last executing test programs:

1m15.564216896s ago: executing program 4 (id=635):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x41}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x4, &(0x7f00000001c0)=[{0x15, 0x0, 0x2}, {0x81, 0xfc, 0x7f}, {0x2}, {0x6, 0x0, 0x0, 0xf00}]})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="400000001000010400"/20], 0x40}}, 0x0)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
r4 = socket$nl_generic(0x11, 0x3, 0x10)
sendmsg(r4, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)
ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000080)=0x1)
getsockopt$bt_hci(r3, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x301b81, 0x0)
socket$netlink(0x10, 0x3, 0x1f)
r6 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x1a7001, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kfree\x00', r8}, 0x10)
r9 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r8, 0x84, 0xf, &(0x7f0000001080)={<r10=>0x0, @in={{0x2, 0x4e23, @broadcast}}, 0x1, 0x1, 0x4, 0x1c8, 0x3}, &(0x7f0000001140)=0x98)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000011c0)={r10, @in6={{0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x82}}, 0x4, 0xfbe8}, 0x90)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000000005000d000100000005000d000200000008000b4000001e82060005004e210000140007"], 0x70}}, 0x0)
ioctl$IMADDTIMER(r6, 0x80044940, &(0x7f00000000c0)=0x14)
r11 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_REQBUFS(r11, 0xc0145608, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x9}, 0x50)

1m11.874430332s ago: executing program 4 (id=640):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x3, [@union={0x0, 0x0, 0x0, 0xd}, @var={0x2, 0x0, 0x0, 0xe, 0x4, 0x1}, @int={0xf, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x17, 0x7}]}, {0x0, [0x30]}}, &(0x7f0000000180)=""/248, 0x47, 0xf8, 0x1, 0x0, 0x0, @void, @value}, 0x20)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001e80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000090000000060a010400000000000000000100000008000b400000000068000480300001800e000100696d6d6564696174650000001c0002800800014000000000100002800c0002800800018000000000340001800c0001006269747769736500240002800800034000000004080002400000000008000640000000000800"], 0x104}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000bc0)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0)
socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0)
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x9, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
sendto$inet6(r4, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @local, 0x6}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)='v', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000001c0)="f8", 0x1}], 0x11, &(0x7f00000026c0)=ANY=[], 0x318}}], 0x2, 0x400c404)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x0, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r5}, 0x10)
socket$inet6_udp(0xa, 0x2, 0x0)

1m10.67003939s ago: executing program 4 (id=642):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000711214000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000005, 0x1012, r2, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, &(0x7f0000000140)={0x28, 0x0, r3, r4, 0x0, 0x0, 0x0, 0x87, &(0x7f0000000dc0)="e42162882ca80d5eabe891e6a81df8d59252ce6a0ca84a0489df587d59b7e34c91d8aa9de2b033fe970c55a97081efdb6924bd6c319b3186194763bf148622a3cee5f36fcc1768d389d1d1fa082ca92b8f6aa7425586c886da57a2fdb99ff1895d6623e6654a5a1db5a1ea02c12da225ff5f4ec22ee4bfa1e778c2a4c7add3ee9ff928d0a71871"})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000001080)={'syztnl0\x00', &(0x7f0000001000)={'gre0\x00', <r5=>0x0, 0x7, 0x1, 0x5, 0x4, {{0x18, 0x4, 0x2, 0x28, 0x60, 0x65, 0x0, 0xa, 0x2f, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x3b}, {[@timestamp_addr={0x44, 0x4c, 0x8b, 0x1, 0xb, [{@loopback, 0x7fff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xc}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xd984}, {@loopback, 0xe}, {@local, 0x7}, {@empty, 0x151}, {@rand_addr=0x64010101, 0x2}, {@multicast2, 0x30}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x3}]}]}}}}})
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r5, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40, @void, @value}, 0x94)
r6 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0)
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000010c0), 0x34000, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r8, 0x3ba0, &(0x7f0000001100)={0x48, 0x2, r4})
write$binfmt_aout(r7, &(0x7f00000010c0)=ANY=[], 0x1a3)
write$binfmt_misc(r7, &(0x7f0000000140), 0xff79)
ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}})
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000f40)={@fallback=r6, 0x35, 0x0, 0x3, &(0x7f00000001c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000e80)=[0x0, 0x0, 0x0], &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000f00)=[0x0, 0x0]}, 0x40)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
read$snapshot(r7, &(0x7f0000000f80)=""/106, 0x6a)
mount(&(0x7f0000000100)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='hfs\x00', 0x0, &(0x7f0000000340))

1m9.94451497s ago: executing program 4 (id=644):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
r5 = getpid()
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRES8=r5], 0x68}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x20004074}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x5c, r7, 0xe17, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00'}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}]}, 0x5c}}, 0x0)

1m9.01394101s ago: executing program 4 (id=648):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_DEL_TX_TS(r4, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000002000)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000800)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00')
pread64(r5, &(0x7f0000000240)=""/169, 0xa9, 0x0)
setsockopt$MRT6_DONE(r5, 0x29, 0xc9, 0x0, 0x0)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000600)=0x2, 0x4)
sendto$inet(r6, &(0x7f0000000700)='\f', 0x1, 0x0, 0x0, 0x0)
recvmsg(r6, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x407006}, 0x104)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r7)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r7, 0x5)
syz_emit_ethernet(0x4a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600000000014060000000000000000000000ffff00000000fe80000000aa00004e2200"/58, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="54c2000090780000"], 0x0)
r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000002c0)=0x20)
r10 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r10, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
bind$unix(r10, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r11 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$FS_IOC_RESVSP(r11, 0x40305828, &(0x7f0000000080)={0x0, 0x4, 0x7, 0xff})

1m8.011009443s ago: executing program 4 (id=651):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = epoll_create1(0x0)
r2 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000100)={0xa000000d})
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000040)={0x20000010})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r4=>0x0})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0})
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x12, &(0x7f0000000240)=0x7, 0x4)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="30003300c0000000ffffffffffff080211000000505050505050000000008c10000031d48cd3fb111920f7073ef42f2f080057"], 0x54}}, 0x0)

51.868935394s ago: executing program 32 (id=651):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = epoll_create1(0x0)
r2 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000100)={0xa000000d})
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000040)={0x20000010})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r4=>0x0})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0})
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x12, &(0x7f0000000240)=0x7, 0x4)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="30003300c0000000ffffffffffff080211000000505050505050000000008c10000031d48cd3fb111920f7073ef42f2f080057"], 0x54}}, 0x0)

16.89460148s ago: executing program 2 (id=786):
r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000077f1c910720c0c0059f6010203010902240001000000000904"], 0x0)
syz_usb_connect$cdc_ecm(0x1, 0x132, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x120, 0x1, 0x1, 0x6, 0xa0, 0x8, [{{0x9, 0x4, 0x0, 0x1, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xff}, {0xd, 0x24, 0xf, 0x1, 0xa77, 0x4, 0x8, 0x8d}, [@acm={0x4, 0x24, 0x2, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0xc6c87661f3462399, 0x8}, @country_functional={0x12, 0x24, 0x7, 0x9, 0x9, [0x2, 0x35, 0x0, 0x0, 0x0, 0x6]}, @dmm={0x7, 0x24, 0x14, 0xffff, 0x2}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0x7, 0x6f, 0x3}, @mdlm_detail={0xbc, 0x24, 0x13, 0x0, "fe0fe3e3513171279d4f4019e5b215ee6b333edec53ecf410a55a7b2e55a3d57fb9e45f52eb83e6e7cc851c6007581cf08fae24ae0e1c6c62600af9dbca449e8a9e93a1858e6395b6dcb753958261d7c9b27ba4ec1d17c54a9cb65d23669f6ea8b9099a9854227f1632b0b9bc4dba23d61440aed6ba95de97f6d921234eb5206de529e92fd530455f0a949e93e93923957c507747f7852b6289fbc2610907d9fe05655ba0e913cbc042c5322b8fd0f168f0d3369763cce7b"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x5, 0x0, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x3, 0x8, 0x5}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x4, 0x7, 0xf9, 0xff, 0x6}, 0x24, &(0x7f0000000240)={0x5, 0xf, 0x24, 0x3, [@wireless={0xb, 0x10, 0x1, 0x8, 0x28, 0x0, 0x6, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x60, 0x3, 0xc}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x2, 0x4, 0x1}]}, 0x3, [{0x29, &(0x7f00000002c0)=@string={0x29, 0x3, "61abb835a28343fc9d8ba7ae28252a28e4263c522e6f7053bc324af80aaf10cbeecf6530d01559"}}, {0x7b, &(0x7f0000000300)=@string={0x7b, 0x3, "4e932f068c745a394b715c106ae0d94d0cf773df4a7b6fe6be85f4a57e9565c3cee69b1cd1ea896130e7314300e3e8a97eb2116a803540054319f0c9b0de6398adf4904fd05c0b38a4b9b827b4ff1b7b4d550b915aa727ecaca256a49a929fe321205153e0499dea1176d573023ebf4c58681881b1fae14907"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x41c}}]})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
syz_open_dev$vim2m(&(0x7f0000000480), 0xfffffffffffffffe, 0x2)
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x42)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x11, 0x2, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e)
listen(r2, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$int_in(r3, 0x5421, &(0x7f0000000080)=0x7)
connect$unix(r3, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e)
r4 = syz_open_dev$hidraw(&(0x7f0000000400), 0x9f1, 0xd4280)
ioctl$HIDIOCSFEATURE(r4, 0xc0404806, &(0x7f0000000440)="ddbbcbba14b173e3debded88d998af81cb513c4d10c018e39016cd26940fe7d7f8b2ed392d2c77106b0060e7")
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r5)
openat$cgroup_int(r5, &(0x7f0000000080)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r5, {r3}}, './file0\x00'})

14.327661754s ago: executing program 0 (id=791):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0)
socket$alg(0x26, 0x5, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/ip_vs_stats\x00')
preadv(r3, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0)
bind$alg(r2, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = io_uring_setup(0x410f, &(0x7f0000000080)={0x0, 0xafbf, 0x800, 0x0, 0x80000})
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000001280)={0x5, 0x4, 0x81})
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, &(0x7f00000002c0)={0x800000000003ff, 0x0, 0x1, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
r6 = syz_io_uring_setup(0x247b, 0x0, &(0x7f0000000040), &(0x7f0000000180))
mmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x2, 0x12, r0, 0x711a8000)
io_uring_enter(r6, 0xa3d, 0x0, 0x13, 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}], 0x0, 0x2}, 0x20)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180))
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY_RESELECT={0x5}, @IFLA_BOND_FAIL_OVER_MAC={0x5}]}}}]}, 0x44}}, 0x0)
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xc, 0x12, r8, 0x80000000)

14.171058919s ago: executing program 1 (id=792):
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000b10b5103a09222689b5010203010902240001000000000904000002f46479000905ff47"], 0x0)
socket$igmp6(0xa, 0x3, 0x2)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000404c05d50310000200000109022400010000000009041200010300000009"], 0x0)
r2 = syz_io_uring_setup(0xec5, 0x0, &(0x7f0000000500)=<r3=>0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_usb_control_io(r1, 0x0, 0x0)
r4 = syz_usb_connect$cdc_ecm(0x1, 0x85, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002020000102505a1a44000010203010902730001010f80ff090400ff02020600800a2406"], &(0x7f0000000400)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x9, 0x0, 0x5, 0x20, 0x4}, 0x23, &(0x7f0000000780)=ANY=[@ANYBLOB="050f23000214100423caada9ce6063ccc93beee470f123ccf00a100300010001e53ec47d5306f8bd99058b2b13d2a02f210b06e362c3ddd88aadae4ff2049d2a973ec871efa4dc356ba6"], 0x2, [{0x0, 0x0}, {0x0, 0x0}]})
syz_usb_control_io$cdc_ecm(r4, &(0x7f00000004c0)={0x14, &(0x7f0000000540)={0x0, 0x9, 0xd2, {0xd2, 0xd, "d5e8f6104f3feafbc8c42ade9e47e7eca70f7faba2705fe1e700f1a4e6aac3ff0a72d4fbeffc58e94a77abb60e0678de91d6d2a3d33b82bfc9a0701af060cf0d3cecf7d95c5d27947fbccb833cb4c5018eb3971b64fa521f99c11110e9fd4d67807927043d773a5642c829fc3a3670242a432f84d0f4e836b32b7c9c7f14efc55e0ed89b567b6b79e489f7294e63f3f848d42a922106e1c705e879960d04dc93b289b6e58c8abd9e3b2b1be9fb28ff6bc98582c149916f9bd07d5883b4cf15bf3af80487490820cb775ff0b8c29aa5e2"}}, &(0x7f0000000480)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000740)={0x1c, 0x0, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0xe9}})
syz_usb_control_io$hid(r1, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
syz_usb_connect(0x0, 0x2d4, 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f0000000080)={0x7f, 0x14, 0x21, 0x4, "01800000cd91582af51d010000000000004000"})
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280), 0xffffffffffffffff)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x100)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002000))
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)="d6dd000a42")
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006380)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}], 0x1, &(0x7f0000000c80), 0x0, 0x4000014}}, {{&(0x7f0000000d00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001240)=[{&(0x7f0000000bc0)="4d5c99c9cb9e7bbd3420686d85f1846e22248d8be21561640eaa6b89b326c223cb56be76933a8eb95909063bcdae0e669bdb84bcfaefc71d", 0x38}, {0x0}, {&(0x7f0000001000)="31f5b3582e92730e88ea64c839a0e219fc149c8c4bb4bb854f2f", 0x1a}, {&(0x7f0000001080)="1ba1b470ea5aecdb6baa8f2af1b26e35d0ec561ab83f2422a29a8147abd050b02efae897ee6ce23577783b731b5ff5bfb6bd71ceb323a2ca8a22f0f7ad5a8b3a91db8d07601cdcbfa1bd12dbd6a0fdd67a0468593a0b845fb9e2144b14a3e1b1b3bc0c0b959e60b3f168570b1c545ee618a9e49e43c70d534984c35c6d8c082cc7c99d5932230073dafa95fd5a1eb7790141baf827bdb8aa44236f", 0x9b}, {&(0x7f0000001140)}], 0x5, &(0x7f0000001400)=[@rights={{0x24, 0x1, 0x1, [r5, r2, r2, r5, r5]}}, @cred={{0x1c}}], 0x48, 0x40041}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, {{&(0x7f0000001d40)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001fc0), 0x0, &(0x7f0000006300), 0x0, 0x20000000}}], 0x4, 0x0)
setfsuid(0xee01)
r7 = timerfd_create(0x0, 0x0)
timerfd_settime(r7, 0x0, &(0x7f0000000240)={{}, {0x0, 0x3938700}}, 0x0)
readv(r7, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/134, 0x86}], 0x1)
syz_usb_control_io$hid(r0, 0x0, 0x0)

13.2300255s ago: executing program 2 (id=795):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)={0x0, 0x13, 0x1, "f2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0xffffffffffffff61)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x13c}}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r5 = socket(0x1e, 0x4, 0x0)
r6 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r5, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x1, 0x9200000000000000)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)
r8 = socket(0xa, 0x2400000001, 0x0)
getsockopt$inet6_buf(r8, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90)
r9 = fanotify_init(0x200, 0x0)
fanotify_mark(r9, 0x39, 0x1a, r7, 0x0)

11.273303256s ago: executing program 0 (id=796):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x80, 0x0)
pwritev(r1, 0x0, 0x0, 0x10000, 0x6)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x4c, 0x0, 0x8, 0x801, 0x0, 0x0, {0x5, 0x0, 0xa}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8847}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0xe, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
socket$inet_smc(0x2b, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000300)={'filter\x00', 0x7, 0x4, 0x3e8, 0x1d0, 0xe8, 0xe8, 0x300, 0x300, 0x300, 0x4, &(0x7f0000000100), {[{{@arp={@multicast1, @multicast2, 0xff, 0xffffff00, 0xd, 0xfe, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0x0, 0xff, 0xff]}}, 0xb, 0x2, 0xfff0, 0x5, 0x0, 0x7, 'wg0\x00', 'geneve0\x00', {}, {0xff}, 0x0, 0x14f}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x10, 0xffff}}}, {{@arp={@local, @multicast1, 0xff, 0xffffff00, 0x9, 0xb, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0xff]}}, 0x2e, 0xf5d, 0x9, 0x5, 0x7, 0x400, 'netpci0\x00', 'team_slave_0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x289}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7fff, 0x0, 0x3925, 0x1, 0x0, "b2624eb7c2a6e25151693f7d192cc45273b8065ed066980cd6ad6cca87a65e7b0854134b6b2413256ab5aeae621c55ab026363ee2b95ac8c5e1e08bc7d4265bd"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto, @typedef={0x0, 0x0, 0x0, 0x10, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149)

10.448158688s ago: executing program 0 (id=797):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r0)
keyctl$read(0x1d, r1, 0x0, 0x0)
keyctl$KEYCTL_MOVE(0x1e, r0, r0, r1, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000000180)=[{&(0x7f0000000200)='A', 0x1}], 0x1, 0x0)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x20000000})
setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000000)=0x1, 0x4)
openat$dlm_control(0xffffffffffffff9c, 0x0, 0x101, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000cc0)={0x18, 0x38, 0x9, 0x9, 0x0, {0x1}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
ioperm(0x7, 0x449, 0x7ff)
rt_sigpending(0x0, 0x1000000)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SWAP(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, 0x6, 0x6, 0x57c8a51c4dbf2e35, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xc004}, 0x4)
syz_usb_connect(0x0, 0x34, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x92, 0xdf, 0x55, 0x10, 0x5ac, 0x9226, 0xb289, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0xe9, 0x0, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "d77b5d2898"}]}}]}}]}}]}}, 0x0)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r6, &(0x7f00000001c0)=[{0x0, 0xe1, 0x0, 0x0, @time={0x0, 0x1}, {}, {}, @result}], 0x1c)
write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
ioctl$FBIOBLANK(r7, 0x4611, 0x0)
syz_open_dev$sg(&(0x7f0000000080), 0x80000000000000, 0x480000)

10.323205689s ago: executing program 1 (id=798):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10002, 0x1, 0x1})
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)

10.276728204s ago: executing program 5 (id=799):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000380)=@broute={'broute\x00', 0x20, 0x1, 0x178, [0x4, 0x3fffff, 0x7bc, 0x10000, 0x100000003, 0x3], 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYRES64=r1]}, 0x80)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200408c4, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x5, 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x9)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x400000000000099, 0x2, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe050000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r6, 0x0, 0xffffffffffffffff}, 0x18)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioperm(0x0, 0x444, 0xb1e)
syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x2005885, 0x220, 0x0, 0x3ad}, &(0x7f0000000240)=<r7=>0x0, &(0x7f00000001c0)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd=r1, 0x9, 0x0, 0x0, 0x15, 0x1, {0x1}})
io_uring_enter(r6, 0x3513, 0xffffffff, 0x0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000500)={'#! ', '', [{0x20, 'cgroup.controllers\x00'}, {0x20, '\x13$/-'}, {0x20, '\x00'}, {0x20, '\x00\x89\xbd\x82\xa3*\xdf\xcf`\xd3^\xd0d\xc4i\r\fB\"\xd8\xe2&\x95\xa5oWX\xc8y\x10m\xa8\xdd\xa8\xda\n\xd8\xbcU\x16\xcc\xf3yN\xb8\xffd\xf2\x13}\x99\x15\xf5\xb5T;\x02_N\xe5BlC\xba\x0e\x01\xe5\xe9\xb1\xf1\xa8\xbfD\xc4\xfd(&\xe4\xa5\xca\x18/\xfc\xf7\xff\xf65E3\r\x0e\x89\xecr\xd9\xb5k\xd1\x94c\x17\xab\x1a\x14f\x97\xd5\x87Y\xb1\x89\x16[IP\x06r\x17\x8f*\x85\xe4e\x80\xe3\x97+\x9e!\"&\x8d\xa0\x87\xf7\x94n\xcb\x9e\x8cxH\xb3\xbf8\xb4>F?\xab\x81\xdb\x1e\xf0\x8e?$\xf9\xd3\x02\xf47\xb2vH\xbb\f\r\xe3U\xc7\x90\xeb6\xfeV\x97\xfd\xcdJ\xef+\xe7<\xf1\x0e)F\xb6\xa8O\xfd\xc5'}, {0x20, '#! '}, {0x20, '\x00'}]}, 0xe7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000009, 0x28011, r0, 0x0)
r9 = socket$inet(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x178, [], 0x0, 0x0, 0x0}, 0x1f0)

8.986021694s ago: executing program 3 (id=801):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r0 = syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0xf67c, 0x8}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
syz_open_dev$usbfs(0x0, 0xb, 0x13b003)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
mount(0x0, 0x0, &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0xa})
io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0)

8.886952482s ago: executing program 5 (id=802):
r0 = openat$cuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
mkdir(0x0, 0x0)
r4 = syz_open_dev$swradio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x100008)
ioctl$VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000080)={0x1, 0xb, 0x1, "a0e0f75acb43c4bdf4030000000000000000ae909f950000000800", 0x3132564e})
read$FUSE(r0, &(0x7f0000004bc0)={0x2020}, 0x2020)
syz_io_uring_setup(0x10d, &(0x7f00000003c0)={0x0, 0x5885, 0x20, 0x0, 0x29b}, &(0x7f0000000340)=<r5=>0x0, &(0x7f0000000280))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x408400, 0x0)
r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r7 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r7, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000900)='Z', 0xffaa}, {&(0x7f0000000040)="a3d7f3e8a9cf9e3887a6f6eca30e90d85fcfa281378973ab916b0e1d03bd28bca55c552da8cfecb0fbccbfb18ef20fe9541e0e1e8fa214cb6bb0455c2386f5ebb4730be449beb72f481c1429d6eb835b76fd1fdcacd50b884c98caa871ec4e225b6036b6ad2638ab5b06828c10fc355b170075f37b748b8f466fe29f40ec981d1431132bca9884654780b3205ed61f49c3b3b6229593e61d13a8505de19a8a0f502d4f3148f9450ed35ef5950bb7fefcf299beed14", 0xb5}], 0x2}, 0x0)
ioctl$SIOCX25SENDCALLACCPT(r7, 0x89e9)
fcntl$dupfd(r6, 0x0, r6)

8.437974594s ago: executing program 1 (id=803):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}, 0x1, 0x7000000}, 0x0)

8.237558963s ago: executing program 1 (id=804):
r0 = socket$inet(0x2, 0xa, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0)
set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', <r6=>0x0})
r7 = socket(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000425bd7000fddbdf250100000008000300", @ANYRES32=0x0, @ANYBLOB="e9f027b45a5235efafc985aaa7ce61a55c3a33b988ca2d897fc8a0fd5515c33ab5f763816bdac4a3f3897260fe49c495e616231cd23bd0beb2fc45d9653de3abe011f5c1a2b2a860a0ba49cbb6df8f94764ebf87cdb70d8c4a2298ddff3d6b5ee9ed17b26dae0a391d7231fe37fa290b5223d3a842de8991991ee19e0ec25e5b20d78e35d3f13788a761a45c352fad32799d20974f4ca2e35dd3f039911f2800d5ec6d"], 0x1c}, 0x1, 0x0, 0x0, 0x4880}, 0x80)
sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000280)=@newqdisc={0x6c, 0x24, 0xf0b, 0x2, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0xfb, '\x00', 0xffffffff, 0x7, 0x5}}}}]}, 0x6c}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00'}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x14)

8.131292141s ago: executing program 3 (id=805):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
getpid()
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, 0x0, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x20004074}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x5c, r6, 0xe17, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00'}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}]}, 0x5c}}, 0x0)

7.205138099s ago: executing program 0 (id=806):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$inet6(0x10, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfff00001}, {0x16}]}, 0x10)
sendto$inet6(r0, &(0x7f00000002c0)="100000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0)
r1 = socket(0x1, 0x80002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="185b000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b24, &(0x7f0000000000)={'wlan0\x00'})
r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
name_to_handle_at(0xffffffffffffffff, &(0x7f0000004740)='\x00', &(0x7f0000004780)=@fuse={0xc}, 0x0, 0x1200)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_bulk={0x3, {0x4, 0x1}, 0x6, 0x4, &(0x7f0000000080)="30f97330652f1ba3817f3dea7ba8acc8388726d4d9d0e8505b853f694e077115d9de6c6054709d2c93000be6350e43ab9f53156d6092c7343c6eb43cd602bfe2a9d89069417ff26c67269ccfb36a9cc750777eb18e4b0f3378f768ac46799fbf7db1db5c2310e2d2def72a9ca175a29f9c8f5eae5df0510664570794af2f328d0d1ed7c4f998f67cb7d819364c816e9e51a3230419c8833dd4d4ffe30be744630711ffb0362e2dda93fa8214708f7b7e1bece8f513f46854b404b7f4e4617eee1bb214f2e4bacbdf8afcd408ac6422b4", 0xd0, 0x3, 0xfffffffe, 0x73deb740, 0x2, 0x0, &(0x7f0000000180)="ccaea4ca21a4ec83cd9c0df735f8c68291c191f9620d93c1436ea6680ebaa4d118e2092f4abc04f0d5e38e1a7084eedf318686619e8ac6496841943a936ad17e947f189c30eefd95e462eec52c11ca38ec4751c6603dcef7c7904c2c47b89e9c39862a5f9b8258c1b16eaf5a803a2d1bde6b9608bc20e61f93e40d98c12e833b5f8fc88d40861634ee4f4839756bab813559d3c16e7b7395fbdaa06e4c10a493b7ff8b72944101e6553f42ee317554a03b0dd48be997d378617e11fb018bb2f0f1ff12e3775bc42df9851bb217ae07090d8d69b75734defaef29d662bb4807ce17315ceef810ff205e053d"})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = io_uring_setup(0x7f, &(0x7f00000002c0))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0x1c, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x15, &(0x7f0000002bc0)=[{0x0, 0x1, 0x0, 0x0, 0x0}], 0x1)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)

7.161809137s ago: executing program 2 (id=807):
socket$kcm(0x10, 0x2, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r0 = syz_io_uring_setup(0x16d0, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r4, 0x0, <r5=>0xffffffffffffffff})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x3, 0x5, 0x0, {0x0, 0x0, r5}})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

7.100797978s ago: executing program 1 (id=808):
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000b10b5103a09222689b5010203010902240001000000000904000002f46479000905ff47"], 0x0)
socket$igmp6(0xa, 0x3, 0x2)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000404c05d50310000200000109022400010000000009041200010300000009"], 0x0)
r2 = syz_io_uring_setup(0xec5, 0x0, &(0x7f0000000500)=<r3=>0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_usb_control_io(r1, 0x0, 0x0)
r4 = syz_usb_connect$cdc_ecm(0x1, 0x85, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002020000102505a1a44000010203010902730001010f80ff090400ff02020600800a2406"], &(0x7f0000000400)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x9, 0x0, 0x5, 0x20, 0x4}, 0x23, &(0x7f0000000780)=ANY=[@ANYBLOB="050f23000214100423caada9ce6063ccc93beee470f123ccf00a100300010001e53ec47d5306f8bd99058b2b13d2a02f210b06e362c3ddd88aadae4ff2049d2a973ec871efa4dc356ba6"], 0x2, [{0x0, 0x0}, {0x0, 0x0}]})
syz_usb_control_io$cdc_ecm(r4, &(0x7f00000004c0)={0x14, &(0x7f0000000540)={0x0, 0x9, 0xd2, {0xd2, 0xd, "d5e8f6104f3feafbc8c42ade9e47e7eca70f7faba2705fe1e700f1a4e6aac3ff0a72d4fbeffc58e94a77abb60e0678de91d6d2a3d33b82bfc9a0701af060cf0d3cecf7d95c5d27947fbccb833cb4c5018eb3971b64fa521f99c11110e9fd4d67807927043d773a5642c829fc3a3670242a432f84d0f4e836b32b7c9c7f14efc55e0ed89b567b6b79e489f7294e63f3f848d42a922106e1c705e879960d04dc93b289b6e58c8abd9e3b2b1be9fb28ff6bc98582c149916f9bd07d5883b4cf15bf3af80487490820cb775ff0b8c29aa5e2"}}, &(0x7f0000000480)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000740)={0x1c, 0x0, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0xe9}})
syz_usb_control_io$hid(r1, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
syz_usb_connect(0x0, 0x2d4, 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f0000000080)={0x7f, 0x14, 0x21, 0x4, "01800000cd91582af51d010000000000004000"})
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280), 0xffffffffffffffff)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x100)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002000))
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)="d6dd000a42")
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006380)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}], 0x1, &(0x7f0000000c80), 0x0, 0x4000014}}, {{&(0x7f0000000d00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001240)=[{&(0x7f0000000bc0)="4d5c99c9cb9e7bbd3420686d85f1846e22248d8be21561640eaa6b89b326c223cb56be76933a8eb95909063bcdae0e669bdb84bcfaefc71d", 0x38}, {0x0}, {&(0x7f0000001000)="31f5b3582e92730e88ea64c839a0e219fc149c8c4bb4bb854f2f", 0x1a}, {&(0x7f0000001080)="1ba1b470ea5aecdb6baa8f2af1b26e35d0ec561ab83f2422a29a8147abd050b02efae897ee6ce23577783b731b5ff5bfb6bd71ceb323a2ca8a22f0f7ad5a8b3a91db8d07601cdcbfa1bd12dbd6a0fdd67a0468593a0b845fb9e2144b14a3e1b1b3bc0c0b959e60b3f168570b1c545ee618a9e49e43c70d534984c35c6d8c082cc7c99d5932230073dafa95fd5a1eb7790141baf827bdb8aa44236f", 0x9b}, {&(0x7f0000001140)}], 0x5, &(0x7f0000001400)=[@rights={{0x24, 0x1, 0x1, [r5, r2, r2, r5, r5]}}, @cred={{0x1c}}], 0x48, 0x40041}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, {{&(0x7f0000001d40)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001fc0), 0x0, &(0x7f0000006300), 0x0, 0x20000000}}], 0x4, 0x0)
setfsuid(0xee01)
r7 = timerfd_create(0x0, 0x0)
timerfd_settime(r7, 0x0, &(0x7f0000000240)={{}, {0x0, 0x3938700}}, 0x0)
readv(r7, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/134, 0x86}], 0x1)
syz_usb_control_io$hid(r0, 0x0, 0x0)

6.136516948s ago: executing program 2 (id=809):
r0 = syz_io_uring_setup(0x64bb, &(0x7f0000000480)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0e0000000400000010f39af0873e12e370f6897a", @ANYRES32, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
syz_emit_ethernet(0x5a, &(0x7f0000000300)=ANY=[@ANYBLOB="0d6afadfc150aaaaaaaaaa1386dd600000000000000000aa00000000000000000000ffff7f00000100000000", @ANYRES32, @ANYRES32=0x41424344, @ANYBLOB="90020000c2"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c00990000000200000000000800a00094090000080026009409000008002700000000000800"], 0x48}}, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc01090589"], 0x0)
capset(&(0x7f0000000080)={0x20071026}, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x1}])
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0)
syz_usb_control_io(r3, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0)
lsetxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0)
setresuid(0x0, 0xee00, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0})
setresuid(0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

6.133704815s ago: executing program 3 (id=810):
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r4 = fcntl$dupfd(r3, 0x0, r3)
read$FUSE(r4, 0x0, 0x0)
write$FUSE_INIT(r4, &(0x7f0000000000)={0x50, 0x0, 0x0, {0x7, 0x27, 0x0, 0x0, 0x0, 0x0, 0x1ff}}, 0x50)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r7, 0x402, 0x8000003d)
fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f0000000140)='\x8d\x00', 0x0, r5)
fcntl$setsig(r7, 0xa, 0x21)
mknodat$loop(r7, &(0x7f0000002600)='./bus\x00', 0x0, 0x0)
recvmmsg(r2, &(0x7f0000000440), 0x0, 0x2000000022, 0x0)
r8 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r9 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0)
ioctl$MON_IOCX_GET(r8, 0x40189206, &(0x7f0000000340)={&(0x7f0000000780), 0x0})
connect$llc(r4, &(0x7f00000000c0)={0x1a, 0x322, 0x29, 0xee, 0x0, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10)
dup3(r8, r9, 0x0)

5.823568699s ago: executing program 5 (id=811):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) (async)
r1 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2)
ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f00000000c0)=0x1) (async, rerun: 32)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) (rerun: 32)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
pipe2$watch_queue(&(0x7f0000002240)={<r3=>0xffffffffffffffff}, 0x80) (async, rerun: 32)
r4 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff) (rerun: 32)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
connect(r5, &(0x7f0000000200)=@ll={0x27, 0xf6, 0x0, 0x1, 0x0, 0x6, @random="e208ec8f752a"}, 0x36)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 32)
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32)
open(0x0, 0xc6040, 0x0) (rerun: 32)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0x7fffffffffffd}, 0x18) (async, rerun: 32)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) (rerun: 32)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r8, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001080)={0x54, r9, 0x80d, 0x0, 0x4, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xffffffff}, {0x6}, {0x5}}]}, 0x54}}, 0x0) (async, rerun: 64)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) (async, rerun: 64)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async, rerun: 64)
ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x7c5, 0x1, 0x3, 0xd59f80, 0x4, 0x5, 0x9, 0x8, 0x5, 0x722, 0xe72, 0x7, 0x8, 0x38, 0x13, {0xffff945a, 0x1}, 0x3, 0xed}}) (rerun: 64)

5.15461618s ago: executing program 5 (id=812):
getrlimit(0xb4f2139c6e1f1ef4, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000100), 0x6, 0x40000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
syz_usb_connect(0x0, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000036a1fc08480b09a46f3a3dc0f348ca730f42e2e7b41410d8860102030109021200010700e00009048302007fe81b40"], 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close(0xffffffffffffffff)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {0xa}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9000000}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}}, 0x0)
r5 = openat$incfs(r0, &(0x7f0000000080)='.log\x00', 0x202200, 0xa8)
ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f00000000c0)=0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000003c000100000000009500000000000000"], &(0x7f00000005c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r7 = dup(r6)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newtaction={0xec, 0x30, 0x48b, 0x1000, 0x0, {}, [{0xd8, 0x1, [@m_nat={0xd4, 0x1, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0xfc000000, 0x7, 0x4, 0xfffffffd}, @multicast1, @empty, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10001, 0x2, 0x10000000, 0x3, 0x1b}, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x12}}}]}, {0x5a, 0x6, "e0d42dde6d6d79f7bc59d8440e75dff652c5b331279fa16eb465818c9a6dd0e23963d5f0ef84a2c7228700b81ca480a62e8d052bacb7ffee51cf905fed24cfece7518c7ddb08e85fa6a4abdfdcd8dad1cabaaa00da55"}, {0xc}, {0xc}}}]}]}, 0xec}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x3}, {}, {0x1c}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}]}]}}]}, 0x40}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="2da2000004e000eb1a00"/21], &(0x7f0000000340)='syzkaller\x00', 0x80000001, 0x91, &(0x7f0000000380)=""/145, 0x40f00, 0x19, '\x00', r9, 0x0, r5, 0x8, &(0x7f0000000440)={0x8, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x1, 0x40, 0xcfe8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r7], 0x0, 0x10, 0x4, @void, @value}, 0x94)
fcntl$getownex(r5, 0x10, &(0x7f0000000140)={0x0, <r10=>0x0})
sched_setscheduler(r10, 0x6, &(0x7f0000000180)=0x9)
ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000000040)={0x0, 0x31, 0x81, 0x1, 0x2f, 0x3, &(0x7f0000000000)="6509b5c46ad261b29558ec1f2e9c02c9e6d9b33f255ed641675023c475b8a39547e52fef6bf770ee8bb4da20c80872ca64d99b3686119e19c4066e0f9e"})

4.182159369s ago: executing program 0 (id=813):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10002, 0x1, 0x1})
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)

3.934278099s ago: executing program 2 (id=814):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}, 0x1, 0x8000000}, 0x0)

3.803092778s ago: executing program 2 (id=815):
openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x200800)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, &(0x7f0000000bc0)="be", 0x1)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)

3.450506846s ago: executing program 3 (id=816):
socket$can_raw(0x1d, 0x3, 0x1)
r0 = syz_open_dev$media(&(0x7f0000000080), 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[], 0x0, 0x32, 0xfffffda7, 0x0, 0x0, 0x10000, @value}, 0x28)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = dup(r4)
getpriority(0x0, r1)
write$UHID_INPUT(r5, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7)
read$FUSE(r5, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000001e00e501", @ANYRES32=0x0, @ANYBLOB="200001006418da3bc9ce", @ANYRES32=0x0, @ANYBLOB="00000000ffffffff00"/24], 0x38}}, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000004c0)})
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000)={0x6000000}, 0x85, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52)

2.148844115s ago: executing program 3 (id=817):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x80, 0x0)
pwritev(r1, 0x0, 0x0, 0x10000, 0x6)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x4c, 0x0, 0x8, 0x801, 0x0, 0x0, {0x5, 0x0, 0xa}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8847}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0xe, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
socket$inet_smc(0x2b, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000300)={'filter\x00', 0x7, 0x4, 0x3e8, 0x1d0, 0xe8, 0xe8, 0x300, 0x300, 0x300, 0x4, &(0x7f0000000100), {[{{@arp={@multicast1, @multicast2, 0xff, 0xffffff00, 0xd, 0xfe, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0x0, 0xff, 0xff]}}, 0xb, 0x2, 0xfff0, 0x5, 0x0, 0x7, 'wg0\x00', 'geneve0\x00', {}, {0xff}, 0x0, 0x14f}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x10, 0xffff}}}, {{@arp={@local, @multicast1, 0xff, 0xffffff00, 0x9, 0xb, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0xff]}}, 0x2e, 0xf5d, 0x9, 0x5, 0x7, 0x400, 'netpci0\x00', 'team_slave_0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x289}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7fff, 0x0, 0x3925, 0x1, 0x0, "b2624eb7c2a6e25151693f7d192cc45273b8065ed066980cd6ad6cca87a65e7b0854134b6b2413256ab5aeae621c55ab026363ee2b95ac8c5e1e08bc7d4265bd"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149)

2.117444983s ago: executing program 0 (id=818):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)={0x0, 0x13, 0x1, "f2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0xffffffffffffff61)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x13c}}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r5 = socket(0x1e, 0x4, 0x0)
r6 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r5, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x1, 0x9200000000000000)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)
r8 = socket(0xa, 0x2400000001, 0x0)
getsockopt$inet6_buf(r8, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90)
r9 = fanotify_init(0x200, 0x0)
fanotify_mark(r9, 0x39, 0x1a, r7, 0x0)

2.047128411s ago: executing program 1 (id=819):
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0xa0c80)
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES8=r0], 0x0, 0x48, 0x0, 0xa, 0x0, 0x0, @void, @value}, 0x28)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x1)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000000)=0x8, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x8, 0x10001, 0xffffffff, 0x220, 0x1, 0x1000, '\x00', 0x0, r1, 0x0, 0x2, 0x4, 0x8, @void, @value, @void, @value}, 0x50)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000000520017000400000001000000000000008237a05a725b9b20d524cb1d0befc299ec3623a6f3885cff53d1b03755b03b16fab4ce1606fa51b5d72e15a051e1510494239371bca04fe14e4604501436e09099c6cad25ec6eb170f387f75a2714f7e436726d5907a595eb4216e1fcea148bfaf89b6acfc16", @ANYRES32=r4, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f0000000080))
r5 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000000040), 0x4)
r6 = openat$incfs(r0, &(0x7f0000000140)='.log\x00', 0x20000, 0x8a)
bind$alg(r6, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-generic\x00'}, 0x58)
setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000000c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_ifindex}, 0x10)
setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000080)={@broadcast, @empty, 0x0, "d64724f6257e43b341dc333940c0ca00", 0xffffffff, 0x0, 0x409, 0xc3b}, 0x3c)
close(r5)

1.986867974s ago: executing program 5 (id=820):
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xa010100, @remote}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "37653645e82fdd5d6988142e2ccfe1912e1f2322310c24167002744c24c6d7a1", "789ea41a87a196497c03aac0751e9b7d3418c8bf26233705f85f617872bdee42ce9534c421aa5bbb97333a70e510dfb7", "0726041c0000000000004e24c493f9055a4de01e9be47500", {"a04ae4a0ee50332563026b95098ebdf6", "6089a6305e0f26abf88585dabb3f9ffe"}}}}}}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000009fff514a000000003a810000850000000700000085000000d00000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb863, @void, @value}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000000406014200000000000000000000000005006300dcf4bb0e2b62927e96ed5504f5d75f23c682365af7c02daf829d074275fec80e78d75a7d98d332b17181a4f7b8e23e840f903b10b2399a58861b45ad901c56c22357263fbb59b99d63aa7473c10932d560d04a479786a138b446e6262071ccbc8c5c9ff27a4a6f2d4c5fa9521c61c9ab18041d2656c754e4776370b4c55c21eaf2571b2383d380ee6b3769f86010b181e5ecd9e863fc6c808d32dd9d3061b94ec70a6b5d6d1573487a9db9c19958e4ea091ffd8c8f1f30a93d"], 0x1c}, 0x1, 0x0, 0x0, 0x4000880}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x6, @dev={0xac, 0x14, 0x14, 0x15}, 0x15, 0x0, 'lblcr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0)
r5 = socket(0x10, 0x3, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78209788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000e00)={@cgroup=r6, r7, 0x2f, 0x80ffff, 0x4, @void, @void, @value}, 0x20)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'wg2\x00', <r9=>0x0})
r10 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r10, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000000040)='#', 0x1}], 0x1}, 0x0)
recvmsg$kcm(r10, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r6, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x6f, &(0x7f00000002c0)=[{}], 0x8, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xcf, 0x8, 0x8, &(0x7f0000000380)}}, 0x10)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}]}}]}, 0x40}}, 0x0)

665.614284ms ago: executing program 5 (id=821):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 64)
r0 = getpid() (rerun: 64)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x40010, 0xffffffffffffffff, 0xfffff000) (async, rerun: 32)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) (rerun: 32)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r2], 0x1c}}, 0x800) (async)
r4 = inotify_init1(0x0)
inotify_add_watch(r4, 0x0, 0x40000022) (async)
write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4600f60f000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB="e00100001a00160f2bbd7000ffdbdf25fe8000000000000000000000000000bb200100000000000000000000000000014e2200014e2300000200a0a006000000142e3517784dc90eeb33cde20b1c4ca90d478416e9203c93678034c5dd92eb835cb2054b1650e14cbb89656f2b8329c660a440494937b2e914a09c8bca6a0d6c065c346b23a018202a2eab9e91", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1e0}, 0x1, 0x0, 0x0, 0x48810}, 0x4008004) (async)
io_setup(0x8, 0x0) (async)
r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001517ee40f00a057a0200010203010902120001000000400904000000ff"], 0x0)
syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, 0x0)
r8 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x3f}}, 0x1c)

0s ago: executing program 3 (id=822):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000700000000000000000c0000000200000004000000ef000000360000000000"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0x0, <r0=>0x0}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=r0, 0x4)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r2 = dup(r1)
write$P9_RREADDIR(r2, &(0x7f0000000b00)={0xa6, 0x29, 0x2, {0x7, [{{0x80, 0x2, 0x7}, 0x4000000000000000, 0x8, 0x7, './file0'}, {{0x1, 0x4, 0x2}, 0x5, 0x5, 0x7, './file0'}, {{0x40, 0x1, 0x7}, 0x6, 0x20, 0x7, './file0'}, {{0x20, 0x4, 0x1}, 0xffffffff80000001, 0x0, 0x7, './file0'}, {{0x40, 0x1}, 0x83ff, 0x5, 0x7, './file0'}]}}, 0xa6)
write$proc_mixer(r2, &(0x7f0000000040)=[{'LINE1', @void}], 0x6)

0s ago: executing program 2 (id=823):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
iopl(0x3) (async)
r0 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0)
r1 = dup(r0)
finit_module(r1, 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r2, 0x3)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) (async)
syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@noop]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000f, 0x28011, r3, 0x1000) (async)
r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil})

kernel console output (not intermixed with test programs):

3-port1: attempt power cycle
[  217.743183][   T45] usb 5-1: no configurations
[  217.747832][   T45] usb 5-1: can't read configurations, error -22
[  217.767236][   T45] usb usb5-port1: attempt power cycle
[  217.792432][ T5882] usb 1-1: Using ep0 maxpacket: 16
[  217.799846][ T5882] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  217.812805][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  217.837662][ T5882] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  217.853150][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.861759][ T5882] usb 1-1: Product: syz
[  217.871334][ T5882] usb 1-1: Manufacturer: syz
[  217.877709][ T5882] usb 1-1: SerialNumber: syz
[  217.885914][ T5882] usb 1-1: config 0 descriptor??
[  217.896817][ T5882] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  217.906840][ T5882] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[  217.982878][ T5970] usb 3-1: new low-speed USB device number 30 using dummy_hcd
[  218.003010][ T5970] usb 3-1: Invalid ep0 maxpacket: 64
[  218.114515][   T45] usb 5-1: new low-speed USB device number 23 using dummy_hcd
[  218.132890][ T5970] usb 3-1: new low-speed USB device number 31 using dummy_hcd
[  218.143584][   T45] usb 5-1: no configurations
[  218.148226][   T45] usb 5-1: can't read configurations, error -22
[  218.156179][ T5970] usb 3-1: Invalid ep0 maxpacket: 64
[  218.163762][ T5970] usb usb3-port1: unable to enumerate USB device
[  218.616874][    T8] gspca_vc032x: reg_w err -110
[  218.643545][    T8] vc032x 4-1:0.0: probe with driver vc032x failed with error -110
[  218.773485][ T5882] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  218.781573][ T5882] em28xx 1-1:0.0: Config register raw data: 0xfffffffb
[  218.782486][   T45] usb 5-1: new low-speed USB device number 24 using dummy_hcd
[  218.789458][ T5882] em28xx 1-1:0.0: AC97 chip type couldn't be determined
[  218.803296][ T5882] em28xx 1-1:0.0: No AC97 audio processor
[  218.813840][   T45] usb 5-1: no configurations
[  218.813914][ T5882] usb 1-1: USB disconnect, device number 24
[  218.825759][   T45] usb 5-1: can't read configurations, error -22
[  218.826432][ T5882] em28xx 1-1:0.0: Disconnecting em28xx
[  218.835797][   T45] usb usb5-port1: unable to enumerate USB device
[  218.858966][ T5882] em28xx 1-1:0.0: Freeing device
[  219.107199][ T7740] netlink: 'syz.1.458': attribute type 1 has an invalid length.
[  219.115031][ T7740] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.458'.
[  219.124394][ T7740] netlink: 'syz.1.458': attribute type 1 has an invalid length.
[  219.310722][ T7740] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  219.319008][ T7740] macvtap1: entered promiscuous mode
[  219.325098][ T7740] macvtap1: entered allmulticast mode
[  219.330665][ T7740] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  219.348559][ T7740] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  219.357083][ T7740] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  219.743065][    T8] usb 4-1: USB disconnect, device number 18
[  220.282660][ T5970] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  220.408168][ T7722] vhci_hcd: connection reset by peer
[  220.438925][ T3553] vhci_hcd: stop threads
[  220.443334][ T3553] vhci_hcd: release socket
[  220.447882][ T3553] vhci_hcd: disconnect device
[  220.572447][ T5970] usb 1-1: Using ep0 maxpacket: 16
[  220.585985][ T5970] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82
[  220.599827][ T5970] usb 1-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10
[  220.608197][ T5970] usb 1-1: Product: syz
[  220.614897][ T5970] usb 1-1: Manufacturer: syz
[  220.619537][ T5970] usb 1-1: SerialNumber: syz
[  220.632351][ T5970] usb 1-1: config 0 descriptor??
[  220.644967][ T5970] usb 1-1: selecting invalid altsetting 1
[  220.672362][   T45] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  220.675023][    T8] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  220.693467][ T5970] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22
[  220.718457][ T7748] netlink: 'syz.3.460': attribute type 12 has an invalid length.
[  220.737027][ T7748] netlink: 197276 bytes leftover after parsing attributes in process `syz.3.460'.
[  220.738766][ T5833] udevd[5833]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  220.832337][   T25] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  220.842690][   T45] usb 2-1: Using ep0 maxpacket: 32
[  220.850086][   T45] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[  220.858638][   T45] usb 2-1: config 0 has no interface number 0
[  220.867158][   T45] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  220.876564][   T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.885633][   T45] usb 2-1: Product: syz
[  220.889830][   T45] usb 2-1: Manufacturer: syz
[  220.903692][    T8] usb 3-1: Using ep0 maxpacket: 8
[  220.909556][   T45] usb 2-1: SerialNumber: syz
[  220.909827][    T8] usb 3-1: too many configurations: 9, using maximum allowed: 8
[  220.925313][    T8] usb 3-1: unable to read config index 0 descriptor/start: -61
[  220.933306][    T8] usb 3-1: can't read configurations, error -61
[  220.938753][   T45] usb 2-1: config 0 descriptor??
[  220.959433][   T45] smsc95xx v2.0.0
[  220.994663][   T25] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[  221.005965][   T25] usb 5-1: config 0 has no interface number 0
[  221.012142][   T25] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  221.032863][   T25] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  221.053620][   T25] usb 5-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice=82.00
[  221.068960][   T25] usb 5-1: New USB device strings: Mfr=94, Product=0, SerialNumber=0
[  221.072443][    T8] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  221.077696][   T25] usb 5-1: Manufacturer: syz
[  221.108406][   T25] usb 5-1: config 0 descriptor??
[  221.232427][    T8] usb 3-1: Using ep0 maxpacket: 8
[  221.241436][    T8] usb 3-1: too many configurations: 9, using maximum allowed: 8
[  221.250641][    T8] usb 3-1: unable to read config index 0 descriptor/start: -61
[  221.261066][    T8] usb 3-1: can't read configurations, error -61
[  221.267999][    T8] usb usb3-port1: attempt power cycle
[  221.363346][   T45] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61
[  221.385793][   T45] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  221.853624][   T25] wacom 0003:056A:0084.0008: unknown main item tag 0x0
[  221.860627][   T25] wacom 0003:056A:0084.0008: unknown main item tag 0x0
[  221.868878][   T25] wacom 0003:056A:0084.0008: unknown main item tag 0x0
[  221.875992][   T25] wacom 0003:056A:0084.0008: unknown main item tag 0x0
[  221.883055][   T25] wacom 0003:056A:0084.0008: unknown main item tag 0x0
[  221.902824][    T8] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  222.177609][   T25] wacom 0003:056A:0084.0008: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input8
[  222.517349][   T29] audit: type=1400 audit(1731154773.137:703): avc:  denied  { create } for  pid=7753 comm="syz.4.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  222.568976][    T8] usb 3-1: Using ep0 maxpacket: 8
[  222.589643][    T8] usb 3-1: too many configurations: 9, using maximum allowed: 8
[  222.672925][  T968] vhci_hcd: vhci_device speed not set
[  222.845630][ T5882] usb 1-1: USB disconnect, device number 25
[  222.853411][    T8] usb 3-1: unable to read config index 0 descriptor/start: -61
[  222.919221][   T29] audit: type=1400 audit(1731154773.777:704): avc:  denied  { connect } for  pid=7768 comm="syz.0.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  223.106041][    T8] usb 3-1: can't read configurations, error -61
[  224.182373][    T8] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  224.246312][    T8] usb 3-1: device descriptor read/8, error -71
[  224.411646][    T8] usb usb3-port1: unable to enumerate USB device
[  224.423453][ T5911] usb 5-1: USB disconnect, device number 25
[  224.812576][   T45] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  224.823592][   T45] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71
[  224.835085][   T45] usb 2-1: USB disconnect, device number 12
[  225.468785][   T25] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  225.498096][ T7801] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8)
[  225.504630][ T7801] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  225.512490][ T7801] vhci_hcd vhci_hcd.0: Device attached
[  225.692632][  T968] vhci_hcd: vhci_device speed not set
[  225.709825][   T25] usb 4-1: Using ep0 maxpacket: 16
[  225.720186][   T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  225.730510][   T25] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  225.739772][   T25] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  225.755699][   T25] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  225.762589][ T5911] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  225.764813][   T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.780415][ T5839] usb 1-1: new low-speed USB device number 26 using dummy_hcd
[  225.788194][  T968] usb 33-1: new full-speed USB device number 3 using vhci_hcd
[  225.796015][   T25] usb 4-1: Product: syz
[  225.797006][ T7811] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  225.800414][   T25] usb 4-1: Manufacturer: syz
[  225.817223][   T25] usb 4-1: SerialNumber: syz
[  225.830436][   T25] cdc_mbim 4-1:1.0: MBIM functional descriptor missing
[  225.837589][   T25] cdc_mbim 4-1:1.0: bind() failure
[  225.932467][ T5911] usb 5-1: Using ep0 maxpacket: 16
[  225.941568][ T5911] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  225.955767][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  225.963082][ T5839] usb 1-1: no configurations
[  225.973124][ T5839] usb 1-1: can't read configurations, error -22
[  225.974615][ T5911] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  225.989284][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.998199][ T5911] usb 5-1: Product: syz
[  226.002582][ T5911] usb 5-1: Manufacturer: syz
[  226.007201][ T5911] usb 5-1: SerialNumber: syz
[  226.014965][ T5911] usb 5-1: config 0 descriptor??
[  226.025793][ T5911] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  226.036014][ T5911] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class)
[  226.079924][ T7792] netlink: 28 bytes leftover after parsing attributes in process `syz.3.471'.
[  226.124397][ T7792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  226.134337][ T7792] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  226.142495][ T5839] usb 1-1: new low-speed USB device number 27 using dummy_hcd
[  226.160622][  T965] usb 4-1: USB disconnect, device number 19
[  226.584461][ T5911] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[  226.650206][ T5911] em28xx 5-1:0.0: Config register raw data: 0xfffffffb
[  226.791199][ T5911] em28xx 5-1:0.0: AC97 chip type couldn't be determined
[  226.816950][ T5911] em28xx 5-1:0.0: No AC97 audio processor
[  226.868093][ T5911] usb 5-1: USB disconnect, device number 26
[  226.873163][ T5839] usb 1-1: no configurations
[  226.882994][ T5839] usb 1-1: can't read configurations, error -22
[  226.887461][ T5911] em28xx 5-1:0.0: Disconnecting em28xx
[  226.901268][ T5839] usb usb1-port1: attempt power cycle
[  226.920229][ T5911] em28xx 5-1:0.0: Freeing device
[  228.998257][ T5839] usb 1-1: new low-speed USB device number 28 using dummy_hcd
[  230.043298][ T7803] vhci_hcd: connection reset by peer
[  230.063140][ T5839] usb 1-1: device descriptor read/8, error -71
[  230.072352][ T3627] vhci_hcd: stop threads
[  230.076632][ T3627] vhci_hcd: release socket
[  230.081090][ T3627] vhci_hcd: disconnect device
[  230.342627][ T7842] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  230.369617][   T29] audit: type=1400 audit(1731154781.217:705): avc:  denied  { write } for  pid=7841 comm="syz.0.481" path="socket:[14782]" dev="sockfs" ino=14782 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  230.455229][   T45] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  230.605455][   T29] audit: type=1400 audit(1731154781.457:706): avc:  denied  { set_context_mgr } for  pid=7846 comm="syz.0.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  230.609219][ T7850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.485'.
[  230.676137][   T45] usb 5-1: Using ep0 maxpacket: 32
[  231.263556][   T45] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[  231.272749][   T45] usb 5-1: config 0 has no interface number 0
[  231.290992][   T45] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  231.302150][   T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.314615][   T45] usb 5-1: Product: syz
[  231.318821][   T45] usb 5-1: Manufacturer: syz
[  231.323564][ T5970] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  231.332941][  T968] vhci_hcd: vhci_device speed not set
[  231.339367][   T45] usb 5-1: SerialNumber: syz
[  231.345856][   T45] usb 5-1: config 0 descriptor??
[  231.365647][   T45] smsc95xx v2.0.0
[  231.426620][ T7865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  231.436474][ T7865] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  231.489798][ T5970] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  231.528238][ T5970] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  231.539914][ T5970] usb 2-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00
[  231.557216][ T5970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.590920][ T5970] usb 2-1: config 0 descriptor??
[  231.675033][ T7866] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  231.772547][   T45] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61
[  231.791981][   T45] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  232.529051][ T5970] pantherlord 0003:0F30:0111.0009: hidraw0: USB HID v0.00 Device [HID 0f30:0111] on usb-dummy_hcd.1-1/input0
[  232.541077][ T5970] pantherlord 0003:0F30:0111.0009: no output reports found
[  232.718858][ T5970] usb 2-1: USB disconnect, device number 13
[  233.072472][ T7885] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8)
[  233.079024][ T7885] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  233.086856][ T7885] vhci_hcd vhci_hcd.0: Device attached
[  233.273170][ T5970] vhci_hcd: vhci_device speed not set
[  233.332631][  T968] usb 3-1: new low-speed USB device number 36 using dummy_hcd
[  233.340973][ T5970] usb 37-1: new full-speed USB device number 3 using vhci_hcd
[  233.519696][  T968] usb 3-1: unable to read config index 0 descriptor/start: -61
[  233.531538][  T968] usb 3-1: can't read configurations, error -61
[  233.933241][   T45] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  233.979180][   T45] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71
[  234.137927][   T45] usb 5-1: USB disconnect, device number 27
[  234.144225][  T968] usb 3-1: new low-speed USB device number 37 using dummy_hcd
[  234.260314][ T7901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.496'.
[  234.328626][  T968] usb 3-1: unable to read config index 0 descriptor/start: -61
[  234.710352][  T968] usb 3-1: can't read configurations, error -61
[  234.758921][  T968] usb usb3-port1: attempt power cycle
[  235.372589][  T968] usb 3-1: new low-speed USB device number 38 using dummy_hcd
[  235.453172][  T968] usb 3-1: unable to read config index 0 descriptor/start: -61
[  235.508183][  T968] usb 3-1: can't read configurations, error -61
[  235.515228][ T7921] netlink: 36 bytes leftover after parsing attributes in process `syz.1.501'.
[  235.533355][   T29] audit: type=1400 audit(1731154786.377:707): avc:  denied  { write } for  pid=7920 comm="syz.1.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  235.805065][  T968] usb 3-1: new low-speed USB device number 39 using dummy_hcd
[  235.844095][  T968] usb 3-1: unable to read config index 0 descriptor/start: -61
[  235.855828][  T968] usb 3-1: can't read configurations, error -61
[  235.882823][  T968] usb usb3-port1: unable to enumerate USB device
[  235.921187][   T29] audit: type=1400 audit(1731154786.777:708): avc:  denied  { map } for  pid=7933 comm="syz.3.504" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  236.377972][ T7886] vhci_hcd: connection reset by peer
[  236.407435][   T29] audit: type=1400 audit(1731154786.777:709): avc:  denied  { execute } for  pid=7933 comm="syz.3.504" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  236.432010][   T29] audit: type=1400 audit(1731154786.947:710): avc:  denied  { mount } for  pid=7933 comm="syz.3.504" name="/" dev="ramfs" ino=15727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  236.454115][    C1] vkms_vblank_simulate: vblank timer overrun
[  236.460582][   T29] audit: type=1804 audit(1731154787.007:711): pid=7937 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.504" name="/newroot/95/file0/bus" dev="ramfs" ino=15728 res=1 errno=0
[  236.483189][    C1] vkms_vblank_simulate: vblank timer overrun
[  236.541897][   T35] vhci_hcd: stop threads
[  236.546253][   T35] vhci_hcd: release socket
[  236.550781][   T35] vhci_hcd: disconnect device
[  236.581810][   T29] audit: type=1800 audit(1731154787.437:712): pid=7937 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.504" name="bus" dev="ramfs" ino=15728 res=0 errno=0
[  236.611687][   T29] audit: type=1400 audit(1731154787.467:713): avc:  denied  { execute } for  pid=7939 comm="syz.1.506" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  236.712838][ T7943] xt_hashlimit: size too large, truncated to 1048576
[  236.871476][   T29] audit: type=1400 audit(1731154787.727:714): avc:  denied  { unmount } for  pid=5835 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  236.912812][ T7955] netlink: 56 bytes leftover after parsing attributes in process `syz.3.509'.
[  236.953284][  T968] usb 3-1: new full-speed USB device number 40 using dummy_hcd
[  237.159878][  T968] usb 3-1: unable to get BOS descriptor or descriptor too short
[  237.704273][ T7915] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  237.740620][  T968] usb 3-1: unable to read config index 0 descriptor/start: -71
[  237.758859][  T968] usb 3-1: can't read configurations, error -71
[  237.844672][ T7966] netlink: 'syz.3.511': attribute type 3 has an invalid length.
[  238.181159][ T7974] netlink: 12 bytes leftover after parsing attributes in process `syz.0.513'.
[  238.752386][ T5970] vhci_hcd: vhci_device speed not set
[  239.803504][ T7982] pimreg: entered allmulticast mode
[  240.047446][ T7975] pimreg: left allmulticast mode
[  240.189849][ T7988] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8)
[  240.196391][ T7988] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  240.203899][ T7988] vhci_hcd vhci_hcd.0: Device attached
[  240.872919][   T45] vhci_hcd: vhci_device speed not set
[  240.932418][ T5839] usb 5-1: new low-speed USB device number 28 using dummy_hcd
[  240.940101][   T45] usb 41-1: new full-speed USB device number 3 using vhci_hcd
[  241.094629][ T5839] usb 5-1: unable to read config index 0 descriptor/start: -61
[  241.235142][ T5839] usb 5-1: can't read configurations, error -61
[  241.343875][ T7996] netlink: 20 bytes leftover after parsing attributes in process `syz.1.518'.
[  241.470448][ T5839] usb 5-1: new low-speed USB device number 29 using dummy_hcd
[  241.950891][ T5839] usb 5-1: unable to read config index 0 descriptor/start: -61
[  241.975664][ T5839] usb 5-1: can't read configurations, error -61
[  242.028172][ T8006] netlink: 56 bytes leftover after parsing attributes in process `syz.2.521'.
[  242.048336][ T5839] usb usb5-port1: attempt power cycle
[  242.944978][ T5839] usb 5-1: new low-speed USB device number 30 using dummy_hcd
[  242.960365][   T29] audit: type=1400 audit(1731154793.397:715): avc:  denied  { sqpoll } for  pid=8017 comm="syz.1.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  242.989359][ T5839] usb 5-1: unable to read config index 0 descriptor/start: -61
[  242.998006][ T5839] usb 5-1: can't read configurations, error -61
[  243.058312][   T29] audit: type=1326 audit(1731154793.917:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8020 comm="syz.2.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effad17e719 code=0x7fc00000
[  243.084172][   T29] audit: type=1326 audit(1731154793.917:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8020 comm="syz.2.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7effad17e719 code=0x7fc00000
[  243.150377][   T29] audit: type=1326 audit(1731154793.917:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8020 comm="syz.2.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effad17e719 code=0x7fc00000
[  243.175099][   T29] audit: type=1326 audit(1731154793.917:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8020 comm="syz.2.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effad17e719 code=0x7fc00000
[  243.199937][   T29] audit: type=1326 audit(1731154793.917:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8020 comm="syz.2.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effad17e719 code=0x7fc00000
[  243.223140][    C0] vkms_vblank_simulate: vblank timer overrun
[  243.223549][ T5839] usb 5-1: new low-speed USB device number 31 using dummy_hcd
[  243.223669][   T29] audit: type=1326 audit(1731154793.917:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8020 comm="syz.2.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effad17e719 code=0x7fc00000
[  243.223703][   T29] audit: type=1326 audit(1731154793.917:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8020 comm="syz.2.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effad17e719 code=0x7fc00000
[  243.223736][   T29] audit: type=1326 audit(1731154793.917:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8020 comm="syz.2.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effad17e719 code=0x7fc00000
[  243.307264][   T29] audit: type=1326 audit(1731154793.917:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8020 comm="syz.2.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effad17e719 code=0x7fc00000
[  244.090697][ T7990] vhci_hcd: connection reset by peer
[  244.113029][ T5839] usb 5-1: device descriptor read/8, error -71
[  244.230115][ T5839] usb usb5-port1: unable to enumerate USB device
[  244.270595][ T2930] vhci_hcd: stop threads
[  244.370066][ T2930] vhci_hcd: release socket
[  244.450675][ T2930] vhci_hcd: disconnect device
[  244.663855][ T8050] netlink: 56 bytes leftover after parsing attributes in process `syz.0.533'.
[  245.442521][  T968] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  245.612480][  T968] usb 4-1: Using ep0 maxpacket: 8
[  245.631202][  T968] usb 4-1: config 0 has an invalid interface number: 255 but max is 0
[  245.709405][  T968] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  245.789592][  T968] usb 4-1: config 0 has no interface number 0
[  245.865689][  T968] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  245.938175][  T968] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  245.950365][ T8060] Bluetooth: MGMT ver 1.23
[  245.967247][  T968] usb 4-1: config 0 interface 255 has no altsetting 0
[  246.110762][  T968] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00
[  246.131754][  T968] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.248676][ T8064] netlink: 28 bytes leftover after parsing attributes in process `syz.0.535'.
[  246.275193][ T5911] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  246.439913][ T5911] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  246.449369][ T5911] usb 5-1: config 0 has no interface number 0
[  246.536157][ T5911] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  246.646307][ T5911] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  246.748849][ T5911] usb 5-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00
[  246.793019][  T968] usb 4-1: config 0 descriptor??
[  246.801945][  T968] usb 4-1: selecting invalid altsetting 1
[  246.803790][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.852928][   T45] vhci_hcd: vhci_device speed not set
[  246.874490][  T968] usb 4-1: Can not set alternate setting to 1, error: -22
[  246.878779][ T5911] usb 5-1: config 0 descriptor??
[  246.881742][  T968] synaptics_usb 4-1:0.255: probe with driver synaptics_usb failed with error -22
[  246.960591][ T8060] infiniband syz1: set active
[  246.965679][ T8060] infiniband syz1: added team_slave_0
[  247.005739][ T8060] syz1: rxe_create_cq: returned err = -12
[  247.012136][ T8060] infiniband syz1: Couldn't create ib_mad CQ
[  247.031581][ T8060] infiniband syz1: Couldn't open port 1
[  247.104008][ T8043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  247.141022][ T8043] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  247.183939][  T968] usb 4-1: USB disconnect, device number 20
[  247.198811][ T8060] RDS/IB: syz1: added
[  247.225125][ T8060] smc: adding ib device syz1 with port count 1
[  247.233753][ T8060] smc:    ib device syz1 port 1 has pnetid 
[  247.394086][ T5911] uclogic 0003:5543:0522.000A: item fetching failed at offset 3/5
[  247.402654][ T5911] uclogic 0003:5543:0522.000A: parse failed
[  247.408882][ T5911] uclogic 0003:5543:0522.000A: probe with driver uclogic failed with error -22
[  248.054030][ T8076] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[  248.060574][ T8076] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  248.068125][ T8076] vhci_hcd vhci_hcd.0: Device attached
[  248.078175][ T8079] netlink: 'syz.0.540': attribute type 1 has an invalid length.
[  248.085910][ T8079] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.540'.
[  248.095214][ T8079] netlink: 'syz.0.540': attribute type 1 has an invalid length.
[  248.112148][ T8079] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  248.119308][ T8079] macvtap1: entered promiscuous mode
[  248.124830][ T8079] macvtap1: entered allmulticast mode
[  248.130921][ T8079] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  248.162984][   T29] kauditd_printk_skb: 4029 callbacks suppressed
[  248.163000][   T29] audit: type=1400 audit(1731154799.017:4754): avc:  denied  { write } for  pid=5185 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  248.196173][ T8079] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  248.203283][ T8079] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  248.302394][ T5839] vhci_hcd: vhci_device speed not set
[  248.327195][   T29] audit: type=1400 audit(1731154799.017:4755): avc:  denied  { remove_name } for  pid=5185 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  248.362366][ T5839] usb 39-1: new full-speed USB device number 2 using vhci_hcd
[  248.572835][   T45] usb 4-1: new low-speed USB device number 21 using dummy_hcd
[  248.616501][   T29] audit: type=1400 audit(1731154799.017:4756): avc:  denied  { add_name } for  pid=5185 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  248.824508][   T45] usb 4-1: unable to read config index 0 descriptor/start: -61
[  248.939122][   T45] usb 4-1: can't read configurations, error -61
[  249.110341][ T5911] usb 5-1: USB disconnect, device number 32
[  249.212763][   T45] usb 4-1: new low-speed USB device number 22 using dummy_hcd
[  249.548216][ T8091] netlink: 12 bytes leftover after parsing attributes in process `syz.4.543'.
[  249.931889][ T8094] netlink: 'syz.2.546': attribute type 3 has an invalid length.
[  250.032601][ T8094] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.546'.
[  250.055079][   T45] usb 4-1: unable to read config index 0 descriptor/start: -61
[  250.062933][   T45] usb 4-1: can't read configurations, error -61
[  250.069702][   T45] usb usb4-port1: attempt power cycle
[  250.413010][   T45] usb 4-1: new low-speed USB device number 23 using dummy_hcd
[  250.452634][  T968] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  250.503070][   T45] usb 4-1: unable to read config index 0 descriptor/start: -61
[  250.565681][   T45] usb 4-1: can't read configurations, error -61
[  250.639609][  T968] usb 5-1: Using ep0 maxpacket: 16
[  250.675193][  T968] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  250.684464][  T968] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  250.699108][  T968] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  250.720208][  T968] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  250.739466][   T45] usb 4-1: new low-speed USB device number 24 using dummy_hcd
[  250.797233][  T968] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  250.827360][   T45] usb 4-1: unable to read config index 0 descriptor/start: -61
[  250.864176][  T968] usb 5-1: Product: syz
[  250.874193][   T45] usb 4-1: can't read configurations, error -61
[  250.884327][  T968] usb 5-1: Manufacturer: syz
[  250.888962][  T968] usb 5-1: SerialNumber: syz
[  250.894726][   T45] usb usb4-port1: unable to enumerate USB device
[  250.995937][   T29] audit: type=1326 audit(1731154801.857:4757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8107 comm="syz.1.552" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f53dfd7e719 code=0x0
[  251.038308][ T8077] vhci_hcd: connection reset by peer
[  251.060728][ T7959] vhci_hcd: stop threads
[  251.078918][ T7959] vhci_hcd: release socket
[  251.083849][ T7959] vhci_hcd: disconnect device
[  251.315262][   T45] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  251.402283][  T968] usb 5-1: 0:2 : does not exist
[  251.532824][   T45] usb 3-1: device descriptor read/64, error -71
[  251.762518][ T5973] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  251.872408][   T45] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  251.952918][ T5973] usb 1-1: Using ep0 maxpacket: 8
[  251.959922][ T5973] usb 1-1: config 0 has an invalid interface number: 231 but max is 0
[  251.968616][ T5973] usb 1-1: config 0 has no interface number 0
[  251.978406][ T5973] usb 1-1: New USB device found, idVendor=0572, idProduct=1329, bcdDevice=19.01
[  251.988036][ T5973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  251.992450][ T5911] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  251.996559][ T5973] usb 1-1: Product: syz
[  252.018405][ T5973] usb 1-1: Manufacturer: syz
[  252.023930][   T45] usb 3-1: device descriptor read/64, error -71
[  252.040452][ T5973] usb 1-1: SerialNumber: syz
[  252.059330][ T5973] usb 1-1: config 0 descriptor??
[  252.152321][ T5911] usb 2-1: Using ep0 maxpacket: 16
[  252.153667][   T45] usb usb3-port1: attempt power cycle
[  252.162007][ T5911] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  252.189634][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  252.221192][ T5911] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  252.236348][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.252463][ T5911] usb 2-1: Product: syz
[  252.256838][ T5911] usb 2-1: Manufacturer: syz
[  252.261455][ T5911] usb 2-1: SerialNumber: syz
[  252.274107][ T5911] usb 2-1: config 0 descriptor??
[  252.290500][ T5911] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  252.300070][ T5911] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class)
[  252.303498][ T5973] usb 1-1: USB disconnect, device number 30
[  252.359738][   T29] audit: type=1400 audit(1731154803.217:4758): avc:  denied  { setopt } for  pid=8096 comm="syz.4.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  252.409656][  T968] usb 5-1: USB disconnect, device number 33
[  252.522640][   T45] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  252.552902][   T45] usb 3-1: device descriptor read/8, error -71
[  252.614498][ T5833] udevd[5833]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  252.742827][ T5911] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[  252.750574][ T5911] em28xx 2-1:0.0: Config register raw data: 0xfffffffb
[  252.758327][ T5911] em28xx 2-1:0.0: AC97 chip type couldn't be determined
[  252.772435][ T5911] em28xx 2-1:0.0: No AC97 audio processor
[  252.791377][ T5911] usb 2-1: USB disconnect, device number 14
[  252.802475][   T45] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  252.803359][ T5911] em28xx 2-1:0.0: Disconnecting em28xx
[  252.825468][ T5911] em28xx 2-1:0.0: Freeing device
[  252.872389][   T45] usb 3-1: device descriptor read/8, error -71
[  253.022397][   T45] usb usb3-port1: unable to enumerate USB device
[  253.306839][ T8133] xt_socket: unknown flags 0xc
[  253.558255][ T5839] vhci_hcd: vhci_device speed not set
[  253.677303][ T8138] ebtables: ebtables: counters copy to user failed while replacing table
[  254.084618][ T5911] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  254.292361][ T5911] usb 5-1: Using ep0 maxpacket: 16
[  254.299295][ T5911] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  254.310647][ T5911] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  254.352055][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  254.433961][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  254.446727][ T5911] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  254.483053][ T8147] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[  254.489592][ T8147] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  254.498596][ T8147] vhci_hcd vhci_hcd.0: Device attached
[  254.524787][ T5911] usb 5-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89
[  254.534550][   T29] audit: type=1400 audit(1731154805.367:4759): avc:  denied  { name_bind } for  pid=8141 comm="syz.2.562" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  254.555990][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  254.572143][ T5911] usb 5-1: Product: syz
[  254.576649][ T5911] usb 5-1: Manufacturer: syz
[  254.582190][ T5911] usb 5-1: SerialNumber: syz
[  254.589319][ T5911] usb 5-1: config 0 descriptor??
[  254.664201][ T5911] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622
[  254.952424][ T5839] vhci_hcd: vhci_device speed not set
[  254.957988][ T5973] usb 4-1: new low-speed USB device number 25 using dummy_hcd
[  254.982151][ T8155] netlink: 12 bytes leftover after parsing attributes in process `syz.0.566'.
[  255.022335][ T5839] usb 39-1: new full-speed USB device number 3 using vhci_hcd
[  255.083970][   T29] audit: type=1326 audit(1731154805.937:4760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8151 comm="syz.1.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53dfd7e719 code=0x7ffc0000
[  255.245786][ T5973] usb 4-1: unable to read config index 0 descriptor/start: -61
[  255.287904][   T29] audit: type=1326 audit(1731154805.937:4761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8151 comm="syz.1.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f53dfd7d0b0 code=0x7ffc0000
[  255.393059][ T5973] usb 4-1: can't read configurations, error -61
[  255.505139][   T29] audit: type=1326 audit(1731154805.937:4762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8151 comm="syz.1.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f53dfd7ff47 code=0x7ffc0000
[  255.580524][ T5911] gspca_pac7302: reg_w() failed i: ff v: 01 error -110
[  255.588497][ T5911] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -110
[  255.607906][ T5973] usb 4-1: new low-speed USB device number 26 using dummy_hcd
[  255.632320][   T29] audit: type=1326 audit(1731154805.937:4763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8151 comm="syz.1.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f53dfd7e719 code=0x7ffc0000
[  255.698961][   T29] audit: type=1326 audit(1731154805.937:4764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8151 comm="syz.1.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f53dfd7ff47 code=0x7ffc0000
[  255.732641][  T968] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  255.761053][   T29] audit: type=1326 audit(1731154805.937:4765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8151 comm="syz.1.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f53dfd7d3aa code=0x7ffc0000
[  255.807461][   T29] audit: type=1326 audit(1731154805.947:4766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8151 comm="syz.1.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53dfd7e719 code=0x7ffc0000
[  255.809882][ T8134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  255.831808][   T29] audit: type=1326 audit(1731154805.947:4767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8151 comm="syz.1.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53dfd7e719 code=0x7ffc0000
[  255.836138][ T5973] usb 4-1: unable to read config index 0 descriptor/start: -61
[  255.842157][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  255.878865][ T5973] usb 4-1: can't read configurations, error -61
[  255.922503][  T968] usb 1-1: Using ep0 maxpacket: 8
[  255.927011][ T8134] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  255.938202][  T968] usb 1-1: config 6 has an invalid interface number: 2 but max is 0
[  255.966348][  T968] usb 1-1: config 6 has no interface number 0
[  255.987120][ T5973] usb usb4-port1: attempt power cycle
[  256.006062][  T968] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  256.063829][  T968] usb 1-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  256.075893][  T968] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  256.089875][  T968] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  256.108903][  T968] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  256.126685][  T968] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  256.146667][  T968] usb 1-1: Product: syz
[  256.151015][  T968] usb 1-1: Manufacturer: syz
[  256.214077][ T5971] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  256.229020][  T968] usb 1-1: SerialNumber: syz
[  256.382544][ T5971] usb 3-1: Using ep0 maxpacket: 32
[  256.391475][  T968] hso 1-1:6.2: Failed to find BULK IN ep
[  256.397564][ T5973] usb 4-1: new low-speed USB device number 27 using dummy_hcd
[  256.424427][ T5971] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0108, bcdDevice=4d.52
[  256.444513][ T5971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  256.458211][ T5973] usb 4-1: unable to read config index 0 descriptor/start: -61
[  256.472618][ T5973] usb 4-1: can't read configurations, error -61
[  256.479052][ T5971] usb 3-1: Product: syz
[  256.483317][ T5971] usb 3-1: Manufacturer: syz
[  256.495416][ T5971] usb 3-1: SerialNumber: syz
[  256.519015][ T5971] usb 3-1: config 0 descriptor??
[  256.542169][ T5971] usb_ehset_test 3-1:0.0: probe with driver usb_ehset_test failed with error -32
[  256.565393][  T968] usb 1-1: USB disconnect, device number 31
[  256.642417][ T5973] usb 4-1: new low-speed USB device number 28 using dummy_hcd
[  256.675198][ T5973] usb 4-1: unable to read config index 0 descriptor/start: -61
[  256.682945][ T5973] usb 4-1: can't read configurations, error -61
[  256.690152][ T5973] usb usb4-port1: unable to enumerate USB device
[  256.741310][ T5911] usb 3-1: USB disconnect, device number 46
[  257.545823][ T8148] vhci_hcd: connection reset by peer
[  257.556267][   T35] vhci_hcd: stop threads
[  257.563209][   T35] vhci_hcd: release socket
[  257.592606][   T35] vhci_hcd: disconnect device
[  257.634135][  T965] usb 5-1: USB disconnect, device number 34
[  259.598470][ T8170] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  259.741613][ T8199] devpts: called with bogus options
[  260.380473][ T5839] vhci_hcd: vhci_device speed not set
[  260.672945][ T8211] netlink: 12 bytes leftover after parsing attributes in process `syz.3.576'.
[  261.273853][ T5911] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  262.022350][ T5911] usb 2-1: Using ep0 maxpacket: 16
[  262.052442][   T29] audit: type=1400 audit(1731154812.407:4768): avc:  denied  { accept } for  pid=8205 comm="syz.0.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  262.073024][  T965] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  262.170644][   T29] audit: type=1400 audit(1731154812.437:4769): avc:  denied  { read } for  pid=8205 comm="syz.0.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  262.201888][ T5911] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  262.230985][ T5911] usb 2-1: config 1 has an invalid descriptor of length 183, skipping remainder of the config
[  262.241902][  T965] usb 3-1: Using ep0 maxpacket: 32
[  262.247333][ T5911] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  262.259386][  T965] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  262.268467][  T965] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  262.277519][  T965] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[  262.286988][  T965] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  262.296895][  T965] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  262.306657][  T965] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  262.319778][  T965] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  262.328907][  T965] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  262.411912][  T965] usb 3-1: config 0 descriptor??
[  262.453366][ T8220] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[  262.459907][ T8220] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  262.475220][ T5911] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  262.478137][ T8220] vhci_hcd vhci_hcd.0: Device attached
[  262.485663][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.498177][ T5911] usb 2-1: Product: syz
[  262.502442][ T5911] usb 2-1: Manufacturer: syz
[  262.507395][ T5911] usb 2-1: SerialNumber: syz
[  262.742691][ T5839] vhci_hcd: vhci_device speed not set
[  262.762511][  T968] usb 4-1: new low-speed USB device number 29 using dummy_hcd
[  262.764686][  T965] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 47 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  262.812437][ T5839] usb 39-1: device descriptor read/64, error -110
[  263.013887][ T5911] usb 2-1: 0:2 : does not exist
[  263.030316][  T965] usb 3-1: USB disconnect, device number 47
[  263.074269][  T968] usb 4-1: unable to read config index 0 descriptor/start: -61
[  263.089418][  T968] usb 4-1: can't read configurations, error -61
[  263.099476][  T965] usblp0: removed
[  263.182367][ T5839] vhci_hcd: vhci_device speed not set
[  263.253898][  T968] usb 4-1: new low-speed USB device number 30 using dummy_hcd
[  263.261517][ T5839] usb 39-1: new full-speed USB device number 4 using vhci_hcd
[  263.371540][   T29] audit: type=1326 audit(1731154814.227:4770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8233 comm="syz.0.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48cc57e719 code=0x7ffc0000
[  263.402383][  T965] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  263.412853][   T29] audit: type=1326 audit(1731154814.257:4771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8233 comm="syz.0.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48cc57e719 code=0x7ffc0000
[  263.442629][   T29] audit: type=1326 audit(1731154814.257:4772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8233 comm="syz.0.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f48cc57e719 code=0x7ffc0000
[  263.446447][  T968] usb 4-1: unable to read config index 0 descriptor/start: -61
[  263.466934][   T29] audit: type=1326 audit(1731154814.257:4773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8233 comm="syz.0.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48cc57e719 code=0x7ffc0000
[  263.537163][  T968] usb 4-1: can't read configurations, error -61
[  263.582375][  T965] usb 3-1: Using ep0 maxpacket: 32
[  263.583179][  T968] usb usb4-port1: attempt power cycle
[  263.592156][   T29] audit: type=1326 audit(1731154814.267:4774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8233 comm="syz.0.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f48cc57e719 code=0x7ffc0000
[  263.701315][  T965] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  263.725734][  T965] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  263.782871][   T29] audit: type=1326 audit(1731154814.297:4775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8233 comm="syz.0.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48cc57e719 code=0x7ffc0000
[  263.808863][  T965] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[  263.840439][  T965] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  263.879668][  T965] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  263.918301][   T29] audit: type=1326 audit(1731154814.297:4776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8233 comm="syz.0.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48cc57e719 code=0x7ffc0000
[  263.967106][  T965] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  264.005865][  T965] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  264.016051][   T29] audit: type=1326 audit(1731154814.417:4777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8233 comm="syz.0.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f48cc57e719 code=0x7ffc0000
[  264.040128][  T965] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  264.089560][  T965] usb 3-1: config 0 descriptor??
[  264.097516][  T965] usb 3-1: can't set config #0, error -71
[  264.107948][  T965] usb 3-1: USB disconnect, device number 48
[  264.142690][  T968] usb 4-1: new low-speed USB device number 31 using dummy_hcd
[  264.194974][  T968] usb 4-1: unable to read config index 0 descriptor/start: -61
[  264.203338][  T968] usb 4-1: can't read configurations, error -61
[  264.283833][ T5911] usb 2-1: 1:0: failed to get current value for ch 0 (-22)
[  264.332456][  T968] usb 4-1: new low-speed USB device number 32 using dummy_hcd
[  264.339194][ T5911] usb 2-1: USB disconnect, device number 15
[  264.385110][  T968] usb 4-1: unable to read config index 0 descriptor/start: -61
[  264.393338][  T968] usb 4-1: can't read configurations, error -61
[  264.401200][  T968] usb usb4-port1: unable to enumerate USB device
[  264.593516][ T5833] udevd[5833]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  264.622507][  T965] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  264.630954][ T5882] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  264.793517][ T5882] usb 1-1: Using ep0 maxpacket: 8
[  264.864313][ T5882] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  265.025712][ T5882] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  265.111703][ T5882] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  265.139948][ T5882] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  265.155419][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  265.163699][  T965] usb 3-1: Using ep0 maxpacket: 32
[  265.172546][  T965] usb 3-1: config 0 has no interfaces?
[  265.186019][ T8226] vhci_hcd: connection reset by peer
[  265.191784][ T2930] vhci_hcd: stop threads
[  265.198532][ T5882] usb 1-1: Product: syz
[  265.202846][ T2930] vhci_hcd: release socket
[  265.207499][ T2930] vhci_hcd: disconnect device
[  265.228226][  T965] usb 3-1: New USB device found, idVendor=0572, idProduct=0320, bcdDevice=7f.e0
[  265.257691][  T965] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  265.274854][ T5882] usb 1-1: Manufacturer: syz
[  265.279502][ T5882] usb 1-1: SerialNumber: syz
[  265.287109][  T965] usb 3-1: Product: syz
[  265.296875][  T965] usb 3-1: Manufacturer: syz
[  265.303863][  T965] usb 3-1: SerialNumber: syz
[  265.312970][  T965] usb 3-1: config 0 descriptor??
[  265.512817][ T5882] usb 1-1: 0:2 : does not exist
[  265.524276][ T5882] usb 1-1: USB disconnect, device number 32
[  265.534826][ T5833] udevd[5833]: setting mode of /dev/bus/usb/001/032 to 020664 failed: No such file or directory
[  265.546718][ T5833] udevd[5833]: setting owner of /dev/bus/usb/001/032 to uid=0, gid=0 failed: No such file or directory
[  265.642455][ T5971] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  265.674443][  T968] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  265.722997][ T5833] udevd[5833]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  265.812432][ T5971] usb 4-1: Using ep0 maxpacket: 32
[  265.819345][ T5971] usb 4-1: config index 0 descriptor too short (expected 9, got 0)
[  265.827586][ T5971] usb 4-1: can't read configurations, error -22
[  265.837413][  T968] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  265.847121][  T968] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  265.855209][  T968] usb 5-1: Product: syz
[  265.859481][  T968] usb 5-1: Manufacturer: syz
[  265.864281][  T968] usb 5-1: SerialNumber: syz
[  265.870024][ T8239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  265.878948][ T8239] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  265.892007][  T968] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  265.933862][  T968] usb 3-1: USB disconnect, device number 49
[  265.944239][ T5973] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  265.970096][ T5971] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  266.083489][ T8261] 9pnet_fd: Insufficient options for proto=fd
[  266.122389][ T5971] usb 4-1: Using ep0 maxpacket: 32
[  266.135385][ T5971] usb 4-1: config index 0 descriptor too short (expected 9, got 0)
[  266.155340][ T5971] usb 4-1: can't read configurations, error -22
[  266.163132][ T5971] usb usb4-port1: attempt power cycle
[  266.724693][ T5882] usb 5-1: USB disconnect, device number 35
[  266.735817][  T968] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  266.748840][ T5971] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  266.793292][ T5971] usb 4-1: Using ep0 maxpacket: 32
[  266.800601][ T5971] usb 4-1: config index 0 descriptor too short (expected 9, got 0)
[  266.808949][ T5971] usb 4-1: can't read configurations, error -22
[  266.923879][  T968] usb 3-1: config 9 has no interfaces?
[  266.931750][  T968] usb 3-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00
[  266.943307][ T5971] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  266.954312][  T968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  266.986404][ T5971] usb 4-1: Using ep0 maxpacket: 32
[  266.995484][ T5971] usb 4-1: config index 0 descriptor too short (expected 9, got 0)
[  267.007961][ T5971] usb 4-1: can't read configurations, error -22
[  267.015667][ T5973] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  267.038814][ T5971] usb usb4-port1: unable to enumerate USB device
[  267.047513][ T5973] ath9k_htc: Failed to initialize the device
[  267.062490][ T5882] usb 5-1: ath9k_htc: USB layer deinitialized
[  267.181796][   T29] kauditd_printk_skb: 3 callbacks suppressed
[  267.181814][   T29] audit: type=1400 audit(1731154818.037:4781): avc:  denied  { listen } for  pid=8270 comm="syz.0.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  267.218687][   T29] audit: type=1400 audit(1731154818.057:4782): avc:  denied  { accept } for  pid=8270 comm="syz.0.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  268.053803][ T5141] Bluetooth: hci4: command 0x0405 tx timeout
[  268.363974][ T5839] vhci_hcd: vhci_device speed not set
[  268.531228][ T8287] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8)
[  268.537775][ T8287] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  268.545429][ T8287] vhci_hcd vhci_hcd.0: Device attached
[  268.766957][ T5973] vhci_hcd: vhci_device speed not set
[  268.932933][ T5971] usb 5-1: new low-speed USB device number 36 using dummy_hcd
[  268.941570][ T5973] usb 41-1: new full-speed USB device number 4 using vhci_hcd
[  269.097437][ T5971] usb 5-1: unable to read config index 0 descriptor/start: -61
[  269.105322][ T5971] usb 5-1: can't read configurations, error -61
[  269.287826][  T968] usb 3-1: string descriptor 0 read error: -71
[  269.353515][  T968] usb 3-1: USB disconnect, device number 50
[  269.628976][ T5971] usb 5-1: new low-speed USB device number 37 using dummy_hcd
[  269.661328][ T8310] tipc: Started in network mode
[  269.674180][ T8310] tipc: Node identity ac1414aa, cluster identity 4711
[  269.687237][ T8310] tipc: Enabled bearer <udp:syz2>, priority 10
[  269.698738][ T8310] tipc: Disabling bearer <udp:syz2>
[  269.719771][ T8310] netlink: 'syz.0.606': attribute type 1 has an invalid length.
[  269.727622][ T8310] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.606'.
[  269.737102][ T8310] netlink: 'syz.0.606': attribute type 1 has an invalid length.
[  270.572323][ T5883] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  270.631425][   T29] audit: type=1400 audit(1731154821.467:4783): avc:  denied  { bind } for  pid=8314 comm="syz.3.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  270.654964][ T5971] usb 5-1: unable to read config index 0 descriptor/start: -61
[  270.664618][ T5971] usb 5-1: can't read configurations, error -61
[  270.671457][ T5971] usb usb5-port1: attempt power cycle
[  270.684203][   T29] audit: type=1400 audit(1731154821.547:4784): avc:  denied  { recv } for  pid=8317 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.146 dest=44424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  270.752538][ T5883] usb 2-1: Using ep0 maxpacket: 8
[  270.758792][ T5883] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  270.768041][ T5883] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  270.778592][ T5883] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  270.791435][ T5883] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  270.801003][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  270.815886][ T5883] usb 2-1: Product: syz
[  270.839146][ T5883] usb 2-1: Manufacturer: syz
[  270.942391][  T965] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  271.257143][ T5883] usb 2-1: SerialNumber: syz
[  271.322435][ T5971] usb 5-1: new low-speed USB device number 38 using dummy_hcd
[  271.345110][ T5971] usb 5-1: unable to read config index 0 descriptor/start: -61
[  271.353198][ T5971] usb 5-1: can't read configurations, error -61
[  271.362616][  T965] usb 1-1: Using ep0 maxpacket: 32
[  271.376825][  T965] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  271.389938][  T965] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  271.398078][  T965] usb 1-1: Product: syz
[  271.402714][  T965] usb 1-1: Manufacturer: syz
[  271.407373][  T965] usb 1-1: SerialNumber: syz
[  271.417225][  T965] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  271.472786][ T5883] usb 2-1: 0:2 : does not exist
[  271.482490][ T5971] usb 5-1: new low-speed USB device number 39 using dummy_hcd
[  271.512061][ T5883] usb 2-1: USB disconnect, device number 16
[  271.535402][ T8288] vhci_hcd: connection reset by peer
[  271.535918][ T5971] usb 5-1: device descriptor read/8, error -71
[  271.547214][ T7958] vhci_hcd: stop threads
[  271.557492][ T7958] vhci_hcd: release socket
[  271.562838][ T7958] vhci_hcd: disconnect device
[  271.667037][ T5971] usb usb5-port1: unable to enumerate USB device
[  271.808105][ T5833] udevd[5833]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  271.950672][   T29] audit: type=1400 audit(1731154822.807:4785): avc:  denied  { watch } for  pid=8326 comm="syz.3.613" path="/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  272.669209][ T8340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.615'.
[  273.127585][  T965] gspca_stk1135: reg_w 0xd err -110
[  273.134465][  T965] gspca_stk1135: serial bus timeout: status=0x00
[  273.149497][  T965] gspca_stk1135: Sensor write failed
[  273.160203][  T965] gspca_stk1135: serial bus timeout: status=0x00
[  273.201171][  T965] gspca_stk1135: Sensor write failed
[  273.215951][  T965] gspca_stk1135: serial bus timeout: status=0x00
[  273.229033][  T965] gspca_stk1135: Sensor read failed
[  273.236695][  T965] gspca_stk1135: serial bus timeout: status=0x00
[  273.296927][  T965] gspca_stk1135: Sensor read failed
[  273.326409][  T965] gspca_stk1135: Detected sensor type unknown (0x0)
[  273.379658][  T965] gspca_stk1135: serial bus timeout: status=0x00
[  273.406418][  T965] gspca_stk1135: Sensor read failed
[  273.446192][  T965] gspca_stk1135: serial bus timeout: status=0x00
[  273.472810][  T965] gspca_stk1135: Sensor read failed
[  273.487333][  T965] gspca_stk1135: serial bus timeout: status=0x00
[  273.509452][  T965] gspca_stk1135: Sensor write failed
[  273.601834][  T965] gspca_stk1135: serial bus timeout: status=0x00
[  273.646850][   T29] audit: type=1400 audit(1731154824.507:4786): avc:  denied  { create } for  pid=8349 comm="syz.1.617" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  273.762148][ T8357] pimreg: entered allmulticast mode
[  273.867172][ T8357] pimreg: left allmulticast mode
[  273.874422][  T965] gspca_stk1135: Sensor write failed
[  274.017411][  T965] stk1135 1-1:64.0: probe with driver stk1135 failed with error -110
[  274.042418][ T5973] vhci_hcd: vhci_device speed not set
[  274.133354][ T8332] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  274.161615][  T965] usb 1-1: USB disconnect, device number 33
[  274.183436][   T29] audit: type=1400 audit(1731154825.047:4787): avc:  denied  { setattr } for  pid=8361 comm="syz.2.619" path="socket:[16908]" dev="sockfs" ino=16908 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  274.442911][   T29] audit: type=1400 audit(1731154825.217:4788): avc:  denied  { unlink } for  pid=5825 comm="syz-executor" name="file0" dev="tmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  274.812575][ T8377] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[  274.819112][ T8377] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  274.828438][ T8377] vhci_hcd vhci_hcd.0: Device attached
[  274.840683][   T29] audit: type=1400 audit(1731154825.587:4789): avc:  denied  { getopt } for  pid=8368 comm="syz.3.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  275.022490][ T5839] vhci_hcd: vhci_device speed not set
[  275.086565][ T5839] usb 35-1: new full-speed USB device number 2 using vhci_hcd
[  275.102580][  T968] usb 2-1: new low-speed USB device number 17 using dummy_hcd
[  275.264082][  T968] usb 2-1: config 0 has no interfaces?
[  275.279296][  T968] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  275.323675][  T968] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  275.369540][  T968] usb 2-1: config 0 descriptor??
[  276.336614][ T8395] pimreg: entered allmulticast mode
[  276.417357][ T8395] pimreg: left allmulticast mode
[  276.563654][ T8379] vhci_hcd: connection reset by peer
[  276.569826][ T5971] usb 2-1: USB disconnect, device number 17
[  276.576067][   T52] vhci_hcd: stop threads
[  276.596849][   T52] vhci_hcd: release socket
[  276.606623][   T52] vhci_hcd: disconnect device
[  277.981841][ T8416] netlink: 12 bytes leftover after parsing attributes in process `syz.1.627'.
[  278.655185][ T8362] syz.2.619 (8362): drop_caches: 1
[  279.292767][ T8425] syz.1.629: attempt to access beyond end of device
[  279.292767][ T8425] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0
[  279.318434][   T29] audit: type=1400 audit(1731154830.177:4790): avc:  denied  { mounton } for  pid=8421 comm="syz.1.629" path="/138/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  280.044391][ T5882] libceph: connect (1)[c::]:6789 error -101
[  280.136854][ T5882] libceph: mon0 (1)[c::]:6789 connect error
[  280.456808][ T5839] vhci_hcd: vhci_device speed not set
[  280.473047][ T8437] ceph: No mds server is up or the cluster is laggy
[  281.185052][   T29] audit: type=1326 audit(1731154832.047:4791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8446 comm="syz.4.635" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f835fb7e719 code=0x0
[  281.447988][   T29] audit: type=1400 audit(1731154832.287:4792): avc:  denied  { egress } for  pid=8401 comm="syz.3.626" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1
[  281.503183][   T29] audit: type=1400 audit(1731154832.287:4793): avc:  denied  { sendto } for  pid=8401 comm="syz.3.626" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1
[  282.342369][   T29] audit: type=1400 audit(1731154833.037:4794): avc:  denied  { module_request } for  pid=8446 comm="syz.4.635" kmod="net-pf-16-proto-31" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  283.996914][ T8430] netlink: 'syz.0.631': attribute type 39 has an invalid length.
[  284.472471][ T5882] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  284.643360][ T8472] netlink: 12 bytes leftover after parsing attributes in process `syz.4.640'.
[  285.644381][ T5882] usb 4-1: Using ep0 maxpacket: 32
[  285.657257][ T5882] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  285.671239][ T5882] usb 4-1: config 7 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  285.685347][ T5882] usb 4-1: config 7 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  286.072330][ T5882] usb 4-1: config 7 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  286.168852][ T5882] usb 4-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00
[  286.329511][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  286.931282][ T8471] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  287.028020][   T29] audit: type=1400 audit(1731154837.877:4795): avc:  denied  { read } for  pid=8494 comm="syz.2.647" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  287.052057][   T29] audit: type=1400 audit(1731154837.877:4796): avc:  denied  { open } for  pid=8494 comm="syz.2.647" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  287.157441][ T5882] usbhid 4-1:7.0: can't add hid device: -71
[  287.164151][ T5882] usbhid 4-1:7.0: probe with driver usbhid failed with error -71
[  287.313858][ T5882] usb 4-1: USB disconnect, device number 37
[  287.322380][ T5911] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  287.352639][ T5839] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  287.472476][ T5911] usb 1-1: Using ep0 maxpacket: 16
[  287.479168][ T5911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  287.490509][ T5911] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  287.499995][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  287.509846][ T5911] usb 1-1: config 0 descriptor??
[  287.513791][ T5839] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  287.531581][ T5839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  287.542913][ T5839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  287.552738][ T5839] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  287.567601][ T5839] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  287.577845][ T5839] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  287.586074][ T5839] usb 3-1: Manufacturer: syz
[  287.593080][ T5839] usb 3-1: config 0 descriptor??
[  287.944276][ T8491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  287.988304][ T8491] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  288.013283][ T5839] appleir 0003:05AC:8243.000B: unknown main item tag 0x0
[  288.026692][ T5839] appleir 0003:05AC:8243.000B: No inputs registered, leaving
[  288.033220][ T5911] hid (null): unknown global tag 0x83
[  288.039029][ T5839] appleir 0003:05AC:8243.000B: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0
[  288.071152][ T5911] hid (null): unknown global tag 0xc
[  288.094312][ T5911] hid-sensor-hub 0003:0158:0100.000C: unknown main item tag 0x1
[  288.102693][ T5911] hid-sensor-hub 0003:0158:0100.000C: unexpected long global item
[  288.116284][ T5911] hid-sensor-hub 0003:0158:0100.000C: parse failed
[  288.202953][ T5911] hid-sensor-hub 0003:0158:0100.000C: probe with driver hid-sensor-hub failed with error -22
[  288.282333][ T5882] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  288.285367][ T5839] usb 1-1: USB disconnect, device number 34
[  288.560399][ T8510] netlink: 12 bytes leftover after parsing attributes in process `syz.3.652'.
[  289.062291][ T5882] usb 2-1: Using ep0 maxpacket: 16
[  289.071614][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  289.142450][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  289.142486][ T5882] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  289.142527][ T5882] usb 2-1: New USB device found, idVendor=045e, idProduct=9994, bcdDevice=fc.3c
[  289.142553][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  289.163477][ T5882] usb 2-1: config 0 descriptor??
[  289.309793][   T29] audit: type=1400 audit(1731154840.167:4797): avc:  denied  { write } for  pid=8516 comm="syz.0.654" name="mouse0" dev="devtmpfs" ino=990 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  289.866028][  T965] usb 3-1: reset high-speed USB device number 51 using dummy_hcd
[  289.877774][ T8520] binder: BINDER_SET_CONTEXT_MGR already set
[  289.892677][ T8520] binder: 8516:8520 ioctl 4018620d 20000140 returned -16
[  289.911802][   T29] audit: type=1400 audit(1731154840.767:4798): avc:  denied  { create } for  pid=8516 comm="syz.0.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  290.092578][ T5882] hid-multitouch 0003:045E:9994.000D: unknown main item tag 0x2
[  290.100524][ T5882] hid-multitouch 0003:045E:9994.000D: unknown main item tag 0x0
[  290.108491][ T5882] hid-multitouch 0003:045E:9994.000D: unknown main item tag 0x0
[  290.117410][ T5882] hid-multitouch 0003:045E:9994.000D: unknown main item tag 0x0
[  290.125212][ T5882] hid-multitouch 0003:045E:9994.000D: unknown main item tag 0x0
[  290.133077][ T5882] hid-multitouch 0003:045E:9994.000D: unknown main item tag 0x0
[  290.140808][ T5882] hid-multitouch 0003:045E:9994.000D: unknown main item tag 0x0
[  290.150249][ T5882] hid-multitouch 0003:045E:9994.000D: unknown main item tag 0x0
[  290.158021][ T5882] hid-multitouch 0003:045E:9994.000D: unknown main item tag 0x0
[  290.165897][ T5882] hid-multitouch 0003:045E:9994.000D: unknown main item tag 0x0
[  290.173696][ T5882] hid-multitouch 0003:045E:9994.000D: unknown main item tag 0x0
[  290.193289][ T5882] hid-multitouch 0003:045E:9994.000D: hidraw1: USB HID v0.00 Device [HID 045e:9994] on usb-dummy_hcd.1-1/input0
[  290.328472][ T5971] usb 2-1: USB disconnect, device number 18
[  290.390923][ T8525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.656'.
[  290.407549][ T8525] netlink: 11 bytes leftover after parsing attributes in process `syz.0.656'.
[  290.445463][ T8525] netlink: 5304 bytes leftover after parsing attributes in process `syz.0.656'.
[  290.651290][ T8530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.658'.
[  291.002137][ T8540] netlink: 24 bytes leftover after parsing attributes in process `syz.3.661'.
[  291.430966][ T8547] FAULT_INJECTION: forcing a failure.
[  291.430966][ T8547] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  291.450330][ T8547] CPU: 1 UID: 0 PID: 8547 Comm: syz.1.663 Not tainted 6.12.0-rc6-syzkaller-00225-g50643bbc9eb6 #0
[  291.460960][ T8547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  291.471035][ T8547] Call Trace:
[  291.474324][ T8547]  <TASK>
[  291.477269][ T8547]  dump_stack_lvl+0x16c/0x1f0
[  291.481965][ T8547]  should_fail_ex+0x497/0x5b0
[  291.486663][ T8547]  _copy_from_iter+0x2a1/0x1560
[  291.491535][ T8547]  ? __pfx__copy_from_iter+0x10/0x10
[  291.496840][ T8547]  ? __pfx_alloc_pages_mpol_noprof+0x10/0x10
[  291.502840][ T8547]  ? tun_build_skb.constprop.0+0x1b8/0x1120
[  291.508756][ T8547]  ? __pfx_lock_release+0x10/0x10
[  291.513788][ T8547]  ? trace_lock_acquire+0x14a/0x1d0
[  291.519031][ T8547]  ? __pfx_lock_release+0x10/0x10
[  291.524071][ T8547]  copy_page_from_iter+0xa5/0x120
[  291.529136][ T8547]  tun_build_skb.constprop.0+0x294/0x1120
[  291.534894][ T8547]  ? __pfx_tun_build_skb.constprop.0+0x10/0x10
[  291.541077][ T8547]  ? __pfx___lock_acquire+0x10/0x10
[  291.546290][ T8547]  ? __pfx_mark_lock+0x10/0x10
[  291.551065][ T8547]  ? __lock_acquire+0xbdd/0x3ce0
[  291.556002][ T8547]  tun_get_user+0x872/0x3d80
[  291.560596][ T8547]  ? find_held_lock+0x2d/0x110
[  291.565359][ T8547]  ? __pfx_tun_get_user+0x10/0x10
[  291.570379][ T8547]  ? find_held_lock+0x2d/0x110
[  291.575145][ T8547]  ? __pfx_lock_release+0x10/0x10
[  291.580172][ T8547]  tun_chr_write_iter+0xdc/0x210
[  291.585109][ T8547]  vfs_write+0x5ae/0x1150
[  291.589440][ T8547]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  291.594981][ T8547]  ? trace_lock_acquire+0x14a/0x1d0
[  291.600171][ T8547]  ? __pfx_vfs_write+0x10/0x10
[  291.604930][ T8547]  ? __fget_files+0x40/0x3f0
[  291.609522][ T8547]  ksys_write+0x12f/0x260
[  291.613845][ T8547]  ? __pfx_ksys_write+0x10/0x10
[  291.618695][ T8547]  do_syscall_64+0xcd/0x250
[  291.623192][ T8547]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  291.629104][ T8547] RIP: 0033:0x7f53dfd7d1ff
[  291.633508][ T8547] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48
[  291.653112][ T8547] RSP: 002b:00007f53e0bbd000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  291.661534][ T8547] RAX: ffffffffffffffda RBX: 00007f53dff35f80 RCX: 00007f53dfd7d1ff
[  291.669496][ T8547] RDX: 0000000000000041 RSI: 0000000020000000 RDI: 00000000000000c8
[  291.677477][ T8547] RBP: 00007f53e0bbd090 R08: 0000000000000000 R09: 0000000000000000
[  291.685458][ T8547] R10: 0000000000000041 R11: 0000000000000293 R12: 0000000000000001
[  291.693434][ T8547] R13: 0000000000000001 R14: 00007f53dff35f80 R15: 00007ffe75912968
[  291.701413][ T8547]  </TASK>
[  292.087412][   T29] audit: type=1400 audit(1731154842.847:4799): avc:  denied  { connect } for  pid=8538 comm="syz.3.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  292.171816][ T8543] mkiss: ax0: crc mode is auto.
[  292.445362][ T8559] bridge0: port 2(bridge_slave_1) entered disabled state
[  292.455559][ T8559] bridge0: port 1(bridge_slave_0) entered disabled state
[  292.488557][ T8559] bridge0: entered allmulticast mode
[  292.595225][ T8562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.664'.
[  293.026679][ T8559] bridge0: port 2(bridge_slave_1) entered blocking state
[  293.033889][ T8559] bridge0: port 2(bridge_slave_1) entered forwarding state
[  293.042650][ T8559] bridge0: port 1(bridge_slave_0) entered blocking state
[  293.049766][ T8559] bridge0: port 1(bridge_slave_0) entered forwarding state
[  293.076379][ T8559] bridge0: entered promiscuous mode
[  293.132453][  T965] usb 3-1: device descriptor read/64, error -71
[  293.432285][  T965] usb 3-1: reset high-speed USB device number 51 using dummy_hcd
[  293.963989][ T8579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.671'.
[  294.172093][  T965] usb 3-1: device firmware changed
[  294.182435][ T5883] usb 3-1: USB disconnect, device number 51
[  294.804710][ T5883] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  294.957943][ T5839] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  294.963699][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  295.123942][ T5839] usb 1-1: Using ep0 maxpacket: 32
[  295.138854][ T5839] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  295.199962][ T5839] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  295.257089][ T5839] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  295.413162][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  295.423059][ T5883] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  295.435994][ T5883] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00
[  295.438174][ T5839] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  295.445571][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  295.477756][ T5883] usb 3-1: config 0 descriptor??
[  295.493264][ T5883] usb 3-1: can't set config #0, error -71
[  295.503486][ T5883] usb 3-1: USB disconnect, device number 52
[  295.524790][ T5839] usb 1-1: Product: syz
[  295.539301][ T5839] usb 1-1: Manufacturer: syz
[  295.563709][ T5839] hub 1-1:4.0: USB hub found
[  295.737833][   T29] audit: type=1400 audit(1731154846.597:4800): avc:  denied  { getopt } for  pid=8599 comm="syz.2.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  296.083434][ T5839] hub 1-1:4.0: 2 ports detected
[  296.181641][ T5839] hub 1-1:4.0: insufficient power available to use all downstream ports
[  296.254378][   T29] audit: type=1400 audit(1731154847.107:4801): avc:  denied  { write } for  pid=8599 comm="syz.2.678" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  296.295588][ T5839] hub 1-1:4.0: hub_hub_status failed (err = -71)
[  296.302508][   T29] audit: type=1400 audit(1731154847.107:4802): avc:  denied  { open } for  pid=8599 comm="syz.2.678" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  296.310886][ T5839] hub 1-1:4.0: config failed, can't get hub status (err -71)
[  296.455472][ T5839] usb 1-1: USB disconnect, device number 35
[  296.482669][ T8610] x_tables: duplicate underflow at hook 3
[  296.612380][ T5883] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  296.788624][ T8624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.684'.
[  296.892582][ T5883] usb 3-1: Using ep0 maxpacket: 8
[  296.912611][ T5883] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  296.921785][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  296.928630][ T8626] trusted_key: encrypted_key: master key parameter 'use' is invalid
[  296.968471][ T8626] Cannot find add_set index 0 as target
[  296.983339][ T5883] usb 3-1: Product: syz
[  296.992554][ T5883] usb 3-1: Manufacturer: syz
[  296.997345][ T5883] usb 3-1: SerialNumber: syz
[  297.116865][ T5883] usb 3-1: config 0 descriptor??
[  297.406601][ T5883] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  297.824593][  T968] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  298.097610][  T968] usb 1-1: Using ep0 maxpacket: 16
[  298.167375][  T968] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  298.194669][  T968] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  298.212088][  T968] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  298.223778][  T968] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  298.234072][  T968] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  298.249510][  T968] usb 1-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89
[  298.268172][  T968] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  298.285781][  T968] usb 1-1: Product: syz
[  298.294273][  T968] usb 1-1: Manufacturer: syz
[  298.305360][  T968] usb 1-1: SerialNumber: syz
[  298.343911][  T968] usb 1-1: config 0 descriptor??
[  298.376555][  T968] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622
[  299.602404][  T968] gspca_pac7302: reg_w() failed i: ff v: 01 error -110
[  299.609353][  T968] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -110
[  299.965160][ T8631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  300.017929][ T8631] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  300.080614][ T8631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  300.105692][ T8631] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  300.165973][ T5883] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  300.184547][ T5883] usb 3-1: USB disconnect, device number 53
[  300.866480][ T8656] process 'syz.2.693' launched './file0' with NULL argv: empty string added
[  300.877437][   T29] audit: type=1400 audit(1731154851.737:4803): avc:  denied  { execute_no_trans } for  pid=8654 comm="syz.2.693" path="/137/file0" dev="tmpfs" ino=775 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  301.036400][ T8661] netlink: 56 bytes leftover after parsing attributes in process `syz.1.695'.
[  301.455446][    T9] usb 1-1: USB disconnect, device number 36
[  301.727826][ T5883] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  301.911204][ T5883] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  301.996512][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  302.127439][ T5883] usb 4-1: config 0 descriptor??
[  303.471487][   T29] audit: type=1400 audit(1731154854.307:4804): avc:  denied  { create } for  pid=8685 comm="syz.0.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  303.545216][ T8688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.701'.
[  303.554083][ T8688] bMtadv_lave_0: renamed from lo (while UP)
[  304.216902][ T5883] pegasus 4-1:0.0: probe with driver pegasus failed with error -32
[  304.262377][   T29] audit: type=1400 audit(1731154854.457:4805): avc:  denied  { bind } for  pid=8683 comm="syz.1.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  304.287897][ T8688] bMtadv_lave_0: entered allmulticast mode
[  304.692342][ T5883] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  304.903391][ T5883] usb 3-1: Using ep0 maxpacket: 16
[  305.010333][ T5883] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  305.030407][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  305.151327][ T2930] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.252533][ T5883] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  305.295503][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  305.299430][ T5141] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  305.303595][ T5883] usb 3-1: Product: syz
[  305.303619][ T5883] usb 3-1: Manufacturer: syz
[  305.303636][ T5883] usb 3-1: SerialNumber: syz
[  305.305456][ T5883] usb 3-1: config 0 descriptor??
[  305.317229][ T8703] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  305.343880][ T5883] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  305.351940][ T5141] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  305.362587][ T5141] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  305.370986][ T5141] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  305.380008][ T5141] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  305.388550][ T5141] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  305.403532][   T29] audit: type=1400 audit(1731154856.257:4806): avc:  denied  { mounton } for  pid=8705 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  305.442438][ T5883] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[  305.522090][ T2930] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.622655][ T2930] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.705532][ T2930] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.803325][ T5883] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  305.809639][ T5883] em28xx 3-1:0.0: Config register raw data: 0xfffffffb
[  305.811996][   T29] audit: type=1400 audit(1731154856.667:4807): avc:  denied  { setattr } for  pid=8667 comm="syz.3.698" name="pcmC0D0c" dev="devtmpfs" ino=1282 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1
[  305.817126][ T5883] em28xx 3-1:0.0: AC97 chip type couldn't be determined
[  305.840090][    C1] vkms_vblank_simulate: vblank timer overrun
[  305.853799][ T5883] em28xx 3-1:0.0: No AC97 audio processor
[  305.864506][ T5883] usb 3-1: USB disconnect, device number 54
[  305.874442][ T5883] em28xx 3-1:0.0: Disconnecting em28xx
[  305.901041][ T5883] em28xx 3-1:0.0: Freeing device
[  306.056342][ T2930] bridge_slave_1: left allmulticast mode
[  306.063421][ T2930] bridge_slave_1: left promiscuous mode
[  306.072669][ T2930] bridge0: port 2(bridge_slave_1) entered disabled state
[  306.087952][ T2930] bridge_slave_0: left allmulticast mode
[  306.094314][ T2930] bridge_slave_0: left promiscuous mode
[  306.100745][ T2930] bridge0: port 1(bridge_slave_0) entered disabled state
[  306.377270][   T29] audit: type=1400 audit(1731154857.197:4808): avc:  denied  { ioctl } for  pid=8714 comm="syz.1.708" path="socket:[18532]" dev="sockfs" ino=18532 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  306.401922][    C1] vkms_vblank_simulate: vblank timer overrun
[  306.598818][  T965] usb 4-1: USB disconnect, device number 38
[  307.623678][ T5141] Bluetooth: hci2: command tx timeout
[  308.110471][ T2930] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  308.122771][ T2930] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  308.133128][ T2930] bond0 (unregistering): Released all slaves
[  308.157038][ T8726] pimreg: entered allmulticast mode
[  308.174179][ T8731] pimreg: entered allmulticast mode
[  308.262180][ T8705] chnl_net:caif_netlink_parms(): no params data found
[  308.592799][ T8740] netlink: 12 bytes leftover after parsing attributes in process `syz.1.712'.
[  309.972968][ T5141] Bluetooth: hci2: command tx timeout
[  311.121368][ T8764] netlink: 12 bytes leftover after parsing attributes in process `syz.1.719'.
[  312.052412][ T5141] Bluetooth: hci2: command tx timeout
[  312.500735][ T8778] netlink: 12 bytes leftover after parsing attributes in process `syz.1.720'.
[  313.291606][ T8788] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  313.318398][ T8788] CIFS: Unable to determine destination address
[  313.533484][ T8793] FAULT_INJECTION: forcing a failure.
[  313.533484][ T8793] name failslab, interval 1, probability 0, space 0, times 0
[  313.546176][ T8793] CPU: 0 UID: 0 PID: 8793 Comm: syz.0.725 Not tainted 6.12.0-rc6-syzkaller-00225-g50643bbc9eb6 #0
[  313.556790][ T8793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  313.566883][ T8793] Call Trace:
[  313.570167][ T8793]  <TASK>
[  313.573101][ T8793]  dump_stack_lvl+0x16c/0x1f0
[  313.577777][ T8793]  should_fail_ex+0x497/0x5b0
[  313.582450][ T8793]  ? lock_acquire.part.0+0x11b/0x380
[  313.587731][ T8793]  should_failslab+0xc2/0x120
[  313.592409][ T8793]  kmem_cache_alloc_noprof+0x6e/0x2f0
[  313.597776][ T8793]  ? dst_alloc+0x99/0x1a0
[  313.602100][ T8793]  ? trace_lock_acquire+0x14a/0x1d0
[  313.607297][ T8793]  ? __pfx_ip6_dst_gc+0x10/0x10
[  313.612145][ T8793]  dst_alloc+0x99/0x1a0
[  313.616297][ T8793]  ip6_dst_alloc+0x2c/0x90
[  313.620709][ T8793]  ip6_pol_route+0x956/0x1120
[  313.625382][ T8793]  ? __pfx_ip6_pol_route+0x10/0x10
[  313.630486][ T8793]  ? ip6t_do_table+0xd50/0x1d40
[  313.635346][ T8793]  ? __pfx_ip6_pol_route_input+0x10/0x10
[  313.640992][ T8793]  fib6_rule_lookup+0x5b8/0x720
[  313.645843][ T8793]  ? __pfx_fib6_rule_lookup+0x10/0x10
[  313.651210][ T8793]  ? nf_nat_ipv6_fn+0x103/0x2e0
[  313.656069][ T8793]  ? __pfx_nf_nat_ipv6_fn+0x10/0x10
[  313.661269][ T8793]  ip6_route_input+0x663/0xc10
[  313.666030][ T8793]  ? __pfx_ip6_route_input+0x10/0x10
[  313.671314][ T8793]  ? __pfx_lock_release+0x10/0x10
[  313.676329][ T8793]  ? trace_lock_acquire+0x14a/0x1d0
[  313.681541][ T8793]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  313.686739][ T8793]  ip6_rcv_finish_core.constprop.0+0x1a0/0x5d0
[  313.692903][ T8793]  ipv6_rcv+0x1e4/0x680
[  313.697078][ T8793]  ? __pfx_ipv6_rcv+0x10/0x10
[  313.701764][ T8793]  __netif_receive_skb_one_core+0x12e/0x1e0
[  313.707673][ T8793]  ? __pfx___netif_receive_skb_one_core+0x10/0x10
[  313.714089][ T8793]  ? trace_lock_acquire+0x14a/0x1d0
[  313.719281][ T8793]  ? netif_receive_skb+0x109/0x7b0
[  313.724393][ T8793]  __netif_receive_skb+0x1d/0x160
[  313.729416][ T8793]  netif_receive_skb+0x13f/0x7b0
[  313.734349][ T8793]  ? __pfx_netif_receive_skb+0x10/0x10
[  313.739806][ T8793]  ? __pfx___lock_acquire+0x10/0x10
[  313.745001][ T8793]  tun_rx_batched+0x429/0x780
[  313.749674][ T8793]  ? __pfx_tun_rx_batched+0x10/0x10
[  313.754892][ T8793]  ? lock_acquire+0x2f/0xb0
[  313.759383][ T8793]  ? tun_get_user+0x13c9/0x3d80
[  313.764235][ T8793]  tun_get_user+0x2a4d/0x3d80
[  313.768928][ T8793]  ? find_held_lock+0x2d/0x110
[  313.773695][ T8793]  ? __pfx_tun_get_user+0x10/0x10
[  313.778715][ T8793]  ? find_held_lock+0x2d/0x110
[  313.783511][ T8793]  ? __pfx_lock_release+0x10/0x10
[  313.788537][ T8793]  tun_chr_write_iter+0xdc/0x210
[  313.793491][ T8793]  vfs_write+0x5ae/0x1150
[  313.797819][ T8793]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  313.803364][ T8793]  ? trace_lock_acquire+0x14a/0x1d0
[  313.808556][ T8793]  ? __pfx_vfs_write+0x10/0x10
[  313.813320][ T8793]  ? __fget_files+0x40/0x3f0
[  313.817918][ T8793]  ksys_write+0x12f/0x260
[  313.822246][ T8793]  ? __pfx_ksys_write+0x10/0x10
[  313.827103][ T8793]  do_syscall_64+0xcd/0x250
[  313.831598][ T8793]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  313.837488][ T8793] RIP: 0033:0x7f48cc57d1ff
[  313.841893][ T8793] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48
[  313.861494][ T8793] RSP: 002b:00007f48cd2ad000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  313.869899][ T8793] RAX: ffffffffffffffda RBX: 00007f48cc735f80 RCX: 00007f48cc57d1ff
[  313.877864][ T8793] RDX: 0000000000000062 RSI: 0000000020000480 RDI: 00000000000000c8
[  313.885825][ T8793] RBP: 00007f48cd2ad090 R08: 0000000000000000 R09: 0000000000000000
[  313.893782][ T8793] R10: 0000000000000062 R11: 0000000000000293 R12: 0000000000000001
[  313.901743][ T8793] R13: 0000000000000001 R14: 00007f48cc735f80 R15: 00007ffe933ff138
[  313.909717][ T8793]  </TASK>
[  314.932071][ T5141] Bluetooth: hci2: command tx timeout
[  314.976235][ T8705] bridge0: port 1(bridge_slave_0) entered blocking state
[  314.998631][ T8705] bridge0: port 1(bridge_slave_0) entered disabled state
[  315.031793][ T8705] bridge_slave_0: entered allmulticast mode
[  315.043871][ T8705] bridge_slave_0: entered promiscuous mode
[  315.323607][ T8813] netlink: 12 bytes leftover after parsing attributes in process `syz.3.729'.
[  316.787758][ T8818] vivid-003: disconnect
[  316.808416][ T8817] vivid-003: reconnect
[  316.851979][ T8705] bridge0: port 2(bridge_slave_1) entered blocking state
[  316.865264][ T8705] bridge0: port 2(bridge_slave_1) entered disabled state
[  316.889349][ T8705] bridge_slave_1: entered allmulticast mode
[  316.917431][ T8705] bridge_slave_1: entered promiscuous mode
[  316.986401][ T2930] hsr_slave_0: left promiscuous mode
[  316.993923][ T2930] hsr_slave_1: left promiscuous mode
[  317.009404][ T2930] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  317.037178][ T2930] batman_adv: batadv0: Removing interface: batadv_slave_0
[  317.070605][ T2930] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  317.083386][ T2930] batman_adv: batadv0: Removing interface: batadv_slave_1
[  317.191992][ T2930] veth1_macvtap: left promiscuous mode
[  317.198132][  T965] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  317.224335][ T2930] veth0_macvtap: left promiscuous mode
[  317.245787][ T8839] netlink: 28 bytes leftover after parsing attributes in process `syz.0.735'.
[  317.259750][ T2930] veth1_vlan: left promiscuous mode
[  317.265790][ T2930] veth0_vlan: left promiscuous mode
[  317.266144][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  317.373809][  T965] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x8C has an invalid bInterval 0, changing to 7
[  317.384934][  T965] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x8C has invalid wMaxPacketSize 0
[  317.422679][  T965] usb 2-1: config 0 interface 0 has no altsetting 0
[  317.450392][  T965] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=1c.92
[  317.471181][  T965] usb 2-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3
[  317.479384][  T965] usb 2-1: Product: syz
[  317.483731][  T965] usb 2-1: Manufacturer: syz
[  317.488354][  T965] usb 2-1: SerialNumber: syz
[  317.515860][  T965] usb 2-1: config 0 descriptor??
[  317.709170][    T9] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  317.742823][  T965] usbtest 2-1:0.0: Linux user mode ISO test driver
[  317.749392][  T965] usbtest 2-1:0.0: high-speed {control iso-in} tests (+alt)
[  317.942750][ T8831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  317.951582][ T8831] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  317.968732][  T968] usb 2-1: USB disconnect, device number 19
[  318.042370][    T9] usb 1-1: Using ep0 maxpacket: 16
[  318.048976][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  318.060402][    T9] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  318.070417][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  318.211524][    T9] usb 1-1: config 0 descriptor??
[  318.873531][ T8841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  318.897122][ T8841] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  319.433122][ T8862] netlink: 12 bytes leftover after parsing attributes in process `syz.2.740'.
[  319.523203][    T9] hid (null): unknown global tag 0x83
[  319.529005][    T9] hid (null): unknown global tag 0xc
[  319.558705][    T9] hid-sensor-hub 0003:0158:0100.000E: unknown main item tag 0x1
[  319.566767][    T9] hid-sensor-hub 0003:0158:0100.000E: unexpected long global item
[  319.578657][    T9] hid-sensor-hub 0003:0158:0100.000E: parse failed
[  319.585724][    T9] hid-sensor-hub 0003:0158:0100.000E: probe with driver hid-sensor-hub failed with error -22
[  319.932659][ T8857] ceph: No mds server is up or the cluster is laggy
[  319.941728][  T968] libceph: connect (1)[c::]:6789 error -101
[  319.948100][  T968] libceph: mon0 (1)[c::]:6789 connect error
[  320.031152][  T965] usb 1-1: USB disconnect, device number 37
[  320.703523][ T2930] team0 (unregistering): Port device team_slave_1 removed
[  320.819018][ T2930] team0 (unregistering): Port device team_slave_0 removed
[  321.236242][ T8887] xt_nat: multiple ranges no longer supported
[  323.732352][   T29] audit: type=1400 audit(1731154874.567:4809): avc:  denied  { setopt } for  pid=8898 comm="syz.1.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  324.406268][ T8908] netlink: 12 bytes leftover after parsing attributes in process `syz.1.752'.
[  324.908515][ T8705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  324.935230][ T8705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  325.424113][  T968] libceph: connect (1)[c::]:6789 error -101
[  325.428783][ T8705] team0: Port device team_slave_0 added
[  325.436932][  T968] libceph: mon0 (1)[c::]:6789 connect error
[  325.478715][ T8705] team0: Port device team_slave_1 added
[  325.589228][ T8705] batman_adv: batadv0: Adding interface: batadv_slave_0
[  325.596399][ T8705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  325.690605][ T8705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  325.740911][ T5973] libceph: connect (1)[c::]:6789 error -101
[  325.747180][ T5973] libceph: mon0 (1)[c::]:6789 connect error
[  325.747641][ T8705] batman_adv: batadv0: Adding interface: batadv_slave_1
[  325.804840][ T8705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  325.890056][ T8705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  325.912396][  T968] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  326.022795][ T8914] ceph: No mds server is up or the cluster is laggy
[  326.092576][  T968] usb 4-1: Using ep0 maxpacket: 32
[  326.121474][  T968] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  326.151924][  T968] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  326.171867][  T968] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  326.193907][  T968] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  326.908922][  T968] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  326.945169][ T8705] hsr_slave_0: entered promiscuous mode
[  327.022301][  T968] usb 4-1: config 0 descriptor??
[  327.031260][ T8919] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  327.098311][ T8705] hsr_slave_1: entered promiscuous mode
[  327.107499][  T968] hub 4-1:0.0: USB hub found
[  327.115303][ T8705] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  327.124727][ T8705] Cannot create hsr debugfs directory
[  327.323531][ T8939] pimreg: entered allmulticast mode
[  327.336694][  T968] hub 4-1:0.0: 2 ports detected
[  327.738153][ T8941] pimreg: left allmulticast mode
[  327.806045][ T8948] lo speed is unknown, defaulting to 1000
[  328.051968][ T8948] lo speed is unknown, defaulting to 1000
[  328.076568][ T8948] lo speed is unknown, defaulting to 1000
[  328.085866][ T8948] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  328.744450][ T8948] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  328.868816][ T8948] lo speed is unknown, defaulting to 1000
[  328.911092][ T8948] lo speed is unknown, defaulting to 1000
[  328.943271][ T8948] lo speed is unknown, defaulting to 1000
[  328.994603][ T8948] lo speed is unknown, defaulting to 1000
[  329.009413][ T8948] lo speed is unknown, defaulting to 1000
[  329.128720][ T8705] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  329.154077][ T8705] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  329.783434][  T968] usb 4-1: reset high-speed USB device number 39 using dummy_hcd
[  329.786883][ T8705] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  329.846113][ T8919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  329.856776][ T8919] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  330.102429][  T968] usb 4-1: device descriptor read/64, error -32
[  330.427781][ T8705] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  330.659017][ T8989] netlink: 12 bytes leftover after parsing attributes in process `syz.2.763'.
[  331.385086][  T968] hub 4-1:0.0: set hub depth failed
[  331.390789][ T5839] usb 4-1: USB disconnect, device number 39
[  331.410079][ T5973] libceph: connect (1)[c::]:6789 error -101
[  331.416492][ T5973] libceph: mon0 (1)[c::]:6789 connect error
[  331.419864][ T8705] 8021q: adding VLAN 0 to HW filter on device bond0
[  331.446040][ T8705] 8021q: adding VLAN 0 to HW filter on device team0
[  331.470229][ T7957] bridge0: port 1(bridge_slave_0) entered blocking state
[  331.477359][ T7957] bridge0: port 1(bridge_slave_0) entered forwarding state
[  331.538684][ T7957] bridge0: port 2(bridge_slave_1) entered blocking state
[  331.545832][ T7957] bridge0: port 2(bridge_slave_1) entered forwarding state
[  331.645956][ T8705] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  331.693593][ T5839] libceph: connect (1)[c::]:6789 error -101
[  331.699755][ T5970] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  331.708947][ T5839] libceph: mon0 (1)[c::]:6789 connect error
[  331.888111][ T8705] 8021q: adding VLAN 0 to HW filter on device batadv0
[  331.922497][ T5970] usb 2-1: Using ep0 maxpacket: 8
[  331.933375][ T5970] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  331.949054][ T5970] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  331.975630][ T5970] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  331.998220][ T8996] ceph: No mds server is up or the cluster is laggy
[  332.043080][ T5970] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00
[  332.053063][ T5970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  332.073132][ T5970] usb 2-1: config 0 descriptor??
[  332.393579][ T5973] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  332.583047][ T5973] usb 4-1: Using ep0 maxpacket: 32
[  332.689541][ T5973] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  332.698777][ T5973] usb 4-1: config 0 has no interface number 0
[  332.786004][ T5970] creative-sb0540 0003:041E:3100.000F: No inputs registered, leaving
[  332.821682][ T5970] creative-sb0540 0003:041E:3100.000F: hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.1-1/input0
[  332.861312][ T5973] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  332.871732][ T5973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  332.886016][ T5973] usb 4-1: Product: syz
[  332.890359][ T5973] usb 4-1: Manufacturer: syz
[  332.946906][ T5973] usb 4-1: SerialNumber: syz
[  332.974317][ T8705] veth0_vlan: entered promiscuous mode
[  332.980725][ T5973] usb 4-1: config 0 descriptor??
[  333.030076][ T5973] smsc95xx v2.0.0
[  333.057102][ T8705] veth1_vlan: entered promiscuous mode
[  333.084486][ T9044] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  333.121967][ T8705] veth0_macvtap: entered promiscuous mode
[  333.167056][ T8705] veth1_macvtap: entered promiscuous mode
[  333.215374][ T8705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  333.237919][ T8705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  333.263137][ T8705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  333.275118][ T8705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  333.285149][ T8705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  333.299147][ T8705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  333.309673][ T8705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  333.320422][ T8705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  333.336577][ T8705] batman_adv: batadv0: Interface activated: batadv_slave_0
[  333.355287][ T8705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  333.366350][ T8705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  333.376939][ T8705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  333.387739][ T8705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  333.397717][ T8705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  333.408409][ T8705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  333.418859][ T8705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  333.430328][ T8705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  333.440402][ T5973] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61
[  333.454267][ T5973] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  333.469987][ T8705] batman_adv: batadv0: Interface activated: batadv_slave_1
[  333.508834][ T5911] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  333.512470][ T8705] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  333.525703][ T8705] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  333.558171][ T8705] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  333.567247][ T8705] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  333.640390][ T9049] lo speed is unknown, defaulting to 1000
[  333.762354][ T5911] usb 3-1: Using ep0 maxpacket: 16
[  333.803240][ T5911] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  333.814725][ T5911] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  333.827264][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  333.842377][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  333.852445][ T5911] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  333.868062][ T5911] usb 3-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89
[  333.899809][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  333.922360][ T5911] usb 3-1: Product: syz
[  333.926802][ T5911] usb 3-1: Manufacturer: syz
[  333.932575][ T5911] usb 3-1: SerialNumber: syz
[  333.940224][ T5911] usb 3-1: config 0 descriptor??
[  333.949505][ T5911] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622
[  334.150502][ T2930] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  334.182310][ T2930] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  334.309667][ T7958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  334.336666][ T7958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  334.406707][   T29] audit: type=1400 audit(1731154885.257:4810): avc:  denied  { mounton } for  pid=8705 comm="syz-executor" path="/root/syzkaller.Ec01Ie/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  334.462745][ T5911] gspca_pac7302: reg_w() failed i: ff v: 01 error -110
[  334.497061][ T5911] gspca_pac7302 3-1:0.0: probe with driver gspca_pac7302 failed with error -110
[  334.523914][  T965] usb 2-1: USB disconnect, device number 20
[  335.709496][ T9050] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  335.821307][ T9079] netlink: 12 bytes leftover after parsing attributes in process `syz.5.777'.
[  336.318991][ T5970] usb 3-1: USB disconnect, device number 55
[  336.364168][   T29] audit: type=1400 audit(1731154887.217:4811): avc:  denied  { sys_chroot } for  pid=9083 comm="dhcpcd" capability=18  scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1
[  337.222592][   T29] audit: type=1400 audit(1731154887.217:4812): avc:  denied  { setgid } for  pid=9083 comm="dhcpcd" capability=6  scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1
[  337.293006][   T29] audit: type=1400 audit(1731154887.217:4813): avc:  denied  { setrlimit } for  pid=9083 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1
[  337.786950][ T5911] libceph: connect (1)[c::]:6789 error -101
[  337.798806][ T5911] libceph: mon0 (1)[c::]:6789 connect error
[  338.028625][ T9109] netlink: 20 bytes leftover after parsing attributes in process `syz.2.782'.
[  338.144724][ T5882] libceph: connect (1)[c::]:6789 error -101
[  338.153704][ T5882] libceph: mon0 (1)[c::]:6789 connect error
[  338.168339][ T9095] ceph: No mds server is up or the cluster is laggy
[  338.542825][ T5973] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -110
[  338.586643][ T5973] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -110
[  338.761401][ T5973] usb 4-1: USB disconnect, device number 40
[  338.892434][ T5911] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  339.782890][ T5911] usb 2-1: Using ep0 maxpacket: 16
[  339.803084][ T5911] usb 2-1: New USB device found, idVendor=0fde, idProduct=ca05, bcdDevice=b5.f3
[  339.842290][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  339.861936][ T5911] usb 2-1: Product: syz
[  339.877062][ T5911] usb 2-1: Manufacturer: syz
[  339.912578][  T965] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  340.123104][  T965] usb 3-1: Using ep0 maxpacket: 16
[  340.147469][ T5911] usb 2-1: SerialNumber: syz
[  340.200198][  T965] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  340.417840][ T5911] usb 2-1: config 0 descriptor??
[  340.465964][  T965] usb 3-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59
[  340.486492][ T5911] cp210x 2-1:0.0: cp210x converter detected
[  340.503027][  T965] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  340.518775][  T965] usb 3-1: Product: syz
[  340.529360][  T965] usb 3-1: Manufacturer: syz
[  340.534917][  T965] usb 3-1: SerialNumber: syz
[  340.542495][  T965] usb 3-1: config 0 descriptor??
[  340.575559][  T965] peak_usb 3-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -22
[  340.599566][  T965] peak_usb 3-1:0.0: unable to read PCAN-USB serial number (err -22)
[  340.836827][ T9134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  340.891530][ T9134] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  340.913098][  T965] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -22
[  341.056618][ T9159] netlink: 12 bytes leftover after parsing attributes in process `syz.3.789'.
[  341.667856][ T5971] usb 3-1: USB disconnect, device number 56
[  341.786536][ T5911] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71
[  341.794211][ T5911] cp210x 2-1:0.0: querying part number failed
[  341.843610][ T5911] usb 2-1: cp210x converter now attached to ttyUSB0
[  341.894130][ T5911] usb 2-1: USB disconnect, device number 21
[  341.926729][ T5911] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  341.983376][ T5911] cp210x 2-1:0.0: device disconnected
[  343.097536][   T29] audit: type=1400 audit(1731154893.957:4814): avc:  denied  { execute } for  pid=9166 comm="syz.0.791" path="/proc/locks" dev="proc" ino=4026532037 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=file permissive=1
[  343.162353][ T5911] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  343.332477][ T5911] usb 2-1: Using ep0 maxpacket: 16
[  343.412454][ T5973] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  343.476410][ T5911] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  343.497194][ T5911] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  343.536617][ T5971] libceph: connect (1)[c::]:6789 error -101
[  343.542773][ T5971] libceph: mon0 (1)[c::]:6789 connect error
[  343.585870][ T5973] usb 3-1: Using ep0 maxpacket: 32
[  343.592168][ T5973] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[  343.601094][ T5973] usb 3-1: config 0 has no interface number 0
[  343.609106][ T5973] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  343.618607][ T5973] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  343.638871][ T5973] usb 3-1: Product: syz
[  343.650381][ T5973] usb 3-1: Manufacturer: syz
[  343.669040][ T5973] usb 3-1: SerialNumber: syz
[  343.694482][ T5973] usb 3-1: config 0 descriptor??
[  343.711109][ T5973] smsc95xx v2.0.0
[  343.813771][ T5971] libceph: connect (1)[c::]:6789 error -101
[  343.819951][ T5971] libceph: mon0 (1)[c::]:6789 connect error
[  343.850890][ T9187] ceph: No mds server is up or the cluster is laggy
[  343.917274][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  343.976083][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  343.988645][ T5911] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  344.058744][ T5911] usb 2-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89
[  344.081749][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  344.101435][ T5911] usb 2-1: Product: syz
[  344.117294][ T5911] usb 2-1: Manufacturer: syz
[  344.135144][ T5911] usb 2-1: SerialNumber: syz
[  344.153983][ T5911] usb 2-1: config 0 descriptor??
[  344.159435][ T5973] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61
[  344.188826][ T5973] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  344.190594][ T5911] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622
[  344.752765][ T5911] gspca_pac7302: reg_w() failed i: ff v: 01 error -110
[  344.774518][ T5911] gspca_pac7302 2-1:0.0: probe with driver gspca_pac7302 failed with error -110
[  345.633353][ T5911] usb 2-1: USB disconnect, device number 22
[  345.937994][   T29] audit: type=1400 audit(1731154896.797:4815): avc:  denied  { write } for  pid=9226 comm="syz.5.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  346.102455][ T5883] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  346.367181][ T5883] usb 1-1: Using ep0 maxpacket: 16
[  347.209102][ T5883] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  347.231919][ T5883] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87
[  347.422363][ T5883] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11
[  347.435683][ T5883] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024
[  347.446783][ T5883] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  347.476039][ T5883] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  347.503352][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  347.591736][ T5883] usb 1-1: Product: syz
[  347.601844][ T5883] usb 1-1: Manufacturer: syz
[  347.617075][ T5883] usb 1-1: SerialNumber: syz
[  347.675827][ T5883] usb 1-1: config 0 descriptor??
[  348.117606][ T5883] appledisplay 1-1:0.0: Error while getting initial brightness: -110
[  348.133047][ T5883] appledisplay 1-1:0.0: probe with driver appledisplay failed with error -110
[  348.171151][ T5883] usb 1-1: USB disconnect, device number 38
[  348.807312][ T5973] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  348.818427][ T5973] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71
[  348.839077][ T5973] usb 3-1: USB disconnect, device number 57
[  350.033865][ T5970] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  350.332479][ T5883] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  350.353193][ T5970] usb 2-1: Using ep0 maxpacket: 16
[  350.360900][ T5970] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  350.382358][ T5970] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  350.394189][ T5973] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[  350.458082][ T5970] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  350.560987][ T5970] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  350.571222][ T5973] usb 3-1: Using ep0 maxpacket: 16
[  350.585128][ T5973] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  350.607132][ T5883] usb 1-1: Using ep0 maxpacket: 16
[  350.620525][ T5970] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  350.624843][ T5883] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  350.652422][ T5973] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  350.666035][ T5883] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  350.684992][ T5973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  350.706556][ T5970] usb 2-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89
[  350.721190][  T968] libceph: connect (1)[c::]:6789 error -101
[  350.721557][ T5883] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  350.727519][  T968] libceph: mon0 (1)[c::]:6789 connect error
[  350.744432][ T5970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  350.753192][ T5973] usb 3-1: config 0 descriptor??
[  350.763174][ T5970] usb 2-1: Product: syz
[  350.767469][ T5970] usb 2-1: Manufacturer: syz
[  350.774710][ T5970] usb 2-1: SerialNumber: syz
[  350.781527][ T5970] usb 2-1: config 0 descriptor??
[  350.796864][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  350.802703][ T5970] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622
[  350.821367][ T5883] usb 1-1: Product: syz
[  350.862386][ T5883] usb 1-1: Manufacturer: syz
[  350.867137][ T5883] usb 1-1: SerialNumber: syz
[  350.897949][ T5883] usb 1-1: config 0 descriptor??
[  350.967063][ T5883] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  350.988358][ T5883] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[  351.023704][  T968] libceph: connect (1)[c::]:6789 error -101
[  351.030062][  T968] libceph: mon0 (1)[c::]:6789 connect error
[  351.117896][ T9286] ceph: No mds server is up or the cluster is laggy
[  351.206037][ T9272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  351.222747][ T9272] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  351.245772][ T5973] hid (null): unknown global tag 0xe
[  351.271235][ T5973] hid (null): unknown global tag 0x83
[  351.292372][ T5911] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  351.302421][ T5973] hid (null): unknown global tag 0xc
[  351.310884][ T5973] hid-sensor-hub 0003:0158:0100.0010: unknown main item tag 0x1
[  351.325316][ T5970] gspca_pac7302: reg_w() failed i: ff v: 01 error -110
[  351.342453][ T5970] gspca_pac7302 2-1:0.0: probe with driver gspca_pac7302 failed with error -110
[  351.351988][ T5973] hid-sensor-hub 0003:0158:0100.0010: unexpected long global item
[  351.383895][ T5973] hid-sensor-hub 0003:0158:0100.0010: parse failed
[  351.390505][ T5973] hid-sensor-hub 0003:0158:0100.0010: probe with driver hid-sensor-hub failed with error -22
[  351.422831][ T5883] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  351.433491][ T5883] em28xx 1-1:0.0: Config register raw data: 0xfffffffb
[  351.452348][ T5911] usb 6-1: Using ep0 maxpacket: 8
[  351.467752][ T5911] usb 6-1: too many configurations: 72, using maximum allowed: 8
[  351.476405][ T5883] em28xx 1-1:0.0: AC97 chip type couldn't be determined
[  351.502545][ T5883] em28xx 1-1:0.0: No AC97 audio processor
[  351.509917][ T5911] usb 6-1: unable to read config index 0 descriptor/start: -61
[  351.523160][ T5973] usb 3-1: USB disconnect, device number 58
[  351.539974][ T5883] usb 1-1: USB disconnect, device number 39
[  351.547841][ T5911] usb 6-1: can't read configurations, error -61
[  351.567883][ T5883] em28xx 1-1:0.0: Disconnecting em28xx
[  351.589880][ T5883] em28xx 1-1:0.0: Freeing device
[  351.615963][ T9265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  351.643601][ T9265] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  351.702467][ T5911] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  351.710717][ T9265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  351.732554][ T9265] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  351.862405][ T5911] usb 6-1: Using ep0 maxpacket: 8
[  351.873079][ T5911] usb 6-1: too many configurations: 72, using maximum allowed: 8
[  351.913878][ T5911] usb 6-1: unable to read config index 0 descriptor/start: -61
[  351.926450][ T5911] usb 6-1: can't read configurations, error -61
[  351.942647][ T5911] usb usb6-port1: attempt power cycle
[  352.116438][   T29] audit: type=1400 audit(1731154902.977:4816): avc:  denied  { recv } for  pid=9306 comm="syz.0.813" saddr=10.128.0.169 src=38088 daddr=10.128.0.146 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  352.552496][ T5970] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[  352.712632][ T5970] usb 3-1: Using ep0 maxpacket: 32
[  352.721746][ T5970] usb 3-1: config index 0 descriptor too short (expected 156, got 27)
[  352.731339][ T5970] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  352.754357][ T5970] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  352.786279][ T5970] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  352.828369][ T5970] usb 3-1: config 0 interface 0 has no altsetting 0
[  352.849303][ T5970] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  352.867184][ T5970] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  352.893713][ T5970] usb 3-1: Product: syz
[  352.914016][ T5970] usb 3-1: Manufacturer: syz
[  352.927014][ T5970] usb 3-1: SerialNumber: syz
[  353.461285][ T9319] netlink: 28 bytes leftover after parsing attributes in process `syz.3.816'.
[  353.925711][ T5911] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  353.949014][ T5970] usb 3-1: config 0 descriptor??
[  353.972496][ T5970] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  354.049558][ T5970] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  354.069252][ T5911] usb 6-1: Using ep0 maxpacket: 8
[  354.112331][  T965] usb 2-1: USB disconnect, device number 23
[  354.206171][ T5911] usb 6-1: device descriptor read/all, error -71
[  354.299957][ T5970] usb 3-1: USB disconnect, device number 59
[  354.362395][ T5971] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  355.122416][ T5971] usb 1-1: Using ep0 maxpacket: 32
[  355.122430][    T9] IPVS: starting estimator thread 0...
[  355.123887][ T5971] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[  355.222095][ T5971] usb 1-1: config 0 has no interface number 0
[  355.261307][ T9329] pimreg: entered allmulticast mode
[  355.272718][ T5970] ldusb 3-1:0.0: LD USB Device #0 now disconnected
[  355.314445][ T5971] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  355.329093][ T5971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  355.337330][ T5971] usb 1-1: Product: syz
[  355.342362][ T5971] usb 1-1: Manufacturer: syz
[  355.349887][ T5971] usb 1-1: SerialNumber: syz
[  355.370089][ T9338] IPVS: using max 27 ests per chain, 64800 per kthread
[  355.387452][ T5971] usb 1-1: config 0 descriptor??
[  355.454619][ T5971] smsc95xx v2.0.0
[  355.480393][ T9330] pimreg: left allmulticast mode
[  356.158654][ T9348] BUG: kernel NULL pointer dereference, address: 0000000000000000
[  356.166500][ T9348] #PF: supervisor instruction fetch in kernel mode
[  356.173006][ T9348] #PF: error_code(0x0010) - not-present page
[  356.178988][ T9348] PGD 29ba8067 P4D 29ba8067 PUD 65589067 PMD 0 
[  356.185248][ T9348] Oops: Oops: 0010 [#1] PREEMPT SMP KASAN NOPTI
[  356.191498][ T9348] CPU: 0 UID: 0 PID: 9348 Comm: syz.2.823 Not tainted 6.12.0-rc6-syzkaller-00225-g50643bbc9eb6 #0
[  356.202117][ T9348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  356.212203][ T9348] RIP: 0010:0x0
[  356.215672][ T9348] Code: Unable to access opcode bytes at 0xffffffffffffffd6.
[  356.223037][ T9348] RSP: 0018:ffffc90002d5f9c8 EFLAGS: 00010293
[  356.229109][ T9348] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81c26c0f
[  356.237092][ T9348] RDX: ffff88802c6c4880 RSI: ffffea0001e96280 RDI: ffff88807b6b2540
[  356.245058][ T9348] RBP: ffffea0001e96280 R08: 0000000000000007 R09: 0000000000000000
[  356.253027][ T9348] R10: 0000000000000000 R11: ffffffff961c9e08 R12: 1ffff920005abf3a
[  356.261001][ T9348] R13: ffff88807b6b2540 R14: 0000000000000000 R15: dffffc0000000000
[  356.268987][ T9348] FS:  00007effadf9d6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[  356.277924][ T9348] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  356.284504][ T9348] CR2: ffffffffffffffd6 CR3: 00000000334e6000 CR4: 00000000003526f0
[  356.292484][ T9348] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  356.300471][ T9348] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  356.308475][ T9348] Call Trace:
[  356.311748][ T9348]  <TASK>
[  356.314682][ T9348]  ? __die+0x1e/0x60
[  356.318601][ T9348]  ? page_fault_oops+0x3b6/0xb80
[  356.323601][ T9348]  ? __pfx_page_fault_oops+0x10/0x10
[  356.328914][ T9348]  ? __pfx___lock_acquire+0x10/0x10
[  356.334097][ T9348]  ? __pfx_lock_release+0x10/0x10
[  356.339116][ T9348]  ? do_user_addr_fault+0xa90/0x13f0
[  356.344397][ T9348]  ? rcu_is_watching+0x12/0xc0
[  356.349164][ T9348]  ? exc_page_fault+0x5c/0xc0
[  356.353839][ T9348]  ? asm_exc_page_fault+0x26/0x30
[  356.358868][ T9348]  ? filemap_read_folio+0xaf/0x2a0
[  356.363967][ T9348]  filemap_read_folio+0xc6/0x2a0
[  356.368908][ T9348]  ? __pfx_filemap_read_folio+0x10/0x10
[  356.374456][ T9348]  ? __filemap_get_folio+0x2a5/0xaf0
[  356.379734][ T9348]  do_read_cache_folio+0x263/0x5c0
[  356.384846][ T9348]  freader_get_folio+0x337/0x8e0
[  356.389810][ T9348]  freader_fetch+0xc2/0x5f0
[  356.394329][ T9348]  ? mt_find+0x4c8/0xa20
[  356.398567][ T9348]  __build_id_parse.isra.0+0xed/0x7a0
[  356.403948][ T9348]  ? __pfx___build_id_parse.isra.0+0x10/0x10
[  356.409938][ T9348]  ? __pfx_find_vma+0x10/0x10
[  356.414601][ T9348]  do_procmap_query+0xd62/0x1030
[  356.419553][ T9348]  ? __pfx_do_procmap_query+0x10/0x10
[  356.424919][ T9348]  ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460
[  356.431404][ T9348]  ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460
[  356.437909][ T9348]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  356.444764][ T9348]  ? selinux_file_ioctl+0x180/0x270
[  356.449947][ T9348]  ? selinux_file_ioctl+0xb4/0x270
[  356.455045][ T9348]  procfs_procmap_ioctl+0x7d/0xb0
[  356.460079][ T9348]  ? __pfx_procfs_procmap_ioctl+0x10/0x10
[  356.465818][ T9348]  __x64_sys_ioctl+0x18f/0x220
[  356.470604][ T9348]  do_syscall_64+0xcd/0x250
[  356.475097][ T9348]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  356.481004][ T9348] RIP: 0033:0x7effad17e719
[  356.485418][ T9348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  356.505027][ T9348] RSP: 002b:00007effadf9d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  356.513440][ T9348] RAX: ffffffffffffffda RBX: 00007effad335f80 RCX: 00007effad17e719
[  356.521410][ T9348] RDX: 0000000020000180 RSI: 00000000c0686611 RDI: 0000000000000005
[  356.529378][ T9348] RBP: 00007effad1f139e R08: 0000000000000000 R09: 0000000000000000
[  356.537342][ T9348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  356.545302][ T9348] R13: 0000000000000000 R14: 00007effad335f80 R15: 00007ffcef4c8308
[  356.553276][ T9348]  </TASK>
[  356.556294][ T9348] Modules linked in:
[  356.560195][ T9348] CR2: 0000000000000000
[  356.564341][ T9348] ---[ end trace 0000000000000000 ]---
[  356.569804][ T9348] RIP: 0010:0x0
[  356.573303][ T9348] Code: Unable to access opcode bytes at 0xffffffffffffffd6.
[  356.580670][ T9348] RSP: 0018:ffffc90002d5f9c8 EFLAGS: 00010293
[  356.586719][ T9348] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81c26c0f
[  356.594682][ T9348] RDX: ffff88802c6c4880 RSI: ffffea0001e96280 RDI: ffff88807b6b2540
[  356.602672][ T9348] RBP: ffffea0001e96280 R08: 0000000000000007 R09: 0000000000000000
[  356.610658][ T9348] R10: 0000000000000000 R11: ffffffff961c9e08 R12: 1ffff920005abf3a
[  356.618631][ T9348] R13: ffff88807b6b2540 R14: 0000000000000000 R15: dffffc0000000000
[  356.626592][ T9348] FS:  00007effadf9d6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[  356.635530][ T9348] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  356.642106][ T9348] CR2: ffffffffffffffd6 CR3: 00000000334e6000 CR4: 00000000003526f0
[  356.650082][ T9348] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  356.658072][ T9348] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  356.666048][ T9348] Kernel panic - not syncing: Fatal exception
[  356.672335][ T9348] Kernel Offset: disabled
[  356.676667][ T9348] Rebooting in 86400 seconds..