm(r9, &(0x7f00000047c0)={0x14, &(0x7f0000004740)={0x20, 0x7, 0x1b, {0x1b, 0x2, "9dc3317aa58144e9304394de29170f4402aa340782ab0f303e"}}, &(0x7f0000004780)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000048c0)={0x1c, &(0x7f0000004800)={0x0, 0x15, 0x10, "d4f64c714de2c93d9ef468bfc8d04395"}, &(0x7f0000004840)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000004880)={0x0, 0x8, 0x1, 0x6}}) (async)
prctl$PR_SCHED_CORE(0x3e, 0x4, r8, 0x0, &(0x7f0000004900)) (async)
syz_usb_control_io(r9, &(0x7f0000004bc0)={0x2c, &(0x7f0000004940)={0x20, 0xb, 0x20, {0x20, 0x21, "5fd379ec3870f85aff5bbe85a0d2eda2365ff295a32f8c8ceb66b8319c34"}}, &(0x7f0000004980)={0x0, 0x3, 0x52, @string={0x52, 0x3, "7b419e6e12420101b071bebe8b6a85f9cf8ca9988fdaedea11df04c8698b826e8a4cc8947f00373ed88b2dd56f525084e906e7ae40eb5ef095b0bf1bfcc1bb678d3fbdbd30ebf7f175671a2535c4c559"}}, &(0x7f0000004a00)={0x0, 0xf, 0x136, {0x5, 0xf, 0x136, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x2, 0x1, 0x4}, @ssp_cap={0x10, 0x10, 0xa, 0x66, 0x1, 0x7f, 0xf000, 0x2, [0xff0030]}, @generic={0x69, 0x10, 0xa, "362edef007c271cf1991c573e3489f4d9dc7a349890e04ccea9f71c9408d9e4becd26a89a09e790d0a730dc87bc82f5ddbfc4fd75b965fc82557336bca090d84f089fcf3d1070f38b579c2abbcb1153c4f1b90c02fc661ef14e8ea4d0877293ab918b3e3cb6d"}, @generic={0xa4, 0x10, 0x3, "d1a14d9e73283eb8d46a0a5c0df4f7271ac725f4100d3ceb8062f2f4066a31c327a18e1fef9cc5912b165a3084a7cdf401aee72c0e4286a339a1202e5284a76c046fb26385247b513e2054ec07bdcdba154b0142fc804ec072e327222f50346842bd3609d377dbb4601c72edcbbad74594c72f5bb581bcbc38947eba9ffe740e9c0995c5ec899a1f33c79f4b358ee834f4523ec457c3f0fab94898c2efed86cccd"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x6, 0xc}]}}, &(0x7f0000004b40)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x98, 0x7, 0x8, "3d609d66", "339a4da3"}}, &(0x7f0000004b80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x60, 0x0, 0x2, 0xff, 0x6100, 0x10}}}, &(0x7f0000005080)={0x84, &(0x7f0000004c00)={0x20, 0xf, 0xb4, "ed61bc019c36fbcfd16f0411bae019f3b76c7b595ebdaa927dfe1d26006299dbd436898516b5ee0948a0e1a3e4461ea4e5b52fc68c87e78421dcb219f08f6901651ac0516256eeb82f8b78a0b6863bcb0cf85902bd150c41303831ac49b8785ec3a449df1daa2ba446051b031a80df9f87a46b7880dcab34af332999cb502c79c958dd63b2963dabf5025a2a16031e16efb9e3713e87be74b02fff58a2cd6737b54952e8d57f44e82bb8b42668989d3b84ba7fbe"}, &(0x7f0000004cc0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000004d00)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000004d40)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000004d80)={0x20, 0x0, 0x4, {0x100, 0x10}}, &(0x7f0000004dc0)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000004e00)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000004e40)={0x40, 0xb, 0x2, "0094"}, &(0x7f0000004e80)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000004ec0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000004f00)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, &(0x7f0000004f40)={0x40, 0x19, 0x2, "2da3"}, &(0x7f0000004f80)={0x40, 0x1a, 0x2}, &(0x7f0000004fc0)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000005000)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000005040)={0x40, 0x21, 0x1, 0xff}}) (async)
getpeername$llc(r3, &(0x7f0000005140)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000005180)=0x10)

889.691729ms ago: executing program 5 (id=1158):
r0 = syz_open_dev$radio(&(0x7f0000000080), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000040)={0x98f904, 0x1, @value=0xf})
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, 0x0, 0x0)
syz_open_dev$radio(&(0x7f0000000080), 0xffffffffffffffff, 0x2) (async)
ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000040)={0x98f904, 0x1, @value=0xf}) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) (async)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) (async)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, 0x0, 0x0) (async)

778.907115ms ago: executing program 5 (id=1159):
syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x0)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000)
write$vhost_msg_v2(r0, &(0x7f00000003c0)={0x2, 0x0, {0x0, 0xffffffffffffff29, 0x0, 0x2, 0x2}}, 0x48)
syz_usb_connect(0x0, 0x24, &(0x7f0000001080)=ANY=[@ANYBLOB="12010000ff000040720501cb6526010203010902121500000000000904000000aa75b700"], 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYRES64], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='module_load\x00', r2, 0x0, 0x1}, 0x18)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1}, 0x101}, {{0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000001780)=""/58, 0x3a}, 0x2}, {{&(0x7f00000017c0)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000001940)=[{&(0x7f0000001840)=""/203, 0xcb}], 0x1}, 0x1b87}, {{&(0x7f0000001980)=@hci, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001e80)=""/258, 0x102}], 0x1, &(0x7f0000001d80)=""/235, 0xeb}, 0x1}], 0x4, 0x2040, &(0x7f0000001d40))
r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r7 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040))
sendfile(r5, r4, &(0x7f0000002080)=0x64, 0x23b)
r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f00000002c0)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000040)={@my=0x0, 0x1})
r9 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r9, 0x7a7, 0x0)

648.561069ms ago: executing program 6 (id=1160):
socket(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1703def7dfe2abf7614f058d12358d2875e17d43560dd4d736221f2f799e372e8c12ba210230768f74202f64536bf6816deff63b0270747c8e9ea25829cd9cc9ee5f1b6be2c0aa91ff035e5c8efa19122b0cf3d01beece3679627bcbdca7c62eb7aaa3555692022063e458e66a186a80c64040a250d0b4f650f3f37f15308b283d31b7bba6f5ce36c2a692491ae66b8abd71f4dfe796b745fe4d890a98370e927c588dd4d8"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6(0xa, 0x2, 0x0)
openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket(0x1, 0x6, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setresuid(0xee00, 0xee00, 0xee00)
rt_tgsigqueueinfo(r0, r0, 0x10, &(0x7f0000000140)={0x3d, 0x3, 0xfffffff9})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, 0x0, 0x4)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r2, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f00000009c0)=""/4090, 0xffa}], 0x1}, 0x0)
r3 = socket(0x2c, 0x3, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r3}, 0x20)
socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'geneve1\x00', <r6=>0x0})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000380)={'syztnl0\x00', r6, 0x0, 0x10, 0x0, 0x0, {{0xf, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @multicast1, {[@rr={0x7, 0x27, 0x22, [@broadcast, @empty, @multicast1, @broadcast, @dev={0xac, 0x14, 0x14, 0x17}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}]}}}}})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp=r3, 0x2}, 0x20)

574.133467ms ago: executing program 9 (id=1161):
io_uring_setup(0x59f1, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
ioctl$MEDIA_REQUEST_IOC_REINIT(0xffffffffffffffff, 0x7c81, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x49, 0x2, {0x2, 0x2, 0x2}}, 0x14)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r4 = fanotify_init(0x18, 0x0)
fanotify_mark(r4, 0x106, 0x4800001a, r3, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv2(r5, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0)

170.606272ms ago: executing program 9 (id=1162):
r0 = socket(0xa, 0x3, 0x3a)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$GTP_CMD_ECHOREQ(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010029bd7000fedbdf25020000000800020000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000840}, 0x24008004)
r3 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@dev, 0x0, 0x0, 0x3, 0x1}, 0x20)
setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4)
connect$inet6(r3, &(0x7f0000000300)={0xa, 0x0, 0x380003, @loopback}, 0x1c)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1}, 0xc)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000500)=0xc, 0x4)
ioctl$NBD_PRINT_DEBUG(0xffffffffffffffff, 0xab06)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
socket$key(0xf, 0x3, 0x2)
socket$key(0xf, 0x3, 0x2)
bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000400)={&(0x7f0000000180), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x34, r6, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x3, 0x845e, @udp='udp:syz2\x00'}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x9}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x4d5, 0x32}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0xb7}}, 0xe8)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, <r7=>0x0})
sched_setaffinity(r7, 0x8, &(0x7f00000004c0)=0xffff)
sendmmsg(r5, &(0x7f0000000180), 0x400000000000077, 0x0)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)={0x64, r8, 0x1, 0x0, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x64}}, 0x0)
close(r0)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000000000008000700", @ANYRES32, @ANYBLOB="08000400000000000c0003000000000000000000080005000000000008000100", @ANYRES32=0x0, @ANYBLOB="080002"], 0x50}}, 0x0)
sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x28, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x200440c8)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000080)={0xd77, 0x9ecd59716b347ef7, 0x1, 0x0, 0x4})

0s ago: executing program 6 (id=1163):
newfstatat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', &(0x7f00000001c0), 0x1000)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="240000001900010025bd7000fedbdf251d01030008000900", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="1b3371b643834bbf4ef98f5b712c72b781d4c166b2c92783300e033658ff60ce9af99cb22e3b12f55f83cc22328ff251eb51673a643c568677b77a7d02bbe12fec6b92069f2061bdf0d37112f425c6e5488c8de233846c13cf5ee5a460f12cf379c548d7f341a1764f49abf7d3b020a863408c9f0464fe9ea963821f2c0d868090e2548d4feb472fc83c30c3edb378c3f15835e224e9e4053152fc"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000340)=ANY=[@ANYBLOB='raw'], &(0x7f0000000000)=0x28)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r2)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r3, 0x39, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x44)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065787468647200002c000280080004400000000408000740000000040800064000000001050002000000000008000340000000040900010073797a30000000000900020073797a32"], 0x94}}, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f00000002c0)={@rand_addr=0x64010100, @loopback, r8}, 0xc)
r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r7)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000100)={'wpan1\x00', <r11=>0x0})
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x3c, r10, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xb}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x3c}}, 0x0)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010300000000000000001f00000008000300", @ANYRES32=r11], 0x1c}, 0x1, 0x3000000}, 0x0)
r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(0x0, r13)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
r14 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002d0001000000010000000000040100800c0000000000000000000000140001000000000000000000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b37c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac6433"], 0x114}], 0x1}, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r4)

kernel console output (not intermixed with test programs):

5889] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  398.004667][T10717] netlink: 236 bytes leftover after parsing attributes in process `syz.8.885'.
[  398.150107][ T5889] usb 10-1: too many configurations: 213, using maximum allowed: 8
[  398.168931][ T5889] usb 10-1: config index 0 descriptor too short (expected 9, got 0)
[  398.214730][ T5889] usb 10-1: can't read configurations, error -22
[  398.369417][ T5889] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  398.638808][   T29] kauditd_printk_skb: 38 callbacks suppressed
[  398.654354][   T29] audit: type=1326 audit(2000000103.758:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10713 comm="syz.3.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3d6785d29 code=0x7fc00000
[  398.701385][ T5889] usb 10-1: too many configurations: 213, using maximum allowed: 8
[  398.805298][    T9] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  398.874888][ T5889] usb 10-1: config index 0 descriptor too short (expected 9, got 0)
[  398.889367][ T5889] usb 10-1: can't read configurations, error -22
[  398.896003][    T9] dvb_usb_az6027 9-1:0.0: probe with driver dvb_usb_az6027 failed with error -110
[  398.917469][ T5889] usb usb10-port1: attempt power cycle
[  398.924926][   T29] audit: type=1326 audit(2000000103.878:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10713 comm="syz.3.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3d6785d29 code=0x7fc00000
[  398.968265][    T9] usb 9-1: USB disconnect, device number 29
[  399.010596][   T29] audit: type=1326 audit(2000000103.958:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10713 comm="syz.3.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3d6785d29 code=0x7fc00000
[  399.199420][   T29] audit: type=1400 audit(2000000104.388:1299): avc:  denied  { mount } for  pid=10859 comm="syz.8.889" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  399.227816][T10053] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  399.299795][ T5889] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  399.322627][ T5889] usb 10-1: too many configurations: 213, using maximum allowed: 8
[  399.335863][ T5889] usb 10-1: config index 0 descriptor too short (expected 9, got 0)
[  399.344199][ T5889] usb 10-1: can't read configurations, error -22
[  399.413675][T10053] usb 4-1: Using ep0 maxpacket: 32
[  399.429709][T10053] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  399.455511][T10053] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  399.479414][ T5889] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[  399.487257][T10053] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  399.506903][T10053] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  399.517881][T10053] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  399.527714][ T5889] usb 10-1: too many configurations: 213, using maximum allowed: 8
[  399.543101][T10053] usb 4-1: config 0 descriptor??
[  399.548728][ T5889] usb 10-1: config index 0 descriptor too short (expected 9, got 0)
[  399.558633][T10858] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  399.558800][ T5889] usb 10-1: can't read configurations, error -22
[  399.583425][T10053] hub 4-1:0.0: USB hub found
[  399.593759][ T5889] usb usb10-port1: unable to enumerate USB device
[  399.596769][ T9295] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  399.611247][ T9295] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  399.744418][ T9295] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  399.751354][   T29] audit: type=1400 audit(2000000104.938:1300): avc:  denied  { unmount } for  pid=6633 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  399.780231][ T9295] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  399.815877][T10053] hub 4-1:0.0: 2 ports detected
[  399.863538][ T9295] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  399.877994][ T9295] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.435336][ T9295] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  400.593172][ T9295] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.919526][ T7999] usb 7-1: new high-speed USB device number 40 using dummy_hcd
[  401.111470][ T7999] usb 7-1: Using ep0 maxpacket: 8
[  401.192129][ T7999] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  401.259242][ T7999] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  401.318774][ T7999] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  401.329991][ T7999] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  401.369241][ T7999] usb 7-1: config 0 descriptor??
[  401.376940][ T9295] erspan0: left allmulticast mode
[  401.384512][ T9295] erspan0: left promiscuous mode
[  401.398144][ T9295] bridge0: port 3(erspan0) entered disabled state
[  401.405244][   T29] audit: type=1400 audit(2000000106.588:1301): avc:  denied  { write } for  pid=10880 comm="syz.5.895" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  401.482646][ T9295] bridge_slave_1: left allmulticast mode
[  401.489348][ T9295] bridge_slave_1: left promiscuous mode
[  401.523571][ T9295] bridge0: port 2(bridge_slave_1) entered disabled state
[  401.570646][ T9295] bridge_slave_0: left allmulticast mode
[  401.596946][ T9295] bridge_slave_0: left promiscuous mode
[  401.659396][ T9295] bridge0: port 1(bridge_slave_0) entered disabled state
[  401.667472][ T7999] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  401.728122][ T5889] usb 7-1: USB disconnect, device number 40
[  401.751048][   T29] audit: type=1400 audit(2000000106.928:1302): avc:  denied  { read } for  pid=10883 comm="syz.9.896" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  401.773963][   T29] audit: type=1400 audit(2000000106.938:1303): avc:  denied  { getopt } for  pid=10883 comm="syz.9.896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  402.345389][ T7999] hub 4-1:0.0: hub_ext_port_status failed (err = -71)
[  402.356538][ T5889] usb 4-1: USB disconnect, device number 50
[  402.399711][ T5149] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[  402.529816][T10053] usb 7-1: new high-speed USB device number 41 using dummy_hcd
[  402.570562][ T5149] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  402.581204][ T5149] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  402.601484][ T5149] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  402.629848][ T5149] usb 6-1: config 0 descriptor??
[  402.653852][ T5149] pwc: Askey VC010 type 2 USB webcam detected.
[  402.689426][T10053] usb 7-1: Using ep0 maxpacket: 32
[  402.709733][T10053] usb 7-1: config 0 interface 0 has no altsetting 0
[  402.754500][T10053] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  402.781624][T10053] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  402.795697][T10053] usb 7-1: Product: syz
[  402.817098][T10053] usb 7-1: Manufacturer: syz
[  402.821965][T10053] usb 7-1: SerialNumber: syz
[  402.846225][T10053] usb 7-1: config 0 descriptor??
[  403.079977][ T5149] pwc: recv_control_msg error -32 req 02 val 2b00
[  403.092759][ T5149] pwc: recv_control_msg error -32 req 02 val 2700
[  403.149717][ T5149] pwc: recv_control_msg error -32 req 02 val 2c00
[  403.189381][ T5149] pwc: recv_control_msg error -32 req 04 val 1000
[  403.207002][ T5149] pwc: recv_control_msg error -32 req 04 val 1300
[  403.261808][ T5149] pwc: recv_control_msg error -32 req 04 val 1400
[  403.302528][ T5149] pwc: recv_control_msg error -32 req 02 val 2000
[  403.330751][ T5149] pwc: recv_control_msg error -32 req 02 val 2100
[  403.522375][ T5149] pwc: recv_control_msg error -32 req 04 val 1500
[  404.156436][T10933] binder: BINDER_SET_CONTEXT_MGR already set
[  404.164437][T10933] binder: 10912:10933 ioctl 4018620d 20004a80 returned -16
[  404.169344][   T29] audit: type=1400 audit(2000000108.738:1304): avc:  denied  { ioctl } for  pid=10912 comm="syz.6.901" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  404.210928][T10933] binder: 10912:10933 ioctl c0306201 0 returned -14
[  404.243115][   T29] audit: type=1400 audit(2000000108.748:1305): avc:  denied  { set_context_mgr } for  pid=10912 comm="syz.6.901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  404.268620][   T29] audit: type=1400 audit(2000000109.348:1306): avc:  denied  { map } for  pid=10912 comm="syz.6.901" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  404.599790][T10053] gs_usb 7-1:0.0: Couldn't get device config: (err=-110)
[  404.609428][T10053] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -110
[  404.679281][ T5149] pwc: recv_control_msg error -32 req 02 val 2500
[  405.050026][ T9295] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  405.064354][ T5149] pwc: recv_control_msg error -32 req 02 val 2400
[  405.084031][ T9295] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  405.117971][ T9295] bond0 (unregistering): Released all slaves
[  405.150748][T10937] 
@�: renamed from bond_slave_0 (while UP)
[  405.276216][   T29] audit: type=1400 audit(2000000110.458:1307): avc:  denied  { getopt } for  pid=10942 comm="syz.9.908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  405.298726][ T5149] pwc: recv_control_msg error -71 req 02 val 2900
[  405.307997][ T5149] pwc: recv_control_msg error -71 req 02 val 2800
[  405.330005][ T5149] pwc: recv_control_msg error -71 req 04 val 1100
[  405.340745][ T5149] pwc: recv_control_msg error -71 req 04 val 1200
[  405.369277][ T5815] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  405.390120][ T5149] pwc: Registered as video103.
[  405.405178][   T29] audit: type=1400 audit(2000000110.588:1308): avc:  denied  { connect } for  pid=10942 comm="syz.9.908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  405.436454][ T5149] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input23
[  405.521341][ T5149] usb 6-1: USB disconnect, device number 38
[  405.531926][ T5815] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  405.554783][ T5815] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  405.616059][ T5815] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  405.662477][ T5815] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  405.703146][ T5815] usb 4-1: config 0 descriptor??
[  405.788958][T10053] usb 7-1: USB disconnect, device number 41
[  405.851468][   T29] audit: type=1400 audit(2000000111.048:1309): avc:  denied  { write } for  pid=10958 comm="syz.8.906" path="socket:[32625]" dev="sockfs" ino=32625 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  405.959490][   T29] audit: type=1400 audit(2000000111.098:1310): avc:  denied  { read } for  pid=10951 comm="syz.9.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  406.327541][ T5815] usbhid 4-1:0.0: can't add hid device: -71
[  406.335205][ T5815] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  406.345716][ T5815] usb 4-1: USB disconnect, device number 51
[  406.419019][ T9295] hsr_slave_0: left promiscuous mode
[  406.462909][T10976] syz.9.911: attempt to access beyond end of device
[  406.462909][T10976] nbd9: rw=0, sector=1, nr_sectors = 1 limit=0
[  406.488317][T10976] VFS: could not find a valid V7 on nbd9.
[  406.511779][ T9295] hsr_slave_1: left promiscuous mode
[  406.523521][ T9295] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  406.539366][ T9295] batman_adv: batadv0: Removing interface: batadv_slave_0
[  406.565792][ T9295] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  406.575879][ T9295] batman_adv: batadv0: Removing interface: batadv_slave_1
[  406.611417][ T9295] veth1_macvtap: left promiscuous mode
[  406.617731][ T9295] veth0_macvtap: left promiscuous mode
[  406.617926][T10986] netlink: 'syz.9.915': attribute type 10 has an invalid length.
[  406.625299][ T9295] veth1_vlan: left promiscuous mode
[  406.636563][ T9295] veth0_vlan: left promiscuous mode
[  406.719385][   T46] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[  407.404645][   T46] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  407.438098][   T46] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  407.450271][   T46] usb 6-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00
[  407.459981][   T46] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  407.471204][   T46] usb 6-1: config 0 descriptor??
[  407.522649][   T29] audit: type=1400 audit(2000000112.708:1311): avc:  denied  { mounton } for  pid=10992 comm="syz.3.916" path="/proc/825/task" dev="proc" ino=32980 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  407.705213][   T29] audit: type=1400 audit(2000000112.908:1312): avc:  denied  { connect } for  pid=10975 comm="syz.5.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  407.867534][ T9295] team0 (unregistering): Port device team_slave_1 removed
[  407.930110][ T9295] team0 (unregistering): Port device team_slave_0 removed
[  407.933144][   T46] itetech 0003:06CB:73F6.0012: hidraw0: USB HID v0.00 Device [HID 06cb:73f6] on usb-dummy_hcd.5-1/input0
[  408.203272][   T46] usb 6-1: USB disconnect, device number 39
[  408.643478][T10986] veth0_vlan: left promiscuous mode
[  408.686947][T10986] veth0_vlan: entered promiscuous mode
[  408.710621][T10986] team0: Device veth0_vlan failed to register rx_handler
[  408.757768][T10986] syz.9.915 (10986) used greatest stack depth: 20432 bytes left
[  409.384787][T11002] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  410.045495][   T29] audit: type=1400 audit(2000000115.218:1313): avc:  denied  { map } for  pid=11017 comm="syz.5.923" path="socket:[33018]" dev="sockfs" ino=33018 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  410.068582][    C0] vkms_vblank_simulate: vblank timer overrun
[  410.075178][   T29] audit: type=1400 audit(2000000115.228:1314): avc:  denied  { ioctl } for  pid=11012 comm="syz.8.920" path="socket:[33823]" dev="sockfs" ino=33823 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  410.099886][    C0] vkms_vblank_simulate: vblank timer overrun
[  411.030175][ T5889] usb 7-1: new high-speed USB device number 42 using dummy_hcd
[  411.130118][   T29] audit: type=1400 audit(2000000116.268:1315): avc:  denied  { read write } for  pid=11039 comm="syz.3.928" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  411.154154][    C0] vkms_vblank_simulate: vblank timer overrun
[  411.723185][   T29] audit: type=1400 audit(2000000116.268:1316): avc:  denied  { open } for  pid=11039 comm="syz.3.928" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  412.117971][   T29] audit: type=1400 audit(2000000116.318:1317): avc:  denied  { getopt } for  pid=11012 comm="syz.8.920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  412.189235][ T5889] usb 7-1: Using ep0 maxpacket: 16
[  412.197659][ T5889] usb 7-1: too many endpoints for config 0 interface 0 altsetting 8: 33, using maximum allowed: 30
[  412.289278][ T5815] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  412.387845][ T9295] IPVS: stop unused estimator thread 0...
[  412.433535][T11047] ptrace attach of "./syz-executor exec"[11050] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             
[  412.510283][ T5815] usb 4-1: Using ep0 maxpacket: 16
[  412.904516][ T5889] usb 7-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 33
[  412.917582][ T5889] usb 7-1: config 0 interface 0 has no altsetting 0
[  412.929216][ T5889] usb 7-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00
[  412.938315][ T5889] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  412.970472][ T5889] usb 7-1: config 0 descriptor??
[  413.100300][ T5815] usb 4-1: config 195 has an invalid interface number: 194 but max is 0
[  413.126203][ T5815] usb 4-1: config 195 has no interface number 0
[  413.219327][ T5815] usb 4-1: config 195 interface 194 has no altsetting 0
[  413.227889][ T5889] usbhid 7-1:0.0: can't add hid device: -71
[  413.714467][ T5889] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  413.724376][ T5889] usb 7-1: USB disconnect, device number 42
[  413.769454][ T5815] usb 4-1: New USB device found, idVendor=14b2, idProduct=3c08, bcdDevice=14.06
[  413.779630][ T5815] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  413.788492][ T5815] usb 4-1: Product: syz
[  413.819814][ T5815] usb 4-1: Manufacturer: syz
[  413.824454][ T5815] usb 4-1: SerialNumber: syz
[  413.882200][T10053] usb 9-1: new high-speed USB device number 30 using dummy_hcd
[  414.130546][T10053] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  414.141767][T10053] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  414.159931][T10053] usb 9-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00
[  414.168315][ T5815] usb 4-1: USB disconnect, device number 52
[  414.170989][T10053] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  414.196001][T10053] usb 9-1: config 0 descriptor??
[  414.277662][T11084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.934'.
[  414.300807][ T5889] usb 7-1: new high-speed USB device number 43 using dummy_hcd
[  414.329249][   T29] audit: type=1400 audit(2000000119.518:1318): avc:  denied  { write } for  pid=11083 comm="syz.3.934" path="socket:[33131]" dev="sockfs" ino=33131 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  414.437727][   T29] audit: type=1400 audit(2000000119.628:1319): avc:  denied  { ioctl } for  pid=11087 comm="syz.9.935" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  414.469245][ T5862] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[  414.509557][ T5889] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  414.528922][ T5889] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 3
[  414.549322][ T5889] usb 7-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  414.569372][ T5889] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  414.581320][ T5889] usb 7-1: config 0 descriptor??
[  414.616036][T10053] usbhid 9-1:0.0: can't add hid device: -71
[  414.625100][T10053] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  414.649884][T10053] usb 9-1: USB disconnect, device number 30
[  414.673183][ T5862] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  414.686404][ T5862] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  414.722677][ T5862] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  414.780710][ T5862] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  414.797459][T11072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  414.819624][T11072] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  414.833361][ T5862] usb 6-1: config 0 descriptor??
[  414.847071][T11098] netlink: 28 bytes leftover after parsing attributes in process `syz.9.937'.
[  414.885699][ T5889] Bluetooth: Can't get state to change to load ram patch err
[  414.893253][ T5889] Bluetooth: Loading patch file failed
[  414.912640][ T5889] ath3k 7-1:0.0: probe with driver ath3k failed with error -121
[  415.053924][   T29] audit: type=1400 audit(2000000120.238:1320): avc:  denied  { create } for  pid=11079 comm="syz.5.933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  415.102985][ T5862] usbhid 6-1:0.0: can't add hid device: -71
[  415.109057][ T5862] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  415.150937][ T5862] usb 6-1: USB disconnect, device number 40
[  415.363776][T11121] xt_CT: You must specify a L4 protocol and not use inversions on it
[  415.611039][T11128] netlink: 536 bytes leftover after parsing attributes in process `syz.9.942'.
[  415.849344][ T5862] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[  416.015175][T11128] netlink: 32 bytes leftover after parsing attributes in process `syz.9.942'.
[  416.129368][ T5862] usb 10-1: device descriptor read/64, error -71
[  416.370119][ T5862] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[  416.554894][ T5815] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  416.607251][   T29] audit: type=1400 audit(2000000121.798:1321): avc:  denied  { read } for  pid=11152 comm="syz.9.946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  416.729342][ T5815] usb 4-1: Using ep0 maxpacket: 16
[  416.741623][ T5815] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  416.776699][ T5815] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  416.840754][ T5815] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  416.859212][ T5815] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  416.867285][ T5815] usb 4-1: Product: syz
[  416.876658][    T9] usb 7-1: USB disconnect, device number 43
[  416.890254][ T5890] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[  416.903772][ T5815] usb 4-1: Manufacturer: syz
[  416.908435][ T5815] usb 4-1: SerialNumber: syz
[  416.940862][ T5815] usb 4-1: config 0 descriptor??
[  416.961309][ T5815] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  417.129409][ T5815] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[  417.265670][T11173] hub 2-0:1.0: USB hub found
[  417.279419][T11173] hub 2-0:1.0: 1 port detected
[  417.671485][   T29] audit: type=1400 audit(2000000122.498:1322): avc:  denied  { watch watch_reads } for  pid=11165 comm="syz.8.948" path="/proc/539/net/udplite6" dev="proc" ino=4026534462 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  417.717920][ T5890] usb 6-1: Using ep0 maxpacket: 16
[  417.748222][   T29] audit: type=1326 audit(2000000122.508:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11165 comm="syz.8.948" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fad2d585d29 code=0x0
[  417.779046][ T5890] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  417.830965][ T5890] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  417.850745][ T5890] usb 6-1: New USB device found, idVendor=0079, idProduct=1803, bcdDevice= 0.00
[  417.863179][ T5890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  417.904606][ T5890] usb 6-1: config 0 descriptor??
[  417.935889][ T5815] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[  417.947537][ T5815] em28xx 4-1:0.0: Config register raw data: 0x6a
[  417.965590][ T5815] em28xx 4-1:0.0: I2S Audio (1 sample rate(s))
[  417.972153][ T5815] em28xx 4-1:0.0: No AC97 audio processor
[  418.311827][T11178] sp0: Synchronizing with TNC
[  418.349708][   T29] audit: type=1400 audit(2000000123.538:1324): avc:  denied  { listen } for  pid=11180 comm="syz.6.951" lport=43571 faddr=172.30.0.7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=tcp_socket permissive=1
[  418.372295][    C0] vkms_vblank_simulate: vblank timer overrun
[  418.451046][T11185] netdevsim netdevsim8: Direct firmware load for printk failed with error -2
[  418.460487][T11185] netdevsim netdevsim8: Falling back to sysfs fallback for: printk
[  418.486523][ T5890] hid_mf 0003:0079:1803.0013: unknown main item tag 0x0
[  418.509456][ T5890] hid_mf 0003:0079:1803.0013: unknown main item tag 0x0
[  418.516696][ T5890] hid_mf 0003:0079:1803.0013: unknown main item tag 0x0
[  418.604372][ T5890] hid_mf 0003:0079:1803.0013: unknown main item tag 0x0
[  418.634739][ T5890] hid_mf 0003:0079:1803.0013: unknown main item tag 0x0
[  418.641959][   T25] usb 7-1: new high-speed USB device number 44 using dummy_hcd
[  418.798700][T11156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  418.811601][T11187] syz.8.950: attempt to access beyond end of device
[  418.811601][T11187] nbd8: rw=0, sector=64, nr_sectors = 1 limit=0
[  418.812381][   T29] audit: type=1400 audit(2000000123.868:1325): avc:  denied  { connect } for  pid=11182 comm="syz.9.952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  418.846902][T11187] syz.8.950: attempt to access beyond end of device
[  418.846902][T11187] nbd8: rw=0, sector=256, nr_sectors = 1 limit=0
[  418.859577][ T5890] hid_mf 0003:0079:1803.0013: hidraw0: USB HID v0.00 Device [HID 0079:1803] on usb-dummy_hcd.5-1/input0
[  418.881775][T11156] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  418.885822][ T5890] hid_mf 0003:0079:1803.0013: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler <mahasler@gmail.com>
[  418.905194][T11187] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256
[  418.935989][   T29] audit: type=1400 audit(2000000123.868:1326): avc:  denied  { map } for  pid=11182 comm="syz.9.952" path="/dev/sg0" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  418.967696][ T5890] usb 6-1: USB disconnect, device number 41
[  418.988109][T11187] syz.8.950: attempt to access beyond end of device
[  418.988109][T11187] nbd8: rw=0, sector=512, nr_sectors = 1 limit=0
[  419.001347][   T25] usb 7-1: Using ep0 maxpacket: 16
[  419.009031][   T25] usb 7-1: too many configurations: 60, using maximum allowed: 8
[  419.026082][T11187] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512
[  419.037270][T11187] UDF-fs: warning (device nbd8): udf_load_vrs: No anchor found
[  419.046766][T11187] UDF-fs: Scanning with blocksize 512 failed
[  419.055984][   T29] audit: type=1400 audit(2000000123.868:1327): avc:  denied  { execute } for  pid=11182 comm="syz.9.952" path="/dev/sg0" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  419.104645][   T25] usb 7-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9
[  419.114674][   T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204
[  419.117990][T11177] [U] �
[  419.124212][   T25] usb 7-1: Product: syz
[  419.141848][T11187] syz.8.950: attempt to access beyond end of device
[  419.141848][T11187] nbd8: rw=0, sector=64, nr_sectors = 2 limit=0
[  419.155276][T11187] syz.8.950: attempt to access beyond end of device
[  419.155276][T11187] nbd8: rw=0, sector=512, nr_sectors = 2 limit=0
[  419.169592][T11187] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256
[  419.183504][   T25] usb 7-1: Manufacturer: syz
[  419.183621][T11187] syz.8.950: attempt to access beyond end of device
[  419.183621][T11187] nbd8: rw=0, sector=1024, nr_sectors = 2 limit=0
[  419.193224][   T25] usb 7-1: SerialNumber: syz
[  419.257439][   T25] usb 7-1: config 0 descriptor??
[  419.320785][T11187] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512
[  419.490164][T11187] UDF-fs: warning (device nbd8): udf_load_vrs: No anchor found
[  419.500022][   T25] pwc: Philips SPC 880NC USB webcam detected.
[  419.509806][T11187] UDF-fs: Scanning with blocksize 1024 failed
[  419.531012][T11187] syz.8.950: attempt to access beyond end of device
[  419.531012][T11187] nbd8: rw=0, sector=64, nr_sectors = 4 limit=0
[  419.556105][T11187] syz.8.950: attempt to access beyond end of device
[  419.556105][T11187] nbd8: rw=0, sector=1024, nr_sectors = 4 limit=0
[  419.593876][T11187] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256
[  419.739506][   T25] pwc: Warning: more than 1 configuration available.
[  419.747631][   T25] pwc: Failed to set LED on/off time (-71)
[  419.872293][T11187] syz.8.950: attempt to access beyond end of device
[  419.872293][T11187] nbd8: rw=0, sector=2048, nr_sectors = 4 limit=0
[  419.918637][T11187] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512
[  419.957405][ T5889] usb 4-1: USB disconnect, device number 53
[  420.058481][   T25] pwc: send_video_command error -71
[  420.064183][   T25] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  420.072697][   T25] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71
[  420.083873][T11187] UDF-fs: warning (device nbd8): udf_load_vrs: No anchor found
[  420.099551][   T25] usb 7-1: USB disconnect, device number 44
[  420.211654][T11187] UDF-fs: Scanning with blocksize 2048 failed
[  420.226489][T11187] syz.8.950: attempt to access beyond end of device
[  420.226489][T11187] nbd8: rw=0, sector=64, nr_sectors = 8 limit=0
[  420.256682][T11187] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256
[  420.326025][T11215] overlayfs: missing 'lowerdir'
[  420.928609][T11187] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512
[  420.985438][T11221] netlink: 8 bytes leftover after parsing attributes in process `syz.9.957'.
[  420.994603][T11221] netlink: 4 bytes leftover after parsing attributes in process `syz.9.957'.
[  421.003588][T11221] netlink: 'syz.9.957': attribute type 12 has an invalid length.
[  421.056837][   T29] audit: type=1400 audit(2000000126.208:1328): avc:  denied  { accept } for  pid=11220 comm="syz.9.957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  421.602436][T11238] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[  421.615375][T11238] overlayfs: missing 'lowerdir'
[  421.642267][T11187] UDF-fs: warning (device nbd8): udf_load_vrs: No anchor found
[  421.651636][T11187] UDF-fs: Scanning with blocksize 4096 failed
[  421.734716][T11241] netlink: 28 bytes leftover after parsing attributes in process `syz.9.961'.
[  421.771661][   T29] audit: type=1400 audit(2000000126.968:1329): avc:  denied  { module_load } for  pid=11223 comm="syz.3.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  421.908443][T11187] UDF-fs: warning (device nbd8): udf_fill_super: No partition found (1)
[  422.256722][T11254] netlink: 12 bytes leftover after parsing attributes in process `syz.8.964'.
[  422.257551][   T29] audit: type=1400 audit(2000000127.438:1330): avc:  denied  { ioctl } for  pid=11253 comm="syz.8.964" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  422.334926][T11254] bridge0: port 1(bridge_slave_1) entered blocking state
[  422.349336][   T46] usb 7-1: new high-speed USB device number 45 using dummy_hcd
[  422.357295][T11254] bridge0: port 1(bridge_slave_1) entered disabled state
[  422.365870][T11254] bridge_slave_1: entered allmulticast mode
[  422.396932][T11254] bridge_slave_1: entered promiscuous mode
[  422.683848][   T46] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  422.709309][   T46] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  422.724564][   T46] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  422.804329][   T46] usb 7-1: config 0 descriptor??
[  422.834731][   T46] pwc: Askey VC010 type 2 USB webcam detected.
[  423.103214][   T46] pwc: recv_control_msg error -32 req 02 val 2b00
[  423.146676][   T46] pwc: recv_control_msg error -32 req 02 val 2700
[  423.340308][   T46] pwc: recv_control_msg error -71 req 02 val 2c00
[  423.366742][   T46] pwc: recv_control_msg error -71 req 04 val 1000
[  423.399640][   T46] pwc: recv_control_msg error -71 req 04 val 1300
[  423.415649][   T46] pwc: recv_control_msg error -71 req 04 val 1400
[  423.431309][   T46] pwc: recv_control_msg error -71 req 02 val 2000
[  423.447316][   T29] audit: type=1400 audit(2000000128.638:1331): avc:  denied  { getopt } for  pid=11294 comm="syz.5.971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  423.458462][   T46] pwc: recv_control_msg error -71 req 02 val 2100
[  423.508591][   T46] pwc: recv_control_msg error -71 req 04 val 1500
[  423.638645][T11298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  423.651467][T11298] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  423.828339][ T5889] usb 4-1: new full-speed USB device number 54 using dummy_hcd
[  423.870822][   T46] pwc: recv_control_msg error -71 req 02 val 2500
[  423.905496][   T46] pwc: recv_control_msg error -71 req 02 val 2400
[  423.939327][   T46] pwc: recv_control_msg error -71 req 02 val 2600
[  423.964386][   T46] pwc: recv_control_msg error -71 req 02 val 2900
[  423.988051][   T29] audit: type=1400 audit(2000000129.178:1332): avc:  denied  { connect } for  pid=11305 comm="syz.8.974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  423.995388][   T46] pwc: recv_control_msg error -71 req 02 val 2800
[  424.025353][   T29] audit: type=1400 audit(2000000129.218:1333): avc:  denied  { listen } for  pid=11300 comm="syz.5.973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  424.046459][ T5862] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[  424.065971][ T5889] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  424.084143][ T5889] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  424.528171][   T46] pwc: recv_control_msg error -71 req 04 val 1100
[  424.536496][   T46] pwc: recv_control_msg error -71 req 04 val 1200
[  424.557332][ T5889] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  424.567966][   T46] pwc: Registered as video103.
[  424.573741][   T46] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input24
[  424.582571][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  424.673447][ T5889] usb 4-1: SerialNumber: syz
[  424.678403][   T46] usb 7-1: USB disconnect, device number 45
[  424.696221][ T5862] usb 10-1: Using ep0 maxpacket: 16
[  424.712300][ T5862] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  424.797644][   T29] audit: type=1800 audit(2000000129.988:1334): pid=11308 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.975" name="bus" dev="overlay" ino=839 res=0 errno=0
[  424.798711][ T5889] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22
[  424.866141][ T5889] usb-storage 4-1:1.0: USB Mass Storage device detected
[  424.893025][ T5889] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[  424.907826][ T5862] usb 10-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55
[  424.910908][T11320] netlink: set zone limit has 4 unknown bytes
[  424.923750][ T5862] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  424.933384][ T5889] scsi host1: usb-storage 4-1:1.0
[  424.938645][ T5862] usb 10-1: Product: syz
[  424.947554][ T5862] usb 10-1: Manufacturer: syz
[  424.980285][ T5862] usb 10-1: SerialNumber: syz
[  425.007207][ T5862] usb 10-1: config 0 descriptor??
[  425.045597][ T5862] usb 10-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  425.119408][   T46] usb 7-1: new high-speed USB device number 46 using dummy_hcd
[  425.219866][ T5889] usb 9-1: new high-speed USB device number 31 using dummy_hcd
[  425.280683][   T46] usb 7-1: config 0 has an invalid interface number: 241 but max is 1
[  425.288952][   T46] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  425.299334][   T46] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2
[  425.308259][   T46] usb 7-1: config 0 has no interface number 0
[  425.314599][   T46] usb 7-1: config 0 interface 241 altsetting 5 endpoint 0xD has an invalid bInterval 22, changing to 8
[  425.325808][   T46] usb 7-1: config 0 interface 241 has no altsetting 0
[  425.332720][   T46] usb 7-1: New USB device found, idVendor=2c42, idProduct=1608, bcdDevice=bd.4b
[  425.341947][   T46] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  425.356398][   T46] usb 7-1: config 0 descriptor??
[  425.361503][   T46] usb 7-1: Interface #241 referenced by multiple IADs
[  425.398480][ T5889] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  425.410981][ T5889] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2
[  425.425911][ T5889] usb 9-1: config 1 has no interface number 0
[  425.434396][ T5889] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  425.448720][ T5889] usb 9-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  425.463153][ T5889] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  425.473251][ T5889] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  425.482612][ T5889] usb 9-1: Product: syz
[  425.487091][ T5889] usb 9-1: Manufacturer: syz
[  425.492409][ T5889] usb 9-1: SerialNumber: syz
[  425.705860][   T29] audit: type=1400 audit(2000000130.898:1335): avc:  denied  { ioctl } for  pid=11324 comm="syz.8.977" path="/dev/ptyr4" dev="devtmpfs" ino=139 ioctlcmd=0x5439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  425.771178][   T46] usb 7-1: string descriptor 0 read error: -71
[  425.782219][   T46] f81232 7-1:0.241: f81534a converter detected
[  425.790026][   T46] f81534a ttyUSB0: f81232_set_register failed status: -71
[  425.797220][   T46] f81534a ttyUSB0: probe with driver f81534a failed with error -5
[  425.839301][   T46] usb 7-1: USB disconnect, device number 46
[  425.846766][   T46] f81232 7-1:0.241: device disconnected
[  425.888555][ T6379] usb 10-1: Failed to submit usb control message: -71
[  425.897640][ T5149] usb 10-1: USB disconnect, device number 14
[  425.933088][ T6379] usb 10-1: unable to send the bmi data to the device: -71
[  425.941675][ T6379] usb 10-1: unable to get target info from device
[  425.948665][ T6379] usb 10-1: could not get target info (-71)
[  425.955081][ T6379] usb 10-1: could not probe fw (-71)
[  426.164346][ T5889] cdc_ncm 9-1:1.1: bind() failure
[  426.217154][ T5149] usb 4-1: USB disconnect, device number 54
[  426.422367][ T5889] usb 9-1: USB disconnect, device number 31
[  426.509027][   T29] audit: type=1400 audit(2000000131.698:1336): avc:  denied  { map } for  pid=11359 comm="syz.6.984" path="/dev/video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  426.595941][   T29] audit: type=1400 audit(2000000131.788:1337): avc:  denied  { read } for  pid=11355 comm="syz.5.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  426.748194][   T29] audit: type=1400 audit(2000000131.868:1338): avc:  denied  { write } for  pid=11355 comm="syz.5.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  426.859254][   T46] usb 7-1: new high-speed USB device number 47 using dummy_hcd
[  427.282430][   T29] audit: type=1400 audit(2000000132.448:1339): avc:  denied  { bind } for  pid=11377 comm="syz.3.987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  427.302965][   T29] audit: type=1400 audit(2000000132.448:1340): avc:  denied  { name_bind } for  pid=11377 comm="syz.3.987" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  427.323834][    C0] vkms_vblank_simulate: vblank timer overrun
[  427.360392][   T29] audit: type=1400 audit(2000000132.458:1341): avc:  denied  { node_bind } for  pid=11377 comm="syz.3.987" saddr=172.30.0.4 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  427.393745][   T29] audit: type=1400 audit(2000000132.588:1342): avc:  denied  { setopt } for  pid=11381 comm="syz.5.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  427.779777][   T46] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  427.790822][   T46] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  427.800730][   T46] usb 7-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00
[  427.809872][   T46] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  427.847756][   T46] usb 7-1: config 0 descriptor??
[  427.866883][   T29] audit: type=1400 audit(2000000132.998:1343): avc:  denied  { write } for  pid=11381 comm="syz.5.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  427.879797][T11378] can: request_module (can-proto-0) failed.
[  427.994057][   T29] audit: type=1400 audit(2000000133.008:1344): avc:  denied  { getopt } for  pid=11381 comm="syz.5.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  428.050022][ T5889] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[  428.230526][ T5889] usb 10-1: Using ep0 maxpacket: 8
[  428.237176][ T5889] usb 10-1: config 168 descriptor has 1 excess byte, ignoring
[  428.245580][ T5889] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  428.487588][   T46] steelseries 0003:1038:12B6.0014: item fetching failed at offset 5/7
[  428.675817][   T29] audit: type=1400 audit(2000000133.508:1345): avc:  denied  { read } for  pid=11397 comm="syz.8.992" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  428.754218][ T5889] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  428.766635][ T5889] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  428.792218][   T46] steelseries 0003:1038:12B6.0014: probe with driver steelseries failed with error -22
[  428.793671][ T5889] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  428.832832][ T5889] usb 10-1: config 168 descriptor has 1 excess byte, ignoring
[  428.921289][T11409] bridge0: port 2(bridge_slave_1) entered disabled state
[  428.928699][T11409] bridge0: port 1(bridge_slave_0) entered disabled state
[  428.938037][ T5889] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  428.975140][ T5889] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  428.987196][   T46] usb 7-1: USB disconnect, device number 47
[  428.995849][T11409] bridge0: entered allmulticast mode
[  429.366189][ T5889] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  429.407245][ T5889] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  429.411078][T11417] lo speed is unknown, defaulting to 1000
[  429.423375][ T5889] usb 10-1: config 168 descriptor has 1 excess byte, ignoring
[  429.459012][ T5889] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  429.477545][ T5889] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  429.493112][ T5889] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  429.507818][ T5889] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  429.534202][ T5889] usb 10-1: string descriptor 0 read error: -22
[  429.541899][ T5889] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  429.551646][ T5889] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  429.572230][ T5889] adutux 10-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  429.639918][    T8] usb 9-1: new high-speed USB device number 32 using dummy_hcd
[  429.826082][    T8] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  429.864451][    T8] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  429.895622][    T8] usb 9-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00
[  429.909455][    T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  429.923421][   T46] usb 10-1: USB disconnect, device number 15
[  429.954394][    T8] usb 9-1: config 0 descriptor??
[  430.003097][    T8] hub 9-1:0.0: USB hub found
[  430.188968][T11435] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11435 comm=syz.3.998
[  430.213167][    T8] hub 9-1:0.0: config failed, can't read hub descriptor (err -22)
[  430.294760][    T8] usb 9-1: USB disconnect, device number 32
[  430.459617][ T5862] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  430.649898][ T5862] usb 4-1: Using ep0 maxpacket: 32
[  430.663151][ T5862] usb 4-1: config 0 has an invalid interface number: 35 but max is 0
[  430.676579][ T5862] usb 4-1: config 0 has no interface number 0
[  430.686707][ T5862] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  430.706599][ T5862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  430.716278][ T5862] usb 4-1: Product: syz
[  430.728401][ T5862] usb 4-1: Manufacturer: syz
[  430.738510][ T5862] usb 4-1: SerialNumber: syz
[  430.747475][ T5862] usb 4-1: config 0 descriptor??
[  430.882352][T11449] netlink: 87 bytes leftover after parsing attributes in process `syz.5.1002'.
[  430.959477][ T5862] radio-si470x 4-1:0.35: this is not a si470x device.
[  430.976244][T11451] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  430.976244][T11452] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  431.009309][   T46] usb 9-1: new high-speed USB device number 33 using dummy_hcd
[  431.156711][ T5862] radio-raremono 4-1:0.35: this is not Thanko's Raremono.
[  431.160744][   T46] usb 9-1: Using ep0 maxpacket: 8
[  431.171701][ T5862] usb 4-1: USB disconnect, device number 55
[  431.182696][   T46] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  431.196894][   T46] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  431.206482][   T46] usb 9-1: config 0 descriptor??
[  431.761542][T11477] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1010'.
[  431.788059][T11477] xt_hashlimit: max too large, truncated to 1048576
[  431.859532][T11480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  431.868128][T11480] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  432.038859][   T29] kauditd_printk_skb: 7 callbacks suppressed
[  432.038963][   T29] audit: type=1400 audit(2000000137.128:1353): avc:  denied  { nlmsg_read } for  pid=11485 comm="syz.5.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  432.137109][T11365] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  432.229716][   T29] audit: type=1400 audit(2000000137.418:1354): avc:  denied  { write } for  pid=5171 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  432.695952][   T29] audit: type=1400 audit(2000000137.418:1355): avc:  denied  { remove_name } for  pid=5171 comm="syslogd" name="messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  432.901476][   T29] audit: type=1400 audit(2000000137.418:1356): avc:  denied  { rename } for  pid=5171 comm="syslogd" name="messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  432.939551][   T29] audit: type=1400 audit(2000000137.418:1357): avc:  denied  { add_name } for  pid=5171 comm="syslogd" name="messages.0" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  432.969197][T11365] usb 4-1: Using ep0 maxpacket: 8
[  432.998958][T11365] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  433.050902][T11365] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  433.072149][   T29] audit: type=1400 audit(2000000137.418:1358): avc:  denied  { unlink } for  pid=5171 comm="syslogd" name="messages.0" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  433.103168][   T29] audit: type=1400 audit(2000000137.428:1359): avc:  denied  { create } for  pid=5171 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  433.106022][   T46] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  433.151768][T11365] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  433.176090][T11365] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  433.668586][   T46] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  433.679262][   T46] asix 9-1:0.0: probe with driver asix failed with error -71
[  433.690276][T11365] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  433.702830][T11365] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  433.712115][   T46] usb 9-1: USB disconnect, device number 33
[  433.830661][T11479] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  433.858399][   T29] audit: type=1400 audit(2000000139.048:1360): avc:  denied  { connect } for  pid=11514 comm="syz.8.1018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  433.959419][T11365] usb 4-1: GET_CAPABILITIES returned 0
[  433.985438][T11365] usbtmc 4-1:16.0: can't read capabilities
[  434.014100][   T29] audit: type=1400 audit(2000000139.208:1361): avc:  denied  { write } for  pid=11521 comm="syz.9.1019" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  434.441197][   T29] audit: type=1400 audit(2000000139.248:1362): avc:  denied  { watch } for  pid=11521 comm="syz.9.1019" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  434.464917][   T46] usb 9-1: new full-speed USB device number 34 using dummy_hcd
[  434.487227][    C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  434.511333][ T5860] usb 4-1: USB disconnect, device number 56
[  434.731522][   T46] usb 9-1: config 0 has an invalid interface number: 69 but max is 0
[  434.739860][   T46] usb 9-1: config 0 has no interface number 0
[  434.746328][   T46] usb 9-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  434.774867][   T46] usb 9-1: config 0 interface 69 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  434.831228][   T46] usb 9-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  434.853001][   T46] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  434.895125][   T46] usb 9-1: Product: syz
[  434.923013][   T46] usb 9-1: Manufacturer: syz
[  434.942281][   T46] usb 9-1: SerialNumber: syz
[  434.970610][   T46] usb 9-1: config 0 descriptor??
[  434.978273][T11518] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  435.169412][T11518] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  435.212487][   T46] cyberjack 9-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  435.260328][   T46] usb 9-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  435.319439][ T5860] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[  435.493291][ T5859] usb 9-1: USB disconnect, device number 34
[  435.493919][ T5860] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  435.505143][ T5859] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  435.525680][ T5860] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  435.535991][ T5859] cyberjack 9-1:0.69: device disconnected
[  435.565768][ T5860] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  435.594457][ T5860] usb 6-1: config 0 descriptor??
[  435.609785][   T46] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  435.626363][ T5860] pwc: Askey VC010 type 2 USB webcam detected.
[  435.769252][   T46] usb 4-1: Using ep0 maxpacket: 8
[  435.776000][   T46] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 15
[  435.801946][   T46] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  435.819240][   T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  435.848241][T11539] netlink: 'syz.9.1025': attribute type 1 has an invalid length.
[  435.859335][   T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  435.877126][T11539] netlink: 224 bytes leftover after parsing attributes in process `syz.9.1025'.
[  435.896594][   T46] usb 4-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8
[  435.916711][   T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  435.941488][   T46] usb 4-1: Product: syz
[  435.945772][   T46] usb 4-1: Manufacturer: syz
[  435.959405][   T46] usb 4-1: SerialNumber: syz
[  435.970167][   T46] usb 4-1: config 0 descriptor??
[  435.975832][T11534] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  436.055162][ T5860] pwc: recv_control_msg error -32 req 02 val 2b00
[  436.070710][ T5860] pwc: recv_control_msg error -32 req 02 val 2700
[  436.082360][ T5860] pwc: recv_control_msg error -32 req 02 val 2c00
[  436.100493][ T5860] pwc: recv_control_msg error -32 req 04 val 1000
[  436.120325][ T5860] pwc: recv_control_msg error -32 req 04 val 1300
[  436.127590][ T5860] pwc: recv_control_msg error -32 req 04 val 1400
[  436.135638][ T5860] pwc: recv_control_msg error -32 req 02 val 2000
[  436.171372][ T5860] pwc: recv_control_msg error -32 req 02 val 2100
[  436.191878][   T46] powermate: Expected payload of 3--6 bytes, found 1024 bytes!
[  436.229982][   T46] input: Griffin SoundKnob as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input26
[  436.528704][ T5860] pwc: recv_control_msg error -71 req 02 val 2500
[  436.849072][T11365] usb 7-1: new low-speed USB device number 48 using dummy_hcd
[  436.919630][T11563] usb usb1: usbfs: process 11563 (syz.8.1029) did not claim interface 7 before use
[  437.022482][ T5860] pwc: recv_control_msg error -71 req 02 val 2400
[  437.047522][ T5860] pwc: recv_control_msg error -71 req 02 val 2600
[  437.528420][ T5860] pwc: recv_control_msg error -71 req 02 val 2900
[  437.536280][ T5860] pwc: recv_control_msg error -71 req 02 val 2800
[  437.543839][   T29] kauditd_printk_skb: 2 callbacks suppressed
[  437.543855][   T29] audit: type=1400 audit(2000000142.098:1365): avc:  denied  { append } for  pid=11558 comm="syz.8.1029" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  437.573422][   T29] audit: type=1400 audit(2000000142.148:1366): avc:  denied  { read write } for  pid=11558 comm="syz.8.1029" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  437.689589][ T5860] pwc: recv_control_msg error -71 req 04 val 1100
[  437.702698][ T5860] pwc: recv_control_msg error -71 req 04 val 1200
[  437.749389][   T29] audit: type=1400 audit(2000000142.148:1367): avc:  denied  { open } for  pid=11558 comm="syz.8.1029" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  437.777458][ T5860] pwc: Registered as video103.
[  437.787926][ T5860] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input27
[  437.821520][T11365] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[  437.851798][T11365] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[  437.903362][ T5860] usb 6-1: USB disconnect, device number 42
[  438.009349][T11365] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  438.040993][T11365] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  438.052749][T11365] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  438.074386][T11365] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[  438.099355][T11365] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[  438.099733][   T29] audit: type=1400 audit(2000000143.278:1368): avc:  denied  { map } for  pid=11565 comm="syz.8.1030" path="/dev/cuse" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1
[  438.133174][    C0] vkms_vblank_simulate: vblank timer overrun
[  438.139287][T11365] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  438.183868][T11365] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  438.194639][   T29] audit: type=1400 audit(2000000143.288:1369): avc:  denied  { create } for  pid=11565 comm="syz.8.1030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  438.203434][    C1] powermate: config urb returned -71
[  438.220185][    C1] powermate: config urb returned -71
[  438.234824][T11365] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  438.282726][   T46] usb 4-1: USB disconnect, device number 57
[  438.282779][    C1] powermate 4-1:0.0: powermate_irq - usb_submit_urb failed with result: -19
[  438.295950][   T29] audit: type=1400 audit(2000000143.288:1370): avc:  denied  { setopt } for  pid=11565 comm="syz.8.1030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  438.382736][T11365] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[  438.391283][T11365] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[  438.401610][T11365] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  438.412124][T11365] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  438.424026][T11365] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  438.477453][T11582] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  438.827789][T11365] usb 7-1: string descriptor 0 read error: -22
[  438.835465][T11365] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  438.854624][T11365] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  438.909586][T11365] adutux 7-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  439.154070][ T5860] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[  439.174241][T11365] usb 7-1: USB disconnect, device number 48
[  439.207707][   T46] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  439.284489][T11574] x_tables: duplicate underflow at hook 2
[  439.300325][   T29] audit: type=1400 audit(2000000144.456:1371): avc:  denied  { setopt } for  pid=11572 comm="syz.8.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  439.345962][ T5860] usb 6-1: Using ep0 maxpacket: 16
[  439.377399][ T5860] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  439.402225][   T46] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  439.416243][   T46] usb 4-1: config 0 has no interface number 0
[  439.464446][   T46] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  439.497970][ T5860] usb 6-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d
[  439.523974][   T46] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  439.535995][ T5860] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  439.544561][ T5860] usb 6-1: Product: syz
[  439.548914][   T46] usb 4-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00
[  439.558458][ T5860] usb 6-1: Manufacturer: syz
[  439.580350][ T5860] usb 6-1: SerialNumber: syz
[  439.600326][   T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  439.621413][ T5860] usb 6-1: config 0 descriptor??
[  439.637077][ T5132] Bluetooth: hci2: command 0x0401 tx timeout
[  439.643258][ T5860] gspca_main: STV06xx-2.14.0 probing 046d:08f0
[  439.681764][   T46] usb 4-1: config 0 descriptor??
[  439.705968][ T5860] gspca_stv06xx: st6422 sensor detected
[  439.724777][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  439.956391][T11365] usb 10-1: new high-speed USB device number 16 using dummy_hcd
[  440.097133][ T5890] usb 9-1: new high-speed USB device number 35 using dummy_hcd
[  440.148891][T11365] usb 10-1: Using ep0 maxpacket: 32
[  440.163999][T11365] usb 10-1: config 0 has an invalid interface number: 35 but max is 0
[  440.176872][T11365] usb 10-1: config 0 has no interface number 0
[  440.193978][   T46] usbhid 4-1:0.2: can't add hid device: -71
[  440.209787][   T46] usbhid 4-1:0.2: probe with driver usbhid failed with error -71
[  440.237265][T11365] usb 10-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  440.253026][T11619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  440.271232][ T5890] usb 9-1: Using ep0 maxpacket: 32
[  440.300258][   T46] usb 4-1: USB disconnect, device number 58
[  440.311058][ T5890] usb 9-1: config 0 has an invalid interface number: 239 but max is 0
[  440.330635][T11365] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  440.334959][T11619] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  440.338783][T11365] usb 10-1: Product: syz
[  440.361311][ T5890] usb 9-1: config 0 has no interface number 0
[  440.383478][ T5890] usb 9-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8
[  440.401907][T11365] usb 10-1: Manufacturer: syz
[  440.407757][T11365] usb 10-1: SerialNumber: syz
[  440.413375][ T5890] usb 9-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xF1, changing to 0x81
[  440.429524][T11584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  440.432871][T11365] usb 10-1: config 0 descriptor??
[  440.444272][ T5890] usb 9-1: config 0 interface 239 altsetting 4 endpoint 0x81 has an invalid bInterval 127, changing to 10
[  440.461714][ T5890] usb 9-1: config 0 interface 239 altsetting 4 endpoint 0x81 has invalid maxpacket 57427, setting to 1024
[  440.489473][ T5890] usb 9-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  440.489886][T11584] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  440.515849][T11617] Process accounting resumed
[  440.521764][ T5890] usb 9-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89
[  440.538827][ T5890] usb 9-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024
[  440.551757][ T5890] usb 9-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024
[  440.572855][ T5890] usb 9-1: config 0 interface 239 altsetting 4 has 6 endpoint descriptors, different from the interface descriptor's value: 4
[  440.598175][ T5890] usb 9-1: config 0 interface 239 has no altsetting 0
[  440.620922][ T5890] usb 9-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9
[  440.631121][ T5890] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  440.639199][ T5890] usb 9-1: Product: syz
[  440.657615][ T5860] STV06xx 6-1:0.0: probe with driver STV06xx failed with error -71
[  440.679073][ T5860] usb 6-1: USB disconnect, device number 43
[  440.685531][ T5890] usb 9-1: Manufacturer: syz
[  440.696441][T11365] radio-si470x 10-1:0.35: this is not a si470x device.
[  440.720024][ T5890] usb 9-1: SerialNumber: syz
[  440.757899][T11365] radio-raremono 10-1:0.35: this is not Thanko's Raremono.
[  440.776770][ T5890] usb 9-1: config 0 descriptor??
[  440.786634][T11365] usb 10-1: USB disconnect, device number 16
[  440.795012][T11613] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22
[  440.803252][T11613] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22
[  441.016195][T11650] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0
[  441.046332][   T46] usb 7-1: new full-speed USB device number 49 using dummy_hcd
[  441.081211][ T5132] Bluetooth: hci3: BCM: Reset failed (-71)
[  441.087667][    T8] usb 9-1: USB disconnect, device number 35
[  441.097361][T11649] IPVS: stopping master sync thread 11650 ...
[  441.213461][   T46] usb 7-1: config 0 has an invalid interface number: 52 but max is 0
[  441.295746][   T46] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  441.421871][   T46] usb 7-1: config 0 has no interface number 0
[  441.480233][   T46] usb 7-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10
[  441.527355][   T46] usb 7-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0
[  441.538091][   T46] usb 7-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  441.551207][   T46] usb 7-1: config 0 interface 52 has no altsetting 0
[  441.577517][   T46] usb 7-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[  441.587020][   T46] usb 7-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35
[  441.602457][   T46] usb 7-1: Product: syz
[  441.608378][   T46] usb 7-1: Manufacturer: syz
[  441.613548][   T46] usb 7-1: SerialNumber: syz
[  441.636605][   T46] usb 7-1: config 0 descriptor??
[  441.638263][   T29] audit: type=1400 audit(2000000146.663:1372): avc:  denied  { map } for  pid=11664 comm="syz.5.1044" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  441.719125][   T29] audit: type=1400 audit(2000000146.720:1373): avc:  denied  { bind } for  pid=11669 comm="syz.3.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  441.756430][T11670] batadv0: entered promiscuous mode
[  441.811424][T11670] 8021q: adding VLAN 0 to HW filter on device batadv0
[  441.843993][T11670] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1046'.
[  441.857373][T11670] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1046'.
[  441.903157][   T46] synaptics_usb 7-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  441.923238][   T46] synaptics_usb 7-1:0.52: probe with driver synaptics_usb failed with error -5
[  442.161234][ T5890] usb 4-1: new full-speed USB device number 59 using dummy_hcd
[  442.221832][   T29] audit: type=1400 audit(2000000147.178:1374): avc:  denied  { bind } for  pid=11694 comm="syz.5.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  442.315580][T11365] usb 7-1: USB disconnect, device number 49
[  442.332029][ T5890] usb 4-1: config 65 has too many interfaces: 45, using maximum allowed: 32
[  442.340902][ T5890] usb 4-1: config 65 has an invalid interface number: 248 but max is 44
[  442.377988][ T5890] usb 4-1: config 65 has 2 interfaces, different from the descriptor's value: 45
[  442.399646][ T5890] usb 4-1: config 65 has no interface number 0
[  442.418789][ T5890] usb 4-1: config 65 has no interface number 1
[  442.446201][ T5890] usb 4-1: New USB device found, idVendor=0003, idProduct=0000, bcdDevice=80.00
[  442.459507][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  442.481355][ T5890] usb 4-1: SerialNumber: syz
[  442.760742][ T5890] usb 4-1: USB disconnect, device number 59
[  442.887001][   T29] kauditd_printk_skb: 4 callbacks suppressed
[  442.887024][   T29] audit: type=1400 audit(2000000147.833:1379): avc:  denied  { mount } for  pid=11721 comm="syz.8.1055" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1
[  442.927161][T11722] ubi0: detaching mtd0
[  442.945593][T11722] ubi0: mtd0 is detached
[  443.019823][T11724] ptm ptm2: ldisc open failed (-12), clearing slot 2
[  443.063552][T11729] Bluetooth: MGMT ver 1.23
[  443.091282][   T29] audit: type=1400 audit(2000000148.020:1380): avc:  denied  { read } for  pid=11728 comm="syz.8.1057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  443.259022][   T29] audit: type=1400 audit(2000000148.169:1381): avc:  denied  { connect } for  pid=11728 comm="syz.8.1057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  443.328274][   T29] audit: type=1400 audit(2000000148.207:1382): avc:  denied  { shutdown } for  pid=11728 comm="syz.8.1057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  443.535879][   T29] audit: type=1326 audit(2000000148.216:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11728 comm="syz.8.1057" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fad2d585d29 code=0x0
[  443.872867][T11747] netlink: 'syz.3.1059': attribute type 10 has an invalid length.
[  443.881736][T11747] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1059'.
[  444.356325][   T29] audit: type=1400 audit(2000000149.198:1384): avc:  denied  { read write } for  pid=11755 comm="syz.8.1064" name="file0" dev="fuse" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  444.384806][   T29] audit: type=1400 audit(2000000149.198:1385): avc:  denied  { open } for  pid=11755 comm="syz.8.1064" path="/173/file0/file0" dev="fuse" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  444.413890][ T5890] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[  444.574271][ T5890] usb 6-1: Using ep0 maxpacket: 16
[  444.580899][ T5890] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  444.592496][T11365] usb 10-1: new high-speed USB device number 17 using dummy_hcd
[  444.600834][ T5890] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  444.612632][ T5890] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  444.624282][ T5890] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  444.634115][   T46] usb 9-1: new high-speed USB device number 36 using dummy_hcd
[  444.642825][ T5890] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  444.659801][ T5860] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[  444.680428][ T5890] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  444.690620][ T5890] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  444.705190][ T5890] usb 6-1: Manufacturer: syz
[  444.721102][ T5890] usb 6-1: config 0 descriptor??
[  444.789622][T11365] usb 10-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00
[  444.803115][T11365] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  444.816178][T11365] usb 10-1: config 0 descriptor??
[  444.821443][   T46] usb 9-1: Using ep0 maxpacket: 32
[  444.831185][ T5860] usb 4-1: Using ep0 maxpacket: 16
[  444.838019][   T46] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  444.848452][   T46] usb 9-1: config 0 interface 0 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  444.861781][   T46] usb 9-1: config 0 interface 0 has no altsetting 0
[  444.868603][   T46] usb 9-1: New USB device found, idVendor=056a, idProduct=00c0, bcdDevice= 0.00
[  444.877809][   T46] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  444.894837][   T46] usb 9-1: config 0 descriptor??
[  444.901088][ T5860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  444.912180][ T5860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  444.922087][ T5860] usb 4-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00
[  444.931310][ T5860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  444.941455][ T5860] usb 4-1: config 0 descriptor??
[  444.951234][   T46] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[  445.013993][ T5890] rc_core: IR keymap rc-hauppauge not found
[  445.019989][ T5890] Registered IR keymap rc-empty
[  445.025742][ T5890] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  445.044567][ T5890] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  445.066741][ T5890] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  445.081116][ T5890] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input29
[  445.095229][ T5890] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  445.119644][ T5890] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  445.140795][ T5890] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  445.162177][ T5890] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  445.166993][ T5859] usb 9-1: USB disconnect, device number 36
[  445.185905][ T5890] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  445.216283][ T5890] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  445.237329][ T5890] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  445.258421][ T5890] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  445.266945][T11365] playstation 0003:054C:0DF2.0015: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.9-1/input0
[  445.281050][ T5890] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  445.301264][ T5890] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  445.322585][ T5890] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  445.346301][ T5890] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  445.355813][ T5890] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  445.402869][ T5860] wacom 0003:056A:00D0.0016: Unknown device_type for 'HID 056a:00d0'. Assuming pen.
[  445.415011][ T5860] wacom 0003:056A:00D0.0016: hidraw1: USB HID v0.36 Device [HID 056a:00d0] on usb-dummy_hcd.3-1/input0
[  445.426968][ T5860] input: Wacom Bamboo 2FG Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00D0.0016/input/input30
[  445.460632][ T5890] usb 6-1: USB disconnect, device number 44
[  445.678293][ T5860] usb 4-1: USB disconnect, device number 60
[  445.688136][T11787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  445.698387][T11365] playstation 0003:054C:0DF2.0015: Failed to retrieve feature with reportID 32: -32
[  445.710771][T11787] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  445.721632][T11365] playstation 0003:054C:0DF2.0015: Failed to retrieve DualSense firmware info: -32
[  445.737183][T11365] playstation 0003:054C:0DF2.0015: Failed to get firmware info from DualSense
[  445.747565][T11365] playstation 0003:054C:0DF2.0015: Failed to create dualsense.
[  445.766059][T11365] playstation 0003:054C:0DF2.0015: probe with driver playstation failed with error -32
[  445.801639][T11365] usb 10-1: USB disconnect, device number 17
[  446.043676][T11793] tipc: Started in network mode
[  446.048671][T11793] tipc: Node identity , cluster identity 4711
[  446.055524][T11793] tipc: Failed to obtain node identity
[  446.061598][T11793] tipc: Enabling of bearer <eth:caif0> rejected, failed to enable media
[  446.070704][T11798] Invalid source name
[  446.274455][T11365] usb 10-1: new high-speed USB device number 18 using dummy_hcd
[  446.302196][   T29] audit: type=1400 audit(2000000151.022:1386): avc:  denied  { write } for  pid=11803 comm="syz.5.1074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  446.302227][T11804] ieee802154 phy1 wpan1: encryption failed: -90
[  446.338266][ T5860] usb 9-1: new high-speed USB device number 37 using dummy_hcd
[  446.369405][T11804] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11804 comm=syz.5.1074
[  446.435286][T11365] usb 10-1: Using ep0 maxpacket: 32
[  446.445985][T11365] usb 10-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  446.466034][T11365] usb 10-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  446.476410][T11365] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  446.501912][ T5859] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[  446.612457][T11365] usb 10-1: Product: syz
[  446.617410][T11365] usb 10-1: Manufacturer: syz
[  446.622259][T11365] usb 10-1: SerialNumber: syz
[  446.630260][T11365] usb 10-1: config 0 descriptor??
[  446.638531][T11365] cdc_ether 10-1:0.0: skipping garbage
[  446.645282][ T5860] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  446.657119][T11365] cdc_ether 10-1:0.0: invalid descriptor buffer length
[  446.664189][ T5860] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  446.674053][T11365] usb 10-1: bad CDC descriptors
[  446.690476][ T5859] usb 4-1: Using ep0 maxpacket: 16
[  447.142941][T11365] usb 10-1: unsupported MDLM descriptors
[  447.148628][ T5860] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18
[  447.179922][T11365] usb 10-1: USB disconnect, device number 18
[  447.186773][ T5860] usb 9-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  447.201702][ T5859] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  447.222125][ T5860] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  447.224899][ T5859] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  447.257319][ T5859] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  447.265513][ T5860] usb 9-1: config 0 descriptor??
[  447.270670][ T5859] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  447.285582][ T5859] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  447.296042][ T5859] usb 4-1: Product: syz
[  447.306856][ T5859] usb 4-1: Manufacturer: syz
[  447.312894][ T5859] usb 4-1: SerialNumber: syz
[  447.565649][T11802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  447.593613][T11802] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  447.637509][ T5859] usb 4-1: 0:2 : does not exist
[  447.685927][ T5859] usb 4-1: USB disconnect, device number 61
[  447.728750][ T5860] isku 0003:1E7D:319C.0017: invalid report_size 23040
[  447.740712][ T5860] isku 0003:1E7D:319C.0017: item 0 2 1 7 parsing failed
[  447.748444][ T5860] isku 0003:1E7D:319C.0017: parse failed
[  447.765747][ T5860] isku 0003:1E7D:319C.0017: probe with driver isku failed with error -22
[  447.912327][ T6699] udevd[6699]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  447.950763][ T5890] usb 9-1: USB disconnect, device number 37
[  448.047101][T11827] input: syz0 as /devices/virtual/input/input33
[  448.054635][   T29] audit: type=1400 audit(2000000152.650:1387): avc:  denied  { read } for  pid=11826 comm="syz.3.1081" path="socket:[35619]" dev="sockfs" ino=35619 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  448.102138][T11365] usb 10-1: new full-speed USB device number 19 using dummy_hcd
[  448.152445][   T29] audit: type=1400 audit(2000000152.753:1388): avc:  denied  { setopt } for  pid=11828 comm="syz.5.1082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  448.275522][T11365] usb 10-1: too many configurations: 123, using maximum allowed: 8
[  448.293277][T11365] usb 10-1: unable to read config index 0 descriptor/start: -61
[  448.303019][T11365] usb 10-1: can't read configurations, error -61
[  448.444235][T11365] usb 10-1: new full-speed USB device number 20 using dummy_hcd
[  448.491449][   T29] kauditd_printk_skb: 2 callbacks suppressed
[  448.491468][   T29] audit: type=1400 audit(2000000153.071:1391): avc:  denied  { accept } for  pid=11845 comm="syz.3.1089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  448.640560][T11365] usb 10-1: too many configurations: 123, using maximum allowed: 8
[  448.664526][T11365] usb 10-1: unable to read config index 0 descriptor/start: -61
[  448.681412][T11365] usb 10-1: can't read configurations, error -61
[  448.696637][T11365] usb usb10-port1: attempt power cycle
[  448.756959][T11856] nbd5: detected capacity change from 0 to 67108884
[  448.773150][T11858] kernel profiling enabled (shift: 17)
[  448.796707][ T6699] block nbd5: Send control failed (result -89)
[  448.810447][ T6699] block nbd5: Request send failed, requeueing
[  448.824829][ T5813] block nbd5: Receive control failed (result -32)
[  448.829925][   T39] block nbd5: Dead connection, failed to find a fallback
[  448.841023][   T39] block nbd5: shutting down sockets
[  448.846910][   T39] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  448.857105][   T39] Buffer I/O error on dev nbd5, logical block 0, async page read
[  448.872355][ T6699] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  448.881895][ T6699] Buffer I/O error on dev nbd5, logical block 0, async page read
[  448.908984][ T6699] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  448.948366][ T6699] Buffer I/O error on dev nbd5, logical block 0, async page read
[  448.959311][ T5859] usb 7-1: new high-speed USB device number 50 using dummy_hcd
[  448.999895][ T6699] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  449.016404][ T6699] Buffer I/O error on dev nbd5, logical block 0, async page read
[  449.025310][ T5889] usb 6-1: new high-speed USB device number 45 using dummy_hcd
[  449.040117][ T6699] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  449.051807][ T6699] Buffer I/O error on dev nbd5, logical block 0, async page read
[  449.062232][ T6699] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  449.072393][ T6699] Buffer I/O error on dev nbd5, logical block 0, async page read
[  449.075120][T11365] usb 10-1: new full-speed USB device number 21 using dummy_hcd
[  449.080521][ T6699] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  449.097816][ T6699] Buffer I/O error on dev nbd5, logical block 0, async page read
[  449.110785][ T6699] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  449.121412][ T6699] Buffer I/O error on dev nbd5, logical block 0, async page read
[  449.132605][T11365] usb 10-1: too many configurations: 123, using maximum allowed: 8
[  449.138264][ T6699] ldm_validate_partition_table(): Disk read failed.
[  449.148359][ T6699] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  449.161096][ T5859] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  449.172359][ T5859] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  449.181377][ T5859] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  449.191640][ T6699] Buffer I/O error on dev nbd5, logical block 0, async page read
[  449.200030][ T5889] usb 6-1: Using ep0 maxpacket: 16
[  449.281852][T11365] usb 10-1: unable to read config index 0 descriptor/start: -61
[  449.289741][T11365] usb 10-1: can't read configurations, error -61
[  449.305638][ T6699] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  449.309437][ T5889] usb 6-1: too many endpoints for config 1 interface 1 altsetting 255: 244, using maximum allowed: 30
[  449.316899][ T6699] Buffer I/O error on dev nbd5, logical block 0, async page read
[  449.339433][ T6699] Dev nbd5: unable to read RDB block 0
[  449.342630][ T5859] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  449.427707][T11365] usb 10-1: new full-speed USB device number 22 using dummy_hcd
[  449.448939][ T6699]  nbd5: unable to read partition table
[  449.452713][T11365] usb 10-1: too many configurations: 123, using maximum allowed: 8
[  449.515853][T11365] usb 10-1: unable to read config index 0 descriptor/start: -61
[  449.539973][T11365] usb 10-1: can't read configurations, error -61
[  449.556024][ T5890] usb 9-1: new high-speed USB device number 38 using dummy_hcd
[  449.646276][T11365] usb usb10-port1: unable to enumerate USB device
[  449.740140][ T5890] usb 9-1: Using ep0 maxpacket: 16
[  449.772901][ T5890] usb 9-1: config 0 has an invalid interface number: 251 but max is 0
[  449.819005][ T5889] usb 6-1: config 1 interface 1 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 244
[  449.820051][ T6699] ldm_validate_partition_table(): Disk read failed.
[  449.833099][ T5889] usb 6-1: config 1 interface 1 has no altsetting 2
[  449.847818][ T5859] usb 7-1: config 0 descriptor??
[  449.856151][ T5889] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  449.858352][ T5890] usb 9-1: config 0 has no interface number 0
[  449.865214][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  449.865242][ T5889] usb 6-1: Product: 䠊
[  449.865273][ T5889] usb 6-1: Manufacturer: ဇ
[  449.865288][ T5889] usb 6-1: SerialNumber: ᐌ
[  449.893835][ T5890] usb 9-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  449.904045][ T5890] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  449.913439][ T5890] usb 9-1: Product: syz
[  449.917393][ T6699] Dev nbd5: unable to read RDB block 0
[  449.920940][ T5890] usb 9-1: Manufacturer: syz
[  449.926866][ T6699]  nbd5: unable to read partition table
[  449.940052][ T5890] usb 9-1: SerialNumber: syz
[  449.957813][ T5890] usb 9-1: config 0 descriptor??
[  450.159551][ T5862] usb 7-1: USB disconnect, device number 50
[  450.320257][ T5890] asix 9-1:0.251: probe with driver asix failed with error -22
[  450.364617][ T5890] usb 9-1: USB disconnect, device number 38
[  450.536769][T11854] ldm_validate_partition_table(): Disk read failed.
[  450.667932][T11878] o2cb: This node has not been configured.
[  450.674243][T11878] o2cb: Cluster check failed. Fix errors before retrying.
[  450.683010][T11878] (syz.3.1095,11878,0):user_dlm_register:674 ERROR: status = -22
[  450.691846][T11878] (syz.3.1095,11878,0):dlmfs_mkdir:436 ERROR: Error -22 could not register domain "file1"
[  451.008412][T11854] Dev nbd5: unable to read RDB block 0
[  451.008437][T11856] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1090'.
[  451.031313][   T29] audit: type=1400 audit(2000000155.101:1392): avc:  denied  { write } for  pid=11875 comm="syz.3.1095" name="/" dev="ocfs2_dlmfs" ino=35781 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  451.063446][   T29] audit: type=1400 audit(2000000155.101:1393): avc:  denied  { add_name } for  pid=11875 comm="syz.3.1095" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  451.143615][   T29] audit: type=1400 audit(2000000155.101:1394): avc:  denied  { create } for  pid=11875 comm="syz.3.1095" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  451.211533][   T29] audit: type=1400 audit(2000000155.101:1395): avc:  denied  { associate } for  pid=11875 comm="syz.3.1095" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  451.249039][T11880] bio_check_eod: 2 callbacks suppressed
[  451.249057][T11880] syz.9.1096: attempt to access beyond end of device
[  451.249057][T11880] loop9: rw=0, sector=2, nr_sectors = 1 limit=0
[  451.325358][   T29] audit: type=1400 audit(2000000155.709:1396): avc:  denied  { unmount } for  pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  451.358014][T11854]  nbd5: unable to read partition table
[  451.368047][T11880] hfs: can't find a HFS filesystem on dev loop9
[  451.404575][T11854] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[  451.426012][T11854] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=33554441, location=33554441
[  451.456280][T11854] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=33554185, location=33554185
[  451.468131][T11854] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=33554440, location=33554440
[  451.483160][T11854] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=33554184, location=33554184
[  451.494838][T11854] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=33554439, location=33554439
[  451.508995][T11854] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=33554183, location=33554183
[  451.526757][T11854] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=33554291, location=33554291
[  451.547094][T11854] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=33554035, location=33554035
[  451.561620][T11854] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=33554289, location=33554289
[  451.574400][T11854] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=33554033, location=33554033
[  451.586944][T11854] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[  451.598143][T11854] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[  451.608018][T11854] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=16777220, location=16777220
[  451.622750][T11854] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=16776964, location=16776964
[  451.633802][ T5859] usb 10-1: new high-speed USB device number 23 using dummy_hcd
[  451.642321][ T5862] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[  451.664768][T11854] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=16777219, location=16777219
[  451.681084][T11854] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=16776963, location=16776963
[  451.691718][T11854] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=16777218, location=16777218
[  451.703253][T11854] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=16776962, location=16776962
[  451.723478][T11854] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=16777070, location=16777070
[  451.735765][T11854] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=16776814, location=16776814
[  451.747099][T11854] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=16777068, location=16777068
[  451.758748][T11854] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=16776812, location=16776812
[  451.772183][ T5860] usb 9-1: new high-speed USB device number 39 using dummy_hcd
[  451.780186][T11854] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[  451.812340][ T5862] usb 4-1: Using ep0 maxpacket: 16
[  451.820850][T11854] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[  451.827972][ T5862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  451.845152][ T5859] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a
[  451.865687][ T5859] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  451.869696][T11854] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=8388609, location=8388609
[  451.873880][ T5862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  451.894504][ T5859] usb 10-1: Product: syz
[  451.899792][ T5859] usb 10-1: Manufacturer: syz
[  451.904499][ T5859] usb 10-1: SerialNumber: syz
[  451.911207][ T5862] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[  451.920839][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  451.936296][ T5859] usb 10-1: config 0 descriptor??
[  451.939694][T11854] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=8388353, location=8388353
[  451.943074][ T5862] usb 4-1: config 0 descriptor??
[  451.955270][ T5860] usb 9-1: config 0 has an invalid interface number: 2 but max is 0
[  451.975611][ T5860] usb 9-1: config 0 has no interface number 0
[  451.992865][ T5860] usb 9-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  452.026709][T11854] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=8388608, location=8388608
[  452.117529][ T5860] usb 9-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  452.127491][   T29] audit: type=1400 audit(2000000156.438:1397): avc:  denied  { write } for  pid=11886 comm="syz.6.1099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  452.168360][T11854] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=8388352, location=8388352
[  452.179862][ T5860] usb 9-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00
[  452.198609][ T5860] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  452.203132][ T5859] usb 10-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  452.215066][ T5859] dvb_usb_af9035 10-1:0.0: probe with driver dvb_usb_af9035 failed with error -22
[  452.233820][T11854] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=8388607, location=8388607
[  452.265232][ T5860] usb 9-1: config 0 descriptor??
[  452.282975][T11854] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=8388351, location=8388351
[  452.301025][T11854] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=8388459, location=8388459
[  452.312374][T11854] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=8388203, location=8388203
[  452.339318][T11854] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=8388457, location=8388457
[  452.353975][T11854] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=8388201, location=8388201
[  452.370493][T11854] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[  452.387851][T11854] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1)
[  452.407766][ T5859] usb 10-1: USB disconnect, device number 23
[  452.433118][ T5889] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  452.469020][ T5862] corsair 0003:1B1C:1B02.0018: unknown main item tag 0x0
[  452.476248][ T5862] corsair 0003:1B1C:1B02.0018: unknown main item tag 0x0
[  452.484514][ T5862] corsair 0003:1B1C:1B02.0018: unknown main item tag 0x0
[  452.485281][T11365] usb 7-1: new high-speed USB device number 51 using dummy_hcd
[  452.497967][ T5862] corsair 0003:1B1C:1B02.0018: unknown main item tag 0x0
[  452.527427][ T5889] usb 6-1: USB disconnect, device number 45
[  452.534046][ T5862] corsair 0003:1B1C:1B02.0018: unknown main item tag 0x0
[  452.576607][ T5862] corsair 0003:1B1C:1B02.0018: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.3-1/input0
[  452.684348][ T5862] corsair 0003:1B1C:1B02.0018: Read invalid backlight brightness: 9d.
[  452.699065][T11365] usb 7-1: Using ep0 maxpacket: 32
[  452.720051][T11365] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  452.740845][T11365] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  452.772419][T11365] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  452.831664][T11365] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  452.846052][T11365] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  452.866488][T11365] usb 7-1: config 0 descriptor??
[  452.879481][T11889] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  452.892916][T11365] hub 7-1:0.0: USB hub found
[  452.901718][T11894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  452.917382][T11892] lo speed is unknown, defaulting to 1000
[  452.924528][T11894] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  453.014104][ T5861] usb 4-1: USB disconnect, device number 62
[  453.104466][T11365] hub 7-1:0.0: 2 ports detected
[  453.272508][   T29] audit: type=1400 audit(2000000157.542:1398): avc:  denied  { ioctl } for  pid=11898 comm="syz.3.1102" path="socket:[36866]" dev="sockfs" ino=36866 ioctlcmd=0x3b88 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  453.320223][T11365] hub 7-1:0.0: hub_hub_status failed (err = -71)
[  453.327147][T11365] hub 7-1:0.0: config failed, can't get hub status (err -71)
[  453.398436][T11365] usbhid 7-1:0.0: can't add hid device: -71
[  453.414321][T11365] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  453.417700][   T29] audit: type=1400 audit(2000000157.673:1399): avc:  denied  { bind } for  pid=11900 comm="syz.5.1103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  453.635756][T11365] usb 7-1: USB disconnect, device number 51
[  453.766574][T11907] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  453.864620][T11908] tmpfs: Bad value for 'mpol'
[  454.228267][ T5889] usb 6-1: new full-speed USB device number 46 using dummy_hcd
[  454.273877][   T29] audit: type=1400 audit(2000000158.478:1400): avc:  denied  { ioctl } for  pid=11891 comm="syz.9.1101" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xf508 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  454.424073][ T5889] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  454.456766][ T5889] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  454.506420][ T5889] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  454.537121][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  454.730846][T11923] wireguard0: entered promiscuous mode
[  454.736449][T11923] wireguard0: entered allmulticast mode
[  454.786323][ T5860] usbhid 9-1:0.2: can't add hid device: -71
[  454.791448][ T5889] aiptek 6-1:17.0: Aiptek using 400 ms programming speed
[  454.793709][ T5860] usbhid 9-1:0.2: probe with driver usbhid failed with error -71
[  454.813059][ T5889] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input34
[  454.834682][ T5860] usb 9-1: USB disconnect, device number 39
[  454.858345][ T5889] input: failed to attach handler kbd to device input34, error: -5
[  454.901298][T11365] usb 10-1: new high-speed USB device number 24 using dummy_hcd
[  454.907298][ T5889] usb 6-1: USB disconnect, device number 46
[  454.960778][T11928] syz.8.1108: attempt to access beyond end of device
[  454.960778][T11928] nbd8: rw=0, sector=16, nr_sectors = 1 limit=0
[  454.974034][T11928] qnx6: unable to read the first superblock
[  454.980156][T11928] syz.8.1108: attempt to access beyond end of device
[  454.980156][T11928] nbd8: rw=0, sector=0, nr_sectors = 1 limit=0
[  454.992972][T11928] qnx6: unable to read the first superblock
[  454.998958][T11928] qnx6: unable to read the first superblock
[  455.083104][T11365] usb 10-1: Using ep0 maxpacket: 16
[  455.093985][T11365] usb 10-1: config 0 has an invalid interface number: 63 but max is 0
[  455.115206][T11365] usb 10-1: config 0 has no interface number 0
[  455.136793][T11365] usb 10-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=22.a7
[  455.146367][T11365] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  455.168613][T11365] usb 10-1: Product: syz
[  455.173753][T11365] usb 10-1: Manufacturer: syz
[  455.178475][T11365] usb 10-1: SerialNumber: syz
[  455.193973][T11365] usb 10-1: config 0 descriptor??
[  455.281407][   T29] audit: type=1400 audit(2000000159.413:1401): avc:  denied  { ioctl } for  pid=11934 comm="syz.3.1110" path="socket:[36900]" dev="sockfs" ino=36900 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  455.346900][T11937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1110'.
[  455.389905][   T29] audit: type=1400 audit(2000000159.516:1402): avc:  denied  { mount } for  pid=11934 comm="syz.3.1110" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  455.471153][   T29] audit: type=1400 audit(2000000159.563:1403): avc:  denied  { remount } for  pid=11934 comm="syz.3.1110" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  455.493095][   T29] audit: type=1400 audit(2000000159.600:1404): avc:  denied  { unmount } for  pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  455.780933][   T29] audit: type=1400 audit(2000000159.740:1405): avc:  denied  { write } for  pid=11943 comm="syz.3.1112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  455.884038][   T29] audit: type=1400 audit(2000000159.965:1406): avc:  denied  { bind } for  pid=11951 comm="syz.6.1113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  455.904671][T11955] [U] O�(I|��	b�ձ2Tso������3��
[  455.904690][T11955] [U] �zڿ?-z��S?S�5������Ы�.��~6`�B?š�5�K�<,��tgm,/����ޱi��C
[  455.969885][   T29] audit: type=1400 audit(2000000160.058:1407): avc:  denied  { execute_no_trans } for  pid=11958 comm="syz.8.1116" path="/180/file1" dev="tmpfs" ino=1032 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  456.221882][T11960] netdevsim netdevsim5: Direct firmware load for printk failed with error -2
[  456.336098][T11960] netdevsim netdevsim5: Falling back to sysfs fallback for: printk
[  456.650247][   T29] audit: type=1400 audit(2000000160.704:1408): avc:  denied  { mounton } for  pid=11954 comm="syz.5.1114" path="/201/file0" dev="tmpfs" ino=1103 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  456.674336][    C0] vkms_vblank_simulate: vblank timer overrun
[  456.691434][T11971] syz.5.1114: attempt to access beyond end of device
[  456.691434][T11971] nbd5: rw=0, sector=64, nr_sectors = 2 limit=0
[  456.708951][T11971] syz.5.1114: attempt to access beyond end of device
[  456.708951][T11971] nbd5: rw=0, sector=512, nr_sectors = 2 limit=0
[  456.725440][T11971] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[  456.737603][T11971] syz.5.1114: attempt to access beyond end of device
[  456.737603][T11971] nbd5: rw=0, sector=1024, nr_sectors = 2 limit=0
[  456.739904][T11365] gspca_main: sn9c2028-2.14.0 probing 0458:7005
[  456.757832][T11971] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[  456.769212][T11971] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found
[  456.778567][T11971] UDF-fs: Scanning with blocksize 1024 failed
[  456.790043][T11971] syz.5.1114: attempt to access beyond end of device
[  456.790043][T11971] nbd5: rw=0, sector=64, nr_sectors = 4 limit=0
[  456.806447][T11971] syz.5.1114: attempt to access beyond end of device
[  456.806447][T11971] nbd5: rw=0, sector=1024, nr_sectors = 4 limit=0
[  456.821142][T11971] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[  456.842180][T11971] syz.5.1114: attempt to access beyond end of device
[  456.842180][T11971] nbd5: rw=0, sector=2048, nr_sectors = 4 limit=0
[  456.876301][T11971] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[  456.882070][T11365] gspca_sn9c2028: read1 error -71
[  456.900973][T11971] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found
[  456.938761][T11365] gspca_sn9c2028: read1 error -71
[  456.952881][T11971] UDF-fs: Scanning with blocksize 2048 failed
[  457.003447][T11971] syz.5.1114: attempt to access beyond end of device
[  457.003447][T11971] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0
[  457.017316][T11971] syz.5.1114: attempt to access beyond end of device
[  457.017316][T11971] nbd5: rw=0, sector=2048, nr_sectors = 8 limit=0
[  457.039134][T11971] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[  457.051601][T11365] gspca_sn9c2028: read1 error -71
[  457.056858][T11365] sn9c2028 10-1:0.63: probe with driver sn9c2028 failed with error -71
[  457.095670][T11971] syz.5.1114: attempt to access beyond end of device
[  457.095670][T11971] nbd5: rw=0, sector=4096, nr_sectors = 8 limit=0
[  457.110477][T11971] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[  457.128145][T11971] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found
[  457.136885][T11971] UDF-fs: Scanning with blocksize 4096 failed
[  457.146971][T11365] usb 10-1: USB disconnect, device number 24
[  457.147209][T11971] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1)
[  458.493728][T11365] usb 10-1: new high-speed USB device number 25 using dummy_hcd
[  458.665851][T11954] [U] ��uc<h�].'���3^6���%�Zld���q�_�X,R��:?�/0��y�~0s��7)���ή&�^ǵ�WD
[  458.808968][T11365] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  458.821185][T11365] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  458.918233][T11365] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  458.949233][T11365] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  458.993312][T11365] usb 10-1: config 0 descriptor??
[  459.014310][   T29] audit: type=1400 audit(2000000162.911:1409): avc:  denied  { bind } for  pid=12006 comm="syz.5.1127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  459.039024][ T5889] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[  459.073879][T12016] random: crng reseeded on system resumption
[  459.222913][ T5889] usb 4-1: Using ep0 maxpacket: 32
[  459.234877][ T5889] usb 4-1: config 8 has an invalid interface number: 244 but max is 2
[  459.255407][ T5889] usb 4-1: config 8 has an invalid interface number: 199 but max is 2
[  459.272694][ T5889] usb 4-1: config 8 contains an unexpected descriptor of type 0x1, skipping
[  459.282888][ T5889] usb 4-1: config 8 has an invalid interface number: 41 but max is 2
[  459.291883][ T5889] usb 4-1: config 8 has no interface number 0
[  459.298846][ T5889] usb 4-1: config 8 has no interface number 1
[  459.305012][ T5889] usb 4-1: config 8 has no interface number 2
[  459.312889][ T5889] usb 4-1: config 8 interface 199 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32
[  459.323746][ T5889] usb 4-1: config 8 interface 199 altsetting 1 endpoint 0x5 has invalid maxpacket 1023, setting to 64
[  459.338587][ T5889] usb 4-1: config 8 interface 199 altsetting 1 has a duplicate endpoint with address 0x7, skipping
[  459.350801][ T5889] usb 4-1: config 8 interface 199 altsetting 1 has a duplicate endpoint with address 0x4, skipping
[  459.362224][ T5889] usb 4-1: config 8 interface 199 altsetting 1 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  459.374478][ T5889] usb 4-1: config 8 interface 41 altsetting 1 has a duplicate endpoint with address 0x2, skipping
[  459.385961][ T5889] usb 4-1: config 8 interface 41 altsetting 1 has a duplicate endpoint with address 0x4, skipping
[  459.397231][ T5889] usb 4-1: config 8 interface 41 altsetting 1 has a duplicate endpoint with address 0xF, skipping
[  459.408526][ T5889] usb 4-1: config 8 interface 41 altsetting 1 has a duplicate endpoint with address 0x7, skipping
[  459.420011][ T5889] usb 4-1: config 8 interface 41 altsetting 1 has an endpoint descriptor with address 0x17, changing to 0x7
[  459.432241][ T5889] usb 4-1: config 8 interface 41 altsetting 1 has a duplicate endpoint with address 0x7, skipping
[  459.445747][ T5889] usb 4-1: config 8 interface 41 altsetting 1 has a duplicate endpoint with address 0x8, skipping
[  459.459006][ T5889] usb 4-1: config 8 interface 41 altsetting 1 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  459.459373][T11365] hid (null): bogus close delimiter
[  459.470126][ T5889] usb 4-1: config 8 interface 41 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  459.489089][ T5889] usb 4-1: config 8 interface 41 altsetting 1 has 10 endpoint descriptors, different from the interface descriptor's value: 9
[  459.504375][ T5889] usb 4-1: config 8 interface 244 has no altsetting 0
[  459.513039][ T5889] usb 4-1: config 8 interface 199 has no altsetting 0
[  459.521174][ T5889] usb 4-1: config 8 interface 41 has no altsetting 0
[  459.531087][ T5889] usb 4-1: New USB device found, idVendor=2001, idProduct=331d, bcdDevice=29.3e
[  459.540434][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  459.549501][ T5889] usb 4-1: Manufacturer: Ђ
[  459.554863][ T5889] usb 4-1: SerialNumber: syz
[  459.733957][T11365] usb 10-1: string descriptor 0 read error: -71
[  459.741583][T11365] uclogic 0003:256C:006D.0019: failed retrieving string descriptor #200: -71
[  459.752282][T11365] uclogic 0003:256C:006D.0019: failed retrieving pen parameters: -71
[  459.765054][T11365] uclogic 0003:256C:006D.0019: failed probing pen v2 parameters: -71
[  459.773755][T11365] uclogic 0003:256C:006D.0019: failed probing parameters: -71
[  459.782203][T11365] uclogic 0003:256C:006D.0019: probe with driver uclogic failed with error -71
[  459.816670][T11365] usb 10-1: USB disconnect, device number 25
[  460.606647][ T5889] usb 4-1: USB disconnect, device number 63
[  460.735114][   T29] kauditd_printk_skb: 7 callbacks suppressed
[  460.735282][   T29] audit: type=1400 audit(2000000164.511:1417): avc:  denied  { block_suspend } for  pid=12025 comm="syz.5.1130" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  461.209565][   T29] audit: type=1400 audit(2000000164.969:1418): avc:  denied  { ioctl } for  pid=12032 comm="syz.8.1132" path="socket:[37136]" dev="sockfs" ino=37136 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  461.271711][   T29] audit: type=1400 audit(2000000165.007:1419): avc:  denied  { read } for  pid=12032 comm="syz.8.1132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  461.278009][T12040] @: renamed from vlan0 (while UP)
[  461.528181][   T29] audit: type=1400 audit(2000000165.016:1420): avc:  denied  { module_load } for  pid=12036 comm="syz.9.1135" path="/sys/kernel/notes" dev="sysfs" ino=1382 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1
[  461.742227][T12038] lo speed is unknown, defaulting to 1000
[  462.235480][ T5862] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[  462.276300][   T29] audit: type=1400 audit(2000000165.961:1421): avc:  denied  { lock } for  pid=12060 comm="syz.3.1139" path="socket:[37229]" dev="sockfs" ino=37229 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  462.436391][   T29] audit: type=1400 audit(2000000166.008:1422): avc:  denied  { map } for  pid=12053 comm="syz.8.1137" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  462.487853][ T5862] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  462.499807][ T5862] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  462.514747][ T5862] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  462.568794][ T5862] usb 6-1: config 0 descriptor??
[  463.379068][   T29] audit: type=1400 audit(2000000166.971:1423): avc:  denied  { bind } for  pid=12057 comm="syz.9.1140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  463.433654][   T29] audit: type=1400 audit(2000000166.971:1424): avc:  denied  { listen } for  pid=12057 comm="syz.9.1140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  463.455582][ T5862] usbhid 6-1:0.0: can't add hid device: -71
[  463.463926][ T5862] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  463.476375][ T5862] usb 6-1: USB disconnect, device number 47
[  463.493563][ T5859] usb 9-1: new high-speed USB device number 40 using dummy_hcd
[  463.511583][   T29] audit: type=1400 audit(2000000167.018:1425): avc:  denied  { write } for  pid=12057 comm="syz.9.1140" path="socket:[36591]" dev="sockfs" ino=36591 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  463.651544][   T29] audit: type=1400 audit(2000000167.018:1426): avc:  denied  { accept } for  pid=12057 comm="syz.9.1140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  463.672052][ T5859] usb 9-1: Using ep0 maxpacket: 8
[  464.339095][ T5859] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[  464.339141][ T5859] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  464.339166][ T5859] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  464.339192][ T5859] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  464.339216][ T5859] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  464.339253][ T5859] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  464.339276][ T5859] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  464.566237][ T5862] usb 6-1: new high-speed USB device number 48 using dummy_hcd
[  464.625694][ T5859] usb 9-1: usb_control_msg returned -32
[  464.625731][ T5859] usbtmc 9-1:16.0: can't read capabilities
[  464.766099][ T5862] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  464.794148][ T5862] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  464.803872][ T5862] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  464.818679][ T5862] usb 6-1: config 0 descriptor??
[  464.876961][T12081] raw_sendmsg: syz.9.1144 forgot to set AF_INET. Fix it!
[  464.891185][ T5862] usb 6-1: can't set config #0, error -71
[  464.899552][ T5862] usb 6-1: USB disconnect, device number 48
[  465.549796][ T5862] usb 6-1: new high-speed USB device number 49 using dummy_hcd
[  465.583166][T12098] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  465.723634][ T5862] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  465.736565][ T5862] usb 6-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=6a.2c
[  465.748737][ T5862] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  465.758614][    T8] usb 9-1: USB disconnect, device number 40
[  465.881190][ T5862] usb 6-1: Product: syz
[  465.885419][ T5862] usb 6-1: Manufacturer: syz
[  465.890040][ T5862] usb 6-1: SerialNumber: syz
[  465.945802][ T5862] usb 6-1: config 0 descriptor??
[  466.105201][T11365] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[  466.278602][ T5861] usb 6-1: USB disconnect, device number 49
[  466.299585][T11365] usb 4-1: Using ep0 maxpacket: 16
[  466.646089][   T29] kauditd_printk_skb: 30 callbacks suppressed
[  466.646104][   T29] audit: type=1400 audit(2000000170.048:1457): avc:  denied  { append } for  pid=12105 comm="syz.9.1152" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  466.648470][T11365] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[  466.688241][T11365] usb 4-1: config 0 has no interface number 0
[  466.695810][T11365] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 248, changing to 11
[  466.710491][T11365] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  466.719814][T11365] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  466.743871][T11365] usb 4-1: Product: syz
[  466.754655][T11365] usb 4-1: SerialNumber: syz
[  467.162998][    T8] usb 9-1: new high-speed USB device number 41 using dummy_hcd
[  467.207095][T11365] usb 4-1: config 0 descriptor??
[  467.252448][T11365] cm109 4-1:0.8: invalid payload size 635, expected 4
[  467.263693][T11365] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input36
[  467.355935][   T29] audit: type=1326 audit(2000000170.703:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12119 comm="syz.5.1154" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9dc5385d29 code=0x0
[  467.399174][    T8] usb 9-1: Using ep0 maxpacket: 16
[  467.405589][    T8] usb 9-1: too many configurations: 201, using maximum allowed: 8
[  467.422475][    T8] usb 9-1: config index 0 descriptor too short (expected 259, got 189)
[  467.431321][    T8] usb 9-1: invalid descriptor for config index 0: type = 0x2, length = 0
[  467.512316][    T8] usb 9-1: can't read configurations, error -22
[  467.688515][    T8] usb 9-1: new high-speed USB device number 42 using dummy_hcd
[  467.863184][    T8] usb 9-1: Using ep0 maxpacket: 16
[  467.877130][    T8] usb 9-1: too many configurations: 201, using maximum allowed: 8
[  467.888456][    T8] usb 9-1: config index 0 descriptor too short (expected 259, got 189)
[  467.901112][    T8] usb 9-1: invalid descriptor for config index 0: type = 0x2, length = 0
[  467.909695][    T8] usb 9-1: can't read configurations, error -22
[  467.911792][T11365] usb 7-1: new high-speed USB device number 52 using dummy_hcd
[  467.932633][    T8] usb usb9-port1: attempt power cycle
[  468.093452][T11365] usb 7-1: Using ep0 maxpacket: 32
[  468.101006][T11365] usb 7-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 129, changing to 11
[  468.112382][T11365] usb 7-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  468.125726][T11365] usb 7-1: config 1 interface 0 has no altsetting 0
[  468.135266][T11365] usb 7-1: New USB device found, idVendor=0dfc, idProduct=0102, bcdDevice= 0.40
[  468.135297][T11365] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  468.135317][T11365] usb 7-1: Product: 洺믟딖衻랁ڬ讀ժ떌嗺଑玕黃勿ᯤ햑ー蠵ꍯ➸ۻ욹ᖵ뷝䆚
[  468.135340][T11365] usb 7-1: Manufacturer: 円縲⼑港ꁫ嚔ࢋ鰺蟡ᙌၟ鹴蘌碶䕡血ӕ蝤൞ᩦ뚣싸헖ᣛ੭镡ꪢ旕䨦릟ӊꏥ혥샎⒩⡔鰪걲ꁖ㴽ꂎ棆攃䳒䦃缆鋇这릊辳摗鵥舁ไ䮈ﬡ횟鱱풜愉쾲聓ℬ㣺雖捃绩爫⊧逯谀넰쨊撋デ嗝忲ﴒ栭奭稬嬰ᄂ䐸谂Ꝥ늺
[  468.135372][T11365] usb 7-1: SerialNumber: 딮侞㿓焊૤䝎稸ڔ√୔粝ꟃ䁽蠝຿족䓗柭⺂᪮침ᶣ뭦뺀凡᭍䜍끊쬖䋧鷜㫗㈚࿼嬋斎ᒠ퐵㉏᙮ⷻ䩣妷拉硱䜷觗ᲇ뺵꺊绉팆韉条럳屠ꠍᩣ⇣ѷ㭣વ舻೻霭顀쥘옫죣엀ᮀᄼ먊⢤瀀ᅀ㳂导켄ᝰ厺里휢汑븰硰ᦏ䡄䡘䧽ꃼ궠늱쩏頳熔安ﾦ磱黉喈冏섔ಶ冑艌兀ᬩ쭍藺㦄
[  468.249840][   T29] audit: type=1400 audit(2000000171.545:1459): avc:  denied  { name_bind } for  pid=12130 comm="syz.5.1158" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  468.307848][    T8] usb 9-1: new high-speed USB device number 43 using dummy_hcd
[  468.329357][    T8] usb 9-1: Using ep0 maxpacket: 16
[  468.329906][    T8] usb 9-1: too many configurations: 201, using maximum allowed: 8
[  468.330715][    T8] usb 9-1: config index 0 descriptor too short (expected 259, got 189)
[  468.330737][    T8] usb 9-1: invalid descriptor for config index 0: type = 0x2, length = 0
[  468.330762][    T8] usb 9-1: can't read configurations, error -22
[  468.358566][   T29] audit: type=1400 audit(2000000171.648:1460): avc:  denied  { nlmsg_write } for  pid=12126 comm="syz.6.1157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  468.457465][   T29] audit: type=1400 audit(2000000171.667:1461): avc:  denied  { ioctl } for  pid=12138 comm="syz.5.1159" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  468.489365][    T8] usb 9-1: new high-speed USB device number 44 using dummy_hcd
[  468.516722][    T8] usb 9-1: Using ep0 maxpacket: 16
[  468.518001][    T8] usb 9-1: too many configurations: 201, using maximum allowed: 8
[  468.525341][    T8] usb 9-1: config index 0 descriptor too short (expected 259, got 189)
[  468.525373][    T8] usb 9-1: invalid descriptor for config index 0: type = 0x2, length = 0
[  468.525399][    T8] usb 9-1: can't read configurations, error -22
[  468.525603][    T8] usb usb9-port1: unable to enumerate USB device
[  468.639550][T11365] usbhid 7-1:1.0: can't add hid device: -71
[  468.782452][ T5862] usb 6-1: new high-speed USB device number 50 using dummy_hcd
[  468.784017][   T29] audit: type=1400 audit(2000000171.863:1462): avc:  denied  { watch } for  pid=12142 comm="syz.9.1161" path="/90" dev="tmpfs" ino=470 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  468.784081][   T29] audit: type=1400 audit(2000000171.863:1463): avc:  denied  { watch_sb } for  pid=12142 comm="syz.9.1161" path="/90" dev="tmpfs" ino=470 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  468.898119][T11365] usbhid 7-1:1.0: probe with driver usbhid failed with error -71
[  468.901167][T11365] usb 7-1: USB disconnect, device number 52
[  469.001608][ T5862] usb 6-1: config index 0 descriptor too short (expected 5394, got 18)
[  469.001644][ T5862] usb 6-1: config 0 has an invalid interface number: 0 but max is -1
[  469.001664][ T5862] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0
[  469.027228][ T5862] usb 6-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  469.027260][ T5862] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  469.027273][ T5862] usb 6-1: Product: syz
[  469.027283][ T5862] usb 6-1: Manufacturer: syz
[  469.027293][ T5862] usb 6-1: SerialNumber: syz
[  469.028840][ T5862] usb 6-1: config 0 descriptor??
[  469.047299][T12148] pim6reg: entered allmulticast mode
[  469.049135][T12148] pim6reg: left allmulticast mode
[  469.180868][    C1] cm109 4-1:0.8: cm109_urb_irq_callback: urb status -71
[  469.187879][    C1] ------------[ cut here ]------------
[  469.194082][    C1] URB ffff88804ed21c00 submitted while active
[  469.200740][    C1] WARNING: CPU: 1 PID: 12099 at drivers/usb/core/urb.c:379 usb_submit_urb+0x14da/0x1730
[  469.210561][    C1] Modules linked in:
[  469.214481][    C1] CPU: 1 UID: 0 PID: 12099 Comm: syz.3.1149 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0
[  469.225276][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  469.229788][T12153] input: syz1 as /devices/virtual/input/input37
[  469.235341][    C1] RIP: 0010:usb_submit_urb+0x14da/0x1730
[  469.247304][    C1] Code: fd eb cb bb fe ff ff ff e9 c1 f3 ff ff e8 fe ef ae fa c6 05 b8 c2 5c 09 01 90 48 c7 c7 a0 1f 2e 8c 48 89 de e8 77 29 6f fa 90 <0f> 0b 90 90 e9 b6 fe ff ff bb f8 ff ff ff e9 91 f3 ff ff 48 89 ef
[  469.266946][    C1] RSP: 0018:ffffc90000a18a88 EFLAGS: 00010086
[  469.273015][    C1] RAX: 0000000000000000 RBX: ffff88804ed21c00 RCX: ffffc90002352000
[  469.280985][    C1] RDX: 0000000000040000 RSI: ffffffff815a50e6 RDI: 0000000000000001
[  469.288951][    C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
[  469.296939][    C1] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000083
[  469.304910][    C1] R13: ffff88802815c058 R14: 000000000000000f R15: 0000000000000000
[  469.312884][    C1] FS:  000055557ec94500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  469.321812][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  469.328391][    C1] CR2: 0000555574c56808 CR3: 000000005d398000 CR4: 00000000003526f0
[  469.336360][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  469.344333][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  469.352309][    C1] Call Trace:
[  469.355578][    C1]  <IRQ>
[  469.358420][    C1]  ? __warn+0xea/0x3c0
[  469.362485][    C1]  ? usb_submit_urb+0x14da/0x1730
[  469.367516][    C1]  ? report_bug+0x3c0/0x580
[  469.372032][    C1]  ? handle_bug+0x54/0xa0
[  469.376367][    C1]  ? exc_invalid_op+0x17/0x50
[  469.381046][    C1]  ? asm_exc_invalid_op+0x1a/0x20
[  469.386076][    C1]  ? __warn_printk+0x1a6/0x350
[  469.390849][    C1]  ? usb_submit_urb+0x14da/0x1730
[  469.395871][    C1]  ? usb_submit_urb+0x14d9/0x1730
[  469.400898][    C1]  ? lock_acquire+0x2f/0xb0
[  469.405398][    C1]  ? cm109_urb_irq_callback+0xed/0xb60
[  469.410887][    C1]  cm109_urb_irq_callback+0x2e7/0xb60
[  469.416278][    C1]  __usb_hcd_giveback_urb+0x389/0x6e0
[  469.421657][    C1]  usb_hcd_giveback_urb+0x396/0x450
[  469.426860][    C1]  dummy_timer+0x17f7/0x3960
[  469.431457][    C1]  ? mark_lock+0xb5/0xc60
[  469.435782][    C1]  ? __pfx_lock_release+0x10/0x10
[  469.440805][    C1]  ? lock_acquire+0x2f/0xb0
[  469.445299][    C1]  ? debug_object_deactivate+0x13b/0x370
[  469.450930][    C1]  ? find_held_lock+0x2d/0x110
[  469.455704][    C1]  ? __hrtimer_run_queues+0x53d/0xae0
[  469.461076][    C1]  ? __pfx_lock_release+0x10/0x10
[  469.466100][    C1]  ? __pfx_dummy_timer+0x10/0x10
[  469.471034][    C1]  ? mark_held_locks+0x9f/0xe0
[  469.475795][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  469.481601][    C1]  ? __pfx_dummy_timer+0x10/0x10
[  469.486532][    C1]  __hrtimer_run_queues+0x20a/0xae0
[  469.491736][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  469.497455][    C1]  ? read_tsc+0x9/0x20
[  469.501531][    C1]  hrtimer_run_softirq+0x17d/0x350
[  469.506647][    C1]  handle_softirqs+0x213/0x8f0
[  469.511418][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  469.516713][    C1]  __irq_exit_rcu+0x109/0x170
[  469.521389][    C1]  irq_exit_rcu+0x9/0x30
[  469.525630][    C1]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  469.531273][    C1]  </IRQ>
[  469.534198][    C1]  <TASK>
[  469.537123][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  469.543111][    C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80
[  469.549526][    C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 a6 72 4a f6 48 89 df e8 ee f1 4a f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 <bf> 01 00 00 00 e8 e5 d6 3b f6 65 8b 05 a6 92 d7 74 85 c0 74 16 5b
[  469.569140][    C1] RSP: 0018:ffffc90003cdfb30 EFLAGS: 00000246
[  469.575211][    C1] RAX: 0000000000000006 RBX: ffffffff8f4d2b20 RCX: 1ffffffff2dd7e52
[  469.583179][    C1] RDX: 0000000000000000 RSI: ffffffff8b6cd9e0 RDI: ffffffff8bd1ed60
[  469.591173][    C1] RBP: 0000000000000293 R08: 0000000000000001 R09: fffffbfff2dca3ba
[  469.599139][    C1] R10: ffffffff96e51dd7 R11: 0000000000000007 R12: 1ffff9200079bf6e
[  469.607102][    C1] R13: ffff88814534423c R14: ffff888028e8e000 R15: ffff888028e8e018
[  469.615085][    C1]  usb_hcd_poll_rh_status+0x572/0x7f0
[  469.620462][    C1]  ? __pfx_usb_hcd_poll_rh_status+0x10/0x10
[  469.626440][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  469.632247][    C1]  dummy_pullup+0x212/0x270
[  469.636752][    C1]  ? __pfx_dummy_pullup+0x10/0x10
[  469.641801][    C1]  usb_gadget_disconnect_locked+0x13f/0x4f0
[  469.647697][    C1]  gadget_unbind_driver+0xd7/0x4e0
[  469.652821][    C1]  ? kernfs_remove_by_name_ns+0xe8/0x130
[  469.658466][    C1]  ? __pfx_gadget_unbind_driver+0x10/0x10
[  469.664229][    C1]  device_remove+0xc8/0x170
[  469.668755][    C1]  device_release_driver_internal+0x44a/0x610
[  469.674838][    C1]  driver_detach+0xd8/0x1b0
[  469.679343][    C1]  ? __pfx_raw_release+0x10/0x10
[  469.684280][    C1]  bus_remove_driver+0x13b/0x2c0
[  469.689214][    C1]  driver_unregister+0x76/0xb0
[  469.693979][    C1]  usb_gadget_unregister_driver+0x49/0x70
[  469.699700][    C1]  raw_release+0x1ae/0x2b0
[  469.704115][    C1]  __fput+0x3f8/0xb60
[  469.708100][    C1]  task_work_run+0x14e/0x250
[  469.712688][    C1]  ? __pfx_task_work_run+0x10/0x10
[  469.717801][    C1]  ? __pfx___do_sys_close_range+0x10/0x10
[  469.723520][    C1]  syscall_exit_to_user_mode+0x27b/0x2a0
[  469.729161][    C1]  do_syscall_64+0xda/0x250
[  469.733667][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  469.739563][    C1] RIP: 0033:0x7fb3d6785d29
[  469.743972][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  469.763580][    C1] RSP: 002b:00007ffc8d41dbb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  469.771992][    C1] RAX: 0000000000000000 RBX: 00007fb3d6977ba0 RCX: 00007fb3d6785d29
[  469.779965][    C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  469.787952][    C1] RBP: 00007fb3d6977ba0 R08: 000000000000012c R09: 00007ffc8d41deaf
[  469.795930][    C1] R10: 00000000003ffcb0 R11: 0000000000000246 R12: 000000000007295d
[  469.803896][    C1] R13: 00007fb3d6976160 R14: 0000000000000032 R15: ffffffffffffffff
[  469.811874][    C1]  </TASK>
[  469.814891][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  469.822161][    C1] CPU: 1 UID: 0 PID: 12099 Comm: syz.3.1149 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0
[  469.833025][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  469.843074][    C1] Call Trace:
[  469.846346][    C1]  <IRQ>
[  469.849184][    C1]  dump_stack_lvl+0x3d/0x1f0
[  469.853777][    C1]  panic+0x71d/0x800
[  469.857677][    C1]  ? __pfx_panic+0x10/0x10
[  469.862096][    C1]  ? show_trace_log_lvl+0x29d/0x3d0
[  469.867302][    C1]  ? usb_submit_urb+0x14da/0x1730
[  469.872332][    C1]  check_panic_on_warn+0xab/0xb0
[  469.877259][    C1]  __warn+0xf6/0x3c0
[  469.881147][    C1]  ? usb_submit_urb+0x14da/0x1730
[  469.886170][    C1]  report_bug+0x3c0/0x580
[  469.890496][    C1]  handle_bug+0x54/0xa0
[  469.894656][    C1]  exc_invalid_op+0x17/0x50
[  469.899157][    C1]  asm_exc_invalid_op+0x1a/0x20
[  469.904003][    C1] RIP: 0010:usb_submit_urb+0x14da/0x1730
[  469.909638][    C1] Code: fd eb cb bb fe ff ff ff e9 c1 f3 ff ff e8 fe ef ae fa c6 05 b8 c2 5c 09 01 90 48 c7 c7 a0 1f 2e 8c 48 89 de e8 77 29 6f fa 90 <0f> 0b 90 90 e9 b6 fe ff ff bb f8 ff ff ff e9 91 f3 ff ff 48 89 ef
[  469.929258][    C1] RSP: 0018:ffffc90000a18a88 EFLAGS: 00010086
[  469.935320][    C1] RAX: 0000000000000000 RBX: ffff88804ed21c00 RCX: ffffc90002352000
[  469.943282][    C1] RDX: 0000000000040000 RSI: ffffffff815a50e6 RDI: 0000000000000001
[  469.951246][    C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
[  469.959223][    C1] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000083
[  469.967205][    C1] R13: ffff88802815c058 R14: 000000000000000f R15: 0000000000000000
[  469.975176][    C1]  ? __warn_printk+0x1a6/0x350
[  469.979945][    C1]  ? usb_submit_urb+0x14d9/0x1730
[  469.984989][    C1]  ? lock_acquire+0x2f/0xb0
[  469.989597][    C1]  ? cm109_urb_irq_callback+0xed/0xb60
[  469.995073][    C1]  cm109_urb_irq_callback+0x2e7/0xb60
[  470.000471][    C1]  __usb_hcd_giveback_urb+0x389/0x6e0
[  470.005857][    C1]  usb_hcd_giveback_urb+0x396/0x450
[  470.011057][    C1]  dummy_timer+0x17f7/0x3960
[  470.015650][    C1]  ? mark_lock+0xb5/0xc60
[  470.019973][    C1]  ? __pfx_lock_release+0x10/0x10
[  470.025002][    C1]  ? lock_acquire+0x2f/0xb0
[  470.029494][    C1]  ? debug_object_deactivate+0x13b/0x370
[  470.035121][    C1]  ? find_held_lock+0x2d/0x110
[  470.039884][    C1]  ? __hrtimer_run_queues+0x53d/0xae0
[  470.045254][    C1]  ? __pfx_lock_release+0x10/0x10
[  470.050276][    C1]  ? __pfx_dummy_timer+0x10/0x10
[  470.055210][    C1]  ? mark_held_locks+0x9f/0xe0
[  470.059966][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  470.065774][    C1]  ? __pfx_dummy_timer+0x10/0x10
[  470.070702][    C1]  __hrtimer_run_queues+0x20a/0xae0
[  470.075904][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  470.081625][    C1]  ? read_tsc+0x9/0x20
[  470.085702][    C1]  hrtimer_run_softirq+0x17d/0x350
[  470.090814][    C1]  handle_softirqs+0x213/0x8f0
[  470.095579][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  470.100865][    C1]  __irq_exit_rcu+0x109/0x170
[  470.105536][    C1]  irq_exit_rcu+0x9/0x30
[  470.109779][    C1]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  470.115411][    C1]  </IRQ>
[  470.118333][    C1]  <TASK>
[  470.121255][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  470.127252][    C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80
[  470.133668][    C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 a6 72 4a f6 48 89 df e8 ee f1 4a f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 <bf> 01 00 00 00 e8 e5 d6 3b f6 65 8b 05 a6 92 d7 74 85 c0 74 16 5b
[  470.153273][    C1] RSP: 0018:ffffc90003cdfb30 EFLAGS: 00000246
[  470.159339][    C1] RAX: 0000000000000006 RBX: ffffffff8f4d2b20 RCX: 1ffffffff2dd7e52
[  470.167757][    C1] RDX: 0000000000000000 RSI: ffffffff8b6cd9e0 RDI: ffffffff8bd1ed60
[  470.175723][    C1] RBP: 0000000000000293 R08: 0000000000000001 R09: fffffbfff2dca3ba
[  470.183689][    C1] R10: ffffffff96e51dd7 R11: 0000000000000007 R12: 1ffff9200079bf6e
[  470.191654][    C1] R13: ffff88814534423c R14: ffff888028e8e000 R15: ffff888028e8e018
[  470.199642][    C1]  usb_hcd_poll_rh_status+0x572/0x7f0
[  470.205033][    C1]  ? __pfx_usb_hcd_poll_rh_status+0x10/0x10
[  470.210924][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  470.216732][    C1]  dummy_pullup+0x212/0x270
[  470.221234][    C1]  ? __pfx_dummy_pullup+0x10/0x10
[  470.226261][    C1]  usb_gadget_disconnect_locked+0x13f/0x4f0
[  470.232150][    C1]  gadget_unbind_driver+0xd7/0x4e0
[  470.237260][    C1]  ? kernfs_remove_by_name_ns+0xe8/0x130
[  470.242890][    C1]  ? __pfx_gadget_unbind_driver+0x10/0x10
[  470.248606][    C1]  device_remove+0xc8/0x170
[  470.253115][    C1]  device_release_driver_internal+0x44a/0x610
[  470.259211][    C1]  driver_detach+0xd8/0x1b0
[  470.263710][    C1]  ? __pfx_raw_release+0x10/0x10
[  470.268646][    C1]  bus_remove_driver+0x13b/0x2c0
[  470.273585][    C1]  driver_unregister+0x76/0xb0
[  470.278367][    C1]  usb_gadget_unregister_driver+0x49/0x70
[  470.284083][    C1]  raw_release+0x1ae/0x2b0
[  470.288499][    C1]  __fput+0x3f8/0xb60
[  470.292496][    C1]  task_work_run+0x14e/0x250
[  470.297082][    C1]  ? __pfx_task_work_run+0x10/0x10
[  470.302212][    C1]  ? __pfx___do_sys_close_range+0x10/0x10
[  470.307934][    C1]  syscall_exit_to_user_mode+0x27b/0x2a0
[  470.313568][    C1]  do_syscall_64+0xda/0x250
[  470.318073][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  470.323968][    C1] RIP: 0033:0x7fb3d6785d29
[  470.328391][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  470.347998][    C1] RSP: 002b:00007ffc8d41dbb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  470.356422][    C1] RAX: 0000000000000000 RBX: 00007fb3d6977ba0 RCX: 00007fb3d6785d29
[  470.364403][    C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  470.372370][    C1] RBP: 00007fb3d6977ba0 R08: 000000000000012c R09: 00007ffc8d41deaf
[  470.380334][    C1] R10: 00000000003ffcb0 R11: 0000000000000246 R12: 000000000007295d
[  470.388301][    C1] R13: 00007fb3d6976160 R14: 0000000000000032 R15: ffffffffffffffff
[  470.396283][    C1]  </TASK>
[  470.399611][    C1] Kernel Offset: disabled
[  470.404061][    C1] Rebooting in 86400 seconds..