last executing test programs:

13m5.600271418s ago: executing program 0 (id=142):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, &(0x7f0000000080)="3097", 0x2, 0xffffffffffffffff)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x8d}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8004)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r5, 0x0, 0x0)
ioctl$sock_netdev_private(r0, 0x8924, &(0x7f0000000000))

13m4.13995684s ago: executing program 0 (id=155):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
r2 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x0, 0x803, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x40)
r6 = socket$inet(0x2, 0x2000000080002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x238, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}, 0x2b0)
r7 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r7, 0x0, 0x0)
timerfd_gettime(0xffffffffffffffff, &(0x7f0000000540))
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x2, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000002000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$read(0xb, r9, &(0x7f0000000400)=""/217, 0xd9)
sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000000101010300000000000000000a000000468d022ec0c778f6cbf3e8333978932dc231ef109c09b1b359c72232ee6588cf0c6e57c97511471dbbde3b873e90cd289037ea5f51e04d26ec7adf158c0038b0a81c7cc8a7833576fd545c5dcfd86b9b85451cfe6eb41ada16a2439c278ba0d1d52c7f931d664597d438cb6e82710ce55c81724012aebd6c5a2d76f127b2a14fa9bcd7a674e1f4dcd29e56e08deb6daabb9a14135680393a50b4b7bde5541ebf8b358bbe59a53d34a5e145afb100"], 0x14}, 0x1, 0x0, 0x0, 0xc5}, 0x4080)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x19, 0xa, 0x201}, 0x14}}, 0x0)

13m3.16873188s ago: executing program 0 (id=156):
r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c00100000000d0085a168d0bf46d32345653600648d0a00160002000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100))
r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, 0x0)
r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
write$snddsp(r3, &(0x7f0000000200), 0x0)
syz_emit_ethernet(0x37, &(0x7f0000000000)={@remote, @remote, @void, {@arp={0x806, @generic={0x204, 0x883e, 0x6, 0xc, 0x8, @empty, "2cd9a8422f9d6ee39f858fa1", @multicast, "56962dcf2265ac728d"}}}}, &(0x7f0000000040)={0x0, 0x4, [0x83, 0xb54, 0x49d, 0x32a]})
ioctl$SNDRV_PCM_IOCTL_DRAIN(r3, 0x4144, 0x0)
ppoll(&(0x7f0000000400)=[{r2, 0x8000}], 0x1, 0x0, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_REWIND(r3, 0x40084149, &(0x7f0000000280)=0x6)

13m2.177655882s ago: executing program 0 (id=158):
io_setup(0x200040d, &(0x7f0000000600)=<r0=>0x0)
r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x0, &(0x7f0000001000)=ANY=[])
socket$inet(0x2b, 0x801, 0x0)
userfaultfd(0x1)
r3 = syz_init_net_socket$llc(0x1a, 0x802, 0x0)
bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10)
io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x24}])
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42)

12m59.771185766s ago: executing program 0 (id=160):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002fc0)=""/102392, 0x18ff8)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40800, 0x0)
ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00'})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000480)={0x2, 0x4, {0x7, @struct={0x4, 0xa0}, 0x0, 0x6, 0xb, 0xffffffffffffffff, 0x7, 0x9, 0x400, @struct={0x5, 0xc}, 0xe7, 0xfffffff7, [0x4f, 0x800, 0x2, 0xa74, 0xc, 0xe5]}, {0x1a52, @struct={0x80, 0x9}, <r6=>0x0, 0x9, 0x101, 0x3, 0x5, 0x2, 0xf0, @usage=0xf631, 0x2c, 0x7, [0x3ff, 0x2, 0x3ff, 0x4, 0x4, 0xffffffff]}, {0x2, @struct={0x4, 0x31d8781a}, 0x0, 0x4, 0xffffffffffffffff, 0x5, 0xf281, 0x8000, 0x7, @usage=0x100, 0x4, 0x8, [0xa, 0x7ff, 0x4, 0x9, 0x2, 0x9]}, {0x0, 0xb31, 0x8}})
ioctl$USBDEVFS_GET_SPEED(r2, 0x551f)
ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000880)={r6, 0x200, 0x8, 0x1})
syz_usb_connect(0x5, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000bb29c520d219040131bf010203010902120001800000000904df0000ffffff00"], 0x0)

12m54.846106461s ago: executing program 0 (id=174):
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xd, &(0x7f0000000140)={0x8, 0x6a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x6, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x2094000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)=ANY=[@ANYRES32=0x1, @ANYRES32, @ANYBLOB="476800f1d649838489bf5f3e976d138b000800000000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20)
r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0)
sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="000829bd7000fedbdf2509000000080002000100000028000680060005004e20000014000400fe8000000000000000000000000000aa060005004e2000000c000180080006000a0000002c000680060005004e2200000500020081000000060005004e230000060005004e20000006000100020000004800068014000400ff010000000000000000000000000001080003007f00000108000300640101000800060001000000080006000800000008000700", @ANYRES32=0x0, @ANYBLOB='\b\x00\a\x00', @ANYRES16=r0, @ANYBLOB="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"], 0xd4}, 0x1, 0x0, 0x0, 0x8000}, 0x90)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000500)="41ed4b34f4b52a5c2faf7c3e61f57fac601841975c9edfb59c1ec68d804a2463dd017e9f48557228a2aba1d875d602247a46cf4a2106a51bbba41bab63d6d8a3f42f3f4ee8a4b90217a8a909e9f7136c7be35ce1968e8d1249313ae2be684060519cf12003868f927f28a52b07aef83e3bc12398987ab52a8731783dca9c3a5007979a6b71f3150e6fefc05085adb9a20434506897e8eb1b455bbf433f0cc0f56f5b0cfb26175bc804b8f9f0b16849983e9222d3b27e3907ff618bbb07650d151b7b95515b64a1d5be29a9ff1cbff8b3a2286e0afa0d3f5e205d00"/233, 0xe9)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8})
syz_open_dev$tty1(0xc, 0x4, 0x1)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)

12m39.566373998s ago: executing program 32 (id=174):
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xd, &(0x7f0000000140)={0x8, 0x6a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x6, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x2094000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)=ANY=[@ANYRES32=0x1, @ANYRES32, @ANYBLOB="476800f1d649838489bf5f3e976d138b000800000000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20)
r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0)
sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="000829bd7000fedbdf2509000000080002000100000028000680060005004e20000014000400fe8000000000000000000000000000aa060005004e2000000c000180080006000a0000002c000680060005004e2200000500020081000000060005004e230000060005004e20000006000100020000004800068014000400ff010000000000000000000000000001080003007f00000108000300640101000800060001000000080006000800000008000700", @ANYRES32=0x0, @ANYBLOB='\b\x00\a\x00', @ANYRES16=r0, @ANYBLOB="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"], 0xd4}, 0x1, 0x0, 0x0, 0x8000}, 0x90)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000500)="41ed4b34f4b52a5c2faf7c3e61f57fac601841975c9edfb59c1ec68d804a2463dd017e9f48557228a2aba1d875d602247a46cf4a2106a51bbba41bab63d6d8a3f42f3f4ee8a4b90217a8a909e9f7136c7be35ce1968e8d1249313ae2be684060519cf12003868f927f28a52b07aef83e3bc12398987ab52a8731783dca9c3a5007979a6b71f3150e6fefc05085adb9a20434506897e8eb1b455bbf433f0cc0f56f5b0cfb26175bc804b8f9f0b16849983e9222d3b27e3907ff618bbb07650d151b7b95515b64a1d5be29a9ff1cbff8b3a2286e0afa0d3f5e205d00"/233, 0xe9)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8})
syz_open_dev$tty1(0xc, 0x4, 0x1)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)

9m46.747345475s ago: executing program 2 (id=737):
rt_sigaction(0x13, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000bc0))
socket(0x28, 0x80000, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111}}, 0x20)
socket$netlink(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x8, 0xba, &(0x7f0000000580)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x33, @void, @value}, 0x94)
r1 = socket(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f00000022c0)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f0000000a0000000d0085a168d0bf46d32345653600648d040005000209000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000402160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0)
r2 = socket$inet6(0x10, 0x3, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r4=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001100a7cc5a8100ae541d002007000000", @ANYRES32=r4], 0x44}, 0x1, 0x10000000}, 0x0)
sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
r8 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
setsockopt$llc_int(r8, 0x10c, 0x9, &(0x7f00000001c0)=0x400001, 0x4)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x80000000001})
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)

9m45.729549617s ago: executing program 2 (id=741):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r2 = creat(0x0, 0x27)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x12)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0)
ioctl$VIDIOC_DQEVENT(r5, 0x80885659, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffc71)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r6 = socket$tipc(0x1e, 0x2, 0x0)
r7 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10)
sendmsg$tipc(r7, &(0x7f0000000200)={0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x48010}, 0x8050)
setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$inet_udp(0x2, 0x2, 0x0)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000000)=0x5)
ioctl$TCFLSH(r8, 0x8910, 0x20001114)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x20, &(0x7f0000000280)=0x1fef, 0x4)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10)
ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'veth1_virt_wifi\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000006110c3000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

9m43.052026932s ago: executing program 2 (id=751):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x86)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000080)='./file1\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='net_prio.prioidx\x00', 0x275a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x2)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r5=>r4, {0x9, 0x498}}, './file0\x00'})
sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000001580)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001540)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0)
r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[<r7=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, r7, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [<r9=>0x0]})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000100)={r9, 0x0, <r10=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000800)={0x0, 0x0, r10})
close_range(r3, 0xffffffffffffffff, 0x0)
capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x10000003, 0xffffffff})
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r11, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r12 = socket$netlink(0x10, 0x3, 0x4)
writev(r12, &(0x7f0000001200)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}, {&(0x7f00000000c0)="07913974f6fe7256dfaa1e1f2f53ec86e56b30660a032c3b0b622e80a2d4460b3d2d82fb1d12a8c21221b284e108429c9e292bc856257cdd61b2af5d0f9ab4857014a891ce169a4fc4d85544a4613209d0d28482b64a3d39825c166e835fc03f307fbaacb92fcd1a56661fe9827c9350ee34a4771c0d95037421cba38fa18ff55135e09a09dd9b8ebacb74b322a3dafc9a16ba94c9", 0x95}], 0x2)

9m42.00142642s ago: executing program 2 (id=756):
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000004000)=@gettfilter={0x3c, 0x2e, 0x8, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xf}, {0xfff1, 0x6}, {0xfff4, 0xffe0}}, [{0x8, 0xb, 0xe}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x4}]}, 0x3c}}, 0x0)
r1 = socket(0xa, 0x1, 0x0)
close(r1)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00')
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100))
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8801)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f00000003c0)='./file0/../file0/../file0/../file0\x00')
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000002f00)={0x0, 0x10, &(0x7f0000002ec0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000002f40)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r7=>0x0]}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r6, 0x84, 0x70, &(0x7f0000001780)={<r8=>r7, @in6={{0xa, 0x4e23, 0x20008001, @empty, 0x7}}, [0x5, 0x7, 0xffffffffffffff00, 0x8001, 0x1, 0x1, 0x2, 0x7, 0x6, 0x2000000000000, 0xfffffffffffffff1, 0x163, 0x5, 0xffffffffffffff8d, 0xd]}, &(0x7f0000001880)=0x100)
getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x82, &(0x7f0000002c80)={r8, 0x3, 0x3, 0x6}, &(0x7f0000002cc0)=0x10)
r9 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000380)={'gre0\x00', <r10=>0x0, 0x40, 0x8, 0x2, 0x1, {{0x14, 0x4, 0x0, 0xa, 0x50, 0x65, 0x0, 0x3, 0x2f, 0x0, @loopback, @multicast1, {[@ssrr={0x89, 0x7, 0x52, [@remote]}, @timestamp_addr={0x44, 0x14, 0x4f, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@remote, 0xd8}]}, @end, @rr={0x7, 0x1f, 0x7c, [@dev={0xac, 0x14, 0x14, 0x27}, @dev={0xac, 0x14, 0x14, 0x1e}, @multicast2, @dev={0xac, 0x14, 0x14, 0x14}, @empty, @multicast2, @multicast2]}]}}}}})
r11 = dup3(r0, r9, 0x80000)
r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)=@generic={&(0x7f0000000400)='./file0\x00', 0x0, 0x20}, 0x18)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="186700000500008000000008000000000000000086000000cd153000f0ffffff"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x38, &(0x7f00000001c0)=""/56, 0x41100, 0x20, '\x00', r10, 0x25, r11, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x1, 0xf}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r12], 0x0, 0x10, 0x0, @void, @value}, 0x94)
r13 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r13, 0x40383d0c, &(0x7f0000000200)={{}, {0x5}, 0x0, 0x7})
sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0)

9m40.991327232s ago: executing program 2 (id=760):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140))
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1})
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000cc0)={0x1})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r3)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @remote}, &(0x7f0000000300)=0xc)
socket$nl_route(0x10, 0x3, 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1eb556e38defc504b011face5a06294c2115a9ad943bac350e8d7961537181f79ead9176dc7c3ed2d45004deb987fa0d"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0), 0xc, 0x0}, 0x0)
write$binfmt_script(r6, &(0x7f0000000040), 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000280)={0x0, 0x0, 0x0})
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10)

9m40.321807488s ago: executing program 2 (id=761):
mkdir(&(0x7f00000002c0)='./file1\x00', 0x243)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

9m40.077517878s ago: executing program 33 (id=761):
mkdir(&(0x7f00000002c0)='./file1\x00', 0x243)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

9m29.84954206s ago: executing program 4 (id=795):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe05000000000000000000009500000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000440)='sched_switch\x00', r3, 0x0, 0x1}, 0x18)
syz_open_dev$loop(&(0x7f0000000240), 0x20364, 0x1)
keyctl$chown(0x4, 0x0, 0x0, 0x0)
setgroups(0x0, &(0x7f0000000340))
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000400)={0x0, 0x0}, 0x10)
connect$inet(r4, &(0x7f0000000300)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='htcp\x00', 0x5)
sendmsg$inet(r4, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)}, 0x0)

9m27.788771375s ago: executing program 4 (id=797):
r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000427bd7000fedbdf25860000000c009900f80052a9012900000008002201b6010000080026002e1700"/61], 0x40}, 0x1, 0x0, 0x0, 0x68cf6022d85e9141}, 0x4000808)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="7400000056512f3e000000010000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000c00040007004c001a804800048014000700ff01000000000000000000000000000114000700fc01000000000000000000000000000014000700fe80000000000000000000000000000005000b"], 0x74}}, 0x0) (async)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10001100", 0x33fe0}], 0x1}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001300000008000300", @ANYRES32=r4, @ANYBLOB="06001200000000000600b50085017daa0a000600ffffffffffff0000040013000c0043"], 0x48}}, 0x0)
r5 = userfaultfd(0x1)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000280)) (async)
read(r5, &(0x7f0000000140)=""/168, 0xa8) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async)
ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000005c0))
sched_setscheduler(0x0, 0x1, 0x0) (async)
setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0xc, &(0x7f0000000580)=0xc, 0x4) (async)
memfd_create(0x0, 0x3)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x20, 0x1, @thr={&(0x7f0000000300)="74f7d1b2c34a8c21f5421e5d693ceccb9484874cc4cd7418b22e0e0b4767d460396d4b0e2b477d0fdd6ce422577e6f37c94d9f60420f3ed42d673068ab57af42b7c8ee9a1a16869f63535d6d312d3921", &(0x7f0000000380)="682c679a7ffa559c2e117ac45d4b806a9f6a5f8a14c8109617c2f6da9ef9d28ab18b3b777981dfb44d07461ad75df7e02ed1de745f5402e736ab3bee390dbfd35f71321d34ab017b23ea26011f879abc9ec7cad9d9166511764cbe4a8e8ca9650a0254895fe15148e4d43365b63b666c109fdc"}}, &(0x7f0000000440))
openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
mount(&(0x7f0000000240), &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x800000, 0x0) (async)
mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='btrfs\x00', 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x0, &(0x7f0000000040), 0x0, 0x4) (async)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r6, 0x0, 0x8, 0x0, 0x0) (async)
ioctl$UFFDIO_COPY(r5, 0x8010aa01, &(0x7f0000000400)={&(0x7f0000272000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x4000})

9m24.136912404s ago: executing program 4 (id=805):
socket$inet_sctp(0x2, 0x5, 0x84)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000025c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffcdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
syz_open_dev$vim2m(&(0x7f0000000000), 0xdcc2, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000080))
r4 = syz_open_procfs(r1, &(0x7f0000000040)='net/vlan/config\x00')
read(r4, &(0x7f0000001a00)=""/177, 0xb1)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000))
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00')
shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0x0)
read$FUSE(r5, &(0x7f0000002640)={0x2020}, 0x2020)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = fsopen(&(0x7f00000000c0)='nfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)

9m19.146793982s ago: executing program 4 (id=813):
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7fdfffffffffffff, 0x8080)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180))
ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180))
r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0)
getsockname(r3, &(0x7f0000000440)=@pptp={0x18, 0x2, {0x0, @dev}}, &(0x7f00000000c0)=0x80)
write$binfmt_misc(r4, &(0x7f0000001000), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r4, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c559265406c09306003d8002000", [0x0, 0x2]}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r5 = syz_io_uring_setup(0x7584, &(0x7f0000000040)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000005c0)=<r6=>0x0)
syz_io_uring_setup(0x60e6, &(0x7f0000000200), &(0x7f0000001b40)=<r7=>0x0, &(0x7f0000001b00))
syz_io_uring_submit(r7, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54})
io_uring_enter(r5, 0x2003, 0x0, 0x0, 0x0, 0x0)

9m17.995412975s ago: executing program 4 (id=815):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000440)=@abs, 0x6e)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x200)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc08c5334, &(0x7f0000000500)={0x3, 0x1ff, 0x0, 'queue0\x00', 0x8})
open$dir(&(0x7f0000000000)='./file0\x00', 0x80800, 0x8)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.memory_pressure\x00', 0x275a, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000240))
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
syz_extract_tcp_res$synack(&(0x7f00000002c0), 0x1, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r7, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
listen(r7, 0x400000001ffffffd)
r8 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f0000000100), 0x8)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x3c, r9, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x5, 0xa8, @random='\x00'}]}, 0x3c}}, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)

9m16.389325679s ago: executing program 4 (id=818):
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='io\x00')
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, 0x0, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x13)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x12)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f00000003c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x3f00}, {0x3, 0x0, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

9m16.250031829s ago: executing program 34 (id=818):
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='io\x00')
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, 0x0, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x13)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x12)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f00000003c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x3f00}, {0x3, 0x0, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

16.172902797s ago: executing program 7 (id=2566):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000086255608c6051292834701020301090224000300000000090b1e0000fc05410009040000004624d0000904ea0000ff"], 0x0)
truncate(0x0, 0xfe0)
write$binfmt_register(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x0, 0x800}, &(0x7f0000000240)=<r0=>0x0, &(0x7f0000000280)=<r1=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file2\x00', 0x3070c3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x83000000)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6(0xa, 0x3, 0x7)
socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x380, 0xffffffff, 0x98, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'rose0\x00', 'wg2\x00'}, 0xa00, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'snmp_trap\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'snmp\x00'}}]}, @REJECT={0x28}}, {{@ip={@remote, @dev, 0x0, 0x0, 'batadv_slave_0\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@socket1={{0x28}}, @common=@addrtype={{0x30}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000005900)={0x0, 0x0, &(0x7f00000058c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="34000000000801010000000000000000000000000900010073797a31c2a748c6ac1003e0c9000000000600024000000000040004800500030011000000"], 0x34}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x2, 0x8, 0x801}, 0x14}}, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup3(0xffffffffffffffff, r6, 0x0)
r7 = syz_open_dev$usbfs(&(0x7f0000000000), 0xd7, 0x0)
mmap$usbfs(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x0, 0x13, r7, 0x0)
munmap(&(0x7f0000ff6000/0x3000)=nil, 0x3000)

14.691883603s ago: executing program 5 (id=2569):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async)
r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x0) (async)
r2 = socket$inet6(0xa, 0x802, 0x0)
sendmsg$inet(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1100000000000000000000000100000000000000000000001c000000000000000000000007000000440c0717"], 0x38}, 0x0) (async)
r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x101, 0x1fe, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x7f, 0x401f, 0x3})
r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r4, 0x7a9, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) (async, rerun: 32)
close_range(r0, 0xffffffffffffffff, 0x0) (async, rerun: 32)
r5 = socket$xdp(0x2c, 0x3, 0x0)
bind$xdp(r5, &(0x7f00000001c0)={0x2c, 0x20}, 0x10)

14.435405143s ago: executing program 5 (id=2571):
socket$netlink(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x12, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000000000000000000008510000005000000850000000f080000a7000000000000001800000000000000000000000000000095000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x3}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x20002048)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000140)={0x0, 'team0\x00'})
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083910000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
r6 = syz_open_dev$video4linux(&(0x7f0000000200), 0x4020000000100002, 0x2000)
ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r6, 0xc0945662, &(0x7f0000000240)={0x5, 0x0, '\x00', {0x0, @reserved}})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000005c0)=[{0x16}]})
timer_gettime(0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x8000)
sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800)

13.17220303s ago: executing program 5 (id=2575):
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180), 0x122800, 0x0)
r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000000000)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000040)=@rc={0x1f, @none, 0x3}, 0x0, 0x0, 0x1})
io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0)
r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0)
r5 = syz_open_dev$vim2m(0x0, 0x2, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000800), 0x123000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$kcm(0x10, 0x2, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}]}]}], {0x14}}, 0xd4}}, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, 0x0)
syz_io_uring_setup(0x237, &(0x7f0000000300)={0x0, 0xe4de, 0x100, 0x3, 0x40}, 0x0, 0x0)
read$midi(0xffffffffffffffff, 0x0, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
fchdir(0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000700)={'wlan1\x00'})

12.545911276s ago: executing program 5 (id=2577):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140))
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1})
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000cc0)={0x1})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r3)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @remote}, &(0x7f0000000300)=0xc)
socket$nl_route(0x10, 0x3, 0x0)
r5 = syz_open_dev$dri(0x0, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0), 0xc, 0x0}, 0x0)
write$binfmt_script(r6, &(0x7f0000000040), 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000280)={0x0, 0x0, 0x0})
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10)

11.192598398s ago: executing program 6 (id=2579):
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040))
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='smaps\x00')
close_range(r0, 0xffffffffffffffff, 0x0)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0xe, 0xc8, 0xffff}}}, 0x8)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ab9fd540501d6f600000000000010902120001000040000904"], 0x0)
r2 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
getsockname$qrtr(r2, 0x0, &(0x7f0000000440))
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB='Gv2'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00(\x00\x00\x00~'], 0x0, 0x0, 0x0, 0x0})

11.191332897s ago: executing program 7 (id=2580):
socket$netlink(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x12, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000000000000000000008510000005000000850000000f080000a7000000000000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x3}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x20002048)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$gtp(&(0x7f0000000300), 0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000140)={0x0, 'team0\x00'})
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, 0x0, 0x0)
r6 = syz_open_dev$video4linux(&(0x7f0000000200), 0x4020000000100002, 0x2000)
ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r6, 0xc0945662, &(0x7f0000000240)={0x5, 0x0, '\x00', {0x0, @reserved}})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000005c0)=[{0x16}]})
timer_gettime(0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x8000)
sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800)

11.020498779s ago: executing program 5 (id=2581):
keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0xfffffffffffffffc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x4000400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_GET_TSC(0x43, &(0x7f0000000140))
add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000080)=0xfffffffa, 0x4)
bind$can_raw(r1, &(0x7f0000000240), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r2=>0x0})
bind$can_raw(r1, &(0x7f0000000380)={0x1d, r2}, 0x10)
r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, 0x0)
r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6)
socket$nl_route(0x10, 0x3, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000180)={0x2, 0x0, 0x6})
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, 0x0, 0x0)
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0)
r7 = socket$inet6(0xa, 0x2, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60fca33f0000000000fe8000000000000000000000000000aa"], 0x0)
connect$inet6(r7, &(0x7f00000002c0)={0xa, 0x10, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c)

10.984671941s ago: executing program 1 (id=2583):
prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000440)=@abs, 0x6e)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x200)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000500)={0x3, 0x1ff, 0x0, 'queue0\x00', 0x8})
r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x80800, 0x8)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.memory_pressure\x00', 0x275a, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000240))
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r4 = memfd_secret(0x0)
r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$SCSI_IOCTL_GET_PCI(r6, 0x2284, &(0x7f0000000000))
renameat(r2, &(0x7f0000000040)='./file0\x00', r3, &(0x7f0000000180)='./file0\x00')
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
syz_extract_tcp_res$synack(&(0x7f00000002c0), 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r8, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
listen(r8, 0x400000001ffffffd)
r9 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
syz_open_dev$vim2m(&(0x7f00000005c0), 0x3, 0x2)
setsockopt$inet6_IPV6_HOPOPTS(r9, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000000f8ff000000"], 0x8)

10.268755718s ago: executing program 7 (id=2584):
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = dup3(r1, r2, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="fdff000000000000000001"], 0x30}}, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xe)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000040))
openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r5 = getpid()
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000005c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="67b53433981732ea50cb5e9951c78af7ec127cbb92ec71b8dec2fcc395dd630871057e807d08a5f122960b57e06248e2b92fe3bc0bdf6190b44df607682896c64b4b31a654c7f5ec90a2b209075fa29002a8bab9330f946ff60f4f32ecfa7af7", @ANYRES16=0x0], 0x14}}, 0x0)
sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x895)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000070601020000000015000000000000000500010007000000"], 0x1c}}, 0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r10, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)

9.026067093s ago: executing program 7 (id=2586):
openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
mount(&(0x7f0000000180)=@filename='./file1\x00', 0x0, 0x0, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
timer_create(0x1, &(0x7f00000004c0)={0x0, 0x30, 0x1}, &(0x7f0000000500)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580), &(0x7f00000005c0))
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000400)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0)

8.035874625s ago: executing program 6 (id=2588):
r0 = socket$key(0xf, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe05000000000000000000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x8}, 0x18)
syz_open_dev$loop(&(0x7f0000000240), 0x20364, 0x1)
sched_setaffinity(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc601})
r6 = socket$kcm(0x2, 0xa, 0x2)
r7 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001a00), 0x2, 0x0)
write$6lowpan_control(r7, &(0x7f0000001a40)='connect aa:aa:aa:aa:aa:10 2', 0x1b)
ioctl$SIOCSIFHWADDR(r6, 0x8914, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x4)
mount$9p_rdma(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x200000, &(0x7f0000000580)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@rq={'rq', 0x3d, 0x1}}, {@sq={'sq', 0x3d, 0x1}}, {@timeout={'timeout', 0x3d, 0x4}}]}})
sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x2, 0xe, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x10001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xe9eb}}, @sadb_address={0x3, 0x6, 0x3c, 0x10, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x50}}, 0x0)

7.388274945s ago: executing program 7 (id=2589):
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1e71, 0x200f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) (async)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1e71, 0x200f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
r1 = socket$inet_sctp(0x2, 0xf, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000001600)={<r2=>0x0, 0x1}, &(0x7f0000001640)=0x8)
sendmmsg$inet_sctp(r1, &(0x7f0000001940)=[{&(0x7f0000000080)=@in={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000001540)=[{&(0x7f0000000100)="52e8c90fb17d3807d9f027acfe0bb86822711fada8689e8e798da73fafb94239a150b9548b594d634eb2f69c2930f722e5d8847d68d57cf2841cfd651e8c15ad39198fd5a3104201ce36b44d2697b36bbf724ec07edb67bc5722715183264845ce6a8e1875", 0x65}, {&(0x7f0000000180)="39f303b1bdc078efc9a991e2e69c32938d6c676794d168b817f261a01beca88483a8c3d53aa3bc3efd49e0060c9ccf9868e6d3dbfb47f9163102735fc72aa23e853462ef9ad3c12175a54ef823d9f46dd0d49d980090d4c4afde392a06b6d7861bf565245ded417e1da15d2514014c02182909808363dfab38964c7bdfdfa69a8e2d150d8bdba9c6c1a1e4a73cadc980ea6a1bbfb62048", 0x97}, {&(0x7f0000000240)="c587a4e2f63426b0f896fad6d16fc922368d170fa05ded20a5061a8b5933127489f476920030d1438c6f8d4c45170894459e3c42c0ea77a7a5bb560e08fac9f1a68cff82d3e45f5dba062ef5d5130bafc68a0da9d5d3908c5c47aa677c42f7ee59bc1f1d805e64c8aff460ecbbe4", 0x6e}, {&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="1b462f16b0c08766d45f1e48656014affae69fe9d47270bf4c333cad85bed66d4449c29a1341c2ff8c", 0x29}, {&(0x7f0000001300)="96d3fac3a4d80780a378ec6c586d35742b1b7bf0dd9123c0ae886e93a65b3cb7b278d9f1cb39af6c8d862c2fb1951cb527a64d2ded5a8dc9f9dc75d755679eb6688ed15d76691b80678c75cd342e8947c05510063fdc569960f422", 0x5b}, {&(0x7f0000001380)="baaeef8ed59ba1b659828704a009edea0aa79c7cba61d6fcd9c5b2753f6f3fd1", 0x20}, {&(0x7f00000013c0)}, {&(0x7f0000001400)="c05c7a8276cc01d3134a2f9fae8637b1280f5b9e217ab0a65dd7893b9da123b84223dfd5a63ed93af317c5b50ecddcce142bd4f69f2441787fea2d5adc6a9049d952e14349cbd948243ca89edd104bd8388f97facf2965c05c829dbccb204eb1e29f2ce21bb6e95ad3fcc07166598344dcd41951842a3f59d60ff7adaebc4cccecf7", 0x82}, {&(0x7f00000014c0)="1e5f4ba49dbe010a7979915db6b13ded6be08784e44fd670ca96108c46b2e5654c507d072f34ceea15b637536eb294f2a463e59ef87dad9a710c12b36da09626670dc2bec6bf3df622d1c4c3e8d808ca36daa440a29211e40a7160", 0x5b}], 0xa, &(0x7f0000001680)=[@sndinfo={0x20, 0x84, 0x2, {0xb, 0xc, 0xf, 0x80, r2}}, @authinfo={0x18, 0x84, 0x6, {0x100}}], 0x38, 0x80040}, {&(0x7f00000016c0)=@in={0x2, 0x4e22, @private=0xa010102}, 0x10, &(0x7f00000018c0)=[{&(0x7f0000001700)="09edc1f487d093003925358b1ca3208d22497fb92cd0c8136bb875c428fafbf36276b8c9e8a7ab3683beae27886ba662bebc254dbb89155368eff958a5827c58fda55382bdd151770226693c51e4237c90e3218d0b978ac8acbc53f57ffddb076c315c18bce0d6f4c23ef723f3b156bb5c63a6edb324dd25789a2ffec4b01df35786076363af19daa6026c71de505c7508b3d7e96799683e225511f1e6759cca69", 0xa1}, {&(0x7f00000017c0)="a332117616bd2d5ffa4ef2c8750ad7486c5f54b27d7bdb0ba1e0918b3ce563c4e9f5182666ecf1d4893d51ccc7d1b35d87233a08fb21a30bc677f2d3327846e3fb0e4203d3af22b5244d2e1985235adf2e607603d65f2bb657c862bc014fa937a67a0795582727468f8b45a467bb620164c6a1bf772055fb0eddff9a109916818d401af7b3193eac755109569184f1696f467f35722160d2dfcb8e853864fbff88afa1da0876bdd626baae514e9cc995fa3dbc7fd2df91", 0xb7}, {&(0x7f0000001880)="3604c0d9aefbd630d333678acd9ecdb88d72023c5ac2d8186374b18e5e45d4d650839e7819904787209e97", 0x2b}], 0x3, &(0x7f0000001900)=[@authinfo={0x18, 0x84, 0x6, {0x7fff}}], 0x18, 0x1}], 0x2, 0x48000)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00')
pipe2$9p(&(0x7f0000000240)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r5, &(0x7f00000043c0)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15)
r6 = dup(r5)
write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_INIT(r6, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000004940)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@access_uid}], [], 0x6b}}) (async)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000004940)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@access_uid}], [], 0x6b}})
syz_fuse_handle_req(r3, &(0x7f0000002240)="afaddbba376e1bba12e2f2262ec7a1f5b377313a7bcf2d9b013196c2f0f94bc244fc0dc1c1bfbd4ed45229ce0cb7ca58f4b8d430b30d6ad8e8a56099ff70f31257cbe8710542fbedf009e1a5799fb06a7e0301b43d31008caf089c4a5a49dc50ea4c476f63a8b0aa08dd78d9ff39d8dfafbe2c41ff5d2331dd2e9d784247d5272cdcd13e6d9d7a03fa6b0622e6f130e0489bf9105a2a511d6f5b7da1100ecfe5d6ce64f4aac5c00c26d636ac66f059201a3a790b946da4808f1d665484847b61faab09a5e4b45a17c4c55b64ecf6933705c22c85317cc5edeba3e9260033f6bac869ac3b08ed1c55ae3119c78761be6d934c3757d5f10079243e4f06429907163f81855b74887146d875d0e6ab4d5c7032e84c33ea24bb93b2ab6eaec0feeca93f006a0d2bc2bd601f2ede8f32b5fa2e37e0ad1460b8839676dedef30fb684f6fddfcd9a84f3efd78d076c996d92a186e921e16e5ac7aa1f70c585b3752cc1312876c758219645ad0a5540bc82074a497ffc3717c8e139c09b3d2e21fff27e12db18540448f7ff7b637f87b7a717a60a23934e4be7f55ac10d2c09098fa13c9f1c5ed9ba61cc3ddc320b5409071d2ddd25d5b8f79475e80b3b8257b25fad2c59c31c5855560f2600de1930cb1f2e57aed4fb0b79fa7aac52d54a73d62f424cbad6f82ce5d5749cce356f892488ed149283e51dfdded96136a90b5e0c63d1728a82c324b1dd756b9f9b257a9e7f4b07a007e8ed37274d686e4b1667b315b640cb610d48fbe98c07ddb82250e9399b1e705e3f805969b9a003902e2e7b85cb9e2171f5bd180fbb9bd26805fce0b2c6f87cd7d02a579ac24a5391ad2eec8868425034c5dc19dc7581bc0162ecb37a172175a859b143284e3146dfa01731b6ceca8e458cbdf8d785300d12c50c3bd9ca4b72cbb0480711b2cfe820c31887289b29fed60c04548ee3e24acaeed283a9400cbba31e1317ec6158ece4ce56af53e46e182a6d441ba04520f0e8b45b56eb378ddb17ef5d57b27941032e7c917313f555838ba5397816757da7bedb6c5ac760239455cf09861026920c2ab3119a3257d2eb61e8dac7c39ee5880cdfb7c4fcbcf28dc4fcceb81e81f5fbbc0179fe22fbac014b118ed1ec81652d34a67b53a9a8ee468d8e927a77ae79f381a249501d3055e7da0b7a8847850f4e35aaf5b5dd4338326da84d93091035bf10b80b3e79badd38fd5d2b9fdf0b0923c96193d93ae4d8753980f8c73e980934686f11acb266c161751367dc05e6ae5175bd304ae6b1fc016ff2a01eb05a1ba7ebf1b91cf25dc14852984acdfb008a5df08d5c8619c9211320b87a5f1b3902531050a147af6a7134316a7735ad310f6241258bd9b79e2dee1461840dfdd905bc2e17d55b49694a68f36bf4a64fb2f5a483b633398abaff7917d9f1216d70368ad4c8e4fcfb040040f32e8a6a534d02c4187fbd19b85f35f8c119e06e3dabaa210a649117722816b5a91c5125c84482d414edcd992c79aa80fd568a884c99d43b77a87daa96f662c53fba7367ee147daf620bc6d13d32c3d9cdf8095962a9bcb85a93b6598750cdbbf5925a2a0875afd1e58a568b89815ae420ea9553ed487a55393115a8907aaf3982827be1534576c257b8594b48d0d71fa1f56dd096a6ea3f7fa339b51585d36ef72d0bb0da4c2c84ace8d16be3ead998187df0e59045541b0a1e79e5ee5b1a55d8fcd157d49df504b6fc031c5fd1e01a8ee2ae9f84df78ef03595642a7812d737ad2595b922ee618823b53ae2594dc15193c7206591e9b16689c3d5bd4b4b8d6851c2e7f0550ba0178a64b8d3c08bfa35f064576ccac39e7936e2e10fd27785f66053580b45e9c93d666bb7d4eff042da50774049f0948b150a660e08e82fc352636cfa0fdc9409316e402440aba8ab8944840838d8121a76274a5f929101e25c2a7c0ccf84831c8981258b21679dd92b7c44a78acfd706cd25f8878873683a6f5aebc81d45375aefcb484bf517ec13dc814fdf390cd39f764a008777c9db7b22b1c7eb556a5f51fe9755916f84db7401744c015c1100b3d3cb8264b26c022d7f6441cd0f099681d7d9df8b3c9c6d153d6d0c30fefded15e74c7a9b5832032552ef6bfb3863330edac33a33df4a4839d661bf10ab6aed5d2093b57450ce6dd2fae63096d07e47b8ba3c5225625f6c8d98e007b49b907a4ca511aeefaf8ae3cf10ed63bf3a7dc0f7b0c1e48e6af2b158dc1ea12335ab91acaabacc104e79968f89999aec3b694aecc6783dfeb9a8efc140f18583d113454145bfbe1fe480bfb7de71fb394d08f453926208d5d595e09df3fa216fe78a2693c2c2a29cadb2c2e86ae09e912bd2ed18559a0f8b5f131b780fc8037081aa98eed56795f1bb5b44300f73b7ceb080d7c9b022b7246a93f7784aa3475e05e125d50b3a0cee066c609add2716ec88a70e1f0c79344b0cc80a543c28b970a186aefa24e9246882e790053d652b2175565a12916ce13f1865a40d34a9cc6555a7072b091e6e8b9c2c7137bca71cccc56e33281badaa73a30e67ff5ac9f489ab35bff85aa1daa10b23f4ca0d55f5850e6af0c5ac755364dcbd8c8cbd4bc76bfd220cb12d46361ef68dc9f90601a46a56140d19d05fe5be799c3af81340c9f07e252aa1768a5dfb4a0536481313d985d8ecb36cdbaa6891e0608ae5a842d9580400977d8a855308b85d1bd70e57523ca5c153640a2e7a778c9df5ad48e230d881c06e0222bba818738ee67ddb7cc2034d25a3ca5d259be6ad63f6cd84938be096d2ab5df0fa7249b57c7653a2c6a016d2890dbf6620c52e4594358c0711dea1bc6fbddb44f500bcbe64f269bf17e0c6c5d8e18ec56d3519706efb6c868d34643e48e5d05c91f458f8f3e0c6befc8511dfa508f5c26eafce1077a082abf8a868ddd62206f39e125cdfb52be753ac96f39341b797d23a3d173d783932271996f482fb80d8022700ab96efe2df6c19370fdf2030d784578a05594eb7905ab5125fc543713dad95d4467cd76f35de43e79a6eb5ede4edc8afb04ab682cf282ac865165329688e7a9a181cc42f9bc31c0203d5c4f8583f7f03ce0b69a5e7e5af7a87d8477dfe1ec64ec8e1132d7f36d3ce6c41dcbd347a50ba51c16340376f50f093269266f97a0b3570675d1bd54f7fccc8f99b264dcff9d057df961a6a4dc4268791091cc08208bd62e1088ca07ca5a2fa849978036554806fdfd9dcf231b28872715eb7b6f65b5ef064c49f0ad04e5bf4f50612a5f313b65eecf07c2b79f65a8b03058a043fcf4ca62a71027db9c2e5311febf53e8027d92f14ea0958000d1d388a323bdc70f6a2bffedd7d7697523b0c4add0e1234e35629014afd1789288e9ca6d65b49e5e2d31631da7674376781e7be087b9cdb58098744e4d6b9ffc2dd82d02ebe3886b869aae44f7080252dafd6d00718c5ddd1ef66d5a950ecd79a87ff35d286259e758e0a4bc552abe99a19d0abe5614e5e0474b8552c0b30cff0d44c816c7e23bec85bf466f7ab534b38e6d97fda0f42a3e2ad15d0f242b41818d7d0d99118a0c3230288a4fb7d18b19000cc58f46d26fefc703a00e6b5c592ad7e34caf29b9acf1d6cf3eec647b86ef3c5d5a8151914ec82320c546b92139e5c2ef2c7906413a0755d6bdb53441ef21a0d2d1400b4e024f4fd924a600d098f88649190cdb74a2390e497941743b87ff0d3e3016bc0f149b600232efa3a0403cbb6695520ad6aa4393c4f1cf201ac140e4a5e31bfdc1da895b0f38dd25d126cefd05fcde00f6f2afdb4e93c70cc3a6696c660c497b68072c3cfa7132d71a799cc1222c250df2aecee7d7656b888ccf61e9a572f76ba0a7d287ae7490365bd610bf9df142d131ee4324af19fb451e984a79b43026f516bec5e88a6aae9c6d37e13adfd2c99428dbd3dfab9ea008e15d01a2cada5c1e9482fd6e10de25ad362c83c27e913c6f27bed3dc5515d2e65eca95109c001782715fb897f3e572efda7196f96ec781f1e93201202a9596030d1936b25288dedde240d70dd3d01e5cd91e318a1ae3630d136e8e267deaac70079bf3282f93b08d12c9eb3f0b4617119857af8634531c922c75ca8b674e7cdf51a425fc0bb7f77c6a07e6a98293f991d7ba26e994d63cbb40becf54bdb74805006d55210e04bb31e8f97041cc9c345d8cc4783cf40a3007437872583ce7490a408f9d4d85d0fd063140e33078eb143d001f574ab412d8ab0affd504eacc1cf77ad14e2f3b7e78fb9ee66edb99fd6667e51bc522a6b61c0a7e81456097ce62b79fbf12dea8df4356f205f9ca4c0633aed65a0581952802be787bdbde12cd344f6cd0cd21cc3ce7515407051f61a8d686f25dd7dad9b3c8f9bd5ee578dd636028238eff03906b67751b275cd37d39b9c2458fa6b3bfeb9969ea1471ff982287efe8f31e3d50aa2a357c033691c78b5509c93272d674debc6a3a03a0ba7df7aa929888930de1b6a5aee0f599ea50ad079e183667142884be38b6715dbc6638c83a80f95bf9bad4e18bbd900da87964b7199ef9f49e3a1ae030d42107baba0e1170e48cd1b66d0bc63f1bded9748a2b8bea4a7d4b04e2d8dbd3b174d4a822470c2ffe4103fd2ecf0f9986935ae43cc8f2ed1e48ce542b197e6fee4ec1bd6f600a290d4e882b2fef318412aabd3fd1c9a57c313b81340bcded3505c0edd12fb88ec07e3743aaf48d93a3664a038953a3048f267c8f6b130e0d183f982cb4385dedf41e3dd68b0a00a8deb882476fe38cffce5f04c9dfd55a009051ef0608721d429b1f4731708d1c092eebe88382debdd0be1c6cb59ccf8d1951f350df8ca79972b3d35f420fd68b602ecaf29a94a0efe785042e8101d462a78ee0e215c380e7b115b74fe9b99d0762a0798d7e308d8594a158b28476dc1de2f4fa4bb68b9325d4bfb491212331eba8f2fabf611300d21fa9c7941306098a9ef3b5e66a40c3060bdc8f707956bcd95545db971d573b1cd9e4e9252b97d36a8a505855e8189b85cef25b736add58e74a67695e8f8e59a3bd97ed858a7c355ff674fd8402fa271bd3e50ccf88070408d31e76e9f166bd44f58fdfd682f8bdcc389ea33b4eee566f9a7e6174abcae98c0aacffae73c5b29fc5d210e35f7d42270b265ffde2de3d45439f8d71e371be19b0f2954bb9530ea5cc18f525c9c79990da81aac6c69550120d3c8ee98d82d8b6de6e59f86f41347d206411aa3a1cc39f841e8daf6a78f700170a140432126d3cd7c3b53cb592fd3aaaf7a45d02a8a537704cb5ea8d165315757d9477f0d52006525ef830dd7d16e82f9ef127689501ee55e2f69b79de0bab64b8325aa1f4bcae387fe84ed1baeecaa42413f684a1db7a120cb73853838f03565ade441ee66cb5f648e165fe617c539f6dec4f12a5f738171e8971184a9d6a14a123bf3cf888fc9e1253d6f98c26b3061e6358d36bdfdfdc85924b9114aec973f4d0e2d4b0c8cd66bf32fd208bb7485cb9c730c8d6e368fbf8fac16be225bcc8d320980f8f6d73ab1ed01d3db4a7e2c275da0fa6ee3eac4fb6b3831ce90b9d654a5039d0be542c3341ccae50193954a233b81e54a191e6cf1e0685ada89e21723ea1e836441d6b7d3da1d41e4e04f7cf770fdde3086c6dcc28b2bc4527b03fd5ca3fd5ce90c4ae665c34386d6bd423d391ea4a13bf62395846afd7bc8417889c02fe34373f20621d20d4912f1acef23169e7b45c7656643d1961fd1151a2a0df5b73fcb022a83d1b8b9a3669e00924a5af0d63bafb044eaaf09497f09187511254fe0d7343909f2b11ddea84191cbd14db3636c5458227ef53f8bd17bc933190958edcaf90453525b81cb0a2cc3088ae5c19fc7aa71b531ebf141a16bc11853bb82c320d21bd2ecf6556894fc586e253b659ab1545ee63e8a9a2d31765d07bc8ce446316aaf712cac59fa4e9d92e002c4421d2318e8b8dcbd67d1b9ca688d3d204a764e83e2d9b92cecd794b5f4763f482210165786b2892dd3a84b35c9348965de9f34ea2211d6062746c1053cd7d58cbef089c67209f301122fbcebd7ee15f627a78ccec7541a7b23f1f19f00238edadad3850fadea580aacf3f09261be6fd456d19c6c9b32e27f355178f0f8c4c9783b976a5555a198ad175274cbcf57ea23926fd38db0256ada2207115077ab6f0037c67a27532e68122ac57c990c581754736d72a81f4bba6d7a2ca7805873856a38c137e8a0b5741dcf16f3431d086e28ca138e2e75d129bff24137c930fb1f227083ed7055ad54d59d66fd4ec309b84767595a39d418d763b7f9c603d18d7992b2718cff68ad4975d1130b997a3a1f4fd27f583f95bf24cfdd49da653efe58d9a34703acca628938c8f395c701b1037151a3190d2eb174763fa78395b3e56bd716c8fe28d4e71d313e590561bf133c8a804c0c7f19453e0fcbf7315071120141780cf195ed34560ad38ecc7b81274768f96e37d6e655be2227eee8d0d1eea5e0c22502233377f56dab09a3f404e6216d65987066904c075bf09e39221dfc90f8c843abc9b145b9d5d7addf62d9016b8ee38b3a6c3d74f0656b3dc719782f6ea5cfb924e81e632d408d4b41c1aa56794c9a03c3527c826e2dc125b503d567536efef5c33e63507022f9615a503e52105f1357b8268a586e62a435b89f0aa4577baad3bda26c531e16ff99658f36fa86c2708d6a8142baf8db30db3fde91f51fe0ef9a19c9f4d79b16117ea59b8d92a9eb9cc4291f8fb758eea16dfffe3536ec690c02f767f36d4c1e93612dd09d6072501d5823adaa0183773b8ce6a841c1d78e97b364e527e5f2a5e185b1a9edbe425bb7c690d46fa65132d27834b0f1c06f69890fc5be997f7391da6324a2155b447470071f2435097e2ca46c0ee0dbda72d06dff6ef260934d198bad8a010023f2b8a04512732dcbb0ddc7c93cef9657dc4652789ad846958f9d696bd028d7e7f3b5876c25c01af0d252a2064c3a8663deb4d3f4692904152f758035f1746bbf8af5ced2837363de3a923a1ac1c1fb9d5258158d8f0b44e27a893820deb4f721f8cad92d7bdcfe26c098339719ce02bc54cf93b8760b36b6d8b7e2342e5ce7002dd9f46dc89fab1e878d574937e6969cb51a6f8a347ebcd48ce645aebcc2f7ed8e53c2564cdb80dad1040869650f5e16f334c19a479c4ae387648a372650d25101ba0deff30a944ca5cfefbbfaf0984687e5a2cb736b46f8df2a36784f4671f531c11c921cf4701de5b3395df8d88771326b3d7e2ff41b524abc75b9cdbdf40854f31c6a7e7847aea31900bcfe0b1311657ac591daffa773c6945c8444be06ddc0d5b49a4f713e04c7a78c423ca2177dc8c5ea898f5938105e8d5c560a4120a7d1444d546b09650b611013b9680f710cb843396aac34b91da40240098daad3672c45e35ff9bc804557d5b6ff3a46d455c7c8840e158a301b675de37558c4147c08fed3571af29da4d4a9ed9747f3c44a6f2cdfc7ac2be01b4180feb1997638a6fbd86227a0cec71b47312c0e3db7675f5939278008b93eaee1c09d7df8abf9e4d973c22c2b8a5743bec84fca15c855f231f15427b9e7d23f52b74e95577883322224a9cbdaf312afd780982666848d5e6e3dc403fa1061cc2c8914672e963909c14fb3612bca05aec976495c621f7fdb96ecb6714f966e3a44849ec256dbc9656d2d3166764a9608b6a91c9145367e764749d57a58d8e0b196921aa0e4520d6be238ccf9bdc462b63d02f95b36d62b93783f33bc56cb9cb224fccdadba782363b558985bedc9f079fb7bcb7cf91402bfbd8ece7e2840421fd2c1319728022ed81b4f24a9de307b127e09542fbfdf37e320dcf33c701f07cd1a64dfdf1bb3b34f303dff533b1ffa1abd7babc08395039b0f1165f132f5b131a47f51fab324d9502a3266a35cf6dfff372557b73bfb685ea46d2c38375231300ba10c6e16fcc873dc366f1cb7550659ccba00767bee15485c91aeee4a97d7af962d2f44e96e620bb2208410ef8aeb32c024e289668cad3c4e82e9fb0d76bd8d0343bd6fbd3460818594cca97be3d3140a244089b2ef22414b1fe8a4c1cd337532ed215bd7b73bb03753dbf26ec8e6d664dff003797bd34fc72fb6fcfdc916bd62b2ccb7193aee70869499b2349e6a4fcb35a9cba8dd8998de8afa734b854dc71e47f0103b0ff1c38562190def665509c76f037e393f8fe7ae05d8a4030640d99fda6f6e70d08709277e315e35e51a78dd3e1e47ee9cb06b9279989b97f42dae2cfd85296b570c3fe0f2615fadc33b09176b6e8c41978aa118ae407c3d8d12474d1aaab08b4067615d77c4373ac50715d9e9384461eb373790bbfe1b38976047eabb6ba9ecb4950110ceb95fbd11b32ed0b22b6d0c40bdcb44e9a08cca1e29dcf35da2db25606186a000bf157554ba7c55530dc3281336a272d9bc76814e2335db48c9980246214475f4dbc397e46d0b05cb1387d0551599ee0b67d612c085135f89472e99b275a48f7a90d2c6f377d023bc0f2ec69906856d4d05e94892d8aec469f800a76232f6b60fe170bde18df4702ae94556b976390d6aec61e6d017ebabe20fe7d0469b72207aff967865cc8dec893596449c640f486b2a8829d2973f65aadbd8b001f065b43ad57665887e1919f87a7e4d6e16b9beaf6099afffe31dca58f2869e707fa5f04d581ebcb8af9050a14a5a9fb333884e50a444563282118ab9c843f8152a7765901f392b32b22db3867bef3ef05fa41286bffc556e5357ae22bcde91e5a0d80dab8d0d83aa1d60f25b14dec69dcf15f3dc48e677b684c61d51c124bff09702d8e1e663cb87a7efefdbcf3576178e7dd614e3266b7f83f338250ffcf64260c7ca621c4750fe0345483202adab46eeb42779759e4974707b23e12bcc63371a9c1a39e681dd2bb6d2d304f3baefc9b38e16aeb4b33df166c0e19186b0fc8269bd9cd96d5b3adda68ccb9be58963a3865291d767fd6f8f133f30b9404ed1231cfa93d21d5f16941252650f6684b6499adef0aeae110ba35f9c611a08b57e3f219c2bd7bd5ffff509aa7cddd73bc62e681dabd8f15b24fd924f6ab00fbb2b16cc6af67fbeea2960ab6f5f98f1a6d0a870ccf10e3ba73d48e0ef1b38bfd7463b30309683e65dbf90776ab30cbf0e762c86c9864e27ca9a95e15a7b9d0b902f3dff2c8db81373ab7edc5eaf45a6230ff72837bed6fd2f0b3bcf829b5b75bbfa1b18af3c9f7490381eae64b553921c4da40db5a17afee6658acaf6a2eb1d381e1ccd9ec4e68eeae2f3e0d5de21a453ef99d99d65d6a067dff051822b9cacf5f1110e2972e2724c979b0c6c8bf5295716022c47c8f4af702bcfe1060602ba8f4be94815dd22ba2ee0d76f46eb4fd816d7e7b88a37a9cb65f1ef32e6cc6d101de6e94050eed22f6c0299a7cfb74a5f5f6ef4683f071839943017e0b58c8cc5a77251909888ab6f69b0e18b8ed8905654578f1604c620f7d8bcb0a0010a2b71a1b8d11e34f7c674912fbb61fad795b6fd455cf4feeff71d865d92ae41c3a5935d7ee5c28706de5cd4733a26320bc5e79b4352b63d7d320c69a63d9057187799ae483a6e9dc7ce101851cd598319173ab4ac49bf3b25ec8bd9fe8b664c87722223f1ee8c1b613e78729072ebcd51b7b9e3c5dd22b17b0dccf6a177b9fe279f56644476acb27f5c4a7bff77d0416dead2231d8f8ee44e6618ddcc2b9e34919bf21fa986d9e6b9d54c007e2f15293808b065c62aad7f9f42b0f39361528328071c4b5df273d2b41e2b9881a8c215fbb0280fd79a77570f93855d5d795a89613e0b4be1d8b1f50864637471d694ac417216294b08a4226fe098dee8d410bc3828ef27777489b9e6e3701e6ccf13151070b027fb53b00ee3a5e780348f47d314d04b353c76f920c69d571d7b674d2b1f9ad1597bd6f36e5ff82981d2158990e21b7102b20fbdbcbd2c2c25da51aceff00a1e7a56c8f75f9bf3655d6142ac74cbc8ee70ffec7a45bf1c4a3b6a65f629494670a84088a802598909031871dd576a5d47d911b509b0799e7178657dd66943ddc2666b7cae6b996c8b55b7cf0a6b9ce396cc3e262ebb83c2f640ec6a80538823a83fb3b74c8b51a8cbb18b4925b8045530ce8283c962561e3da3f7843720b4dc6afbe5278fe9a964860b88e33aedb298b61910e5c3ea4971e02cf869d5e68e8a95215e0e207af9b7e48f3452dc9aaf0bf15202932e71552a1f79a6482afc0c104fc70f3ffeb153a249620dafb5ef82308e97113ba4aee10301ea19ec5f0f2d643fba39a4a5f039003187255c1cd9a7d54253ab0c6f8c09cf51ea635d945231386fd891d80483ddb4f4d8e68a62a71b61bbd75b74fdff1610949508d33d740a72c633dde4db6a4cdc92a7de18a7b9ceec93ef8e130fbee0b66d7c4d3eb3d92d41f89b3bc7f276f275f827a5f5d4eee0ed7c0a90ca0a6639a974ed1311422372d7a84305ed6154a80f9cf4dc52a717c5ba57aa2e4fc2adb9da2b5c246706777fce38f6aba54534701314df2bb1725ec00b40bf6281ea0f45f3d085836934a8c884bbc3a89fca0240525fbc58969e7772709a3eb827e4da5035c852be598c14a36f71c78ca002bdc4161da2daf8db5303185b9dc97302a2df8f3adb1acfc5a19faa3066318892b44276606f537475b03d28b01182eba9be649c74b35dca086e4bbe0e9d6c5f3edf6c929e3ace7419cc7b106fe74d1b81eb675dd361a8099f8327cb99a72b1b83e194fd90c92450a6525445b7f2aac705920793ea1e0f1b33c754a0460fc681716fa70a383f81c6cf95f49e54baaae984bf931e9bd28942e5c4e90f57d2d398299669af06e62fcf860dec6158982f80331060f24af75ac27bf05e3652a822d6421c26c2dd33ddf1ce60d4c7a74abba565bec2e18b7a5cf21ac63c8271ac2c00ed736bc14998448dc4c19c5f50f9f9c75b4dc546a33c26e8ea26ab2ab05de5f4a346831bf743abd4119079d42df45b461258cbf1ca05370229802f7e0430c5496cac07658ac3ce55ad783a55b3414c0572dc3632a368c9395af43ad25a0e1fa3569366492bb9063a64b77a4d0001208ad093f98c1c3482e97015dcbae76f173bdce59db0bfd1015de911b3b652bae2dfba64f496e7bab5735fc3b683ffe19750b73ea2491b1f7a2be4db9ca703f11c360d7b2ef8f49b9d262900de5476f682bf7d526497f7825cebf9f136a4d6b347d1874fa6fe441fb95d338080b2a5268cfaea8fed039a1900028c4aecf225e0bb328522c2944f2a7281daebb2dd52d312be1c5824cb19317021d10ba3b89d02763677172ce0ae6ca996b147a934a266e75b2bf35d523b7f9eddf0afe102d4ee9db8926d10be781bbaa25b815ea2dad9a9908a827be0c0e5b6b960e99b702d76b2af58a2afe7eb1e2cf30e660cf6296bd11607c33e85fefbff67b0dd74c5110236048da6d92eabda02925f0816ec048cb1333894aa172ee73d5e3c833e3858a0e219debc74d89bda90c70f88bbe41c943375840ceb55064b2f2b239cfc769582cd410f1bdb26fc78d9728a30899b3460405b157a1dcd33b31fb6e2a4113e4bb41214aae4a037f99f8", 0x2000, &(0x7f0000007080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x8, {0x8, 0x0, "17e13f22a258"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x8, {0x8, 0x0, "17e13f22a258"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

7.260641571s ago: executing program 3 (id=2590):
socket$inet6(0xa, 0x800000000000002, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
sendto$phonet(0xffffffffffffffff, 0x0, 0x0, 0x240080d1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030"], 0x15)
r4 = dup(r3)
write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000e40), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000e80)={0x34, r6, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB, @ANYRESHEX=r4, @ANYBLOB=',cache='])
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1800800000000000000000000300000018110000580a7b4ef72fd846afbc04147f405c31d9599da140d08dd3f0e8e37c1e59f587cebbc243e45804a5", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
r7 = creat(&(0x7f0000000440)='./file1\x00', 0x0)
open_by_handle_at(r7, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000f800000015000000fb150605e8371f2efe0868327a31a7059ead85"], 0x39400)

6.50639848s ago: executing program 1 (id=2591):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140))
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1})
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000cc0)={0x1})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r3)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @remote}, &(0x7f0000000300)=0xc)
socket$nl_route(0x10, 0x3, 0x0)
r5 = syz_open_dev$dri(0x0, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1e"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0), 0xc, 0x0}, 0x0)
write$binfmt_script(r6, &(0x7f0000000040), 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000280)={0x0, 0x0, 0x0})
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10)

5.179556084s ago: executing program 1 (id=2592):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x14, &(0x7f0000000140)=@assoc_value, 0x8)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, 0x0)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x15, 0x82011, 0xffffffffffffffff, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
r5 = fcntl$dupfd(r1, 0x0, r1)
ioctl$TCFLSH(r5, 0x400455c8, 0x2)
ioctl$TIOCSETD(r5, 0x5412, &(0x7f0000000140)=0xffffffc0)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040))
r6 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2)
readv(r6, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/212, 0xd4}], 0x1)
ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000000c0)={0xb, @vbi={0x38305542, 0xeb, 0x0, 0x4f424752, [], [0x7b5], 0x2}})
truncate(0x0, 0xfe0)
write$binfmt_register(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x0, 0x800, 0x0, 0x8003}, &(0x7f0000000240)=<r7=>0x0, &(0x7f0000000380))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)

5.176513927s ago: executing program 6 (id=2593):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x8000)
sendmsg$IPSET_CMD_FLUSH(r0, 0x0, 0x800)

5.054057505s ago: executing program 3 (id=2594):
socket$inet_sctp(0x2, 0x5, 0x84)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000025c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffcdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4)
syz_open_dev$vim2m(&(0x7f0000000000), 0xdcc2, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000080))
r4 = syz_open_procfs(r1, &(0x7f0000000040)='net/vlan/config\x00')
read(r4, &(0x7f0000001a00)=""/177, 0xb1)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000))
r5 = syz_open_procfs(0x0, 0x0)
shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0x0)
read$FUSE(r5, &(0x7f0000002640)={0x2020}, 0x2020)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = fsopen(&(0x7f00000000c0)='nfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)

4.845035153s ago: executing program 6 (id=2595):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x80240, 0x0)
r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
getresuid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)=<r3=>0x0)
ioctl$NS_GET_PARENT(r1, 0xb702, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x1100000, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',noextend,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB="2c6c6f6f73652c76657273696f6e3d653d6d6d61702c63616368653d6d6d61702c63616368653d6e6f6e652c6163636573733d616e792c63616368653d6e6f6e652c7375626a5f747970653d292c6173796e632c6f62df33114770653d2c007f0212e4d17b518db024"])
r4 = dup(r0)
ioctl$BLKRRPART(r4, 0x125f, 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x85)
chroot(0x0)
pivot_root(0x0, &(0x7f00000003c0)='./file0/../file0/../file0/../file0\x00')
move_mount(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r4, 0xc038943b, &(0x7f0000000080)={0x200, 0x18, '\x00', 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0]})

3.404543976s ago: executing program 3 (id=2596):
r0 = syz_open_dev$dmmidi(&(0x7f0000000200), 0x2, 0x8901)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, &(0x7f00000001c0))
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x34, 0x4, 0x0, 0x0, 0xd0, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x9, [0x3ff, 0x5, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@dev={0xac, 0x14, 0x14, 0xa}}, {@remote, 0x8}, {@dev, 0x659}, {@empty}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@multicast1, 0xffffffff}, {@private=0xa010100, 0x7}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@broadcast, 0x1}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0x77, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x13, 0x0, [@dev={0xac, 0x14, 0x14, 0x43}, @rand_addr=0x64010101, @private=0xa010102, @private=0xa010100]}]}}}}})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b)
r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000002b80)=[{&(0x7f0000002740)=""/250, 0xfa}], 0x1, 0xf188, 0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0)
dup(r2)
r5 = socket$inet6(0xa, 0x2, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_QOS_MAP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="180006c900", @ANYRES16=r7, @ANYBLOB="010000000000000000006800000008000300", @ANYRES32=r8, @ANYBLOB], 0x1c}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r9 = getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r10=>0xffffffffffffffff})
connect$unix(r10, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES8=r4, @ANYRES16=r9], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x10)
keyctl$revoke(0x3, 0x0)
add_key$keyring(&(0x7f0000000100), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0x0)

3.297821185s ago: executing program 1 (id=2597):
setresgid(0x0, 0xee00, 0xee01)
setregid(0x0, 0x0)
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000040)=0xffffffff)

3.297256015s ago: executing program 6 (id=2598):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000ffffff970085000000070000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000028008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0)

3.265519415s ago: executing program 1 (id=2599):
openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
mount(&(0x7f0000000180)=@filename='./file1\x00', 0x0, 0x0, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
timer_create(0x1, &(0x7f00000004c0)={0x0, 0x30, 0x1}, &(0x7f0000000500)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000580), &(0x7f00000005c0))
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000400)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0)

3.191775584s ago: executing program 7 (id=2600):
syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000df713820f0031d58381f010203010902240001000010000904e50002ff0107fe0905852eff03000100090582"], 0x0)
mount$tmpfs(0x0, 0x0, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB='gid=', @ANYRESHEX])
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) (async)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) (async)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0)
prctl$PR_SET_SECCOMP(0x41, 0x1, 0x0) (async)
prctl$PR_SET_SECCOMP(0x41, 0x1, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xf, 0x11012, r0, 0x0) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xf, 0x11012, r0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@uuid_off}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
statfs(&(0x7f0000000040)='./bus\x00', &(0x7f0000000100)=""/43)
mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='omfs\x00', 0x200000, &(0x7f0000000340))
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x7, 0xc8, @any, 0x1, 0x7, 0x7f, 0x4, 0x73a4, 0x6}}}, 0x14)

2.433759893s ago: executing program 6 (id=2601):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3)
ftruncate(r1, 0xffff)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
semget$private(0x0, 0x4, 0x20)
recvmmsg(r2, 0x0, 0x0, 0x0, 0x0)
r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'dh\x00', 0x1, 0x4, 0x200072}, 0x2c)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'lblcr\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x0, 0xcb, 0x12d5f, 0x12d5c}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, &(0x7f0000000000)={0x13})
r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x80300, 0x0)
preadv(r7, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x9569a2dc}], 0x1, 0x0, 0x0)
getsockopt$inet6_tcp_buf(r7, 0x6, 0x1c, &(0x7f0000000480)=""/4096, &(0x7f0000000180)=0x1000)
getdents(r4, &(0x7f0000000080)=""/133, 0x85)
getdents64(r0, &(0x7f00000001c0)=""/147, 0x93)

2.373028966s ago: executing program 3 (id=2602):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140))
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1})
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000cc0)={0x1})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r3)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @remote}, &(0x7f0000000300)=0xc)
socket$nl_route(0x10, 0x3, 0x0)
r5 = syz_open_dev$dri(0x0, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1e"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0), 0xc, 0x0}, 0x0)
write$binfmt_script(r6, &(0x7f0000000040), 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000280)={0x0, 0x0, 0x0})
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10)

2.343100259s ago: executing program 1 (id=2603):
r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
r1 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f00000001c0)={'\x00', 0x0, 0x6, 0x4d, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "e300", "5161dc20", "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "15a200000000000089827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]})
r2 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc2b02)
ioctl$CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000d40)={0x0, 0x0, 0x4, 0x0, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059"})
r3 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000340)={"6d71f879", 0x5, 0x0, 0x0, 0x0, 0x0, "244a18d1c4e6469a005caf0c0ff58a", "ce4250d8", "bf513d1d", "136712b9", ["27e203a56a36ac4f0b8b8c4f", "5e10229555954b0f02cd1469", "cb0e83d3a15978155c384d00", "79f56ca74227234da829edb7"]})
ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=<r4=>0x0)
ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000300)={r4})
prlimit64(0x0, 0xe, 0x0, 0x0)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f00000001c0)='.\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x905891, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file1\x00', 0x0, 0x1, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000240)={0x34041, 0x0, 0x8}, 0x18)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getpgid(r5)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x20, 0x0)
r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
dup2(r7, r7)

1.43993371s ago: executing program 3 (id=2604):
socket$inet6(0xa, 0x800000000000002, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
sendto$phonet(0xffffffffffffffff, 0x0, 0x0, 0x240080d1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030"], 0x15)
r4 = dup(r3)
write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000e40), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000e80)={0x34, r6, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB, @ANYRESHEX=r4, @ANYBLOB=',cache='])
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1800800000000000000000000300000018110000580a7b4ef72fd846afbc04147f405c31d9599da140d08dd3f0e8e37c1e59f587cebbc243e45804a5", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
r7 = creat(&(0x7f0000000440)='./file1\x00', 0x0)
open_by_handle_at(r7, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000f800000015000000fb150605e8371f2efe0868327a31a7059ead85"], 0x39400)

1.278813987s ago: executing program 5 (id=2605):
syz_init_net_socket$ax25(0x3, 0x3, 0x0)
socket$kcm(0x29, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x0)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f91424fc601000070005000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r7=>0x0})
sendto$packet(r6, &(0x7f0000000100)="f257a80002000000000000850806", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14)
writev(r4, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f0000000140)="04a142522d9776", 0x7}], 0x2)

0s ago: executing program 3 (id=2606):
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil})
r3 = dup(r2)
ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480))
syz_io_uring_setup(0x5c39, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x2, 0x400003}, &(0x7f0000ffe000), &(0x7f0000ffe000))

kernel console output (not intermixed with test programs):

][ T5877] usb 4-1: 0:2 : does not exist
[  665.580111][   T45] usb 6-1: Using ep0 maxpacket: 8
[  665.597291][   T45] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  665.621622][ T5877] usb 4-1: USB disconnect, device number 52
[  665.631311][   T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  665.642861][   T45] usb 6-1: Product: syz
[  665.647058][   T45] usb 6-1: Manufacturer: syz
[  665.724216][T11058] udevd[11058]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  665.850257][   T45] usb 6-1: SerialNumber: syz
[  665.862266][   T45] usb 6-1: config 0 descriptor??
[  665.869875][   T45] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  666.530802][   T45] gspca_sonixj: reg_w1 err -110
[  666.536131][   T45] sonixj 6-1:0.0: probe with driver sonixj failed with error -110
[  666.939555][   T29] audit: type=1326 audit(1730317628.237:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14563 comm="syz.5.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7589b7e719 code=0x7ffc0000
[  667.016402][T14595] team_slave_0: entered allmulticast mode
[  667.048376][   T29] audit: type=1326 audit(1730317628.237:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14563 comm="syz.5.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7589b7e719 code=0x7ffc0000
[  667.081143][   T29] audit: type=1326 audit(1730317628.237:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14563 comm="syz.5.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f7589b7e719 code=0x7ffc0000
[  667.108879][   T29] audit: type=1326 audit(1730317628.237:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14563 comm="syz.5.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7589b7e719 code=0x7ffc0000
[  667.140230][   T29] audit: type=1326 audit(1730317628.237:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14563 comm="syz.5.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7589b7e719 code=0x7ffc0000
[  667.388803][   T29] audit: type=1326 audit(1730317628.237:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14563 comm="syz.5.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7589b7e719 code=0x7ffc0000
[  667.412783][   T29] audit: type=1326 audit(1730317628.237:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14563 comm="syz.5.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7589b7e719 code=0x7ffc0000
[  667.436796][   T29] audit: type=1326 audit(1730317628.237:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14563 comm="syz.5.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7589b7e719 code=0x7ffc0000
[  667.460447][   T29] audit: type=1326 audit(1730317628.317:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14563 comm="syz.5.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7589b7e719 code=0x7ffc0000
[  667.484619][   T29] audit: type=1326 audit(1730317628.317:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14563 comm="syz.5.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7589b7e719 code=0x7ffc0000
[  667.508327][   T29] audit: type=1326 audit(1730317628.377:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14563 comm="syz.5.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f7589b7e719 code=0x7ffc0000
[  667.532341][   T29] audit: type=1326 audit(1730317628.377:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14563 comm="syz.5.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7589b7e719 code=0x7ffc0000
[  667.555993][   T29] audit: type=1326 audit(1730317628.377:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14563 comm="syz.5.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7589b7e719 code=0x7ffc0000
[  667.579664][   T29] audit: type=1326 audit(1730317628.377:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14563 comm="syz.5.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7589b7e719 code=0x7ffc0000
[  667.603336][   T29] audit: type=1326 audit(1730317628.377:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14563 comm="syz.5.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7589b7e719 code=0x7ffc0000
[  667.635850][   T29] audit: type=1326 audit(1730317628.377:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14563 comm="syz.5.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7589b7e719 code=0x7ffc0000
[  667.660711][   T29] audit: type=1326 audit(1730317628.377:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14563 comm="syz.5.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7589b7e31b code=0x7ffc0000
[  667.771365][ T5877] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  667.933406][ T5877] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  667.942298][ T5877] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  667.959796][ T5877] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  667.983872][ T5877] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  668.002024][ T5877] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  668.016089][ T5877] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  668.025872][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  668.034795][ T5877] usb 2-1: Product: syz
[  668.040852][ T5877] usb 2-1: Manufacturer: syz
[  668.061987][ T5877] cdc_wdm 2-1:1.0: skipping garbage
[  668.067381][ T5877] cdc_wdm 2-1:1.0: skipping garbage
[  668.088579][ T5877] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  668.095807][ T5877] cdc_wdm 2-1:1.0: Unknown control protocol
[  668.131715][T14616] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1980'.
[  668.586278][    T8] usb 2-1: USB disconnect, device number 52
[  668.983474][    T8] usb 6-1: USB disconnect, device number 61
[  669.911204][    T8] usb 6-1: new high-speed USB device number 62 using dummy_hcd
[  670.143034][    T8] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  670.155112][    T8] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  670.165164][    T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  670.173693][    T8] usb 6-1: SerialNumber: syz
[  670.358678][    T8] usb 6-1: bad CDC descriptors
[  670.491831][T14638] netlink: 'syz.3.1986': attribute type 33 has an invalid length.
[  670.492023][T14638] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1986'.
[  671.496298][T14644] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  672.230099][T14651] random: crng reseeded on system resumption
[  672.628354][    T8] usb 6-1: USB disconnect, device number 62
[  673.402755][   T29] kauditd_printk_skb: 5 callbacks suppressed
[  673.402772][   T29] audit: type=1400 audit(1730317634.707:1192): avc:  denied  { ioctl } for  pid=14649 comm="syz.3.1989" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  673.771406][    T8] usb 6-1: new high-speed USB device number 63 using dummy_hcd
[  673.941339][    T8] usb 6-1: Using ep0 maxpacket: 8
[  673.966691][    T8] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  673.978332][    T8] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  673.994198][    T8] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  674.008695][    T8] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  674.026263][    T8] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  674.040042][    T8] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  674.050182][    T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  674.341347][T14572] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  675.149065][    T8] usb 6-1: GET_CAPABILITIES returned 0
[  675.154953][    T8] usbtmc 6-1:16.0: can't read capabilities
[  675.350727][T14572] usb 4-1: Using ep0 maxpacket: 16
[  675.357464][T14572] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  675.371434][T14572] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  675.382366][T14572] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  675.392549][T14572] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  675.419688][T14572] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  675.517261][T14572] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  675.527536][T14572] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  675.538343][T14572] usb 4-1: Manufacturer: syz
[  675.549944][T14572] usb 4-1: config 0 descriptor??
[  676.268262][T14572] rc_core: IR keymap rc-hauppauge not found
[  676.276091][T14572] Registered IR keymap rc-empty
[  676.281135][T14572] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  676.447305][T14572] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  676.471892][T14572] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  676.486173][T14572] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input32
[  676.585596][T14705] netlink: 'syz.1.2003': attribute type 33 has an invalid length.
[  676.593598][T14705] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2003'.
[  677.037978][ T5877] usb 6-1: USB disconnect, device number 63
[  677.044205][   T29] audit: type=1326 audit(1730317637.937:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14700 comm="syz.1.2003" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c7117e719 code=0x0
[  677.067121][    C1] vkms_vblank_simulate: vblank timer overrun
[  677.210763][T14572] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  677.231350][T14572] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  677.252855][T14572] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  677.272010][T14572] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  677.291288][T14572] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  677.320788][T14572] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  677.371293][T14572] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  677.395941][T14713] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2007'.
[  677.408269][T14572] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  677.442133][T14716] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2008'.
[  677.456942][T14572] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  677.501412][T14572] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  677.554874][T14572] mceusb 4-1:0.0: Registered  with mce emulator interface version 1
[  677.573896][T14572] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  677.640340][T14718] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  678.230519][    T8] usb 4-1: USB disconnect, device number 53
[  679.648777][T14744] netlink: 'syz.1.2015': attribute type 33 has an invalid length.
[  679.656685][T14744] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2015'.
[  679.741892][   T29] audit: type=1326 audit(1730317640.977:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14740 comm="syz.1.2015" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c7117e719 code=0x0
[  680.647973][T14754] afs: Unknown parameter 'd9n'
[  681.063694][ T5877] usb 7-1: new high-speed USB device number 38 using dummy_hcd
[  681.585601][T14762] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2020'.
[  681.674824][   T29] audit: type=1400 audit(1730317642.967:1195): avc:  denied  { connect } for  pid=14764 comm="syz.1.2021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  681.741692][ T5877] usb 7-1: Using ep0 maxpacket: 8
[  681.769508][ T5877] usb 7-1: config 255 has too many interfaces: 252, using maximum allowed: 32
[  681.782915][ T5877] usb 7-1: config 255 has 1 interface, different from the descriptor's value: 252
[  681.837559][ T5877] usb 7-1: New USB device found, idVendor=061d, idProduct=c120, bcdDevice=e3.67
[  681.883636][ T5877] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=13
[  681.924440][ T5877] usb 7-1: SerialNumber: syz
[  682.350565][ T5877] usb 7-1: can't set config #255, error -71
[  682.359510][ T5877] usb 7-1: USB disconnect, device number 38
[  684.439060][T14572] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  684.457763][   T29] audit: type=1326 audit(1730317645.757:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14783 comm="syz.5.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7589b7e719 code=0x7fc00000
[  684.515490][   T29] audit: type=1326 audit(1730317645.757:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14783 comm="syz.5.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7589b7e719 code=0x7fc00000
[  684.564189][   T29] audit: type=1326 audit(1730317645.757:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14783 comm="syz.5.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7589b7e719 code=0x7fc00000
[  684.593083][   T29] audit: type=1326 audit(1730317645.757:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14783 comm="syz.5.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7589b7e719 code=0x7fc00000
[  684.618678][T14572] usb 4-1: Using ep0 maxpacket: 16
[  684.636021][T14572] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  684.651254][T14572] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  684.670495][   T29] audit: type=1326 audit(1730317645.757:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14783 comm="syz.5.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7589b7e719 code=0x7fc00000
[  684.699792][T14572] usb 4-1: Product: syz
[  684.704383][T14572] usb 4-1: Manufacturer: syz
[  684.709562][T14572] usb 4-1: SerialNumber: syz
[  684.722150][   T29] audit: type=1326 audit(1730317645.757:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14783 comm="syz.5.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7589b7e719 code=0x7fc00000
[  684.747083][T14572] usb 4-1: config 0 descriptor??
[  684.753310][   T29] audit: type=1326 audit(1730317645.757:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14783 comm="syz.5.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7589b7e719 code=0x7fc00000
[  684.782506][   T29] audit: type=1326 audit(1730317645.757:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14783 comm="syz.5.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7589b7e719 code=0x7fc00000
[  684.807141][   T29] audit: type=1326 audit(1730317645.757:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14783 comm="syz.5.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7589b7e719 code=0x7fc00000
[  684.834447][T14800] xt_hashlimit: max too large, truncated to 1048576
[  684.841446][T14800] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  684.850723][   T29] audit: type=1326 audit(1730317645.757:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14783 comm="syz.5.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7589b7e719 code=0x7fc00000
[  684.876641][   T29] audit: type=1326 audit(1730317645.757:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14783 comm="syz.5.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7589b7e719 code=0x7fc00000
[  684.905187][   T29] audit: type=1326 audit(1730317645.757:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14783 comm="syz.5.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7589b7e719 code=0x7fc00000
[  684.928952][    C0] vkms_vblank_simulate: vblank timer overrun
[  684.941245][   T29] audit: type=1326 audit(1730317645.757:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14783 comm="syz.5.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7589b7e719 code=0x7fc00000
[  684.964705][    C0] vkms_vblank_simulate: vblank timer overrun
[  684.977459][   T29] audit: type=1326 audit(1730317645.757:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14783 comm="syz.5.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7589b7e719 code=0x7fc00000
[  685.061332][   T29] audit: type=1326 audit(1730317645.757:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14783 comm="syz.5.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7589b7e719 code=0x7fc00000
[  685.283033][T14572] dvb_usb_dtv5100 4-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110
[  686.561803][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  686.568146][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  686.917260][    T9] usb 4-1: USB disconnect, device number 54
[  688.497080][T14857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  688.509176][T14857] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  688.522916][ T5828] Bluetooth: hci0: ACL packet for unknown connection handle 201
[  688.530147][T14848] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  688.611508][ T5909] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  688.772040][ T5909] usb 4-1: Using ep0 maxpacket: 8
[  688.794594][ T5909] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  688.806582][T14868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  688.815478][ T5909] usb 4-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b
[  688.827693][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  688.827853][T14868] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  688.836215][ T5909] usb 4-1: Product: syz
[  688.850812][T14866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  688.852611][ T5909] usb 4-1: Manufacturer: syz
[  688.864344][T14866] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  688.868949][ T5909] usb 4-1: SerialNumber: syz
[  688.878798][ T5909] usb 4-1: config 0 descriptor??
[  688.889898][ T5909] gspca_main: stk014-2.14.0 probing 05e1:0893
[  688.897819][ T5909] usb 4-1: selecting invalid altsetting 1
[  689.041299][    T9] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  689.089201][ T5909] gspca_stk014: init reg: 0x00
[  689.091096][T14869] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2045'.
[  689.094190][ T5909] stk014 4-1:0.0: probe with driver stk014 failed with error -5
[  689.197344][    T9] usb 2-1: Using ep0 maxpacket: 8
[  689.206894][    T9] usb 2-1: too many configurations: 217, using maximum allowed: 8
[  689.223000][    T8] usb 4-1: USB disconnect, device number 55
[  689.230864][    T9] usb 2-1: unable to read config index 0 descriptor/start: -61
[  689.247146][    T9] usb 2-1: can't read configurations, error -61
[  689.451454][    T9] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  689.513176][T14879] 9pnet_fd: Insufficient options for proto=fd
[  689.626308][T14883] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  689.759301][T14886] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2053'.
[  689.832169][    T9] usb 2-1: Using ep0 maxpacket: 8
[  689.839395][    T9] usb 2-1: too many configurations: 217, using maximum allowed: 8
[  689.848894][    T9] usb 2-1: unable to read config index 0 descriptor/start: -61
[  689.856728][    T9] usb 2-1: can't read configurations, error -61
[  689.863541][    T9] usb usb2-port1: attempt power cycle
[  690.201952][    T9] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[  690.231976][    T9] usb 2-1: Using ep0 maxpacket: 8
[  690.239650][    T9] usb 2-1: too many configurations: 217, using maximum allowed: 8
[  690.257482][    T9] usb 2-1: unable to read config index 0 descriptor/start: -61
[  690.266891][    T9] usb 2-1: can't read configurations, error -61
[  690.309922][T14888] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2054'.
[  690.361434][   T29] kauditd_printk_skb: 58 callbacks suppressed
[  690.361451][   T29] audit: type=1400 audit(1730317651.667:1269): avc:  denied  { listen } for  pid=14890 comm="syz.3.2055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  690.388488][   T29] audit: type=1400 audit(1730317651.667:1270): avc:  denied  { accept } for  pid=14890 comm="syz.3.2055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  690.408339][ T5828] Bluetooth: hci0: command 0x0406 tx timeout
[  690.408539][    T9] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[  690.422332][T14854] Bluetooth: hci0: Opcode 0x080f failed: -110
[  690.452696][    T9] usb 2-1: Using ep0 maxpacket: 8
[  690.458663][    T9] usb 2-1: too many configurations: 217, using maximum allowed: 8
[  690.470615][    T9] usb 2-1: unable to read config index 0 descriptor/start: -61
[  690.479041][    T9] usb 2-1: can't read configurations, error -61
[  690.485912][    T9] usb usb2-port1: unable to enumerate USB device
[  690.806811][T14895] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2056'.
[  691.491208][   T29] audit: type=1400 audit(1730317652.767:1271): avc:  denied  { mount } for  pid=14896 comm="syz.6.2057" name="/" dev="configfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  691.532618][   T29] audit: type=1400 audit(1730317652.767:1272): avc:  denied  { search } for  pid=14896 comm="syz.6.2057" name="/" dev="configfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  691.612509][   T29] audit: type=1400 audit(1730317652.777:1273): avc:  denied  { mounton } for  pid=14896 comm="syz.6.2057" path="/239/file0" dev="configfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  692.027462][   T29] audit: type=1400 audit(1730317653.277:1274): avc:  denied  { connect } for  pid=14906 comm="syz.7.2060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  692.492883][ T5828] Bluetooth: hci0: command 0x0406 tx timeout
[  692.914957][   T29] audit: type=1326 audit(1730317653.957:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14913 comm="syz.1.2061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7117e719 code=0x7ffc0000
[  693.063652][T14922] netlink: 'syz.5.2062': attribute type 33 has an invalid length.
[  693.071697][T14922] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2062'.
[  693.611543][   T29] audit: type=1326 audit(1730317653.957:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14913 comm="syz.1.2061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7117e719 code=0x7ffc0000
[  694.366777][   T29] audit: type=1326 audit(1730317653.957:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14913 comm="syz.1.2061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4c7117e719 code=0x7ffc0000
[  694.525564][   T29] audit: type=1326 audit(1730317653.957:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14913 comm="syz.1.2061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7117e719 code=0x7ffc0000
[  695.291309][    T8] usb 7-1: new full-speed USB device number 39 using dummy_hcd
[  695.346082][T14937] Process accounting resumed
[  695.547851][T14947] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2071'.
[  695.884480][T14951] netlink: 'syz.1.2070': attribute type 33 has an invalid length.
[  695.892549][T14951] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2070'.
[  696.335860][   T29] kauditd_printk_skb: 3 callbacks suppressed
[  696.335879][   T29] audit: type=1326 audit(1730317657.357:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14942 comm="syz.1.2070" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c7117e719 code=0x0
[  696.614502][    T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  696.625605][    T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  696.636633][    T8] usb 7-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.00
[  696.646447][    T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  697.137705][    T8] usb 7-1: config 0 descriptor??
[  697.245735][T14935] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  697.491814][T14964] xt_hashlimit: overflow, try lower: 3/0
[  697.724507][    T8] usbhid 7-1:0.0: can't add hid device: -71
[  697.741373][    T8] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  697.767269][    T8] usb 7-1: USB disconnect, device number 39
[  697.855524][T14967] netlink: 'syz.5.2076': attribute type 33 has an invalid length.
[  697.863465][T14967] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2076'.
[  697.879421][   T29] audit: type=1326 audit(1730317659.177:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14966 comm="syz.5.2076" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7589b7e719 code=0x0
[  697.978026][T14974] netlink: 'syz.3.2077': attribute type 33 has an invalid length.
[  697.986013][T14974] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2077'.
[  698.142907][   T29] audit: type=1326 audit(1730317659.327:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14968 comm="syz.3.2077" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9d7f57e719 code=0x0
[  698.724497][T14979] input: syz0 as /devices/virtual/input/input33
[  698.895059][   T29] audit: type=1400 audit(1730317660.097:1285): avc:  denied  { listen } for  pid=14977 comm="syz.5.2079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  699.888574][T14989] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2082'.
[  700.401009][T14995] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2083'.
[  700.986396][ T5917] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  701.101354][   T45] usb 7-1: new high-speed USB device number 40 using dummy_hcd
[  701.143238][ T5917] usb 4-1: config 0 has an invalid interface number: 156 but max is 1
[  701.155580][ T5917] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  701.169852][ T5917] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  701.180763][ T5917] usb 4-1: config 0 has no interface number 0
[  701.195754][ T5917] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7
[  701.208793][ T5917] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  701.219635][ T5917] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  701.230545][ T5917] usb 4-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  701.246267][ T5917] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  701.256323][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  701.282683][   T45] usb 7-1: Using ep0 maxpacket: 8
[  701.301549][ T5917] usb 4-1: config 0 descriptor??
[  701.321238][   T45] usb 7-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  701.321862][ T5917] gspca_main: spca561-2.14.0 probing abcd:cdee
[  701.341587][   T45] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  701.358719][   T45] usb 7-1: Product: syz
[  701.365514][   T45] usb 7-1: Manufacturer: syz
[  701.370495][   T45] usb 7-1: SerialNumber: syz
[  701.400113][   T45] usb 7-1: config 0 descriptor??
[  701.413808][   T45] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  701.530023][ T5917] spca561 4-1:0.156: probe with driver spca561 failed with error -22
[  701.545595][ T5917] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  701.555886][ T5917] usb 4-1: MIDIStreaming interface descriptor not found
[  701.705339][T15009] xt_hashlimit: overflow, try lower: 3/0
[  701.802703][ T5917] usb 4-1: USB disconnect, device number 56
[  701.951355][ T5827] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[  702.139111][T15027] netlink: 'syz.5.2089': attribute type 33 has an invalid length.
[  702.147129][T15027] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2089'.
[  702.167020][   T29] audit: type=1326 audit(1730317663.467:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15014 comm="syz.5.2089" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7589b7e719 code=0x0
[  702.542511][ T5827] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  702.552708][ T5827] usb 2-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00
[  702.565196][T15030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  702.579362][ T5827] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  702.595615][ T5827] usb 2-1: config 0 descriptor??
[  702.601052][T15030] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  702.630460][   T29] audit: type=1400 audit(1730317663.927:1287): avc:  denied  { mount } for  pid=14999 comm="syz.6.2084" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  702.658237][   T29] audit: type=1400 audit(1730317663.957:1288): avc:  denied  { accept } for  pid=14999 comm="syz.6.2084" lport=48320 faddr=::ffff:100.1.1.1 fport=65532 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  702.753163][   T45] gspca_sonixj: reg_r err -110
[  702.759954][   T45] sonixj 7-1:0.0: probe with driver sonixj failed with error -110
[  702.786521][T15034] bpf: Bad value for 'uid'
[  702.803036][   T29] audit: type=1400 audit(1730317664.047:1289): avc:  denied  { setopt } for  pid=14999 comm="syz.6.2084" lport=48320 faddr=::ffff:100.1.1.1 fport=65532 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  703.955835][ T5827] hid-steam 0003:28DE:1205.0018: : USB HID v0.00 Device [HID 28de:1205] on usb-dummy_hcd.1-1/input0
[  704.318269][T14572] usb 7-1: USB disconnect, device number 40
[  704.339841][T15011] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2088'.
[  704.350211][ T5827] hid-steam 0003:28DE:1205.0018: Steam Controller 'XXXXXXXXXX' connected
[  704.403431][   T29] audit: type=1400 audit(1730317665.687:1290): avc:  denied  { unmount } for  pid=9162 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  704.432888][ T5917] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  704.449242][ T5827] input: Steam Deck as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28DE:1205.0018/input/input34
[  704.490041][ T5827] input: Steam Deck Motion Sensors as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28DE:1205.0018/input/input35
[  704.553327][T15011] binder_alloc: binder_alloc_mmap_handler: 15010 20ffc000-20ffd000 already mapped failed -16
[  704.630901][T15053] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2095'.
[  705.393968][ T5827] hid-steam 0003:28DE:1205.0019: hidraw0: USB HID v0.00 Device [HID 28de:1205] on usb-dummy_hcd.1-1/input0
[  705.408132][T15052] xt_hashlimit: invalid interval
[  705.412119][ T5917] usb 4-1: Using ep0 maxpacket: 8
[  705.426852][ T5827] usb 2-1: USB disconnect, device number 57
[  705.438254][ T5917] usb 4-1: New USB device found, idVendor=061d, idProduct=c120, bcdDevice=e3.67
[  705.762722][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  705.812667][ T5917] usb 4-1: config 0 descriptor??
[  705.881534][ T5917] usb 4-1: can't set config #0, error -71
[  705.906976][   T29] audit: type=1400 audit(1730317667.207:1291): avc:  denied  { name_bind } for  pid=15061 comm="syz.7.2098" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  705.915234][ T5917] usb 4-1: USB disconnect, device number 57
[  706.143365][ T5827] hid-steam 0003:28DE:1205.0018: Steam Controller 'XXXXXXXXXX' disconnected
[  706.712784][  T964] kworker/0:2 (964) used greatest stack depth: 20464 bytes left
[  706.932578][T15078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  706.975443][T15078] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  707.311601][ T5827] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[  707.943843][ T5917] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  708.192448][ T5827] usb 2-1: Using ep0 maxpacket: 32
[  708.311645][ T5827] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  708.357586][ T5827] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  708.387237][ T5827] usb 2-1: config 1 has no interface number 1
[  708.400221][ T5827] usb 2-1: too many endpoints for config 1 interface 2 altsetting 0: 91, using maximum allowed: 30
[  709.360626][ T5827] usb 2-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 91
[  709.377341][ T5827] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  709.386591][ T5827] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  709.394748][ T5827] usb 2-1: Product: syz
[  709.399402][ T5827] usb 2-1: Manufacturer: syz
[  709.404122][ T5827] usb 2-1: SerialNumber: syz
[  709.687007][ T5827] usb 2-1: can't set config #1, error -71
[  709.707385][ T5827] usb 2-1: USB disconnect, device number 58
[  709.883615][T15106] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2110'.
[  711.738773][T15131] netlink: 'syz.5.2114': attribute type 12 has an invalid length.
[  711.752934][T15132] bpf: Bad value for 'uid'
[  711.951560][   T29] audit: type=1326 audit(1730317673.237:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15129 comm="syz.5.2114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7589b7e719 code=0x7fc00000
[  711.975865][ T5911] usb 7-1: new high-speed USB device number 41 using dummy_hcd
[  711.990007][   T29] audit: type=1326 audit(1730317673.237:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15129 comm="syz.5.2114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7589b7e719 code=0x7fc00000
[  712.014039][   T29] audit: type=1326 audit(1730317673.237:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15129 comm="syz.5.2114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7589b7e719 code=0x7fc00000
[  712.039220][   T29] audit: type=1326 audit(1730317673.237:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15129 comm="syz.5.2114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7589b7e719 code=0x7fc00000
[  712.041768][ T5917] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[  712.064511][   T29] audit: type=1326 audit(1730317673.237:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15129 comm="syz.5.2114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7589b7e719 code=0x7fc00000
[  712.097057][T15136] xt_hashlimit: overflow, try lower: 3/0
[  712.115168][   T29] audit: type=1326 audit(1730317673.237:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15129 comm="syz.5.2114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7589b7e719 code=0x7fc00000
[  712.151625][   T29] audit: type=1326 audit(1730317673.237:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15129 comm="syz.5.2114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7589b7e719 code=0x7fc00000
[  712.201321][ T5911] usb 7-1: Using ep0 maxpacket: 8
[  712.210759][ T5911] usb 7-1: too many configurations: 31, using maximum allowed: 8
[  712.223736][   T29] audit: type=1326 audit(1730317673.237:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15129 comm="syz.5.2114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7589b7e719 code=0x7fc00000
[  712.234855][ T5911] usb 7-1: config index 0 descriptor too short (expected 930, got 36)
[  712.255827][ T5911] usb 7-1: config 61 has too many interfaces: 110, using maximum allowed: 32
[  712.265104][ T5911] usb 7-1: config 61 has an invalid descriptor of length 191, skipping remainder of the config
[  712.267374][   T29] audit: type=1326 audit(1730317673.237:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15129 comm="syz.5.2114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7589b7e719 code=0x7fc00000
[  712.275756][ T5911] usb 7-1: config 61 has 0 interfaces, different from the descriptor's value: 110
[  712.299501][   T29] audit: type=1326 audit(1730317673.237:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15129 comm="syz.5.2114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7589b7e719 code=0x7fc00000
[  712.320466][ T5911] usb 7-1: config index 1 descriptor too short (expected 930, got 36)
[  712.340597][ T5917] usb 2-1: Using ep0 maxpacket: 8
[  712.345883][ T5911] usb 7-1: config 61 has too many interfaces: 110, using maximum allowed: 32
[  712.354863][ T5911] usb 7-1: config 61 has an invalid descriptor of length 191, skipping remainder of the config
[  712.368930][ T5911] usb 7-1: config 61 has 0 interfaces, different from the descriptor's value: 110
[  712.384186][ T5911] usb 7-1: config index 2 descriptor too short (expected 930, got 36)
[  712.393080][ T5911] usb 7-1: config 61 has too many interfaces: 110, using maximum allowed: 32
[  712.402182][ T5911] usb 7-1: config 61 has an invalid descriptor of length 191, skipping remainder of the config
[  712.412715][ T5911] usb 7-1: config 61 has 0 interfaces, different from the descriptor's value: 110
[  713.150994][ T5917] usb 2-1: New USB device found, idVendor=061d, idProduct=c120, bcdDevice=e3.67
[  713.160293][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  713.174484][ T5917] usb 2-1: config 0 descriptor??
[  713.179797][ T5911] usb 7-1: config index 3 descriptor too short (expected 930, got 36)
[  713.188269][ T5911] usb 7-1: config 61 has too many interfaces: 110, using maximum allowed: 32
[  713.197115][ T5911] usb 7-1: config 61 has an invalid descriptor of length 191, skipping remainder of the config
[  713.207505][ T5911] usb 7-1: config 61 has 0 interfaces, different from the descriptor's value: 110
[  713.218006][ T5917] quatech2 2-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected
[  713.237721][ T5911] usb 7-1: config index 4 descriptor too short (expected 930, got 36)
[  713.246242][ T5911] usb 7-1: config 61 has too many interfaces: 110, using maximum allowed: 32
[  713.298767][ T5911] usb 7-1: config 61 has an invalid descriptor of length 191, skipping remainder of the config
[  713.329183][ T5911] usb 7-1: config 61 has 0 interfaces, different from the descriptor's value: 110
[  713.476455][ T5911] usb 7-1: config index 5 descriptor too short (expected 930, got 36)
[  713.484710][ T5911] usb 7-1: config 61 has too many interfaces: 110, using maximum allowed: 32
[  713.497348][ T5911] usb 7-1: config 61 has an invalid descriptor of length 191, skipping remainder of the config
[  713.508820][ T5911] usb 7-1: config 61 has 0 interfaces, different from the descriptor's value: 110
[  713.518159][ T5917] usb 2-1: qt2_setup_urbs - submit read urb failed -8
[  713.525238][ T5827] usb 6-1: new high-speed USB device number 64 using dummy_hcd
[  713.544439][ T5917] quatech2 2-1:0.0: probe with driver quatech2 failed with error -8
[  713.686887][ T5911] usb 7-1: config index 6 descriptor too short (expected 930, got 36)
[  713.695685][ T5827] usb 6-1: Using ep0 maxpacket: 8
[  713.745730][ T5827] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  713.764706][ T5911] usb 7-1: config 61 has too many interfaces: 110, using maximum allowed: 32
[  713.883414][ T5827] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  713.984906][ T5911] usb 7-1: config 61 has an invalid descriptor of length 191, skipping remainder of the config
[  714.039378][ T5827] usb 6-1: Product: â �
[  714.056303][ T5827] usb 6-1: Manufacturer: ÐŽ
[  714.062286][ T5911] usb 7-1: config 61 has 0 interfaces, different from the descriptor's value: 110
[  714.071996][ T5827] usb 6-1: SerialNumber: 
[  714.095029][ T5911] usb 7-1: config index 7 descriptor too short (expected 930, got 36)
[  714.107067][ T5911] usb 7-1: config 61 has too many interfaces: 110, using maximum allowed: 32
[  714.118384][ T5911] usb 7-1: config 61 has an invalid descriptor of length 191, skipping remainder of the config
[  714.130635][ T5911] usb 7-1: config 61 has 0 interfaces, different from the descriptor's value: 110
[  714.142757][ T5911] usb 7-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00
[  714.152899][ T5911] usb 7-1: New USB device strings: Mfr=0, Product=242, SerialNumber=0
[  714.168808][ T5911] usb 7-1: Product: syz
[  714.443071][T15158] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2117'.
[  714.531310][ T5909] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[  714.691266][ T5909] usb 4-1: Using ep0 maxpacket: 32
[  714.710387][ T5909] usb 4-1: config 0 has an invalid interface number: 9 but max is 0
[  714.731445][ T5909] usb 4-1: config 0 has no interface number 0
[  714.789041][ T5909] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[  714.803902][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  714.836494][ T5909] usb 4-1: Product: syz
[  714.845970][ T5917] usb 2-1: USB disconnect, device number 59
[  714.907024][ T5909] usb 4-1: Manufacturer: syz
[  714.911718][ T5909] usb 4-1: SerialNumber: syz
[  714.936935][ T5909] usb 4-1: config 0 descriptor??
[  714.949274][ T5909] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[  715.007409][ T5911] usb 7-1: USB disconnect, device number 41
[  715.251302][ T5909] gspca_topro: reg_w err -71
[  715.281677][ T5917] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[  715.304535][ T5909] gspca_topro: Sensor soi763a
[  715.357599][ T5199] udevd[5199]: worker [11058] terminated by signal 33 (Unknown signal 33)
[  715.394745][ T5199] udevd[5199]: worker [11058] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.9/video4linux/video103'
[  715.421465][ T5909] usb 4-1: USB disconnect, device number 59
[  715.441707][ T5917] usb 2-1: config 0 has an invalid interface number: 18 but max is 0
[  715.461983][ T5917] usb 2-1: config 0 descriptor has 1 excess byte, ignoring
[  715.487365][ T5917] usb 2-1: config 0 has no interface number 0
[  715.500695][ T5917] usb 2-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4
[  715.515264][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  715.536488][ T5917] usb 2-1: config 0 descriptor??
[  715.555555][ T5917] usb 2-1: bad CDC descriptors
[  715.711424][ T5827] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  715.761139][ T5827] usb 6-1: USB disconnect, device number 64
[  715.779986][T15162] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2121'.
[  716.974846][ T5917] usb 2-1: USB disconnect, device number 60
[  719.391311][ T5911] usb 6-1: new high-speed USB device number 65 using dummy_hcd
[  719.436686][   T29] kauditd_printk_skb: 190 callbacks suppressed
[  719.436701][   T29] audit: type=1400 audit(1730317680.637:1492): avc:  denied  { ioctl } for  pid=15187 comm="syz.6.2129" path="socket:[43631]" dev="sockfs" ino=43631 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  719.713231][T15198] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2132'.
[  719.748863][ T5911] usb 6-1: New USB device found, idVendor=14cd, idProduct=6116, bcdDevice= 1.60
[  719.763426][ T5911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  720.729173][ T5911] usb 6-1: config 0 descriptor??
[  720.740891][ T5911] ums-cypress 6-1:0.0: USB Mass Storage device detected
[  721.892243][ T5911] usb 6-1: USB disconnect, device number 65
[  722.631591][T15234] hfsplus: unable to parse mount options
[  723.514415][ T5917] usb 7-1: new high-speed USB device number 42 using dummy_hcd
[  723.556496][T15253] netlink: 112 bytes leftover after parsing attributes in process `syz.7.2146'.
[  723.672667][ T5917] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  723.698387][ T5917] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  723.781672][ T5917] usb 7-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00
[  723.811455][ T5917] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  723.863496][ T5917] usb 7-1: config 0 descriptor??
[  724.404035][T15263] netlink: 'syz.7.2149': attribute type 33 has an invalid length.
[  724.412914][T15263] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2149'.
[  724.708245][ T5917] usbhid 7-1:0.0: can't add hid device: -71
[  724.717336][ T5917] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  724.727791][ T5917] usb 7-1: USB disconnect, device number 42
[  725.107298][   T29] audit: type=1326 audit(1730317685.867:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15254 comm="syz.7.2149" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb016b7e719 code=0x0
[  725.223738][T15274] @: renamed from vlan0 (while UP)
[  725.449966][T15278] Process accounting paused
[  725.466536][T15282] hfsplus: unable to parse mount options
[  725.485429][T15280] libceph: resolve '
[  725.485429][T15280] -&õÌ×fÍY¹Ç�²a×ïÅ2iˆ
[  725.485429][T15280] .ÖúÕ?Çý&�*»§&' (ret=-3): failed
[  725.532810][T15284] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2155'.
[  725.547933][T15284] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[  725.554757][T15284] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  725.572699][T15284] vhci_hcd vhci_hcd.0: Device attached
[  725.798519][ T2139] vhci_hcd: vhci_device speed not set
[  725.946548][T15298] netlink: 'syz.7.2160': attribute type 1 has an invalid length.
[  726.091790][T15300] bond2: (slave ipip0): The slave device specified does not support setting the MAC address
[  726.102046][T15300] bond2: (slave ipip0): Setting fail_over_mac to active for active-backup mode
[  726.121768][T15300] bond2: (slave ipip0): making interface the new active one
[  726.132063][T15300] bond2: (slave ipip0): Enslaving as an active interface with an up link
[  726.392543][ T5909] usb 6-1: new high-speed USB device number 66 using dummy_hcd
[  726.400426][T14572] usb 2-1: new low-speed USB device number 61 using dummy_hcd
[  726.406374][ T5917] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[  726.408164][ T2139] usb 35-1: new full-speed USB device number 2 using vhci_hcd
[  726.458096][T15301] cgroup2: Unknown parameter 'm¹ory_Hugetlb_accounting'
[  726.563566][T15301] xt_hashlimit: invalid interval
[  726.613865][ T5917] usb 4-1: config 0 has an invalid interface number: 208 but max is 0
[  726.622253][ T5917] usb 4-1: config 0 has no interface number 0
[  726.634354][ T5917] usb 4-1: too many endpoints for config 0 interface 208 altsetting 115: 196, using maximum allowed: 30
[  726.649429][ T5917] usb 4-1: config 0 interface 208 altsetting 115 has 0 endpoint descriptors, different from the interface descriptor's value: 196
[  726.668093][ T5917] usb 4-1: config 0 interface 208 has no altsetting 0
[  726.712927][ T5909] usb 6-1: Using ep0 maxpacket: 8
[  726.719489][ T5909] usb 6-1: New USB device found, idVendor=061d, idProduct=c120, bcdDevice=e3.67
[  726.729695][ T5909] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  726.731295][ T5917] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[  726.747926][ T5909] usb 6-1: config 0 descriptor??
[  726.848667][T15307] netlink: 'syz.7.2163': attribute type 33 has an invalid length.
[  726.856749][T15307] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2163'.
[  727.260325][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  727.270550][ T5917] usb 4-1: config 0 descriptor??
[  727.277698][   T29] audit: type=1326 audit(1730317688.197:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15303 comm="syz.7.2163" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb016b7e719 code=0x0
[  727.300935][T14572] usb 2-1: config 0 has no interfaces?
[  727.306663][T14572] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  727.318712][T14572] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  727.329025][ T5909] quatech2 6-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected
[  727.356976][T14572] usb 2-1: config 0 descriptor??
[  727.366430][ T5909] usb 6-1: qt2_setup_urbs - submit read urb failed -8
[  727.375763][ T5909] quatech2 6-1:0.0: probe with driver quatech2 failed with error -8
[  727.515486][T15297] 9pnet_fd: Insufficient options for proto=fd
[  727.528940][T15297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  727.543036][T15297] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  727.675842][ T5909] usb 6-1: USB disconnect, device number 66
[  728.022096][ T5917] usb 4-1: string descriptor 0 read error: -71
[  728.078534][ T5917] hackrf 4-1:0.208: usb_control_msg() failed -71 request 0e
[  728.212572][ T5917] hackrf 4-1:0.208: Could not detect board
[  728.247939][ T5917] hackrf 4-1:0.208: probe with driver hackrf failed with error -71
[  728.260554][ T2139] vhci_hcd: vhci_device speed not set
[  728.290038][ T5917] usb 4-1: USB disconnect, device number 60
[  728.331390][ T2139] usb 35-1: device descriptor read/64, error -71
[  728.536364][ T2139] vhci_hcd: vhci_device speed not set
[  728.601387][ T2139] usb 35-1: new full-speed USB device number 3 using vhci_hcd
[  728.807926][ T5909] usb 6-1: new high-speed USB device number 67 using dummy_hcd
[  728.884408][ T5917] usb 2-1: USB disconnect, device number 61
[  728.916263][T15285] vhci_hcd: connection reset by peer
[  728.971525][ T5909] usb 6-1: Using ep0 maxpacket: 32
[  728.973916][ T6782] vhci_hcd: stop threads
[  728.978203][ T5909] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  728.992161][ T5909] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  728.996532][ T6782] vhci_hcd: release socket
[  729.001995][ T5909] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  729.002110][ T5909] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  729.002182][ T5909] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  729.038482][ T5909] usb 6-1: config 0 descriptor??
[  729.077751][ T6782] vhci_hcd: disconnect device
[  729.123060][T15329] netlink: 112 bytes leftover after parsing attributes in process `syz.6.2171'.
[  730.049440][T15340] input: syz0 as /devices/virtual/input/input36
[  730.475946][T15346] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000'
[  730.747488][   T29] audit: type=1400 audit(1730317691.877:1495): avc:  denied  { override_creds } for  pid=15342 comm="syz.1.2174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  731.332600][   T29] audit: type=1400 audit(1730317692.607:1496): avc:  denied  { append } for  pid=15348 comm="syz.3.2176" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  731.469811][ T5909] usbhid 6-1:0.0: can't add hid device: -71
[  731.478173][ T5909] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  731.490963][ T5909] usb 6-1: USB disconnect, device number 67
[  734.206282][T15394] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2187'.
[  734.338688][T15394] netlink: 'syz.7.2187': attribute type 2 has an invalid length.
[  734.386648][ T2139] vhci_hcd: vhci_device speed not set
[  734.528166][T15401] netlink: 'syz.1.2186': attribute type 33 has an invalid length.
[  734.536112][T15401] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2186'.
[  734.635194][   T29] audit: type=1326 audit(1730317695.857:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15393 comm="syz.1.2186" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c7117e719 code=0x0
[  735.980564][ T5911] usb 7-1: new high-speed USB device number 43 using dummy_hcd
[  736.243107][T15413] input: syz0 as /devices/virtual/input/input37
[  737.158845][ T5911] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  737.171856][ T5911] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  737.181740][ T5911] usb 7-1: New USB device found, idVendor=056a, idProduct=037e, bcdDevice=6c.75
[  737.253189][ T5911] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  737.505953][ T5911] usb 7-1: config 0 descriptor??
[  738.733997][ T5827] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[  738.763865][ T5911] wacom 0003:056A:037E.001A: Unknown device_type for 'HID 056a:037e'. Ignoring.
[  738.890901][T15451] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  738.899264][ T5827] usb 4-1: device descriptor read/64, error -71
[  739.018647][ T5911] usb 7-1: USB disconnect, device number 43
[  739.175380][T15459] netlink: 'syz.1.2200': attribute type 33 has an invalid length.
[  739.183332][T15459] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2200'.
[  739.373378][   T29] audit: type=1326 audit(1730317700.507:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15448 comm="syz.1.2200" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c7117e719 code=0x0
[  739.652476][ T5827] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[  739.937445][ T5827] usb 4-1: device descriptor read/64, error -71
[  740.066880][ T5827] usb usb4-port1: attempt power cycle
[  740.685595][ T5827] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[  740.735937][ T5827] usb 4-1: device descriptor read/8, error -71
[  742.763894][T15497] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  744.956629][T15513] netlink: 'syz.6.2216': attribute type 33 has an invalid length.
[  744.964618][T15513] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2216'.
[  746.041338][   T29] audit: type=1326 audit(1730317706.957:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15504 comm="syz.6.2216" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3c0877e719 code=0x0
[  746.133972][   T29] audit: type=1400 audit(1730317707.337:1500): avc:  denied  { read } for  pid=15511 comm="syz.3.2219" path="socket:[44780]" dev="sockfs" ino=44780 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  746.962073][T14572] usb 6-1: new high-speed USB device number 68 using dummy_hcd
[  747.246147][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  747.252822][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  747.311511][T14572] usb 6-1: device descriptor read/64, error -71
[  748.321305][T14572] usb 6-1: new high-speed USB device number 69 using dummy_hcd
[  748.405702][T15556] netlink: 'syz.1.2227': attribute type 33 has an invalid length.
[  748.413887][T15556] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2227'.
[  748.458871][   T29] audit: type=1326 audit(1730317709.757:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15553 comm="syz.1.2227" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c7117e719 code=0x0
[  748.541506][T14572] usb 6-1: device descriptor read/64, error -71
[  748.662472][T14572] usb usb6-port1: attempt power cycle
[  749.146634][T15562] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  749.191318][T14572] usb 6-1: new high-speed USB device number 70 using dummy_hcd
[  749.898160][T14572] usb 6-1: device descriptor read/8, error -71
[  750.700848][T15580] netlink: 'syz.5.2232': attribute type 33 has an invalid length.
[  750.708914][T15580] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2232'.
[  751.021585][   T29] audit: type=1326 audit(1730317712.017:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15571 comm="syz.5.2232" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7589b7e719 code=0x0
[  753.761873][T15611] FAULT_INJECTION: forcing a failure.
[  753.761873][T15611] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  753.791290][ T5827] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[  753.863309][T15611] CPU: 1 UID: 0 PID: 15611 Comm: syz.1.2240 Not tainted 6.12.0-rc5-syzkaller-00044-gc1e939a21eb1 #0
[  753.874203][T15611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  753.884271][T15611] Call Trace:
[  753.887580][T15611]  <TASK>
[  753.890546][T15611]  dump_stack_lvl+0x16c/0x1f0
[  753.895250][T15611]  should_fail_ex+0x497/0x5b0
[  753.899208][T15615] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  753.899926][T15611]  strncpy_from_user+0x3b/0x2c0
[  753.912767][T15611]  getname_flags.part.0+0x8f/0x550
[  753.917900][T15611]  getname_uflags+0x9d/0xf0
[  753.922420][T15611]  __x64_sys_execveat+0xc4/0x120
[  753.927376][T15611]  do_syscall_64+0xcd/0x250
[  753.931886][T15611]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  753.937775][T15611] RIP: 0033:0x7f4c7117e719
[  753.942179][T15611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  753.961792][T15611] RSP: 002b:00007f4c71ea5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142
[  753.970202][T15611] RAX: ffffffffffffffda RBX: 00007f4c71335f80 RCX: 00007f4c7117e719
[  753.978164][T15611] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  753.986123][T15611] RBP: 00007f4c71ea5090 R08: 0000000000001000 R09: 0000000000000000
[  753.994081][T15611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  754.002047][T15611] R13: 0000000000000000 R14: 00007f4c71335f80 R15: 00007fff2c3b5508
[  754.010018][T15611]  </TASK>
[  754.102805][ T5827] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98
[  754.124687][ T5827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  754.168025][ T5827] usb 4-1: config 0 descriptor??
[  754.176086][ T5827] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[  754.228772][ T5827] ftdi_sio ttyUSB0: unknown device type: 0xc698
[  755.281572][T14572] usb 6-1: new high-speed USB device number 72 using dummy_hcd
[  755.408622][T15628] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2248'.
[  755.433062][T14572] usb 6-1: config 0 has an invalid interface number: 117 but max is 0
[  755.446701][T14572] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  755.457381][T14572] usb 6-1: config 0 has no interface number 0
[  755.470232][T14572] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  755.489093][T14572] usb 6-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  755.510650][T14572] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  755.528568][T14572] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  755.537167][T14572] usb 6-1: Product: syz
[  755.546646][T14572] usb 6-1: Manufacturer: syz
[  755.551843][T14572] usb 6-1: SerialNumber: syz
[  755.572653][T14572] usb 6-1: config 0 descriptor??
[  755.913394][T15636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  755.948003][T15636] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  756.084175][T15639] netlink: 'syz.1.2250': attribute type 33 has an invalid length.
[  756.092449][T15639] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2250'.
[  756.161590][   T29] audit: type=1326 audit(1730317717.437:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15633 comm="syz.1.2250" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c7117e719 code=0x0
[  756.772269][ T2139] usb 4-1: USB disconnect, device number 65
[  756.793196][ T2139] ftdi_sio 4-1:0.0: device disconnected
[  758.192589][T15658] macvlan0: entered allmulticast mode
[  758.208420][T15658] veth1_vlan: entered allmulticast mode
[  758.402989][T15613] Process accounting resumed
[  758.576115][T15665] netlink: 'syz.1.2256': attribute type 33 has an invalid length.
[  758.584049][T15665] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2256'.
[  758.971598][   T29] audit: type=1326 audit(1730317719.907:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15659 comm="syz.1.2256" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c7117e719 code=0x0
[  759.064505][ T5827] usb 6-1: USB disconnect, device number 72
[  759.513036][T15669] input: syz0 as /devices/virtual/input/input43
[  760.272387][T15684] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2261'.
[  761.251503][ T2139] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[  761.411433][ T2139] usb 4-1: Using ep0 maxpacket: 8
[  761.435925][ T2139] usb 4-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 4.c9
[  761.463958][ T2139] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  761.547935][ T2139] usb 4-1: Product: syz
[  761.576699][ T2139] usb 4-1: Manufacturer: syz
[  761.604446][ T2139] usb 4-1: SerialNumber: syz
[  761.674810][ T2139] usb 4-1: config 0 descriptor??
[  761.742844][ T2139] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[  761.750998][ T2139] ftdi_sio ttyUSB0: unknown device type: 0x4c9
[  763.028197][T15713] input: syz0 as /devices/virtual/input/input44
[  763.981830][T15716] input: syz0 as /devices/virtual/input/input45
[  764.403499][    T9] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[  764.545601][T14572] usb 4-1: USB disconnect, device number 66
[  764.551355][T14572] ftdi_sio 4-1:0.0: device disconnected
[  764.813889][    T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86
[  764.813928][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  764.813957][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  764.820484][    T9] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24
[  764.820518][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  764.820542][    T9] usb 2-1: Product: syz
[  764.820559][    T9] usb 2-1: Manufacturer: syz
[  764.820577][    T9] usb 2-1: SerialNumber: syz
[  764.850086][    T9] usb 2-1: config 0 descriptor??
[  765.010648][T15733] netlink: 'syz.6.2274': attribute type 33 has an invalid length.
[  765.010727][T15733] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2274'.
[  765.496807][   T29] audit: type=1326 audit(1730317726.337:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15729 comm="syz.6.2274" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3c0877e719 code=0x0
[  765.592453][T15736] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2275'.
[  765.621880][    T9] powermate: unknown product id 0240
[  765.621897][    T9] powermate: Expected payload of 3--6 bytes, found 0 bytes!
[  765.622021][    T9] powermate 2-1:0.0: probe with driver powermate failed with error -5
[  765.897285][   T45] usb 2-1: USB disconnect, device number 62
[  767.446753][T15759] input: syz0 as /devices/virtual/input/input47
[  768.201906][T15766] xt_hashlimit: invalid interval
[  768.776495][    T9] usb 6-1: new high-speed USB device number 73 using dummy_hcd
[  768.836067][T15774] input: syz1 as /devices/virtual/input/input48
[  769.222267][    T9] usb 6-1: Using ep0 maxpacket: 8
[  769.234424][    T9] usb 6-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 4.c9
[  769.244088][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  769.253489][    T9] usb 6-1: Product: syz
[  769.258142][    T9] usb 6-1: Manufacturer: syz
[  769.263243][    T9] usb 6-1: SerialNumber: syz
[  769.275198][    T9] usb 6-1: config 0 descriptor??
[  769.294853][    T9] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected
[  769.314162][    T9] ftdi_sio ttyUSB0: unknown device type: 0x4c9
[  770.962555][T15791] netlink: 'syz.3.2290': attribute type 33 has an invalid length.
[  770.970493][T15791] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2290'.
[  771.019398][T14572] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[  771.035153][   T29] audit: type=1326 audit(1730317732.317:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15788 comm="syz.3.2290" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9d7f57e719 code=0x0
[  771.332985][T14572] usb 2-1: Using ep0 maxpacket: 32
[  772.271487][T14572] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  772.282760][T14572] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  772.296447][ T2139] usb 6-1: USB disconnect, device number 73
[  772.303584][ T2139] ftdi_sio 6-1:0.0: device disconnected
[  772.327032][T15801] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2292'.
[  772.341015][T14572] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  772.353054][T14572] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  772.361565][T14572] usb 2-1: Product: syz
[  772.365812][T14572] usb 2-1: Manufacturer: syz
[  772.511113][T14572] hub 2-1:4.0: USB hub found
[  772.717373][T14572] hub 2-1:4.0: config failed, hub has too many ports! (err -19)
[  772.901867][T15814] input: syz0 as /devices/virtual/input/input49
[  774.472230][    T9] usb 2-1: USB disconnect, device number 63
[  774.950123][T15845] xt_socket: unknown flags 0xc
[  774.975886][T15845] fuse: Unknown parameter '0xffffffffffffffff0x00007f4c6e8000000000000000000000000000000000000000000000000'
[  776.581478][T15862] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2307'.
[  776.606462][ T5917] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[  777.460136][ T5917] usb 4-1: Using ep0 maxpacket: 8
[  777.538752][ T5917] usb 4-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 4.c9
[  777.548236][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  777.584123][ T5917] usb 4-1: Product: syz
[  777.588336][ T5917] usb 4-1: Manufacturer: syz
[  777.592998][ T5917] usb 4-1: SerialNumber: syz
[  777.598966][T15873] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  777.605603][ T5917] usb 4-1: config 0 descriptor??
[  777.810958][ T5917] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[  777.819302][ T5917] ftdi_sio ttyUSB0: unknown device type: 0x4c9
[  779.162647][   T29] audit: type=1400 audit(1730317740.257:1507): avc:  denied  { write } for  pid=15887 comm="syz.6.2315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  779.319824][T14572] usb 4-1: USB disconnect, device number 67
[  779.411728][T14572] ftdi_sio 4-1:0.0: device disconnected
[  780.271312][    T9] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[  780.421359][    T9] usb 2-1: Using ep0 maxpacket: 16
[  780.432975][    T9] usb 2-1: config index 0 descriptor too short (expected 16456, got 72)
[  780.464223][    T9] usb 2-1: config 0 has an invalid interface number: 125 but max is 1
[  780.498472][    T9] usb 2-1: config 0 has an invalid interface number: 125 but max is 1
[  780.521525][    T9] usb 2-1: config 0 has an invalid interface number: 125 but max is 1
[  780.530209][    T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  780.594400][    T9] usb 2-1: config 0 has no interface number 0
[  780.631027][T15906] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2321'.
[  780.631229][    T9] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  780.666698][T15907] input: syz0 as /devices/virtual/input/input50
[  780.718841][    T9] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  780.907215][    T9] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  780.927488][    T9] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  781.319398][    T9] usb 2-1: config 0 interface 125 has no altsetting 2
[  781.351786][    T9] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  781.361121][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  781.369513][    T9] usb 2-1: Product: syz
[  781.374409][    T9] usb 2-1: Manufacturer: syz
[  781.379011][    T9] usb 2-1: SerialNumber: syz
[  781.438069][    T9] usb 2-1: config 0 descriptor??
[  781.445853][    T9] usb 2-1: selecting invalid altsetting 2
[  781.697834][T15914] input: syz0 as /devices/virtual/input/input51
[  781.797308][T15917] binder: 15913:15917 ioctl 4018620d 0 returned -22
[  781.872264][T15918] dccp_invalid_packet: P.Data Offset(243) too large
[  782.677318][T15921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  782.727421][T15921] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  783.118702][T15926] netlink: 'syz.7.2326': attribute type 1 has an invalid length.
[  783.156688][T15926] netlink: 'syz.7.2326': attribute type 2 has an invalid length.
[  783.896308][T15933] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  784.425214][ T2139] usb 2-1: USB disconnect, device number 64
[  784.508670][T15948] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2332'.
[  784.982495][T15950] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2333'.
[  785.984778][T15972] netlink: 112 bytes leftover after parsing attributes in process `syz.6.2338'.
[  786.151149][T15979] netlink: 'syz.7.2337': attribute type 33 has an invalid length.
[  786.159170][T15979] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2337'.
[  786.184302][   T29] audit: type=1326 audit(1730317747.487:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15967 comm="syz.7.2337" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb016b7e719 code=0x0
[  786.628484][   T29] audit: type=1400 audit(1730317747.927:1509): avc:  denied  { map } for  pid=15978 comm="syz.6.2340" path="socket:[46542]" dev="sockfs" ino=46542 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  787.249817][T15992] netlink: 'syz.6.2342': attribute type 33 has an invalid length.
[  787.258585][T15992] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2342'.
[  787.995057][   T29] audit: type=1326 audit(1730317749.277:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15985 comm="syz.6.2342" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3c0877e719 code=0x0
[  789.380856][T16006] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2347'.
[  790.861702][T16021] Process accounting paused
[  791.522073][T16032] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  791.617138][T16038] netlink: 'syz.7.2353': attribute type 33 has an invalid length.
[  791.625346][T16038] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2353'.
[  792.049901][   T29] audit: type=1326 audit(1730317752.947:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16029 comm="syz.7.2353" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb016b7e719 code=0x0
[  792.484336][T16041] openvswitch: netlink: Duplicate or invalid key (type 0).
[  792.498781][T16041] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  792.612061][   T29] audit: type=1400 audit(1730317753.917:1512): avc:  denied  { bind } for  pid=16042 comm="syz.7.2356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  794.093559][T16068] input: syz0 as /devices/virtual/input/input53
[  794.984178][T16077] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2362'.
[  795.929911][T16089] netlink: 'syz.7.2367': attribute type 33 has an invalid length.
[  795.938073][T16089] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2367'.
[  796.312006][ T2139] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[  796.388073][   T29] audit: type=1326 audit(1730317757.247:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16082 comm="syz.7.2367" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb016b7e719 code=0x0
[  796.553964][   T29] audit: type=1400 audit(1730317757.547:1514): avc:  denied  { ioctl } for  pid=16083 comm="syz.1.2365" path="socket:[46760]" dev="sockfs" ino=46760 ioctlcmd=0x7c05 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  796.722946][ T2139] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  796.734129][ T2139] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  796.789040][ T2139] usb 4-1: New USB device found, idVendor=056a, idProduct=00de, bcdDevice= 0.00
[  797.421647][ T2139] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  797.444370][ T2139] usb 4-1: config 0 descriptor??
[  797.926740][T16110] bpf: Bad value for 'uid'
[  797.960688][T16112] bpf: Bad value for 'uid'
[  798.251341][ T5917] usb 7-1: new high-speed USB device number 44 using dummy_hcd
[  798.268547][ T2139] wacom 0003:056A:00DE.001B: unknown main item tag 0x0
[  798.275577][ T2139] wacom 0003:056A:00DE.001B: unknown main item tag 0x0
[  798.282843][ T2139] wacom 0003:056A:00DE.001B: unknown main item tag 0x0
[  798.289896][ T2139] wacom 0003:056A:00DE.001B: unknown main item tag 0x0
[  798.297264][ T2139] wacom 0003:056A:00DE.001B: unknown main item tag 0x0
[  798.304916][ T2139] wacom 0003:056A:00DE.001B: Unknown device_type for 'HID 056a:00de'. Assuming pen.
[  798.315769][ T2139] wacom 0003:056A:00DE.001B: hidraw0: USB HID v0.00 Device [HID 056a:00de] on usb-dummy_hcd.3-1/input0
[  798.340199][ T2139] input: Wacom Bamboo 16FG 4x5 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00DE.001B/input/input54
[  798.971615][ T5917] usb 7-1: Using ep0 maxpacket: 8
[  799.108869][ T5917] usb 7-1: New USB device found, idVendor=061d, idProduct=c120, bcdDevice=e3.67
[  799.126390][ T5917] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  799.144110][ T5917] usb 7-1: config 0 descriptor??
[  799.162065][ T5917] quatech2 7-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected
[  799.254527][ T5911] usb 4-1: USB disconnect, device number 68
[  799.429552][T16140] netlink: 'syz.5.2379': attribute type 33 has an invalid length.
[  799.437505][T16140] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2379'.
[  799.490188][   T29] audit: type=1326 audit(1730317760.757:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16132 comm="syz.5.2379" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7589b7e719 code=0x0
[  799.861348][ T5917] usb 7-1: qt2_setup_urbs - submit read urb failed -8
[  799.868348][ T5917] quatech2 7-1:0.0: probe with driver quatech2 failed with error -8
[  800.474584][T16144] netlink: 'syz.1.2380': attribute type 33 has an invalid length.
[  800.482478][T16144] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2380'.
[  800.516954][   T29] audit: type=1326 audit(1730317761.797:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16138 comm="syz.1.2380" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c7117e719 code=0x0
[  800.521153][T14572] usb 7-1: USB disconnect, device number 44
[  801.366953][T16137] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2381'.
[  801.372203][T16154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2383'.
[  803.147052][T16167] ecryptfs_parse_options: eCryptfs: unrecognized option [/]
[  803.154552][T16167] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README
[  803.167926][T16167] Error parsing options; rc = [-22]
[  803.291392][   T29] audit: type=1400 audit(1730317764.447:1517): avc:  denied  { mounton } for  pid=16165 comm="syz.7.2387" path="/syzcgroup/unified/syz7" dev="cgroup2" ino=298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  803.391319][T16173] gfs2: gfs2 mount does not exist
[  804.804079][   T29] audit: type=1400 audit(1730317765.937:1518): avc:  denied  { mount } for  pid=16184 comm="syz.1.2392" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  805.381895][   T29] audit: type=1400 audit(1730317766.107:1519): avc:  denied  { setopt } for  pid=16182 comm="syz.7.2391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  806.471890][   T29] audit: type=1400 audit(1730317767.657:1520): avc:  denied  { unmount } for  pid=5824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  806.739846][T16202] bpf: Bad value for 'uid'
[  808.251304][ T5917] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[  808.450876][T16214] netlink: 'syz.6.2399': attribute type 33 has an invalid length.
[  808.458871][T16214] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2399'.
[  808.481396][   T29] audit: type=1326 audit(1730317769.767:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16207 comm="syz.6.2399" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3c0877e719 code=0x0
[  809.349796][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  809.356276][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  809.758747][ T5917] usb 2-1: Using ep0 maxpacket: 8
[  809.986712][ T5917] usb 2-1: device descriptor read/all, error -71
[  811.860585][T16253] syzkaller0: entered promiscuous mode
[  811.878723][T16253] syzkaller0: entered allmulticast mode
[  812.016097][T16257] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  812.285534][T16265] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.2413'.
[  812.294955][T16265] netlink: 'syz.7.2413': attribute type 2 has an invalid length.
[  813.831454][   T29] audit: type=1326 audit(1730317775.127:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16267 comm="syz.5.2414" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7589b7e719 code=0x0
[  814.846204][   T29] audit: type=1326 audit(1730317776.147:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16274 comm="syz.7.2415" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb016b7e719 code=0x0
[  815.184114][T16286] bpf: Bad value for 'uid'
[  815.511362][ T5917] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[  815.687210][ T5917] usb 2-1: Using ep0 maxpacket: 8
[  815.696294][ T5917] usb 2-1: New USB device found, idVendor=061d, idProduct=c120, bcdDevice=e3.67
[  815.705619][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  815.722851][ T5917] usb 2-1: config 0 descriptor??
[  815.744875][ T5917] quatech2 2-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected
[  815.941604][ T5917] usb 2-1: qt2_setup_urbs - submit read urb failed -8
[  815.948531][ T5917] quatech2 2-1:0.0: probe with driver quatech2 failed with error -8
[  817.614621][T16250] netlink: 'syz.6.2409': attribute type 3 has an invalid length.
[  817.626057][T16271] netlink: 'syz.5.2414': attribute type 33 has an invalid length.
[  817.634871][T16271] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2414'.
[  817.644135][T16282] netlink: 'syz.7.2415': attribute type 33 has an invalid length.
[  817.652234][T16282] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2415'.
[  817.868167][ T5827] usb 2-1: USB disconnect, device number 67
[  819.855046][T14572] usb 6-1: new high-speed USB device number 74 using dummy_hcd
[  821.410656][T14572] usb 6-1: New USB device found, idVendor=13d3, idProduct=3333, bcdDevice=84.ed
[  821.419893][T14572] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  821.531127][T14572] usb 6-1: Product: syz
[  821.594062][T14572] usb 6-1: Manufacturer: syz
[  821.610128][T14572] usb 6-1: SerialNumber: syz
[  822.179303][T14572] usb 6-1: config 0 descriptor??
[  822.189225][T14572] r8712u: register rtl8712_netdev_ops to netdev_ops
[  822.196109][T14572] usb 6-1: r8712u: USB_SPEED_HIGH with 0 endpoints
[  822.381651][T16297] Process accounting resumed
[  822.634089][T14572] usb 6-1: r8712u: Boot from EFUSE: Autoload Failed
[  822.634117][T14572] usb 6-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00
[  822.634147][T14572] usb 6-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin"
[  822.738353][T16340] netlink: 'syz.6.2429': attribute type 33 has an invalid length.
[  822.738413][T16340] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2429'.
[  823.370621][   T29] audit: type=1326 audit(1730317784.057:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16328 comm="syz.6.2429" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3c0877e719 code=0x0
[  823.410012][T14572] usb 6-1: USB disconnect, device number 74
[  823.463176][   T29] audit: type=1326 audit(1730317784.767:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16343 comm="syz.6.2433" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3c0877e719 code=0x0
[  824.024620][T16347] 9pnet_fd: Insufficient options for proto=fd
[  824.361384][T14572] usb 6-1: new high-speed USB device number 75 using dummy_hcd
[  824.601348][T14572] usb 6-1: Using ep0 maxpacket: 16
[  824.610752][T14572] usb 6-1: config 0 has an invalid interface number: 8 but max is 0
[  824.630763][T14572] usb 6-1: config 0 has no interface number 0
[  824.655428][T14572] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  824.682974][T14572] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  824.716690][T14572] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  824.751509][T14572] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  824.767549][T14572] usb 6-1: Product: syz
[  824.772202][T14572] usb 6-1: SerialNumber: syz
[  824.792185][T14572] usb 6-1: config 0 descriptor??
[  824.800792][T14572] cm109 6-1:0.8: invalid payload size 0, expected 4
[  824.813431][T14572] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input57
[  824.929271][T16365] bpf: Bad value for 'uid'
[  825.421387][T14572] usb 7-1: new high-speed USB device number 45 using dummy_hcd
[  825.554192][   T29] audit: type=1400 audit(1730317786.857:1526): avc:  denied  { mounton } for  pid=16370 comm="syz.7.2437" path="/319/file1/file0" dev="ramfs" ino=49173 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[  825.859355][T14572] usb 7-1: Using ep0 maxpacket: 8
[  825.866591][T14572] usb 7-1: New USB device found, idVendor=061d, idProduct=c120, bcdDevice=e3.67
[  825.875886][T14572] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  825.958856][T16378] netlink: 'syz.1.2438': attribute type 33 has an invalid length.
[  825.966960][T16378] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2438'.
[  826.909875][T14572] usb 7-1: config 0 descriptor??
[  826.911987][   T29] audit: type=1326 audit(1730317787.687:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16372 comm="syz.1.2438" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c7117e719 code=0x0
[  826.940151][T14572] quatech2 7-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected
[  827.819983][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[  827.830244][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[  827.838060][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[  827.845517][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[  827.852821][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[  827.861259][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[  827.868497][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[  827.881434][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[  827.888583][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[  827.895732][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[  827.930600][T14572] usb 7-1: qt2_attach - failed to power on unit: -71
[  827.939552][T14572] quatech2 7-1:0.0: probe with driver quatech2 failed with error -71
[  827.969161][T14572] usb 7-1: USB disconnect, device number 45
[  828.446304][ T5877] usb 6-1: USB disconnect, device number 75
[  828.446365][    C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  828.464324][ T5877] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  830.572089][   T29] audit: type=1400 audit(1730317791.877:1528): avc:  denied  { map } for  pid=16408 comm="syz.6.2446" path="/dev/video4" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  830.581332][ T5909] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[  831.024687][T16421] netlink: 'syz.3.2445': attribute type 33 has an invalid length.
[  831.032646][T16421] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2445'.
[  831.170517][   T29] audit: type=1326 audit(1730317792.437:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16402 comm="syz.3.2445" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9d7f57e719 code=0x0
[  832.130688][ T5909] usb 2-1: Using ep0 maxpacket: 16
[  832.144828][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  832.286283][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  832.314524][ T5909] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  832.354301][ T5909] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  832.354717][T16423] netlink: 'syz.5.2450': attribute type 3 has an invalid length.
[  832.382858][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  832.388996][T16423] netlink: 130984 bytes leftover after parsing attributes in process `syz.5.2450'.
[  832.405292][ T5909] usb 2-1: config 0 descriptor??
[  832.449675][T16427] netlink: 'syz.3.2452': attribute type 3 has an invalid length.
[  832.466345][T16427] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2452'.
[  832.703249][T16435] bpf: Bad value for 'uid'
[  832.771594][ T5827] usb 7-1: new high-speed USB device number 46 using dummy_hcd
[  832.834436][ T5909] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.001C/input/input58
[  832.905389][ T5909] microsoft 0003:045E:07DA.001C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[  832.941650][ T5827] usb 7-1: Using ep0 maxpacket: 8
[  832.947965][ T5827] usb 7-1: New USB device found, idVendor=061d, idProduct=c120, bcdDevice=e3.67
[  832.957817][ T5911] usb 6-1: new high-speed USB device number 76 using dummy_hcd
[  832.966774][ T5827] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  832.980332][ T5827] usb 7-1: config 0 descriptor??
[  832.992398][ T5827] quatech2 7-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected
[  833.038938][   T29] audit: type=1400 audit(1730317794.337:1530): avc:  denied  { bind } for  pid=16406 comm="syz.1.2447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  833.040520][T15149] usb 2-1: USB disconnect, device number 68
[  833.141379][ T5911] usb 6-1: Using ep0 maxpacket: 8
[  833.147948][ T5911] usb 6-1: config 1 has an invalid descriptor of length 64, skipping remainder of the config
[  833.160838][ T5911] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  833.179152][ T5911] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  833.188539][ T5911] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  833.196870][ T5911] usb 6-1: Product: syz
[  833.207762][ T5911] usb 6-1: Manufacturer: syz
[  833.214308][ T5911] usb 6-1: SerialNumber: syz
[  833.219150][ T5827] usb 7-1: qt2_setup_urbs - submit read urb failed -8
[  833.231086][ T5911] usb 6-1: bad CDC descriptors
[  833.238531][ T5827] quatech2 7-1:0.0: probe with driver quatech2 failed with error -8
[  833.436672][ T5827] usb 6-1: USB disconnect, device number 76
[  833.470347][T15149] usb 7-1: USB disconnect, device number 46
[  834.813877][   T29] audit: type=1400 audit(1730317796.077:1531): avc:  denied  { shutdown } for  pid=16457 comm="syz.6.2460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  834.918644][T16462] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  835.749168][   T29] audit: type=1400 audit(1730317797.037:1532): avc:  denied  { ioctl } for  pid=16476 comm="syz.7.2468" path="socket:[49477]" dev="sockfs" ino=49477 ioctlcmd=0x6687 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  835.787592][T16477] VFS: could not find a valid V7 on nullb0.
[  835.990236][T15149] usb 6-1: new high-speed USB device number 77 using dummy_hcd
[  836.151128][ T5827] usb 7-1: new high-speed USB device number 47 using dummy_hcd
[  836.159426][T16489] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  836.176496][T15149] usb 6-1: Using ep0 maxpacket: 32
[  836.189525][T16488] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
[  836.190245][T15149] usb 6-1: unable to get BOS descriptor or descriptor too short
[  836.238936][T15149] usb 6-1: config 1 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  836.270088][T15149] usb 6-1: config 1 interface 0 has no altsetting 0
[  836.287704][T15149] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.40
[  836.322020][T15149] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  836.330122][T15149] usb 6-1: Product: syz
[  836.334673][T15149] usb 6-1: Manufacturer: syz
[  836.339386][T15149] usb 6-1: SerialNumber: syz
[  836.345264][ T5827] usb 7-1: Using ep0 maxpacket: 32
[  836.368404][ T5827] usb 7-1: config 0 has an invalid interface number: 89 but max is 0
[  836.379048][ T5827] usb 7-1: config 0 has no interface number 0
[  836.389994][ T5827] usb 7-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68
[  836.403065][ T5827] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  836.412744][ T5827] usb 7-1: Product: syz
[  836.417006][ T5827] usb 7-1: Manufacturer: syz
[  836.422110][ T5827] usb 7-1: SerialNumber: syz
[  836.436691][ T5827] usb 7-1: config 0 descriptor??
[  836.444576][ T5827] hub 7-1:0.89: bad descriptor, ignoring hub
[  836.450712][ T5827] hub 7-1:0.89: probe with driver hub failed with error -5
[  836.459683][ T5827] option 7-1:0.89: GSM modem (1-port) converter detected
[  836.470769][ T5827] usb 7-1: GSM modem (1-port) converter now attached to ttyUSB0
[  836.596494][T15149] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input59
[  836.631614][T15149] usb 6-1: USB disconnect, device number 77
[  836.728751][T16472] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2466'.
[  836.882029][ T5827] usb 7-1: USB disconnect, device number 47
[  836.894266][ T5827] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0
[  836.912339][ T5827] option 7-1:0.89: device disconnected
[  837.285346][ T5828] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  837.300452][ T5828] Bluetooth: hci0: Injecting HCI hardware error event
[  837.317734][ T5828] Bluetooth: hci0: hardware error 0x00
[  838.036134][ T5877] usb 6-1: new high-speed USB device number 78 using dummy_hcd
[  838.168793][T16525] netlink: 'syz.3.2477': attribute type 33 has an invalid length.
[  838.177093][T16525] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2477'.
[  838.351820][   T45] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[  838.560541][   T29] audit: type=1326 audit(1730317799.497:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16518 comm="syz.3.2477" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9d7f57e719 code=0x0
[  838.587328][ T5877] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  838.597430][ T5877] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  838.609455][ T5877] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  838.615112][T16528] bpf: Bad value for 'uid'
[  838.633409][ T5877] aiptek 6-1:17.0: interface has no int in endpoints, but must have minimum 1
[  838.681371][   T45] usb 2-1: device descriptor read/64, error -71
[  838.822601][T16531] hfsplus: unable to parse mount options
[  838.846975][ T5909] usb 6-1: USB disconnect, device number 78
[  838.921474][ T5877] usb 7-1: new high-speed USB device number 48 using dummy_hcd
[  838.929253][   T45] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[  839.091409][   T45] usb 2-1: device descriptor read/64, error -71
[  839.151393][ T5877] usb 7-1: Using ep0 maxpacket: 8
[  839.168028][ T5877] usb 7-1: New USB device found, idVendor=061d, idProduct=c120, bcdDevice=e3.67
[  839.226269][ T5877] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  839.242690][   T45] usb usb2-port1: attempt power cycle
[  839.353387][ T5877] usb 7-1: config 0 descriptor??
[  839.368153][ T5828] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  839.449794][ T5877] quatech2 7-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected
[  839.592222][   T45] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[  839.607551][ T5877] usb 7-1: qt2_setup_urbs - submit read urb failed -8
[  839.615436][   T45] usb 2-1: device descriptor read/8, error -71
[  839.636736][ T5877] quatech2 7-1:0.0: probe with driver quatech2 failed with error -8
[  840.363351][T16547] atomic_op ffff888033be6998 conn xmit_atomic 0000000000000000
[  840.431989][   T45] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[  840.480917][   T45] usb 2-1: device descriptor read/8, error -71
[  840.517733][   T29] audit: type=1400 audit(1730317801.817:1534): avc:  denied  { setopt } for  pid=16553 comm="syz.5.2488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  840.611451][   T45] usb usb2-port1: unable to enumerate USB device
[  840.753450][T16557] vcan0 speed is unknown, defaulting to 1000
[  840.763321][T16557] vcan0 speed is unknown, defaulting to 1000
[  840.770412][T16557] vcan0 speed is unknown, defaulting to 1000
[  840.951949][T16557] infiniband syz1: set active
[  840.956732][T16557] infiniband syz1: added vcan0
[  841.056167][ T5827] vcan0 speed is unknown, defaulting to 1000
[  841.528950][T16557] RDS/IB: syz1: added
[  841.533108][T16557] smc: adding ib device syz1 with port count 1
[  841.539276][T16557] smc:    ib device syz1 port 1 has pnetid 
[  841.545816][T16557] vcan0 speed is unknown, defaulting to 1000
[  841.617271][T16557] vcan0 speed is unknown, defaulting to 1000
[  841.667073][T16557] vcan0 speed is unknown, defaulting to 1000
[  841.717093][T16557] vcan0 speed is unknown, defaulting to 1000
[  841.768401][T16557] vcan0 speed is unknown, defaulting to 1000
[  841.818490][T16557] vcan0 speed is unknown, defaulting to 1000
[  841.868554][    T9] vcan0 speed is unknown, defaulting to 1000
[  842.026708][ T5827] usb 7-1: USB disconnect, device number 48
[  842.938864][   T29] audit: type=1326 audit(1730317803.867:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16564 comm="syz.1.2491" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c7117e719 code=0x0
[  842.966075][T16573] netlink: 'syz.1.2491': attribute type 33 has an invalid length.
[  842.974088][T16573] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2491'.
[  843.126639][T16580] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.2490'.
[  843.136560][T16580] netlink: 'syz.5.2490': attribute type 2 has an invalid length.
[  844.275878][T16597] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  845.089170][   T29] audit: type=1400 audit(1730317806.037:1536): avc:  denied  { listen } for  pid=16598 comm="syz.6.2498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  845.240507][T16607] ./file0: Can't lookup blockdev
[  845.259955][T16513] Bluetooth: hci3: sending frame failed (-49)
[  845.268389][ T5828] Bluetooth: hci3: Opcode 0x1003 failed: -49
[  845.323720][   T29] audit: type=1400 audit(1730317806.627:1537): avc:  denied  { write } for  pid=16600 comm="syz.7.2499" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  845.397149][   T29] audit: type=1400 audit(1730317806.687:1538): avc:  denied  { ioctl } for  pid=16612 comm="syz.5.2502" path="socket:[49773]" dev="sockfs" ino=49773 ioctlcmd=0x8b36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  845.421908][    C1] vkms_vblank_simulate: vblank timer overrun
[  845.489476][   T29] audit: type=1400 audit(1730317806.787:1539): avc:  denied  { write } for  pid=16590 comm="syz.1.2495" name="file0" dev="tmpfs" ino=2891 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  845.521543][   T29] audit: type=1400 audit(1730317806.787:1540): avc:  denied  { open } for  pid=16590 comm="syz.1.2495" path="/532/file0" dev="tmpfs" ino=2891 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  845.564606][   T29] audit: type=1400 audit(1730317806.867:1541): avc:  denied  { ioctl } for  pid=16590 comm="syz.1.2495" path="/532/file0" dev="tmpfs" ino=2891 ioctlcmd=0x1276 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  845.596904][   T29] audit: type=1400 audit(1730317806.867:1542): avc:  denied  { ioctl } for  pid=16590 comm="syz.1.2495" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  845.627244][ T5827] usb 6-1: new high-speed USB device number 79 using dummy_hcd
[  845.786906][T16622] netlink: 'syz.6.2504': attribute type 33 has an invalid length.
[  845.795104][T16622] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2504'.
[  845.908881][   T29] audit: type=1326 audit(1730317807.117:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16619 comm="syz.6.2504" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3c0877e719 code=0x0
[  846.193253][ T5827] usb 6-1: device descriptor read/64, error -71
[  846.431344][ T5827] usb 6-1: new high-speed USB device number 80 using dummy_hcd
[  846.497469][T16628] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2506'.
[  846.671305][ T5827] usb 6-1: device descriptor read/64, error -71
[  847.256830][ T5827] usb usb6-port1: attempt power cycle
[  847.811295][ T5827] usb 6-1: new high-speed USB device number 81 using dummy_hcd
[  847.845575][ T5827] usb 6-1: device descriptor read/8, error -71
[  847.896455][T15149] usb 2-1: new full-speed USB device number 73 using dummy_hcd
[  847.909885][T16639] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.2509'.
[  847.919508][T16639] netlink: 'syz.6.2509': attribute type 2 has an invalid length.
[  848.449333][T16642] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  848.464701][T15149] usb 2-1: unable to get BOS descriptor or descriptor too short
[  848.483345][T15149] usb 2-1: not running at top speed; connect to a high speed hub
[  848.502902][T15149] usb 2-1: config 5 has an invalid interface number: 75 but max is 0
[  848.518557][T15149] usb 2-1: config 5 has no interface number 0
[  848.525977][T15149] usb 2-1: config 5 interface 75 altsetting 128 endpoint 0xD has invalid maxpacket 512, setting to 64
[  848.537660][T15149] usb 2-1: config 5 interface 75 has no altsetting 0
[  848.548278][T15149] usb 2-1: New USB device found, idVendor=1608, idProduct=030b, bcdDevice=fc.ae
[  848.558278][T15149] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  848.566597][T15149] usb 2-1: Product: syz
[  848.570917][T15149] usb 2-1: Manufacturer: syz
[  848.575660][T15149] usb 2-1: SerialNumber: syz
[  848.583297][T16634] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  848.967879][T16651] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2511'.
[  849.585305][T16656] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2513'.
[  849.708415][    T9] usb 7-1: new low-speed USB device number 49 using dummy_hcd
[  849.717335][T15149] io_ti 2-1:5.75: required endpoints missing
[  849.734860][T15149] usb 2-1: USB disconnect, device number 73
[  850.460827][    T9] usb 7-1: Invalid ep0 maxpacket: 32
[  850.495908][T16660] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2514'.
[  850.611357][    T9] usb 7-1: new low-speed USB device number 50 using dummy_hcd
[  851.336337][    T9] usb 7-1: Invalid ep0 maxpacket: 32
[  851.367095][    T9] usb usb7-port1: attempt power cycle
[  851.782796][    T9] usb 7-1: new low-speed USB device number 51 using dummy_hcd
[  851.863306][T16677] netlink: 'syz.1.2516': attribute type 33 has an invalid length.
[  851.871263][T16677] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2516'.
[  852.297969][   T29] audit: type=1326 audit(1730317813.197:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16672 comm="syz.1.2516" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c7117e719 code=0x0
[  852.335337][    T9] usb 7-1: device descriptor read/8, error -71
[  853.600196][T16676] Process accounting paused
[  854.238093][   T29] audit: type=1400 audit(1730317815.537:1545): avc:  denied  { bind } for  pid=16693 comm="syz.5.2521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  854.329176][T16697] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2522'.
[  854.338869][T16697] netlink: 'syz.1.2522': attribute type 2 has an invalid length.
[  855.078576][T16702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  855.133281][T16702] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  855.162805][T16702] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2523'.
[  855.383233][T16710] ebtables: ebtables: counters copy to user failed while replacing table
[  855.491599][    T9] usb 7-1: new high-speed USB device number 53 using dummy_hcd
[  855.801729][    T9] usb 7-1: device descriptor read/64, error -71
[  856.201123][    T9] usb 7-1: new high-speed USB device number 54 using dummy_hcd
[  856.234291][   T29] audit: type=1326 audit(1730317817.537:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16713 comm="syz.1.2526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7117e719 code=0x7ffc0000
[  856.258753][   T29] audit: type=1326 audit(1730317817.567:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16713 comm="syz.1.2526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7117e719 code=0x7ffc0000
[  856.323277][   T29] audit: type=1326 audit(1730317817.597:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16713 comm="syz.1.2526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c7117e719 code=0x7ffc0000
[  856.347458][    T9] usb 7-1: device descriptor read/64, error -71
[  856.417556][   T29] audit: type=1326 audit(1730317817.597:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16713 comm="syz.1.2526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7117e719 code=0x7ffc0000
[  856.447486][   T29] audit: type=1326 audit(1730317817.597:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16713 comm="syz.1.2526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7117e719 code=0x7ffc0000
[  856.480157][    T9] usb usb7-port1: attempt power cycle
[  856.521383][   T29] audit: type=1326 audit(1730317817.597:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16713 comm="syz.1.2526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4c7117d0b0 code=0x7ffc0000
[  856.545078][   T29] audit: type=1326 audit(1730317817.597:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16713 comm="syz.1.2526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4c7117e31b code=0x7ffc0000
[  856.568698][   T29] audit: type=1326 audit(1730317817.597:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16713 comm="syz.1.2526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4c7117e31b code=0x7ffc0000
[  856.841300][    T9] usb 7-1: new high-speed USB device number 55 using dummy_hcd
[  856.861881][    T9] usb 7-1: device descriptor read/8, error -71
[  856.932723][T16729] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  856.957731][   T45] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[  857.273017][T16731] netlink: 'syz.1.2530': attribute type 33 has an invalid length.
[  857.280956][T16731] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2530'.
[  857.305745][   T29] kauditd_printk_skb: 2 callbacks suppressed
[  857.305782][   T29] audit: type=1326 audit(1730317818.607:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16727 comm="syz.1.2530" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c7117e719 code=0x0
[  857.374923][   T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  857.775991][    T9] usb 7-1: new high-speed USB device number 56 using dummy_hcd
[  857.801816][    T9] usb 7-1: device descriptor read/8, error -71
[  857.816664][   T45] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  857.825845][   T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  857.841333][   T45] usb 4-1: config 0 descriptor??
[  857.911711][    T9] usb usb7-port1: unable to enumerate USB device
[  858.051679][    T8] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[  858.871947][T16748] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.2534'.
[  858.881447][T16748] netlink: 'syz.6.2534': attribute type 2 has an invalid length.
[  858.930328][    T8] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  858.941140][T16749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  858.956846][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  858.968562][    T8] usb 2-1: Product: syz
[  858.977244][    T8] usb 2-1: Manufacturer: syz
[  858.983023][    T8] usb 2-1: SerialNumber: syz
[  859.121475][T16749] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  859.262477][   T45] keytouch 0003:0926:3333.001D: fixing up Keytouch IEC report descriptor
[  859.307802][   T45] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.001D/input/input61
[  859.376319][    T8] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  859.393526][T15149] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  860.050855][T16759] input: syz1 as /devices/virtual/input/input62
[  860.167580][T16758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  860.652579][T16764] bpf: Bad value for 'uid'
[  860.665160][T15149] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[  860.672434][T15149] ath9k_htc: Failed to initialize the device
[  860.724771][T16758] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  860.766793][T15149] usb 2-1: ath9k_htc: USB layer deinitialized
[  860.769919][T16734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2532'.
[  860.799917][   T45] keytouch 0003:0926:3333.001D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0
[  860.821924][T16764] vcan0 speed is unknown, defaulting to 1000
[  860.902627][T16734] overlay: Unknown parameter 'euid<00000000000000000000'
[  861.001347][ T5877] usb 7-1: new high-speed USB device number 57 using dummy_hcd
[  861.065379][T16734] UBIFS error (pid: 16734): cannot open "./file1", error -22
[  861.071029][ T5827] usb 2-1: USB disconnect, device number 74
[  861.085550][   T29] audit: type=1400 audit(1730317822.367:1557): avc:  denied  { mounton } for  pid=16733 comm="syz.1.2532" path="/542/bus/file0" dev="tmpfs" ino=2946 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  861.771461][ T5877] usb 7-1: Using ep0 maxpacket: 8
[  861.800930][T15149] usb 4-1: USB disconnect, device number 69
[  861.839636][ T5877] usb 7-1: New USB device found, idVendor=061d, idProduct=c120, bcdDevice=e3.67
[  861.867810][ T5877] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  861.896958][ T5877] usb 7-1: config 0 descriptor??
[  861.921068][ T5877] quatech2 7-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected
[  862.268300][T16783] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2542'.
[  862.631466][ T5877] usb 7-1: qt2_setup_urbs - submit read urb failed -8
[  862.638441][ T5877] quatech2 7-1:0.0: probe with driver quatech2 failed with error -8
[  862.936759][T16792] netlink: 'syz.7.2543': attribute type 33 has an invalid length.
[  862.944805][T16792] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2543'.
[  863.386670][   T29] audit: type=1326 audit(1730317824.267:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16787 comm="syz.7.2543" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb016b7e719 code=0x0
[  864.018958][ T5877] usb 7-1: USB disconnect, device number 57
[  865.199769][T16796] hfsplus: unable to parse mount options
[  865.463450][T16818] netlink: 'syz.7.2550': attribute type 33 has an invalid length.
[  865.471435][T16818] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2550'.
[  865.486523][   T29] audit: type=1326 audit(1730317826.787:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16809 comm="syz.7.2550" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb016b7e719 code=0x0
[  867.621328][   T29] audit: type=1400 audit(1730317827.987:1560): avc:  denied  { connect } for  pid=16821 comm="syz.1.2551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  867.641131][   T29] audit: type=1400 audit(1730317827.987:1561): avc:  denied  { read } for  pid=16821 comm="syz.1.2551" laddr=172.20.20.170 lport=5 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  868.133557][T16826] wireguard0: entered promiscuous mode
[  868.139148][T16826] wireguard0: entered allmulticast mode
[  868.686383][T16834] xt_hashlimit: overflow, try lower: 3/0
[  868.956336][T16837] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2555'.
[  869.075543][   T29] audit: type=1326 audit(1730317830.377:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16836 comm="syz.3.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d7f57e719 code=0x7ffc0000
[  869.112937][   T29] audit: type=1326 audit(1730317830.407:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16836 comm="syz.3.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d7f57e719 code=0x7ffc0000
[  869.141662][   T29] audit: type=1326 audit(1730317830.447:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16836 comm="syz.3.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9d7f57d0b0 code=0x7ffc0000
[  869.273910][   T29] audit: type=1326 audit(1730317830.447:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16836 comm="syz.3.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9d7f57d0b0 code=0x7ffc0000
[  869.350626][   T29] audit: type=1326 audit(1730317830.467:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16836 comm="syz.3.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d7f57e719 code=0x7ffc0000
[  869.377649][   T29] audit: type=1326 audit(1730317830.467:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16836 comm="syz.3.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9d7f57e719 code=0x7ffc0000
[  869.605360][   T29] audit: type=1326 audit(1730317830.467:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16836 comm="syz.3.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d7f57e719 code=0x7ffc0000
[  869.695800][T16854] netlink: 'syz.5.2557': attribute type 33 has an invalid length.
[  869.703739][T16854] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2557'.
[  870.106643][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  870.119593][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  870.226281][   T29] audit: type=1326 audit(1730317830.477:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16836 comm="syz.3.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f9d7f57e719 code=0x7ffc0000
[  870.280647][T16857] netlink: 'syz.6.2560': attribute type 1 has an invalid length.
[  870.306770][   T29] audit: type=1326 audit(1730317830.477:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16836 comm="syz.3.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d7f57e719 code=0x7ffc0000
[  870.337172][   T29] audit: type=1326 audit(1730317830.477:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16836 comm="syz.3.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d7f57e719 code=0x7ffc0000
[  872.518952][T16874] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  872.971522][T16874] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  872.977596][T16874] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  873.276230][T16897] xt_hashlimit: overflow, try lower: 3/0
[  873.286042][ T5827] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[  873.360552][T16896] netlink: 'syz.5.2567': attribute type 33 has an invalid length.
[  873.368527][T16896] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2567'.
[  873.461305][ T5827] usb 2-1: Using ep0 maxpacket: 8
[  873.513905][ T5827] usb 2-1: config 0 has an invalid interface number: 243 but max is 0
[  873.534641][ T5827] usb 2-1: config 0 has no interface number 0
[  873.554319][ T5827] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice=24.93
[  873.571348][ T5877] usb 7-1: new high-speed USB device number 58 using dummy_hcd
[  873.585479][ T5827] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  873.610210][ T5827] usb 2-1: Product: syz
[  873.615384][ T5827] usb 2-1: Manufacturer: syz
[  873.620060][ T5827] usb 2-1: SerialNumber: syz
[  873.633158][ T5827] usb 2-1: config 0 descriptor??
[  873.741310][ T5877] usb 7-1: Using ep0 maxpacket: 32
[  873.749580][ T5877] usb 7-1: config 0 has no interfaces?
[  873.758343][ T5877] usb 7-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=8a.0a
[  873.772815][ T5877] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  873.780987][ T5877] usb 7-1: Product: syz
[  873.788779][ T5877] usb 7-1: Manufacturer: syz
[  873.794383][ T5877] usb 7-1: SerialNumber: syz
[  873.812170][ T5877] usb 7-1: config 0 descriptor??
[  874.205965][   T29] kauditd_printk_skb: 56 callbacks suppressed
[  874.205978][   T29] audit: type=1400 audit(1730317835.507:1628): avc:  denied  { bind } for  pid=16900 comm="syz.5.2569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  874.235490][T16887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  874.284417][T16887] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  874.324417][T16889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  874.358983][T16889] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  874.658336][T16912] netlink: 'syz.5.2571': attribute type 33 has an invalid length.
[  874.666327][T16912] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2571'.
[  874.688833][ T5828] Bluetooth: hci4: command 0x0c1a tx timeout
[  874.833132][   T29] audit: type=1326 audit(1730317835.987:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16908 comm="syz.5.2571" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7589b7e719 code=0x0
[  875.105360][ T5828] Bluetooth: hci1: command 0x0405 tx timeout
[  875.111682][ T5828] Bluetooth: hci5: command 0x0c1a tx timeout
[  875.565002][T16917] netlink: 'syz.3.2573': attribute type 30 has an invalid length.
[  875.643293][T16922] team_slave_1: mtu greater than device maximum
[  875.656594][ T5827] usb 2-1: USB disconnect, device number 75
[  875.671540][T16922] team0: Device team_slave_1 failed to change mtu
[  876.021331][T14572] usb 7-1: USB disconnect, device number 58
[  877.908156][   T29] audit: type=1326 audit(1730317839.207:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16939 comm="syz.7.2580" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb016b7e719 code=0x0
[  877.931137][    C1] vkms_vblank_simulate: vblank timer overrun
[  878.391297][ T5827] usb 7-1: new high-speed USB device number 59 using dummy_hcd
[  878.543215][ T5827] usb 7-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice= 0.00
[  878.552715][ T5827] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  878.592934][ T5827] usb 7-1: config 0 descriptor??
[  878.597346][T16956] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2584'.
[  879.753073][ T5827] gs_usb 7-1:0.0: Couldn't send data format (err=-110)
[  879.759988][ T5827] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -110
[  880.609615][T16951] xt_hashlimit: overflow, try lower: 3/0
[  880.610433][   T29] audit: type=1326 audit(1730317841.897:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16947 comm="syz.1.2583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7117e719 code=0x7ffc0000
[  880.641021][   T29] audit: type=1326 audit(1730317841.897:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16947 comm="syz.1.2583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f4c7117e719 code=0x7ffc0000
[  880.664889][   T29] audit: type=1326 audit(1730317841.897:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16947 comm="syz.1.2583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7117e719 code=0x7ffc0000
[  880.689010][   T29] audit: type=1326 audit(1730317841.897:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16947 comm="syz.1.2583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4c7117d0b0 code=0x7ffc0000
[  880.713057][   T29] audit: type=1326 audit(1730317841.897:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16947 comm="syz.1.2583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7117e719 code=0x7ffc0000
[  880.736851][   T29] audit: type=1326 audit(1730317841.907:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16947 comm="syz.1.2583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7117e719 code=0x7ffc0000
[  880.761410][   T29] audit: type=1326 audit(1730317841.907:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16947 comm="syz.1.2583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f4c7117e719 code=0x7ffc0000
[  880.785172][   T29] audit: type=1326 audit(1730317841.907:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16947 comm="syz.1.2583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7117e719 code=0x7ffc0000
[  880.808910][   T29] audit: type=1326 audit(1730317841.907:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16947 comm="syz.1.2583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7117e719 code=0x7ffc0000
[  880.842045][   T29] audit: type=1326 audit(1730317841.907:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16947 comm="syz.1.2583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4c7117e719 code=0x7ffc0000
[  880.883002][T15149] usb 7-1: USB disconnect, device number 59
[  881.564699][T16978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  882.261563][T16978] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  884.916226][   T80] Bluetooth: (null): Too short H5 packet
[  884.922145][   T80] Bluetooth: (null): Invalid header checksum
[  884.928273][   T80] Bluetooth: (null): Invalid header checksum
[  884.934340][   T80] Bluetooth: (null): Invalid header checksum
[  887.475594][T16945] Process accounting resumed
[  888.618764][T17048] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.2605'.
[  888.628341][T17048] netlink: 'syz.5.2605': attribute type 2 has an invalid length.
[  888.826108][   T29] kauditd_printk_skb: 30 callbacks suppressed
[  888.826125][   T29] audit: type=1400 audit(1730317850.127:1671): avc:  denied  { execute } for  pid=17023 comm="syz.7.2600" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  888.835386][T17053] ------------[ cut here ]------------
[  888.863384][T17053] kernel BUG at mm/page_table_check.c:157!
[  888.873736][T17053] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI
[  888.880851][T17053] CPU: 1 UID: 0 PID: 17053 Comm: syz.7.2600 Not tainted 6.12.0-rc5-syzkaller-00044-gc1e939a21eb1 #0
[  888.891592][T17053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  888.901640][T17053] RIP: 0010:__page_table_check_zero+0x2f8/0x360
[  888.907889][T17053] Code: ff 48 89 ef e8 69 d1 ff ff 48 83 c4 10 5b 5d 41 5c 41 5d 41 5e 41 5f e9 06 5a 92 ff e8 01 5a 92 ff 90 0f 0b e8 f9 59 92 ff 90 <0f> 0b e8 f1 59 92 ff 90 0f 0b e8 39 e0 f3 ff e9 8a fd ff ff 48 c7
[  888.927527][T17053] RSP: 0018:ffffc90004237868 EFLAGS: 00010293
[  888.933585][T17053] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff81fb216d
[  888.941554][T17053] RDX: ffff88802f4a4880 RSI: ffffffff81fb2287 RDI: 0000000000000005
[  888.949528][T17053] RBP: ffff88801d630000 R08: 0000000000000005 R09: 0000000000000000
[  888.957488][T17053] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000
[  888.965450][T17053] R13: 000000000000000a R14: ffff88801d63004c R15: dffffc0000000000
[  888.973447][T17053] FS:  00007fb0165de6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  888.982369][T17053] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  888.988949][T17053] CR2: 00007fb0165ddf98 CR3: 0000000035496000 CR4: 00000000003526f0
[  888.996946][T17053] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  889.004904][T17053] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  889.012869][T17053] Call Trace:
[  889.016138][T17053]  <TASK>
[  889.019055][T17053]  ? die+0x31/0x80
[  889.022771][T17053]  ? do_trap+0x232/0x430
[  889.027007][T17053]  ? __page_table_check_zero+0x2f8/0x360
[  889.032632][T17053]  ? __page_table_check_zero+0x2f8/0x360
[  889.038252][T17053]  ? do_error_trap+0xf4/0x230
[  889.042977][T17053]  ? __page_table_check_zero+0x2f8/0x360
[  889.048620][T17053]  ? handle_invalid_op+0x34/0x40
[  889.053562][T17053]  ? __page_table_check_zero+0x2f8/0x360
[  889.059198][T17053]  ? exc_invalid_op+0x2e/0x50
[  889.063864][T17053]  ? asm_exc_invalid_op+0x1a/0x20
[  889.068883][T17053]  ? __page_table_check_zero+0x1dd/0x360
[  889.074520][T17053]  ? __page_table_check_zero+0x2f7/0x360
[  889.080155][T17053]  ? __page_table_check_zero+0x2f8/0x360
[  889.085783][T17053]  ? __page_table_check_zero+0x2f7/0x360
[  889.091414][T17053]  __free_pages_ok+0x54e/0xb70
[  889.096168][T17053]  hcd_buffer_free_pages+0xe8/0x180
[  889.101357][T17053]  dec_usb_memory_use_count+0x27b/0x410
[  889.106893][T17053]  ? __pfx_usbdev_vm_close+0x10/0x10
[  889.112621][T17053]  mmap_region+0x1e06/0x28f0
[  889.117206][T17053]  ? __pfx_mmap_region+0x10/0x10
[  889.122139][T17053]  ? __pfx_mark_lock+0x10/0x10
[  889.126908][T17053]  ? bpf_lsm_mmap_addr+0x9/0x10
[  889.131748][T17053]  ? security_mmap_addr+0x6c/0x1e0
[  889.136849][T17053]  ? __get_unmapped_area+0x26b/0x3a0
[  889.142133][T17053]  do_mmap+0xc00/0xfc0
[  889.146191][T17053]  vm_mmap_pgoff+0x1ba/0x360
[  889.150774][T17053]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  889.155873][T17053]  ? __fget_files+0x244/0x3f0
[  889.160545][T17053]  ksys_mmap_pgoff+0x32c/0x5c0
[  889.165295][T17053]  ? rcu_is_watching+0x12/0xc0
[  889.170070][T17053]  __x64_sys_mmap+0x125/0x190
[  889.174745][T17053]  do_syscall_64+0xcd/0x250
[  889.179262][T17053]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  889.185159][T17053] RIP: 0033:0x7fb016b7e719
[  889.189567][T17053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  889.209166][T17053] RSP: 002b:00007fb0165de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  889.217574][T17053] RAX: ffffffffffffffda RBX: 00007fb016d36130 RCX: 00007fb016b7e719
[  889.225551][T17053] RDX: 000000000000000f RSI: 0000000000400000 RDI: 0000000020000000
[  889.233522][T17053] RBP: 00007fb016bf132e R08: 0000000000000004 R09: 0000000000000000
[  889.241486][T17053] R10: 0000000000011012 R11: 0000000000000246 R12: 0000000000000000
[  889.249464][T17053] R13: 0000000000000000 R14: 00007fb016d36130 R15: 00007fff5db8a158
[  889.257444][T17053]  </TASK>
[  889.260451][T17053] Modules linked in:
[  889.265214][T17053] ---[ end trace 0000000000000000 ]---
[  889.354873][T17053] RIP: 0010:__page_table_check_zero+0x2f8/0x360
[  889.361407][T17053] Code: ff 48 89 ef e8 69 d1 ff ff 48 83 c4 10 5b 5d 41 5c 41 5d 41 5e 41 5f e9 06 5a 92 ff e8 01 5a 92 ff 90 0f 0b e8 f9 59 92 ff 90 <0f> 0b e8 f1 59 92 ff 90 0f 0b e8 39 e0 f3 ff e9 8a fd ff ff 48 c7
[  889.384240][T17053] RSP: 0018:ffffc90004237868 EFLAGS: 00010293
[  889.390382][T17053] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff81fb216d
[  889.398804][T17053] RDX: ffff88802f4a4880 RSI: ffffffff81fb2287 RDI: 0000000000000005
[  889.407808][T17053] RBP: ffff88801d630000 R08: 0000000000000005 R09: 0000000000000000
[  889.416081][T17053] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000
[  889.424127][T17053] R13: 000000000000000a R14: ffff88801d63004c R15: dffffc0000000000
[  889.432326][T17053] FS:  00007fb0165de6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  889.441457][T17053] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  889.448119][T17053] CR2: 00007fff2c3b3ff8 CR3: 0000000035496000 CR4: 00000000003526f0
[  889.456215][T17053] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  889.464317][T17053] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  889.472553][T17053] Kernel panic - not syncing: Fatal exception
[  889.478826][T17053] Kernel Offset: disabled
[  889.483133][T17053] Rebooting in 86400 seconds..