last executing test programs:

12m33.020197747s ago: executing program 3 (id=712):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8180, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b0400000000000000000200000024000480200001800700010063"], 0x78}}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000})
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

12m31.996718079s ago: executing program 3 (id=726):
sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x8})
r0 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl(r0, 0x8b32, &(0x7f0000000040))

12m31.735937723s ago: executing program 3 (id=731):
r0 = socket$inet6(0xa, 0x3, 0x7)
sendmmsg$alg(r0, &(0x7f00000010c0)=[{0x20000000, 0xff00, 0x0, 0x0, &(0x7f0000000300)=[@op={0x18, 0x29, 0x37, 0x1}], 0x18, 0x20004084}], 0x1, 0x2004c8d4)

12m31.579798099s ago: executing program 3 (id=735):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
dup(0xffffffffffffffff)
dup(r0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
socket(0x1000000010, 0x80002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x20040000)

12m31.35588228s ago: executing program 3 (id=738):
mkdir(&(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x60c2, 0x0)

12m31.228553689s ago: executing program 3 (id=740):
syz_usb_connect(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e4001020303090224002af62300000904000002ca744d0009053f034d00ff99090805848f"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r0, 0xffffffffffffffff, 0x0)

12m31.005256538s ago: executing program 0 (id=743):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="01000002000000000000450000200e0001006e657464657673696d0e00000f0002006e657464657673696d30000008008e000000000068d9"], 0x3c}}, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

12m30.572874555s ago: executing program 0 (id=745):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x110000})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000001840)="f3470fbc06c74424000600007848b800280000000000000f23c00f21f835030004000f23f8c7442406000000000f0114246aa2450f0012124424001afa0000c744240216383d27c7442406000000000f011c2466b8f0000f00d0400f060f00e4c4a1c1edba2500000066baa00066b8000066ef66b82f008ed0", 0x79}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

12m30.571181669s ago: executing program 0 (id=748):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b06736f20f2b0766ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3e}], 0x1, 0x39, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x4}, {0x0, 0x8000, 0x0, 0x0, 0xfe}, {0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x4}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2004cb, 0x200000000000, 0x0, 0x0, 0xfffffffffffffffd], 0x0, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

12m30.367937067s ago: executing program 0 (id=753):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x105090, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0)
stat(&(0x7f0000000140)='./file0/../file0/../file0/file0\x00', 0x0)

12m30.30263891s ago: executing program 0 (id=756):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
ioctl$BLKRRPART(r1, 0x125f, 0x0)

12m29.911785225s ago: executing program 0 (id=762):
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0xfffffffe}, &(0x7f0000000240)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='\a'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TEE)
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

12m29.693166731s ago: executing program 32 (id=762):
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0xfffffffe}, &(0x7f0000000240)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='\a'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TEE)
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

12m16.15693403s ago: executing program 33 (id=740):
syz_usb_connect(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e4001020303090224002af62300000904000002ca744d0009053f034d00ff99090805848f"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r0, 0xffffffffffffffff, 0x0)

8m0.273839228s ago: executing program 1 (id=2144):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0xfffffffe, 0x83c, 0x0, &(0x7f0000000340)})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f00000004c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0)
r4 = openat$cgroup_procs(r2, &(0x7f0000000780)='cgroup.procs\x00', 0x2, 0x0)
sendfile(r4, r3, 0x0, 0x7)
socket$key(0xf, 0x3, 0x2)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="02010000080000000040000000000000030079060000000002002000ac141400000000000000000003000600000000000200f9ffac14142000000000000000002ce3e1b65c629ff53897f62c15e8101f933f75989901f9d38f41b3dccc438b2a127135012b7a30256724bd09b766f0f950cb240c935e6f36d00299214953a2c9b33ff735126565572c04afadee5b13aa728247c7e790555d1af152bdbc2e7dd9f7ac5bd893c44a441330d4f33c79812049709590cd4f18527725b93ad8740c72a75d82bbdc5c60c4333e0365a4c385ed7cb40acd460fad504ec8269924c573addf3f91da2ff492", @ANYRES16=r0], 0x40}}, 0x0)
ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x20000000000000})
socket$inet(0x2, 0x2, 0xfffffffd)
syz_open_dev$tty1(0xc, 0x4, 0x1)
close(0xffffffffffffffff)
socket$kcm(0x10, 0x2, 0x10)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000300), 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x3fe455fe)
syz_open_dev$MSR(0x0, 0x0, 0x0)
r6 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r7 = dup(r6)
ioctl$TCSETAF(r7, 0x5408, 0x0)
ioctl$TIOCSTI(r7, 0x5412, 0x0)
r8 = socket(0x1d, 0x2, 0x6)
getsockopt$nfc_llcp(r8, 0x6a, 0x5, 0x0, 0x20000071)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SNDCTL_TMR_SELECT(0xffffffffffffffff, 0x40045408)

7m58.639468142s ago: executing program 1 (id=2149):
syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x63b68075be6b28cb)
syz_open_dev$dri(&(0x7f00000000c0), 0x1fe, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$igmp(0x2, 0x3, 0x2)
openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
keyctl$describe(0x6, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_tables_matches\x00')
preadv(r3, &(0x7f0000000200), 0x0, 0x40fb, 0x9)
rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8)
r4 = gettid()
timer_create(0x2, &(0x7f0000000180)={0x0, 0x1e, 0x4, @tid=r4}, &(0x7f00000000c0))
timer_settime(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffffe]}, 0x8, 0x0)
syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x8380, 0x1850, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xec, 0x0, 0x2, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x2, 0xb8, {0x9, 0x21, 0x400, 0x0, 0x1, {0x22, 0x8d9}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xcc, 0x9, 0xd}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x200, 0x81, 0xd, 0x4, 0x8, 0x4}, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="050f0fde011b1003020e0009010100bfc8181e18b030518bcbc6ac15f35f0706d6773b2c09165e98ae9ef648469031d28a0ef6007c92cc443624bf5bd6740edebe33d079c590f481ea8a4256367adb3786eb8cd840b1f056f7db8a620b213d5cda1c06bfec3ca5a90e362842fb93966edae7"], 0x3, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x41f}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x4c0a}}]})
readv(r5, &(0x7f0000000000)=[{&(0x7f0000002480)=""/231, 0xe7}], 0x1)

7m55.249097013s ago: executing program 1 (id=2164):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101140, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$phonet_pipe(0x23, 0x5, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x7)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x2a, 0x2, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000003480)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[<r1=>0x0], 0x1})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = socket$phonet_pipe(0x23, 0x5, 0x2)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r2}, 0x20)
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040)})

7m54.039927415s ago: executing program 1 (id=2166):
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3f9, 0x3b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c051}, 0x20000010)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000140)=0x2)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x80, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2dc8a05d415dffea1d6e14054b9d117f928e07c9c35808a8"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d28ee8702f054a96f5fd9efbac27c204da519b19bd2f0e7b"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1cdab32c5c2248073bc6026cdc8e676d3ebf43265664b200"}]]}, 0x80}, 0x1, 0x0, 0x0, 0x40dc}, 0x8000)
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000002c0)=0x100000)
ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0)
connect$rxrpc(r0, &(0x7f0000000300)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @private=0xa010102}}, 0x24)
r2 = syz_open_dev$evdev(&(0x7f0000000340), 0x5, 0x10200)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000001480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001440)={&(0x7f00000003c0)={0x1060, 0x1, 0x5, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [{{0x254, 0x1, {{0x0, 0x6}, 0xfe, 0x2, 0x8, 0x9, 0xe, 'syz1\x00', "828ed6f461b8d753959c87c7b7a59b3d59721b077fde5e27b68a4c2131c0ccaa", "2848b2c387707bad770c88bf2c515ca9cf43efb5b486191f98b03f94e0440e2a", [{0x6, 0x0, {0x0, 0x7}}, {0x2c0, 0x100, {0x2, 0xffffffff}}, {0x8, 0x2, {0x1, 0xfc}}, {0xe, 0x6, {0x3eab6a339358bdf0, 0x7}}, {0x1000, 0x1, {0x1, 0xb40}}, {0x7, 0x1f7d, {0x1, 0x7}}, {0x7ff, 0x8, {0x3, 0x6df}}, {0x6, 0x5b, {0x0, 0x9}}, {0xb, 0x0, {0x2, 0x8}}, {0x776, 0x7, {0x2, 0x2}}, {0x10, 0x6, {0x3, 0x6}}, {0x8, 0x2, {0x2, 0x1}}, {0xc, 0x40}, {0x9, 0x1, {0x3, 0x9}}, {0xe, 0x0, {0x2, 0x9}}, {0x0, 0x145, {0x2, 0x980e}}, {0x3, 0x5, {0x1, 0x10000}}, {0x270f, 0x4, {0x3, 0x81}}, {0xee8, 0x6, {0x2, 0x200}}, {0x1ff, 0xfff9, {0x2, 0x9}}, {0xffc0, 0x7, {0x2, 0x5}}, {0x7, 0x5, {0x0, 0x3ff}}, {0x82a, 0xffff, {0x2, 0x1}}, {0x9, 0x0, {0x1, 0xffffff81}}, {0x4, 0x3a, {0x3, 0x4c4}}, {0x200, 0x3, {0x2, 0x4}}, {0xfff, 0xffff, {0x2}}, {0x3, 0x9, {0x2, 0xff}}, {0x8, 0x9, {0x1, 0x80000001}}, {0x0, 0x800, {0x3, 0x6}}, {0x7fff, 0x2, {0x3, 0x3}}, {0x7, 0x3, {0x0, 0x3}}, {0x0, 0x4, {0x1, 0x5}}, {0xc, 0x8294, {0x0, 0x4}}, {0x1, 0x1, {0x1, 0x3}}, {0x4, 0x6, {0x0, 0x5}}, {0x5, 0x3, {0x2, 0x2}}, {0x1, 0x7, {0x3, 0x401}}, {0x40, 0x7ff, {0x2, 0x3}}, {0x10, 0xf, {0x2, 0x7}}]}}}, {{0x254, 0x1, {{0x1, 0x2e54}, 0x1, 0xe, 0x2, 0xff, 0x17, 'syz1\x00', "f7819315535f9ce5e6f784f2130d61e7d67ad03aa8bb78248ff0e0488dc368e0", "302c6ff219339b615447963e0d021b8020a8f46647af03e5e1e4ea304212683f", [{0x6, 0x101, {0x0, 0x94}}, {0x5, 0x0, {0x2, 0xff}}, {0x9, 0x9, {0x0, 0x4}}, {0x5, 0x0, {0x0, 0x2}}, {0x40, 0xe, {0x2, 0x80000001}}, {0x0, 0x400, {0x3, 0xb}}, {0x1, 0x100, {0x0, 0x9}}, {0x4, 0x3, {0x2, 0xffffffff}}, {0x79f5, 0xc, {0x1, 0xbf18f75}}, {0x616, 0x8f66, {0x3, 0x7fff}}, {0x2, 0x0, {0x1, 0x5}}, {0x1, 0x9, {0x3, 0xffff}}, {0xb, 0x7, {0x0, 0x9}}, {0x8, 0x9, {0x2, 0x1000}}, {0x3, 0x6, {0x2, 0xd}}, {0xa5, 0x23, {0x3, 0x16d}}, {0xa, 0x9b, {0x2, 0xfffffff2}}, {0x8, 0x6, {0x5, 0x1}}, {0xe, 0x0, {0x3, 0xab3}}, {0x2, 0x4, {0x1, 0x1}}, {0x2, 0x1ff, {0x2, 0x6179}}, {0x3, 0xffff, {0x1, 0x377}}, {0x2, 0xf24, {0x1, 0x4}}, {0x9, 0x101, {0x0, 0xd}}, {0x400, 0x0, {0x1}}, {0x174, 0x9, {0x3, 0x3}}, {0x2, 0x2, {0x1, 0x4}}, {0x0, 0x4, {0x1, 0x3}}, {0x0, 0x7ff, {0x0, 0x7}}, {0x4, 0x2, {0x1, 0x4}}, {0x4, 0xa, {0x2}}, {0x3, 0x2, {0x3, 0x9}}, {0x1, 0x8, {0x0, 0x1}}, {0x0, 0x4, {0x1, 0x8}}, {0x6, 0x4f3, {0x0, 0x2}}, {0x9, 0xfffa, {0x3, 0x200}}, {0xf5, 0x1, {0x3, 0x2}}, {0x6, 0xb9b, {0x1, 0x1}}, {0x2, 0x7}, {0x8001, 0x3, {0x0, 0x9}}]}}}, {{0x254, 0x1, {{0x1, 0x44}, 0x1, 0x0, 0x8, 0x8, 0x25, 'syz1\x00', "5fb17ead2ee22e43d6e18c6ee16f3d149bc1a0923e2ea220aebbb92d3f932f1c", "b4f1e9bac24a8e02aae73b1bab1bcdaa45679b39c5afa72c84e7e04402f0b83a", [{0xec, 0x7, {0x0, 0x2}}, {0x42b, 0x2, {0x2, 0x6c0}}, {0x48bf, 0xd7a, {0x3}}, {0x4d0, 0x2, {0x3, 0x5}}, {0x3, 0x2, {0x0, 0x9}}, {0xe, 0x7, {0x1, 0x1}}, {0x400, 0xd4a, {0x2, 0x1800}}, {0x9, 0x0, {0x1, 0xf8f}}, {0x7, 0x9, {0x2, 0x101}}, {0x2, 0x58f0, {0x3, 0x3}}, {0x2, 0x0, {0x2, 0x2}}, {0x81, 0x8000, {0x2, 0x4}}, {0x1, 0x60, {0x0, 0xf}}, {0x7, 0x22, {0x2}}, {0x8000, 0xff00, {0x3, 0xd}}, {0xe70, 0x4, {0x2, 0x7}}, {0x5, 0x401, {0x1}}, {0x67b7, 0x8, {0x0, 0xf}}, {0xe52, 0x8, {0x0, 0x1ff}}, {0x5, 0xfffd, {0x0, 0x5}}, {0x1, 0xff81, {0x1, 0x9}}, {0x1ff, 0x11, {0x3, 0xbe2e}}, {0xc, 0x7, {0x0, 0x5}}, {0x6, 0x7, {0x1, 0x3}}, {0x2, 0xd}, {0x2, 0x100, {0x3, 0x6}}, {0x7, 0x3, {0x3, 0x6}}, {0xc00, 0x7, {0x0, 0x6}}, {0x2160, 0x6, {0x0, 0x1}}, {0x4, 0x2, {0x2, 0x100}}, {0x195, 0x2, {0x3, 0x3ff}}, {0x5, 0x4, {0x1, 0x6}}, {0x1, 0x3, {0x1, 0x2}}, {0x7, 0x9, {0x0, 0xc0}}, {0x400, 0x6, {0x1}}, {0x0, 0x2, {0x0, 0x8}}, {0x4, 0x1, {0x1}}, {0x8001, 0x8, {0x1, 0x5}}, {0x81, 0x9, {0x3, 0x3d}}, {0x100, 0x7, {0x0, 0x8}}]}}}, {{0x254, 0x1, {{0x1}, 0x1, 0x8, 0xe, 0x9, 0xf, 'syz0\x00', "b086923512db0890f1e18318c88ffea6f47f05657a28e201b09c307cdbd88c6b", "ee47d5422625d94d305c72551262f5d10de223b9166f85c9e34c0fc555266e40", [{0x3, 0x400, {0x1, 0x1}}, {0x7, 0x13, {0x3, 0x9}}, {0x4, 0x8797, {0x3, 0x80000001}}, {0x9, 0x9, {0x1, 0x9}}, {0x5, 0x8000, {0x0, 0x34}}, {0x3ff, 0x7, {0x2, 0xe}}, {0xff, 0x0, {0x0, 0x4}}, {0x5, 0xffff, {0x2, 0x80}}, {0x24, 0x8, {0x0, 0xe000000}}, {0x8000, 0x0, {0x0, 0xc70}}, {0x3, 0xb8, {0x2, 0x4}}, {0x2f, 0xa, {0x3, 0x4}}, {0x3, 0x7f, {0x2, 0xc}}, {0x3, 0x1, {0x0, 0x9}}, {0x7, 0x3, {0x0, 0x8}}, {0x7, 0x101, {0x0, 0x81}}, {0x9, 0x5, {0x1, 0x6}}, {0x101, 0xf, {0x3, 0x1ff}}, {0x1, 0x3, {0x2, 0x40000000}}, {0x8, 0x300, {0x3, 0x3}}, {0x101, 0x8001, {0x2, 0x9}}, {0x2, 0xa9, {0x0, 0x400000}}, {0x6, 0x3, {0x3, 0x2}}, {0x7, 0x0, {0x3, 0x6}}, {0x21c, 0x8, {0x0, 0x4}}, {0x0, 0x1, {0x2, 0xd}}, {0x8001, 0x9, {0x3, 0x64}}, {0x9, 0x7, {0x2, 0x1}}, {0x3, 0x4, {0x0, 0x8}}, {0x1, 0x0, {0x2, 0x9}}, {0x1, 0x5, {0x2, 0x411}}, {0x6, 0x8001, {0x3}}, {0x4, 0x40, {0x0, 0x3}}, {0x3fb4, 0x200, {0x0, 0x2}}, {0xaf, 0x6, {0x3, 0xfff}}, {0x3, 0xea6, {0x0, 0x4}}, {0x1000, 0x7d4f, {0x0, 0x2}}, {0x5, 0x8, {0x1, 0x2}}, {0x9, 0x1, {0x2, 0x4}}, {0x80, 0x8, {0x3, 0x2}}]}}}, {{0x254, 0x1, {{0x2, 0x3}, 0xd5, 0x7, 0xb, 0x3, 0x13, 'syz0\x00', "13a5e880ed52041935856929dc542a7a58e88d66fa5146bc2c9973d7a65af294", "983241435b482bd52960eaac0c01fbd456681273caef0b00aa8ef6104e06439a", [{0x8001, 0x39, {0x2, 0x3ff}}, {0x9, 0x67f9, {0x3, 0x5}}, {0x9, 0x6, {0x2, 0x5}}, {0x7, 0x5, {0x3}}, {0x2, 0x4, {0x3, 0x3}}, {0xa596, 0x82df, {0x1, 0x40000000}}, {0x75, 0x6, {0x3, 0x8}}, {0x1, 0x6e3, {0x3, 0x1}}, {0x0, 0x3, {0x1, 0xe}}, {0xffff, 0x8, {0x0, 0x6}}, {0x9, 0x8001, {0x2, 0x4}}, {0x4, 0x7, {0x3, 0x7}}, {0xfffe, 0xa957, {0x3, 0x40}}, {0x84, 0x97c, {0x1, 0x4}}, {0x46, 0x4, {0x2, 0x7fffffff}}, {0x2, 0x7, {0x0, 0x7}}, {0x1, 0x8001, {0x0, 0x9}}, {0x1, 0x9, {0x0, 0x83}}, {0xc, 0x6, {0x3, 0x9}}, {0x9, 0x288, {0x1, 0x6}}, {0x2b5, 0x40, {0x1fc6cddde8c3ce7c, 0xffffffff}}, {0x1, 0x1, {0x2, 0x7f}}, {0xa07, 0x6, {0x1, 0x8}}, {0x10, 0x5, {0x1, 0x3}}, {0xf, 0x3, {0x3, 0x2}}, {0xf7, 0x4, {0x0, 0x400}}, {0x2, 0x0, {0x1, 0x100}}, {0x45, 0x3, {0x2, 0x8}}, {0x9, 0x6, {0x3, 0x7}}, {0x1, 0xe74e, {0x3, 0xfffffff8}}, {0x200, 0x0, {0x1, 0x1ff}}, {0x64a, 0x90bf, {0x1, 0x6}}, {0x9dd1, 0x2, {0x1, 0x6}}, {0x7, 0x1, {0x0, 0xfffffffd}}, {0xf, 0x5, {0x3, 0x3ff}}, {0x466, 0x6, {0x1, 0x6}}, {0x6, 0x400, {0x0, 0x5}}, {0x3, 0x7ff, {0x2, 0xffffffff}}, {0x7, 0x0, {0x3, 0x9}}, {0xfa7, 0xffff, {0x0, 0x7}}]}}}, {{0x254, 0x1, {{0x3, 0x8001}, 0x8, 0x7c, 0xa0fc, 0x9, 0x11, 'syz0\x00', "9fb409ad35eb970da87a33ef2d48533149f267284b9be0ba2b4ed1de61a620cb", "ce70dec375feaf709002c94786a956c71e630d2de8812de318f9da0d3100ed6b", [{0x2, 0x1ff, {0x3, 0x9fd}}, {0x5, 0x80, {0x3, 0x80}}, {0x51, 0x6, {0x1, 0x4}}, {0x5, 0xfffc, {0x0, 0x2}}, {0x50f1, 0x3, {0x1, 0x3bc692de}}, {0x43, 0x1, {0x3, 0x4}}, {0x1, 0x4, {0x2, 0x4}}, {0x7, 0x6da3, {0x1, 0xfffffc00}}, {0x8, 0x4, {0x3, 0x8}}, {0x2, 0x1, {0x0, 0x7}}, {0x8, 0x9, {0x2, 0x81}}, {0x400, 0x1, {0x2, 0x401}}, {0xfff, 0x7, {0x0, 0x5}}, {0x0, 0x9, {0x0, 0x3}}, {0x0, 0x19, {0x2, 0x8}}, {0x7, 0x9, {0x3, 0x8}}, {0x7f, 0x5, {0x2, 0x1fc0}}, {0xaa, 0x8, {0x2, 0x7}}, {0x4, 0x1, {0x1, 0x1}}, {0x68e, 0x4, {0x3, 0x6}}, {0x3, 0x4000, {0x2, 0x3af7}}, {0x9, 0x1, {0x1, 0xb7}}, {0x401, 0x1, {0x0, 0x4}}, {0x2, 0x2000, {0x1, 0x7029bfcf}}, {0x70, 0xfff, {0x0, 0x7}}, {0xff, 0x4, {0x3, 0x101}}, {0x4, 0x4, {0x2, 0x3}}, {0x2, 0x4, {0x0, 0x80000001}}, {0x6389, 0x7fff, {0x2}}, {0x1, 0x87e8, {0x3, 0x400}}, {0x9, 0xf874, {0x1, 0x8}}, {0x5, 0x3, {0x0, 0xa43}}, {0x5, 0xb1, {0x1, 0x401}}, {0x1ff, 0xfff, {0x2, 0x9}}, {0x9, 0x7, {0x3, 0x263d}}, {0x2, 0x6, {0x1, 0x9}}, {0x6, 0x800, {0x2, 0x10}}, {0x8, 0x8000, {0x3, 0x8}}, {0xf, 0x1, {0x2, 0x5}}, {0x9, 0x5, {0x1, 0x7fffffff}}]}}}, {{0x254, 0x1, {{0x2, 0x7fff}, 0x0, 0x97, 0x49c, 0x9, 0x1e, 'syz0\x00', "be31230407a262b9091977d354fb82632a783d142cac79d8502adca48828c9c8", "53e8c8933f7560f50dbb9a5a9d7016694e83f4eefa5dccb0f79f3839cdb606f3", [{0x1, 0x25, {0x0, 0x80000001}}, {0x7f, 0x8, {0x1, 0x4}}, {0x40, 0x400, {0x2, 0x1}}, {0x34, 0x3, {0x3, 0x15}}, {0x101, 0xb, {0x0, 0xc2}}, {0x0, 0xfe01, {0x0, 0x6}}, {0x7, 0x9, {0x3, 0x658}}, {0xe36, 0x3, {0x3, 0x3db}}, {0x3, 0x7fff, {0x0, 0xfffffff8}}, {0xf3f, 0x800, {0x1, 0x6a}}, {0x1, 0x3, {0x3, 0x1000}}, {0x2, 0x1, {0x2, 0x2}}, {0x3, 0x12b, {0x2, 0x10001}}, {0xf5, 0x4, {0x1, 0x1000}}, {0xc000, 0x2, {0x0, 0x9}}, {0x6, 0xaa8, {0x3, 0x2aa6}}, {0xfffc, 0x9e0, {0x0, 0xffffffff}}, {0x101, 0x5, {0x0, 0x9790e59}}, {0x8, 0x0, {0x3, 0x6}}, {0x6c, 0x6026, {0x0, 0x10}}, {0x21, 0x9, {0x3, 0xa3}}, {0xffff, 0x5, {0x3, 0x3}}, {0x5, 0x7, {0x0, 0x5}}, {0x0, 0x2, {0x1, 0x1}}, {0x50, 0x5, {0x1, 0x100}}, {0x3, 0x0, {0x1, 0x9}}, {0x5, 0xffff, {0x0, 0x5}}, {0xd27e, 0x0, {0x3, 0xfffffffb}}, {0x2, 0x8, {0x0, 0xffffffff}}, {0x0, 0x9, {0x2, 0x8001}}, {0x1, 0xffff, {0x0, 0x8}}, {0x6b, 0x3, {0x0, 0x9}}, {0x5, 0x6e, {0x3, 0x80000001}}, {0x6, 0x8, {0x9a093ea00c61e563, 0x8}}, {0xdc40, 0x4, {0x1, 0x3}}, {0x9, 0x5, {0x3, 0x2}}, {0x5, 0x9, {0xaee7dc0aba6926d4, 0x6}}, {0x4, 0x8, {0x3, 0x400}}, {0x5, 0x1, {0x0, 0x8}}, {0x0, 0x8000, {0x1, 0x8}}]}}}]}, 0x1060}, 0x1, 0x0, 0x0, 0x20000010}, 0x8085)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001500)={&(0x7f00000014c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x800, 0x0, <r4=>0xffffffffffffffff})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000001640)={0x2c, 0x0, &(0x7f0000001540)=[@clear_death, @increfs_done, @increfs={0x40046304, 0x1}], 0xc0, 0x0, &(0x7f0000001580)="7ba11994b9f134830e294918e69a40dd2855d022d173c0f8965c450f189e631c5ccdaaeee527a0a70728def0d82ddb2b957fe0a7aa50c04c736c12987fd8b5d86880d75db2ed4e6a8a9018b1b22830a594700062c451c0539e605ddea58ed8544e140a10876fda82236bc1c969a00c246062cbfd1151d28a40dfcc32adb313177e9f73d16ea88b407335ea5d71ac4a4ab09ad69e1aff54a0f3b4b0e5a9bed8ff4e71a02645b34ba2a8f24a5778cd94cbbfbf8f7b0a0561b065e5170508c88692"})
syz_genetlink_get_family_id$nl80211(&(0x7f0000001680), r4)
poll(&(0x7f00000016c0)=[{r2, 0x24}, {r0, 0x20}, {r2}, {r0, 0x8482}, {r3, 0x2000}, {r2, 0x2000}, {r4, 0x2400}], 0x7, 0x80000000)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r4, 0x7a4, &(0x7f0000001700)={{@my=0x1, 0x10000}, 0x4, 0x7, 0xf3, 0x8001})
bind$inet6(r4, &(0x7f0000001740)={0xa, 0x4e21, 0x1, @private2}, 0x1c)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$tipc2(&(0x7f0000001780), r0)
add_key$keyring(&(0x7f00000017c0), &(0x7f0000001800)={'syz', 0x3}, 0x0, 0x0, 0x0)
open(&(0x7f0000001840)='./file0\x00', 0x30000, 0x7)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000019c0)={0x18, 0x0, &(0x7f0000001880)=[@enter_looper, @increfs_done], 0xf3, 0x0, &(0x7f00000018c0)="f37ea0024c47b967aeb2440e06910cc213d620b638fb5e96b720ca77f31181535afcceb9f90b0786b245441bb2489b52663fbdaa48de9773c11c241b33800b6b5a7e7b2c2a2d623cadf8222272647bae22d098a1947d6e18b7adc8c409b2f33cfe5c043fed77d7ce86121299b80729e2c97751b4040ed225cce6217c04f474b66229672a4e0395034cb56af2c8e8cd5f093b4227aa2502157486592788a4e561c806e4d640f610c146344dc587cf788337071bc54a21a13423f33921d89d37d78dde97278d67f0b1f724d0a0623ef174eb94a51d37c2f1725014df6103f2537d3ec1055286f08d898b5b6b09a1e2f0e5812ee1"})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000001a00)={0x7ccb8a9e, 0x1, 0x1, "bc95f9b6876cfebdfdd4151a9b03cbaad2c96385b9cb9701bd4aa5cb182db257", 0x31435641})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001a40), r5)
r6 = io_uring_setup(0x383b, &(0x7f0000001a80)={0x0, 0x76ff, 0x20, 0x3, 0x212, 0x0, r0})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x810, r6, 0x0)
r7 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000001b00), 0x4001, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000001c40)={&(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001b80)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001bc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x4, 0x8, 0x6})
syz_open_procfs$namespace(0x0, &(0x7f0000001c80)='ns/user\x00')

7m52.951919491s ago: executing program 1 (id=2172):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x53, &(0x7f0000000080)=[{0x0}, {&(0x7f00000002c0)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200f7c2256fd4b2c587d7bc4e5c9f93bbb5acf038084947c0ab78f3ff849ba4d69ec470c98173f6509fe73ec4767ce98c2a9a64653c459fdf5da594445fcffb7f1f99121b01007a572e9056ed5c1699d09924b324e7c38e0f0ea0e2688e5ca2ab4871a561c689ff670e0c53ddc582ed6567a04fa3c79ec445a2097a286243619b6cfaa300293959be5db421b79ee384f6260a646581e4e7cc8b5f30c846510313ed5584d66a4bcc1c371c49ae9a3032a3860924f22339c2e8d0670456273c3f846dca09a94bf70a64a5b545d017b1b20880047fc402dfb7053ce26fed5a7c", 0xfffffffffffffe75}], 0x2, 0x0, 0xfffffffffffffefe}, 0x80d0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
mkdir(&(0x7f00000006c0)='./file1\x00', 0x14)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r1, 0x6, 0x5, &(0x7f0000000180)=0x1, 0x4)
getsockopt$inet6_tcp_int(r1, 0x6, 0x5, 0x0, &(0x7f0000000040))
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
r3 = getgid()
getresuid(&(0x7f0000000340), &(0x7f00000003c0)=<r4=>0x0, &(0x7f0000000480))
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000004c0)=<r5=>0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0xa000c0, &(0x7f0000000500)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@allow_other}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '![@}/\\&$#\\'}}, {@seclabel}, {@permit_directio}, {@smackfsroot={'smackfsroot', 0x3d, 'autofs\x00'}}, {@fowner_eq={'fowner', 0x3d, r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\x95#^(q):{:^^'}}, {@euid_lt={'euid<', r5}}, {@smackfshat={'smackfshat', 0x3d, 'autofs\x00'}}, {@seclabel}]}})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000100)={0x4, <r8=>0xffffffffffffffff})
ioctl$KVM_HAS_DEVICE_ATTR(r8, 0x4018aee3, &(0x7f0000000080)=@attr_arm64={0x0, 0x0, 0x0, 0x0})
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
r9 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={0x88800, 0x182, 0x3e}, 0x18)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r10=>0xffffffffffffffff, {0xffffffffffffffff, 0xee01}}, './file0\x00'})
linkat(r9, &(0x7f0000000180)='./file0/file0\x00', r10, &(0x7f0000000680)='./file0\x00', 0x1000)
open(&(0x7f00000000c0)='./file0\x00', 0x60c2, 0x0)

7m51.935975883s ago: executing program 1 (id=2176):
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000003880)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
writev(r1, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)=[0xfff], 0x0, 0x0, 0x1, 0x1}}, 0x40)
r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r2, 0x0)

7m35.74493111s ago: executing program 34 (id=2176):
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000003880)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
writev(r1, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)=[0xfff], 0x0, 0x0, 0x1, 0x1}}, 0x40)
r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r2, 0x0)

3m3.793335268s ago: executing program 4 (id=3114):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000380)={{0x12, 0x1, 0x310, 0x7e, 0xdf, 0xf1, 0x10, 0x4e8, 0x6889, 0x93dd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6a, 0xbf, 0xd0, 0x6, [{{0x9, 0x4, 0x8, 0x1, 0x0, 0xff, 0x3, 0x6b, 0x93}}]}}]}}, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)={0x40, 0x1e, 0xa, "306537c3acdf84feeb2a"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000001c0)={0x20, 0x81, 0x2, "ca0c"}, &(0x7f0000000200)={0x20, 0x82, 0x1, "f0"}, &(0x7f0000000240)={0x20, 0x83, 0x2, "e1d0"}, &(0x7f0000000280)={0x20, 0x84, 0x1, '\''}, &(0x7f00000002c0)={0x20, 0x85, 0x3, "de9d8e"}})
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000700)={0x14, &(0x7f0000000600)={0x40, 0x11, 0xb9, {0xb9, 0x5, "2799003100f910c012ccdf87e7336f70908c35133620e00adf7fd3899cd8a07d4750ed10364a1ac990ee9d7def7e11f91b87395a4398eb879f7adcd88bbd7830c63bc2d3e7395ee83c190e6b29ad5ca953f0c58d0a2fa5d5e78ad998c30d9b3ae45087dcaf4a834ff58c6d268ef9ab350401d917f1f8dd2445982ed9be2c26ff2f40918f4be115e9e274f8124735220de55b5b82a201e56f78d70cc2a8f18fd8e0c504adf905cbdece84076deaf1876205fd7553f28fb7"}}, &(0x7f00000006c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000980)={0x44, &(0x7f0000000740)={0x20, 0x14, 0x6f, "69e60018a1cd3f79f3aa770e5254cc7f06919ea0fe6d96957587ab41ab79c5c1a15d1e4ddc840600e05596846eaa04331df03b9041b3581abb733c15482a95cb4899f14e1fda5b7bd840da5fd61fc75b3f99586339b99eeb2ee287ffa10f970605e234bb39ad7b0d2f2473e535336e"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000840)={0x20, 0x80, 0x1c, {0x3ff, 0x9, 0x1, 0x2, 0x2b, 0x80, 0xe, 0x0, 0xc, 0x1, 0x1, 0x7ba}}, &(0x7f0000000880)={0x20, 0x85, 0x4, 0x5}, &(0x7f00000008c0)={0x20, 0x83, 0x2}, &(0x7f0000000900)={0x20, 0x87, 0x2, 0x6}, &(0x7f0000000940)={0x20, 0x89, 0x2, 0x1}})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x8202, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
write$cgroup_subtree(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce226605000000f6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef0001000000002c"], 0x66)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000040)={0x14, &(0x7f0000000b00)={0x40, 0xb, 0xc9, {0xc9, 0x23, "6bac94824cbabc0aa14f015aaad26c9438b0be4f0da4825ca57ce460a1be5375d8780596f8f37203da6d52f76708c10468ab9b618da65c688eac41f16b2e2841b7efa5c53b9a6265f619d13e8ade1492d9af37a63bf78767fcac97ad3019693e14f7004471d90f7b6a193ef05465c2292f804e302f95e5ac2e7af8ba6829cc125d910183c221b4af52378623a17106c9a15c29cdca441b51831b28c7b25a11603848db2b9a7d7993f7306e7267e107226bacee43a1ec3ddb3f97f02a2d45dda33c07e29973d83e"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000d00)={0x1c, &(0x7f0000000c00)={0x20, 0x6, 0x60, "5b7ac37da8072bb5abfe10467b7a1d6417d12b260638c52aef6051a29f86912b8abb86fbeffa9d411381b5278bb32e5684b2ce6914a328a73ca97fb10c0ab3cf283ec20b82a598df187d71c856a1fadf4f58db7760ef2176e9e8e9402112f7e4"}, &(0x7f0000000c80)={0x0, 0xa, 0x1, 0x65}, &(0x7f0000000cc0)={0x0, 0x8, 0x1, 0x4}})
syz_usb_connect$printer(0x0, 0x36, &(0x7f00000003c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf7, 0x80, 0x1, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x7, 0x1, 0x1, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0xc9, 0x9}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x5, 0x2, 0x30}}]}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x201, 0x2, 0xa, 0x9, 0x8, 0x7f}, 0x3f, &(0x7f0000000440)={0x5, 0xf, 0x3f, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x1c, 0x5, 0x2, 0x101}, @wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0xe9, 0xb, 0x1, 0xf7}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "f68f0b2cefb7b9407b94a48d6a66562d"}, @ss_container_id={0x14, 0x10, 0x4, 0xa, "f4cf6798fd35f1ec9d52dd402d60859a"}]}, 0x3, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x1801}}, {0xb9, &(0x7f00000004c0)=@string={0xb9, 0x3, "cbd9810e5d472dec006104ff2607b45ffc1166ed5d90d489c9df16f99ff806d90adab16b9eb71c2840cb92a50c2c0df783ceeccf5c701b0ea7bdd1d54349d9ab13c42d7a9c19e597702f26efb67143d5bf559144b057948fa354400a1247b130abf46f9284da1db3dfa9024a37ba9b7d0ff7795408b73379c8cf58f139e641bd19290778eae24a672491cd9b37bf0b0ac5cb4ffcf86221f4a95a81528ad1655a3575ecebd59ae57d9137aea8ba4e5b158d7d698500d1f3"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x1604}}]})

2m59.089059116s ago: executing program 4 (id=3130):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x22002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = syz_open_dev$sndpcmp(&(0x7f0000002000), 0x5d5d, 0x0)
ioctl$SNDRV_PCM_IOCTL_REWIND(r3, 0x40084146, &(0x7f00000000c0)=0x4)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f00000004c0)=0x27)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000400)=@assoc_value={r4, 0x5}, 0x8)

2m57.346209028s ago: executing program 4 (id=3134):
syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x63b68075be6b28cb)
syz_open_dev$dri(&(0x7f00000000c0), 0x1fe, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$igmp(0x2, 0x3, 0x2)
openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
keyctl$describe(0x6, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000040)={@multicast1, @empty, @dev={0xac, 0x14, 0x14, 0x2e}}, 0xc)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_tables_matches\x00')
preadv(r4, &(0x7f0000000200), 0x0, 0x40fb, 0x9)
rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8)
r5 = gettid()
timer_create(0x2, &(0x7f0000000180)={0x0, 0x1e, 0x4, @tid=r5}, &(0x7f00000000c0))
timer_settime(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffffe]}, 0x8, 0x0)
syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x8380, 0x1850, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xec, 0x0, 0x2, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x2, 0xb8, {0x9, 0x21, 0x400, 0x0, 0x1, {0x22, 0x8d9}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xcc, 0x9, 0xd}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x200, 0x81, 0xd, 0x4, 0x8, 0x4}, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="050f0fde011b1003020e0009010100bfc8181e18b030518bcbc6ac15f35f0706d6773b2c09165e98ae9ef648469031d28a0ef6007c92cc443624bf5bd6740edebe33d079c590f481ea8a4256367adb3786eb8cd840b1f056f7db8a620b213d5cda1c06bfec3ca5a90e362842fb93966edae76d7e020e5fccdf12dd1ac8a04491f3821552f978815b0a4a3e6ab47ccdb2dbe4b5388652d8"], 0x3, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x41f}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x4c0a}}]})
readv(r6, &(0x7f0000000000)=[{&(0x7f0000002480)=""/231, 0xe7}], 0x1)

2m53.512228258s ago: executing program 4 (id=3146):
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000100)={'gre0\x00', <r2=>0x0, 0x1, 0x8, 0x401, 0x2, {{0xa, 0x4, 0x0, 0x12, 0x28, 0xfffa, 0x0, 0xa, 0x2f, 0x0, @rand_addr=0x64010101, @empty, {[@timestamp_addr={0x44, 0x14, 0x5c, 0x1, 0x7, [{@multicast1, 0xffff2490}, {@empty, 0x44cb59f9}]}]}}}}})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@delqdisc={0x288, 0x25, 0x20, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x9, 0xe}, {0xa, 0x4}, {0xc, 0x5}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8}, @TCA_CAKE_ACK_FILTER={0x8}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}, @TCA_STAB={0x120, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x2b, 0x4ecd, 0x3ff, 0x1, 0x2, 0x11b0, 0x2}}, {0x8, 0x2, [0x7ff, 0x7f]}}, {{0x1c, 0x1, {0x9, 0x9, 0x5, 0x8, 0x2, 0xffff, 0x100, 0x5}}, {0xe, 0x2, [0x7f, 0x5, 0x6, 0x8, 0x4]}}, {{0x1c, 0x1, {0x2, 0x9e, 0x9, 0x3ff, 0x0, 0x5, 0x80000000, 0x5}}, {0xe, 0x2, [0x10, 0x3, 0xdb, 0x10, 0xdace]}}, {{0x1c, 0x1, {0x9, 0x40, 0x1, 0x80, 0x0, 0xfd, 0x1, 0x1}}, {0x6, 0x2, [0x4]}}, {{0x1c, 0x1, {0x4, 0x40, 0x1, 0x10001, 0x2, 0x4, 0x1e1f, 0x4}}, {0xc, 0x2, [0x7, 0x4, 0x5, 0x7fff]}}, {{0x1c, 0x1, {0x7e, 0x3, 0x4, 0x6, 0x1, 0xfffffff7, 0x2, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x5, 0x9, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, 0x8}}, {0x14, 0x2, [0x6, 0x3, 0x3b1, 0x7, 0x2a, 0x1, 0x9, 0x4]}}]}, @qdisc_kind_options=@q_cbq={{0x8}, {0x4c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0xfd, '\x00', 0x90, 0x8, 0x1, 0x3}}, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x5, 0x9, 0x0, 0xfffffffc}}, @TCA_CBS_PARMS={0x18, 0x1, {0xff, '\x00', 0x5, 0x9, 0x1000, 0x9}}]}}, @qdisc_kind_options=@q_netem={{0xa}, {0x94, 0x2, {{0xfffffffb, 0x0, 0x6, 0xf, 0x2, 0x9}, [@TCA_NETEM_RATE64={0xc, 0x8, 0x5d3c201118a24448}, @TCA_NETEM_RATE={0x14, 0x6, {0x9, 0x9, 0xa464, 0x1}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_JITTER64={0xc, 0xb, 0xffffffffffffff79}, @TCA_NETEM_RATE64={0xc, 0x8, 0x446e5d3193f709a1}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x7f, 0x6, 0x8, 0x100, 0x1, 0x934b}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x7, 0x8}}]}}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0xff, 0x6, 0x1000, 0x2, 0xa5eb, 0x7, 0x1}}, {0x6, 0x2, [0x3]}}]}]}, 0x288}}, 0x0)
syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0)
r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x535, 0x200)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r3, 0x80dc5521, &(0x7f0000000180)=""/135)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x0, 0x10000, {0x5}}, 0x14}}, 0x0)

2m50.675607571s ago: executing program 4 (id=3155):
mkdir(&(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_timeval(r0, 0x1, 0xa, 0x0, &(0x7f0000000080))
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x60c2, 0x0)

2m50.180970608s ago: executing program 4 (id=3158):
sched_setaffinity(0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000180)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e120800060000000401a80016000900014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x5, &(0x7f0000000640)=0x6)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = open(&(0x7f00000000c0)='./bus\x00', 0x1e5842, 0x0)
r6 = open(&(0x7f0000000080)='./bus\x00', 0x14dcc1, 0x20)
ftruncate(r6, 0x2007ffd)
sendfile(r1, r5, 0x0, 0x1000a3)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r9 = dup(r8)
r10 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r11=>0x0}, &(0x7f00000000c0)=0xc)
mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@access_uid={'access', 0x3d, r11}}]}})
r12 = openat$cuse(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="7446000014000000fc090105000000000000002507000008"], 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000000)
write$FUSE_NOTIFY_INVAL_ENTRY(r12, &(0x7f0000000a80)=ANY=[@ANYBLOB="2200000003"], 0x22)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)

2m34.14097104s ago: executing program 35 (id=3158):
sched_setaffinity(0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000180)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e120800060000000401a80016000900014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x5, &(0x7f0000000640)=0x6)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = open(&(0x7f00000000c0)='./bus\x00', 0x1e5842, 0x0)
r6 = open(&(0x7f0000000080)='./bus\x00', 0x14dcc1, 0x20)
ftruncate(r6, 0x2007ffd)
sendfile(r1, r5, 0x0, 0x1000a3)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r9 = dup(r8)
r10 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r11=>0x0}, &(0x7f00000000c0)=0xc)
mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@access_uid={'access', 0x3d, r11}}]}})
r12 = openat$cuse(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="7446000014000000fc090105000000000000002507000008"], 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000000)
write$FUSE_NOTIFY_INVAL_ENTRY(r12, &(0x7f0000000a80)=ANY=[@ANYBLOB="2200000003"], 0x22)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)

2m30.136337354s ago: executing program 7 (id=3232):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x110000})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000001840)="f3470fbc06c74424000600007848b800280000000000000f23c00f21f835030004000f23f8c7442406000000000f0114246aa2450f0012124424001afa0000c744240216383d27c7442406000000000f011c2466b8f0000f00d0400f060f00e4c4a1c1edba2500000066baa00066b8000066ef66b82f008ed0", 0x79}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_XEN_HVM(r1, 0x4068aea3, &(0x7f0000000040)={0x26, 0x0, 0x3c})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2m29.80917942s ago: executing program 7 (id=3234):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f0000000440)="588df135cbfd6223b6f731b439dc96ab2a58e0cb683de9df3a0e6ce3604d1363b2def8d822aea18ee0e57bc792775f4364955edb3b4c7694191df90d34f234a06f63b1b964354521b1587d2f18df7ac9b5baaf5e829a3902cda5cd0381d15e6890919c61", 0x64, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x4, 0x0, 0x0, 0x88, 0x0, 0x0, 0x9}, 0xe)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn'])
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003340)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000280)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000e1ffffff000000070000008606000000000000"], 0x18}}], 0x2, 0x4000804)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
r4 = syz_open_dev$video4linux(0x0, 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_S_SELECTION(r4, 0xc040563e, 0x0)
write$selinux_create(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x928, 0x30, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc, {}, [{0x98, 0x1, [@m_csum={0x50, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x1}}}]}, {0x8, 0x6, "3e56b592"}, {0xc}, {0xc}}}, @m_nat={0x44, 0x3, 0x0, 0x0, {{0x8}, {0x4}, {0x1b, 0x6, "ebc778a7e30073c2d2bbdb6d95222cf1aa0b44a7866725"}, {0xc}, {0xc, 0x8, {0x4}}}}]}, {0x87c, 0x1, [@m_ct={0x11c, 0x14, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x8}]}, {0xea, 0x6, "fc68884eee9b36fc282549d760be58cd2e99201ceffafeee500b9a2612089a70413cfe163abee14f7268e01d9a2b96e250cc2b95278dae9b43b46ad886dc0b093787c462184f1f5892366a3ff49ff7775314dc95f5b2b397300ac4c3303afc902f875a2549c98ae4b4a6fa157aa0e02b1e1f8c666740d26ba8d6899801271d9594c3d29a1148c391cdfba8ca30f4c2962b2db71781d40bed43c7e5e5556afe6e08d8fac8e4c0bff9447c0c32c5c70a6195b600d6f02900952214d104d19828367e26d8a78a6f9a03aacf45bbe8bcf98dc6f710a1cd706dd7869348e5895cc2ed893968ee251d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_vlan={0x138, 0x1, 0x0, 0x0, {{0x9}, {0x6c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xeb8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x10000000, 0x7ff, 0x200}, 0x1}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x7e3}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xbd3}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x852, 0x8, 0x10000008, 0x80000001, 0x5}, 0x1}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xd5b}]}, {0xa3, 0x6, "05c9800841dac76db1c441cba2e49cc462295e66a0541624a6f812bd65d395b3cd0316947e01dc774769835b571767b2d651db762e55199d328610831cd44d514ce189d53c99d9fb12e86d7bf55ac945f01ed7d217bb60f1b2eb63716d06a9d066811ca89c81522a213858f7edcc4b03d498218194e308588c00afa522febe424b627973fd8c5af269be49ad1ef1be3baa80483b4de891e56136a87e0e9518"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ct={0xb4, 0x2, 0x0, 0x0, {{0x7}, {0x70, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private0}, @TCA_CT_ACTION={0x6}, @TCA_CT_ACTION={0x6, 0x3, 0x26}, @TCA_CT_LABELS_MASK={0x14, 0x8, "19fe5a1ce4fc12e5fd703521457d24d7"}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private0}, @TCA_CT_MARK_MASK={0x8, 0x6, 0xfc2d}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e23}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_ZONE={0x6, 0x4, 0xfffb}]}, {0x1e, 0x6, "8f28071d9c05ea6db3bf454e732d415806c55a5e04b6461ede21"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_xt={0x12c, 0x8, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_HOOK={0x8}]}, {0xd5, 0x6, "1d7b325c39191c512a0a9a37ee5796b6d6f1cded886803a12f81d0c32b3c98722e5efdd7cece24ec82baaeb954e2e81253810305724cd824a5450f317e445ebb532b487f3a3fa45b8a58d7d88d6eabd3e3ffd6e7a3173b59d4fc8f0f274bb6e7c460631030805d050233508e6fc5d95381270bcbd15f1c1da83f8b0c7b856c1a99d22c38135ea07f421a025f9bffdfe2e3abce7c24a2ced7edf7a7dfbc710637ff1fb9c2248911ba52a01880ce7bcbdd3e15805501aa30ebd151190cfe6b9c02129e0153245fd8cef22518fc34d10ceb81"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_gact={0x98, 0x18, 0x0, 0x0, {{0x9}, {0x4}, {0x6a, 0x6, "9ffc08ec11a190a98163604a7aa9d478840bd5dff59bb1da6c24fc7e0a29d83ec579d827925f296bc4d7e59d862e619110022cac5b9f3f096522eb4c712296f508dee898965783f62c63c6835d8701cff6d5df05d346987d04caad4fa441f4a98fe5f1df2cc9"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ct={0xb0, 0x1e, 0x0, 0x0, {{0x7}, {0x48, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x3, 0x4, 0x0, 0x1, 0x9}}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @remote}, @TCA_CT_MARK_MASK={0x8, 0x6, 0xb993}, @TCA_CT_ACTION={0x6, 0x3, 0x2d}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e23}]}, {0x42, 0x6, "a75ef310f2cd295b8767eeb91b69c839f752871e616153c3481a8a0733eb761fe1ffa7fab340298a47202e3868508c17d80f32011639790a570dae3e9e66"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_connmark={0x160, 0x6, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x1, 0x10000004, 0x58e, 0x7}, 0xfff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x7, 0x2, 0x8000, 0x800}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff2, 0x6, 0x1, 0x880b}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xa, 0x8, 0x2, 0xb, 0x5}, 0x4}}]}, {0xbd, 0x6, "6a179d802ce5360aca5d2c94526f741f373dd35631b946f3a7b84ee3e3aa886df68f068e78fb4ed3e35aca566ddf17c788673c715a682996b2e7665869fc5d48dc9d558e8003f754263993bc7c10f66289d4168874273616400eb8d24d6388ae486f5d3f2c8435ef527aa38da10bbc868545e14a1ed534ac2fba976089792906331a18f27d5ce4820e0e546a6f7110bdedc24d1c1ae894d63382dad0352198232c7f7a6a9b2f8fcb5d17376ec233b96ddd3de401a13ff24061"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_nat={0x19c, 0x0, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x4, 0x1, 0x7fff}, @multicast1, @multicast1, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0xffffffff, 0x7, 0x5, 0x5ae}, @multicast2, @private=0xa010100}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0xfffffff3, 0x5a021b4a69886216, 0x1000, 0xfffffff9}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffff6e55, 0x6, 0x3, 0x5, 0xef}, @multicast2, @remote, 0xffffffff, 0x1}}]}, {0xd2, 0x6, "2553c399691e63ecbe6d897642d2c0da11a9e2dd8b8ed76672d361c8fafa28254b42007c2247351e1a12620be459f64be6a6502ac9bae8181b0f7baeeb1aaca3f2ee30f756bd3e7965c6836b13e793757d2a88d8b4aadcf5589d57ff31007a94ef088ecd6ce55946df1a57cbb68a8ca19c64c0bbd35cb3c82c16b22b3f5cd779518ce52b7451bb62b0349d1311c4283937f2d5d15392438df70dd6bc99c47978c723acc4b76988424b3846bb5a58befedd67a4a3f4f160fddada7e672404282fd47e9b7edb42f3f1eab7b2fc6fd8"}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x928}}, 0x0)
fsopen(0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(r5, 0x80046402, &(0x7f0000000080))
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200)

2m28.456934618s ago: executing program 7 (id=3236):
fanotify_init(0x10, 0x1)
r0 = syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0x8401)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$USBDEVFS_BULK(r0, 0x5523, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000000c0)="17000000020001000003be8c5ee17688a2002b08030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0x11a)
prlimit64(r1, 0x0, &(0x7f0000000040)={0x80, 0x54}, &(0x7f0000000240))
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), 0x4)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mbind(&(0x7f000012c000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000000)=0x8006, 0x86, 0x3)

2m27.854164948s ago: executing program 7 (id=3240):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'dummy0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000006a00000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a000200577f00"], 0x48}, 0x1, 0x0, 0x0, 0xffffff9e}, 0x0)

2m27.635965814s ago: executing program 7 (id=3242):
mkdir(&(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x38, r2, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "0000000003"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040040}, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x60c2, 0x0)

2m27.623818738s ago: executing program 7 (id=3243):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth0_macvtap\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000110001010000000000000000001f0000", @ANYRES32=r2], 0x20}}, 0x20008040)

2m11.397313057s ago: executing program 36 (id=3243):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth0_macvtap\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000110001010000000000000000001f0000", @ANYRES32=r2], 0x20}}, 0x20008040)

7.733542708s ago: executing program 8 (id=3701):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000040)='mm_lru_insertion\x00'}, 0x10)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
lseek(r1, 0x3, 0x0)
getdents64(r1, 0x0, 0x22)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[@ANYRES64=r2], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x40a001, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB], 0x2b0}, 0x1, 0x0, 0x0, 0x44005}, 0x20000801)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x12, 0x11, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf887}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @jmp={0x5, 0x1, 0xb, 0x2, 0x2, 0xfffffffffffffffe, 0xfffffffffffffff0}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0xd2, &(0x7f0000000500)=""/210, 0x41000, 0x50, '\x00', 0x0, @cgroup_sock_addr=0x32, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x0, 0x2, 0xfffffff9, 0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f0000000180)=[r3, r4], &(0x7f00000001c0)=[{0x3, 0x2, 0xf, 0xa}, {0x4, 0x3, 0xd}, {0x3, 0x1, 0xc, 0xc}], 0x10, 0x5, @void, @value}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x2d5, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f00000002c0)=ANY=[@ANYBLOB="18080000018000000000000005000000851000000500000085000000bb000000a700000000000000180000000000000000000000000000009500000000000000950000"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r5, 0x18000000000002a0, 0x204, 0xfffff000, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

7.47110744s ago: executing program 8 (id=3703):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000100000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000025000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

7.235585456s ago: executing program 8 (id=3707):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0)
socket$inet6(0xa, 0x3, 0x7)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8)

6.181908407s ago: executing program 2 (id=3708):
r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000280)={0x18, 0x0, 0x0, {0x6}}, 0x18)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getpid()
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYRES64=r0], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, @mcast1, @empty, 0x20, 0x0, 0x0, 0xa}})
mkdir(0x0, 0x0)
mount(0x0, 0x0, &(0x7f0000000040)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r5, &(0x7f0000001600)='./file1\x00', 0x6000, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)

5.615284458s ago: executing program 6 (id=3711):
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0)
r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x40, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18006daaed13ff00000000000000000028"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000014006bcd", 0x8}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)

4.784047331s ago: executing program 2 (id=3712):
syz_usb_connect$uac1(0x3, 0xa2, 0x0, 0x0)

4.571584457s ago: executing program 8 (id=3713):
mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103)
openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe13)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000440)="91eb072927fe9fd1ae773e851ee81e32214626a59abecc3169b86e9c8c0d4caefb49621fa144c428975868634899a3b7d31d8e9b0e5e69b5e8225bb31b1c4fc2084550b8d18672b1cbc66a71009f3fb94f1559736b50e78a9af151dbad5198e979684e84bc295ebb5b02ea9c21b0ab9fa78c55e3c17f2829e9fd7261954b8d3980f80dcd5b71640f7f3fdccd659a3588618893f9e2e62002eb94249c60da8d6b178a", 0xa2}, {0x0}], 0x2, &(0x7f0000001780)}, 0xc0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r1 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
r2 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c)
r3 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_usb_connect(0x2, 0x3d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x19, 0x79, 0x2e, 0x20, 0x7b4, 0x10a, 0x102, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x44, [{{0x9, 0x4, 0xbd, 0x0, 0x2, 0x34, 0x67, 0xc3, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "e37e1b82e6"}]}}, {{0x9, 0x5, 0xb, 0x2}}]}}]}}]}}, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
r6 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb)
r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r6)
r8 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r7)
keyctl$KEYCTL_MOVE(0x1e, r6, r7, r8, 0x0)
request_key(&(0x7f0000000540)='user\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)=',$:@^@,\x00', 0x0)

4.398915016s ago: executing program 5 (id=3714):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58)
r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r0, 0x0, 0x0, 0x0, 0x80800})
io_uring_enter(r1, 0x3516, 0xc2de, 0x8, 0x0, 0x0)
r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0583020000000000140012800b0001002dc945fb0055dd210400028008000500", @ANYRES32=r5, @ANYBLOB="08001f0008000000"], 0x44}}, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000003c0)={@ipv4={""/10, ""/2, @broadcast}, <r7=>0x0}, &(0x7f0000000240)=0x14)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x58, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0}}, 0xfffffd76)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', <r9=>0x0, 0x29, 0x5, 0x1, 0x60503a60, 0x4, @dev={0xfe, 0x80, '\x00', 0x1b}, @mcast1, 0x1, 0x7800, 0x7, 0x80000000}})
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vxcan1\x00', <r10=>0x0})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000600)={'gre0\x00', &(0x7f0000000500)={'gretap0\x00', <r11=>0x0, 0x70f, 0x10, 0x40, 0xe, {{0x2e, 0x4, 0x3, 0x4, 0xb8, 0x67, 0x0, 0x0, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x1c, 0xbe, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@empty, 0x9}, {@rand_addr=0x64010101, 0xfffffffd}]}, @rr={0x7, 0x1b, 0x2d, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @loopback]}, @timestamp_prespec={0x44, 0xc, 0x9e, 0x3, 0x6, [{@loopback, 0x7fff}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x3c, 0x97, 0x1, 0x2, [{@empty, 0x3b1}, {@empty, 0xa}, {@loopback, 0xb}, {@rand_addr=0x64010102, 0x8}, {@multicast1, 0xa}, {@local, 0xffff}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x8000000}]}, @generic={0x94, 0xd, "88396997192e472c82862f"}, @ssrr={0x89, 0x13, 0xbc, [@local, @remote, @broadcast, @dev={0xac, 0x14, 0x14, 0x33}]}]}}}}})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r12=>0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa8, &(0x7f0000000700)=[{}], 0x8, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x59, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000009c0)={'ip6tnl0\x00', &(0x7f0000000940)={'syztnl2\x00', <r13=>0x0, 0x4, 0xba, 0xb, 0x8, 0x8, @ipv4={'\x00', '\xff\xff', @local}, @private0, 0x7887, 0x10040, 0x3, 0x9238}})
r14 = socket(0x10, 0x3, 0x0)
r15 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r15, 0x8933, &(0x7f0000000ec0)={'wg1\x00', <r16=>0x0})
sendmsg$nl_route_sched(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=@newqdisc={0x24, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r16, {0x0, 0x919e560f32ae0dcd}, {0xffff, 0xffff}}}, 0x24}}, 0x80)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000b00)={'erspan0\x00', &(0x7f0000000a00)={'erspan0\x00', <r17=>0x0, 0x8000, 0x40, 0x1000, 0xfffffffd, {{0x38, 0x4, 0x0, 0x12, 0xe0, 0x65, 0x0, 0x40, 0x83d11d23e8cf20d, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0x4c, 0x67, 0x1, 0x5, [{@broadcast, 0x2}, {@private=0xa010100, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffffa}, {@dev={0xac, 0x14, 0x14, 0x40}, 0xe00}, {@multicast2, 0x5}, {@multicast2, 0x5}, {@empty, 0xffffffec}, {@remote, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}]}, @timestamp_addr={0x44, 0x14, 0x9a, 0x1, 0x1, [{@dev={0xac, 0x14, 0x14, 0x10}, 0x800}, {@multicast2}]}, @lsrr={0x83, 0x13, 0x83, [@empty, @dev={0xac, 0x14, 0x14, 0x2d}, @multicast1, @private=0xa010101]}, @ra={0x94, 0x4}, @noop, @timestamp_addr={0x44, 0x34, 0xdc, 0x1, 0x9, [{@private=0xa010100, 0x2}, {@empty, 0x7}, {@private=0xa010100, 0x4}, {@empty, 0x4}, {@multicast1, 0x4}, {@private=0xa010100, 0x58}]}, @noop, @cipso={0x86, 0x12, 0xffffffffffffffff, [{0x5, 0xc, "9c9b7dc725893ecc2288"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x7, 0x7d, [@multicast1]}]}}}}})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000b40)={'netpci0\x00', <r18=>0x0})
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000b80)=<r19=>0x0, &(0x7f0000000bc0)=0x4)
r20 = socket(0x400000000010, 0x3, 0x0)
r21 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r21, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r22=>0x0})
sendmsg$nl_route_sched(r20, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r22, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x400d4)
sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000f00)=ANY=[@ANYBLOB="14020000", @ANYRES16=0x0, @ANYBLOB="08002bbd7000fedbdf25090000008400018008000100", @ANYRES32=0x0, @ANYBLOB="08000300000000001400020076657468305f746f5f627269646765001400020076657468305f766972745f7769666900140002000000000000000000000000000000000008000100", @ANYRES32=r5, @ANYBLOB="080003000100000008000100", @ANYRES32=r7, @ANYBLOB="08000300010000001400020074756e6c30000000000000000000000038000180080003000200000008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="080003000300000014000200766c616e3000000000000000000000000c0001800800030003000000580001801400020076657468315f746f5f7465616d000000080003000200000008000100", @ANYRES32=r10, @ANYBLOB="140002007465616d5f736c6176655f300000000014000200697036746e6c3000000000000000000008000100", @ANYRES32=r11, @ANYBLOB="6800018008000100", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="140002007465616d5f736c6176655f300000000008000300030000001400020076657468305f746f5f626f6e6400000008000100", @ANYRES32=r16, @ANYBLOB="08000300030000001400020067656e657665300000000000000000007800018008000100", @ANYRES32=r17, @ANYBLOB="08000300000000000800030001000000080003000000000008000100", @ANYRES32=r18, @ANYBLOB="1400020070696d3672656700000000000000000008000100", @ANYRES32=r19, @ANYBLOB="144002006e696376663000000000000000000000140002006361696630000100e6ac9603d304325385c3d9cc7fc5a3ab2342cd07d0f455f87131497f2693cd0df94192a74b6ebf66", @ANYRES32=r22, @ANYBLOB], 0x214}, 0x1, 0x0, 0x0, 0x4004051}, 0x8044010)
setsockopt$llc_int(r4, 0x10c, 0x3, &(0x7f0000000040), 0x4)

3.963978148s ago: executing program 5 (id=3715):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x1}], 0x1, 0x0)
semop(0x0, &(0x7f0000000180)=[{}, {0x2}], 0x2)
semop(0x0, 0x0, 0x0)

3.36841899s ago: executing program 2 (id=3717):
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000280)={{0x4, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x3, 0x8000000000000, 0x0, 0x8, 0x549c, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x5, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x3fffffffffffffff, 0x0, 0x0, 0xa3, 0x0, 0x0, 0x0, 0x0, 0x200, 0x3, 0x0, 0x0, 0x0, 0xc874, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2000000, 0x0, 0x0, 0x4, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x527, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x11da, 0x0, 0xffffffffffffff00, 0x0, 0x0, 0x400000]})

3.284030351s ago: executing program 2 (id=3718):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="6c00000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800e0001006970366772657461700000003800028014000600fc00000000000000000000000000000014000700", @ANYRES32=r2], 0x6c}}, 0x0)

3.269041258s ago: executing program 2 (id=3719):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = syz_open_dev$sndpcmp(&(0x7f0000002000), 0x5d5d, 0x0)
ioctl$SNDRV_PCM_IOCTL_REWIND(r3, 0x40084146, &(0x7f00000000c0)=0x4)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f00000004c0)=0x27)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000400)=@assoc_value={r4, 0x5}, 0x8)

3.216237969s ago: executing program 9 (id=3720):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000b, 0x59033, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x8000000, 0x3, 0x290, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xffffff00, 0xffffff00, 0xff, 0xffffffff], [0xff, 0xffffffff, 0xff], 'veth1_to_hsr\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0xc, 0x5, 0x0, 0x40}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x200, 0x100b, 0x3, 'snmp_trap\x00', {0x9}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0xffffff00, 0x0, 0xffffff00], 'veth1\x00', 'veth0_to_hsr\x00', {}, {0xff}, 0x0, 0x2}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x7ff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)

3.19604141s ago: executing program 6 (id=3721):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
r4 = socket$kcm(0xa, 0x922000000003, 0x11)
r5 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x700, @mcast1, 0x0, 0x700}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)="f4110900062b2c25", 0x8}], 0x1}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, 0x0, 0x0)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
syz_open_dev$usbmon(&(0x7f0000000080), 0x2, 0xc4401)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000040))
sendmsg$NL80211_CMD_VENDOR(r7, 0x0, 0x0)

2.97598057s ago: executing program 9 (id=3722):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000008300), r0)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000008440)={0x0, 0x0, &(0x7f0000008400)={&(0x7f0000008340)={0x48, r1, 0x9, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:crack_db_t:s0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
setuid(0x0)

2.375953301s ago: executing program 9 (id=3723):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0)
close(r2)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002a00000095"], &(0x7f0000000240)='GPL\x00', 0xf3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2)
ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0, 0x1000})
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000340)=[{0x80000006, 0xec, 0x20}]}, 0x10)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='stat\x00')
lseek(r7, 0xae7e, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, 0x0)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
r8 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r9, 0x400454d9, &(0x7f0000000180)={'vlan0\x00', 0x400})
ioctl$TUNATTACHFILTER(r9, 0x401054d5, &(0x7f0000000100)={0x0, 0x0})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4})
r10 = accept4$unix(r7, &(0x7f00000003c0)=@abs, &(0x7f0000000500)=0x6e, 0x80000)
bind$unix(r10, &(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e)

2.287118785s ago: executing program 5 (id=3724):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_stats_latency\x00', r1, 0x0, 0x40000000}, 0x18)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_stats_latency\x00', r2, 0x0, 0x40000000}, 0x18)

2.072037947s ago: executing program 6 (id=3725):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x20, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000180000000000000000001700711207000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

1.920711408s ago: executing program 5 (id=3726):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="54010000", @ANYRES16=r1, @ANYBLOB="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"], 0x154}}, 0x0)

1.91808639s ago: executing program 6 (id=3727):
syz_usb_connect$uac1(0x3, 0xa2, 0x0, 0x0)

1.495829112s ago: executing program 5 (id=3728):
getrlimit(0x7, &(0x7f0000000000))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000180)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
write(r4, &(0x7f0000000040)="05000000010000", 0x7)
write$bt_hci(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e00000002"], 0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000200)={0x8, 0x57, {0xffffffffffffffff}, {}, 0x7fffffff, 0x3})
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './bus', [{0x20, '!,\x00'}, {0x20, './cgroup.cpu/syz0\x00'}, {0x20, 'hugetlb.2MB.max_usage_in_bytes\x00'}, {0x20, ',%{{:'}, {0x20, '*'}, {0x20, './cgroup.cpu/syz0\x00'}, {0x20, './cgroup.cpu/syz0\x00'}], 0xa, "10093dcef7317ba73d60344f626affee57bea8ff2706e8ef5c2fff4afdfdec25918124cc6a51f77c05a066972a467ab74d151019ecccfcf7ce054652c8d3f1386aa477576742f6d5b0c8724448ab1aedff8f4f2f8c574cf21b23788834b6430766bdfd3e68722628958735aa4992adc0ad44e14b8db348eb4a561cc962335315cdbd83a77a19a9f5632de7b822333454346e35ba6225c8a071c664b15ccb8688d097e3d7f7cd612f8d4495c413a4fe8ff2004d67"}, 0x122)
sched_setaffinity(0x0, 0x2e, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = open(&(0x7f00000000c0)='./bus\x00', 0x1e5842, 0x0)
r7 = open(&(0x7f0000000080)='./bus\x00', 0x14d401, 0x4f)
ftruncate(r7, 0x2007ffd)
sendfile(r1, r6, 0x0, 0x1000a3)

950.257648ms ago: executing program 6 (id=3729):
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x4, 0x6031, 0xffffffffffffffff, 0x0) (async)
mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async)
munlock(&(0x7f0000e4a000/0x1000)=nil, 0x1000) (async)
mremap(&(0x7f0000e1b000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000f2b000/0x4000)=nil) (async)
mlock2(&(0x7f0000df9000/0x3000)=nil, 0x3000, 0x1) (async)
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) (async)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
r1 = dup2(r0, r0)
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x5) (async)
read$FUSE(r1, &(0x7f0000001600)={0x2020}, 0x2020) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6, @local}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e00000004000000040000000500000000000000", @ANYRES32=0x1, @ANYBLOB="0000ca0000"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@map_fd={0x18, 0x5, 0x1, 0x0, r6}]}, &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
munlockall()
r7 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_FREQUENCY(r7, 0x402c5639, &(0x7f0000000080)={0x0, 0x5, 0x848}) (async)
r8 = socket$inet_sctp(0x2, 0x4, 0x84) (async)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000005c0)={<r9=>0x0, 0x66, "80a8bb5c0c081757068d1967eb7b31a6963da6ecf68c8a80d699d6a6fe003a2f6bfa116d264a3be34bf36d32d074d7edbc9270f5c6de7fe14b89029ad01565814520613078f7c6ad2cca248696c26b4889ec68ce60e55ef97feb49ddbf6b7dbcc393bb8c4a16"}, &(0x7f0000000080)=0x6e)
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r8, 0x84, 0x23, &(0x7f0000000180)={r9, 0xa}, 0x8)

722.922628ms ago: executing program 5 (id=3730):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x14, 0xd, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0xc000)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
r3 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000280)={0x8000200a})
sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)

709.122687ms ago: executing program 2 (id=3731):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x4d, 0xc8, 0xa4, 0x10, 0x644, 0x8021, 0xef14, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0xe2, 0x10, 0x0, [{{0x9, 0x4, 0x1, 0x34, 0x0, 0x40, 0x6e, 0xab, 0x8}}]}}]}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008001300", @ANYRES32=r1], 0x3c}, 0x1, 0xd, 0x100000000000000, 0x480c5}, 0x0)

555.793395ms ago: executing program 9 (id=3732):
r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/wireless\x00')
preadv(r0, &(0x7f00000002c0)=[{0x0}, {&(0x7f00000001c0)=""/243, 0xf3}, {&(0x7f00000007c0)=""/213, 0xd5}], 0x3, 0x2, 0x1)
r1 = socket$inet6_sctp(0xa, 0x7a156307d48a0737, 0x84)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a00)=@newtfilter={0x24, 0x2c, 0x400, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0xfff3}, {0x4, 0x3}}}, 0x24}}, 0x20000004)
r2 = socket(0x2a, 0x4, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r3, 0x0, 0xb, &(0x7f0000000040)=0x8001, 0x4)
listen(r3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1cbd8b00", @ANYRES16=r5, @ANYBLOB="000400000000000000000200000008000300", @ANYRESHEX=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4048800}, 0x4012)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x3, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x8c30}]}}]}, 0x3c}}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000500)=0x9, 0x4)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r10, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x1a8000, 0xa, 0x1}, {0x0, 0xeeef0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0xfa}, {0x3000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xf, 0x0, 0x6, 0x0, 0x2, 0xfc, 0x0, 0x0, 0xb}, {0x10000, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x10, 0x9, 0x0, 0x40, 0x0, 0x2a, 0x9}, {0xf000, 0x0, 0xca8a7e659055b412, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9, 0x2, 0x3}, {0x0, 0xeeee8000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x2}, {}, {}, 0x50006, 0x0, 0xeeee0000, 0x3400bd, 0x80000a, 0x2000, 0x3000, [0x800000000, 0x0, 0x1a7ff4f4]})
r11 = socket$inet_sctp(0x2, 0x5, 0x84)
r12 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640)}, &(0x7f00000003c0)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r13=>0x0]}, &(0x7f0000000240)=0x8)
sendmsg$inet_sctp(r11, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="2000000000000000840000000200000003000400280000000b000002b657efe3035421843ede67b989da046670b892992c18a0b66ee6b1fde0dbe6b00f7332bbf1823207d5b544e9ee22e29f593e6713b20f885b5449aeb1832ddb72eb2b8a863fec00acaafd161abdf86fb6fc930da962a9783f9ed6b3863e6ce3e59ef56d64c76c79da2ae6616bf751c5365b211b11d30e64a7ce77c83fa785b2017580641a7cd665ecf715cd9af4316743d07b8414ea65cc2591119730fa3f8ce2a62df2f5a49352deb47fa20e31108c62277d446449f815", @ANYRES32=r13], 0x20, 0x6044}, 0x6)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r13, 0x1}, 0x8)
ioctl$KVM_SET_VCPU_EVENTS(r10, 0x8140aecc, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, 0x0, 0x0)

415.94666ms ago: executing program 8 (id=3733):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7000000010000100"/20, @ANYRES32=r1, @ANYBLOB="f50000002f95abbe480012800e0001006970366772657461700000003400028008000100", @ANYRES32=r1, @ANYBLOB="14000600fe80000000000000000000000000000014000700ff050000000000000000000000000001080004"], 0x70}}, 0x0)

328.323442ms ago: executing program 9 (id=3734):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x1}], 0x1, 0x0)
semop(0x0, &(0x7f0000000180)=[{}, {0x2}], 0x2)
semop(0x0, 0x0, 0x0)

328.030741ms ago: executing program 6 (id=3735):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xf, {"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", 0x1000}}, 0xfffffffffffffcc5)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000080)='./file1\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
r1 = getuid()
quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, r1, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x1, 0x2, 0x3, 0x0, 0x8, 0x7fffffff})
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
r3 = open_tree(r0, &(0x7f0000001040)='./file0\x00', 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000012c0)={'batadv0\x00', <r4=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001400)={0x18, 0x1a, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2094, 0x0, 0x0, 0x0, 0x5}, [@alu={0x7, 0x1, 0x6, 0x8, 0x8, 0xfffffffffffffffc, 0xfffffffffffffffc}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x6}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x1}, @generic={0xb, 0x5, 0x4, 0x6, 0xfffffff6}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x19d7f4dc}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000001180)='GPL\x00', 0x9, 0xe7, &(0x7f00000011c0)=""/231, 0x41ae71a8fbf447a3, 0x21, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001300)={0x2, 0x8, 0x1000, 0x6}, 0x10, 0x0, 0x0, 0x9, 0x0, &(0x7f0000001340)=[{0x3, 0x4, 0x4, 0x8}, {0x1, 0x3, 0x4, 0x4}, {0x0, 0x5, 0x3, 0xc}, {0x5, 0x5, 0x4, 0x9}, {0x1, 0x5, 0xf, 0x7f595e924a69a651}, {0x1, 0x3}, {0x2, 0x4, 0xe, 0x8}, {0x0, 0x5, 0x3, 0x5}, {0x4, 0x2, 0x4, 0x2}], 0x10, 0x9, @void, @value}, 0x94)
symlinkat(&(0x7f0000000140)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r2, &(0x7f0000000000)='./file0\x00')
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udplite(0x2, 0x2, 0x88)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
socket(0x10, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = getpid()
sched_setscheduler(r6, 0x2, 0x0)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'})

23.7303ms ago: executing program 9 (id=3736):
getrlimit(0x7, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
sched_setscheduler(0x0, 0x1, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_int(r0, &(0x7f0000000180)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000200)={0x8, 0x57, {0xffffffffffffffff}, {}, 0x7fffffff, 0x3})
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240))
mkdir(&(0x7f0000000000)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000540)='./file1\x00', r1, &(0x7f0000000580)='./bus\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180))
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)={'#! ', './bus', [{0x20, '!\t\x00'}, {0x20, './cgroup.cpu/syz0\x00'}, {0x20, 'hugetlb.2MB.max_usage_in_bytes\x00'}, {0x20, ',%{{:'}, {0x20, '\xd8\xa7y\xf5.z0\x00'/22}], 0xa, "10093dcef7317ba73d60344f626affee57bea8ff2706e8ef5c2fff4afdfdb69e918124cc6a51ff"}, 0x84)
sched_setaffinity(0x0, 0x2e, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
open(&(0x7f00000000c0)='./bus\x00', 0x1e5842, 0x0)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x14d401, 0x4f)
ftruncate(r4, 0x2007ffd)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0xfffffffffffffd68, 0x0)

0s ago: executing program 8 (id=3737):
syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0)
r0 = getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x3, r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ppoll(&(0x7f0000000600)=[{r1, 0x6}], 0x1, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

d5: unable to read RDB block 0
[  869.075932][ T6087]  nbd5: unable to read partition table
[  869.178000][ T6087] ldm_validate_partition_table(): Disk read failed.
[  869.226665][ T6087] Dev nbd5: unable to read RDB block 0
[  869.268588][T26537] PKCS8: Unsupported PKCS#8 version
[  869.275918][ T6087]  nbd5: unable to read partition table
[  869.365595][T26511] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  869.402353][ T6084] udevd[6084]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  869.406396][   T11] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  870.010302][   T11] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  870.653386][   T11] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  870.741372][   T11] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  870.759862][T21023] Bluetooth: hci0: command tx timeout
[  871.040372][   T11] bridge_slave_1: left allmulticast mode
[  871.055528][   T11] bridge_slave_1: left promiscuous mode
[  871.076979][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  871.116809][   T11] bridge_slave_0: left allmulticast mode
[  871.124306][   T11] bridge_slave_0: left promiscuous mode
[  871.134400][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  871.188987][   T29] audit: type=1400 audit(1736848847.279:850): avc:  denied  { execute } for  pid=26666 comm="syz.8.3299" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=56252 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  872.302458][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  872.314100][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  872.324100][   T11] bond0 (unregistering): Released all slaves
[  872.351554][T26679] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3302'.
[  872.390172][T26495] chnl_net:caif_netlink_parms(): no params data found
[  872.694400][ T7203] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[  872.873658][T26495] bridge0: port 1(bridge_slave_0) entered blocking state
[  872.888489][T26495] bridge0: port 1(bridge_slave_0) entered disabled state
[  872.897648][ T7203] usb 3-1: Using ep0 maxpacket: 8
[  872.906327][T26495] bridge_slave_0: entered allmulticast mode
[  872.917890][ T7203] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  872.924902][T26495] bridge_slave_0: entered promiscuous mode
[  872.943164][ T7203] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  872.947124][T26495] bridge0: port 2(bridge_slave_1) entered blocking state
[  872.973099][T26495] bridge0: port 2(bridge_slave_1) entered disabled state
[  872.978370][ T7203] usb 3-1: Product: syz
[  872.983294][T21023] Bluetooth: hci0: command tx timeout
[  872.996790][ T7203] usb 3-1: Manufacturer: syz
[  873.024646][T26495] bridge_slave_1: entered allmulticast mode
[  873.033632][ T7203] usb 3-1: SerialNumber: syz
[  873.063425][T26495] bridge_slave_1: entered promiscuous mode
[  873.070193][ T7203] usb 3-1: config 0 descriptor??
[  873.398685][ T7203] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  873.416578][T26495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  873.459272][T26763] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3304'.
[  873.485615][   T11] hsr_slave_0: left promiscuous mode
[  873.497801][T26710] xt_limit: Overflow, try lower: 0/0
[  873.519850][   T11] hsr_slave_1: left promiscuous mode
[  873.545642][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  873.568384][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  874.006292][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  874.041513][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  874.106872][   T11] veth1_vlan: left promiscuous mode
[  874.117027][   T11] veth0_vlan: left promiscuous mode
[  874.320039][    T9] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  874.502904][    T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  874.514694][    T9] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  874.525396][    T9] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  874.535564][    T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  874.543581][    T9] usb 9-1: SerialNumber: syz
[  874.864932][ T7203] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  874.866404][   T29] audit: type=1400 audit(1736848850.731:851): avc:  denied  { bind } for  pid=26678 comm="syz.2.3302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  874.878831][ T7203] usb 3-1: USB disconnect, device number 65
[  875.025767][   T11] team0 (unregistering): Port device team_slave_1 removed
[  875.124696][   T11] team0 (unregistering): Port device team_slave_0 removed
[  875.206829][T21023] Bluetooth: hci0: command tx timeout
[  875.215528][    T9] usb 9-1: 0:2 : does not exist
[  875.250636][    T9] usb 9-1: USB disconnect, device number 3
[  875.478370][ T6087] udevd[6087]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  875.903563][T26495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  876.635177][T26495] team0: Port device team_slave_0 added
[  876.653909][T26495] team0: Port device team_slave_1 added
[  876.863781][ T7203] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  877.441036][T21023] Bluetooth: hci0: command tx timeout
[  877.462351][ T7203] usb 9-1: Using ep0 maxpacket: 16
[  878.058765][ T7203] usb 9-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  878.068284][ T7203] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  878.076670][ T7203] usb 9-1: Product: syz
[  878.080921][ T7203] usb 9-1: Manufacturer: syz
[  878.086245][ T7203] usb 9-1: SerialNumber: syz
[  878.092613][ T7203] usb 9-1: config 0 descriptor??
[  878.636930][ T7203] usb 9-1: USB disconnect, device number 4
[  878.758083][T26495] batman_adv: batadv0: Adding interface: batadv_slave_0
[  878.787383][T26495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  878.873740][T26495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  878.963418][T26913] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  879.436393][T26495] batman_adv: batadv0: Adding interface: batadv_slave_1
[  879.479684][T26495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  879.519511][T26495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  879.638101][T26495] hsr_slave_0: entered promiscuous mode
[  879.648135][T26495] hsr_slave_1: entered promiscuous mode
[  879.659160][T26495] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  879.670078][T26495] Cannot create hsr debugfs directory
[  880.544054][T26495] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  880.605143][T26495] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  880.677190][T26495] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  880.713945][T26495] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  880.889125][ T5861] usb 6-1: new high-speed USB device number 57 using dummy_hcd
[  881.700938][T26495] 8021q: adding VLAN 0 to HW filter on device bond0
[  881.911806][T27059] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  881.919020][T26495] 8021q: adding VLAN 0 to HW filter on device team0
[  881.984163][ T5861] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  881.995269][ T5861] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  882.005663][ T5861] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  882.014834][ T5861] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  882.052280][ T5861] usb 6-1: config 0 descriptor??
[  882.073883][T20525] bridge0: port 1(bridge_slave_0) entered blocking state
[  882.081021][T20525] bridge0: port 1(bridge_slave_0) entered forwarding state
[  882.128978][ T6420] bridge0: port 2(bridge_slave_1) entered blocking state
[  882.136106][ T6420] bridge0: port 2(bridge_slave_1) entered forwarding state
[  882.510994][T26495] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  882.547439][T26495] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  883.572677][T27084] FAULT_INJECTION: forcing a failure.
[  883.572677][T27084] name failslab, interval 1, probability 0, space 0, times 0
[  883.618181][T27084] CPU: 0 UID: 0 PID: 27084 Comm: syz.6.3327 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0
[  883.628999][T27084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  883.639071][T27084] Call Trace:
[  883.642358][T27084]  <TASK>
[  883.645291][T27084]  dump_stack_lvl+0x16c/0x1f0
[  883.649986][T27084]  should_fail_ex+0x497/0x5b0
[  883.654682][T27084]  ? fs_reclaim_acquire+0xae/0x150
[  883.659799][T27084]  should_failslab+0xc2/0x120
[  883.664489][T27084]  __kmalloc_cache_noprof+0x68/0x410
[  883.669785][T27084]  tcf_chain_create+0x98/0x370
[  883.674560][T27084]  __tcf_chain_get+0x155/0x1b0
[  883.679343][T27084]  tc_new_tfilter+0x6f1/0x2330
[  883.684137][T27084]  ? __pfx_tc_new_tfilter+0x10/0x10
[  883.689366][T27084]  ? __pfx___lock_acquire+0x10/0x10
[  883.694576][T27084]  ? __pfx_cred_has_capability.isra.0+0x10/0x10
[  883.700829][T27084]  ? rtnetlink_rcv_msg+0x93a/0xea0
[  883.705932][T27084]  ? __pfx_lock_release+0x10/0x10
[  883.710943][T27084]  ? trace_lock_acquire+0x14e/0x1f0
[  883.716155][T27084]  ? __pfx_tc_new_tfilter+0x10/0x10
[  883.721358][T27084]  rtnetlink_rcv_msg+0x95b/0xea0
[  883.726311][T27084]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  883.731797][T27084]  netlink_rcv_skb+0x16b/0x440
[  883.736578][T27084]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  883.742024][T27084]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  883.747295][T27084]  ? netlink_deliver_tap+0x1ae/0xd30
[  883.752563][T27084]  netlink_unicast+0x53c/0x7f0
[  883.757316][T27084]  ? __pfx_netlink_unicast+0x10/0x10
[  883.762582][T27084]  netlink_sendmsg+0x8b8/0xd70
[  883.767329][T27084]  ? __pfx_netlink_sendmsg+0x10/0x10
[  883.772600][T27084]  ____sys_sendmsg+0xaaf/0xc90
[  883.777357][T27084]  ? copy_msghdr_from_user+0x10b/0x160
[  883.782791][T27084]  ? __pfx_____sys_sendmsg+0x10/0x10
[  883.788069][T27084]  ___sys_sendmsg+0x135/0x1e0
[  883.792723][T27084]  ? __pfx____sys_sendmsg+0x10/0x10
[  883.797909][T27084]  ? __pfx_lock_release+0x10/0x10
[  883.802910][T27084]  ? trace_lock_acquire+0x14e/0x1f0
[  883.808092][T27084]  ? __fget_files+0x206/0x3a0
[  883.812749][T27084]  __sys_sendmsg+0x16e/0x220
[  883.817323][T27084]  ? __pfx___sys_sendmsg+0x10/0x10
[  883.822420][T27084]  do_syscall_64+0xcd/0x250
[  883.826905][T27084]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  883.832790][T27084] RIP: 0033:0x7f88ac785d29
[  883.837194][T27084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  883.856783][T27084] RSP: 002b:00007f88aa5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  883.865171][T27084] RAX: ffffffffffffffda RBX: 00007f88ac975fa0 RCX: 00007f88ac785d29
[  883.873116][T27084] RDX: 0000000000000000 RSI: 0000000020006040 RDI: 0000000000000004
[  883.881067][T27084] RBP: 00007f88aa5f6090 R08: 0000000000000000 R09: 0000000000000000
[  883.889014][T27084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  883.896960][T27084] R13: 0000000000000000 R14: 00007f88ac975fa0 R15: 00007fff4f3752d8
[  883.904916][T27084]  </TASK>
[  883.908017][    C0] vkms_vblank_simulate: vblank timer overrun
[  884.048880][T26495] 8021q: adding VLAN 0 to HW filter on device batadv0
[  884.101667][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  884.213929][T27111] input: syz1 as /devices/virtual/input/input66
[  885.830514][ T5861] usbhid 6-1:0.0: can't add hid device: -71
[  885.837217][ T5861] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  885.857863][ T5861] usb 6-1: USB disconnect, device number 57
[  886.011027][T26495] veth0_vlan: entered promiscuous mode
[  886.087068][T26495] veth1_vlan: entered promiscuous mode
[  886.527891][T26495] veth0_macvtap: entered promiscuous mode
[  886.680863][T26495] veth1_macvtap: entered promiscuous mode
[  886.716729][T26495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  886.731149][ T5861] usb 6-1: new full-speed USB device number 58 using dummy_hcd
[  886.741832][T26495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  886.784069][T26495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  886.816729][T26495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  886.837483][T26495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  886.859436][T26495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  886.867710][T27152] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3336'.
[  886.880086][T26495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  886.892868][ T5861] usb 6-1: config 0 has an invalid interface number: 107 but max is 0
[  886.901058][ T5861] usb 6-1: config 0 has no interface number 0
[  886.913048][T26495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  886.929179][T26495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  886.933692][ T5861] usb 6-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  886.947197][T26495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  886.962222][ T5861] usb 6-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60
[  886.971587][ T5861] usb 6-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3
[  886.971995][T26495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  886.979811][ T5861] usb 6-1: Product: syz
[  886.979829][ T5861] usb 6-1: Manufacturer: syz
[  886.979845][ T5861] usb 6-1: SerialNumber: syz
[  886.988133][ T5861] usb 6-1: config 0 descriptor??
[  887.007056][T26495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  887.032890][ T5861] keyspan 6-1:0.107: Keyspan 4 port adapter converter detected
[  887.040612][ T5861] keyspan 6-1:0.107: found no endpoint descriptor for endpoint 81
[  887.044293][T26495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  887.060099][ T5861] keyspan 6-1:0.107: unsupported endpoint type 0
[  887.082415][ T5861] keyspan 6-1:0.107: found no endpoint descriptor for endpoint 1
[  887.098238][T26495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  887.104463][ T5861] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[  887.120666][T26495] batman_adv: batadv0: Interface activated: batadv_slave_0
[  887.145142][T26495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  887.157437][ T5861] keyspan 6-1:0.107: found no endpoint descriptor for endpoint 2
[  887.168484][ T5861] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[  887.174069][T26495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  887.178732][ T5861] keyspan 6-1:0.107: found no endpoint descriptor for endpoint 4
[  887.195989][ T5861] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[  887.205025][T26495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  887.206010][ T5861] keyspan 6-1:0.107: found no endpoint descriptor for endpoint 6
[  887.225648][ T5861] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[  887.227451][T26495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  887.246069][T26495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  887.616154][T26495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  887.671654][T26495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  887.693534][T26495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  887.703368][T26495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  887.730888][T26495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  887.758308][T26495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  887.788322][T26495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  887.808073][T26495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  887.820399][T26495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  887.833747][T26495] batman_adv: batadv0: Interface activated: batadv_slave_1
[  887.922289][T26495] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  887.934592][T26495] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  887.965500][T26495] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  887.988302][T26495] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  888.051594][ T7202] usb 6-1: USB disconnect, device number 58
[  888.067079][ T7202] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[  888.130679][ T7202] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[  888.169818][T20540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  888.180709][ T7202] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[  888.450068][ T7202] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[  888.586204][T20540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  888.593831][ T7202] keyspan 6-1:0.107: device disconnected
[  888.604958][ T7195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  888.633176][ T7195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  889.050199][T27235] input: syz1 as /devices/virtual/input/input67
[  889.268597][   T29] audit: type=1400 audit(1736848864.210:852): avc:  denied  { write } for  pid=27248 comm="syz.2.3345" name="/" dev="9p" ino=4412287765254868893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  889.391509][T27251] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  889.895739][   T29] audit: type=1400 audit(1736848864.210:853): avc:  denied  { add_name } for  pid=27248 comm="syz.2.3345" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  889.936526][   T29] audit: type=1400 audit(1736848864.210:854): avc:  denied  { create } for  pid=27248 comm="syz.2.3345" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  889.978888][   T29] audit: type=1400 audit(1736848864.210:855): avc:  denied  { associate } for  pid=27248 comm="syz.2.3345" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  890.567953][   T29] audit: type=1400 audit(1736848865.417:856): avc:  denied  { unmount } for  pid=23252 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  891.132434][T27284] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3349'.
[  891.285715][ T7202] usb 6-1: new high-speed USB device number 59 using dummy_hcd
[  891.399414][T27285] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  891.456543][ T7202] usb 6-1: Using ep0 maxpacket: 16
[  891.471975][ T7202] usb 6-1: config 0 has no interfaces?
[  891.511952][ T7202] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  891.546460][ T7202] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  891.588419][ T7202] usb 6-1: Product: syz
[  891.592621][ T7202] usb 6-1: Manufacturer: syz
[  891.635286][ T7202] usb 6-1: SerialNumber: syz
[  891.673526][ T7202] usb 6-1: config 0 descriptor??
[  891.879729][T27306] netlink: 'syz.8.3355': attribute type 30 has an invalid length.
[  891.916229][T27306] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3355'.
[  891.949064][T27270] blk_print_req_error: 24 callbacks suppressed
[  891.949081][T27270] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  891.957570][    T9] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  892.005966][T27306] bridge0: port 2(bridge_slave_1) entered disabled state
[  892.050836][T27270] buffer_io_error: 23 callbacks suppressed
[  892.050853][T27270] Buffer I/O error on dev nbd5, logical block 0, async page read
[  892.065097][T27270] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  892.075609][T27270] Buffer I/O error on dev nbd5, logical block 0, async page read
[  892.092025][T27270] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  892.111403][T27270] Buffer I/O error on dev nbd5, logical block 0, async page read
[  892.141083][T27270] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  892.150236][T27270] Buffer I/O error on dev nbd5, logical block 0, async page read
[  892.162000][T27270] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  892.171204][T27270] Buffer I/O error on dev nbd5, logical block 0, async page read
[  892.182014][T27270] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  892.192237][T27270] Buffer I/O error on dev nbd5, logical block 0, async page read
[  892.193179][T27317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3356'.
[  892.200678][T27270] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  892.200707][T27270] Buffer I/O error on dev nbd5, logical block 0, async page read
[  892.200784][T27270] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  892.200808][T27270] Buffer I/O error on dev nbd5, logical block 0, async page read
[  892.200850][T27270] ldm_validate_partition_table(): Disk read failed.
[  892.200894][T27270] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  892.200916][T27270] Buffer I/O error on dev nbd5, logical block 0, async page read
[  892.200975][T27270] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  892.280173][T27270] Buffer I/O error on dev nbd5, logical block 0, async page read
[  892.316192][T27270] Dev nbd5: unable to read RDB block 0
[  892.341289][T27270]  nbd5: unable to read partition table
[  892.697201][    T9] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  892.713416][    T9] usb 10-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=a9.25
[  892.725124][    T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  892.741420][    T9] usb 10-1: Product: syz
[  892.750171][    T9] usb 10-1: Manufacturer: syz
[  892.754889][    T9] usb 10-1: SerialNumber: syz
[  892.773168][    T9] usb 10-1: config 0 descriptor??
[  892.827881][T27330] input: syz1 as /devices/virtual/input/input68
[  892.891108][    T9] usb 6-1: USB disconnect, device number 59
[  893.065432][ T7197] usb 10-1: USB disconnect, device number 2
[  893.071483][T25672] usb 3-1: new full-speed USB device number 66 using dummy_hcd
[  893.207577][T27357] ptrace attach of "./syz-executor exec"[25640] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             
[  893.256491][T25672] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[  893.356260][T25672] usb 3-1: config 0 has no interface number 0
[  893.362706][T25672] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  893.374015][T25672] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  893.393692][T25672] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  893.412736][T25672] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  893.420860][T25672] usb 3-1: Product: syz
[  893.425305][T25672] usb 3-1: SerialNumber: syz
[  893.432175][T25672] usb 3-1: config 0 descriptor??
[  893.441060][T25672] cm109 3-1:0.8: invalid payload size 0, expected 4
[  893.450618][T25672] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input69
[  893.965898][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  893.975430][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  893.982588][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  893.989732][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  893.996867][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  894.001735][    T9] usb 3-1: USB disconnect, device number 66
[  894.003802][    C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  894.019680][    T9] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  894.043301][T27370] sctp: [Deprecated]: syz.6.3362 (pid 27370) Use of struct sctp_assoc_value in delayed_ack socket option.
[  894.043301][T27370] Use struct sctp_sack_info instead
[  894.157104][T27383] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3364'.
[  894.648273][    T9] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  894.995489][    T9] usb 10-1: Using ep0 maxpacket: 16
[  895.012311][    T9] usb 10-1: config 6 has an invalid interface number: 1 but max is 0
[  895.032929][    T9] usb 10-1: config 6 has no interface number 0
[  895.052762][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  895.056308][    T9] usb 10-1: config 6 interface 1 has no altsetting 0
[  895.084497][    T9] usb 10-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=ef.14
[  895.109329][    T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  895.135771][    T9] usb 10-1: Product: syz
[  895.144508][    T9] usb 10-1: Manufacturer: syz
[  895.161608][    T9] usb 10-1: SerialNumber: syz
[  895.168817][   T29] audit: type=1400 audit(1736848869.729:857): avc:  denied  { ioctl } for  pid=27435 comm="syz.2.3371" path="socket:[59165]" dev="sockfs" ino=59165 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  895.513980][T25672] usb 6-1: new high-speed USB device number 60 using dummy_hcd
[  895.791547][T25672] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  895.800823][T25672] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  895.816849][T25672] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  896.531351][T25672] usb 6-1: config 1 has no interface number 1
[  896.532782][    T9] usb 10-1: selecting invalid altsetting 1
[  896.537877][T25672] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  896.537920][T25672] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  896.545174][T25672] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  896.579404][T25672] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  896.587446][T25672] usb 6-1: Product: syz
[  896.591687][T25672] usb 6-1: Manufacturer: syz
[  896.596286][T25672] usb 6-1: SerialNumber: syz
[  896.604825][    T9] snd-usb-us122l 10-1:6.1: usb_set_interface error
[  896.611601][    T9] snd-usb-us122l 10-1:6.1: probe with driver snd-usb-us122l failed with error -22
[  896.631653][    T9] usb 10-1: USB disconnect, device number 3
[  897.428490][T27462] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  897.490913][T27427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  897.854652][T27427] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  897.910431][T27472] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  897.952910][ T5856] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  898.009798][T25672] usb 6-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0
[  898.017245][T25672] usb 6-1: MIDIStreaming interface descriptor not found
[  898.320738][T27482] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3378'.
[  899.049082][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  899.123713][T25672] usb 6-1: USB disconnect, device number 60
[  899.317203][T27519] netlink: 188 bytes leftover after parsing attributes in process `syz.6.3381'.
[  899.408658][T27521] netlink: 1296 bytes leftover after parsing attributes in process `syz.6.3381'.
[  899.421298][T27521] openvswitch: netlink: Flow key attr not present in new flow.
[  899.437484][   T29] audit: type=1400 audit(1736848873.714:858): avc:  denied  { getopt } for  pid=27517 comm="syz.6.3381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  899.495785][ T6082] udevd[6082]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  900.511928][T27542] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3387'.
[  900.534009][T27543] sctp: [Deprecated]: syz.9.3385 (pid 27543) Use of struct sctp_assoc_value in delayed_ack socket option.
[  900.534009][T27543] Use struct sctp_sack_info instead
[  902.066101][T27542] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  902.563553][T27572] syz.8.3388: attempt to access beyond end of device
[  902.563553][T27572] nbd8: rw=0, sector=0, nr_sectors = 1 limit=0
[  902.577136][T27572] hpfs: hpfs_map_sector(): read error
[  903.205424][    T9] usb 7-1: new high-speed USB device number 61 using dummy_hcd
[  903.365719][    T9] usb 7-1: Using ep0 maxpacket: 8
[  903.373351][    T9] usb 7-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice= 1.ef
[  903.384049][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  903.393969][    T9] usb 7-1: SerialNumber: syz
[  903.419322][T17652] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  903.479115][   T29] audit: type=1400 audit(1736848877.474:859): avc:  denied  { audit_write } for  pid=27580 comm="syz.5.3392" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  903.535845][    T9] usb 7-1: config 0 descriptor??
[  903.597818][T17652] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  903.788955][    T9] usb 7-1: can't set config #0, error -71
[  903.847397][T17652] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  903.883927][   T29] audit: type=1107 audit(1736848877.484:860): pid=27580 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='P'
[  903.902062][T17652] usb 10-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  903.914272][    T9] usb 7-1: USB disconnect, device number 61
[  903.922523][T17652] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  903.973465][T17652] usb 10-1: config 0 descriptor??
[  905.934080][T27583] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  906.722601][  T971] usb 7-1: new high-speed USB device number 62 using dummy_hcd
[  907.235779][  T971] usb 7-1: Using ep0 maxpacket: 16
[  907.267504][  T971] usb 7-1: config 0 has an invalid interface number: 251 but max is 0
[  907.275780][  T971] usb 7-1: config 0 has no interface number 0
[  907.284255][  T971] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  907.295052][  T971] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  907.308907][  T971] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  907.318077][  T971] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  907.326392][  T971] usb 7-1: Product: syz
[  907.330840][  T971] usb 7-1: Manufacturer: syz
[  907.335694][  T971] usb 7-1: SerialNumber: syz
[  907.348615][T27631] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  907.357777][  T971] usb 7-1: config 0 descriptor??
[  907.368470][T27619] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  907.387693][T27619] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  907.487037][T27646] Bluetooth: MGMT ver 1.23
[  907.526910][   T29] audit: type=1400 audit(1736848881.291:861): avc:  denied  { setattr } for  pid=27645 comm="syz.8.3401" name="event3" dev="devtmpfs" ino=1027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  907.584921][T27653] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27653 comm=syz.8.3401
[  907.619971][T27619] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  907.633557][T27619] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  907.759638][ T5856] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[  907.832402][T17652] usbhid 10-1:0.0: can't add hid device: -71
[  907.844462][T17652] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[  907.868783][T17652] usb 10-1: USB disconnect, device number 4
[  907.923678][ T5856] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  907.947191][ T5856] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  907.966412][ T5856] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  907.976610][ T5856] usb 3-1: config 1 has no interface number 1
[  907.982946][ T5856] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  908.001407][ T5856] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  908.018308][ T5856] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  908.027612][ T5856] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  908.036992][ T5856] usb 3-1: Product: syz
[  908.041566][ T5856] usb 3-1: Manufacturer: syz
[  908.046514][ T5856] usb 3-1: SerialNumber: syz
[  908.784831][T27647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  908.807725][T27647] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  908.853441][ T5856] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0
[  908.887047][ T5856] usb 3-1: MIDIStreaming interface descriptor not found
[  908.977369][ T5856] usb 3-1: USB disconnect, device number 67
[  909.041290][T27677] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  909.046392][T27706] input: syz1 as /devices/virtual/input/input72
[  909.571548][ T6014] udevd[6014]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  909.812385][T27733] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  909.917421][  T971] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  910.044434][  T971] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71
[  910.095622][  T971] asix 7-1:0.251: probe with driver asix failed with error -71
[  910.140004][  T971] usb 7-1: USB disconnect, device number 62
[  910.930644][T27755] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  911.373121][T27754] xt_l2tp: v2 tid > 0xffff: 262144
[  911.378353][T27755] xt_l2tp: v2 tid > 0xffff: 262144
[  912.494844][T27776] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  912.517099][T19069] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  912.541589][T27773] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  912.588747][T27773] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  912.677721][T19069] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  914.323608][T19069] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  914.533484][T19069] usb 10-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  914.694716][T19069] usb 10-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  914.933588][T19069] usb 10-1: config 1 interface 0 has no altsetting 0
[  915.191472][T27806] xt_l2tp: v2 tid > 0xffff: 262144
[  915.654327][T19069] usb 10-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.40
[  915.663760][T19069] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  915.671880][T19069] usb 10-1: Product: ᐄ
[  915.676123][T19069] usb 10-1: Manufacturer: ш
[  915.680703][T19069] usb 10-1: SerialNumber: Т
[  915.714948][T27785] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  915.930853][T19069] usb 10-1: can't set config #1, error -71
[  915.956251][T19069] usb 10-1: USB disconnect, device number 5
[  916.561987][T27831] netlink: 96 bytes leftover after parsing attributes in process `syz.9.3429'.
[  916.869468][  T971] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  917.062381][  T971] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  917.110708][  T971] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  917.121739][T27847] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3434'.
[  917.131590][  T971] usb 9-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  917.159266][  T971] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  917.210495][  T971] usb 9-1: config 0 descriptor??
[  917.255963][T27857] FAULT_INJECTION: forcing a failure.
[  917.255963][T27857] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  917.269554][T27857] CPU: 0 UID: 0 PID: 27857 Comm: syz.6.3436 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0
[  917.280318][T27857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  917.290372][T27857] Call Trace:
[  917.293638][T27857]  <TASK>
[  917.296558][T27857]  dump_stack_lvl+0x16c/0x1f0
[  917.301229][T27857]  should_fail_ex+0x497/0x5b0
[  917.305911][T27857]  _copy_to_user+0x32/0xd0
[  917.310322][T27857]  simple_read_from_buffer+0xd0/0x160
[  917.315681][T27857]  proc_fail_nth_read+0x198/0x270
[  917.320686][T27857]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  917.326211][T27857]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  917.331744][T27857]  vfs_read+0x1df/0xbe0
[  917.335890][T27857]  ? __fget_files+0x1fc/0x3a0
[  917.340568][T27857]  ? __pfx___mutex_lock+0x10/0x10
[  917.345596][T27857]  ? __pfx_vfs_read+0x10/0x10
[  917.350266][T27857]  ? __fget_files+0x206/0x3a0
[  917.354933][T27857]  ksys_read+0x12b/0x250
[  917.359162][T27857]  ? __pfx_ksys_read+0x10/0x10
[  917.363918][T27857]  do_syscall_64+0xcd/0x250
[  917.368412][T27857]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  917.374294][T27857] RIP: 0033:0x7f88ac78473c
[  917.378701][T27857] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  917.398300][T27857] RSP: 002b:00007f88aa5f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  917.406699][T27857] RAX: ffffffffffffffda RBX: 00007f88ac975fa0 RCX: 00007f88ac78473c
[  917.414657][T27857] RDX: 000000000000000f RSI: 00007f88aa5f60a0 RDI: 0000000000000005
[  917.422614][T27857] RBP: 00007f88aa5f6090 R08: 0000000000000000 R09: 0000000000000000
[  917.430571][T27857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  917.438527][T27857] R13: 0000000000000000 R14: 00007f88ac975fa0 R15: 00007fff4f3752d8
[  917.446497][T27857]  </TASK>
[  917.531448][ T7203] usb 6-1: new high-speed USB device number 61 using dummy_hcd
[  917.734639][ T7203] usb 6-1: Using ep0 maxpacket: 16
[  918.370814][ T7203] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  918.380009][ T7203] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  918.388391][ T7203] usb 6-1: Product: syz
[  918.392565][ T7203] usb 6-1: Manufacturer: syz
[  918.398746][ T7203] usb 6-1: SerialNumber: syz
[  918.445595][ T7203] usb 6-1: config 0 descriptor??
[  918.567924][T19069] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  918.578007][T27888] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3441'.
[  918.682731][T27890] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  918.697806][ T7203] usb 6-1: USB disconnect, device number 61
[  918.739020][T19069] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  918.747279][T27890] kvm: pic: level sensitive irq not supported
[  918.765530][T19069] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  919.075133][T19069] usb 10-1: New USB device found, idVendor=056a, idProduct=00bc, bcdDevice= 0.00
[  919.084895][T19069] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  919.094256][T27890] picdev_read: 4 callbacks suppressed
[  919.094270][T27890] kvm: pic: non byte read
[  919.105343][T27890] kvm: pic: non byte read
[  919.110093][T27890] kvm: pic: non byte read
[  919.117287][T19069] usb 10-1: config 0 descriptor??
[  919.122680][T27890] kvm: pic: non byte read
[  919.132980][T27890] kvm: pic: single mode not supported
[  919.133024][T27890] kvm: pic: level sensitive irq not supported
[  919.139005][T27890] kvm: pic: non byte read
[  919.316234][    T9] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[  919.377475][T27917] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3444'.
[  919.489188][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[  919.500726][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  919.529217][    T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9
[  919.591034][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  919.634721][    T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0
[  919.988721][    T9] usb 3-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39
[  919.998447][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  920.006662][    T9] usb 3-1: Product: syz
[  920.010849][    T9] usb 3-1: Manufacturer: syz
[  920.015516][    T9] usb 3-1: SerialNumber: syz
[  920.022267][  T971] usbhid 9-1:0.0: can't add hid device: -71
[  920.028428][  T971] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  920.039370][    T9] usb 3-1: config 0 descriptor??
[  920.046389][  T971] usb 9-1: USB disconnect, device number 5
[  920.049581][T27899] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  920.109040][T19069] usbhid 10-1:0.0: can't add hid device: -71
[  920.123923][    C0] usb 3-1: NFC: Urb failure (status -71)
[  920.130416][    T9] usb 3-1: NFC: Unable to get FW version
[  920.144346][    T9] pn533_usb 3-1:0.0: probe with driver pn533_usb failed with error -90
[  920.146319][T19069] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[  920.170122][T19069] usb 10-1: USB disconnect, device number 6
[  920.246351][ T7203] usb 6-1: new high-speed USB device number 62 using dummy_hcd
[  920.400768][  T971] usb 3-1: USB disconnect, device number 68
[  920.425746][T27954] cgroup: name respecified
[  920.481839][ T7203] usb 6-1: Using ep0 maxpacket: 8
[  920.730805][ T7203] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  920.745892][ T7203] usb 6-1: config 0 has no interfaces?
[  920.819680][ T7203] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  920.887613][ T7203] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  920.937757][   T29] audit: type=1400 audit(1736848893.825:862): avc:  denied  { mounton } for  pid=27966 comm="syz.6.3450" path="/proc/1447/task" dev="proc" ino=61514 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  920.964253][ T7203] usb 6-1: config 0 descriptor??
[  921.010732][   T29] audit: type=1400 audit(1736848893.825:863): avc:  denied  { ioctl } for  pid=27966 comm="syz.6.3450" path="socket:[61517]" dev="sockfs" ino=61517 ioctlcmd=0x662b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  921.036114][   T29] audit: type=1400 audit(1736848893.909:864): avc:  denied  { write } for  pid=27968 comm="syz.6.3450" name="task" dev="proc" ino=61514 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  921.079223][   T29] audit: type=1400 audit(1736848893.909:865): avc:  denied  { add_name } for  pid=27968 comm="syz.6.3450" name="core" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  921.143674][   T29] audit: type=1400 audit(1736848893.909:866): avc:  denied  { create } for  pid=27968 comm="syz.6.3450" name="core" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1
[  921.197253][   T29] audit: type=1400 audit(1736848893.909:867): avc:  denied  { associate } for  pid=27968 comm="syz.6.3450" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  921.625498][T19069] usb 7-1: new high-speed USB device number 63 using dummy_hcd
[  921.814115][T19069] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  921.829391][T19069] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  921.871684][T28010] sctp: [Deprecated]: syz.9.3459 (pid 28010) Use of struct sctp_assoc_value in delayed_ack socket option.
[  921.871684][T28010] Use struct sctp_sack_info instead
[  921.888385][T19069] usb 7-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  921.925526][T28011] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  921.998566][T28011] xt_l2tp: v2 tid > 0xffff: 262144
[  922.108991][T19069] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  922.641950][T19069] usb 7-1: config 0 descriptor??
[  923.344313][T28030] FAULT_INJECTION: forcing a failure.
[  923.344313][T28030] name failslab, interval 1, probability 0, space 0, times 0
[  923.364638][T28030] CPU: 0 UID: 0 PID: 28030 Comm: syz.2.3463 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0
[  923.375442][T28030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  923.385511][T28030] Call Trace:
[  923.388796][T28030]  <TASK>
[  923.391729][T28030]  dump_stack_lvl+0x16c/0x1f0
[  923.396425][T28030]  should_fail_ex+0x497/0x5b0
[  923.401115][T28030]  ? fs_reclaim_acquire+0xae/0x150
[  923.406238][T28030]  should_failslab+0xc2/0x120
[  923.410927][T28030]  __kmalloc_noprof+0xcb/0x510
[  923.415714][T28030]  genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290
[  923.422839][T28030]  ? cred_has_capability.isra.0+0x192/0x2f0
[  923.428757][T28030]  genl_family_rcv_msg_doit+0xbf/0x2f0
[  923.434230][T28030]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  923.435926][ T7203] usb 6-1: USB disconnect, device number 62
[  923.440300][T28030]  ? bpf_lsm_capable+0x9/0x10
[  923.440322][T28030]  ? security_capable+0x7e/0x260
[  923.455811][T28030]  genl_rcv_msg+0x565/0x800
[  923.460338][T28030]  ? __pfx_genl_rcv_msg+0x10/0x10
[  923.465368][T28030]  ? __pfx_nl802154_pre_doit+0x10/0x10
[  923.470844][T28030]  ? __pfx_nl802154_set_cca_ed_level+0x10/0x10
[  923.477004][T28030]  ? __pfx_nl802154_post_doit+0x10/0x10
[  923.482568][T28030]  ? __pfx___lock_acquire+0x10/0x10
[  923.487790][T28030]  netlink_rcv_skb+0x16b/0x440
[  923.492572][T28030]  ? __pfx_genl_rcv_msg+0x10/0x10
[  923.497606][T28030]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  923.502915][T28030]  ? down_read+0xc9/0x330
[  923.507260][T28030]  ? __pfx_down_read+0x10/0x10
[  923.512043][T28030]  ? netlink_deliver_tap+0x1ae/0xd30
[  923.517358][T28030]  genl_rcv+0x28/0x40
[  923.521354][T28030]  netlink_unicast+0x53c/0x7f0
[  923.526139][T28030]  ? __pfx_netlink_unicast+0x10/0x10
[  923.531445][T28030]  netlink_sendmsg+0x8b8/0xd70
[  923.536226][T28030]  ? __pfx_netlink_sendmsg+0x10/0x10
[  923.541533][T28030]  ____sys_sendmsg+0xaaf/0xc90
[  923.546309][T28030]  ? copy_msghdr_from_user+0x10b/0x160
[  923.551771][T28030]  ? __pfx_____sys_sendmsg+0x10/0x10
[  923.557063][T28030]  ___sys_sendmsg+0x135/0x1e0
[  923.561740][T28030]  ? __pfx____sys_sendmsg+0x10/0x10
[  923.566940][T28030]  ? __pfx_lock_release+0x10/0x10
[  923.571953][T28030]  ? trace_lock_acquire+0x14e/0x1f0
[  923.577150][T28030]  ? __fget_files+0x206/0x3a0
[  923.581831][T28030]  __sys_sendmsg+0x16e/0x220
[  923.586420][T28030]  ? __pfx___sys_sendmsg+0x10/0x10
[  923.591532][T28030]  do_syscall_64+0xcd/0x250
[  923.596035][T28030]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  923.601923][T28030] RIP: 0033:0x7fbbf6385d29
[  923.606335][T28030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  923.625931][T28030] RSP: 002b:00007fbbf7189038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  923.634419][T28030] RAX: ffffffffffffffda RBX: 00007fbbf6575fa0 RCX: 00007fbbf6385d29
[  923.642374][T28030] RDX: 0000000000000050 RSI: 0000000020001740 RDI: 0000000000000004
[  923.650334][T28030] RBP: 00007fbbf7189090 R08: 0000000000000000 R09: 0000000000000000
[  923.658300][T28030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  923.666306][T28030] R13: 0000000000000000 R14: 00007fbbf6575fa0 R15: 00007ffedcbc6d78
[  923.674282][T28030]  </TASK>
[  924.158097][T28051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3467'.
[  924.158302][T28049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3467'.
[  924.292468][ T7197] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  924.620312][ T7197] usb 9-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  924.630789][ T7197] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  924.648284][ T7197] usb 9-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53
[  924.658926][ T7197] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  924.688762][T28059] netlink: 'syz.2.3468': attribute type 1 has an invalid length.
[  924.750744][ T7197] usb 9-1: config 0 descriptor??
[  924.758736][T28059] 8021q: adding VLAN 0 to HW filter on device bond1
[  924.823876][T28059] bond1: (slave gretap1): making interface the new active one
[  924.838653][T28059] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  924.874188][T28059] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  924.972267][T28033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  924.983670][T28033] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  925.033466][ T7197] usb 9-1: string descriptor 0 read error: -71
[  925.213403][ T7197] usb 9-1: USB disconnect, device number 6
[  925.318002][T28120] FAULT_INJECTION: forcing a failure.
[  925.318002][T28120] name failslab, interval 1, probability 0, space 0, times 0
[  925.331276][T28120] CPU: 1 UID: 0 PID: 28120 Comm: syz.2.3469 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0
[  925.342044][T28120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  925.352100][T28120] Call Trace:
[  925.355376][T28120]  <TASK>
[  925.358305][T28120]  dump_stack_lvl+0x16c/0x1f0
[  925.362991][T28120]  should_fail_ex+0x497/0x5b0
[  925.367677][T28120]  ? fs_reclaim_acquire+0xae/0x150
[  925.372794][T28120]  should_failslab+0xc2/0x120
[  925.377477][T28120]  __kmalloc_noprof+0xcb/0x510
[  925.382252][T28120]  tomoyo_encode2+0x100/0x3e0
[  925.386939][T28120]  tomoyo_encode+0x29/0x50
[  925.391361][T28120]  tomoyo_mount_acl+0x145/0x880
[  925.396215][T28120]  ? hlock_class+0x4e/0x130
[  925.400724][T28120]  ? __lock_acquire+0x15a9/0x3c40
[  925.405754][T28120]  ? __pfx_tomoyo_mount_acl+0x10/0x10
[  925.411134][T28120]  ? find_held_lock+0x2d/0x110
[  925.415907][T28120]  ? __pfx___lock_acquire+0x10/0x10
[  925.421116][T28120]  ? finish_task_switch.isra.0+0x212/0xcc0
[  925.426931][T28120]  ? __pfx_lock_release+0x10/0x10
[  925.431972][T28120]  ? trace_lock_acquire+0x14e/0x1f0
[  925.437176][T28120]  ? tomoyo_mount_permission+0x149/0x420
[  925.442814][T28120]  ? lock_acquire+0x2f/0xb0
[  925.447317][T28120]  ? tomoyo_mount_permission+0x149/0x420
[  925.452958][T28120]  tomoyo_mount_permission+0x16e/0x420
[  925.458418][T28120]  ? tomoyo_mount_permission+0x149/0x420
[  925.464061][T28120]  ? __pfx_tomoyo_mount_permission+0x10/0x10
[  925.470052][T28120]  ? get_current_fs_domain+0x184/0x1f0
[  925.475526][T28120]  security_sb_mount+0x9b/0x260
[  925.480380][T28120]  path_mount+0x129/0x1f10
[  925.484803][T28120]  ? __pfx_path_mount+0x10/0x10
[  925.489665][T28120]  __x64_sys_mount+0x294/0x320
[  925.494430][T28120]  ? __pfx___x64_sys_mount+0x10/0x10
[  925.499725][T28120]  do_syscall_64+0xcd/0x250
[  925.504239][T28120]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  925.510137][T28120] RIP: 0033:0x7fbbf6385d29
[  925.514543][T28120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  925.534125][T28120] RSP: 002b:00007fbbf7147038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  925.542513][T28120] RAX: ffffffffffffffda RBX: 00007fbbf6576160 RCX: 00007fbbf6385d29
[  925.550464][T28120] RDX: 0000000020000340 RSI: 00000000200000c0 RDI: 0000000000000000
[  925.558409][T28120] RBP: 00007fbbf7147090 R08: 0000000020000140 R09: 0000000000000000
[  925.566351][T28120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  925.574295][T28120] R13: 0000000000000000 R14: 00007fbbf6576160 R15: 00007ffedcbc6d78
[  925.582258][T28120]  </TASK>
[  925.672610][T19069] usbhid 7-1:0.0: can't add hid device: -71
[  925.681814][T19069] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  925.728824][T19069] usb 7-1: USB disconnect, device number 63
[  925.802748][ T6016] udevd[6016]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  925.955373][ T7203] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  926.139808][ T7203] usb 10-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  926.149156][ T7203] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  926.157255][ T7203] usb 10-1: Product: syz
[  926.349658][ T7203] usb 10-1: Manufacturer: syz
[  926.558179][ T7203] usb 10-1: SerialNumber: syz
[  926.803895][ T7203] usb 10-1: config 0 descriptor??
[  926.837925][ T7203] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  926.992075][ T5856] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  927.050328][ T7203] gspca_sunplus: reg_r err -71
[  927.059456][ T7203] usb 10-1: USB disconnect, device number 7
[  927.130963][ T7197] usb 3-1: new high-speed USB device number 69 using dummy_hcd
[  927.131220][ T5856] usb 9-1: device descriptor read/64, error -71
[  927.292864][ T7197] usb 3-1: config 129 has an invalid interface number: 249 but max is 0
[  927.316908][ T7197] usb 3-1: config 129 has no interface number 0
[  927.323611][ T7197] usb 3-1: config 129 interface 249 has no altsetting 0
[  927.330788][ T7197] usb 3-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=99.21
[  927.340010][ T7197] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  927.422910][ T5856] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  927.468033][T28177] FAULT_INJECTION: forcing a failure.
[  927.468033][T28177] name failslab, interval 1, probability 0, space 0, times 0
[  927.481408][T28177] CPU: 1 UID: 0 PID: 28177 Comm: syz.6.3478 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0
[  927.492171][T28177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  927.502221][T28177] Call Trace:
[  927.505497][T28177]  <TASK>
[  927.508429][T28177]  dump_stack_lvl+0x16c/0x1f0
[  927.513119][T28177]  should_fail_ex+0x497/0x5b0
[  927.517808][T28177]  ? fs_reclaim_acquire+0xae/0x150
[  927.522927][T28177]  should_failslab+0xc2/0x120
[  927.527613][T28177]  __kmalloc_cache_noprof+0x68/0x410
[  927.532901][T28177]  ? __nla_parse+0x40/0x60
[  927.537327][T28177]  flow_change+0x3a9/0x1b40
[  927.541842][T28177]  ? __pfx_flow_change+0x10/0x10
[  927.546775][T28177]  ? __mutex_unlock_slowpath+0x164/0x690
[  927.552410][T28177]  ? __pfx_flow_get+0x10/0x10
[  927.557086][T28177]  ? __pfx_flow_change+0x10/0x10
[  927.562011][T28177]  tc_new_tfilter+0xa24/0x2330
[  927.566785][T28177]  ? __pfx_tc_new_tfilter+0x10/0x10
[  927.571976][T28177]  ? __pfx___lock_acquire+0x10/0x10
[  927.577191][T28177]  ? rtnetlink_rcv_msg+0x93a/0xea0
[  927.580157][ T5856] usb 9-1: device descriptor read/64, error -71
[  927.582299][T28177]  ? __pfx_lock_release+0x10/0x10
[  927.593542][T28177]  ? trace_lock_acquire+0x14e/0x1f0
[  927.598761][T28177]  ? __pfx_tc_new_tfilter+0x10/0x10
[  927.603977][T28177]  rtnetlink_rcv_msg+0x95b/0xea0
[  927.608932][T28177]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  927.614419][T28177]  netlink_rcv_skb+0x16b/0x440
[  927.619196][T28177]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  927.624665][T28177]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  927.629975][T28177]  ? netlink_deliver_tap+0x1ae/0xd30
[  927.635278][T28177]  netlink_unicast+0x53c/0x7f0
[  927.640070][T28177]  ? __pfx_netlink_unicast+0x10/0x10
[  927.645377][T28177]  netlink_sendmsg+0x8b8/0xd70
[  927.650156][T28177]  ? __pfx_netlink_sendmsg+0x10/0x10
[  927.655461][T28177]  ____sys_sendmsg+0xaaf/0xc90
[  927.660221][T28177]  ? copy_msghdr_from_user+0x10b/0x160
[  927.665679][T28177]  ? __pfx_____sys_sendmsg+0x10/0x10
[  927.670984][T28177]  ___sys_sendmsg+0x135/0x1e0
[  927.675662][T28177]  ? __pfx____sys_sendmsg+0x10/0x10
[  927.680873][T28177]  ? __pfx_lock_release+0x10/0x10
[  927.685904][T28177]  ? trace_lock_acquire+0x14e/0x1f0
[  927.691132][T28177]  ? __fget_files+0x206/0x3a0
[  927.695818][T28177]  __sys_sendmsg+0x16e/0x220
[  927.700413][T28177]  ? __pfx___sys_sendmsg+0x10/0x10
[  927.705543][T28177]  do_syscall_64+0xcd/0x250
[  927.707771][ T5856] usb usb9-port1: attempt power cycle
[  927.710050][T28177]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  927.710078][T28177] RIP: 0033:0x7f88ac785d29
[  927.710093][T28177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  927.710110][T28177] RSP: 002b:00007f88aa5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  927.710130][T28177] RAX: ffffffffffffffda RBX: 00007f88ac975fa0 RCX: 00007f88ac785d29
[  927.710143][T28177] RDX: 0000000000000000 RSI: 0000000020006040 RDI: 0000000000000004
[  927.710155][T28177] RBP: 00007f88aa5f6090 R08: 0000000000000000 R09: 0000000000000000
[  927.710167][T28177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  927.710178][T28177] R13: 0000000000000000 R14: 00007f88ac975fa0 R15: 00007fff4f3752d8
[  927.710204][T28177]  </TASK>
[  927.710284][    C1] vkms_vblank_simulate: vblank timer overrun
[  927.726157][ T7197] usb 3-1: string descriptor 0 read error: -71
[  927.865465][ T7197] redrat3 3-1:129.249: Couldn't find all endpoints
[  927.905052][ T7197] usb 3-1: USB disconnect, device number 69
[  928.092857][T28205] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3480'.
[  928.446074][ T5856] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  928.476769][ T5856] usb 9-1: device descriptor read/8, error -71
[  929.140987][  T971] usb 7-1: new high-speed USB device number 64 using dummy_hcd
[  929.257048][ T5856] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  929.281749][T28220] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  929.290685][ T5856] usb 9-1: device descriptor read/8, error -71
[  929.383013][  T971] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  929.397825][  T971] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  929.415231][  T971] usb 7-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  929.424380][  T971] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  929.472409][  T971] usb 7-1: config 0 descriptor??
[  929.477576][ T5856] usb usb9-port1: unable to enumerate USB device
[  929.736139][T28234] infiniband syz1: set active
[  929.766475][T28237] input: syz0 as /devices/virtual/input/input73
[  929.821696][T28237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3485'.
[  930.311395][T28237] bond2: entered promiscuous mode
[  930.316444][T28237] bond2: entered allmulticast mode
[  930.321919][T28237] 8021q: adding VLAN 0 to HW filter on device bond2
[  930.341565][ T5856] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  931.393671][ T5856] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  931.435380][T28296] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3489'.
[  931.848941][T28298] libceph: resolve '+�lc' (ret=-3): failed
[  932.433729][  T971] usbhid 7-1:0.0: can't add hid device: -71
[  932.440160][  T971] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  932.459735][  T971] usb 7-1: USB disconnect, device number 64
[  932.942169][T28348] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  933.291651][  T971] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  933.408278][T28359] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3499'.
[  934.053140][  T971] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  934.064392][  T971] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  934.241083][  T971] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  934.423458][  T971] usb 9-1: config 1 has no interface number 1
[  934.474916][ T5856] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  934.482661][  T971] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  934.497070][ T5856] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  934.504969][  T971] usb 9-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  934.517932][ T5856] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  934.526927][ T5856] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  934.555958][ T5856] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  934.573213][  T971] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  934.582597][  T971] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  934.590598][  T971] usb 9-1: Product: syz
[  934.595376][ T5856] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  934.610164][ T5856] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  934.618182][  T971] usb 9-1: Manufacturer: syz
[  934.624235][  T971] usb 9-1: SerialNumber: syz
[  934.629128][ T5856] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  934.649030][ T5856] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  934.658190][ T5856] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  934.666491][ T5856] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  934.674189][ T5856] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  934.682482][ T5856] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  934.689535][ T7202] usb 6-1: new high-speed USB device number 63 using dummy_hcd
[  934.704207][ T5856] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  934.712778][ T5856] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  934.720527][ T5856] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  934.728127][ T5856] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  934.735890][ T5856] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  934.744238][ T5856] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  934.751657][ T5856] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  934.759148][ T5856] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  934.766693][ T5856] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  934.774132][ T5856] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  934.781636][ T5856] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  934.789128][ T5856] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  934.797359][ T5856] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  934.804844][ T5856] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  934.812458][ T5856] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  934.820117][ T5856] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  934.827586][ T5856] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  934.835643][ T5856] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  934.843445][ T5856] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  934.852409][ T7203] usb 3-1: new high-speed USB device number 70 using dummy_hcd
[  934.924186][  T971] usb 9-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0
[  934.958653][  T971] usb 9-1: MIDIStreaming interface descriptor not found
[  935.048156][ T5856] hid-generic 0000:0000:0003.0019: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  935.331471][  T971] usb 9-1: USB disconnect, device number 11
[  935.334677][ T7202] usb 6-1: config 0 has no interfaces?
[  935.342964][ T7202] usb 6-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[  935.374408][ T7202] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  935.388529][ T7202] usb 6-1: config 0 descriptor??
[  935.491311][ T7203] usb 3-1: Using ep0 maxpacket: 8
[  935.497992][ T7203] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  935.508241][ T7203] usb 3-1: config 0 has no interfaces?
[  935.523321][ T7203] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  935.532409][ T7203] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  935.564512][ T7203] usb 3-1: config 0 descriptor??
[  935.588359][ T6014] udevd[6014]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  935.815751][ T7202] usb 6-1: USB disconnect, device number 63
[  936.042350][T17652] usb 10-1: new full-speed USB device number 8 using dummy_hcd
[  936.071725][T28442] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  936.228424][T17652] usb 10-1: not running at top speed; connect to a high speed hub
[  936.240735][T17652] usb 10-1: config 11 has an invalid interface number: 59 but max is 3
[  936.259893][T17652] usb 10-1: config 11 has an invalid descriptor of length 0, skipping remainder of the config
[  936.280181][T17652] usb 10-1: config 11 has 1 interface, different from the descriptor's value: 4
[  936.292179][   T29] audit: type=1400 audit(1736848908.193:868): avc:  denied  { write } for  pid=28465 comm="syz.6.3514" name="file0" dev="tmpfs" ino=2429 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  936.293409][T17652] usb 10-1: config 11 has no interface number 0
[  936.334686][   T29] audit: type=1400 audit(1736848908.193:869): avc:  denied  { open } for  pid=28465 comm="syz.6.3514" path="/435/file0" dev="tmpfs" ino=2429 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  936.337991][T17652] usb 10-1: config 11 interface 59 has no altsetting 0
[  936.375789][   T29] audit: type=1400 audit(1736848908.268:870): avc:  denied  { ioctl } for  pid=28465 comm="syz.6.3514" path="/435/file0" dev="tmpfs" ino=2429 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  936.377219][T17652] usb 10-1: New USB device found, idVendor=1901, idProduct=0193, bcdDevice=2e.3d
[  936.400086][    C1] vkms_vblank_simulate: vblank timer overrun
[  936.430692][T28467] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  936.454263][   T29] audit: type=1400 audit(1736848908.314:871): avc:  denied  { mounton } for  pid=28465 comm="syz.6.3514" path="/435/file0" dev="tmpfs" ino=2429 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  936.485352][T17652] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  936.497456][T17652] usb 10-1: Product: ￂ垔鿸⏫䑾ꀴ䋂ň沈Ꙍ휔晔х쒨뒫饬줹Ⱇ鿟㹿迳댝窐ࢡ䗣礼腸䲣⪃蔐愣ᇮịﯘꂈ썍疪閺籴膖됚惨໻ퟒ
[  936.526517][T17652] usb 10-1: Manufacturer: 땝洭촚Ƛ빒궘틅聆톩嵘墮烄ꪽﲴ꓇终踆佺ｖ茔噻猗⟒╩⸥촯Ꚉ忠髜᮱Ίstე籁键᎕ˆ琟唽
[  936.549696][T17652] usb 10-1: SerialNumber: 载갩匣囓쏻䝔᠟爒ܣऩ膋䁒㹏ꕷ⚌ッ탽뾮鞌ꉑᱻ뾅핺菡漰捗࠯诙근靜蝫暡蚄궐꼃ѧ俥疎憁궕༳⸭䆫鐞჊䚪㎕腿ᯒ囍붼ƹ嫥毫횏晴룿⯻쿃揞ꊪ呧莜躰ꌏ큞햎ꬖ䏌뙩஛渨륿㋺㪒唢ᬖ⧉羓㺞셜
[  936.582407][T17652] usb 10-1: rejected 1 configuration due to insufficient available bus power
[  936.591315][T17652] usb 10-1: no configuration chosen from 1 choice
[  936.612129][T28482] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  936.923546][ T5856] usb 6-1: new high-speed USB device number 64 using dummy_hcd
[  937.233627][ T5856] usb 6-1: Using ep0 maxpacket: 16
[  937.241844][ T5856] usb 6-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76
[  937.251163][ T5856] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  937.259309][ T5856] usb 6-1: Product: syz
[  937.264147][ T5856] usb 6-1: Manufacturer: syz
[  937.268839][ T5856] usb 6-1: SerialNumber: syz
[  937.282424][ T5856] usb 6-1: config 0 descriptor??
[  937.383412][ T7203] usb 7-1: new high-speed USB device number 65 using dummy_hcd
[  937.672166][ T7203] usb 7-1: Using ep0 maxpacket: 32
[  937.685691][ T7203] usb 7-1: config 0 has an invalid interface number: 51 but max is 0
[  937.768886][ T7203] usb 7-1: config 0 has no interface number 0
[  937.902931][ T7203] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  938.000614][ T7203] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  938.145908][ T7203] usb 7-1: Product: syz
[  938.183234][ T5856] usb 6-1: ignoring: not an USB2CAN converter
[  938.193776][ T7203] usb 7-1: Manufacturer: syz
[  938.194130][ T5856] usb 6-1: USB disconnect, device number 64
[  938.222151][ T7203] usb 7-1: SerialNumber: syz
[  938.225679][  T971] usb 3-1: USB disconnect, device number 70
[  938.240217][ T7203] usb 7-1: config 0 descriptor??
[  938.256636][ T7203] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  938.479192][ T7203] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  938.529263][ T7203] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  938.655976][  T971] usb 3-1: new high-speed USB device number 71 using dummy_hcd
[  938.971660][ T7203] usb 10-1: USB disconnect, device number 8
[  939.218049][T28548] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  939.308843][  T971] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  939.317783][  T971] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  939.334140][T28492] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10)
[  939.340776][T28492] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  939.387098][  T971] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  939.443380][T28492] vhci_hcd vhci_hcd.0: Device attached
[  939.531300][  T971] usb 3-1: config 1 has no interface number 1
[  939.560249][  T971] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  939.562149][    C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71
[  939.573461][T28552] vhci_hcd: connection closed
[  939.585326][ T7203] usb 7-1: USB disconnect, device number 65
[  939.613162][ T7203] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  939.626797][   T11] vhci_hcd: stop threads
[  939.631283][   T11] vhci_hcd: release socket
[  939.636177][   T11] vhci_hcd: disconnect device
[  939.637253][  T971] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  939.658356][ T7203] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  939.673166][    T9] usb 45-1: new low-speed USB device number 3 using vhci_hcd
[  939.680587][    T9] usb 45-1: enqueue for inactive port 0
[  939.690213][  T971] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  939.702711][  T971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  939.713335][  T971] usb 3-1: Product: syz
[  939.718236][  T971] usb 3-1: Manufacturer: syz
[  939.724121][  T971] usb 3-1: SerialNumber: syz
[  939.735019][ T7203] quatech2 7-1:0.51: device disconnected
[  939.756656][    T9] vhci_hcd: vhci_device speed not set
[  941.154856][T28591] xt_l2tp: v2 tid > 0xffff: 262144
[  941.230027][  T971] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0
[  941.237819][  T971] usb 3-1: MIDIStreaming interface descriptor not found
[  941.631778][  T971] usb 3-1: USB disconnect, device number 71
[  942.955051][T28633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  943.282005][T28633] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  943.562604][ T6082] udevd[6082]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  943.615908][ T7203] usb 7-1: new high-speed USB device number 66 using dummy_hcd
[  943.776513][ T7203] usb 7-1: device descriptor read/64, error -71
[  943.811768][T28669] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3537'.
[  943.924445][T28659] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  943.948231][T28659] kvm: pic: level sensitive irq not supported
[  943.948393][T28659] kvm: pic: non byte read
[  943.960448][T28659] kvm: pic: level sensitive irq not supported
[  943.960621][T28659] kvm: pic: non byte read
[  943.973307][T28659] kvm: pic: level sensitive irq not supported
[  943.973681][T28659] kvm: pic: non byte read
[  943.994915][T28659] kvm: pic: level sensitive irq not supported
[  943.995277][T28659] kvm: pic: non byte read
[  944.172565][ T7203] usb 7-1: new high-speed USB device number 67 using dummy_hcd
[  944.554343][T28678] xt_l2tp: v2 tid > 0xffff: 262144
[  944.610342][ T7203] usb 7-1: device descriptor read/64, error -71
[  944.729639][ T7203] usb usb7-port1: attempt power cycle
[  944.757639][T28688] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3540'.
[  944.846031][   T29] audit: type=1326 audit(1736848916.200:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28690 comm="syz.8.3541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88f185d29 code=0x7ffc0000
[  944.945817][T21023] Bluetooth: hci5: unexpected event for opcode 0x2024
[  944.975947][   T29] audit: type=1326 audit(1736848916.200:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28690 comm="syz.8.3541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88f185d29 code=0x7ffc0000
[  945.047661][   T29] audit: type=1326 audit(1736848916.284:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28690 comm="syz.8.3541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa88f1847df code=0x7ffc0000
[  945.137210][T28701] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  945.151173][ T7203] usb 7-1: new high-speed USB device number 68 using dummy_hcd
[  945.201905][   T29] audit: type=1326 audit(1736848916.284:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28690 comm="syz.8.3541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88f185d29 code=0x7ffc0000
[  945.274835][ T7203] usb 7-1: device descriptor read/8, error -71
[  945.631084][   T29] audit: type=1326 audit(1736848916.284:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28690 comm="syz.8.3541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88f185d29 code=0x7ffc0000
[  945.674380][ T7203] usb 7-1: new high-speed USB device number 69 using dummy_hcd
[  945.777587][ T7203] usb 7-1: device descriptor read/8, error -71
[  945.810638][   T29] audit: type=1326 audit(1736848916.284:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28690 comm="syz.8.3541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa88f185d29 code=0x7ffc0000
[  945.924371][ T7203] usb usb7-port1: unable to enumerate USB device
[  945.926498][ T5856] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  945.930925][T19069] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  946.014803][   T29] audit: type=1326 audit(1736848916.284:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28690 comm="syz.8.3541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88f185d29 code=0x7ffc0000
[  946.049674][   T29] audit: type=1326 audit(1736848916.284:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28690 comm="syz.8.3541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88f185d29 code=0x7ffc0000
[  946.064902][T28720] fuse: Unknown parameter 'g-��_id'
[  946.125960][ T5856] usb 9-1: config 0 has an invalid interface number: 156 but max is 0
[  946.136231][ T5856] usb 9-1: config 0 has no interface number 0
[  946.235178][ T5856] usb 9-1: config 0 interface 156 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D
[  946.248010][   T29] audit: type=1326 audit(1736848916.284:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28690 comm="syz.8.3541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa88f185d29 code=0x7ffc0000
[  946.406523][   T29] audit: type=1326 audit(1736848916.284:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28690 comm="syz.8.3541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88f185d29 code=0x7ffc0000
[  946.631527][T19069] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  946.761847][ T5856] usb 9-1: config 0 interface 156 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0
[  946.771845][ T5856] usb 9-1: config 0 interface 156 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0
[  946.781838][ T5856] usb 9-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  946.791360][ T5856] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  946.801386][ T5856] usb 9-1: config 0 descriptor??
[  946.809545][T19069] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  946.809926][ T5856] gspca_main: spca561-2.14.0 probing abcd:cdee
[  946.821429][T19069] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  946.836158][T19069] usb 10-1: config 1 has no interface number 1
[  946.842542][T19069] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  946.855720][T19069] usb 10-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  947.742220][T19069] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  947.743271][ T5856] spca561 9-1:0.156: probe with driver spca561 failed with error -22
[  947.760314][T19069] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  947.784650][ T5856] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[  947.809348][T19069] usb 10-1: Product: syz
[  947.937106][T19069] usb 10-1: Manufacturer: syz
[  947.941833][T19069] usb 10-1: SerialNumber: syz
[  947.962576][ T5856] usb 9-1: MIDIStreaming interface descriptor not found
[  948.068775][ T5856] usb 9-1: USB disconnect, device number 12
[  948.256322][T19069] usb 10-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0
[  948.263868][T19069] usb 10-1: MIDIStreaming interface descriptor not found
[  948.311916][T19069] usb 10-1: USB disconnect, device number 9
[  948.325684][T28783] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3549'.
[  948.940683][ T6082] udevd[6082]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  949.338735][T28811] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=28811 comm=syz.5.3550
[  952.447850][T28844] netlink: 440 bytes leftover after parsing attributes in process `syz.8.3561'.
[  952.821864][T28844] netlink: 96 bytes leftover after parsing attributes in process `syz.8.3561'.
[  952.847429][T20544] Bluetooth: Error in BCSP hdr checksum
[  952.864617][T20525] Bluetooth: Error in BCSP hdr checksum
[  953.123266][T20525] Bluetooth: Error in BCSP hdr checksum
[  953.169288][T28872] fuse: Unknown parameter 'fsuuid'
[  953.363159][T28881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3569'.
[  953.398147][T19070] Bluetooth: Error in BCSP hdr checksum
[  953.411137][T28881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3569'.
[  953.425700][T28881] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3569'.
[  953.487372][   T54] block nbd7: Receive control failed (result -107)
[  953.537145][T28881] nbd7: detected capacity change from 0 to 8866461766385920
[  953.556118][ T6087] block nbd7: Dead connection, failed to find a fallback
[  953.585582][ T6087] block nbd7: shutting down sockets
[  953.606837][ T6087] blk_print_req_error: 6 callbacks suppressed
[  953.606906][ T6087] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  953.626019][ T6087] buffer_io_error: 6 callbacks suppressed
[  953.626060][ T6087] Buffer I/O error on dev nbd7, logical block 0, async page read
[  953.682477][ T6225] Bluetooth: Error in BCSP hdr checksum
[  953.698834][ T6087] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  953.709250][ T6087] Buffer I/O error on dev nbd7, logical block 0, async page read
[  953.717384][ T6087] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  953.726776][ T6087] Buffer I/O error on dev nbd7, logical block 0, async page read
[  953.734998][ T6087] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  953.745302][ T6087] Buffer I/O error on dev nbd7, logical block 0, async page read
[  953.758087][ T6087] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  953.767217][ T6087] Buffer I/O error on dev nbd7, logical block 0, async page read
[  953.775163][ T6087] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  953.786074][ T6087] Buffer I/O error on dev nbd7, logical block 0, async page read
[  953.804911][ T6087] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  953.814550][ T6087] Buffer I/O error on dev nbd7, logical block 0, async page read
[  953.823835][ T6087] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  953.832995][ T6087] Buffer I/O error on dev nbd7, logical block 0, async page read
[  953.890592][ T6087] ldm_validate_partition_table(): Disk read failed.
[  953.902372][ T6087] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  953.902777][ T6087] Buffer I/O error on dev nbd7, logical block 0, async page read
[  953.905254][ T6087] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  953.912497][ T6087] Buffer I/O error on dev nbd7, logical block 0, async page read
[  953.943496][ T6087] Dev nbd7: unable to read RDB block 0
[  953.946965][ T6087]  nbd7: unable to read partition table
[  954.075534][ T6087] ldm_validate_partition_table(): Disk read failed.
[  954.077568][ T6087] Dev nbd7: unable to read RDB block 0
[  954.080054][ T6087]  nbd7: unable to read partition table
[  954.080814][T20525] Bluetooth: Error in BCSP hdr checksum
[  954.183116][T28927] netlink: 1788 bytes leftover after parsing attributes in process `syz.2.3574'.
[  954.372279][ T6420] Bluetooth: Error in BCSP hdr checksum
[  954.659453][T21023] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  955.279454][T20525] Bluetooth: Error in BCSP hdr checksum
[  955.561462][ T7195] Bluetooth: Error in BCSP hdr checksum
[  955.706949][ T7203] usb 7-1: new high-speed USB device number 70 using dummy_hcd
[  955.714621][ T7197] usb 10-1: new full-speed USB device number 10 using dummy_hcd
[  955.889077][ T7203] usb 7-1: Using ep0 maxpacket: 8
[  955.896755][ T7197] usb 10-1: unable to get BOS descriptor or descriptor too short
[  955.906603][ T7203] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  955.933560][ T7197] usb 10-1: not running at top speed; connect to a high speed hub
[  955.961731][ T7203] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  955.975553][ T7197] usb 10-1: config 106 has an invalid interface number: 8 but max is 0
[  956.012648][ T7197] usb 10-1: config 106 has no interface number 0
[  956.019742][ T7203] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  956.042250][ T7197] usb 10-1: config 106 interface 8 has no altsetting 0
[  956.052008][ T7203] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  956.062732][ T7197] usb 10-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=93.dd
[  956.072454][ T7197] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  956.080621][ T7197] usb 10-1: Product: syz
[  956.085311][ T7197] usb 10-1: Manufacturer: syz
[  956.093878][ T7197] usb 10-1: SerialNumber: syz
[  956.095414][T28960] loop9: detected capacity change from 0 to 7
[  956.099345][ T7203] usb 7-1: config 0 descriptor??
[  956.124532][T28960] Dev loop9: unable to read RDB block 7
[  956.130747][T28960]  loop9: unable to read partition table
[  956.143167][T28960] loop9: partition table beyond EOD, truncated
[  956.153136][T28960] loop_reread_partitions: partition scan of loop9 (�被x������ ) failed (rc=-5)
[  956.393974][T28976] input: syz1 as /devices/virtual/input/input74
[  956.422565][   T29] kauditd_printk_skb: 38 callbacks suppressed
[  956.422581][   T29] audit: type=1400 audit(1736848927.013:920): avc:  denied  { read } for  pid=28973 comm="syz.8.3583" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  956.456132][   T29] audit: type=1400 audit(1736848927.050:921): avc:  denied  { open } for  pid=28973 comm="syz.8.3583" path="/72/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  956.560537][ T7197] kalmia 10-1:106.8 (unnamed net_device) (uninitialized): Error sending init packet. Status -22
[  956.571458][ T7197] kalmia 10-1:106.8: probe with driver kalmia failed with error -22
[  956.743311][T28988] pimreg3: entered allmulticast mode
[  957.022103][ T5898] usb 6-1: new high-speed USB device number 65 using dummy_hcd
[  957.346482][T29005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  957.470584][T29005] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  957.631351][ T5898] usb 6-1: Using ep0 maxpacket: 32
[  957.642826][ T5898] usb 6-1: config 0 has an invalid interface number: 184 but max is 0
[  957.663401][ T5898] usb 6-1: config 0 has no interface number 0
[  957.669511][ T5898] usb 6-1: config 0 interface 184 has no altsetting 0
[  957.690473][ T5898] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  957.699736][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  957.708550][ T5898] usb 6-1: Product: syz
[  957.712719][ T5898] usb 6-1: Manufacturer: syz
[  957.717352][ T5898] usb 6-1: SerialNumber: syz
[  957.724411][ T5898] usb 6-1: config 0 descriptor??
[  957.732926][ T5898] smsc75xx v1.0.0
[  957.959709][T28994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  957.982394][T28994] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  958.076481][T29023] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  958.083624][T29023] overlayfs: failed to set xattr on upper
[  958.089380][T29023] overlayfs: ...falling back to redirect_dir=nofollow.
[  958.096291][T29023] overlayfs: ...falling back to index=off.
[  958.102159][T29023] overlayfs: ...falling back to uuid=null.
[  958.664934][ T7197] usb 7-1: USB disconnect, device number 70
[  958.777635][   T29] audit: type=1400 audit(1736848929.230:922): avc:  denied  { create } for  pid=29032 comm="syz.2.3590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  959.552351][T29050] sctp: [Deprecated]: syz.2.3594 (pid 29050) Use of struct sctp_assoc_value in delayed_ack socket option.
[  959.552351][T29050] Use struct sctp_sack_info instead
[  960.092515][T29056] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3595'.
[  960.631150][ T5898] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  960.710043][ T5898] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  960.720183][ T5898] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  960.730564][ T5898] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71
[  960.748285][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  960.752533][ T5898] usb 6-1: USB disconnect, device number 65
[  961.131634][T29077] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3598'.
[  962.938246][ T7203] usb 7-1: new high-speed USB device number 71 using dummy_hcd
[  963.347499][ T7203] usb 7-1: Using ep0 maxpacket: 8
[  963.384176][ T7203] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  963.404192][ T7203] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  963.413266][ T7203] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  963.485528][ T7203] usb 7-1: config 0 descriptor??
[  963.660181][T29106] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3603'.
[  965.253429][T29067] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  965.303719][ T7197] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  965.372299][  T971] usb 10-1: USB disconnect, device number 10
[  965.387712][T29125] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3605'.
[  965.566408][ T7197] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  966.226624][T29149] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3607'.
[  966.536592][  T971] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[  966.668937][ T5898] usb 7-1: USB disconnect, device number 71
[  966.710670][  T971] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  966.743246][  T971] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  966.791480][  T971] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  966.951150][  T971] usb 10-1: config 1 has no interface number 1
[  966.957431][  T971] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  966.970626][  T971] usb 10-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  966.988286][  T971] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  967.015029][  T971] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  967.025539][  T971] usb 10-1: Product: syz
[  967.029949][  T971] usb 10-1: Manufacturer: syz
[  967.034664][  T971] usb 10-1: SerialNumber: syz
[  967.197062][T29183] program syz.8.3610 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  967.207035][T29183] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  967.229556][ T5856] usb 3-1: new high-speed USB device number 72 using dummy_hcd
[  967.307663][  T971] usb 10-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0
[  967.439505][ T5856] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  967.648161][  T971] usb 10-1: MIDIStreaming interface descriptor not found
[  967.663085][ T5856] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  967.757860][ T7197] usb 6-1: new high-speed USB device number 66 using dummy_hcd
[  967.783645][ T5856] usb 3-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53
[  967.794749][  T971] usb 10-1: USB disconnect, device number 11
[  967.801400][ T5856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  967.834523][ T5856] usb 3-1: config 0 descriptor??
[  967.926772][ T7197] usb 6-1: Using ep0 maxpacket: 32
[  967.933898][ T7197] usb 6-1: config index 0 descriptor too short (expected 55, got 36)
[  967.944345][ T7197] usb 6-1: config 0 has an invalid interface number: 9 but max is 0
[  967.957807][ T7197] usb 6-1: config 0 has no interface number 0
[  967.972667][ T7197] usb 6-1: config 0 interface 9 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7
[  968.005444][ T7197] usb 6-1: config 0 interface 9 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  968.041219][ T7197] usb 6-1: config 0 interface 9 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  968.045227][ T6014] udevd[6014]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  968.066938][ T7197] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  968.066965][ T7197] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  968.066985][ T7197] usb 6-1: Product: syz
[  968.067001][ T7197] usb 6-1: Manufacturer: syz
[  968.067016][ T7197] usb 6-1: SerialNumber: syz
[  968.087598][ T7197] usb 6-1: config 0 descriptor??
[  968.115907][T29162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  968.130820][T29162] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  968.225746][    T9] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  968.259152][T29225] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  968.314319][ T5856] usb 3-1: string descriptor 0 read error: -71
[  968.330295][ T7203] usb 6-1: USB disconnect, device number 66
[  968.362374][ T5856] usb 3-1: USB disconnect, device number 72
[  968.407409][    T9] usb 9-1: Using ep0 maxpacket: 16
[  968.541019][    T9] usb 9-1: config 6 has an invalid interface number: 1 but max is 0
[  969.028009][    T9] usb 9-1: config 6 has no interface number 0
[  969.034620][    T9] usb 9-1: config 6 interface 1 has no altsetting 0
[  969.050831][    T9] usb 9-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=ef.14
[  969.082186][    T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  969.090216][    T9] usb 9-1: Product: syz
[  969.095126][    T9] usb 9-1: Manufacturer: syz
[  969.099744][    T9] usb 9-1: SerialNumber: syz
[  969.284548][ T6087] udevd[6087]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  969.395882][    T9] usb 9-1: selecting invalid altsetting 1
[  969.415710][    T9] snd-usb-us122l 9-1:6.1: usb_set_interface error
[  969.429820][    T9] snd-usb-us122l 9-1:6.1: probe with driver snd-usb-us122l failed with error -22
[  969.476677][    T9] usb 9-1: USB disconnect, device number 13
[  970.343937][T29309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3621'.
[  970.750890][T29302] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  970.898550][T29321] random: crng reseeded on system resumption
[  971.048171][   T29] audit: type=1400 audit(1736848940.698:923): avc:  denied  { ioctl } for  pid=29320 comm="syz.8.3623" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  971.231861][T29340] loop9: detected capacity change from 0 to 7
[  971.282255][T29340] Dev loop9: unable to read RDB block 7
[  971.319504][T29340]  loop9: unable to read partition table
[  971.325294][T29340] loop9: partition table beyond EOD, truncated
[  971.336676][T29340] loop_reread_partitions: partition scan of loop9 (�被x������ ) failed (rc=-5)
[  971.615987][ T5856] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[  971.892653][ T5856] usb 10-1: Using ep0 maxpacket: 16
[  971.900601][ T5856] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  971.911342][ T5856] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  971.922639][ T5856] usb 10-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping
[  972.326973][ T5856] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  972.341042][ T5856] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  972.350392][ T5856] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  972.358595][ T5856] usb 10-1: Manufacturer: syz
[  972.409253][ T5856] usb 10-1: config 0 descriptor??
[  972.566519][T29377] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3631'.
[  972.713235][   T29] audit: type=1400 audit(1736848942.260:924): avc:  denied  { ioctl } for  pid=29322 comm="syz.9.3624" path="socket:[64594]" dev="sockfs" ino=64594 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  972.988788][T29393] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  972.997741][T29393] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  973.760155][T29400] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  973.889934][T29405] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  973.945878][T24522] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  974.261166][T17652] usb 10-1: USB disconnect, device number 12
[  974.314410][T29414] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3639'.
[  974.343102][T29413] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3640'.
[  974.391362][T29419] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3641'.
[  974.544752][T24522] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  975.043039][T29431] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3642'.
[  975.052114][T29431] netlink: 264 bytes leftover after parsing attributes in process `syz.8.3642'.
[  975.061319][T29431] netlink: 56 bytes leftover after parsing attributes in process `syz.8.3642'.
[  975.486889][T29432] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  975.519670][T17652] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  975.536820][T29434] FAULT_INJECTION: forcing a failure.
[  975.536820][T29434] name failslab, interval 1, probability 0, space 0, times 0
[  975.570126][T29434] CPU: 1 UID: 0 PID: 29434 Comm: syz.6.3645 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0
[  975.580935][T29434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  975.590997][T29434] Call Trace:
[  975.594277][T29434]  <TASK>
[  975.597213][T29434]  dump_stack_lvl+0x16c/0x1f0
[  975.601912][T29434]  should_fail_ex+0x497/0x5b0
[  975.606601][T29434]  ? fs_reclaim_acquire+0xae/0x150
[  975.611725][T29434]  should_failslab+0xc2/0x120
[  975.616426][T29434]  __kmalloc_noprof+0xcb/0x510
[  975.621208][T29434]  genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290
[  975.628324][T29434]  ? cred_has_capability.isra.0+0x192/0x2f0
[  975.634227][T29434]  genl_family_rcv_msg_doit+0xbf/0x2f0
[  975.639691][T29434]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  975.645772][T29434]  ? bpf_lsm_capable+0x9/0x10
[  975.650543][T29434]  ? security_capable+0x7e/0x260
[  975.655486][T29434]  genl_rcv_msg+0x565/0x800
[  975.659986][T29434]  ? __pfx_genl_rcv_msg+0x10/0x10
[  975.665009][T29434]  ? __pfx_nfc_genl_activate_target+0x10/0x10
[  975.671073][T29434]  ? __pfx___lock_acquire+0x10/0x10
[  975.676279][T29434]  netlink_rcv_skb+0x16b/0x440
[  975.681046][T29434]  ? __pfx_genl_rcv_msg+0x10/0x10
[  975.686065][T29434]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  975.691358][T29434]  ? down_read+0xc9/0x330
[  975.695709][T29434]  ? __pfx_down_read+0x10/0x10
[  975.700468][T29434]  ? netlink_deliver_tap+0x1ae/0xd30
[  975.705751][T29434]  genl_rcv+0x28/0x40
[  975.709726][T29434]  netlink_unicast+0x53c/0x7f0
[  975.714485][T29434]  ? __pfx_netlink_unicast+0x10/0x10
[  975.719767][T29434]  netlink_sendmsg+0x8b8/0xd70
[  975.724533][T29434]  ? __pfx_netlink_sendmsg+0x10/0x10
[  975.729815][T29434]  ____sys_sendmsg+0xaaf/0xc90
[  975.734567][T29434]  ? copy_msghdr_from_user+0x10b/0x160
[  975.740009][T29434]  ? __pfx_____sys_sendmsg+0x10/0x10
[  975.745295][T29434]  ___sys_sendmsg+0x135/0x1e0
[  975.749974][T29434]  ? __pfx____sys_sendmsg+0x10/0x10
[  975.755164][T29434]  ? __pfx_lock_release+0x10/0x10
[  975.760173][T29434]  ? trace_lock_acquire+0x14e/0x1f0
[  975.765368][T29434]  ? __fget_files+0x206/0x3a0
[  975.770035][T29434]  __sys_sendmsg+0x16e/0x220
[  975.774611][T29434]  ? __pfx___sys_sendmsg+0x10/0x10
[  975.779718][T29434]  do_syscall_64+0xcd/0x250
[  975.784213][T29434]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  975.790095][T29434] RIP: 0033:0x7f88ac785d29
[  975.794496][T29434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  975.814096][T29434] RSP: 002b:00007f88aa5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  975.822496][T29434] RAX: ffffffffffffffda RBX: 00007f88ac975fa0 RCX: 00007f88ac785d29
[  975.830452][T29434] RDX: 0000000002000000 RSI: 0000000020000280 RDI: 0000000000000004
[  975.838406][T29434] RBP: 00007f88aa5f6090 R08: 0000000000000000 R09: 0000000000000000
[  975.846359][T29434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  975.854314][T29434] R13: 0000000000000000 R14: 00007f88ac975fa0 R15: 00007fff4f3752d8
[  975.862283][T29434]  </TASK>
[  975.882103][T17652] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  976.689828][T29428] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  976.771170][T29465] input: syz1 as /devices/virtual/input/input75
[  976.820362][T29469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  976.835169][T29469] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  976.906599][T24522] usb 6-1: new high-speed USB device number 67 using dummy_hcd
[  976.906599][    T9] usb 7-1: new high-speed USB device number 72 using dummy_hcd
[  977.068210][    T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  977.088158][    T9] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  977.088184][ T7203] usb 3-1: new high-speed USB device number 73 using dummy_hcd
[  977.097267][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  977.115481][T24522] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  977.124688][T24522] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  977.136897][    T9] usb 7-1: config 0 descriptor??
[  977.145050][T24522] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  977.158132][    T9] pwc: Askey VC010 type 2 USB webcam detected.
[  977.162639][T24522] usb 6-1: config 1 has no interface number 1
[  977.176306][T24522] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  977.202066][T24522] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  977.229146][T24522] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  977.248479][T24522] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  977.267392][T24522] usb 6-1: Product: syz
[  977.271650][T24522] usb 6-1: Manufacturer: syz
[  977.276244][T24522] usb 6-1: SerialNumber: syz
[  977.281292][ T7203] usb 3-1: Using ep0 maxpacket: 16
[  977.291936][ T7203] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  977.303039][ T7203] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  977.324125][ T7203] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[  977.344896][ T7203] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  977.354898][ T7203] usb 3-1: config 0 descriptor??
[  977.562707][T29490] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3653'.
[  977.577615][T24522] usb 6-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0
[  977.585882][T24522] usb 6-1: MIDIStreaming interface descriptor not found
[  977.602780][    T9] pwc: recv_control_msg error -32 req 02 val 2b00
[  977.635170][    T9] pwc: recv_control_msg error -32 req 02 val 2700
[  977.654310][T29490] SELinux:  policydb string length 2004383086 does not match expected length 8
[  977.657663][ T7203] appleir 0003:05AC:8241.001A: unknown main item tag 0x0
[  977.665691][    T9] pwc: recv_control_msg error -32 req 02 val 2c00
[  977.670948][ T7203] appleir 0003:05AC:8241.001A: unknown main item tag 0x0
[  977.677809][T29490] SELinux: failed to load policy
[  977.683950][ T7203] appleir 0003:05AC:8241.001A: unknown main item tag 0x0
[  977.696011][ T7203] appleir 0003:05AC:8241.001A: unknown main item tag 0x0
[  977.700058][   T29] audit: type=1400 audit(1736848946.881:925): avc:  denied  { load_policy } for  pid=29489 comm="syz.9.3653" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  977.703302][ T7203] appleir 0003:05AC:8241.001A: unknown main item tag 0x0
[  977.731150][ T7203] appleir 0003:05AC:8241.001A: No inputs registered, leaving
[  977.757357][ T7203] appleir 0003:05AC:8241.001A: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0
[  977.765635][    T9] pwc: recv_control_msg error -32 req 04 val 1000
[  977.786313][    T9] pwc: recv_control_msg error -32 req 04 val 1300
[  977.812178][T29491] vlan2: entered allmulticast mode
[  977.839463][    T9] pwc: recv_control_msg error -32 req 04 val 1400
[  977.862464][ T7203] usb 3-1: USB disconnect, device number 73
[  977.866265][    T9] pwc: recv_control_msg error -32 req 02 val 2000
[  977.868765][T24522] usb 6-1: USB disconnect, device number 67
[  977.879495][T29491] ip6gretap0: entered allmulticast mode
[  977.916544][    T9] pwc: recv_control_msg error -32 req 02 val 2100
[  977.976717][    T9] pwc: recv_control_msg error -32 req 04 val 1500
[  977.989340][T19069] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  978.005509][    T9] pwc: recv_control_msg error -32 req 02 val 2500
[  978.022506][    T9] pwc: recv_control_msg error -32 req 02 val 2400
[  978.158277][T15076] udevd[15076]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  978.265493][ T7203] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  978.696054][T29570] sctp: [Deprecated]: syz.8.3657 (pid 29570) Use of struct sctp_assoc_value in delayed_ack socket option.
[  978.696054][T29570] Use struct sctp_sack_info instead
[  978.809822][ T5856] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  978.873933][T20540] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  979.142762][    T9] pwc: recv_control_msg error -71 req 02 val 2900
[  979.170660][    T9] pwc: recv_control_msg error -71 req 02 val 2800
[  979.179093][T29590] team_slave_0: entered promiscuous mode
[  979.185464][T29590] team_slave_1: entered promiscuous mode
[  979.203039][    T9] pwc: recv_control_msg error -71 req 04 val 1100
[  979.214116][    T9] pwc: recv_control_msg error -71 req 04 val 1200
[  979.225069][T29590] vlan2: entered promiscuous mode
[  979.247749][T29590] team0: entered promiscuous mode
[  979.264314][    T9] pwc: Registered as video103.
[  979.276885][T29590] team0: left promiscuous mode
[  979.278604][    T9] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input76
[  979.293878][T29590] team_slave_0: left promiscuous mode
[  979.299328][T29590] team_slave_1: left promiscuous mode
[  979.323012][    T9] usb 7-1: USB disconnect, device number 72
[  979.911334][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  980.042640][ T7195] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  980.053419][ T7195] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  980.840342][T24522] usb 6-1: new high-speed USB device number 68 using dummy_hcd
[  981.433551][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  981.790285][T29645] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3667'.
[  981.995315][T24522] usb 6-1: Using ep0 maxpacket: 8
[  982.007152][T24522] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  982.016238][T24522] usb 6-1: config 179 has no interface number 0
[  982.022892][T24522] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  982.043315][T24522] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  982.055279][T24522] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  982.067378][T24522] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  982.079563][T24522] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  982.093717][T24522] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  982.103048][T24522] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  982.153505][T29628] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  982.770637][T24522] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input77
[  982.972551][T29628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  983.053822][T29628] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  983.391465][    T9] usb 6-1: USB disconnect, device number 68
[  983.391496][    C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  983.406853][    T9] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  983.416325][    C1] dummy_hcd dummy_hcd.5: timer fired with no URBs pending?
[  983.536089][T29682] sctp: [Deprecated]: syz.2.3673 (pid 29682) Use of struct sctp_assoc_value in delayed_ack socket option.
[  983.536089][T29682] Use struct sctp_sack_info instead
[  984.678610][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  986.291476][T29750] random: crng reseeded on system resumption
[  986.357006][T19069] usb 7-1: new high-speed USB device number 73 using dummy_hcd
[  986.432185][T24522] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[  986.528101][T19069] usb 7-1: Using ep0 maxpacket: 16
[  986.542736][T29759] blk_print_req_error: 24 callbacks suppressed
[  986.542774][T29759] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  986.558128][T29759] buffer_io_error: 23 callbacks suppressed
[  986.558141][T29759] Buffer I/O error on dev nbd5, logical block 0, async page read
[  986.561172][T19069] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  986.567582][T29759] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  986.590068][T29759] Buffer I/O error on dev nbd5, logical block 0, async page read
[  986.590212][T19069] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  986.633144][T19069] usb 7-1: Product: syz
[  986.645672][T19069] usb 7-1: Manufacturer: syz
[  986.650429][T24522] usb 10-1: Using ep0 maxpacket: 16
[  986.652767][T29759] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  986.655766][T19069] usb 7-1: SerialNumber: syz
[  986.669696][T29759] Buffer I/O error on dev nbd5, logical block 0, async page read
[  986.672444][T24522] usb 10-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  986.688767][T29759] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  986.689414][T19069] usb 7-1: config 0 descriptor??
[  986.703107][T29759] Buffer I/O error on dev nbd5, logical block 0, async page read
[  986.703727][T24522] usb 10-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  986.766290][T24522] usb 10-1: Product: syz
[  986.784717][T24522] usb 10-1: Manufacturer: syz
[  986.795271][T24522] usb 10-1: SerialNumber: syz
[  986.796696][T29759] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  986.818300][T29759] Buffer I/O error on dev nbd5, logical block 0, async page read
[  986.827599][T29759] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  986.836721][T29759] Buffer I/O error on dev nbd5, logical block 0, async page read
[  986.846092][T29759] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  986.855598][T29759] Buffer I/O error on dev nbd5, logical block 0, async page read
[  986.864991][T29759] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  986.874202][T29759] Buffer I/O error on dev nbd5, logical block 0, async page read
[  986.882469][T29759] ldm_validate_partition_table(): Disk read failed.
[  986.890963][T29759] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  986.900139][T29759] Buffer I/O error on dev nbd5, logical block 0, async page read
[  986.908980][T29759] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  986.918158][T29759] Buffer I/O error on dev nbd5, logical block 0, async page read
[  986.930714][T29759] Dev nbd5: unable to read RDB block 0
[  986.940822][T29759]  nbd5: unable to read partition table
[  986.954245][T24522] usb 10-1: config 0 descriptor??
[  986.987550][T29761] ldm_validate_partition_table(): Disk read failed.
[  987.001325][T29761] Dev nbd5: unable to read RDB block 0
[  987.011746][T29761]  nbd5: unable to read partition table
[  987.279338][ T5898] usb 10-1: USB disconnect, device number 13
[  987.291260][T29771] ldm_validate_partition_table(): Disk read failed.
[  987.298272][T29771] Dev nbd5: unable to read RDB block 0
[  987.306186][T29771]  nbd5: unable to read partition table
[  987.310322][T24522] usb 7-1: USB disconnect, device number 73
[  987.444374][T29757] block nbd5: Cannot use ioctl interface on a netlink controlled device.
[  987.503184][   T29] audit: type=1400 audit(1736848956.095:926): avc:  denied  { name_connect } for  pid=29756 comm="syz.5.3687" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  987.527450][ T6084] udevd[6084]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  989.014052][T29838] overlayfs: missing 'lowerdir'
[  990.831119][T29866] sctp: [Deprecated]: syz.5.3693 (pid 29866) Use of struct sctp_assoc_value in delayed_ack socket option.
[  990.831119][T29866] Use struct sctp_sack_info instead
[  993.160007][T29907] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(7)
[  993.166555][T29907] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  993.174145][T29907] vhci_hcd vhci_hcd.0: Device attached
[  993.180756][T29910] vhci_hcd: connection closed
[  994.172546][ T5856] usb 51-1: new low-speed USB device number 2 using vhci_hcd
[  994.198345][T20544] vhci_hcd: stop threads
[  994.202621][T20544] vhci_hcd: release socket
[  994.207253][T20544] vhci_hcd: disconnect device
[  994.257395][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  995.712903][T29952] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3718'.
[  995.828493][T29961] sctp: [Deprecated]: syz.2.3719 (pid 29961) Use of struct sctp_assoc_value in delayed_ack socket option.
[  995.828493][T29961] Use struct sctp_sack_info instead
[  995.971545][T29963] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  996.020413][   T29] audit: type=1326 audit(1736848964.055:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29968 comm="syz.9.3722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b0185d29 code=0x7ffc0000
[  996.044113][   T29] audit: type=1326 audit(1736848964.055:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29968 comm="syz.9.3722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b0185d29 code=0x7ffc0000
[  996.587384][T24522] usb 9-1: new full-speed USB device number 14 using dummy_hcd
[  996.637676][   T29] audit: type=1326 audit(1736848964.392:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29968 comm="syz.9.3722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fe9b0187bbc code=0x7ffc0000
[  996.737744][   T29] audit: type=1326 audit(1736848964.429:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29968 comm="syz.9.3722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fe9b0187af4 code=0x7ffc0000
[  996.852118][T24522] usb 9-1: config 0 has an invalid interface number: 189 but max is 0
[  996.854638][   T29] audit: type=1326 audit(1736848964.429:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29968 comm="syz.9.3722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fe9b0187af4 code=0x7ffc0000
[  996.884029][T24522] usb 9-1: config 0 has no interface number 0
[  996.890315][T24522] usb 9-1: config 0 interface 189 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  996.907179][T24522] usb 9-1: config 0 interface 189 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[  996.923342][T24522] usb 9-1: config 0 interface 189 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64
[  996.935663][T24522] usb 9-1: config 0 interface 189 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  996.953942][T24522] usb 9-1: config 0 interface 189 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  996.977653][T24522] usb 9-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02
[  996.988443][T24522] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  996.995576][   T29] audit: type=1326 audit(1736848964.429:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29968 comm="syz.9.3722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b0185d29 code=0x7ffc0000
[  996.998061][T24522] usb 9-1: Product: syz
[  997.078128][T24522] usb 9-1: Manufacturer: syz
[  997.102026][T24522] usb 9-1: SerialNumber: syz
[  997.118881][T24522] usb 9-1: config 0 descriptor??
[  997.128420][   T29] audit: type=1326 audit(1736848964.429:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29968 comm="syz.9.3722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b0185d29 code=0x7ffc0000
[  997.143966][T29943] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  997.162028][T24522] ums-alauda 9-1:0.189: USB Mass Storage device detected
[  997.206003][T24522] scsi host1: usb-storage 9-1:0.189
[  997.208006][   T29] audit: type=1326 audit(1736848964.429:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29968 comm="syz.9.3722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe9b0185d29 code=0x7ffc0000
[  997.249875][   T29] audit: type=1326 audit(1736848964.438:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29968 comm="syz.9.3722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b0185d29 code=0x7ffc0000
[  997.278681][T30021] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3726'.
[  997.293165][   T29] audit: type=1326 audit(1736848964.438:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29968 comm="syz.9.3722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b0185d29 code=0x7ffc0000
[  998.435245][ T6662] scsi 1:0:0:0: Direct-Access     Olympus  MAUSB-10 (Alauda 0102 PQ: 0 ANSI: 0 CCS
[  998.473759][ T6662] scsi 1:0:0:1: Direct-Access     Olympus  MAUSB-10 (Alauda 0102 PQ: 0 ANSI: 0 CCS
[  998.591187][ T5898] usb 9-1: USB disconnect, device number 14
[  998.618261][   T11] sd 1:0:0:0: [sdb] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK
[  998.621105][ T6662] sd 1:0:0:0: Attached scsi generic sg1 type 0
[  998.645858][ T6420] sd 1:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK
[  998.669741][ T6662] sd 1:0:0:1: Attached scsi generic sg2 type 0
[  998.735582][ T7203] usb 3-1: new high-speed USB device number 74 using dummy_hcd
[  998.834815][   T11] sd 1:0:0:0: [sdb] Read Capacity(10) failed: Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK
[  998.851076][ T6420] sd 1:0:0:1: [sdc] Read Capacity(10) failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK
[  998.874611][   T11] sd 1:0:0:0: [sdb] Sense not available.
[  998.895001][ T6420] sd 1:0:0:1: [sdc] Sense not available.
[  998.905456][   T11] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B)
[  998.936503][ T6420] sd 1:0:0:1: [sdc] 0 512-byte logical blocks: (0 B/0 B)
[  998.937720][T30076] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  998.950434][   T11] sd 1:0:0:0: [sdb] 0-byte physical blocks
[  998.975561][ T6420] sd 1:0:0:1: [sdc] 0-byte physical blocks
[  998.979082][T17652] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  998.994077][ T7203] usb 3-1: Using ep0 maxpacket: 16
[  999.014823][ T7203] usb 3-1: config 6 has an invalid interface number: 1 but max is 0
[  999.023198][ T7203] usb 3-1: config 6 has no interface number 0
[  999.029310][ T7203] usb 3-1: config 6 interface 1 has no altsetting 0
[  999.036046][ T6420] sd 1:0:0:1: [sdc] Test WP failed, assume Write Enabled
[  999.036403][T30077] tmpfs: Unknown parameter 'usrquotah����n(����v`'
[  999.050170][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  999.056080][ T6420] sd 1:0:0:1: [sdc] Asking for cache data failed
[  999.078634][ T6420] sd 1:0:0:1: [sdc] Assuming drive cache: write through
[  999.087200][ T6420] 
[  999.089529][ T6420] ======================================================
[  999.096526][ T6420] WARNING: possible circular locking dependency detected
[  999.103266][   T11] sd 1:0:0:0: [sdb] Write Protect is off
[  999.103521][ T6420] 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 Not tainted
[  999.109188][   T11] sd 1:0:0:0: [sdb] Mode Sense: 00 00 00 00
[  999.116190][ T6420] ------------------------------------------------------
[  999.116198][ T6420] kworker/u8:11/6420 is trying to acquire lock:
[  999.116207][ T6420] ffff8880290d92e0 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_mq_init_sched+0x42b/0x640
[  999.116256][ T6420] 
[  999.116256][ T6420] but task is already holding lock:
[  999.116261][ T6420] ffff8880290d8aa8 (&q->q_usage_counter(queue)#56){++++}-{0:0}, at: add_disk_fwnode+0x113/0x1300
[  999.116302][ T6420] 
[  999.116302][ T6420] which lock already depends on the new lock.
[  999.116302][ T6420] 
[  999.116308][ T6420] 
[  999.116308][ T6420] the existing dependency chain (in reverse order) is:
[  999.116314][ T6420] 
[  999.116314][ T6420] -> #5 (&q->q_usage_counter(queue)#56){++++}-{0:0}:
[  999.116341][ T6420]        blk_queue_enter+0x50f/0x640
[  999.116366][ T6420]        blk_mq_alloc_request+0x59b/0x950
[  999.116387][ T6420]        scsi_execute_cmd+0x1eb/0xf40
[  999.116406][ T6420]        read_capacity_10+0x1d4/0x6d0
[  999.116429][ T6420]        sd_revalidate_disk.isra.0+0x3145/0xa8d0
[  999.116452][ T6420]        sd_probe+0x904/0x1000
[  999.116465][ T6420]        really_probe+0x23e/0xa90
[  999.116484][ T6420]        __driver_probe_device+0x1de/0x440
[  999.116504][ T6420]        driver_probe_device+0x4c/0x1b0
[  999.116523][ T6420]        __device_attach_driver+0x1df/0x310
[  999.116543][ T6420]        bus_for_each_drv+0x157/0x1e0
[  999.116558][ T6420]        __device_attach_async_helper+0x1d3/0x290
[  999.116577][ T6420]        async_run_entry_fn+0x9c/0x530
[  999.116598][ T6420]        process_one_work+0x9c5/0x1ba0
[  999.116616][ T6420]        worker_thread+0x6c8/0xf00
[  999.116632][ T6420]        kthread+0x2c1/0x3a0
[  999.116653][ T6420]        ret_from_fork+0x45/0x80
[  999.116668][ T6420]        ret_from_fork_asm+0x1a/0x30
[  999.116691][ T6420] 
[  999.116691][ T6420] -> #4 (&q->limits_lock){+.+.}-{4:4}:
[  999.116715][ T6420]        __mutex_lock+0x19b/0xa60
[  999.301132][ T6420]        __nbd_set_size+0x2c0/0x730
[  999.306329][ T6420]        nbd_start_device+0x8fd/0xd70
[  999.311684][ T6420]        nbd_genl_connect+0x1204/0x1c00
[  999.317215][ T6420]        genl_family_rcv_msg_doit+0x202/0x2f0
[  999.323284][ T6420]        genl_rcv_msg+0x565/0x800
[  999.328298][ T6420]        netlink_rcv_skb+0x16b/0x440
[  999.333586][ T6420]        genl_rcv+0x28/0x40
[  999.338083][ T6420]        netlink_unicast+0x53c/0x7f0
[  999.343361][ T6420]        netlink_sendmsg+0x8b8/0xd70
[  999.348633][ T6420]        ____sys_sendmsg+0xaaf/0xc90
[  999.353901][ T6420]        ___sys_sendmsg+0x135/0x1e0
[  999.359077][ T6420]        __sys_sendmsg+0x16e/0x220
[  999.364169][ T6420]        do_syscall_64+0xcd/0x250
[  999.369180][ T6420]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  999.375582][ T6420] 
[  999.375582][ T6420] -> #3 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  999.384167][ T6420]        blk_mq_submit_bio+0x1fb6/0x24c0
[  999.389789][ T6420]        __submit_bio+0x384/0x540
[  999.394803][ T6420]        submit_bio_noacct_nocheck+0x698/0xd70
[  999.400943][ T6420]        submit_bio_noacct+0x93a/0x1e20
[  999.406472][ T6420]        mpage_readahead+0x41d/0x590
[  999.411744][ T6420]        read_pages+0x1a8/0xdc0
[  999.416575][ T6420]        page_cache_ra_unbounded+0x3dc/0x750
[  999.422538][ T6420]        force_page_cache_ra+0x24b/0x340
[  999.428151][ T6420]        page_cache_sync_ra+0x110/0x9c0
[  999.433679][ T6420]        filemap_get_pages+0xd7b/0x1be0
[  999.439205][ T6420]        filemap_read+0x3ca/0xd70
[  999.444208][ T6420]        blkdev_read_iter+0x187/0x480
[  999.449564][ T6420]        vfs_read+0x87f/0xbe0
[  999.454220][ T6420]        ksys_read+0x12b/0x250
[  999.458977][ T6420]        do_syscall_64+0xcd/0x250
[  999.464001][ T6420]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  999.470409][ T6420] 
[  999.470409][ T6420] -> #2 (mapping.invalidate_lock#2){++++}-{4:4}:
[  999.478917][ T6420]        down_read+0x9a/0x330
[  999.483581][ T6420]        filemap_fault+0x2e0/0x2820
[  999.488761][ T6420]        __do_fault+0x10a/0x490
[  999.493596][ T6420]        do_pte_missing+0x99f/0x3e00
[  999.498863][ T6420]        __handle_mm_fault+0x103c/0x2a40
[  999.504477][ T6420]        handle_mm_fault+0x3fa/0xaa0
[  999.509741][ T6420]        __get_user_pages+0x8d9/0x3b50
[  999.515180][ T6420]        faultin_page_range+0x24a/0x980
[  999.520740][ T6420]        do_madvise+0x504/0x770
[  999.525572][ T6420]        __x64_sys_madvise+0xa9/0x110
[  999.530924][ T6420]        do_syscall_64+0xcd/0x250
[  999.535932][ T6420]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  999.542331][ T6420] 
[  999.542331][ T6420] -> #1 (&mm->mmap_lock){++++}-{4:4}:
[  999.549866][ T6420]        __might_fault+0x11b/0x190
[  999.554961][ T6420]        _copy_from_user+0x29/0xd0
[  999.560051][ T6420]        __blk_trace_setup+0xa8/0x180
[  999.565408][ T6420]        blk_trace_setup+0x47/0x70
[  999.570499][ T6420]        sg_ioctl+0x65e/0x2750
[  999.575245][ T6420]        __x64_sys_ioctl+0x190/0x200
[  999.580513][ T6420]        do_syscall_64+0xcd/0x250
[  999.585522][ T6420]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  999.591918][ T6420] 
[  999.591918][ T6420] -> #0 (&q->debugfs_mutex){+.+.}-{4:4}:
[  999.599713][ T6420]        __lock_acquire+0x249e/0x3c40
[  999.605064][ T6420]        lock_acquire.part.0+0x11b/0x380
[  999.610675][ T6420]        __mutex_lock+0x19b/0xa60
[  999.615684][ T6420]        blk_mq_init_sched+0x42b/0x640
[  999.621131][ T6420]        elevator_init_mq+0x2cd/0x420
[  999.626480][ T6420]        add_disk_fwnode+0x113/0x1300
[  999.631832][ T6420]        sd_probe+0xa86/0x1000
[  999.636574][ T6420]        really_probe+0x23e/0xa90
[  999.641577][ T6420]        __driver_probe_device+0x1de/0x440
[  999.647377][ T6420]        driver_probe_device+0x4c/0x1b0
[  999.652903][ T6420]        __device_attach_driver+0x1df/0x310
[  999.658775][ T6420]        bus_for_each_drv+0x157/0x1e0
[  999.664125][ T6420]        __device_attach_async_helper+0x1d3/0x290
[  999.670521][ T6420]        async_run_entry_fn+0x9c/0x530
[  999.675962][ T6420]        process_one_work+0x9c5/0x1ba0
[  999.681398][ T6420]        worker_thread+0x6c8/0xf00
[  999.686485][ T6420]        kthread+0x2c1/0x3a0
[  999.691056][ T6420]        ret_from_fork+0x45/0x80
[  999.695974][ T6420]        ret_from_fork_asm+0x1a/0x30
[  999.701245][ T6420] 
[  999.701245][ T6420] other info that might help us debug this:
[  999.701245][ T6420] 
[  999.711447][ T6420] Chain exists of:
[  999.711447][ T6420]   &q->debugfs_mutex --> &q->limits_lock --> &q->q_usage_counter(queue)#56
[  999.711447][ T6420] 
[  999.725852][ T6420]  Possible unsafe locking scenario:
[  999.725852][ T6420] 
[  999.733277][ T6420]        CPU0                    CPU1
[  999.738616][ T6420]        ----                    ----
[  999.743961][ T6420]   lock(&q->q_usage_counter(queue)#56);
[  999.749577][ T6420]                                lock(&q->limits_lock);
[  999.756490][ T6420]                                lock(&q->q_usage_counter(queue)#56);
[  999.764624][ T6420]   lock(&q->debugfs_mutex);
[  999.769199][ T6420] 
[  999.769199][ T6420]  *** DEADLOCK ***
[  999.769199][ T6420] 
[  999.777320][ T6420] 4 locks held by kworker/u8:11/6420:
[  999.782667][ T6420]  #0: ffff88801beee948 ((wq_completion)async){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0
[  999.792996][ T6420]  #1: ffffc900033e7d80 ((work_completion)(&entry->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0
[  999.804192][ T6420]  #2: ffff88802610e378 (&dev->mutex){....}-{4:4}, at: __device_attach_async_helper+0x84/0x290
[  999.814524][ T6420]  #3: ffff8880290d8aa8 (&q->q_usage_counter(queue)#56){++++}-{0:0}, at: add_disk_fwnode+0x113/0x1300
[  999.825467][ T6420] 
[  999.825467][ T6420] stack backtrace:
[  999.831333][ T6420] CPU: 1 UID: 0 PID: 6420 Comm: kworker/u8:11 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0
[  999.842243][ T6420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  999.852280][ T6420] Workqueue: async async_run_entry_fn
[  999.857641][ T6420] Call Trace:
[  999.860901][ T6420]  <TASK>
[  999.863816][ T6420]  dump_stack_lvl+0x116/0x1f0
[  999.868480][ T6420]  print_circular_bug+0x419/0x5d0
[  999.873489][ T6420]  check_noncircular+0x31a/0x400
[  999.878409][ T6420]  ? __pfx_check_noncircular+0x10/0x10
[  999.883850][ T6420]  ? lockdep_lock+0xc6/0x200
[  999.888427][ T6420]  ? __pfx_lockdep_lock+0x10/0x10
[  999.893437][ T6420]  __lock_acquire+0x249e/0x3c40
[  999.898271][ T6420]  ? __pfx___lock_acquire+0x10/0x10
[  999.903454][ T6420]  lock_acquire.part.0+0x11b/0x380
[  999.908553][ T6420]  ? blk_mq_init_sched+0x42b/0x640
[  999.913649][ T6420]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  999.919262][ T6420]  ? rcu_is_watching+0x12/0xc0
[  999.924012][ T6420]  ? trace_lock_acquire+0x14e/0x1f0
[  999.929194][ T6420]  ? blk_mq_init_sched+0x42b/0x640
[  999.934290][ T6420]  ? lock_acquire+0x2f/0xb0
[  999.938770][ T6420]  ? blk_mq_init_sched+0x42b/0x640
[  999.943865][ T6420]  __mutex_lock+0x19b/0xa60
[  999.948351][ T6420]  ? blk_mq_init_sched+0x42b/0x640
[  999.953446][ T6420]  ? blk_mq_init_sched+0x42b/0x640
[  999.958541][ T6420]  ? __pfx___mutex_lock+0x10/0x10
[  999.963551][ T6420]  ? blk_queue_flag_set+0x29/0x40
[  999.968561][ T6420]  ? blk_mq_init_sched+0x42b/0x640
[  999.973655][ T6420]  blk_mq_init_sched+0x42b/0x640
[  999.978578][ T6420]  ? __pfx_blk_mq_init_sched+0x10/0x10
[  999.984021][ T6420]  ? __pfx_blk_mq_cancel_work_sync+0x10/0x10
[  999.989984][ T6420]  ? lock_acquire+0x2f/0xb0
[  999.994466][ T6420]  ? add_disk_fwnode+0x113/0x1300
[  999.999471][ T6420]  elevator_init_mq+0x2cd/0x420
[ 1000.004302][ T6420]  ? add_disk_fwnode+0x113/0x1300
[ 1000.009307][ T6420]  add_disk_fwnode+0x113/0x1300
[ 1000.014137][ T6420]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1000.019319][ T6420]  sd_probe+0xa86/0x1000
[ 1000.023542][ T6420]  ? __pfx_sd_probe+0x10/0x10
[ 1000.028205][ T6420]  really_probe+0x23e/0xa90
[ 1000.032690][ T6420]  __driver_probe_device+0x1de/0x440
[ 1000.037955][ T6420]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1000.043742][ T6420]  driver_probe_device+0x4c/0x1b0
[ 1000.048748][ T6420]  __device_attach_driver+0x1df/0x310
[ 1000.054104][ T6420]  ? __pfx___device_attach_driver+0x10/0x10
[ 1000.059976][ T6420]  bus_for_each_drv+0x157/0x1e0
[ 1000.064808][ T6420]  ? __pfx_bus_for_each_drv+0x10/0x10
[ 1000.070160][ T6420]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1000.075344][ T6420]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1000.081133][ T6420]  ? __pfx___device_attach_async_helper+0x10/0x10
[ 1000.087530][ T6420]  __device_attach_async_helper+0x1d3/0x290
[ 1000.093409][ T6420]  ? __pfx___device_attach_async_helper+0x10/0x10
[ 1000.099821][ T6420]  ? ktime_get+0x206/0x300
[ 1000.104220][ T6420]  ? read_tsc+0x9/0x20
[ 1000.108273][ T6420]  ? ktime_get+0x1ac/0x300
[ 1000.112668][ T6420]  async_run_entry_fn+0x9c/0x530
[ 1000.117593][ T6420]  process_one_work+0x9c5/0x1ba0
[ 1000.122517][ T6420]  ? __pfx_call_usermodehelper_exec_work+0x10/0x10
[ 1000.129000][ T6420]  ? __pfx_process_one_work+0x10/0x10
[ 1000.134353][ T6420]  ? assign_work+0x1a0/0x250
[ 1000.138927][ T6420]  worker_thread+0x6c8/0xf00
[ 1000.143506][ T6420]  ? __kthread_parkme+0x148/0x220
[ 1000.148516][ T6420]  ? __pfx_worker_thread+0x10/0x10
[ 1000.153606][ T6420]  kthread+0x2c1/0x3a0
[ 1000.157663][ T6420]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1000.162840][ T6420]  ? __pfx_kthread+0x10/0x10
[ 1000.167414][ T6420]  ret_from_fork+0x45/0x80
[ 1000.171810][ T6420]  ? __pfx_kthread+0x10/0x10
[ 1000.176384][ T6420]  ret_from_fork_asm+0x1a/0x30
[ 1000.181139][ T6420]  </TASK>
[ 1000.186384][T17652] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1000.190614][   T11] sd 1:0:0:0: [sdb] Asking for cache data failed
[ 1000.208043][T21023] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[ 1000.216742][ T7203] usb 3-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=ef.14
[ 1000.225813][ T7203] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1000.235984][T30026] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1000.236447][ T7203] usb 3-1: Product: syz
[ 1000.248132][ T7203] usb 3-1: Manufacturer: syz
[ 1000.252735][ T7203] usb 3-1: SerialNumber: syz
[ 1000.265416][   T11] sd 1:0:0:0: [sdb] Assuming drive cache: write through
[ 1000.273449][ T5856] vhci_hcd: vhci_device speed not set
[ 1000.282512][ T6420] sd 1:0:0:1: [sdc] Attached SCSI removable disk
[ 1000.528288][ T7203] usb 3-1: selecting invalid altsetting 1
[ 1000.624802][ T7203] snd-usb-us122l 3-1:6.1: usb_set_interface error
[ 1000.635894][   T11] sd 1:0:0:0: [sdb] Attached SCSI removable disk
[ 1000.680858][ T7203] snd-usb-us122l 3-1:6.1: probe with driver snd-usb-us122l failed with error -22
[ 1000.832657][T15076] sd 1:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK
[ 1000.875978][ T7203] usb 3-1: USB disconnect, device number 74
[ 1001.281245][ T5898] usb 9-1: new low-speed USB device number 15 using dummy_hcd
[ 1001.453372][ T5898] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[ 1001.461397][ T5898] usb 9-1: config 0 has no interface number 0
[ 1001.467525][ T5898] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1001.478494][ T5898] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 1001.489213][ T5898] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1001.498272][ T5898] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1001.507445][ T5898] usb 9-1: config 0 descriptor??
[ 1001.512760][T30085] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1001.522304][ T5898] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1001.561002][ T6014] udevd[6014]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory
[ 1001.569181][T15076] udevd[15076]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory
[ 1001.599198][ T6016] udevd[6016]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory
[ 1001.650120][ T6087] udevd[6087]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory
[ 1001.741792][ T5856] usb 9-1: USB disconnect, device number 15
[ 1002.382248][T21023] Bluetooth: hci0: command 0x0c1a tx timeout