last executing test programs:

6m25.465048513s ago: executing program 32 (id=818):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$PPPIOCGIDLE32(0xffffffffffffffff, 0x8008743f, &(0x7f00000000c0)) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="386d178529a39dea18dd3f87d7a5", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000000)) (async)
ioctl$TIOCL_UNBLANKSCREEN(r2, 0x541c, &(0x7f0000000040))

5m13.635149038s ago: executing program 1 (id=997):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, &(0x7f0000000100)={{}, {0xe}, 0x3, 0x4})
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
connect$unix(r2, 0x0, 0x0)
r5 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88)
dup2(r5, r5)
openat$ttyS3(0xffffff9c, 0x0, 0x84140, 0x0)
statx(0xffffffffffffffff, &(0x7f00000005c0)='./file0\x00', 0x0, 0x800, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='system.posix_acl_access\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02000000010002000000000002000600517c5411b514481b7290e2d0fe3cd9d42acad7e4bc739b02658cd950aded13dee0f42239", @ANYRES64, @ANYBLOB="040002000000000008000500", @ANYRES32=0x0, @ANYRES64=r5, @ANYBLOB="100005000000"], 0x3c, 0x2)
sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c000000030601010000000000000000050000090500010007000000050001000700000c4a49af0007000000"], 0x2c}}, 0x4c040)
getsockopt(0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f00000000c0))
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="462f99547e39b548feb4c9c7eda2cd17e8c203a08f8e7bf587ffcf180f5d51a7a99597090000009af7"], 0x50)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
pread64(r0, &(0x7f0000000180)=""/81, 0x51, 0x0)

5m11.989176325s ago: executing program 1 (id=1000):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0xf8, 0x39, 0x9, 0x0, 0x0, {0x2}, [@typed={0x4, 0x200}, @generic="3d93b2ff7da47e616b3208eec2e509d4b962b99c42295ee46d35a7c328cca4922ee19214dadf14d0454b1888afb73669c9c19485009d3d7e865e47a3e1c321bd13e2e06aadfc1f687f29b562d5e464d03347a4cf13907836bb412061f384145f38934fef92ff6d39018841f7e7ea105d5430032658de4f2427f37ea75cf3827a6036da76327398849e45e48ca10e50fb8b58c7be4872edda2eda5f4005aa418dce033effb44c2018a4f458752bf1fbf31761fcf6c0627af39fdb2624ad54a06913d12c92dcaa1b6b23a3c08fba3d052bfdf4b37bc789df48b3ae93f608e6fc"]}, 0xf8}}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="2b0000000000000000004afe2ddd00000000000000000000229e4748396db3"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r1}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19)
r2 = io_uring_setup(0x6281, &(0x7f0000000080))
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000140)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000"], 0x84}}, 0x0)
lsm_get_self_attr(0x68, &(0x7f0000000040)={0x0, 0x0, 0x24, 0x4, ""/4}, &(0x7f00000000c0)=0x24, 0x1)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x426882, 0x0)
r3 = shmget$private(0x0, 0x4000, 0x800, &(0x7f00001de000/0x4000)=nil)
shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
r4 = gettid()
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000080))
socket(0x2, 0x80805, 0x0)
r5 = syz_io_uring_setup(0x16c2, &(0x7f0000000480)={0x0, 0xbd12, 0x10100, 0x1, 0x327}, &(0x7f0000000300)=<r6=>0x0, &(0x7f0000000040)=<r7=>0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x3})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_service_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r8, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r5, 0x2d3e, 0x0, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x10)
r9 = socket$netlink(0x10, 0x3, 0x13)
bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc)
syz_genetlink_get_family_id$team(&(0x7f00000002c0), r9)

5m8.595288946s ago: executing program 1 (id=1007):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="120000000400000004000000", @ANYBLOB], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r2, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r1}, 0x20)
shutdown(r1, 0x0)
recvmmsg(r1, &(0x7f00000073c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003d80)=[{&(0x7f0000002ac0)=""/4101, 0x1005}], 0x1}}], 0x2, 0x0, 0x0)
recvfrom$inet6(r1, &(0x7f0000004000)=""/4107, 0x100b, 0x10000, 0x0, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000000)='asymmetric\x00', 0x0)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x40050)

5m8.450717621s ago: executing program 1 (id=1008):
r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32)
connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async)
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async)
chdir(&(0x7f0000000080)='./file1\x00')
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r1, 0x0)
setpgid(0x0, r1) (async, rerun: 32)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) (async, rerun: 32)
r2 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x802, 0x0) (async, rerun: 64)
prctl$PR_SCHED_CORE(0x3e, 0x4, r1, 0x0, 0x0) (rerun: 64)
prlimit64(r1, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) (async)
socket$inet6_sctp(0xa, 0x5, 0x84)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) (async)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x100060, 0x0) (async)
chdir(&(0x7f0000000080)='./file1\x00') (async)
mkdir(0x0, 0x0)
listen(r0, 0x0)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x23, &(0x7f0000000040), &(0x7f0000000200)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'dummy0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xfff1, 0xffff}, {0x1, 0x1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x34, 0x2, [@TCA_CODEL_LIMIT={0x8, 0x2, 0x8c}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x10000000}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_TARGET={0x8, 0x1, 0x7ff}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x8}, @TCA_CODEL_TARGET={0x8, 0x1, 0x2400000}]}}]}, 0x64}}, 0x0)

5m8.175245855s ago: executing program 1 (id=1009):
syz_init_net_socket$ax25(0x3, 0x3, 0x8)
r0 = socket$unix(0x1, 0x5, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x20, &(0x7f00000000c0)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x8000000000000001}}], [{@euid_gt={'euid>', r1}}, {@measure}, {@flag='mand'}]}})
setresuid(0x0, r1, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1c181, 0x0)
fsopen(&(0x7f0000000100)='ntfs3\x00', 0x1)
r3 = socket$kcm(0x29, 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000180)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
tkill(0x0, 0x15)
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000240)}], 0x1}, 0x20000000)
close(r3)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x63, 0x2, 0x0, 0x2, 0x7, 0x7}, {0x9, 0x1, 0x50b, 0x0, 0x9, 0x3904}, 0xf, 0x7fffffff, 0xbb7}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xf123a84f7362196c}]}}]}, 0x64}}, 0x14)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'veth0_to_hsr\x00', &(0x7f00000000c0)=@ethtool_sset_info={0x37, 0x2, 0x7, [0xffffffff]}})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)

5m7.618236766s ago: executing program 1 (id=1011):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0)
write$binfmt_aout(r0, &(0x7f00000010c0)=ANY=[], 0x1a3)
write$binfmt_misc(r0, &(0x7f0000000040)="0db723740d6678af6874bb74fb7875012c7de0568a8315a6736b7635e00126b713064871082ef63a291542a0bbb266ec7c61a508716f1b1ea80046ef", 0xe5c)
syz_usb_connect$cdc_ecm(0x4, 0x83, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000640)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x310, 0x7, 0x2, 0xff, 0x8, 0x8}, 0x1a, &(0x7f0000000440)=ANY=[@ANYBLOB="050f1a00030b100108430017061002024d000800000000000000"], 0x2, [{0x65, &(0x7f0000000580)=@string={0x65, 0x3, "47e7f7be426464f0213f8a5ddd564bf95be1a108e024863117ca319691f75c7b127002a7758cd7dd689fdecef4e890aadd1472357d07551cffcc1c05750b1d476c53bd972fada757d5bd419aec0474017302526075345ace747406b604a19a1cbcbcd5"}}, {0x0, 0x0}]})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x4, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000020000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18)
futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x82020000)
r2 = getpid()
sched_setaffinity(0x0, 0x58, &(0x7f00000002c0)=0xffffffffffffe5f6)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$bt_hci(r3, 0x0, 0x3, 0x0, &(0x7f0000000140))
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$getflags(r4, 0x401)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6(0xa, 0x3, 0xff)

5m7.162866146s ago: executing program 33 (id=1011):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0)
write$binfmt_aout(r0, &(0x7f00000010c0)=ANY=[], 0x1a3)
write$binfmt_misc(r0, &(0x7f0000000040)="0db723740d6678af6874bb74fb7875012c7de0568a8315a6736b7635e00126b713064871082ef63a291542a0bbb266ec7c61a508716f1b1ea80046ef", 0xe5c)
syz_usb_connect$cdc_ecm(0x4, 0x83, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000640)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x310, 0x7, 0x2, 0xff, 0x8, 0x8}, 0x1a, &(0x7f0000000440)=ANY=[@ANYBLOB="050f1a00030b100108430017061002024d000800000000000000"], 0x2, [{0x65, &(0x7f0000000580)=@string={0x65, 0x3, "47e7f7be426464f0213f8a5ddd564bf95be1a108e024863117ca319691f75c7b127002a7758cd7dd689fdecef4e890aadd1472357d07551cffcc1c05750b1d476c53bd972fada757d5bd419aec0474017302526075345ace747406b604a19a1cbcbcd5"}}, {0x0, 0x0}]})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x4, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000020000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18)
futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x82020000)
r2 = getpid()
sched_setaffinity(0x0, 0x58, &(0x7f00000002c0)=0xffffffffffffe5f6)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$bt_hci(r3, 0x0, 0x3, 0x0, &(0x7f0000000140))
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$getflags(r4, 0x401)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6(0xa, 0x3, 0xff)

4m47.76093111s ago: executing program 4 (id=1067):
epoll_create1(0x0)
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20050800)
connect$pppoe(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, {0x0, @local, 'bond_slave_0\x00'}}, 0x1e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18)
inotify_init1(0x80800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, 0x0, 0x0)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x3, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x14ba82, 0x18)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x243)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r5}, './file0\x00'})
write$cgroup_int(r3, &(0x7f0000000000)=0xfe8e, 0x12)

4m46.635030075s ago: executing program 4 (id=1069):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
read(r1, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
close(r2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c)
listen(r3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000466000/0x1000)=nil, 0x1000, 0x0, 0xfffffffffffffffd, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)

4m45.975717259s ago: executing program 4 (id=1073):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000940)={{}, 'syz0\x00', 0x40})
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12)
socket$inet6(0xa, 0x6, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0)
epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000180)={0x28, 0x4, r2, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7})
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x100000000000000)
close(r1)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x64, 0x6, 0x5d8, 0x1b8, 0x0, 0x0, 0x420, 0x1b8, 0x508, 0x508, 0x508, 0x508, 0x508, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x3}}}, {{@ipv6={@mcast1, @local, [0x0, 0xffffff00], [], 'dvmrp0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x100, 0x140, 0x0, {}, [@common=@frag={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x2}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x9, 0x9, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e22}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @mcast1, [0xff000000, 0xffffffff, 0xffffff00, 0xff000000], [0x0, 0xffffffff, 0xff000000, 0xff], 'netdevsim0\x00', 'erspan0\x00', {}, {0xff}, 0x26, 0xc8, 0x1, 0x22}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x101], 0x2000}}, @inet=@rpfilter={{0x28}, {0xf}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x8684, @ipv4=@local, 0x4e21}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x638)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e)
sendmmsg$unix(r6, 0x0, 0x0, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

4m39.814591481s ago: executing program 4 (id=1081):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
r0 = socket(0x2, 0x80805, 0x0)
ioctl$sock_inet_SIOCSARP(r0, 0x80108906, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xf, &(0x7f0000000040)=@raw=[@jmp={0x5, 0x1, 0x6, 0xb, 0x5, 0xc, 0xfffffffffffffffc}, @ringbuf_query, @jmp={0x5, 0x1, 0x7, 0xb, 0x7, 0xfffffffffffffffe, 0xfffffffffffffff0}, @map_fd={0x18, 0xa}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x5}, @tail_call], &(0x7f0000000100)='GPL\x00', 0x3ff, 0x27, &(0x7f00000001c0)=""/39, 0x41100, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0x2, 0x7, 0x2a9}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000300)=[{0x1, 0x5, 0x9, 0x2}, {0x3, 0x5, 0x2, 0x8}, {0x5, 0x4, 0x4, 0x2}, {0x0, 0x4, 0xb, 0x5}, {0x0, 0x4, 0xe, 0x4}], 0x10, 0x8, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000000)='mr_alloc\x00', r1, 0x0, 0x520}, 0x18)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r2, &(0x7f0000002380)=[{{&(0x7f0000000480)={0xa, 0x0, 0x0, @private0, 0x7fffffff}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000000580)='3', 0x1}], 0x1}}], 0x1, 0x44191)
listen(r2, 0x100)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000000), 0x8)
accept4(r2, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
umount2(&(0x7f00000000c0)='./file0/file0\x00', 0xf)

4m38.728616364s ago: executing program 4 (id=1085):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, &(0x7f0000000100)={{}, {0xe}, 0x3, 0x4})
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
connect$unix(r2, 0x0, 0x0)
r5 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88)
dup2(r5, r5)
openat$ttyS3(0xffffff9c, 0x0, 0x84140, 0x0)
statx(0xffffffffffffffff, &(0x7f00000005c0)='./file0\x00', 0x0, 0x800, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='system.posix_acl_access\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02000000010002000000000002000600517c5411b514481b7290e2d0fe3cd9d42acad7e4bc739b02658cd950aded13dee0f42239", @ANYRES64, @ANYBLOB="040002000000000008000500", @ANYRES32=0x0, @ANYRES64=r5, @ANYBLOB="100005000000"], 0x3c, 0x2)
sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c000000030601010000000000000000050000090500010007000000050001000700000c4a49af0007000000"], 0x2c}}, 0x4c040)
getsockopt(0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f00000000c0))
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="462f99547e39b548feb4c9c7eda2cd17e8c203a08f8e7bf587ffcf180f5d51a7a99597090000009af7"], 0x50)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
pread64(r0, &(0x7f0000000180)=""/81, 0x51, 0x0)

4m36.755002056s ago: executing program 4 (id=1088):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x2}, 0x8)
sendto$inet(r1, &(0x7f0000000140)="ab", 0x1, 0x4000811, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10)
r2 = syz_io_uring_setup(0x112, &(0x7f0000000a00)={0x0, 0x0, 0x400}, &(0x7f0000000580)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x118, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCBRADDBR(r5, 0x89a0, &(0x7f0000000080)='veth0_macvtap\x00')
r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)
syz_usb_control_io(r6, &(0x7f0000000340)={0x2c, &(0x7f0000000580)=ANY=[@ANYBLOB="4030e1000000e12b"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@empty, @in=@private=0xa010100, 0x0, 0x0, 0x400, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x1000000001, 0x53e5, 0x20}, 0x0, 0x4000001, 0x1, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x32}, 0x2, @in=@empty, 0x1502, 0x1, 0x0, 0x0, 0x0, 0x8000}}, 0xe8)
r8 = socket(0x40000000015, 0x5, 0x0)
connect$inet6(r8, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @mcast1, 0xfffffffe}, 0x1c)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="01002bbd7000fcdbdf250600000008000300", @ANYRES32=r9, @ANYBLOB="031b5e51abdb2832b4ad3c783212cb4224fa5140a815c74185f8f94c814a9593a519c3d77cd0c327eed157b9eb3af1c1f8bd3c12ae3d8a78c8428e67fa767ba88cc20d24ad7fa3d6831ba95ac242dee32b97e8257cd0417c54d639b14668ae9c69ae4790b580b59ba820cc4cdb5283a24df5b00889b381822252556371bfcd5d1c7c140c62f33568e6dd5bad4b7b028999847378cc2034a4fe83af9b297c99ea"], 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x4004080)
syz_io_uring_submit(0x0, r4, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x7a, 0x0, 0x4000005, 0x0, 0x0, 0xbffffffd})
io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0)
preadv2(r0, &(0x7f0000000040)=[{&(0x7f0000000300)=""/97, 0x4}], 0x1, 0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0)
open(0x0, 0x145542, 0x0)
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)

4m36.298260617s ago: executing program 34 (id=1088):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x2}, 0x8)
sendto$inet(r1, &(0x7f0000000140)="ab", 0x1, 0x4000811, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10)
r2 = syz_io_uring_setup(0x112, &(0x7f0000000a00)={0x0, 0x0, 0x400}, &(0x7f0000000580)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x118, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCBRADDBR(r5, 0x89a0, &(0x7f0000000080)='veth0_macvtap\x00')
r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)
syz_usb_control_io(r6, &(0x7f0000000340)={0x2c, &(0x7f0000000580)=ANY=[@ANYBLOB="4030e1000000e12b"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@empty, @in=@private=0xa010100, 0x0, 0x0, 0x400, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x1000000001, 0x53e5, 0x20}, 0x0, 0x4000001, 0x1, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x32}, 0x2, @in=@empty, 0x1502, 0x1, 0x0, 0x0, 0x0, 0x8000}}, 0xe8)
r8 = socket(0x40000000015, 0x5, 0x0)
connect$inet6(r8, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @mcast1, 0xfffffffe}, 0x1c)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="01002bbd7000fcdbdf250600000008000300", @ANYRES32=r9, @ANYBLOB="031b5e51abdb2832b4ad3c783212cb4224fa5140a815c74185f8f94c814a9593a519c3d77cd0c327eed157b9eb3af1c1f8bd3c12ae3d8a78c8428e67fa767ba88cc20d24ad7fa3d6831ba95ac242dee32b97e8257cd0417c54d639b14668ae9c69ae4790b580b59ba820cc4cdb5283a24df5b00889b381822252556371bfcd5d1c7c140c62f33568e6dd5bad4b7b028999847378cc2034a4fe83af9b297c99ea"], 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x4004080)
syz_io_uring_submit(0x0, r4, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x7a, 0x0, 0x4000005, 0x0, 0x0, 0xbffffffd})
io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0)
preadv2(r0, &(0x7f0000000040)=[{&(0x7f0000000300)=""/97, 0x4}], 0x1, 0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0)
open(0x0, 0x145542, 0x0)
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)

2m15.24725171s ago: executing program 3 (id=1461):
getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x11e, 0x1, 0x0, 0x20000000)

2m15.082454691s ago: executing program 3 (id=1462):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8000}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000001080)=0x7)
r0 = getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x6ac, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
ioperm(0x0, 0x82, 0x1f)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)="d80000001c0081064e81f782db44b9040a1d08041000000000000aa1180015000600142603600e1208000f0000810401a8001600200001400300000007391b", 0x3f}, {&(0x7f0000000840)="5c4875c6cad162c8a030dbf75c317dad4320e1bb556d3b3e131b77de8bd885166fc0c25d69226ae9915eccf9551f804eae36cf2327896a817179f04f35d9a7deed88adf4ca13a5a0c36a7496d22b9adf2c0fa13e1572ad237e2677a2797d5dd9307bff0bc01e4fd69c546e17a7118272ace242bc6025d0b60a12b3788fa6a7649045e4af16ba69df4bd43527a3d09bb308ac7073e1b8cc3410", 0x99}], 0x2, 0x0, 0x0, 0x7400}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006280)="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", 0x2000, 0x0)

2m14.066809939s ago: executing program 3 (id=1467):
set_mempolicy(0x4000, &(0x7f0000000040)=0x8, 0x5)
iopl(0x3)
iopl(0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
iopl(0xd)
iopl(0x5)
syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
iopl(0xfe)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00'], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, 0x0, 0x0)
shutdown(r2, 0x0)
recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {}, 0xa}}, 0x26)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f00000002c0)=[{0x0}], 0x1, 0x6, 0x40)
sendmsg(r3, 0x0, 0x0)

2m14.065920026s ago: executing program 7 (id=1468):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, 0x3d, 0x9, 0x300, 0x0, {0x1}, [@typed={0x4}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@private=0xa010100}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x30}}, 0x0)

2m13.895329565s ago: executing program 7 (id=1469):
iopl(0x3)
symlink(0x0, 0x0)

2m13.865661189s ago: executing program 7 (id=1470):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYRESHEX=r1, @ANYRESOCT=r1, @ANYBLOB='\x00'/20, @ANYRESDEC=r0, @ANYRES32, @ANYRESOCT=r1], 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
capset(0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="04040a00e0ffffff0f"], 0xd)
openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0)
r5 = socket(0x23, 0x5, 0x0)
listen(r5, 0x8001)
connect$unix(r5, 0x0, 0x0)
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0)
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='ubifs\x00', 0x8000, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000e8ffffffffff0e00000008000300", @ANYRES32=r7], 0x64}}, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000280)={0x0, <r8=>0x0})
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r1, @ANYBLOB="000128bd7000fddbdf25870000000a00060008021100000100006f002a00030107dd2661f4ceb646dd0e598c23d05ffcaca61516c4da3832be0470dbc3ef42dc4a8957ef63d8a22b6d6512505050505050080211000000ffffffffffff6512ffffffffffff080211000001ffffffffffff3c040108b0078c10fd00b7799c9106b3d9d84c554c7ca8d5000a000600ffffffffffff000006004800560000003b002a0000060101010101012d1a009c1bd5101dca00000000000000c300080001000000000802000000a001061284b6ec81063e0103760604093e00090000060048001900000006004800100000000600480052"], 0xf8}, 0x1, 0x0, 0x0, 0x84}, 0x6008040)
capset(&(0x7f0000000080)={0x20071026, r8}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x2, 0x0, 0x1000})
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00000006000000080000000500000008000000", @ANYRES32, @ANYBLOB="fbffffffff0000e55607c7a4ff00"/29, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/27], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b70300000000000085000000d200000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

2m12.809721384s ago: executing program 7 (id=1473):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1a5000, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x441, 0x0)
ppoll(&(0x7f0000000000)=[{r1}], 0x1, 0x0, 0x0, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x8)
sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
syz_open_dev$media(&(0x7f0000000080), 0x0, 0x1)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0xe, 0x0, 0xfffff00c}, {0x6}]}, 0x8)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
shutdown(r6, 0x1)
socket$alg(0x26, 0x5, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1800000078000106000000000000000007"], 0x18}], 0x1}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x3c, 0x3d, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0x1c, 0x1, 0x0, 0x1, [@nested={0x18, 0x10, 0x0, 0x1, [@typed={0x14, 0x6, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000000)
socket(0x2a, 0x2, 0x0)

2m11.249691506s ago: executing program 7 (id=1476):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x58301)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1fffffffffffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102390, 0x18ff6)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x800, 0x0)
syz_usb_connect$hid(0x4, 0x36, 0x0, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
pipe2$watch_queue(0x0, 0x80)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18)
gettid()
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000024c0)=@newtaction={0xb4, 0x30, 0x48b, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ctinfo={0x48, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x80, 0x5, 0x5, 0x1, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000)
syz_open_procfs(0x0, &(0x7f0000000200)='net/sctp\x00')

2m10.203769369s ago: executing program 3 (id=1477):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000940)={{}, 'syz0\x00', 0x40})
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12)
socket$inet6(0xa, 0x6, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0)
epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000180)={0x28, 0x4, r2, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7})
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x100000000000000)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x64, 0x6, 0x5d8, 0x1b8, 0x0, 0x0, 0x420, 0x1b8, 0x508, 0x508, 0x508, 0x508, 0x508, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x3}}}, {{@ipv6={@mcast1, @local, [0x0, 0xffffff00], [], 'dvmrp0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x100, 0x140, 0x0, {}, [@common=@frag={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x2}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x9, 0x9, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e22}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @mcast1, [0xff000000, 0xffffffff, 0xffffff00, 0xff000000], [0x0, 0xffffffff, 0xff000000, 0xff], 'netdevsim0\x00', 'erspan0\x00', {}, {0xff}, 0x26, 0xc8, 0x1, 0x22}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x101], 0x2000}}, @inet=@rpfilter={{0x28}, {0xf}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x8684, @ipv4=@local, 0x4e21}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x638)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e)
sendmmsg$unix(r6, 0x0, 0x0, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

2m9.090799274s ago: executing program 6 (id=1480):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x20000004}}], 0x1, 0x2000c051)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='xprtrdma_mrs_zap\x00', r4}, 0x18)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00')
preadv(r3, &(0x7f0000001400)=[{&(0x7f0000000040)=""/105, 0x69}], 0x1, 0xc002a0, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x800, 0x0, 0x0, 0x17, 0x0, 0x8}, 0x9c)
getsockopt$IP_SET_OP_GET_FNAME(r5, 0x1, 0x53, &(0x7f00000000c0)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000100)=0x2c)
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010025bd7000fddbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="09000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4040002)
r6 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4)
connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c)

2m7.955657002s ago: executing program 7 (id=1482):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x44, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x13, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6}]}]}, 0x44}}, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
prctl$PR_SET_IO_FLUSHER(0x43, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000000000000004, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f00000008c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=<r5=>0x0)
timer_settime(r5, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
io_setup(0x4, &(0x7f0000000140)=<r6=>0x0)
io_pgetevents(r6, 0x1, 0x1, &(0x7f00000001c0)=[{}], &(0x7f0000000300)={0x0, 0x3938700}, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x30, r8, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x3, 0x1, 0x1}}}}, 0x30}}, 0x0)

2m7.906665236s ago: executing program 6 (id=1483):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f", @ANYRESDEC], 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42400)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x4, "7b0c4bda", {0x1, 0x4, 0xfc, 0x3f, 0xe}})
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)

2m5.789823231s ago: executing program 3 (id=1486):
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x2}, 0x8)
sendto$inet(r0, &(0x7f0000000140)="ab", 0x1, 0x4000811, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10)
syz_io_uring_setup(0x112, &(0x7f0000000a00)={0x0, 0x0, 0x400}, &(0x7f0000000580)=<r1=>0x0, &(0x7f0000000140))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x118, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000080)='veth0_macvtap\x00')
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0)
open(0x0, 0x145542, 0x0)
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)

2m3.69168884s ago: executing program 6 (id=1490):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0xf464aeb307362581}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040851}, 0x4004000)
r4 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xcc, 0x2c, 0xdf, 0x40, 0x763, 0x2030, 0x7979, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5f, 0x65, 0x60, 0x70, [{{0x9, 0x4, 0x1, 0x8, 0x0, 0xff, 0xa2, 0x7d, 0x9}}]}}]}}, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io(r4, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000380)={0x20, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r5 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x10, 0x0)
landlock_restrict_self(r5, 0x0)
r6 = fsopen(&(0x7f00000002c0)='pstore\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_dccp(0xa, 0x6, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0xffff, 0x3, @local, 0x2}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000002c0)='westwood\x00', 0x9)
r9 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="89000000120081ae08060cdc03a6000000000008000000006ee2ffca1b1f0000000004c00e72010000000000000019bf9ed720000000d4e747033a0093b837dc6cc01e32efaec8c7a6ec0012790002400d0c0c00bdad44099bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)
sendmmsg$inet6(r8, &(0x7f0000007500)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x6, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@flowinfo={{0x14, 0x29, 0xb, 0x7}}, @dontfrag={{0x14}}, @flowinfo={{0x14}}], 0x48}}], 0x1, 0x68034)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)={0x14, r10, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x890)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000080)={@private0}, &(0x7f00000000c0)=0x14)

2m2.961973536s ago: executing program 3 (id=1491):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, &(0x7f0000000100)={{}, {0xe}, 0x3, 0x4})
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
connect$unix(r2, 0x0, 0x0)
r5 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88)
dup2(r5, r5)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1a0000000400010000000000010000000000", @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32], 0x50)
r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x15)
r7 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffeffe, 0x18, 0x3, 0x5})
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x10, &(0x7f00000003c0)={0x0, 0x700, &(0x7f0000000240)=[{0x0}], 0x0, 0x1}, 0x20)
mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='befs\x00', 0x8400, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f0000000500), 0x84140, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
statx(r6, &(0x7f00000005c0)='./file0\x00', 0x0, 0x800, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0})
lsetxattr$system_posix_acl(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='system.posix_acl_access\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02000000010002000000000002000600517c5411b514481b7290e2d0fe3cd9d42acad7e4bc739b02658cd950aded13dee0f42239", @ANYRES64=r6, @ANYBLOB="040002000000000008000500", @ANYRES32=0x0, @ANYRES64=r5, @ANYRES32=r9, @ANYBLOB="100005000000000020000d0000000000"], 0x3c, 0x2)
getsockopt(r8, 0x0, 0x2, 0x0, &(0x7f00000000c0))
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="462f99547e39b548feb4c9c7eda2cd17e8c203a08f8e7bf587ffcf180f5d51a7a99597090000009af7"], 0x50)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
pread64(r0, 0x0, 0x0, 0x0)

2m0.532298635s ago: executing program 6 (id=1495):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8000}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000001080)=0x7)
r0 = getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x6ac, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
ioperm(0x0, 0x82, 0x1f)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)="d80000001c0081064e81f782db44b9040a1d08041000000000000aa1180015000600142603600e1208000f0000810401a8001600200001400300000007391b", 0x3f}, {&(0x7f0000000840)="5c4875c6cad162c8a030dbf75c317dad4320e1bb556d3b3e131b77de8bd885166fc0c25d69226ae9915eccf9551f804eae36cf2327896a817179f04f35d9a7deed88adf4ca13a5a0c36a7496d22b9adf2c0fa13e1572ad237e2677a2797d5dd9307bff0bc01e4fd69c546e17a7118272ace242bc6025d0b60a12b3788fa6a7649045e4af16ba69df4bd43527a3d09bb308ac7073e1b8cc3410", 0x99}], 0x2, 0x0, 0x0, 0x7400}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006280)="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", 0x2000, 0x0)

1m59.501632909s ago: executing program 6 (id=1496):
iopl(0x3)
symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

1m59.137061235s ago: executing program 6 (id=1498):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYRESHEX=r1, @ANYRESOCT=r1, @ANYBLOB='\x00'/20, @ANYRESDEC=r0, @ANYRES32, @ANYRESOCT=r1], 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
capset(0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="04040a00e0ffffff0f"], 0xd)
openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0)
r5 = socket(0x23, 0x5, 0x0)
listen(r5, 0x8001)
connect$unix(r5, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0)
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000040)='ubifs\x00', 0x8000, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000e8ffffffffff0e00000008000300", @ANYRES32=r7], 0x64}}, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000280)={0x0, <r8=>0x0})
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r1, @ANYBLOB="000128bd7000fddbdf25870000000a00060008021100000100006f002a00030107dd2661f4ceb646dd0e598c23d05ffcaca61516c4da3832be0470dbc3ef42dc4a8957ef63d8a22b6d6512505050505050080211000000ffffffffffff6512ffffffffffff080211000001ffffffffffff3c040108b0078c10fd00b7799c9106b3d9d84c554c7ca8d5000a000600ffffffffffff000006004800560000003b002a0000060101010101012d1a009c1bd5101dca00000000000000c300080001000000000802000000a001061284b6ec81063e0103760604093e00090000060048001900000006004800100000000600480052"], 0xf8}, 0x1, 0x0, 0x0, 0x84}, 0x6008040)
capset(&(0x7f0000000080)={0x20071026, r8}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x2, 0x0, 0x1000})
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00000006000000080000000500000008000000", @ANYRES32, @ANYBLOB="fbffffffff0000e55607c7a4ff00"/29, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/27], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b70300000000000085000000d200000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

1m52.069297473s ago: executing program 35 (id=1482):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x44, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x13, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6}]}]}, 0x44}}, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
prctl$PR_SET_IO_FLUSHER(0x43, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000000000000004, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f00000008c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=<r5=>0x0)
timer_settime(r5, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
io_setup(0x4, &(0x7f0000000140)=<r6=>0x0)
io_pgetevents(r6, 0x1, 0x1, &(0x7f00000001c0)=[{}], &(0x7f0000000300)={0x0, 0x3938700}, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x30, r8, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x3, 0x1, 0x1}}}}, 0x30}}, 0x0)

1m43.448804001s ago: executing program 36 (id=1498):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYRESHEX=r1, @ANYRESOCT=r1, @ANYBLOB='\x00'/20, @ANYRESDEC=r0, @ANYRES32, @ANYRESOCT=r1], 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
capset(0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="04040a00e0ffffff0f"], 0xd)
openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0)
r5 = socket(0x23, 0x5, 0x0)
listen(r5, 0x8001)
connect$unix(r5, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0)
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000040)='ubifs\x00', 0x8000, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000e8ffffffffff0e00000008000300", @ANYRES32=r7], 0x64}}, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000280)={0x0, <r8=>0x0})
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r1, @ANYBLOB="000128bd7000fddbdf25870000000a00060008021100000100006f002a00030107dd2661f4ceb646dd0e598c23d05ffcaca61516c4da3832be0470dbc3ef42dc4a8957ef63d8a22b6d6512505050505050080211000000ffffffffffff6512ffffffffffff080211000001ffffffffffff3c040108b0078c10fd00b7799c9106b3d9d84c554c7ca8d5000a000600ffffffffffff000006004800560000003b002a0000060101010101012d1a009c1bd5101dca00000000000000c300080001000000000802000000a001061284b6ec81063e0103760604093e00090000060048001900000006004800100000000600480052"], 0xf8}, 0x1, 0x0, 0x0, 0x84}, 0x6008040)
capset(&(0x7f0000000080)={0x20071026, r8}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x2, 0x0, 0x1000})
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00000006000000080000000500000008000000", @ANYRES32, @ANYBLOB="fbffffffff0000e55607c7a4ff00"/29, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/27], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b70300000000000085000000d200000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

1m43.295339309s ago: executing program 37 (id=1491):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, &(0x7f0000000100)={{}, {0xe}, 0x3, 0x4})
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
connect$unix(r2, 0x0, 0x0)
r5 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88)
dup2(r5, r5)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1a0000000400010000000000010000000000", @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32], 0x50)
r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x15)
r7 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffeffe, 0x18, 0x3, 0x5})
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x10, &(0x7f00000003c0)={0x0, 0x700, &(0x7f0000000240)=[{0x0}], 0x0, 0x1}, 0x20)
mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='befs\x00', 0x8400, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f0000000500), 0x84140, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
statx(r6, &(0x7f00000005c0)='./file0\x00', 0x0, 0x800, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0})
lsetxattr$system_posix_acl(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='system.posix_acl_access\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02000000010002000000000002000600517c5411b514481b7290e2d0fe3cd9d42acad7e4bc739b02658cd950aded13dee0f42239", @ANYRES64=r6, @ANYBLOB="040002000000000008000500", @ANYRES32=0x0, @ANYRES64=r5, @ANYRES32=r9, @ANYBLOB="100005000000000020000d0000000000"], 0x3c, 0x2)
getsockopt(r8, 0x0, 0x2, 0x0, &(0x7f00000000c0))
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="462f99547e39b548feb4c9c7eda2cd17e8c203a08f8e7bf587ffcf180f5d51a7a99597090000009af7"], 0x50)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
pread64(r0, 0x0, 0x0, 0x0)

19.378843456s ago: executing program 8 (id=1693):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYRESHEX=r1, @ANYRESOCT=r1, @ANYBLOB='\x00'/20, @ANYRESDEC=r0, @ANYRES32, @ANYRESOCT=r1], 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
capset(0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="04040a00e0ffffff0f"], 0xd)
openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0)
r5 = socket(0x23, 0x5, 0x0)
listen(r5, 0x8001)
connect$unix(r5, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0)
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='ubifs\x00', 0x8000, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYRES32=r7], 0x64}}, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000280)={0x0, <r8=>0x0})
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r1, @ANYBLOB="000128bd7000fddbdf25870000000a00060008021100000100006f002a00030107dd2661f4ceb646dd0e598c23d05ffcaca61516c4da3832be0470dbc3ef42dc4a8957ef63d8a22b6d6512505050505050080211000000ffffffffffff6512ffffffffffff080211000001ffffffffffff3c040108b0078c10fd00b7799c9106b3d9d84c554c7ca8d5000a000600ffffffffffff000006004800560000003b002a0000060101010101012d1a009c1bd5101dca00000000000000c300080001000000000802000000a001061284b6ec81063e0103760604093e00090000060048001900000006004800100000000600480052"], 0xf8}, 0x1, 0x0, 0x0, 0x84}, 0x6008040)
capset(&(0x7f0000000080)={0x20071026, r8}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x2, 0x0, 0x1000})
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00000006000000080000000500000008000000", @ANYRES32, @ANYBLOB="fbffffffff0000e55607c7a4ff00"/29, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/27], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b70300000000000085000000d200000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

18.209875797s ago: executing program 8 (id=1697):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
close(r3)
socket(0x10, 0x803, 0x0)
write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc)
splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0)
syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000100)={0x0, 0xd, 0x16, {0x16, 0x31, "5dab13406312b56beedd8df4a631cb9d7a27e09a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

12.345659569s ago: executing program 8 (id=1712):
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_MODULUS={0x8}, @NFTA_NG_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0, <r3=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r3, r2, <r4=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r3, r4, <r5=>0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)})
ioctl$IOMMU_HWPT_INVALIDATE$TEST(r1, 0x3b8d, &(0x7f0000000280)={0x20, r5, &(0x7f00000002c0)=[{0x0, 0x400000}], 0xdeadbeef, 0x8, 0x1})
r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xa1, 0x12, 0x17, 0x10, 0xb95, 0x172a, 0xf7f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfb, 0x0, 0x2, 0x6c, 0x5d, 0x65, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0)
r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x189802)
r8 = syz_io_uring_setup(0xeec, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f00000001c0)=<r9=>0x0, &(0x7f0000000140)=<r10=>0x0)
syz_io_uring_submit(r9, r10, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r7, 0xffffffffffffffff, 0x0})
io_uring_enter(r8, 0x567, 0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$printer(r6, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000340)={0x24, &(0x7f0000000100)={0x20, 0x14, 0x6, "c762c72228c9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

12.213633126s ago: executing program 2 (id=1714):
accept(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x825b, 0x1, 0x40, 0x9e3}, {0xfc01, 0x0, 0x5}, {0xa0, 0x6, 0x8}, {0x346, 0xf7, 0x1, 0x4}]})
r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0x80044100, &(0x7f0000000280)={0x0, [[0x0, 0x0, 0x5, 0x0, 0x0, 0x4], [0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]], '\x00', [{0x0, 0x4}, {0x0, 0x5}, {}, {}, {}, {0x0, 0x40000000}, {}, {}, {}, {0x0, 0xfffffffe}, {0x0, 0x80}]})
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000140), 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
recvfrom(r3, &(0x7f0000000e80)=""/149, 0x95, 0x12120, &(0x7f0000000f40)=@l2tp6={0xa, 0x0, 0xfffffffa, @private1, 0x1, 0x2}, 0x80)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil)
msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io(r4, &(0x7f0000000400)={0x2c, &(0x7f0000000000)={0x0, 0x4, 0x8, {0x8, 0xc, "3d7da33d66f0"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r5 = syz_clone(0x20000, &(0x7f0000000000)="18d2b6e26c7347d2262adf3078650e1e9c652cf314f2bb2df29395d2088d4031ba13c7cc169cb719a40502820e507c1642ebd090b0ca645df57ea67137a6e002b3306ad62c9c9003dd3b4572a8cc2c960d7ef440e4a7f91017076a4d880aa749fdae49cbe4d4811a14b198893a6a235c5156d07713a02fcaef04e79fb2dc6cda81efa90951c3b661a81b3cff8129f0c9ea20abde6bf55cebeb9693e4f2d3e0cdc4b1b2d41924884b450d59c88fc2303c46ce80bbf766ff865686e8dacfb4f9", 0xbf, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="55ebd8074d0a435de6bce579c8fbd3159d739b759811c741126f997dd4c0cd7d7576e04a2091f9d80f4bf308560fd06d9a8fb68a7c2c81d54fba21d31f9011c4994c6dae6d6fb4744e17b2e01639f4252ad92b6df28e38aa35a8d09c6bd12aab586cc0e66bad")
process_vm_readv(r5, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/100, 0x64}], 0x1, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/209, 0xd1}, {&(0x7f0000000380)=""/3, 0x3}], 0x2, 0x0)
r6 = syz_usb_connect$uac1(0x1, 0xc1, &(0x7f0000000440)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaf, 0x3, 0x1, 0xff, 0x0, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7f}, [@processing_unit={0x7, 0x24, 0x7, 0x6, 0x5, 0x5}, @processing_unit={0xc, 0x24, 0x7, 0x6, 0x5, 0x7, "81617dafd1"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7, 0x3, 0x6, 0x6f, "d8c51f", "8e"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x6, 0x7, 0x9, {0x7, 0x25, 0x1, 0x2, 0xff, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x2, 0x4, 0xa8, 0x3, "9a4959f478d75a8ca2"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x9, 0x1}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x555, 0x2, 0x1, "9ce705"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x10, 0x7fff, 0x8, "52c9dcef"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x6, 0x1, 0x4, {0x7, 0x25, 0x1, 0x1, 0x7, 0x1ff}}}}}}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x201, 0x1, 0xa, 0x0, 0x40, 0x1}, 0x19, &(0x7f0000000580)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "ebb265f6eeebde80e303a165dc36f64f"}]}, 0x7, [{0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x180c}}, {0x56, &(0x7f0000000600)=@string={0x56, 0x3, "b2ecf378df2ddca5129f7ce974355a689fcfa1c074f0f90e26ca241758243f575f164d13291cf0ef989dbe2793a5a0a651c833d2825f24d01850a7f7c5eaf4410bc76194a2e7c23585386599e01464c843d53fc3"}}, {0xcc, &(0x7f0000000680)=@string={0xcc, 0x3, "f9fe88b49d13e42e1c70ad7043fbda3aa7f71be3f1d042ce488b5396085929addfe4eb917cb687f8b122a33fe9b63d349bea5105600b32aed043b85779125ee5613470661f7279b698c62ac7de719340527fdb2e281897104d75a5a60867dd80702771b11ba2bff05d0a4fd23140462ced3feee3cbbd601dad4d5a51798ac50b8a191b1d0a4ed3e757f13e8ed278444ea0fef189d112d116f569936ddda37588ddce33892dd92266ebee62778194306bfff27e7fed6e76179e6282e79790c65801934ada3494eacca789"}}, {0xdc, &(0x7f0000000780)=@string={0xdc, 0x3, "1429d12328b076fc57c8001394d32e4cd01b782786c064250f60a1850b52e646d6a53296ff78a5d9f31408ed99107c0615bab85d959289fa2b29c1ba4c8174cf480a6af642fb5c6b399157d348738fbb80d8c9039bbc9df76f2e95408cc311cf20b59e7502bb4abe3f266a7cda6b573fd1803d49deced5445c340cc60b0eb86cf238e5cb8c76f184002733cbc457215d20235cb01925871c916e6ada17aae3dd3f7561be46417d2eda1998c8de689bca66986c2a5ee7a6e00fcf153749f7387fa2daeaf75f7f4bcdde43024e6214925c4047fd4d51ba66c08c27"}}, {0xf1, &(0x7f0000000880)=@string={0xf1, 0x3, "feef65308ada7488316b56167dc8fb78e482157ccbab130536397f58a1c530b440e23474c61941e7cc1387a7cb28a5626316e44ff44b392a42d72299a026dd54451afe3611671265414828b0c67ebc02a263e17ac324178c86985fa601fb65793e59ab2759344709c7e462cbf8627bc1716ddd6fd58e0d9b1f9cc399a8a4e7728f7faa1875882b2f623e9dc1f6c8130f2235a03906456dc8a53f004bedcb107c53197456b9a2e2bfe23a0ca0094c8a9715cc34eb366e802989d6b21c97e13b0852fb98c81b77940af5c9ebd9fabe7020040c8a1f594d50c2f705278b3b3b08c71fd9fe0282bd30bff2d88edf13ce8f"}}, {0xa9, &(0x7f0000000980)=@string={0xa9, 0x3, "040f5a5d7ff1c58476092d154185259d93c6d87c7ad2fdd1d99cd030b7c9dc70d557fb8c902bf15cb320cd9a2cb82bae02bcba8edfc397562da6fb16aa3e06edbf8de2364c369ffbde9909b778dba864854de6d50a3d13ed17023493baf8baa3dc0445f1403e63af149f28f63d97d2cee16c41a404fbfdb0fd0883e2fd0905b1adbaa30f7b9eb1b00a55b4db83078697af93fe3f83977764c3ac3c7816be5f9b233ffc498f5471"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x814}}]})
syz_usb_control_io$hid(r4, &(0x7f00000010c0)={0x24, &(0x7f0000000fc0)={0x40, 0x4, 0x3d, {0x3d, 0x23, "0e84997cd6d833386e6471d8e9f4cd823d65fa24d57f211f28ab1fe461340fe691463084c5560ff62246d85dd9930e4eb27a3bf4b3fce68ee5ef32"}}, &(0x7f0000000cc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0a}}, &(0x7f0000001040), &(0x7f0000001080)={0x0, 0x21, 0x9, {0x9, 0x21, 0xe25a, 0x5, 0x1, {0x22, 0x9f0}}}}, &(0x7f0000001340)={0x2c, &(0x7f0000001100)={0x20, 0x7, 0x97, "59056eae0b541b5f0a7295a8fb4dd8e37629cdfe0759fd48c17b8a04f285ea73f2e7fd712472d0d7659449d114397d438978d3999af27c92a0ee8790c28db4409c902c18e0df9cec8e415bfd48d8e79c0a2098dc4ad17077f7ae01272f100b591fc603f361ab6c73ab01dd1c084c27ee1143e6912b4734873a080fdf6df16527ec9d92642fcf2d15c5482e8abca03aa616624da8fc6214"}, &(0x7f00000011c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000001200)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000001240)={0x20, 0x1, 0x9f, "7f232d5b1e8cc1ff64ee4799ab079a3a1ba60aeb59c50458ec7ca7c5a4e448bd07287fe26c3b789a5cd7e4cc4669326da86563dde21be95899193ce2f9b6d9b58b046270443456cbbab079dc49b86df3953853b0d8a4d9578c65e8fc67bfecc7e1664ec8ff1ffcc49930adbf79c989dc26f5501eddd9020eec41280d570aa5b5f5bb7f62d55e8830eea234490ed65e44c3140ca32fd06274c5ce0fede76301"}, &(0x7f0000001300)={0x20, 0x3, 0x1, 0xf}})
syz_usb_control_io$uac1(r6, &(0x7f0000000b80)={0x14, &(0x7f0000000b00)={0x20, 0x5, 0x39, {0x39, 0x31, "63ce5a56cefe665ed79ee1796add95c3670af0e054cbc3d2d462ccb634320265f8811a868182f025c229955c089a81372b910816a75f06"}}, &(0x7f0000000b40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc07}}}, &(0x7f0000000dc0)={0x44, &(0x7f0000000bc0)={0x20, 0x16, 0x37, "d09bd14e04f1ecb841ce85379fa649fa44dffe0397646b3cb4b47b14940851d2949e3d0abf050af47cfe3636f71fc31b2d1aa135bfd267"}, &(0x7f0000000c00)={0x0, 0xa, 0x1}, &(0x7f0000000c40)={0x0, 0x8, 0x1, 0xb0}, &(0x7f0000000c80)={0x20, 0x81, 0x1, "fb"}, &(0x7f0000000e40)={0x20, 0x82, 0x3, "083e99"}, &(0x7f0000000d00)={0x20, 0x83, 0x1, ';'}, &(0x7f0000000d40)={0x20, 0x84, 0x2, "a2b0"}, &(0x7f0000000d80)={0x20, 0x85, 0x3, "041a04"}})

9.266950355s ago: executing program 8 (id=1720):
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2400000020000103ffffffff40000000020000fadbdff9a78b75e2ab0500130001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @raw_data="b640402d85294b0a9fb74290c10194185dfdcfeb1c14013d6bb911dcf865e16937f46d5a43da6786eb718de44027eac7efa09ffa1bdb764cca888f8fade3d43d05af38f8ecfffaafd64916080f2fcda0281791f0559a584cdbd2ed39c930aa2b9cf8617b4f0731964562b69e26936b242c48be65420556363c7789f967fcfca332179a41ceaa01f62692dc5ae37bc73d86e0e94e3e19919edea110efdd88bcdb521542b5abe03c8a36bd89e1b915df06ee4a73dd51fd24a9530d3d784dca6646e752a54556eff771"})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fc00101}]})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000300))
sched_setaffinity(0x0, 0xfffffe60, &(0x7f00000002c0)=0x400001000000002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0x1d0, 0x440, 0xe8, 0xe8, 0x310, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xfffffffc, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@ipv6header={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local, 0x27}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660)
bind$unix(r3, 0x0, 0x0)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
write$P9_RGETLOCK(r5, &(0x7f00000002c0)=ANY=[], 0x200002e6)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000140), 0x4)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x11a, 0x4, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

9.221885968s ago: executing program 0 (id=1721):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mount$bind(&(0x7f0000000180)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
openat$dir(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x418402, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x8, 0x8, 0x4, 0xe6, 0x100, 0x1, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

8.948160624s ago: executing program 0 (id=1722):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x401c5820, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800f0006800010000000000000000000a000000000000000c0008800800030000000000060007000200000008000500", @ANYRES32=r1, @ANYBLOB="140006"], 0x48}}, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x5, 0x84)

8.300283068s ago: executing program 2 (id=1724):
r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000005c0)={{0x0, 0x3, 0x0, 0x0, 'syz1\x00', 0xffffffff}, 0x3, 0x0, 0x20, 0x0, 0x1, 0x1, 'syz0\x00', &(0x7f00000000c0)=['\xc1\x14\xc1>\xd3i\x93Cc\xbf\xa6(Y\xd6\xb7\x82\x9b\xb1H\xc4\xba\xbe\xfax.\x06\xd8:\b\xf6\xa0\x9b&=\xb78\xa9Vd'], 0x27})
openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40080000000008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socket$inet6(0xa, 0x5, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
r3 = userfaultfd(0x1)
syz_io_uring_setup(0x76d8, &(0x7f0000000300)={0x0, 0x0, 0x8, 0x0, 0xa2}, 0x0, &(0x7f00000001c0))
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32, @ANYBLOB], 0x44}, 0x1, 0x2}, 0x0)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1})
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}})
ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0)
r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7ff, 0x1, 0xc, 0xb, 0x59c})
ioctl$SG_BLKTRACETEARDOWN(r5, 0x1276, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)

8.017617909s ago: executing program 5 (id=1725):
epoll_create1(0x0)
socket$inet6(0xa, 0x6, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20050800)
connect$pppoe(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, {0x0, @local, 'bond_slave_0\x00'}}, 0x1e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18)
inotify_init1(0x80800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, 0x0, 0x0)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000440)={{0x1, 0x42}, 'port0\x00', 0x0, 0x60452, 0x20, 0x8, 0x59, 0x1, 0x7, 0x0, 0x6, 0x7})
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x14ba82, 0x18)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x243)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4}, './file0\x00'})
write$cgroup_int(r2, &(0x7f0000000000)=0xfe8e, 0x12)

8.012743555s ago: executing program 9 (id=1726):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = getpid()
socket$inet6_sctp(0xa, 0x1, 0x84)
prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r2, 0xfff)
syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x20, 0x0, 0x0, 0x41}}}}}}}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, 0x0, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000540)=""/167, 0xa7}], 0x1}, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0)
ioctl$TIOCL_SETVESABLANK(r6, 0x541c, &(0x7f0000000240))
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x40015}, 0x40014)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RANGE_TO_DATA={0x4}, @NFTA_RANGE_FROM_DATA={0x8, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0)

7.879015372s ago: executing program 0 (id=1727):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x800, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000004800010027bd7000fddbdf250a"], 0x38}, 0x1, 0x100000000000000}, 0x0)
r3 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)
syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x1fc, &(0x7f0000000180)=ANY=[@ANYBLOB="9e00004ef350"])
syz_usb_connect$cdc_ncm(0x5, 0x10f, &(0x7f0000000780)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfd, 0x2, 0x1, 0x8, 0x0, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "d3"}, {0x5, 0x24, 0x0, 0x1000}, {0xd, 0x24, 0xf, 0x1, 0xff, 0x9, 0x6, 0x2}, {0x6, 0x24, 0x1a, 0x5, 0x1}, [@country_functional={0xc, 0x24, 0x7, 0x8c, 0x687b, [0xd1f, 0xb406, 0x6]}, @mdlm_detail={0x4c, 0x24, 0x13, 0xa8, "a79cf71cb5062f3e493aea08343c09d42700f320b6ef7ad80c9dba8dac566f3b55c81ed2215ae52981794c6fe629bc6f7939834dc584f28472256e5785452ed82db6aead2aca7dc7"}, @acm={0x4, 0x24, 0x2, 0x5}, @mdlm_detail={0x3f, 0x24, 0x13, 0x81, "3e4608b56ea26a87947eb8e523b9421042178c7c33773da0961694595692e908e32234f0a40c4a7e487e64b310c93174b3183a287c511d49c230dd"}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x4, 0xb, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x96}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x25, 0x7b, 0x4}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x9, 0x6, 0xfc, 0x20, 0x8}, 0x27f, &(0x7f00000001c0)={0x5, 0xf, 0x27f, 0x4, [@generic={0xde, 0x10, 0x3, "63c8ef56d179cbc644d16751beb3aa4938584a70e6273f0eb3a38954b15559e5c4849e69572b5d0cb648011338a1b72f40d48a2c8dec237c3939d6fa4d3ae1d9d2364912b5ed6946c6976abf5f9e34b56757aac1f8a24a503551ecea44db86883132e1982c3c06173dda6e7ee80b920fdf736eacc409739f72f30af44a527280d2da34311465a22de5b4d96fa982367ccabac2dac13db8987018e5e3be884807f60d4122df2cca9c7cc7496de1991a6370e6fcd81ae9df7dc2591f491b30a59236e2ce8db550a2f4319cb61292fd7df60b07e9464109924b82d94d"}, @generic={0xc0, 0x10, 0x2, "09a1c7448ed2106cd0b6e07cddd74ca6e66e797193c0e4f1c04d5a8c76d275c02eea165d17cd1693387bdc014b40c741ae64a521330b644ecd4579187e084e0ca246c24335077b59bbdde6f97180cc8d10b2e556f4afbde6f70c6d5cc7b815f3aec14912efcd672cba4697161cfcfc5b478f9a67df610faeefc1a578e903cfd371179b55b0220ed112abf5bd75fd2c187c44b40c9b04cd6aebb1ddc21db1464f1649bb2528a6a232542f345aa7bddbaf5c310885581c608de60d630fe2"}, @generic={0xd2, 0x10, 0xb, "f35641665c0bf82f30b37cba5c637990206e4cbb9350f19fa89ebf2a8ec89609474020f71d7d2e8797af3f3e6bfe8ede663e98f063c4748b45dbac65b1ef2366d3026531f9094b0a4a59534b72041a4f4beb75f8cfa5733b37178a236b008625446af5988be27d356b9bc6007a55909427973c80027f29f6b5dce867c0dfdcf7e82374c624e170152426aaf50e7976c062f8d58c698a708abd7a9d3ae84f28d9e6d7ea0fff2a20054cccee6a0fc7abbb1324b61cda5afb7ae5eb522dc15a61abb0c9616ca26ceeb0424e40b99957a9"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x7f, 0x8, 0x6}]}, 0x3, [{0x4, &(0x7f0000000140)=@lang_id={0x4}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x4ff}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x140a}}]})

7.209872192s ago: executing program 5 (id=1728):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
connect$bt_sco(r0, &(0x7f0000000040), 0x8)
r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x0, 0x0, 0x0, @remote}]})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0)
r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r2, r3, 0x6, 0x0, @void}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r2, r3, 0x6, 0x0, @val=@tracing}, 0x40)
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000940)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
close_range(r3, r4, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$sock_buf(r6, 0x1, 0x49, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="fc0000000206010100000000000000000300000750000780050003000b00000008000b404000000005001500070000000c00028008000140e0000002060004404e23000008001340000000050500150005000000050014001a00000005000700880000004c00078008001240000016e9180001801400024000000000"], 0xfc}, 0x1, 0x0, 0x0, 0x88c0}, 0x20000000)

6.636462165s ago: executing program 9 (id=1729):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8931, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"})
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x10, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x3, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff)
r4 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x7, 0x7ffffffd}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r0, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r7=>0x0}}, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x68, r3, 0x400, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf7}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004084}, 0x4000)

6.436715497s ago: executing program 2 (id=1730):
syz_usb_connect(0x0, 0x6b, &(0x7f0000000000)=ANY=[], 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r3, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b000014000780080006"], 0xac}}, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
r4 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382)
r5 = memfd_create(&(0x7f00000003c0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;\xee\xb7.V\xdc\x84w[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@-_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5qo\xe5\x00\xd4\x9eL\xe2{\x13^\xe7\xd7\xdcw^\xd0\xe6J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85h\xb3\xf2\xe2\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3U\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\x99f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x04\x00\x00\x00\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\xe0\xfb\xed`\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\xeeo\xb8\x8f]\x14\x1d\x00', 0x0)
pwritev(r5, &(0x7f0000000600)=[{&(0x7f0000000180)="10", 0x1}], 0x1, 0x800000, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r4, 0x0, 0x24002de8)
ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f0000000300)={0x0, {}, 0x0, {}, 0x60000000, 0x5, 0xb, 0x1d, "522530d6e597ca54b72437f1295d5713b017ddc8f03f7f9431388f9a2df4e1857ad78ca88090d709b29ee7b915000085393764aaa5f78a000000000080030900", "012a519a6f0231ce4623c52b637a4b34dcce6a392e161f8e3010abda97c64ba2", [0x5, 0x100000000b]})

6.295192206s ago: executing program 9 (id=1731):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700100008000a4000000000000900010073797a300000000008000540000000212c0000001e0a05010000000000000000070000000900020073797a30000000001400000010000100000000"], 0xb0}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000300)={0x2, @sdr={0x31303553, 0x4}})
sendmsg$rds(r5, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000002c0)=[{&(0x7f0000000880)=""/4096, 0x1000}], 0x1}}], 0x48}, 0x0)

5.268222619s ago: executing program 9 (id=1732):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSBRKP(r1, 0x5425, 0x0)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x0, "7a58beca39ed2d5a99bbc4bff0ebd3e9bd5a8e"})
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140))
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0)
ioctl$TCSETSW2(r1, 0x540e, 0x0)
r2 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r2, &(0x7f0000001240)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@prinfo={0x14, 0x84, 0x5, {0x1d9e5dbeab62225b, 0x6fa}}], 0x14}], 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
r4 = add_key(&(0x7f0000000240)='cifs.spnego\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
pipe2$watch_queue(&(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r3, r6, 0x0)
ioctl$FS_IOC_GETVERSION(r5, 0x80087601, &(0x7f0000000080))
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r6, 0x0)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r6, 0xffffffffffffffff)
r7 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$6lowpan_control(r7, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)
r8 = socket(0x1d, 0x2, 0x6)
syz_open_dev$tty20(0xc, 0x4, 0x0)
bind$can_j1939(r8, &(0x7f0000000380)={0x1d, 0x0, 0x1}, 0xfffffff6)
signalfd(0xffffffffffffffff, &(0x7f00000006c0), 0x8)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})
r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r9, 0x5b04, 0x0)

5.062140743s ago: executing program 8 (id=1733):
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000740)='cgroup2\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r3 = open(&(0x7f0000000180)='./file2\x00', 0x0, 0x18)
getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078)
syz_open_dev$usbmon(0x0, 0x0, 0x0)
r4 = syz_usbip_server_init(0x3)
syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[], 0x0)
write$usbip_server(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000003000000"], 0x30)
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f00000001c0)='./bus\x00')
finit_module(0xffffffffffffffff, &(0x7f0000000700)='\x00', 0x7)
syz_open_dev$dri(&(0x7f0000000100), 0x2003, 0x20000)
syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)

4.128498476s ago: executing program 5 (id=1734):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={0x0})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0)
close(r1)
syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x101142)
read$msr(r1, &(0x7f0000000180)=""/143, 0x8f)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x8f, 0x6, 0x1, 0x3, 0x5, 0x4, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x10002, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1ff, 0xfffffffe, 0x3, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x1, 0x6, 0x1, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0xffffffff, 0x6, 0x4, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0x0, 0x3, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0xbf, 0x203, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000003, 0x5, 0x8, 0xffffffff, 0x3, 0x3, 0xffff, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x2, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01)
write$char_usb(r2, &(0x7f0000000040)="e2", 0x918)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0)
r3 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x0)
ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404)
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f00000000c0)=@t={0x81, 0x5, 0x25, 0x1})
ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r3, 0x40045731, &(0x7f0000000100)=0x1)

3.690357904s ago: executing program 0 (id=1735):
sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRESHEX], 0x20}}, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000880}, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x10000000, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x5]})
prlimit64(0x0, 0xe, 0x0, 0x0)
socket(0xa, 0x1, 0x0)
r4 = gettid()
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0)
flock(r5, 0x5)
r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
flock(r6, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_open_dev$MSR(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x6)
accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000b40))
accept$packet(r5, 0x0, &(0x7f0000000b80))

3.17509562s ago: executing program 2 (id=1736):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000001, 0x810, r0, 0x966f4000)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write$sysctl(0xffffffffffffffff, &(0x7f0000000000)='5\x00', 0x2)
bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r4, &(0x7f0000000000), 0xd)
fcntl$setown(r3, 0x8, r1)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x82, 0x6}, 0x4)
setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x50}, {0x28, 0xfe, 0x0, 0x1ff}, {0x6, 0x0, 0x0, 0x1}]}, 0x10)
syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @random="0f6f0d6790c7", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x2, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data={0x4, 0x4}}}}}}, 0x0)
r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r7 = dup(r6)
io_setup(0x19, &(0x7f00000009c0)=<r8=>0x0)
io_submit(r8, 0x1, &(0x7f0000000500)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}])
ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000040))
recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{&(0x7f0000000240)=@sco={0x1f, @fixed}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000040)=""/6, 0x6}, {&(0x7f00000000c0)=""/41, 0x29}, {&(0x7f00000002c0)=""/150, 0x96}, {0x0}, {&(0x7f0000000380)=""/26, 0x1a}, {&(0x7f00000005c0)=""/163, 0xa3}, {&(0x7f0000000680)=""/127, 0x7f}, {&(0x7f0000000700)=""/147, 0x93}], 0x8, &(0x7f0000000840)=""/196, 0xc4}, 0x1000}], 0x1, 0x0, &(0x7f0000000940))

2.095360764s ago: executing program 2 (id=1737):
r0 = socket$key(0xf, 0x3, 0x2)
openat(0xffffffffffffff9c, 0x0, 0x143042, 0x10a)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_TIMERSLACK(0x1d, 0x0)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
r5 = syz_io_uring_setup(0x6908, &(0x7f00000006c0)={0x0, 0x2, 0x10100}, &(0x7f0000000200), &(0x7f0000000100)=<r6=>0x0)
syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000000)=<r7=>0x0, &(0x7f0000000240))
syz_io_uring_submit(r7, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54})
io_uring_enter(r5, 0x184c, 0x0, 0x0, 0x0, 0x0)
shutdown(r4, 0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, 0xffffffffffffffff, 0x0)
ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000020000000000010510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000}, 0x0)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRESHEX=r8], 0x88}}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="b8000000140001000000000000000000ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00?'], 0xb8}, 0x1, 0xfffff000}, 0x0)
sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f3021600000000000000000000000200090008000000e90000000000000003000600000000000200000000000000000000000000000002000100000000fffffffbfdff"], 0xb0}, 0x1, 0x7}, 0x0)

1.197735178s ago: executing program 0 (id=1738):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1a5000, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x441, 0x0)
ppoll(&(0x7f0000000000)=[{r1}], 0x1, 0x0, 0x0, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x8)
sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
syz_open_dev$media(&(0x7f0000000080), 0x0, 0x1)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0xe, 0x0, 0xfffff00c}, {0x6}]}, 0x8)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
shutdown(r6, 0x1)
socket$alg(0x26, 0x5, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1800000078000106000000000000000007"], 0x18}], 0x1}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x3c, 0x3d, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0x1c, 0x1, 0x0, 0x1, [@nested={0x18, 0x10, 0x0, 0x1, [@typed={0x14, 0x6, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000000)
socket(0x2a, 0x2, 0x0)

1.195141628s ago: executing program 8 (id=1739):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
openat$vcs(0xffffffffffffff9c, 0x0, 0x400040, 0x0)
mkdir(0x0, 0x0)
socket$inet6(0xa, 0x3, 0x8000000003c)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, <r1=>0x0, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x7ab78c4493c52f9b}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x0, 0x0, {0x0, 0x15}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0)
write$FUSE_INIT(r3, &(0x7f0000000e80)={0x50}, 0x50) (fail_nth: 3)
chown(&(0x7f0000000140)='./file0\x00', 0xee01, r2)
umount2(&(0x7f0000000040)='./file0\x00', 0xb)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = syz_io_uring_setup(0x1111, 0x0, 0x0, 0x0)
io_uring_enter(r4, 0x47fa, 0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x18, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)

1.078382115s ago: executing program 2 (id=1740):
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000280)=@ctrl_frame=@bar={{}, {0x2}, @device_b, @device_b, @multi={{0x0, 0x1, 0x1, 0x0, 0x5}, [{0x0, 0x1, {0x2, 0x5}, "76046a29f2ec5c19"}, {0x0, 0x2, {0x8, 0x800}, "67ec997a819f8a05"}, {0x0, 0x7, {0x5, 0x4e}, "a717a59ce877324a"}, {0x0, 0x8, {0x9, 0x1}, "559ea537c66e274c"}, {0x0, 0x4, {0x4, 0x7f}, "0f469bd758652279"}]}}, 0x4e)

937.431533ms ago: executing program 5 (id=1741):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)}, {&(0x7f0000000840)="5c4875c6cad162c8a030dbf75c317dad4320e1bb556d3b3e131b77de8bd885166fc0c25d69226ae9915eccf9551f804eae36cf2327896a817179f04f35d9a7deed88adf4ca13a5a0c36a7496d22b9adf2c0fa13e1572ad237e2677a2797d5dd9307bff0bc01e4fd69c546e17a7118272ace242bc6025d0b60a12b3788fa6a7649045e4af16ba69df4bd43527a3d09bb308ac7073e1b8cc3410", 0x99}], 0x2, 0x0, 0x0, 0x7400}, 0x0)

782.098032ms ago: executing program 5 (id=1742):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0xffffffff, {}, [@NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x9}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xfffffffe}]}, 0x24}, 0x1, 0x0, 0x0, 0x4090}, 0x20008800)
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}}, 0x28}}, 0x0)

777.928639ms ago: executing program 9 (id=1743):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x68}}, 0x0)

112.736889ms ago: executing program 9 (id=1744):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
connect$bt_sco(r0, &(0x7f0000000040), 0x8)
r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x0, 0x0, 0x0, @remote}]})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0)
r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r2, r3, 0x6, 0x0, @void}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r2, r3, 0x6, 0x0, @val=@tracing}, 0x40)
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000940)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
close_range(r3, r4, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$sock_buf(r6, 0x1, 0x49, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="fc0000000206010100000000000000000300000750000780050003000b00000008000b404000000005001500070000000c00028008000140e0000002060004404e23000008001340000000050500150005000000050014001a00000005000700880000004c00078008001240000016e9180001801400024000000000"], 0xfc}, 0x1, 0x0, 0x0, 0x88c0}, 0x20000000)

46.9286ms ago: executing program 0 (id=1745):
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00')
openat$cgroup_ro(r0, 0x0, 0x0, 0x0)
ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)=0xffffe90c)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000)
sched_setscheduler(0x0, 0x0, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0xffffffffffffff52, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000300), 0x0, 0x24048841)
recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
munlock(&(0x7f0000bac000/0x4000)=nil, 0x4000)
munlock(&(0x7f0000ee5000/0x1000)=nil, 0x1000)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ccd000/0x2000)=nil)
munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000)

0s ago: executing program 5 (id=1746):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYRESHEX=r1, @ANYRESOCT=r1, @ANYBLOB='\x00'/20, @ANYRESDEC=r0, @ANYRES32, @ANYRESOCT=r1], 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
capset(0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="04040a00e0ffffff0f"], 0xd)
openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0)
r5 = socket(0x23, 0x5, 0x0)
listen(r5, 0x8001)
connect$unix(r5, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0)
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='ubifs\x00', 0x8000, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000e8ffffffff", @ANYRES32=r7], 0x64}}, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000280)={0x0, <r8=>0x0})
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r1, @ANYBLOB="000128bd7000fddbdf25870000000a00060008021100000100006f002a00030107dd2661f4ceb646dd0e598c23d05ffcaca61516c4da3832be0470dbc3ef42dc4a8957ef63d8a22b6d6512505050505050080211000000ffffffffffff6512ffffffffffff080211000001ffffffffffff3c040108b0078c10fd00b7799c9106b3d9d84c554c7ca8d5000a000600ffffffffffff000006004800560000003b002a0000060101010101012d1a009c1bd5101dca00000000000000c300080001000000000802000000a001061284b6ec81063e0103760604093e00090000060048001900000006004800100000000600480052"], 0xf8}, 0x1, 0x0, 0x0, 0x84}, 0x6008040)
capset(&(0x7f0000000080)={0x20071026, r8}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x2, 0x0, 0x1000})
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00000006000000080000000500000008000000", @ANYRES32, @ANYBLOB="fbffffffff0000e55607c7a4ff00"/29, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/27], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b70300000000000085000000d200000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

kernel console output (not intermixed with test programs):

 comm="syz.6.1439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cd4585d29 code=0x7ffc0000
[  651.572655][   T29] audit: type=1326 audit(1735530307.792:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12639 comm="syz.6.1439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cd4585d29 code=0x7ffc0000
[  651.597374][   T29] audit: type=1326 audit(1735530307.792:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12639 comm="syz.6.1439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f6cd4585d29 code=0x7ffc0000
[  651.597412][   T29] audit: type=1326 audit(1735530307.792:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12639 comm="syz.6.1439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cd4585d29 code=0x7ffc0000
[  651.597440][   T29] audit: type=1326 audit(1735530307.792:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12639 comm="syz.6.1439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cd4585d29 code=0x7ffc0000
[  651.597467][   T29] audit: type=1326 audit(1735530307.792:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12639 comm="syz.6.1439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f6cd4585d29 code=0x7ffc0000
[  651.692731][   T29] audit: type=1326 audit(1735530307.792:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12639 comm="syz.6.1439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cd4585d29 code=0x7ffc0000
[  651.717522][   T29] audit: type=1326 audit(1735530307.792:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12639 comm="syz.6.1439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f6cd4585d29 code=0x7ffc0000
[  651.741315][   T29] audit: type=1326 audit(1735530307.792:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12639 comm="syz.6.1439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cd4585d29 code=0x7ffc0000
[  651.746018][ T5896] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected.
[  652.086844][   T25] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  652.283633][ T5896] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  652.329650][T12658] lo speed is unknown, defaulting to 1000
[  652.980856][   T25] usb 6-1: device descriptor read/64, error -71
[  653.114293][ T5896] usb 7-1: device descriptor read/64, error -71
[  653.197678][T12668] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  653.246790][   T25] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  653.368974][ T5896] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  653.401633][T12671] FAULT_INJECTION: forcing a failure.
[  653.401633][T12671] name failslab, interval 1, probability 0, space 0, times 0
[  653.414538][T12671] CPU: 0 UID: 0 PID: 12671 Comm: syz.3.1446 Not tainted 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0
[  653.425323][T12671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  653.435460][T12671] Call Trace:
[  653.438728][T12671]  <TASK>
[  653.441647][T12671]  dump_stack_lvl+0x16c/0x1f0
[  653.446335][T12671]  should_fail_ex+0x497/0x5b0
[  653.451011][T12671]  ? fs_reclaim_acquire+0xae/0x150
[  653.456127][T12671]  should_failslab+0xc2/0x120
[  653.460819][T12671]  __kmalloc_node_noprof+0xd1/0x510
[  653.466011][T12671]  ? __get_vm_area_node+0x1dc/0x2f0
[  653.471205][T12671]  ? __vmalloc_node_range_noprof+0x3d8/0x1530
[  653.477274][T12671]  __vmalloc_node_range_noprof+0x3d8/0x1530
[  653.483189][T12671]  ? __pfx_lock_release+0x10/0x10
[  653.488214][T12671]  ? sel_write_load+0x2b0/0x1c60
[  653.493161][T12671]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  653.499510][T12671]  ? avc_has_perm+0x11b/0x1c0
[  653.504192][T12671]  ? sel_write_load+0x2b0/0x1c60
[  653.509115][T12671]  vmalloc_noprof+0x6b/0x90
[  653.513615][T12671]  ? sel_write_load+0x2b0/0x1c60
[  653.518548][T12671]  sel_write_load+0x2b0/0x1c60
[  653.523311][T12671]  ? __pfx___lock_acquire+0x10/0x10
[  653.528503][T12671]  ? __pfx_sel_write_load+0x10/0x10
[  653.533781][T12671]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  653.539440][T12671]  ? rcu_is_watching+0x12/0xc0
[  653.544201][T12671]  ? trace_lock_acquire+0x14e/0x1f0
[  653.549403][T12671]  ? __pfx_sel_write_load+0x10/0x10
[  653.554590][T12671]  vfs_writev+0x6da/0xdd0
[  653.558908][T12671]  ? __pfx___lock_acquire+0x10/0x10
[  653.564104][T12671]  ? find_held_lock+0x2d/0x110
[  653.568867][T12671]  ? __pfx_vfs_writev+0x10/0x10
[  653.573726][T12671]  ? __fget_files+0x1fc/0x3a0
[  653.578420][T12671]  ? __pfx_lock_release+0x10/0x10
[  653.583495][T12671]  ? __fget_files+0x206/0x3a0
[  653.588182][T12671]  ? do_pwritev+0x1b1/0x270
[  653.592674][T12671]  do_pwritev+0x1b1/0x270
[  653.597080][T12671]  ? __pfx_do_pwritev+0x10/0x10
[  653.601938][T12671]  do_syscall_64+0xcd/0x250
[  653.606620][T12671]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  653.612512][T12671] RIP: 0033:0x7fdf13b85d29
[  653.616919][T12671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  653.636626][T12671] RSP: 002b:00007fdf149fd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000128
[  653.645043][T12671] RAX: ffffffffffffffda RBX: 00007fdf13d76080 RCX: 00007fdf13b85d29
[  653.653099][T12671] RDX: 0000000000000001 RSI: 0000000020000380 RDI: 0000000000000008
[  653.661163][T12671] RBP: 00007fdf149fd090 R08: 0000000000000000 R09: 0000000000000000
[  653.669298][T12671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  653.677262][T12671] R13: 0000000000000000 R14: 00007fdf13d76080 R15: 00007ffe454da8a8
[  653.685242][T12671]  </TASK>
[  653.689829][T12671] syz.3.1446: vmalloc error: size 4096, failed to allocated page array size 8, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1
[  653.692225][   T25] usb 6-1: device descriptor read/64, error -71
[  653.708306][T12671] CPU: 0 UID: 0 PID: 12671 Comm: syz.3.1446 Not tainted 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0
[  653.725209][T12671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  653.735282][T12671] Call Trace:
[  653.738553][T12671]  <TASK>
[  653.741500][T12671]  dump_stack_lvl+0x16c/0x1f0
[  653.746178][T12671]  warn_alloc+0x24d/0x3a0
[  653.750528][T12671]  ? __pfx_warn_alloc+0x10/0x10
[  653.755375][T12671]  ? dump_stack_lvl+0x1a3/0x1f0
[  653.760413][T12671]  ? rcu_is_watching+0x12/0xc0
[  653.765188][T12671]  ? trace_kmalloc+0x2d/0xd0
[  653.769792][T12671]  ? __get_vm_area_node+0x1dc/0x2f0
[  653.774986][T12671]  __vmalloc_node_range_noprof+0x1105/0x1530
[  653.780957][T12671]  ? __pfx_lock_release+0x10/0x10
[  653.785978][T12671]  ? sel_write_load+0x2b0/0x1c60
[  653.790917][T12671]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  653.797237][T12671]  ? avc_has_perm+0x11b/0x1c0
[  653.801919][T12671]  ? sel_write_load+0x2b0/0x1c60
[  653.806844][T12671]  vmalloc_noprof+0x6b/0x90
[  653.811339][T12671]  ? sel_write_load+0x2b0/0x1c60
[  653.816265][T12671]  sel_write_load+0x2b0/0x1c60
[  653.821023][T12671]  ? __pfx___lock_acquire+0x10/0x10
[  653.826219][T12671]  ? __pfx_sel_write_load+0x10/0x10
[  653.831416][T12671]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  653.837052][T12671]  ? rcu_is_watching+0x12/0xc0
[  653.841816][T12671]  ? trace_lock_acquire+0x14e/0x1f0
[  653.847011][T12671]  ? __pfx_sel_write_load+0x10/0x10
[  653.852206][T12671]  vfs_writev+0x6da/0xdd0
[  653.856523][T12671]  ? __pfx___lock_acquire+0x10/0x10
[  653.861713][T12671]  ? find_held_lock+0x2d/0x110
[  653.866488][T12671]  ? __pfx_vfs_writev+0x10/0x10
[  653.871336][T12671]  ? __fget_files+0x1fc/0x3a0
[  653.876035][T12671]  ? __pfx_lock_release+0x10/0x10
[  653.881057][T12671]  ? __fget_files+0x206/0x3a0
[  653.885731][T12671]  ? do_pwritev+0x1b1/0x270
[  653.890226][T12671]  do_pwritev+0x1b1/0x270
[  653.894543][T12671]  ? __pfx_do_pwritev+0x10/0x10
[  653.899397][T12671]  do_syscall_64+0xcd/0x250
[  653.903989][T12671]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  653.909881][T12671] RIP: 0033:0x7fdf13b85d29
[  653.914284][T12671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  653.934055][T12671] RSP: 002b:00007fdf149fd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000128
[  653.942455][T12671] RAX: ffffffffffffffda RBX: 00007fdf13d76080 RCX: 00007fdf13b85d29
[  653.950426][T12671] RDX: 0000000000000001 RSI: 0000000020000380 RDI: 0000000000000008
[  653.958385][T12671] RBP: 00007fdf149fd090 R08: 0000000000000000 R09: 0000000000000000
[  653.966343][T12671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  653.974299][T12671] R13: 0000000000000000 R14: 00007fdf13d76080 R15: 00007ffe454da8a8
[  653.982270][T12671]  </TASK>
[  653.985972][T12671] Mem-Info:
[  653.986534][ T5896] usb 7-1: device descriptor read/64, error -71
[  653.989880][T12671] active_anon:11691 inactive_anon:0 isolated_anon:0
[  653.989880][T12671]  active_file:12507 inactive_file:13827 isolated_file:0
[  653.989880][T12671]  unevictable:0 dirty:297 writeback:0
[  653.989880][T12671]  slab_reclaimable:7152 slab_unreclaimable:106314
[  653.989880][T12671]  mapped:34490 shmem:4364 pagetables:1236
[  653.989880][T12671]  sec_pagetables:0 bounce:0
[  653.989880][T12671]  kernel_misc_reclaimable:0
[  653.989880][T12671]  free:1337372 free_pcp:1602 free_cma:0
[  654.041594][T12671] Node 0 active_anon:45228kB inactive_anon:0kB active_file:49864kB inactive_file:55164kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:137680kB dirty:1188kB writeback:0kB shmem:15920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12080kB pagetables:4944kB sec_pagetables:0kB all_unreclaimable? no
[  654.041726][T12671] Node 1 active_anon:1536kB inactive_anon:0kB active_file:164kB inactive_file:144kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:280kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  654.073879][    C1] vkms_vblank_simulate: vblank timer overrun
[  654.110952][T12671] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  654.111321][   T25] usb usb6-port1: attempt power cycle
[  654.138097][    C1] vkms_vblank_simulate: vblank timer overrun
[  654.139159][T12671] lowmem_reserve[]: 0 2459 2459 0 0
[  654.155338][T12671] Node 0 DMA32 free:1436072kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:45216kB inactive_anon:0kB active_file:49864kB inactive_file:55072kB unevictable:0kB writepending:1216kB present:3129332kB managed:2547144kB mlocked:0kB bounce:0kB free_pcp:228kB local_pcp:0kB free_cma:0kB
[  654.185494][T12671] lowmem_reserve[]: 0 0 0 0 0
[  654.190960][T12671] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB
[  654.218233][T12671] lowmem_reserve[]: 0 0 0 0 0
[  654.223514][T12671] Node 1 Normal free:3897616kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:1536kB inactive_anon:0kB active_file:164kB inactive_file:144kB unevictable:0kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:6144kB local_pcp:0kB free_cma:0kB
[  654.227358][ T5896] usb usb7-port1: attempt power cycle
[  654.253064][    C1] vkms_vblank_simulate: vblank timer overrun
[  654.253283][T12671] lowmem_reserve[]: 0 0 0 0 0
[  654.269773][T12671] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  654.285953][T12671] Node 0 DMA32: 1210*4kB (UME) 1047*8kB (UME) 205*16kB (UME) 598*32kB (UME) 331*64kB (UME) 212*128kB (UME) 95*256kB (UME) 23*512kB (UME) 23*1024kB (UME) 21*2048kB (UME) 305*4096kB (UM) = 1435888kB
[  654.307401][T12671] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  654.319614][T12671] Node 1 Normal: 228*4kB (UME) 68*8kB (UME) 44*16kB (UME) 199*32kB (UME) 105*64kB (UME) 33*128kB (UME) 13*256kB (UM) 12*512kB (UM) 12*1024kB (UME) 7*2048kB (UME) 938*4096kB (UM) = 3897616kB
[  654.340417][T12671] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  654.350432][T12671] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  654.359970][T12671] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  654.369731][T12671] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  654.379288][T12671] 30696 total pagecache pages
[  654.384154][T12671] 0 pages in swap cache
[  654.388526][T12671] Free swap  = 124704kB
[  654.392895][T12671] Total swap = 124996kB
[  654.397546][T12671] 2097051 pages RAM
[  654.401708][T12671] 0 pages HighMem/MovableOnly
[  654.406589][T12671] 428607 pages reserved
[  654.410947][T12671] 0 pages cma reserved
[  654.537193][   T25] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  654.754224][ T5896] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  654.861914][   T25] usb 6-1: device descriptor read/8, error -71
[  654.928564][ T5896] usb 7-1: device descriptor read/8, error -71
[  655.757876][T12684] 9pnet_fd: Insufficient options for proto=fd
[  657.167035][   T25] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  657.218576][   T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  657.250232][   T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  657.339089][   T25] usb 6-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  657.511514][   T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  657.522740][   T25] usb 6-1: config 0 descriptor??
[  657.645639][T12709] FAULT_INJECTION: forcing a failure.
[  657.645639][T12709] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  657.659618][T12709] CPU: 1 UID: 0 PID: 12709 Comm: syz.2.1456 Not tainted 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0
[  657.670591][T12709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  657.680667][T12709] Call Trace:
[  657.683951][T12709]  <TASK>
[  657.686886][T12709]  dump_stack_lvl+0x16c/0x1f0
[  657.691580][T12709]  should_fail_ex+0x497/0x5b0
[  657.696279][T12709]  _copy_from_iter+0x2a1/0x1560
[  657.701170][T12709]  ? _copy_from_iter+0x15e/0x1560
[  657.706207][T12709]  ? __pfx__copy_from_iter+0x10/0x10
[  657.711503][T12709]  ? preempt_schedule_common+0x44/0xc0
[  657.716988][T12709]  ? __pfx__copy_from_iter+0x10/0x10
[  657.722312][T12709]  ? __virt_addr_valid+0x2d3/0x590
[  657.727456][T12709]  copy_page_from_iter+0xa5/0x120
[  657.732504][T12709]  skb_copy_datagram_from_iter+0x29b/0x710
[  657.738334][T12709]  unix_stream_sendmsg+0x4dc/0x1040
[  657.743570][T12709]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[  657.749233][T12709]  ____sys_sendmsg+0xaaf/0xc90
[  657.754010][T12709]  ? copy_msghdr_from_user+0x10b/0x160
[  657.759481][T12709]  ? __pfx_____sys_sendmsg+0x10/0x10
[  657.764777][T12709]  ? __schedule+0xe60/0x5ad0
[  657.769400][T12709]  ___sys_sendmsg+0x135/0x1e0
[  657.774085][T12709]  ? __pfx____sys_sendmsg+0x10/0x10
[  657.779315][T12709]  ? __fget_files+0x206/0x3a0
[  657.784004][T12709]  __sys_sendmsg+0x16e/0x220
[  657.788598][T12709]  ? __pfx___sys_sendmsg+0x10/0x10
[  657.793732][T12709]  do_syscall_64+0xcd/0x250
[  657.798251][T12709]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  657.804166][T12709] RIP: 0033:0x7f0484585d29
[  657.808851][T12709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  657.828467][T12709] RSP: 002b:00007f0485315038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  657.837323][T12709] RAX: ffffffffffffffda RBX: 00007f0484776160 RCX: 00007f0484585d29
[  657.845299][T12709] RDX: 0000000000000003 RSI: 0000000020000980 RDI: 0000000000000005
[  657.853536][T12709] RBP: 00007f0485315090 R08: 0000000000000000 R09: 0000000000000000
[  657.861513][T12709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  657.869506][T12709] R13: 0000000000000000 R14: 00007f0484776160 R15: 00007ffd2cac8cb8
[  657.877603][T12709]  </TASK>
[  658.133651][  T969] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  658.147611][   T25] arvo 0003:1E7D:30D4.001E: item fetching failed at offset 5/7
[  658.162005][   T25] arvo 0003:1E7D:30D4.001E: parse failed
[  658.173132][   T25] arvo 0003:1E7D:30D4.001E: probe with driver arvo failed with error -22
[  658.289068][  T969] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  658.376833][  T969] usb 7-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  658.418789][  T969] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  658.429542][   T25] usb 6-1: USB disconnect, device number 22
[  658.446348][  T969] usb 7-1: Product: syz
[  658.469265][   T29] kauditd_printk_skb: 21 callbacks suppressed
[  658.469282][   T29] audit: type=1400 audit(1735530314.722:714): avc:  denied  { mounton } for  pid=12716 comm="syz.2.1460" path="/312/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1
[  658.474849][  T969] usb 7-1: Manufacturer: syz
[  658.566452][  T969] usb 7-1: SerialNumber: syz
[  658.587841][  T969] usb 7-1: config 0 descriptor??
[  658.748522][T12727] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1462'.
[  659.591078][T12745] openvswitch: netlink: IPv4 tunnel dst address is zero
[  659.712184][T12752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1466'.
[  660.113306][T12758] No source specified
[  660.128036][T12758] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1470'.
[  660.671185][T11689] usb 7-1: USB disconnect, device number 14
[  660.907809][  T969] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  661.572528][T12772] openvswitch: netlink: Tunnel attr 6 has unexpected len 16 expected 0
[  662.240326][  T969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  662.261737][  T969] usb 3-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00
[  662.312283][  T969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  662.343487][  T969] usb 3-1: config 0 descriptor??
[  663.448108][  T969] viewsonic 0003:2133:0018.001F: hidraw0: USB HID v0.00 Device [HID 2133:0018] on usb-dummy_hcd.2-1/input0
[  663.640885][T12786] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  663.807043][ T5866] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  663.838882][T12759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1471'.
[  663.916868][T12759] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1471'.
[  664.014365][  T969] usb 3-1: USB disconnect, device number 47
[  664.035783][ T5866] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  664.056007][ T5866] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  664.080511][ T5866] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  664.089887][   T25] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  664.104215][ T5866] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  664.129423][ T5866] usb 7-1: SerialNumber: syz
[  664.205491][T12786] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  664.251105][   T25] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  664.261408][   T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  664.271223][   T25] usb 6-1: Product: syz
[  664.280842][   T25] usb 6-1: Manufacturer: syz
[  664.290323][   T25] usb 6-1: SerialNumber: syz
[  664.320347][   T25] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  664.343524][ T5896] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  664.444850][ T5866] usb 7-1: 0:2 : does not exist
[  664.510352][ T5866] usb 7-1: USB disconnect, device number 15
[  664.574677][T12785] SELinux:  policydb string  does not match my string SE Linux
[  664.582627][T12785] SELinux: failed to load policy
[  665.361822][T12796] batman_adv: batadv0: Adding interface: dummy0
[  665.727776][T12796] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  665.887365][T12796] batman_adv: batadv0: Interface activated: dummy0
[  665.926173][T12797] batadv0: mtu less than device minimum
[  665.968751][T12797] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  665.981635][T12797] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  665.993879][T12797] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  666.006201][T12797] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  666.018546][T12797] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  666.030792][T12797] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  666.043031][T12797] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  666.055327][T12797] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  666.067511][T12797] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  668.186822][    T9] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  668.349609][    T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  668.504882][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  668.561140][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  668.629854][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  668.699007][    T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  668.740945][    T9] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  669.078000][    T9] usb 4-1: Manufacturer: syz
[  669.605712][    T9] usb 4-1: config 0 descriptor??
[  670.054414][    T9] usbhid 4-1:0.0: can't add hid device: -71
[  670.065440][    T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  670.136462][    T9] usb 4-1: USB disconnect, device number 53
[  671.403242][T12828] befs: (nbd3): No write support. Marking filesystem read-only
[  671.414462][T12828] syz.3.1491: attempt to access beyond end of device
[  671.414462][T12828] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0
[  671.912738][T12832] FAULT_INJECTION: forcing a failure.
[  671.912738][T12832] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  671.939233][T12832] CPU: 0 UID: 0 PID: 12832 Comm: syz.2.1492 Not tainted 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0
[  671.950044][T12832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  671.960148][T12832] Call Trace:
[  671.963639][T12832]  <TASK>
[  671.966596][T12832]  dump_stack_lvl+0x16c/0x1f0
[  671.971308][T12832]  should_fail_ex+0x497/0x5b0
[  671.976104][T12832]  strncpy_from_user+0x3b/0x2d0
[  671.981077][T12832]  getname_flags.part.0+0x8f/0x550
[  671.986216][T12832]  getname_flags+0x93/0xf0
[  671.990644][T12832]  __x64_sys_symlink+0x58/0x90
[  671.995426][T12832]  do_syscall_64+0xcd/0x250
[  671.999981][T12832]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  672.006003][T12832] RIP: 0033:0x7f0484585d29
[  672.010439][T12832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  672.030098][T12832] RSP: 002b:00007f0485357038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058
[  672.038545][T12832] RAX: ffffffffffffffda RBX: 00007f0484775fa0 RCX: 00007f0484585d29
[  672.046553][T12832] RDX: 0000000000000000 RSI: 0000000020000e40 RDI: 0000000020001640
[  672.054551][T12832] RBP: 00007f0485357090 R08: 0000000000000000 R09: 0000000000000000
[  672.062554][T12832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  672.070537][T12832] R13: 0000000000000000 R14: 00007f0484775fa0 R15: 00007ffd2cac8cb8
[  672.078651][T12832]  </TASK>
[  672.287083][   T29] audit: type=1400 audit(1735530328.492:715): avc:  denied  { map } for  pid=12833 comm="syz.2.1493" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  672.362070][   T29] audit: type=1400 audit(1735530328.502:716): avc:  denied  { call } for  pid=12833 comm="syz.2.1493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  672.887412][    T9] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  673.090175][    T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  673.115890][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  673.155917][    T9] usb 3-1: Product: syz
[  673.175044][    T9] usb 3-1: Manufacturer: syz
[  673.186737][    T9] usb 3-1: SerialNumber: syz
[  673.213812][    T9] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  673.251008][T11689] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  673.357404][T12839] netlink: 'syz.6.1495': attribute type 10 has an invalid length.
[  673.431436][T12839] bridge0: port 4(team0) entered disabled state
[  673.478541][T12836] SELinux:  policydb string  does not match my string SE Linux
[  673.500365][T12839] team0: left allmulticast mode
[  673.516943][T12836] SELinux: failed to load policy
[  673.524663][ T5896] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[  673.558661][T12839] team_slave_0: left allmulticast mode
[  673.564938][ T5896] ath9k_htc: Failed to initialize the device
[  673.584477][  T969] usb 3-1: USB disconnect, device number 48
[  673.653136][T12839] team_slave_1: left allmulticast mode
[  673.673559][T12839] team0: left promiscuous mode
[  673.691306][T12839] team_slave_0: left promiscuous mode
[  673.715748][T12839] team_slave_1: left promiscuous mode
[  673.745481][T12839] bridge0: port 4(team0) entered disabled state
[  673.785292][T12839] team0: Cannot enslave team device to itself
[  674.344499][T11689] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[  674.371995][T11689] ath9k_htc: Failed to initialize the device
[  674.408161][  T969] usb 3-1: ath9k_htc: USB layer deinitialized
[  675.524118][T12853] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1498'.
[  677.773796][T11058] Bluetooth: hci4: command tx timeout
[  682.082337][ T5824] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  682.097444][ T5824] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  682.115657][ T5824] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  682.124044][ T5824] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  682.132238][ T5824] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  682.143025][ T5824] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  682.215710][T12856] lo speed is unknown, defaulting to 1000
[  682.633643][T12856] chnl_net:caif_netlink_parms(): no params data found
[  682.784566][T12856] bridge0: port 1(bridge_slave_0) entered blocking state
[  682.804303][T12856] bridge0: port 1(bridge_slave_0) entered disabled state
[  682.817177][T12856] bridge_slave_0: entered allmulticast mode
[  682.826537][T12856] bridge_slave_0: entered promiscuous mode
[  682.858049][T12856] bridge0: port 2(bridge_slave_1) entered blocking state
[  682.876939][T12856] bridge0: port 2(bridge_slave_1) entered disabled state
[  682.884269][T12856] bridge_slave_1: entered allmulticast mode
[  682.912238][T12856] bridge_slave_1: entered promiscuous mode
[  682.991839][T12856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  683.019040][T12856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  683.115432][T12856] team0: Port device team_slave_0 added
[  683.131576][T12856] team0: Port device team_slave_1 added
[  683.769004][T12856] batman_adv: batadv0: Adding interface: batadv_slave_0
[  683.775991][T12856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  683.877057][T12856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  683.917619][T12856] batman_adv: batadv0: Adding interface: batadv_slave_1
[  683.935293][T12856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  683.986309][T12856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  684.246962][ T5824] Bluetooth: hci5: command tx timeout
[  685.977150][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  685.983580][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  686.326952][ T5824] Bluetooth: hci5: command tx timeout
[  688.406952][ T5824] Bluetooth: hci5: command tx timeout
[  689.776753][    C1] sched: DL replenish lagged too much
[  689.847212][   T25] usb 6-1: USB disconnect, device number 23
[  689.881690][   T25] usb 6-1: ath9k_htc: USB layer deinitialized
[  690.267162][ T5815] udevd[5815]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  690.525089][ T5824] Bluetooth: hci5: command tx timeout
[  690.669983][T11058] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  690.681224][T11058] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  690.690101][T11058] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  690.700577][T11058] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  690.710017][T11058] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  690.717333][T11058] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  691.846332][T12856] hsr_slave_0: entered promiscuous mode
[  692.077332][T12856] hsr_slave_1: entered promiscuous mode
[  692.088135][ T5824] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  692.100105][ T5824] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  692.108864][ T5824] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  692.117891][ T5824] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  692.149137][ T5824] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  692.177052][ T5824] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  692.184124][T12856] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  692.184246][T12856] Cannot create hsr debugfs directory
[  692.204096][T12852] bridge0: port 3(syz_tun) entered disabled state
[  692.248483][T12852] syz_tun (unregistering): left allmulticast mode
[  692.254978][T12852] syz_tun (unregistering): left promiscuous mode
[  692.261768][T12852] bridge0: port 3(syz_tun) entered disabled state
[  692.312763][T12873] lo speed is unknown, defaulting to 1000
[  692.335768][T12888] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  692.541760][   T81] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  692.672710][T12881] lo speed is unknown, defaulting to 1000
[  692.796913][T11058] Bluetooth: hci0: command tx timeout
[  692.812420][   T81] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  693.638448][   T81] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  693.836195][   T81] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  694.076087][T12856] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  694.121511][T12856] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  694.169379][T12856] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  694.303066][T12856] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  694.323063][T11058] Bluetooth: hci2: command tx timeout
[  694.426658][T12873] chnl_net:caif_netlink_parms(): no params data found
[  694.620068][T12905] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  694.649102][T12881] chnl_net:caif_netlink_parms(): no params data found
[  694.698810][   T81] bridge_slave_1: left allmulticast mode
[  694.704494][   T81] bridge_slave_1: left promiscuous mode
[  694.722537][   T81] bridge0: port 2(bridge_slave_1) entered disabled state
[  694.759002][   T81] bridge_slave_0: left allmulticast mode
[  694.764696][   T81] bridge_slave_0: left promiscuous mode
[  694.791158][   T81] bridge0: port 1(bridge_slave_0) entered disabled state
[  694.877211][T11058] Bluetooth: hci0: command tx timeout
[  695.454099][   T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  695.465927][   T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  695.476318][   T81] bond0 (unregistering): Released all slaves
[  695.877891][T12873] bridge0: port 1(bridge_slave_0) entered blocking state
[  695.895355][T12873] bridge0: port 1(bridge_slave_0) entered disabled state
[  695.905566][T12873] bridge_slave_0: entered allmulticast mode
[  695.911854][    T9] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  695.930301][T12873] bridge_slave_0: entered promiscuous mode
[  696.128237][T12926] No source specified
[  696.137298][T12926] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1515'.
[  696.404692][T11058] Bluetooth: hci2: command tx timeout
[  696.505448][T12873] bridge0: port 2(bridge_slave_1) entered blocking state
[  696.512849][T12873] bridge0: port 2(bridge_slave_1) entered disabled state
[  696.520334][T12873] bridge_slave_1: entered allmulticast mode
[  696.527593][T12873] bridge_slave_1: entered promiscuous mode
[  696.556835][    T9] usb 3-1: Using ep0 maxpacket: 8
[  696.582231][    T9] usb 3-1: config 2 has an invalid interface number: 229 but max is 0
[  696.597042][    T9] usb 3-1: config 2 has no interface number 0
[  696.603191][    T9] usb 3-1: config 2 interface 229 has no altsetting 0
[  696.612184][    T9] usb 3-1: New USB device found, idVendor=04da, idProduct=0d05, bcdDevice= 0.00
[  696.622208][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  696.630381][    T9] usb 3-1: Product: syz
[  696.634569][    T9] usb 3-1: Manufacturer: syz
[  696.639764][    T9] usb 3-1: SerialNumber: syz
[  696.666287][    T9] usb 3-1: rejected 1 configuration due to insufficient available bus power
[  696.691235][T12873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  696.700935][    T9] usb 3-1: no configuration chosen from 1 choice
[  696.767241][T12873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  696.888102][T12881] bridge0: port 1(bridge_slave_0) entered blocking state
[  696.899965][T12881] bridge0: port 1(bridge_slave_0) entered disabled state
[  696.916924][T12881] bridge_slave_0: entered allmulticast mode
[  696.928304][T12881] bridge_slave_0: entered promiscuous mode
[  696.956790][T11058] Bluetooth: hci0: command tx timeout
[  696.968034][T12881] bridge0: port 2(bridge_slave_1) entered blocking state
[  696.996485][T12881] bridge0: port 2(bridge_slave_1) entered disabled state
[  697.004767][T12881] bridge_slave_1: entered allmulticast mode
[  697.015372][T12881] bridge_slave_1: entered promiscuous mode
[  697.132059][   T29] audit: type=1400 audit(1735530353.372:717): avc:  denied  { shutdown } for  pid=12929 comm="syz.5.1516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  697.215741][T12935] net_ratelimit: 10 callbacks suppressed
[  697.215777][T12935] openvswitch: netlink: Tunnel attr 6 has unexpected len 16 expected 0
[  697.630633][   T81] hsr_slave_0: left promiscuous mode
[  697.667109][   T81] hsr_slave_1: left promiscuous mode
[  697.706976][   T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  697.721933][   T81] batman_adv: batadv0: Removing interface: batadv_slave_0
[  697.746961][   T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  697.754655][   T81] batman_adv: batadv0: Removing interface: batadv_slave_1
[  697.799560][   T81] veth1_macvtap: left promiscuous mode
[  697.805154][   T81] veth0_macvtap: left promiscuous mode
[  697.817026][   T81] veth1_vlan: left promiscuous mode
[  697.822428][   T81] veth0_vlan: left promiscuous mode
[  697.847168][   T29] audit: type=1400 audit(1735530354.092:718): avc:  denied  { write } for  pid=12940 comm="syz.5.1517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  698.166459][T11058] Bluetooth: hci3: command 0x0406 tx timeout
[  698.229630][ T5896] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  698.416880][ T5896] usb 6-1: Using ep0 maxpacket: 8
[  698.432115][ T5896] usb 6-1: config 0 has an invalid interface number: 56 but max is 0
[  698.449187][ T5896] usb 6-1: config 0 has no interface number 0
[  698.457581][ T5896] usb 6-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64
[  698.466932][ T5896] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  698.474958][ T5896] usb 6-1: Product: syz
[  698.479895][ T5896] usb 6-1: Manufacturer: syz
[  698.484577][ T5896] usb 6-1: SerialNumber: syz
[  698.498048][T11058] Bluetooth: hci2: command tx timeout
[  698.504737][ T5896] usb 6-1: config 0 descriptor??
[  698.514345][ T5896] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state.
[  698.522826][ T5896] pctv452e: pctv452e_power_ctrl: 1
[  698.522826][ T5896] 
[  698.531101][ T5896] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22
[  698.531101][ T5896] 
[  698.541900][ T5896] dvb-usb: bulk message failed: -22 (5/0)
[  698.565800][ T5896] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  698.576885][ T5896] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600)
[  698.585306][ T5896] usb 6-1: media controller created
[  698.591739][ T5896] dvb-usb: bulk message failed: -22 (8/0)
[  698.598143][ T5896] pctv452e: I2C error -22; AA 01  A0 01 14 -> aa 01 31 04 a0 01 14
[  698.610987][ T5896] dvb-usb: MAC address reading failed.
[  698.627078][ T5896] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  698.671094][T11689] usb 3-1: USB disconnect, device number 49
[  698.747196][ T5896] DVB: Unable to find symbol stb0899_attach()
[  698.748661][T12955] Bluetooth: MGMT ver 1.23
[  698.756724][   T29] audit: type=1400 audit(1735530355.002:719): avc:  denied  { watch watch_reads } for  pid=12954 comm="syz.2.1519" path=2F6465762F7074732F30202864656C6574656429 dev="devpts" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_devpts_t tclass=chr_file permissive=1
[  698.796745][ T5896] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600'
[  698.827386][   T29] audit: type=1400 audit(1735530355.012:720): avc:  denied  { bind } for  pid=12954 comm="syz.2.1519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  698.927113][ T5896] rc_core: IR keymap rc-tt-1500 not found
[  698.932898][ T5896] Registered IR keymap rc-empty
[  698.949057][ T5896] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0
[  698.969989][ T5896] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input29
[  699.013086][ T5896] dvb-usb: schedule remote query interval to 100 msecs.
[  699.030255][ T5896] pctv452e: pctv452e_power_ctrl: 0
[  699.030255][ T5896] 
[  699.043647][ T5896] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected.
[  699.056762][T11058] Bluetooth: hci0: command tx timeout
[  699.138193][ T5896] dvb-usb: bulk message failed: -22 (4/0)
[  699.160218][ T5896] dvb-usb: error -22 while querying for an remote control event.
[  699.303457][ T5896] dvb-usb: bulk message failed: -22 (4/0)
[  699.324405][ T5896] dvb-usb: error -22 while querying for an remote control event.
[  699.425022][   T81] team0 (unregistering): Port device team_slave_1 removed
[  699.447148][ T5865] dvb-usb: bulk message failed: -22 (4/0)
[  699.453120][ T5865] dvb-usb: error -22 while querying for an remote control event.
[  699.577543][ T5865] dvb-usb: bulk message failed: -22 (4/0)
[  699.583330][ T5865] dvb-usb: error -22 while querying for an remote control event.
[  699.644471][   T81] team0 (unregistering): Port device team_slave_0 removed
[  699.696847][ T5865] dvb-usb: bulk message failed: -22 (4/0)
[  699.702727][ T5865] dvb-usb: error -22 while querying for an remote control event.
[  699.847093][ T5896] dvb-usb: bulk message failed: -22 (4/0)
[  699.852900][ T5896] dvb-usb: error -22 while querying for an remote control event.
[  699.980420][ T5896] dvb-usb: bulk message failed: -22 (4/0)
[  699.992295][ T5896] dvb-usb: error -22 while querying for an remote control event.
[  700.150308][ T5865] dvb-usb: bulk message failed: -22 (4/0)
[  700.159751][ T5865] dvb-usb: error -22 while querying for an remote control event.
[  700.316921][ T5865] dvb-usb: bulk message failed: -22 (4/0)
[  700.327692][ T5865] dvb-usb: error -22 while querying for an remote control event.
[  700.499994][ T5865] dvb-usb: bulk message failed: -22 (4/0)
[  700.520425][ T5865] dvb-usb: error -22 while querying for an remote control event.
[  700.557016][T11058] Bluetooth: hci2: command tx timeout
[  700.669266][ T5865] dvb-usb: bulk message failed: -22 (4/0)
[  700.675170][ T5865] dvb-usb: error -22 while querying for an remote control event.
[  700.836999][ T5896] dvb-usb: bulk message failed: -22 (4/0)
[  700.843140][ T5896] dvb-usb: error -22 while querying for an remote control event.
[  700.986559][ T5896] dvb-usb: bulk message failed: -22 (4/0)
[  700.993208][ T5896] dvb-usb: error -22 while querying for an remote control event.
[  701.125698][ T5896] dvb-usb: bulk message failed: -22 (4/0)
[  701.131785][ T5896] dvb-usb: error -22 while querying for an remote control event.
[  701.176109][T11689] usb 6-1: USB disconnect, device number 24
[  701.286086][T11689] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected.
[  701.376998][T12968] loop7: detected capacity change from 0 to 16384
[  701.591910][T12873] team0: Port device team_slave_0 added
[  701.638980][T12856] 8021q: adding VLAN 0 to HW filter on device bond0
[  701.648220][T12881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  701.675294][T12881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  701.725480][T12873] team0: Port device team_slave_1 added
[  701.767583][T12856] 8021q: adding VLAN 0 to HW filter on device team0
[  701.826888][T11689] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  701.928724][T12881] team0: Port device team_slave_0 added
[  701.941197][T12881] team0: Port device team_slave_1 added
[  701.998773][T12259] bridge0: port 1(bridge_slave_0) entered blocking state
[  702.005867][T12259] bridge0: port 1(bridge_slave_0) entered forwarding state
[  702.023616][T11689] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  702.049830][T11689] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  702.096940][T11689] usb 6-1: Product: syz
[  702.106808][T11689] usb 6-1: Manufacturer: syz
[  702.116837][T12873] batman_adv: batadv0: Adding interface: batadv_slave_0
[  702.121873][T11689] usb 6-1: SerialNumber: syz
[  702.123997][T12873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  702.177575][T11689] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  702.213584][  T969] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  702.255037][T12873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  702.319822][T12259] bridge0: port 2(bridge_slave_1) entered blocking state
[  702.327074][T12259] bridge0: port 2(bridge_slave_1) entered forwarding state
[  702.420924][T12881] batman_adv: batadv0: Adding interface: batadv_slave_0
[  702.447501][T12966] SELinux:  policydb string  does not match my string SE Linux
[  702.465669][T12881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  702.497165][T12966] SELinux: failed to load policy
[  702.557226][T11689] usb 6-1: USB disconnect, device number 25
[  702.582392][T12881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  702.608306][T12881] batman_adv: batadv0: Adding interface: batadv_slave_1
[  702.619326][T12881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  702.672927][T12881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  702.716257][T12873] batman_adv: batadv0: Adding interface: batadv_slave_1
[  702.756884][T12873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  702.816235][T12873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  702.985620][T12873] hsr_slave_0: entered promiscuous mode
[  703.017555][T12873] hsr_slave_1: entered promiscuous mode
[  703.034602][T12873] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  703.056813][T12873] Cannot create hsr debugfs directory
[  703.154538][T12881] hsr_slave_0: entered promiscuous mode
[  703.172084][T12881] hsr_slave_1: entered promiscuous mode
[  703.185239][T12881] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  703.215436][T12881] Cannot create hsr debugfs directory
[  703.282098][  T969] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[  703.291566][  T969] ath9k_htc: Failed to initialize the device
[  703.331482][T12993] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  703.342598][T11689] usb 6-1: ath9k_htc: USB layer deinitialized
[  703.519523][T12856] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  704.291447][T12998] 9pnet_fd: p9_fd_create_tcp (12998): problem connecting socket to 127.0.0.1
[  704.503895][   T81] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  705.019393][   T81] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  705.301159][   T81] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  706.166938][ T5824] Bluetooth: hci2: command 0x0405 tx timeout
[  706.524252][T13025] ALSA: mixer_oss: invalid OSS volume 'u'
[  709.992889][   T81] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  710.262004][T12856] 8021q: adding VLAN 0 to HW filter on device batadv0
[  710.728421][   T81] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  710.828902][T12873] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  710.854831][T13048] SELinux:  policydb string  does not match my string SE Linux
[  710.870942][T13048] SELinux: failed to load policy
[  710.971413][   T81] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  711.046358][T12873] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  711.083355][T12873] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  711.237335][   T81] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  711.266555][T12873] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  711.358518][   T81] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  711.446931][T12881] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  711.493158][T12881] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  711.531362][T12881] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  711.564390][T12881] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  711.589030][T12856] veth0_vlan: entered promiscuous mode
[  711.678219][T12856] veth1_vlan: entered promiscuous mode
[  711.816245][   T81] bridge_slave_1: left allmulticast mode
[  711.822430][   T81] bridge_slave_1: left promiscuous mode
[  711.829880][   T81] bridge0: port 2(bridge_slave_1) entered disabled state
[  711.839279][   T81] bridge_slave_0: left allmulticast mode
[  711.845283][   T81] bridge_slave_0: left promiscuous mode
[  711.851004][ T5923] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  711.859410][   T81] bridge0: port 1(bridge_slave_0) entered disabled state
[  711.870913][   T81] bridge_slave_1: left allmulticast mode
[  711.876583][   T81] bridge_slave_1: left promiscuous mode
[  711.882977][   T81] bridge0: port 2(bridge_slave_1) entered disabled state
[  711.895172][   T81] bridge_slave_0: left allmulticast mode
[  711.902019][   T81] bridge_slave_0: left promiscuous mode
[  711.907857][   T81] bridge0: port 1(bridge_slave_0) entered disabled state
[  711.977300][ T5865] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  712.020105][ T5923] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  712.044271][ T5923] usb 3-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c
[  712.054067][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  712.085295][ T5923] usb 3-1: config 0 descriptor??
[  712.093560][ T5923] usb 3-1: bad CDC descriptors
[  712.160587][ T5865] usb 6-1: Using ep0 maxpacket: 8
[  712.167064][ T5865] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  712.175346][ T5865] usb 6-1: config 179 has no interface number 0
[  712.196906][ T5865] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  712.209264][ T5865] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  712.221258][ T5865] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 7
[  712.241502][ T5865] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 9272, setting to 1024
[  712.262702][ T5865] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  712.286771][ T5865] usb 6-1: config 179 interface 65 has no altsetting 0
[  712.303970][ T5865] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  712.326757][ T5865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  712.560762][ T5923] usb 6-1: USB disconnect, device number 26
[  712.825126][T13074] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1532'.
[  712.846928][T13074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1532'.
[  713.120077][   T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  713.128957][T13075] loop7: detected capacity change from 16384 to 0
[  713.167363][   T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  713.317924][   T81] bond0 (unregistering): Released all slaves
[  713.636725][   T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  713.658448][   T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  713.670344][   T81] bond0 (unregistering): Released all slaves
[  713.715986][T12856] veth0_macvtap: entered promiscuous mode
[  713.769250][T12856] veth1_macvtap: entered promiscuous mode
[  713.841449][   T81] IPVS: stopping master sync thread 6891 ...
[  713.861383][   T81] IPVS: stopping master sync thread 6889 ...
[  713.864840][T12873] 8021q: adding VLAN 0 to HW filter on device bond0
[  713.893168][   T81] IPVS: stopping master sync thread 6888 ...
[  713.917107][   T81] IPVS: stopping master sync thread 6887 ...
[  713.944093][T12856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  713.965414][T12856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  713.975616][T12856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  713.986250][T12856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  713.999917][T12856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  714.011384][T12856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  714.021520][T12856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  714.032150][T12856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  714.058136][T12856] batman_adv: batadv0: Interface activated: batadv_slave_0
[  714.160418][T12856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  714.176742][T12856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  714.189929][T12856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  714.201244][T12856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  714.244772][T12856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  714.258810][T12856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  714.279015][T12856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  714.301499][T12856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  714.313237][T12856] batman_adv: batadv0: Interface activated: batadv_slave_1
[  714.375594][T12873] 8021q: adding VLAN 0 to HW filter on device team0
[  714.397979][T12856] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  714.420171][T12856] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  714.439451][T12856] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  714.450712][T12856] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  714.494748][T12881] 8021q: adding VLAN 0 to HW filter on device bond0
[  714.507799][T12259] bridge0: port 1(bridge_slave_0) entered blocking state
[  714.514949][T12259] bridge0: port 1(bridge_slave_0) entered forwarding state
[  714.635313][ T1127] bridge0: port 2(bridge_slave_1) entered blocking state
[  714.642491][ T1127] bridge0: port 2(bridge_slave_1) entered forwarding state
[  714.775093][T12881] 8021q: adding VLAN 0 to HW filter on device team0
[  714.846445][ T1127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  714.855425][ T1127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  714.858396][T12259] bridge0: port 1(bridge_slave_0) entered blocking state
[  714.869855][T12259] bridge0: port 1(bridge_slave_0) entered forwarding state
[  714.891496][T12259] bridge0: port 2(bridge_slave_1) entered blocking state
[  714.898663][T12259] bridge0: port 2(bridge_slave_1) entered forwarding state
[  715.024116][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  715.065892][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  715.242893][   T81] hsr_slave_0: left promiscuous mode
[  715.259526][   T81] hsr_slave_1: left promiscuous mode
[  715.265770][   T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  715.273841][   T81] batman_adv: batadv0: Removing interface: batadv_slave_0
[  715.284914][   T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  715.298044][   T81] batman_adv: batadv0: Removing interface: batadv_slave_1
[  715.341823][   T81] hsr_slave_0: left promiscuous mode
[  715.355152][   T81] hsr_slave_1: left promiscuous mode
[  715.371898][   T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  715.385837][   T81] batman_adv: batadv0: Removing interface: batadv_slave_0
[  715.400701][T13070] usb 3-1: USB disconnect, device number 50
[  715.412499][   T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  715.428595][   T81] batman_adv: batadv0: Removing interface: batadv_slave_1
[  715.498425][   T81] veth1_macvtap: left promiscuous mode
[  715.508175][   T81] veth0_macvtap: left promiscuous mode
[  715.519140][   T81] veth1_vlan: left promiscuous mode
[  715.530812][   T81] veth0_vlan: left promiscuous mode
[  715.542466][   T81] veth1_macvtap: left promiscuous mode
[  715.554476][   T81] veth0_macvtap: left promiscuous mode
[  715.560801][   T81] veth1_vlan: left promiscuous mode
[  715.569451][   T81] veth0_vlan: left promiscuous mode
[  715.663662][   T81] infiniband s
z1: set down
[  715.967032][T13070] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  716.131573][T13070] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  716.158814][T13070] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  716.168666][T13070] usb 3-1: Product: syz
[  716.172973][T13070] usb 3-1: Manufacturer: syz
[  716.177992][T13070] usb 3-1: SerialNumber: syz
[  716.238010][T13070] usb 3-1: config 0 descriptor??
[  716.258609][T13070] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 051
[  716.500400][   T81] team0 (unregistering): Port device team_slave_1 removed
[  716.516736][   T29] audit: type=1400 audit(1735530372.762:721): avc:  denied  { accept } for  pid=13106 comm="syz.5.1536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  716.583975][   T29] audit: type=1400 audit(1735530372.832:722): avc:  denied  { accept } for  pid=13106 comm="syz.5.1536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  716.681945][   T81] team0 (unregistering): Port device team_slave_0 removed
[  716.689701][T13070]  (null): failure reading functionality
[  716.710543][T13070] i2c i2c-1: failure reading functionality
[  716.724894][T13070] i2c i2c-1: connected i2c-tiny-usb device
[  716.740000][T13070] usb 3-1: USB disconnect, device number 51
[  717.929059][T13112] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1537'.
[  718.072888][ T2992] smc: removing ib device s
z1
[  719.196078][   T81] team0 (unregistering): Port device team_slave_1 removed
[  719.281265][   T81] team0 (unregistering): Port device team_slave_0 removed
[  720.016290][ T5827] lo speed is unknown, defaulting to 1000
[  720.224972][T12873] 8021q: adding VLAN 0 to HW filter on device batadv0
[  720.318428][T12881] 8021q: adding VLAN 0 to HW filter on device batadv0
[  720.711460][T12873] veth0_vlan: entered promiscuous mode
[  720.723495][T12873] veth1_vlan: entered promiscuous mode
[  720.900803][T12873] veth0_macvtap: entered promiscuous mode
[  720.964982][T12873] veth1_macvtap: entered promiscuous mode
[  721.052573][T13142] SELinux:  policydb string  does not match my string SE Linux
[  721.057421][T12873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  721.091297][T12873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  721.108435][T13142] SELinux: failed to load policy
[  721.157990][   T29] audit: type=1400 audit(1735530377.392:723): avc:  denied  { read } for  pid=13133 comm="syz.8.1540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  721.177534][T12873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  721.192602][T12873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  721.228046][T12873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  721.293009][T12873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  721.357797][T12873] batman_adv: batadv0: Interface activated: batadv_slave_0
[  721.397635][ T5827] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  721.409219][ T5923] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  721.421900][T12873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  721.432943][T12873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  721.443147][T12873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  721.453662][T12873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  721.463567][T12873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  721.496769][T12873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  721.507909][T12873] batman_adv: batadv0: Interface activated: batadv_slave_1
[  721.570094][T12873] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  721.588567][T12873] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  721.594449][ T5827] usb 9-1: Using ep0 maxpacket: 8
[  721.597727][ T5923] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  721.608675][ T5827] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  721.626758][T12873] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  721.635585][T12873] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  721.644611][ T5923] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  721.663215][ T5827] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  721.682959][ T5827] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  721.691131][ T5923] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  721.712912][ T5827] usb 9-1: config 0 descriptor??
[  721.747757][ T5923] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  721.797024][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  721.839353][ T5923] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  721.848600][ T5923] usb 3-1: invalid MIDI out EP 0
[  721.942319][T12881] veth0_vlan: entered promiscuous mode
[  721.968387][T13155] loop7: detected capacity change from 0 to 16384
[  721.995757][ T5827] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  722.010165][ T5923] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22
[  722.089489][ T5923] usb 3-1: USB disconnect, device number 52
[  722.163160][T12881] veth1_vlan: entered promiscuous mode
[  722.190950][T13059] udevd[13059]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  722.263768][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  722.288875][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  722.375681][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  722.380798][T12881] veth0_macvtap: entered promiscuous mode
[  722.402675][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  722.410005][T12881] veth1_macvtap: entered promiscuous mode
[  722.458747][T12881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  722.475258][T12881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  722.495673][T12881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  722.540858][T12881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  722.557017][T12881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  722.592828][T12881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  722.623075][T12881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  722.646743][T12881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  722.693669][T12881] batman_adv: batadv0: Interface activated: batadv_slave_0
[  722.759407][T12881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  722.796865][T12881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  722.815069][T12881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  722.825844][T12881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  722.863505][T13174] overlayfs: missing 'lowerdir'
[  722.905163][T12881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  722.920377][T13175] FAULT_INJECTION: forcing a failure.
[  722.920377][T13175] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  722.943255][T12881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  722.973025][T13175] CPU: 1 UID: 0 PID: 13175 Comm: syz.0.1503 Not tainted 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0
[  722.983967][T13175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  722.994036][T13175] Call Trace:
[  722.997328][T13175]  <TASK>
[  723.000289][T13175]  dump_stack_lvl+0x16c/0x1f0
[  723.004998][T13175]  should_fail_ex+0x497/0x5b0
[  723.005260][T12881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  723.009694][T13175]  _copy_from_user+0x2e/0xd0
[  723.009725][T13175]  copy_msghdr_from_user+0x99/0x160
[  723.009745][T13175]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  723.009774][T13175]  ___sys_sendmsg+0xff/0x1e0
[  723.009794][T13175]  ? __pfx____sys_sendmsg+0x10/0x10
[  723.020333][T12881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  723.024767][T13175]  ? __pfx_lock_release+0x10/0x10
[  723.030960][T12881] batman_adv: batadv0: Interface activated: batadv_slave_1
[  723.035722][T13175]  ? trace_lock_acquire+0x14e/0x1f0
[  723.035763][T13175]  ? __fget_files+0x206/0x3a0
[  723.042958][T12881] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  723.046020][T13175]  __sys_sendmsg+0x16e/0x220
[  723.056439][T12881] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  723.060836][T13175]  ? __pfx___sys_sendmsg+0x10/0x10
[  723.060875][T13175]  do_syscall_64+0xcd/0x250
[  723.068193][T12881] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  723.073231][T13175]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  723.124103][T13175] RIP: 0033:0x7f305dd85d29
[  723.128521][T13175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  723.148134][T13175] RSP: 002b:00007f305ebff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  723.156547][T13175] RAX: ffffffffffffffda RBX: 00007f305df76080 RCX: 00007f305dd85d29
[  723.164507][T13175] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000004
[  723.172550][T13175] RBP: 00007f305ebff090 R08: 0000000000000000 R09: 0000000000000000
[  723.180526][T13175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  723.188588][T13175] R13: 0000000000000000 R14: 00007f305df76080 R15: 00007ffe78534c18
[  723.196568][T13175]  </TASK>
[  723.250673][T12881] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  723.995418][T13097] usb 9-1: USB disconnect, device number 2
[  724.498968][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  724.579357][ T5827] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  724.580179][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  724.880149][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  724.916968][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  725.195432][ T5827] usb 1-1: New USB device found, idVendor=2ba2, idProduct=93b6, bcdDevice=de.4d
[  725.205457][ T5827] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  725.231694][ T5827] usb 1-1: Product: syz
[  725.235908][ T5827] usb 1-1: Manufacturer: syz
[  725.252023][ T5827] usb 1-1: SerialNumber: syz
[  725.270242][ T5827] usb 1-1: config 0 descriptor??
[  725.513296][  T969] usb 1-1: USB disconnect, device number 26
[  726.638298][   T29] audit: type=1400 audit(1735530382.882:724): avc:  denied  { ioctl } for  pid=13237 comm="syz.0.1556" path="socket:[37562]" dev="sockfs" ino=37562 ioctlcmd=0x937a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  726.878790][T13242] No source specified
[  727.317387][   T29] audit: type=1400 audit(1735530383.572:725): avc:  denied  { create } for  pid=13239 comm="syz.8.1555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  727.349163][   T29] audit: type=1400 audit(1735530383.602:726): avc:  denied  { write } for  pid=13239 comm="syz.8.1555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  727.414831][T13247] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  727.681788][T13253] pim6reg: entered allmulticast mode
[  727.911203][T13257] delete_channel: no stack
[  727.937427][T13257] pim6reg: left allmulticast mode
[  728.297531][T13263] 9pnet_fd: Insufficient options for proto=fd
[  728.373062][   T29] audit: type=1400 audit(1735530384.622:727): avc:  denied  { ioctl } for  pid=13262 comm="syz.5.1559" path="socket:[37601]" dev="sockfs" ino=37601 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  728.438692][T13268] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1560'.
[  728.681881][   T29] audit: type=1400 audit(1735530384.622:728): avc:  denied  { execute } for  pid=13262 comm="syz.5.1559" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=37600 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  729.216658][T11058] Bluetooth: hci2: command 0x0405 tx timeout
[  729.507109][ T5866] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  729.675076][ T5866] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  729.689279][ T5866] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  729.728477][ T5866] usb 6-1: config 0 descriptor??
[  729.740091][ T5866] gspca_main: cpia1-2.14.0 probing 0813:0001
[  729.984458][T13298] FAULT_INJECTION: forcing a failure.
[  729.984458][T13298] name failslab, interval 1, probability 0, space 0, times 0
[  730.046865][T13298] CPU: 0 UID: 0 PID: 13298 Comm: syz.0.1566 Not tainted 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0
[  730.057676][T13298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  730.067753][T13298] Call Trace:
[  730.071040][T13298]  <TASK>
[  730.073968][T13298]  dump_stack_lvl+0x16c/0x1f0
[  730.078660][T13298]  should_fail_ex+0x497/0x5b0
[  730.083345][T13298]  ? fs_reclaim_acquire+0xae/0x150
[  730.088467][T13298]  should_failslab+0xc2/0x120
[  730.093169][T13298]  kmem_cache_alloc_node_noprof+0x72/0x3c0
[  730.099009][T13298]  ? __alloc_skb+0x2b1/0x380
[  730.103626][T13298]  __alloc_skb+0x2b1/0x380
[  730.108068][T13298]  ? __pfx___alloc_skb+0x10/0x10
[  730.113034][T13298]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[  730.119043][T13298]  netlink_alloc_large_skb+0x69/0x130
[  730.124455][T13298]  netlink_sendmsg+0x689/0xd70
[  730.129268][T13298]  ? __pfx_netlink_sendmsg+0x10/0x10
[  730.134601][T13298]  ____sys_sendmsg+0xaaf/0xc90
[  730.139399][T13298]  ? copy_msghdr_from_user+0x10b/0x160
[  730.144886][T13298]  ? __pfx_____sys_sendmsg+0x10/0x10
[  730.150217][T13298]  ___sys_sendmsg+0x135/0x1e0
[  730.154920][T13298]  ? __pfx____sys_sendmsg+0x10/0x10
[  730.160248][T13298]  ? __pfx_lock_release+0x10/0x10
[  730.165381][T13298]  ? trace_lock_acquire+0x14e/0x1f0
[  730.170614][T13298]  ? __fget_files+0x206/0x3a0
[  730.175323][T13298]  __sys_sendmsg+0x16e/0x220
[  730.179959][T13298]  ? __pfx___sys_sendmsg+0x10/0x10
[  730.185127][T13298]  do_syscall_64+0xcd/0x250
[  730.190115][T13298]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  730.196055][T13298] RIP: 0033:0x7f305dd85d29
[  730.200485][T13298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  730.220115][T13298] RSP: 002b:00007f305ec20038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  730.228556][T13298] RAX: ffffffffffffffda RBX: 00007f305df75fa0 RCX: 00007f305dd85d29
[  730.236547][T13298] RDX: 0000000000000800 RSI: 00000000200004c0 RDI: 0000000000000004
[  730.244543][T13298] RBP: 00007f305ec20090 R08: 0000000000000000 R09: 0000000000000000
[  730.252549][T13298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  730.260656][T13298] R13: 0000000000000000 R14: 00007f305df75fa0 R15: 00007ffe78534c18
[  730.268867][T13298]  </TASK>
[  730.271916][    C0] vkms_vblank_simulate: vblank timer overrun
[  730.814837][ T5866] gspca_cpia1: usb_control_msg 05, error -110
[  730.860798][ T5866] gspca_cpia1: usb_control_msg 01, error -32
[  730.897007][ T5866] gspca_cpia1: usb_control_msg 01, error -32
[  730.929111][ T5866] gspca_cpia1: usb_control_msg 01, error -32
[  730.949528][ T5866] gspca_cpia1: usb_control_msg 01, error -32
[  730.978119][ T5866] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0)
[  730.992831][T13317] pim6reg: entered allmulticast mode
[  731.031335][T13317] pim6reg: left allmulticast mode
[  732.071724][T13339] netlink: 596 bytes leftover after parsing attributes in process `syz.9.1569'.
[  732.360409][  T969] usb 6-1: USB disconnect, device number 27
[  733.012042][T13367] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1576'.
[  733.016924][   T29] audit: type=1400 audit(1735530389.242:729): avc:  denied  { read } for  pid=13366 comm="syz.8.1576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  733.319663][T13375] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1578'.
[  733.331064][T13375] netlink: 'syz.8.1578': attribute type 10 has an invalid length.
[  733.424249][T13375] team0: Cannot enslave team device to itself
[  733.864494][   T29] audit: type=1400 audit(1735530390.112:730): avc:  denied  { create } for  pid=13390 comm="syz.2.1582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1
[  734.472571][   T29] audit: type=1400 audit(1735530390.722:731): avc:  denied  { block_suspend } for  pid=13392 comm="syz.5.1583" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  734.798749][T13411] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  735.763114][T13424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1587'.
[  737.061161][T13442] netlink: 108 bytes leftover after parsing attributes in process `syz.8.1585'.
[  737.076301][T13442] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1585'.
[  737.079192][ T5947] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  737.551705][T13424] hsr_slave_1 (unregistering): left promiscuous mode
[  737.591437][ T5947] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[  737.611180][ T5947] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  737.630745][ T5947] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  737.642848][ T5947] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  737.668805][ T5947] usb 6-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.00
[  737.700992][ T5947] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  737.744595][ T5947] usb 6-1: config 0 descriptor??
[  738.022932][T13455] netlink: 'syz.2.1594': attribute type 10 has an invalid length.
[  738.070728][T13455] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  738.258500][T13447] loop7: detected capacity change from 16384 to 0
[  740.530311][T13480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  741.619775][ T5947] usbhid 6-1:0.0: can't add hid device: -71
[  741.635935][ T5947] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  741.702099][ T5947] usb 6-1: USB disconnect, device number 28
[  742.216860][   T29] audit: type=1400 audit(1735530398.452:732): avc:  denied  { ioctl } for  pid=13498 comm="syz.5.1601" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0xf510 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  742.722180][   T29] audit: type=1400 audit(1735530398.972:733): avc:  denied  { connect } for  pid=13504 comm="syz.5.1603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  742.856884][   T29] audit: type=1400 audit(1735530399.102:734): avc:  denied  { write } for  pid=13504 comm="syz.5.1603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  743.246987][ T5865] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  744.186730][T13548] sp0: Synchronizing with TNC
[  744.300299][T13548] sp0: Found TNC
[  744.632150][ T5865] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  744.681822][T13536] [U] è`
[  744.790175][ T5865] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  744.856648][ T5865] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  744.866582][ T5865] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  744.986939][   T29] audit: type=1400 audit(1735530401.212:735): avc:  denied  { ioctl } for  pid=13555 comm="syz.2.1611" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  745.257460][T13561] 9pnet_fd: Insufficient options for proto=fd
[  746.456969][T13585] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1610'.
[  746.498689][T13585] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1610'.
[  746.574047][ T5865] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  746.583536][ T5865] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  746.593924][T13585] loop7: detected capacity change from 0 to 16384
[  746.606506][ T5865] usb 9-1: config 0 descriptor??
[  746.611952][ T5865] usb 9-1: can't set config #0, error -71
[  746.620385][ T5865] usb 9-1: USB disconnect, device number 3
[  747.618197][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  747.624538][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  747.918421][T11058] Bluetooth: Unknown BR/EDR signaling command 0x0f
[  747.924977][T11058] Bluetooth: Wrong link type (-22)
[  747.930857][T11058] Bluetooth: Unknown BR/EDR signaling command 0xee
[  747.937476][T11058] Bluetooth: Wrong link type (-22)
[  747.942684][T11058] Bluetooth: Unknown BR/EDR signaling command 0x10
[  747.949477][T11058] Bluetooth: Wrong link type (-22)
[  747.954947][T11058] Bluetooth: hci0: link tx timeout
[  747.960936][T11058] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  748.348270][T13587] loop7: detected capacity change from 16384 to 0
[  749.294374][   T29] audit: type=1400 audit(1735530405.542:736): avc:  denied  { map } for  pid=13615 comm="syz.0.1624" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  749.393749][T13620] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1621'.
[  749.426193][T13610] netlink: 'syz.2.1621': attribute type 10 has an invalid length.
[  749.472275][T13610] team0: Cannot enslave team device to itself
[  750.678157][ T5824] Bluetooth: hci0: command 0x0406 tx timeout
[  751.820283][T13648] pim6reg: entered allmulticast mode
[  751.836185][T13649] pim6reg: left allmulticast mode
[  752.116861][T11688] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  752.326976][T11688] usb 6-1: Using ep0 maxpacket: 16
[  752.470678][T11688] usb 6-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35
[  752.636171][T11688] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  752.674648][T11688] usb 6-1: Product: syz
[  752.693274][T11688] usb 6-1: Manufacturer: syz
[  752.703350][T11688] usb 6-1: SerialNumber: syz
[  753.092127][T11688] usb 6-1: config 0 descriptor??
[  753.127855][ T5866] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  753.162152][T11688] as10x_usb: device has been detected
[  753.168192][T11688] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led))
[  753.263995][T11688] usb 6-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))...
[  753.329417][T11688] as10x_usb: error during firmware upload part1
[  753.336262][T11688] Registered device Sky IT Digital Key (green led)
[  753.505836][ T5865] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  753.584112][ T5866] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  753.604082][ T5866] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  753.626946][ T5866] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  753.673745][ T5866] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  753.690719][ T5865] usb 9-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  753.714392][ T5865] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  753.733153][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  753.742938][ T5865] usb 9-1: Product: syz
[  753.747859][ T5865] usb 9-1: Manufacturer: syz
[  753.752502][ T5865] usb 9-1: SerialNumber: syz
[  753.766648][ T5866] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  753.784793][ T5865] usb 9-1: config 0 descriptor??
[  753.790394][ T5866] usb 3-1: invalid MIDI out EP 0
[  753.801439][ T5865] i2c-tiny-usb 9-1:0.0: version 6d.cc found at bus 009 address 004
[  753.836872][ T5827] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  753.866363][ T5866] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22
[  753.942625][T13059] udevd[13059]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  753.986834][ T5827] usb 1-1: Using ep0 maxpacket: 8
[  753.995854][ T5827] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7
[  754.018959][ T5827] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  754.046005][ T5827] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  754.064630][ T5827] usb 1-1: Product: syz
[  754.074746][ T5827] usb 1-1: Manufacturer: syz
[  754.090853][ T5827] usb 1-1: SerialNumber: syz
[  754.218464][ T5865]  (null): failure reading functionality
[  754.229658][ T5865] i2c i2c-1: failure reading functionality
[  754.243200][ T5865] i2c i2c-1: connected i2c-tiny-usb device
[  754.253950][T11688] usb 3-1: USB disconnect, device number 53
[  754.284228][ T5865] usb 9-1: USB disconnect, device number 4
[  754.327301][ T5827] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use
[  754.360143][ T5827] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use
[  754.383209][ T5827] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2
[  754.518170][ T5827] usb 1-1: palm_os_3_probe - error -71 getting bytes available request
[  754.541832][ T5827] visor 1-1:1.0: Handspring Visor / Palm OS converter detected
[  754.576298][ T5827] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  754.618249][ T5827] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  754.650959][ T5827] usb 1-1: USB disconnect, device number 27
[  754.667916][ T5827] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  754.693149][ T5827] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  754.717654][ T5827] visor 1-1:1.0: device disconnected
[  755.088568][T11688] usb 6-1: USB disconnect, device number 29
[  755.811174][T11688] Unregistered device Sky IT Digital Key (green led)
[  755.862635][T11688] as10x_usb: device has been disconnected
[  756.258883][   T29] audit: type=1400 audit(1735530412.502:737): avc:  denied  { create } for  pid=13729 comm="syz.0.1643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  756.369263][T13730] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1643'.
[  756.392374][T13730] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1643'.
[  756.457364][T13735] SELinux:  Context system_u:object_r:devpts_t:s0 is not valid (left unmapped).
[  756.540435][   T29] audit: type=1400 audit(1735530412.792:738): avc:  denied  { bind } for  pid=13729 comm="syz.0.1643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  756.584842][T13730] batadv0: entered promiscuous mode
[  756.646838][T11688] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  756.663654][   T29] audit: type=1400 audit(1735530412.822:739): avc:  denied  { relabelto } for  pid=13729 comm="syz.0.1643" name="zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:devpts_t:s0"
[  756.847772][T13730] batadv0: left promiscuous mode
[  757.431986][T11688] usb 3-1: Using ep0 maxpacket: 8
[  757.437282][   T29] audit: type=1400 audit(1735530412.822:740): avc:  denied  { associate } for  pid=13729 comm="syz.0.1643" name="zero" dev="devtmpfs" ino=6 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:devpts_t:s0"
[  757.512331][   T29] audit: type=1400 audit(1735530413.232:741): avc:  denied  { write } for  pid=13738 comm="syz.9.1645" name="ptype" dev="proc" ino=4026534290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  757.587261][T11688] usb 3-1: config 0 has an invalid interface number: 56 but max is 0
[  757.617002][T11688] usb 3-1: config 0 has no interface number 0
[  757.625676][T11688] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64
[  757.647137][T11688] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  757.655320][T11688] usb 3-1: Product: syz
[  757.659611][T11688] usb 3-1: Manufacturer: syz
[  757.664234][T11688] usb 3-1: SerialNumber: syz
[  757.691061][T11688] usb 3-1: config 0 descriptor??
[  757.748113][T13747] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  758.047172][T11688] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state.
[  758.055133][T11688] pctv452e: pctv452e_power_ctrl: 1
[  758.055133][T11688] 
[  758.065027][T11688] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22
[  758.065027][T11688] 
[  758.075517][T11688] dvb-usb: bulk message failed: -22 (5/0)
[  758.096290][T11688] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  758.117042][T11688] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600)
[  758.126597][T11688] usb 3-1: media controller created
[  758.132840][T11688] dvb-usb: bulk message failed: -22 (8/0)
[  758.138682][T11688] pctv452e: I2C error -22; AA 01  A0 01 14 -> aa 01 31 04 a0 01 14
[  758.146863][T11688] dvb-usb: MAC address reading failed.
[  758.162543][T11688] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  758.444671][T11688] DVB: Unable to find symbol stb0899_attach()
[  758.451299][T11688] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600'
[  758.844733][T11688] rc_core: IR keymap rc-tt-1500 not found
[  758.870953][T11688] Registered IR keymap rc-empty
[  758.882960][   T29] audit: type=1400 audit(1735530415.132:742): avc:  denied  { getopt } for  pid=13764 comm="syz.0.1650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  758.887931][T11688] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0
[  759.068909][T11688] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input30
[  759.118550][T11688] dvb-usb: schedule remote query interval to 100 msecs.
[  759.125536][T11688] pctv452e: pctv452e_power_ctrl: 0
[  759.125536][T11688] 
[  759.226922][  T969] dvb-usb: bulk message failed: -22 (4/0)
[  759.232819][  T969] dvb-usb: error -22 while querying for an remote control event.
[  759.246517][T11688] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected.
[  759.256931][ T5947] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  759.396853][T11688] dvb-usb: bulk message failed: -22 (4/0)
[  759.406013][T11688] dvb-usb: error -22 while querying for an remote control event.
[  759.464743][ T5947] usb 10-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  759.484066][ T5947] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  759.496922][ T5865] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  759.500629][ T5947] usb 10-1: Product: syz
[  759.536809][ T5947] usb 10-1: Manufacturer: syz
[  759.543195][ T5947] usb 10-1: SerialNumber: syz
[  759.548841][T11688] dvb-usb: bulk message failed: -22 (4/0)
[  759.554595][T11688] dvb-usb: error -22 while querying for an remote control event.
[  759.566367][ T5947] usb 10-1: config 0 descriptor??
[  759.590325][ T5947] i2c-tiny-usb 10-1:0.0: version 6d.cc found at bus 010 address 002
[  759.670005][ T5865] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  759.687696][T11688] dvb-usb: bulk message failed: -22 (4/0)
[  759.693786][T11688] dvb-usb: error -22 while querying for an remote control event.
[  759.704723][ T5865] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  759.765600][ T5865] usb 1-1: Product: syz
[  759.770081][ T5865] usb 1-1: Manufacturer: syz
[  759.774746][ T5865] usb 1-1: SerialNumber: syz
[  759.818387][T11688] dvb-usb: bulk message failed: -22 (4/0)
[  759.825381][ T5865] usb 1-1: config 0 descriptor??
[  759.837478][T11688] dvb-usb: error -22 while querying for an remote control event.
[  759.857505][ T5865] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 028
[  759.957523][T11688] dvb-usb: bulk message failed: -22 (4/0)
[  759.963398][T11688] dvb-usb: error -22 while querying for an remote control event.
[  760.077217][ T5947]  (null): failure reading functionality
[  760.090044][  T969] dvb-usb: bulk message failed: -22 (4/0)
[  760.095845][  T969] dvb-usb: error -22 while querying for an remote control event.
[  760.209413][ T5947] i2c i2c-2: failure reading functionality
[  760.216268][T11688] dvb-usb: bulk message failed: -22 (4/0)
[  760.222294][T11688] dvb-usb: error -22 while querying for an remote control event.
[  760.272129][ T5865]  (null): failure reading functionality
[  760.282153][ T5865] i2c i2c-3: failure reading functionality
[  760.316355][ T5947] i2c i2c-2: connected i2c-tiny-usb device
[  760.328048][ T5865] i2c i2c-3: connected i2c-tiny-usb device
[  760.366524][  T969] dvb-usb: bulk message failed: -22 (4/0)
[  760.367023][ T5865] usb 1-1: USB disconnect, device number 28
[  760.372516][  T969] dvb-usb: error -22 while querying for an remote control event.
[  760.403736][ T5947] usb 10-1: USB disconnect, device number 2
[  760.424702][   T46] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  760.497250][T11688] dvb-usb: bulk message failed: -22 (4/0)
[  760.506774][T11688] dvb-usb: error -22 while querying for an remote control event.
[  760.577377][ T5896] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  760.637231][T11688] dvb-usb: bulk message failed: -22 (4/0)
[  760.641541][   T46] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  760.642997][T11688] dvb-usb: error -22 while querying for an remote control event.
[  760.662421][   T46] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  760.692958][   T46] usb 9-1: Product: syz
[  760.697799][ T5866] usb 3-1: USB disconnect, device number 54
[  760.706354][   T46] usb 9-1: Manufacturer: syz
[  760.720553][   T46] usb 9-1: SerialNumber: syz
[  760.775066][   T46] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  760.785850][ T5896] usb 6-1: Using ep0 maxpacket: 16
[  760.792608][ T5866] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected.
[  760.827735][ T5865] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  760.840888][ T5896] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  760.853128][T13810] 9pnet_fd: Insufficient options for proto=fd
[  760.882575][ T5896] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  760.912927][ T5896] usb 6-1: Product: syz
[  760.946663][ T5896] usb 6-1: Manufacturer: syz
[  760.951897][ T5896] usb 6-1: SerialNumber: syz
[  760.995472][ T5896] usb 6-1: config 0 descriptor??
[  761.170321][  T969] usb 9-1: USB disconnect, device number 5
[  761.176795][   T46] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  762.342381][ T5866] usb 6-1: USB disconnect, device number 30
[  762.701733][ T5865] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive
[  763.088290][ T5865] ath9k_htc: Failed to initialize the device
[  763.094793][  T969] usb 9-1: ath9k_htc: USB layer deinitialized
[  763.357897][   T46] usb 10-1: Using ep0 maxpacket: 16
[  763.368774][   T46] usb 10-1: config 0 has an invalid interface number: 8 but max is 0
[  763.377063][   T46] usb 10-1: config 0 has no interface number 0
[  763.383278][   T46] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  763.398110][   T46] usb 10-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  763.407549][   T46] usb 10-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  763.416017][   T46] usb 10-1: Product: syz
[  763.421053][   T46] usb 10-1: SerialNumber: syz
[  763.432783][   T46] usb 10-1: config 0 descriptor??
[  763.443851][   T46] cm109 10-1:0.8: invalid payload size 239, expected 4
[  763.457077][   T46] input: CM109 USB driver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.8/input/input31
[  763.950312][T13816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  765.016010][T13816] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  765.206824][    C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71
[  765.208194][ T5947] usb 10-1: USB disconnect, device number 3
[  765.214667][    C1] cm109 10-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  765.355024][ T5947] cm109 10-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  765.418026][T11058] Bluetooth: min 0 < 6
[  765.490029][T11058] Bluetooth: Unexpected continuation frame (len 82)
[  765.760197][T13864] openvswitch: netlink: Tunnel attr 6 has unexpected len 16 expected 0
[  765.825474][T13868] 9pnet_fd: Insufficient options for proto=fd
[  766.240406][    T9] libceph: connect (1)[c::]:6789 error -101
[  766.291647][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  766.328763][T13857] ceph: No mds server is up or the cluster is laggy
[  766.413402][    T9] libceph: connect (1)[c::]:6789 error -101
[  766.427621][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  766.689768][ T5947] libceph: connect (1)[c::]:6789 error -101
[  766.695928][ T5947] libceph: mon0 (1)[c::]:6789 connect error
[  767.655576][ T5824] Bluetooth: hci3: command 0x0406 tx timeout
[  768.226495][ T5866] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  768.408702][T13913] FAULT_INJECTION: forcing a failure.
[  768.408702][T13913] name failslab, interval 1, probability 0, space 0, times 0
[  768.422289][T13913] CPU: 0 UID: 0 PID: 13913 Comm: syz.9.1678 Not tainted 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0
[  768.433159][T13913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  768.443488][T13913] Call Trace:
[  768.446786][T13913]  <TASK>
[  768.449757][T13913]  dump_stack_lvl+0x16c/0x1f0
[  768.454462][T13913]  should_fail_ex+0x497/0x5b0
[  768.459254][T13913]  should_failslab+0xc2/0x120
[  768.463949][T13913]  kmem_cache_alloc_noprof+0x6e/0x3d0
[  768.469341][T13913]  ? vm_area_dup+0x53/0x2f0
[  768.473868][T13913]  vm_area_dup+0x53/0x2f0
[  768.478302][T13913]  __split_vma+0x181/0x1160
[  768.482818][T13913]  ? hlock_class+0x4e/0x130
[  768.487339][T13913]  ? __pfx_mark_lock+0x10/0x10
[  768.492121][T13913]  ? __pfx___split_vma+0x10/0x10
[  768.497062][T13913]  ? __lock_acquire+0x15a9/0x3c40
[  768.502118][T13913]  vms_gather_munmap_vmas+0x1c3/0x1730
[  768.507602][T13913]  ? __pfx_vms_gather_munmap_vmas+0x10/0x10
[  768.513505][T13913]  ? mas_walk+0x6a6/0x910
[  768.517860][T13913]  __mmap_region+0x32c/0x2760
[  768.522550][T13913]  ? __pfx___mmap_region+0x10/0x10
[  768.527767][T13913]  ? __pfx_lock_release+0x10/0x10
[  768.532800][T13913]  ? rcu_is_watching+0x12/0xc0
[  768.537579][T13913]  ? mark_held_locks+0x9f/0xe0
[  768.542352][T13913]  ? finish_task_switch.isra.0+0x217/0xcc0
[  768.548206][T13913]  ? lockdep_hardirqs_on+0x7c/0x110
[  768.553426][T13913]  ? finish_task_switch.isra.0+0x217/0xcc0
[  768.559244][T13913]  ? __switch_to+0x749/0x1190
[  768.563940][T13913]  ? hlock_class+0x4e/0x130
[  768.568486][T13913]  ? irqentry_exit+0x3b/0x90
[  768.573093][T13913]  ? lockdep_hardirqs_on+0x7c/0x110
[  768.578319][T13913]  mmap_region+0x127/0x320
[  768.582759][T13913]  do_mmap+0xc00/0xfc0
[  768.586850][T13913]  vm_mmap_pgoff+0x1ba/0x360
[  768.591469][T13913]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  768.596605][T13913]  ? __fget_files+0x206/0x3a0
[  768.601385][T13913]  ksys_mmap_pgoff+0x32c/0x5c0
[  768.606157][T13913]  ? __pfx_ksys_write+0x10/0x10
[  768.611019][T13913]  __x64_sys_mmap+0x125/0x190
[  768.615706][T13913]  do_syscall_64+0xcd/0x250
[  768.620223][T13913]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  768.626239][T13913] RIP: 0033:0x7f0fa9f85d29
[  768.630658][T13913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  768.650453][T13913] RSP: 002b:00007f0fa7df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  768.658887][T13913] RAX: ffffffffffffffda RBX: 00007f0faa176160 RCX: 00007f0fa9f85d29
[  768.666862][T13913] RDX: 0000000000000004 RSI: 0000000000004000 RDI: 0000000020001000
[  768.674851][T13913] RBP: 00007f0fa7df6090 R08: 0000000000000005 R09: 0000000100000000
[  768.682838][T13913] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001
[  768.690802][T13913] R13: 0000000000000000 R14: 00007f0faa176160 R15: 00007ffd17c76468
[  768.698776][T13913]  </TASK>
[  768.702115][ T5866] usb 6-1: Using ep0 maxpacket: 8
[  768.718056][ T5866] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  768.727391][ T5866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  768.735498][ T5866] usb 6-1: Product: syz
[  768.785252][ T5866] usb 6-1: Manufacturer: syz
[  768.796943][ T5866] usb 6-1: SerialNumber: syz
[  768.820872][ T5866] usb 6-1: config 0 descriptor??
[  769.030139][    T9] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  769.047519][ T5866] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  769.228169][    T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  769.248099][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  769.286758][    T9] usb 3-1: Product: syz
[  769.298310][    T9] usb 3-1: Manufacturer: syz
[  769.319773][    T9] usb 3-1: SerialNumber: syz
[  769.376197][T13934] netlink: 108 bytes leftover after parsing attributes in process `syz.8.1677'.
[  769.392402][    T9] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  769.409143][ T5947] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  769.525092][   T29] audit: type=1400 audit(1735530425.752:743): avc:  denied  { read } for  pid=13926 comm="syz.9.1681" name="zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:devpts_t:s0"
[  769.571350][ T5866] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  769.638172][T13934] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1677'.
[  769.879262][   T29] audit: type=1400 audit(1735530425.762:744): avc:  denied  { open } for  pid=13926 comm="syz.9.1681" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:devpts_t:s0"
[  770.048985][ T5866] usb 3-1: USB disconnect, device number 55
[  770.126599][T13934] loop7: detected capacity change from 0 to 16384
[  770.136884][T11688] usb 1-1: new full-speed USB device number 29 using dummy_hcd
[  770.307005][    T9] usb 6-1: USB disconnect, device number 31
[  770.326776][T11688] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  770.348163][T11688] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  770.374250][T11688] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64
[  770.393095][T11688] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  770.402766][T13934] loop7: detected capacity change from 16384 to 0
[  770.702950][T13953] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1683'.
[  770.712838][T11688] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  770.728595][T11688] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  770.757514][T11688] usb 1-1: SerialNumber: syz
[  770.793661][T13929] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  770.805349][T13929] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  770.967752][ T5947] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[  770.974939][ T5947] ath9k_htc: Failed to initialize the device
[  770.982588][ T5866] usb 3-1: ath9k_htc: USB layer deinitialized
[  770.983523][T11688] cdc_acm 1-1:1.0: Control and data interfaces are not separated!
[  773.596114][T14000] openvswitch: netlink: Tunnel attr 6 has unexpected len 16 expected 0
[  774.696558][T14008] No source specified
[  775.754228][T14020] openvswitch: netlink: Tunnel attr 6 has unexpected len 16 expected 0
[  776.527144][T11688] cdc_acm 1-1:1.0: ttyACM0: USB ACM device
[  776.676895][    T9] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  776.716812][ T5824] Bluetooth: hci5: command tx timeout
[  776.907605][    T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  776.922540][   T29] audit: type=1400 audit(1735530433.142:745): avc:  denied  { getopt } for  pid=14014 comm="syz.5.1696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  776.939160][    T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  777.025991][    T9] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  777.098898][    T9] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  777.258867][    T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  777.355345][T14038] No source specified
[  777.853430][    T9] usb 9-1: config 0 descriptor??
[  778.127411][T14042] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(4)
[  778.134403][T14042] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  778.241969][T14042] vhci_hcd vhci_hcd.0: Device attached
[  778.321044][T14045] vhci_hcd: connection closed
[  778.347268][ T1127] vhci_hcd: stop threads
[  778.379029][    T9] plantronics 0003:047F:FFFF.0020: global environment stack underflow
[  778.387677][    T9] plantronics 0003:047F:FFFF.0020: item 0 1 1 11 parsing failed
[  778.395895][    T9] plantronics 0003:047F:FFFF.0020: parse failed
[  778.405529][    T9] plantronics 0003:047F:FFFF.0020: probe with driver plantronics failed with error -22
[  778.406989][ T5865] vhci_hcd: vhci_device speed not set
[  778.428977][ T1127] vhci_hcd: release socket
[  778.436215][ T1127] vhci_hcd: disconnect device
[  778.526788][ T5865] usb 51-1: new full-speed USB device number 2 using vhci_hcd
[  778.544831][ T5865] usb 51-1: enqueue for inactive port 0
[  778.566864][ T5947] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  778.647000][ T5865] vhci_hcd: vhci_device speed not set
[  778.697201][ T5947] usb 6-1: device descriptor read/64, error -71
[  778.937143][ T5947] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  779.136240][ T5947] usb 6-1: device descriptor read/64, error -71
[  779.249332][ T5947] usb usb6-port1: attempt power cycle
[  779.385591][ T5866] usb 1-1: USB disconnect, device number 29
[  780.438193][ T5896] usb 9-1: USB disconnect, device number 6
[  780.591978][ T5947] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  780.617388][ T5947] usb 6-1: device descriptor read/8, error -71
[  781.431656][T14101] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  781.518510][ T5947] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  781.535826][   T29] audit: type=1400 audit(1735530437.782:746): avc:  denied  { read } for  pid=14109 comm="syz.2.1714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  781.736802][   T46] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  781.746825][ T5947] usb 6-1: device not accepting address 35, error -71
[  781.756399][ T5947] usb usb6-port1: unable to enumerate USB device
[  781.806774][ T5865] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  781.826985][ T5896] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  781.898396][   T46] usb 10-1: Using ep0 maxpacket: 16
[  781.909831][T14125] input: syz0 as /devices/virtual/input/input32
[  781.921693][   T46] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  781.939317][   T46] usb 10-1: New USB device found, idVendor=1b96, idProduct=000c, bcdDevice= 0.00
[  781.970314][   T46] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  781.987453][ T5896] usb 9-1: Using ep0 maxpacket: 16
[  782.000898][ T5865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  782.023684][   T46] usb 10-1: config 0 descriptor??
[  782.035135][ T5865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  782.050036][ T5896] usb 9-1: config 0 has an invalid interface number: 251 but max is 0
[  782.067250][ T5865] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  782.076583][ T5896] usb 9-1: config 0 has no interface number 0
[  782.085405][ T5896] usb 9-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  782.096421][ T5865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  782.133674][ T5896] usb 9-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  782.151518][ T5865] usb 3-1: config 0 descriptor??
[  782.171130][ T5896] usb 9-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  782.243957][ T5896] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  782.280473][ T5896] usb 9-1: Product: syz
[  782.284712][ T5896] usb 9-1: Manufacturer: syz
[  782.289519][ T5896] usb 9-1: SerialNumber: syz
[  782.310548][ T5896] usb 9-1: config 0 descriptor??
[  782.316296][T14098] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22
[  782.324196][T14098] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22
[  782.335703][T14132] bpf: Bad value for 'gid'
[  782.483946][T14100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  782.503103][T14100] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  782.543619][T14098] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22
[  782.577064][T14098] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22
[  782.578905][   T46] ntrig 0003:1B96:000C.0022: item fetching failed at offset 4/5
[  782.596037][ T5865] pyra 0003:1E7D:2CF6.0021: item fetching failed at offset 4/7
[  782.604590][   T46] ntrig 0003:1B96:000C.0022: parse failed
[  782.613816][   T46] ntrig 0003:1B96:000C.0022: probe with driver ntrig failed with error -22
[  782.624719][ T5865] pyra 0003:1E7D:2CF6.0021: parse failed
[  782.630757][ T5866] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[  782.648140][ T5865] pyra 0003:1E7D:2CF6.0021: probe with driver pyra failed with error -22
[  782.806942][ T5866] usb 6-1: Using ep0 maxpacket: 8
[  782.832044][ T5866] usb 6-1: config 0 has an invalid interface number: 56 but max is 0
[  782.865320][    T9] usb 10-1: USB disconnect, device number 4
[  782.870673][ T5866] usb 6-1: config 0 has no interface number 0
[  782.908135][ T5866] usb 6-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64
[  782.951156][ T5866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  782.997438][ T5896] asix 9-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  783.007956][ T5896] asix 9-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71
[  783.047041][ T5866] usb 6-1: Product: syz
[  783.051246][ T5866] usb 6-1: Manufacturer: syz
[  783.055858][ T5866] usb 6-1: SerialNumber: syz
[  783.101766][ T5896] asix 9-1:0.251: probe with driver asix failed with error -71
[  783.103395][T14110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  783.150131][T14110] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  783.167625][ T5866] usb 6-1: config 0 descriptor??
[  783.182352][ T5896] usb 9-1: USB disconnect, device number 7
[  783.208966][ T5866] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state.
[  783.236792][ T5866] pctv452e: pctv452e_power_ctrl: 1
[  783.236792][ T5866] 
[  783.244160][ T5866] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22
[  783.244160][ T5866] 
[  783.281202][ T5866] dvb-usb: bulk message failed: -22 (5/0)
[  783.290097][ T5866] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  783.307410][ T5866] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600)
[  783.327250][ T5866] usb 6-1: media controller created
[  783.332563][ T5866] dvb-usb: bulk message failed: -22 (8/0)
[  783.346733][ T5866] pctv452e: I2C error -22; AA 01  A0 01 14 -> aa 01 31 04 a0 01 14
[  783.364951][ T5866] dvb-usb: MAC address reading failed.
[  783.409608][ T5866] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  784.253730][T14158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  784.373307][ T5866] DVB: Unable to find symbol stb0899_attach()
[  784.389877][ T5866] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600'
[  784.488099][ T5866] rc_core: IR keymap rc-tt-1500 not found
[  784.507869][ T5866] Registered IR keymap rc-empty
[  784.521681][ T5866] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0
[  784.578255][ T5866] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input33
[  784.638792][ T5866] dvb-usb: schedule remote query interval to 100 msecs.
[  784.697089][ T5866] pctv452e: pctv452e_power_ctrl: 0
[  784.697089][ T5866] 
[  784.697811][T14169] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  784.738411][ T5866] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected.
[  784.823644][ T5866] dvb-usb: bulk message failed: -22 (4/0)
[  784.854206][ T5866] dvb-usb: error -22 while querying for an remote control event.
[  785.006874][ T5866] dvb-usb: bulk message failed: -22 (4/0)
[  785.028046][ T5866] dvb-usb: error -22 while querying for an remote control event.
[  785.156845][ T5896] dvb-usb: bulk message failed: -22 (4/0)
[  785.162769][   T29] audit: type=1400 audit(1735530441.412:747): avc:  denied  { map } for  pid=14178 comm="syz.9.1723" path="socket:[41186]" dev="sockfs" ino=41186 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  785.187583][ T5896] dvb-usb: error -22 while querying for an remote control event.
[  785.223618][   T29] audit: type=1400 audit(1735530441.412:748): avc:  denied  { accept } for  pid=14178 comm="syz.9.1723" path="socket:[41186]" dev="sockfs" ino=41186 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  785.326816][ T5866] dvb-usb: bulk message failed: -22 (4/0)
[  785.332702][ T5866] dvb-usb: error -22 while querying for an remote control event.
[  785.465611][ T5866] dvb-usb: bulk message failed: -22 (4/0)
[  785.471846][ T5866] dvb-usb: error -22 while querying for an remote control event.
[  785.564372][ T5866] usb 6-1: USB disconnect, device number 36
[  785.870350][T14195] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.1726'.
[  785.874927][ T5866] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected.
[  785.880798][T14193] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.1726'.
[  786.091804][T14194] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1727'.
[  786.263193][T14198] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1724'.
[  786.308535][ T5865] usb 3-1: USB disconnect, device number 56
[  786.456821][ T5947] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  786.826834][ T5947] usb 1-1: Using ep0 maxpacket: 8
[  786.859934][ T5947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  786.871569][ T5947] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  786.886789][ T5947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  786.902333][   T29] audit: type=1326 audit(1735530443.112:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14159 comm="syz.8.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe200d85d29 code=0x7fc00000
[  786.907807][ T5947] usb 1-1: config 0 descriptor??
[  787.086966][ T5866] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[  787.289390][ T5866] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  787.301111][ T5947] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  787.329408][ T5866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  787.352977][ T5866] usb 6-1: Product: syz
[  787.396597][ T5866] usb 6-1: Manufacturer: syz
[  787.423219][T14221] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1731'.
[  787.444963][ T5866] usb 6-1: SerialNumber: syz
[  787.575343][ T5866] usb 6-1: config 0 descriptor??
[  787.584859][ T5866] i2c-tiny-usb 6-1:0.0: version 6d.cc found at bus 006 address 037
[  788.196796][T11688] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  788.238809][T14194] netlink: 'syz.0.1727': attribute type 1 has an invalid length.
[  788.248849][T14194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1727'.
[  788.258888][T14194] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1727'.
[  788.341680][T11688] usb 3-1: device descriptor read/64, error -71
[  788.381983][ T5866]  (null): failure reading functionality
[  788.388354][ T5866] i2c i2c-1: failure reading functionality
[  788.409197][ T5866] i2c i2c-1: connected i2c-tiny-usb device
[  788.426570][ T5866] usb 6-1: USB disconnect, device number 37
[  788.586962][T11688] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[  788.651577][ T5865] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  788.747635][T14194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  788.758164][T14194] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  788.817407][T11688] usb 3-1: device descriptor read/64, error -71
[  788.875470][ T5865] usb 10-1: Using ep0 maxpacket: 8
[  789.373880][T11688] usb usb3-port1: attempt power cycle
[  789.384170][T14244] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6)
[  789.390719][T14244] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  789.398615][T14244] vhci_hcd vhci_hcd.0: Device attached
[  789.407212][ T5865] usb 10-1: config index 0 descriptor too short (expected 301, got 45)
[  789.416226][ T5865] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  789.426316][ T5865] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  789.436441][ T5865] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  789.446887][ T5865] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  789.460367][ T5865] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  789.470196][ T5865] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  789.647079][   T46] usb 49-1: new high-speed USB device number 2 using vhci_hcd
[  789.654689][ T5866] usb 9-1: new low-speed USB device number 8 using dummy_hcd
[  789.717842][T11688] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[  789.737806][T11688] usb 3-1: device descriptor read/8, error -71
[  789.817103][ T5866] usb 9-1: device descriptor read/64, error -71
[  789.846809][T11689] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[  789.870858][T14267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  789.913840][T14267] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  789.945284][ T5947] usb 1-1: USB disconnect, device number 30
[  789.976863][T11688] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[  790.010295][T11689] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  790.021933][T11688] usb 3-1: device descriptor read/8, error -71
[  790.031585][T11689] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  790.066552][T11689] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  790.066845][ T5866] usb 9-1: new low-speed USB device number 9 using dummy_hcd
[  790.087457][T11689] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  790.116975][T11689] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  790.148694][   T29] audit: type=1400 audit(1735530446.392:750): avc:  denied  { read } for  pid=14227 comm="syz.9.1732" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  790.151338][T11689] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  790.198942][T11688] usb usb3-port1: unable to enumerate USB device
[  790.221097][T11689] usb 6-1: invalid MIDI out EP 0
[  790.257489][ T5866] usb 9-1: device descriptor read/64, error -71
[  790.264596][ T5865] usb 10-1: usb_control_msg returned -32
[  790.271155][ T5865] usbtmc 10-1:16.0: can't read capabilities
[  790.285317][T14228] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  790.316625][T14228] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  790.321863][T11689] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22
[  790.389463][ T5866] usb usb9-port1: attempt power cycle
[  790.394292][T11689] usb 6-1: USB disconnect, device number 38
[  790.436543][T14228] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  790.468764][T14228] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  790.776980][ T5866] usb 9-1: new low-speed USB device number 10 using dummy_hcd
[  791.178416][T14228] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  791.189564][ T5866] usb 9-1: device descriptor read/8, error -71
[  791.196340][T14228] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  791.209521][T14228] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  791.213672][T14264] usbtmc 10-1:16.0: usb_control_msg returned -32
[  791.243956][T14228] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  791.247862][T13690] udevd[13690]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  791.286011][T14228] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  791.377890][T14228] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  791.507401][T11689] usb 10-1: USB disconnect, device number 5
[  791.694338][T14246] vhci_hcd: connection reset by peer
[  791.702665][   T35] vhci_hcd: stop threads
[  792.298908][ T5866] usb 9-1: new low-speed USB device number 11 using dummy_hcd
[  792.327902][   T53] Bluetooth: hci3: command 0x0406 tx timeout
[  792.360233][   T35] vhci_hcd: release socket
[  792.365472][   T35] vhci_hcd: disconnect device
[  792.506778][   T53] Bluetooth: hci5: command 0x0c1a tx timeout
[  792.538091][T14301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  792.748850][ T5866] usb 9-1: device not accepting address 11, error -71
[  792.756425][ T5866] usb usb9-port1: unable to enumerate USB device
[  792.912616][T14312] openvswitch: netlink: Tunnel attr 6 has unexpected len 16 expected 0
[  793.380952][   T53] Bluetooth: hci2: command 0x0405 tx timeout
[  793.390535][   T53] Bluetooth: hci0: command 0x0406 tx timeout
[  793.402848][T14317] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1742'.
[  793.410585][T14309] FAULT_INJECTION: forcing a failure.
[  793.410585][T14309] name failslab, interval 1, probability 0, space 0, times 0
[  793.519014][T14309] CPU: 0 UID: 0 PID: 14309 Comm: syz.8.1739 Not tainted 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0
[  793.529819][T14309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  793.540067][T14309] Call Trace:
[  793.543350][T14309]  <TASK>
[  793.546282][T14309]  dump_stack_lvl+0x16c/0x1f0
[  793.550987][T14309]  should_fail_ex+0x497/0x5b0
[  793.555690][T14309]  ? fs_reclaim_acquire+0xae/0x150
[  793.560827][T14309]  should_failslab+0xc2/0x120
[  793.565536][T14309]  __kmalloc_noprof+0xcb/0x510
[  793.570321][T14309]  ? kasan_save_track+0x14/0x30
[  793.575235][T14309]  fuse_direct_io+0x5b3/0x2580
[  793.580056][T14309]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  793.585721][T14309]  ? __pfx_fuse_direct_io+0x10/0x10
[  793.590940][T14309]  ? __pfx_generic_write_checks+0x10/0x10
[  793.596685][T14309]  fuse_direct_write_iter+0x64f/0x830
[  793.602068][T14309]  ? __pfx_fuse_direct_write_iter+0x10/0x10
[  793.607997][T14309]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  793.613667][T14309]  ? rcu_is_watching+0x12/0xc0
[  793.618458][T14309]  ? trace_lock_acquire+0x14e/0x1f0
[  793.623687][T14309]  fuse_file_write_iter+0x66e/0x8c0
[  793.628918][T14309]  vfs_write+0x5ae/0x1150
[  793.633267][T14309]  ? __pfx_fuse_file_write_iter+0x10/0x10
[  793.639018][T14309]  ? __pfx_vfs_write+0x10/0x10
[  793.643844][T14309]  ? __fget_files+0x40/0x3a0
[  793.648482][T14309]  ksys_write+0x207/0x250
[  793.652919][T14309]  ? __pfx_ksys_write+0x10/0x10
[  793.657790][T14309]  do_syscall_64+0xcd/0x250
[  793.662301][T14309]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  793.668295][T14309] RIP: 0033:0x7fe200d85d29
[  793.672699][T14309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  793.692366][T14309] RSP: 002b:00007fe201aef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  793.700775][T14309] RAX: ffffffffffffffda RBX: 00007fe200f75fa0 RCX: 00007fe200d85d29
[  793.708750][T14309] RDX: 0000000000000050 RSI: 0000000020000e80 RDI: 0000000000000005
[  793.716708][T14309] RBP: 00007fe201aef090 R08: 0000000000000000 R09: 0000000000000000
[  793.724675][T14309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  793.732638][T14309] R13: 0000000000000000 R14: 00007fe200f75fa0 R15: 00007fff16146d08
[  793.740636][T14309]  </TASK>
[  793.947245][T14309] ------------[ cut here ]------------
[  793.952803][T14309] kernel BUG at lib/iov_iter.c:626!
[  793.995225][T14309] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI
[  794.002389][T14309] CPU: 1 UID: 0 PID: 14309 Comm: syz.8.1739 Not tainted 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0
[  794.013162][T14309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  794.023238][T14309] RIP: 0010:iov_iter_revert+0x533/0x5a0
[  794.028799][T14309] Code: 89 e6 48 c7 c7 a0 b6 d0 8e e8 99 e3 31 00 e9 b1 fd ff ff e8 cf da 5e fd eb 95 e8 f8 da 5e fd e9 46 fb ff ff e8 ee 2e fc fc 90 <0f> 0b 48 8b 3c 24 e8 e2 da 5e fd e9 97 fb ff ff 48 8b 7c 24 08 e8
[  794.048420][T14309] RSP: 0018:ffffc9000dd5f958 EFLAGS: 00010293
[  794.054493][T14309] RAX: 0000000000000000 RBX: 0000000000000050 RCX: ffffffff849de320
[  794.062554][T14309] RDX: ffff8880733a4880 RSI: ffffffff849de732 RDI: 0000000000000001
[  794.070544][T14309] RBP: ffffc9000dd5fd98 R08: 0000000000000001 R09: 0000000000000000
[  794.078516][T14309] R10: 0000000000000000 R11: ffffffff81fc8fc3 R12: 0000000000000000
[  794.086482][T14309] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff88807e3f1200
[  794.094464][T14309] FS:  00007fe201aef6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  794.103403][T14309] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  794.110093][T14309] CR2: 00007ff5aced5270 CR3: 00000000482d6000 CR4: 00000000003526f0
[  794.118090][T14309] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  794.126095][T14309] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  794.134073][T14309] Call Trace:
[  794.137349][T14309]  <TASK>
[  794.140276][T14309]  ? die+0x31/0x80
[  794.144004][T14309]  ? do_trap+0x232/0x430
[  794.148265][T14309]  ? iov_iter_revert+0x533/0x5a0
[  794.149020][T11688] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  794.153203][T14309]  ? iov_iter_revert+0x533/0x5a0
[  794.165656][T14309]  ? do_error_trap+0xf4/0x230
[  794.170350][T14309]  ? iov_iter_revert+0x533/0x5a0
[  794.175308][T14309]  ? handle_invalid_op+0x34/0x40
[  794.180262][T14309]  ? iov_iter_revert+0x533/0x5a0
[  794.185186][T14309]  ? exc_invalid_op+0x2e/0x50
[  794.189864][T14309]  ? asm_exc_invalid_op+0x1a/0x20
[  794.194904][T14309]  ? kasan_save_stack+0x33/0x60
[  794.199283][T14335] No source specified
[  794.199754][T14309]  ? iov_iter_revert+0x120/0x5a0
[  794.208628][T14309]  ? iov_iter_revert+0x532/0x5a0
[  794.213549][T14309]  ? iov_iter_revert+0x533/0x5a0
[  794.218478][T14309]  ? iov_iter_revert+0x532/0x5a0
[  794.223421][T14309]  fuse_direct_io+0xf0e/0x2580
[  794.228167][T14309]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  794.233783][T14309]  ? __pfx_fuse_direct_io+0x10/0x10
[  794.238972][T14309]  ? __pfx_generic_write_checks+0x10/0x10
[  794.244714][T14309]  fuse_direct_write_iter+0x64f/0x830
[  794.250084][T14309]  ? __pfx_fuse_direct_write_iter+0x10/0x10
[  794.255970][T14309]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  794.261584][T14309]  ? rcu_is_watching+0x12/0xc0
[  794.266336][T14309]  ? trace_lock_acquire+0x14e/0x1f0
[  794.271523][T14309]  fuse_file_write_iter+0x66e/0x8c0
[  794.276711][T14309]  vfs_write+0x5ae/0x1150
[  794.281034][T14309]  ? __pfx_fuse_file_write_iter+0x10/0x10
[  794.286742][T14309]  ? __pfx_vfs_write+0x10/0x10
[  794.291601][T14309]  ? __fget_files+0x40/0x3a0
[  794.296174][T14309]  ksys_write+0x207/0x250
[  794.300482][T14309]  ? __pfx_ksys_write+0x10/0x10
[  794.305313][T14309]  do_syscall_64+0xcd/0x250
[  794.309450][T11688] usb 10-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  794.309797][T14309]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  794.319469][T11688] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  794.325196][T14309] RIP: 0033:0x7fe200d85d29
[  794.337733][T14309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  794.357349][T14309] RSP: 002b:00007fe201aef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  794.365936][T14309] RAX: ffffffffffffffda RBX: 00007fe200f75fa0 RCX: 00007fe200d85d29
[  794.374009][T14309] RDX: 0000000000000050 RSI: 0000000020000e80 RDI: 0000000000000005
[  794.381992][T14309] RBP: 00007fe201aef090 R08: 0000000000000000 R09: 0000000000000000
[  794.390042][T14309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  794.398014][T14309] R13: 0000000000000000 R14: 00007fe200f75fa0 R15: 00007fff16146d08
[  794.399325][   T53] Bluetooth: hci3: command 0x0406 tx timeout
[  794.405985][T14309]  </TASK>
[  794.405994][T14309] Modules linked in:
[  794.406044][    C1] vkms_vblank_simulate: vblank timer overrun
[  794.426325][T14309] ---[ end trace 0000000000000000 ]---
[  794.432157][T11688] usb 10-1: Product: syz
[  794.432177][T11688] usb 10-1: Manufacturer: syz
[  794.432192][T11688] usb 10-1: SerialNumber: syz
[  794.435884][T11688] usb 10-1: config 0 descriptor??
[  794.463427][T14309] RIP: 0010:iov_iter_revert+0x533/0x5a0
[  794.486658][T14309] Code: 89 e6 48 c7 c7 a0 b6 d0 8e e8 99 e3 31 00 e9 b1 fd ff ff e8 cf da 5e fd eb 95 e8 f8 da 5e fd e9 46 fb ff ff e8 ee 2e fc fc 90 <0f> 0b 48 8b 3c 24 e8 e2 da 5e fd e9 97 fb ff ff 48 8b 7c 24 08 e8
[  794.507646][T14309] RSP: 0018:ffffc9000dd5f958 EFLAGS: 00010293
[  794.514751][T14309] RAX: 0000000000000000 RBX: 0000000000000050 RCX: ffffffff849de320
[  794.516556][T11688] i2c-tiny-usb 10-1:0.0: version 6d.cc found at bus 010 address 006
[  794.523446][T14309] RDX: ffff8880733a4880 RSI: ffffffff849de732 RDI: 0000000000000001
[  794.539267][T14309] RBP: ffffc9000dd5fd98 R08: 0000000000000001 R09: 0000000000000000
[  794.547624][T14309] R10: 0000000000000000 R11: ffffffff81fc8fc3 R12: 0000000000000000
[  794.556993][T14309] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff88807e3f1200
[  794.609914][   T53] Bluetooth: hci5: command 0x0c1a tx timeout
[  794.636532][T14309] FS:  00007fe201aef6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[  794.646130][T14309] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  794.653278][T14309] CR2: 000055b1182cb068 CR3: 00000000482d6000 CR4: 00000000003526f0
[  794.680109][T14309] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  794.689640][T14309] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  794.697876][T14309] Kernel panic - not syncing: Fatal exception
[  794.704070][T14309] Kernel Offset: disabled
[  794.708377][T14309] Rebooting in 86400 seconds..