last executing test programs:

1m38.157464072s ago: executing program 0 (id=297):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x24, r0, 0x1, 0x0, 0x25dfdbfc, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @chandef_params]}, 0x24}, 0x1, 0x0, 0x0, 0x20008800}, 0x40880)

1m36.980984173s ago: executing program 0 (id=300):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000210021012abd7000000000000a00000d00000000180000000c001400d3"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x80c4)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x2, 0x0, 0x0, 0x0, @rand_addr, @private}}}})
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
prctl$PR_SET_PDEATHSIG(0x1, 0xc)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000240)={0x1, 0x1, 'client1\x00', 0x80000004, "871a6117d2b2545c", "43d618e2ed2c88c0ed54947a33a44d8f8a019cf823fbae8126244bc64eff4d13", 0x1, 0x8})
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r2, 0xc0bc5310, &(0x7f0000000080))
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000140)=0x4)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000210021012abd7000000000000a00000d00000000180000000c001400d3"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x80c4) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x2, 0x0, 0x0, 0x0, @rand_addr, @private}}}}) (async)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) (async)
prctl$PR_SET_PDEATHSIG(0x1, 0xc) (async)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000240)={0x1, 0x1, 'client1\x00', 0x80000004, "871a6117d2b2545c", "43d618e2ed2c88c0ed54947a33a44d8f8a019cf823fbae8126244bc64eff4d13", 0x1, 0x8}) (async)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r2, 0xc0bc5310, &(0x7f0000000080)) (async)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async)
getsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000140)=0x4) (async)

1m36.87165972s ago: executing program 0 (id=303):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000002440)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000002440)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x10, &(0x7f00000001c0)=ANY=[@ANYRES64=r0, @ANYRES8=r1, @ANYRES8=r0, @ANYRES64=r0, @ANYRES64=r1, @ANYRES16=r0, @ANYRES8], &(0x7f0000000000)='GPL\x00', 0x8, 0xa8, &(0x7f0000002600)=""/168, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x7, @void, @value}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x10, &(0x7f00000001c0)=ANY=[@ANYRES64=r0, @ANYRES8=r1, @ANYRES8=r0, @ANYRES64=r0, @ANYRES64=r1, @ANYRES16=r0, @ANYRES8], &(0x7f0000000000)='GPL\x00', 0x8, 0xa8, &(0x7f0000002600)=""/168, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x7, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x2)
ioctl$TCFLSH(r0, 0x40087101, 0x20001100)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x0, 0x2, 0x0) (async)
recvmmsg(r4, &(0x7f00000000c0), 0x0, 0x2, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000280)=0x2) (async)
sched_setaffinity(r3, 0x8, &(0x7f0000000280)=0x2)
ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0) (async)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) (async)
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$EBT_SO_GET_INFO(r6, 0x0, 0x80, &(0x7f00000002c0)={'broute\x00', 0x0, 0x0, 0x0, [0x1, 0x9, 0x0, 0x9, 0x401, 0x8]}, &(0x7f0000000180)=0x78)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00')
read$FUSE(r7, &(0x7f0000000400)={0x2020}, 0x2020)
getsockopt$inet6_udp_int(r7, 0x11, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r8}, 0x10)
timer_create(0x3, 0x0, &(0x7f0000006bc0))

1m36.433178416s ago: executing program 0 (id=307):
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x8020, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e)
memfd_create(&(0x7f0000000300)='-B\xd5NI\xc5j\x9a\b\x00\x00\x00\b\x84\xa2{\x00\v\x18\x004\xa6Ey\xdb\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xc83\x12\xd7\xdb\x93\xcc]x\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x81\x01\xe5\x98\r\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
migrate_pages(0x0, 0x8000, 0x0, &(0x7f0000000180)=0x9)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r3 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000003c0)={0x0, 0x0, 0x7, 0x0, 0x80}, 0x14)
r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
read$FUSE(r1, 0xfffffffffffffffc, 0x0)
umount2(&(0x7f00000001c0)='./file0\x00', 0x0)
read$FUSE(r4, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x2020)
timer_create(0x3, &(0x7f00000000c0)={0x0, 0x13, 0x0, @tid=r5}, &(0x7f0000000200))
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000100)=ANY=[@ANYBLOB="6d086f6c3d7072656665722c6e6fdfb961702c00"])

1m35.722248509s ago: executing program 0 (id=308):
r0 = syz_open_dev$sndpcmc(&(0x7f0000001800), 0x1, 0x20080)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000280)=0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
bind$unix(r2, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'tunl0\x00', <r4=>0x0})
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @private2, @dev={0xfe, 0x80, '\x00', 0x29}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4400006, r4})
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000540)={@private0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, r4})
ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884123, 0x0)

1m35.581931965s ago: executing program 0 (id=310):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x24, r0, 0x1, 0x0, 0x25dfdbfc, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @chandef_params]}, 0x24}, 0x1, 0x0, 0x0, 0x20008800}, 0x40880)

1m19.902650544s ago: executing program 32 (id=310):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x24, r0, 0x1, 0x0, 0x25dfdbfc, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @chandef_params]}, 0x24}, 0x1, 0x0, 0x0, 0x20008800}, 0x40880)

12.453338666s ago: executing program 1 (id=638):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000000000404e040b1200000000000109022400010000000009040000020300000009"], 0x0)
syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000280)={0x1, @pix={0x0, 0x0, 0x59455247, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}})
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000f5ff000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000900)={0x14, &(0x7f0000000980)=ANY=[@ANYBLOB="2005de000000de047a47cf4dbc8424d72ef940670d3e24b51ee5933ff240e721fc0e2ff1d845c1ca79b2cade6fc9b04ab6076db52d6eac17b570d863e782f40b32198b76d026439e6aa43a07759f87811e518026714139a987dfb871f194a5bfdc7888e5382b0699b3794d92899ce45618e2344effc0ed664daa0777c3628405562691f02a265a6e9b7c2c8faf3acc0cff60529d458e24d557be56bc627ab96c1c46bfd8ae6603d731b25517f607985fbfda78aeb88daa0cd0aaae811d611d973cb92500f4a90a0ddc13210b415042beab1dc26af980faf1cb58b53a25464959c76d7dc0"], &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x402}}}, &(0x7f0000000cc0)={0x44, &(0x7f0000000a80)={0x20, 0x18, 0x6f, "f113202f602624b0863f4a791468f0b7f2eaed18b1e6f0984fad9ee8d9c97c1a5dc431325994c7fa7fd7e664b322430f93b66fd4b957f2c9f28dc81d3f63a62fa4a346ac378ee0636b32b1720e19fa7a0a890251f617a4356d404c86bb164d826ac8de32051520b7259175f25cd3fa"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0x8}, 0x0, &(0x7f0000000b80)={0x20, 0x81, 0x1, "c3"}, &(0x7f0000000bc0)={0x20, 0x82, 0x3, "b55997"}, &(0x7f0000000c00)={0x20, 0x83, 0x1, "eb"}, &(0x7f0000000c40)={0x20, 0x84, 0x1, "b1"}, &(0x7f0000000c80)={0x20, 0x85, 0x3, "227297"}})
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
capset(&(0x7f0000000080)={0x20080522}, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='xprtrdma_post_recv\x00'}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r2}, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x3, 0x0}, 0x30004001)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r8, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000})
ioctl$IOMMU_IOAS_COPY(r7, 0x3b83, &(0x7f0000000480)={0x28, 0x2, r8, r8, 0x8, 0x9, 0x5})

10.319014723s ago: executing program 5 (id=648):
mkdir(0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) (async)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x8}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1c}]}}}]}]}], {0x14}}, 0xc8}}, 0x0)
syz_io_uring_setup(0xa07, &(0x7f0000000200)={0x0, 0xcc72, 0x0, 0x3}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000280))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000080)=0x2, 0x0, 0x4) (async)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$int_in(r5, 0x5421, 0x0) (async)
connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
shutdown(r5, 0x1) (async)
shutdown(r5, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x5) (async)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0)

9.562318983s ago: executing program 5 (id=649):
socket$inet6(0xa, 0x80803, 0x83) (async, rerun: 32)
r0 = syz_open_procfs(0x0, 0x0) (rerun: 32)
mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) (async)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x400017e)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0xb)
read$FUSE(r2, &(0x7f0000001fc0)={0x2020}, 0x2020)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async, rerun: 32)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) (async)
syz_open_dev$video4linux(&(0x7f0000001280), 0x0, 0x0) (async)
ioctl$SIOCX25SCAUSEDIAG(r3, 0x89ec, &(0x7f0000000080)={0x38, 0x3}) (async, rerun: 32)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async, rerun: 32)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) (async)
dup(0xffffffffffffffff)
process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)

9.216678787s ago: executing program 1 (id=651):
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) (async)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0) (async)
mkdir(&(0x7f0000000080)='./file1\x00', 0x0) (async)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) (async)
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00') (async)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async)
r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4}, './bus\x00'}) (async)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) (async)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) (async)
r5 = dup(r1)
write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) (async)
write$FUSE_DIRENTPLUS(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0)
getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=<r6=>0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',privport,access=', @ANYRESDEC=r6])
setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0)

9.040444882s ago: executing program 1 (id=652):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000006800010000001100fcdbdf250a0003000000000500000000", @ANYRES32=0x0, @ANYBLOB="04000400"], 0x24}}, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000240)=0x7)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x2)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9da, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSIG(r4, 0x40045436, 0x32)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000140)=0x15)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000002c0)=0x7e)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000540)=0x9)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000180)=0x3)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000300))
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r7 = socket$inet6(0xa, 0x2, 0x1)
accept4(r7, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x6a, &(0x7f00000001c0)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x0, 0x0, @remote, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr, {[@timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@loopback}, {@remote}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast}, {@remote}]}]}}}}}}}, 0x0)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x7e)
close_range(r5, 0xffffffffffffffff, 0x0)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1000000011f500080000000000000002"], 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000000)={0x7d61})
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io(r3, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\a'], 0x0, 0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r0, 0x0, 0xe80, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884366a578bb3fb7dbfc", 0x0, 0x0, 0x0, 0x31, 0x0, &(0x7f0000000700)="49723b3ab53a13274c56e00d5be19f87e669877bbc7b7c0cb48fd1bbea1e688e7c84ccfb034a845b4493c90e1785234592", 0x0}, 0x50)

8.13449407s ago: executing program 2 (id=655):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
fsetxattr$security_capability(r0, &(0x7f0000000240), &(0x7f0000000280)=@v3, 0x18, 0x0)
write$cgroup_freezer_state(r0, &(0x7f0000000000)='FREEZING\x00', 0x9)
syz_usb_connect(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x47, 0xdd, 0xf2, 0x20, 0x403, 0xe006, 0xae17, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xf3, 0x2, 0x2, 0xad, 0x53, 0xe2, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x5, 0x2, 0x400, 0x2}}]}}]}}]}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50)
r1 = socket$netlink(0x10, 0x3, 0xb)
writev(r1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0)
syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2)
ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000500)={'wlan1\x00'})
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080))
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500008f47000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRESHEX=r0], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(r4, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x101c89a, &(0x7f0000000280)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x2000}})

6.754673662s ago: executing program 5 (id=658):
openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ftruncate(r2, 0x8001)
r3 = dup(0xffffffffffffffff)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r4)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r5, 0x4000000)
r6 = socket(0x40000000015, 0x5, 0x0)
connect$inet6(r6, &(0x7f0000000340)={0xa, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x21}, 0x8835}, 0x1c)
r7 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r7, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
bind$inet(r7, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="67d8902400aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x427}], 0x2}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40)
getsockname$packet(r6, 0x0, &(0x7f0000000e00)=0xfeeb)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000240)={0x0, 'xfrm0\x00', {0x4}})
getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f00000000c0)=0x6, &(0x7f00000001c0)=0x4)
socket$inet_mptcp(0x2, 0x1, 0x106)
accept(r4, 0x0, 0x0)

6.357928453s ago: executing program 1 (id=660):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x13, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000000000000000000100180100002020702500000000002020207baaf8ff00000000bda106000000000027010000f8ffffffb702000008000000b703000000000000850000000500000018010000202070250000000000202020db1af8ff01000000bca100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400a84600000000f37746fa20219a0f0100000a14000000000000000701000a19c9041840243dfec4cf627631334b3153"], 0x28}}, 0x0)
io_uring_setup(0xf02, &(0x7f0000000080)={0x0, 0x6299, 0x8, 0xffffffff, 0x3bb})
openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x63483, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
mkdir(0x0, 0x8)
iopl(0x3)
poll(0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000003c0)={0x0, 0x69, "1fd498b47e7895bdf960019a4254cd12039a170f5a67628ac483e616b6b5ef83060000000000000001c080b3e39715f489fb200ba8cdf747f7303dfe98f80aa745aff5c8c8cefaa5b651b9192de03d939b5c363fbf38e86919051174c3269037014b455843c0c5be4d"}, &(0x7f0000000000)=0xffffffffffffffcb)
mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
prlimit64(0x0, 0x0, &(0x7f0000000000)={0x1, 0x55c}, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket(0x0, 0x80000, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
getdents64(r1, 0x0, 0x0)
getdents64(r1, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000240)={0x6, 0x8, 0x0, 0x0, 0x1d})
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1e, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x30, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, r1, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x10502, 0xf)
socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x884)

5.420435627s ago: executing program 2 (id=662):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="20010000", @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r3], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0xa, 0x80, 0x8, 0xf448, 0x6, 0xe, 0x8, 0xfffffffffffffffb, 0xeb, 0xe, 0x2, 0x1, 0x7, 0x9, 0x2, 0x6], 0xeeee8000, 0x20000})
ioctl$KVM_SET_GUEST_DEBUG(r7, 0x4048ae9b, &(0x7f0000000180)={0x140001, 0x0, [0x100000001, 0x7, 0x0, 0x6, 0x1, 0x8, 0x9, 0x6]})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000002040)='./file0\x00', 0x0)
tkill(0x0, 0x12)
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1, 0x5}}, 0x30)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
write$FUSE_OPEN(r8, 0x0, 0x0)

5.393116479s ago: executing program 4 (id=663):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00')
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000380)=0x1, 0x4)
connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f0000000200)={'veth0_to_bond\x00'})
bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write(r4, &(0x7f0000000080)="012dd41e", 0x4)
r6 = socket$kcm(0x29, 0x2, 0x0)
r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r7, &(0x7f0000000480)={0x2020}, 0x2020)
setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000400)=0x320d, 0x4)
ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000180)={r0, r2})
write$binfmt_script(r6, &(0x7f0000000100), 0xfecc)
preadv(r1, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/190, 0xbe}], 0x1, 0x0, 0x0)

5.302258847s ago: executing program 3 (id=664):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
readv(0xffffffffffffffff, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = creat(0x0, 0xd931d3864d39dcca)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x1101, 0x2})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0xc02, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000640)=[@acquire], 0x0, 0x0, 0x0})
dup3(r2, r1, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x0, 0x1})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f00000004c0)="e0"})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)
write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69)
socket$alg(0x26, 0x5, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)

5.246124108s ago: executing program 4 (id=665):
r0 = fsopen(&(0x7f0000000240)='binder\x00', 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r4, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32)
connect$pppl2tp(r3, &(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}, 0x1, 0x3}}, 0x26)
getsockopt$bt_BT_SECURITY(r3, 0x111, 0x4, 0x0, 0x20000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x13, 0x8, &(0x7f00000009c0)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0)
connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async)
r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$SNDCTL_MIDI_PRETIME(r6, 0xc0046d00, &(0x7f00000000c0)=0xfffffff7) (async)
ioctl$SNDCTL_MIDI_PRETIME(r6, 0xc0046d00, &(0x7f00000000c0)=0xfffffff7)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000f9a000/0x2000)=nil})
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_read_def_link_policy}}, 0x9)
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) (async)
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000040)={0x10003, 0x0, 0x10000, 0x2000, &(0x7f0000f9a000/0x2000)=nil})
sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) (async)
sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) (async)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0)
fsmount(r0, 0x0, 0x0)

5.177908435s ago: executing program 5 (id=666):
mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x139)
syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
syz_emit_ethernet(0x1e, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)={0x1, 0x1, [0x948, 0x9b7, 0x97, 0xc39]})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/custom1\x00', 0x800, 0x0)
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
ptrace$PTRACE_GETSIGMASK(0x420a, 0x0, 0xffffffffffffffc0, &(0x7f0000000180))
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x1}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x100000, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4)
write$binfmt_script(r3, &(0x7f0000000100), 0xfffffecd)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000400)=@gcm_256={{0x304}, "ca7ee2b1848ae337", "4b5b154869939154798f82be7dcae38bcdcab75bc2d1dcb3b28921cb75aab36d", "899d6e3a", "90167d3ae79ca2c5"}, 0x38)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000b40), 0x4)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)

4.302026174s ago: executing program 1 (id=667):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
r1 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x0, 0x0, 0x1}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x100000, @mcast2, 0x7}, 0x1c)
sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv6_delrule={0x1c, 0x21, 0x1}, 0x1c}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4)
setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000080), 0x4)
r5 = msgget$private(0x0, 0x0)
msgsnd(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="932cf57c07f41f1f7cd3b08a94ee7dff6cba12fe4b7ea7c3"], 0x2000, 0x0)
msgctl$IPC_SET(r5, 0x1, &(0x7f0000258f88)={{0x1}, 0x0, 0x0, 0x800000000000000, 0x7, 0x2, 0x0, 0x3, 0xe8, 0x0, 0x0, 0x0, 0xffffffffffffffff})
syz_open_dev$tty1(0xc, 0x4, 0x4)
mmap(&(0x7f0000000000/0x11000)=nil, 0x11000, 0x0, 0x152, 0xffffffffffffffff, 0xe680e000)
r6 = syz_open_procfs(0x0, 0x0)
write$cgroup_subtree(r6, 0x0, 0x0)
ioctl$KVM_CAP_HYPERV_SYNIC(r6, 0x4068aea3, &(0x7f0000000040))
r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
io_setup(0x6, &(0x7f0000001380)=<r8=>0x0)
io_submit(r8, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, r7, 0x0}])

4.109996709s ago: executing program 4 (id=668):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
syz_open_dev$MSR(0x0, 0x2, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$packet(0x11, 0x2, 0x300) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r3}, 0x10) (async)
sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)="c6a6f7163e4dac8c4040f62508e8a2afefcecef8e051166f8ecbcded98d32b8d758166041f9568b23430fb754d8936478e3714570e679148fae926e6271351052608d12c3c9eb97aec067d1a8e62d06205000000706e79575968f48b80e1fa904cad421fffa0be3797d58cb67fb1a9475c2e51a2f6877f8e3324172fbddf4c409b7949e50195bca83ab6434135d0c199cf418136f7385cc713617af379e0631e0cc0a38f93f005188496e331b2ad341c4b4d187cae6d23b25852df7f2feb65edcf242e12ff278a552afb39a149089375f1a5092fd9fc71f9aa22727f57", 0xdd}, {&(0x7f0000000080)}], 0x2}, 0x0) (async)
recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) (async)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x1f0)
syz_io_uring_complete(0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
socket$inet(0x2, 0xa, 0x0) (async)
prlimit64(0x0, 0xb, &(0x7f0000000240)={0x7, 0x3ff}, 0x0) (async)
sched_setscheduler(0x0, 0x5, &(0x7f0000000040)=0x7) (async)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x98) (async)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

3.738114923s ago: executing program 2 (id=669):
r0 = memfd_secret(0x0)
bind$ax25(r0, &(0x7f0000000200)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @default, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d0000000000000a080009000d000000", 0x24)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x108, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x10}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x10}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x7}}]}, 0x108}}, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x100002)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYRES16=r2])
r6 = fsopen(&(0x7f0000000200)='bfs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef\x06\x00\x00\x00\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\x17?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r8 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121)
dup(r8)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd_index=0x5, 0x4, 0x0, 0xfa, 0x4, 0x1})
r9 = syz_open_dev$sndctrl(&(0x7f0000000140), 0x0, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r10, &(0x7f0000000340)={'#! ', './bus'}, 0x9)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x13, r10, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r9, 0xc0045516, &(0x7f0000000080))
io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0)
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2)
truncate(&(0x7f0000000040)='./file0\x00', 0x0)

3.690139632s ago: executing program 4 (id=670):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000006800010000001100fcdbdf250a0003000000000500000000", @ANYRES32=0x0, @ANYBLOB="04000400"], 0x24}}, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000240)=0x7)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x2)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9da, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSIG(r4, 0x40045436, 0x32)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000140)=0x15)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000002c0)=0x7e)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000540)=0x9)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000180)=0x3)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000300))
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r7 = socket$inet6(0xa, 0x2, 0x1)
accept4(r7, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x6a, &(0x7f00000001c0)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x0, 0x0, @remote, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr, {[@timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@loopback}, {@remote}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast}, {@remote}]}]}}}}}}}, 0x0)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x7e)
close_range(r5, 0xffffffffffffffff, 0x0)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1000000011f500080000000000000002"], 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000000)={0x7d61})
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io(r3, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\a'], 0x0, 0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r0, 0x0, 0xe80, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884366a578bb3fb7dbfc", 0x0, 0x0, 0x0, 0x31, 0x0, &(0x7f0000000700)="49723b3ab53a13274c56e00d5be19f87e669877bbc7b7c0cb48fd1bbea1e688e7c84ccfb034a845b4493c90e1785234592", 0x0}, 0x50)

3.689273585s ago: executing program 3 (id=671):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bdabb49f35c25d456591f0c15a08769bcd5107053ea1f85250ac10e50c14ffda0a7a98740", 0x2a)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
utime(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)={0x0, 0x10001})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r6, 0x0, 0x0}, 0x20)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
r7 = dup(r3)
write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
fcntl$setlease(r8, 0x400, 0x0)
r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r9, &(0x7f0000000200)=[{&(0x7f0000000040)=""/170, 0x47}], 0x1, 0x0, 0x0)
setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000040), 0x4)
write$qrtrtun(r0, &(0x7f0000000240)="25375468d806d8f58187445ffe9858217350a60bd72487386e5fed8ee07cb6f6b4ecc8a6356cee94d42a", 0x2a)
write$qrtrtun(r0, &(0x7f0000000c00)="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", 0x3d1)
write$qrtrtun(r0, &(0x7f0000000400)="b9f7e454d6ce9b05000000000000000000a152b0fb36b2bdac6494600f2394b9861dda01d93da7d1f3e718f268a55c29480f0c36d8de3d666657", 0x3a)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c)

3.42572494s ago: executing program 2 (id=672):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000020000000140012600904000090e3786773000000"], 0x3c}, 0x1, 0x0, 0x0, 0x404c040}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYBLOB="020000000000800080001200080001"], 0xa0}}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0)
mkdir(&(0x7f00000000c0)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x8ab5d87f76e229c6, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000003c0)=[@increfs], 0x0, 0x0, 0x0})
dup3(r3, r2, 0x0)
ppoll(&(0x7f0000000140)=[{r3, 0x48}], 0x1, 0x0, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0xa, 0x3, 0x3a)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r6 = openat$cgroup_devices(r5, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r6, &(0x7f0000000180)={'c', ' *:* ', 'm\x00'}, 0x8)
write$cgroup_devices(r6, &(0x7f0000000080)={'b', ' *:* ', 'wm\x00'}, 0x9)
write$cgroup_devices(r6, &(0x7f0000000380)={'c', ' *:* ', 'r\x00'}, 0x8)
sendmsg$IPSET_CMD_SWAP(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x6, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x88004)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x7}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0xa}}, @NFT_MSG_NEWRULE={0x0, 0x6, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_RULE_ID={0x0, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0x0, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0x0, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x0, 0x1, 'syz0\x00'}, @NFTA_RULE_TABLE={0x0, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x0, 0x7, 0x1, 0x0, "3b07f4c51b401db5aacfe186600eb24b54fe6391f3546b9e24112d930e6f2163b17c1bf36748ca38857c7f70e45a57cc69436fff76dfc7e82512e134e22848aacc1fc54556b030e21796a231748b0ad53dfb16f3da9de06441fa3f209c834e76d808d7972da46ab217251b42d8b0dbd4b4bd1034b78a1156ad3f5252dd884c9230fd0a68d56b44a1814c16570cccaf531f7527433b6f5d822694b87b65f30d8aed3c7fd0cf6b01f95b9a830a892333189d19509294ce6cc46c1f379201922133251ff9ff98b8b4d1"}, @NFTA_RULE_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x0, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x0, 0x1, 0x1, 0x0, 0x67}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x0, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x0, 0x1, 0x1, 0x0, 0x2f}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x0, 0x1, 0x1, 0x0, 0x9300}]}, @NFTA_RULE_EXPRESSIONS={0x0, 0x4, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, @dup_ipv6={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @tproxy={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x0, 0x2, 0x1, 0x0, 0x10}]}}}, {0x0, 0x1, 0x0, 0x1, @inner={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x0, 0x2, 0x1, 0x0, 0x1a}]}}}, {0x0, 0x1, 0x0, 0x1, @rt={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @range={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x0, 0x1, 0x1, 0x0, 0x10}, @NFTA_RANGE_TO_DATA={0x0, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x0, 0x1, "66ab9e70ab0117cac4bda67748d10e11a02e1b3346267a9c0e2f0951c13256df3c17fa317c5785d09415bb38693b2b4e181c"}]}]}}}, {0x0, 0x1, 0x0, 0x1, @immediate={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @payload={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @dup_ipv4={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x0, 0x1, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x0, 0x2, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_DEV={0x0, 0x2, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_DEV={0x0, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x0, 0x2, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_DEV={0x0, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_ADDR={0x0, 0x1, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_ADDR={0x0, 0x1, 0x1, 0x0, 0xa}]}}}]}]}, @NFT_MSG_NEWSETELEM={0x30, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x29c}}, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000400)=[@request_death], 0x0, 0x0, 0x0})
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r7 = creat(&(0x7f0000000340)='./file0/file0\x00', 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
ioctl$FIONCLEX(r7, 0x5450)

2.734936389s ago: executing program 3 (id=673):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x1f4, 0x1, 0x0, &(0x7f0000000100)="ff", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x380, 0x3a8, 0x3a8, 0x380, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x158, 0x700, {}, [@common=@eui64={{0x28}}, @common=@unspec=@connlimit={{0x40}, {[0xff, 0xff, 0xff000000, 0xffffffff], 0x2, 0x2, {0x2}}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00', {0x18000}}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x8003, [0x7fffffff, 0xad1], 0x10, 0x20, 0x8, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @loopback, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @local}, @empty, @loopback, @dev={0xfe, 0x80, '\x00', 0x35}, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @local}], 0xf}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x6, 0x4c7, 0x3, 'snmp\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
close(r0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x9, [{}]}]}}, &(0x7f0000000f40)=""/4089, 0x32, 0xff9, 0xa, 0x0, 0x0, @void, @value}, 0x28)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8b07, &(0x7f0000000440)={'wlan1\x00', @random="8dffffffebff"})

2.659017327s ago: executing program 3 (id=674):
mkdir(&(0x7f0000000400)='./bus\x00', 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private}}}}}}, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x8800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
socket$inet6(0xa, 0x6, 0x6)
getdents(r0, 0x0, 0x0)
r1 = getgid()
setresgid(r1, 0xffffffffffffffff, r1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0xc42d, 0x0, 0x1000003, 0x10108, r0, 0x7e, '\x00', 0x0, r0, 0x2, 0x5, 0x1, 0x2, @void, @value, @value=r0}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r3}, 0x18)
getegid()
lstat(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000440)={[{@gid={'gid', 0x3d, r1}}, {@huge_advise}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x33, 0x25, 0x74]}}, {@uid={'uid', 0x3d, r4}}], [{@context={'context', 0x3d, 'root'}}, {@dont_appraise}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.:{'}}, {@subj_type={'subj_type', 0x3d, '-)'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '$^,-\xe0^#'}}]})
r5 = userfaultfd(0x801)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_CONTINUE(r5, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
mincore(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000000)={{@any, 0x8}, @local, 0xa, 0x5, 0x3ff, 0x1c, 0x0, 0x9, 0x6})
lseek(r0, 0x1000000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f00000002c0)={{0x1, 0x1, 0x18, <r6=>r0, {0xffff}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000380)={{0x1, 0x1, 0x18, r6, {0x2}}, './file1\x00'})
clock_gettime(0x7, &(0x7f0000000040)={<r7=>0x0, <r8=>0x0})
clock_settime(0x0, &(0x7f0000009ac0)={r7, r8+10000000})
r9 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r9, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r9], 0x80}}, 0x0)

2.534227187s ago: executing program 2 (id=675):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe3000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"])
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r4, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0x1})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000680)={0x13, 0x10, 0x10f, {0x0, r5, 0x2}}, 0x18)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r6, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000})
ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000480)={0x28, 0x2, r6, r6, 0x8, 0x9, 0x5})

2.533397485s ago: executing program 3 (id=676):
openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ftruncate(r2, 0x8001)
r3 = dup(0xffffffffffffffff)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r4)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r5, 0x4000000)
r6 = socket(0x40000000015, 0x5, 0x0)
connect$inet6(r6, &(0x7f0000000340)={0xa, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x21}, 0x8835}, 0x1c)
r7 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r7, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
bind$inet(r7, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="67d8902400aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df895d9907e4afb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b907e0974f1073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf4dee8512f3bac440f5d5e4bed6b897608b01eae26a54433e5f5c74a2ee3c2fc50067be05a677ff52a7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fedb679328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e27252804059094a318c4cdeeddd5793a427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a958df39f9c5a8c8e876a52816446d0106f4a81dba144c80fda0b401f0774edbf73b3de44d7ca5c28b0830910f3b02be5e8", 0x427}], 0x2}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40)
getsockname$packet(r6, 0x0, &(0x7f0000000e00)=0xfeeb)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000240)={0x0, 'xfrm0\x00', {0x4}})
getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f00000000c0)=0x6, &(0x7f00000001c0)=0x4)
socket$inet_mptcp(0x2, 0x1, 0x106)
accept(r4, 0x0, 0x0)

2.196668844s ago: executing program 2 (id=677):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet6(0xa, 0x3, 0xb6)
setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f0000000080)={0x5c}, 0x8)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58)
r7 = accept4(r6, 0x0, 0x0, 0x0)
r8 = accept4(r7, 0x0, 0x0, 0x0)
sendmmsg$inet6(r8, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000240)="13ac98553715b99cc275ca6adc304b31c5c2b9a3b47e029e61cf50257c71cd0e7f79a576eec5462623f4096a4a2126272c750d668cb0ca97aad1519e7e8caa724ac58212b27bf2f678153bc609a838548de61a5e7033d46aebb5423edaa372", 0x5f}, {&(0x7f00000002c0)="9d4ad01bc5041e4a7b3724772833632644fd66797a1d1ed3fa1eea7b7908a0079b37249c60331b174d3e0eb39decfcc04b403ed5128aacac20dda5a4b16bf73e25443f30aeecaec435d70d343a0c408784240b9684087d8d3e684d1e616adf6885e473c38e85336907cd33f6b2bf3ade632566db7be79e73e3aca0b70c54010b7db3a1456a02d94d8cff977ee6d0f01e105177096ddd465c17c1f5c66a07a7c91ba4390eae6a817fef67e668977194e6374cf8af38690f28a74a4e94a0c94359a432385994ea2e61c0d96c43c61b9e0e53ab0846e6efafefc0d35e50c527b8afd37ae3ea", 0xe4}, {&(0x7f0000000440)="039590855af939554dd20d6db355f5805096b07ee932241e65e5c67d4ead856c29e19fee3aeb3c4cf764801d08e57bc11012b1910029e605cd0bea10e871c2b6e50ff00335aee32506da860360dc48b6d5e981b76fe2fb6aee6ae5436b6589ac4d", 0x61}, {&(0x7f00000004c0)="ae5621b6499019a610830c64f205e6e3386f7f244e7d0776c670d547236484ae62c107a61d802cbafedd2681d78f0551987dbea229e0d6a779b9ebeed7c2cdfb001f9954584aa2f51123c054813a6b200fc68b87fa4e253e33c82f28418ab010a4575152fa57293297b1247492644056c35ac8b73ef987929afca98fc6ec5371d816cb4725ec99fad1dfe78d4a01", 0x8e}, {&(0x7f00000003c0)="8fd3802885474738", 0x8}], 0x5, &(0x7f0000000600)=[@rthdr_2292={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x0, 0x4, 0x0, [@rand_addr=' \x01\x00', @rand_addr=' \x01\x00', @private0, @private2={0xfc, 0x2, '\x00', 0x1}]}}}, @hopopts={{0x68, 0x29, 0x36, {0x4, 0x9, '\x00', [@calipso={0x7, 0x48, {0x3, 0x10, 0x2, 0xe83b, [0xed18, 0xffffffffffffd3f2, 0xe, 0x8, 0x2, 0x200000, 0x0, 0x1]}}]}}}], 0xc0}}, {{&(0x7f00000006c0)={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x3a}, 0xd0}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000700)="4154a5c81a31f83ecf159db9ef8479", 0xf}, {&(0x7f0000000740)="1eabba0465970eb56872ad6c17d8799d89d2a4fed184895848a05a1c07130b1e59bbc23c45bd67aad7cf710f36b9d7dfcaecc11ce48e7b5f9837088394a71b645f620e819b1d73738d0a7d2d17d6c4d98edf65d4b93519499848c8d97ff19079fd51b416eae2d90a5a", 0x69}], 0x2, &(0x7f0000000880)=[@dstopts={{0x78, 0x29, 0x37, {0x5e, 0xb, '\x00', [@enc_lim={0x4, 0x1, 0x3}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x7}, @pad1, @ra={0x5, 0x2, 0x1000}, @calipso={0x7, 0x30, {0x3, 0xa, 0x0, 0x477, [0x9, 0xd, 0x2, 0x9, 0x8]}}, @hao={0xc9, 0x10, @private2}]}}}, @tclass={{0x14, 0x29, 0x43, 0x2}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback}}}, @flowinfo={{0x14, 0x29, 0xb, 0x80000001}}], 0xd0}}, {{&(0x7f0000000980)={0xa, 0x4e20, 0x101, @dev={0xfe, 0x80, '\x00', 0xd}, 0xfff}, 0x1c, &(0x7f0000000c00)=[{&(0x7f00000009c0)="e7ce2850cd0d9beaef68ead3ad8a1043b1b322d44316c9cf23606893449955b062c389703c800fd940559013951f2c97836822eb59399079b553390399c9c9e89ebc1d81b130b5c725be88f10bd91bf97072e0416e8d2a1681702067cea00225293a6f", 0x63}, {&(0x7f0000000a40)="0f5360793fb6b73019e43f2b6c8a1aff6d2c102658d4071cf687733a51b258dd4234568ceda4cc35b50420252e6506e11d4cda843e250413d2c1f76571df76c431aa570ffe4fe4b03cb315275d81109031d06d10506442aba839727c53a96c36a285ccebe984d8ae90705722606783e5f754fcbadd60904a16d5f1feca7e9e37e9bff2d860bd1c16982357a22cc7637252dd4d84d349ef374d0f48a2f847aff22ca7b3388276ca4f", 0xa8}, {&(0x7f0000000b00)="d96b1a7bbcd00acb73b5c5ecc4606182a040893e43b1c3d577f5cac8afaef70741edb3cf48ede17fa9a074948604bb40c5aa71eb81a4f288f6a8dfcbb4fac2276dd2bb3aa0b52f461328a79dc5de81907e2848b41bf941eefb0eaa39729ed3aab293b826c4c416666c9898717a6c5fa2a6d643598c0ea4e5e70623c0c839db16ef99eaea6060d7dc71f04d07dbb751219499bb70840e35229f5dcd056ae78bf711ae0a273f9eb09be888fca199c72696ee31b797eb4e5dd117e5d5aaa6aa5126e4", 0xc1}], 0x3, &(0x7f0000000c40)=[@flowinfo={{0x14, 0x29, 0xb, 0xa}}, @hoplimit={{0x14, 0x29, 0x34, 0x8}}, @hoplimit={{0x14, 0x29, 0x34, 0x2}}], 0x48}}, {{&(0x7f0000000cc0)={0xa, 0x4e23, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f00000023c0)=[{&(0x7f0000000d00)="e37b12ebccbb272f2f723a012f27d92aee2eee09b7223c339eb67c86f6d7d1b3df92be7fefb361a2dca22ebb2a938097b5404c", 0x33}, {&(0x7f0000000d40)="9785a972d2a9dd573b5f8130fdfc42883a9e30f9f8f0f5998c355b72be01e47018e2914fbe9fc8d58aa59730e6d531ad098f34b3536b5f7dea1ca2578e52448f2300973323cf39359e056bf77f2db89d12f0c7c4912f7de905c3f81feba0ec8ab1d79733704a1b9f2786956463fc2622d427c401d607489b9a90a643062b6d078f11c6679718b23792ff2adb9e402dba7e065102784bb605185f842aebecf1a02d1e8b7797d64bd30c2c7c668ef1baf3385f15dfd0be4b8d5053dae4adc932262cac95b6e50b4a511f66df374a5a8991fd809f79085195a6cbbe4433e0559675f499", 0xe2}, {&(0x7f0000000e40)="a737d2aca615d8b2c6b747929355fe1e006cee2ccd6dbdf34ec905", 0x1b}, {&(0x7f0000000e80)="a720cdf21352737016fd68becc05ee27d639351c303489e4557aed338f9782402840a8e22241406ddde989504069d9bcfc6a395c99e056184cf6d299910f8b2f743c91af1041c09397225702f2872b4285e7f21826171daf0c6c14b4bc5953b672357db022dc8ebaa0feb754e74dd9456aeeabebd1cf6e99bd0b00c204a465a6ec4a8a2342dd898cb4ee409e0bdb39c3591fbddd774df96bc37410bb9a1a20ad28", 0xa1}, {&(0x7f0000000f40)="c5aafe478b4dacb52a7c440d24628137abaae89d6db495cc72445af4ae9a41425ac273f338b1b2331ab223be44c00d4ae802bb4f6833ebf350b7936fd031a03de4049dd629088bfb41c61a7e2aefac7f0cc225903a5df0faf63643fe0d678d05e545d35531dc47b97e35cd59352c404201e48a6de5ef53b12944217569dcaf316d641705f64046a95abec6f57b2970cfbc4d306f5be6a1ab8c74078f398361112d4cbfe9d6cbe586fb34ec2d5d30662530a8f601e03f56399977309d142ec5495485994ead08ae9dee5b894caf622b173c57370179a1e327", 0xd8}, {&(0x7f0000001040)="280309b6817576669f7f923caecb94d918f957a9080e5f7fe11a0732d0c20c726de72858f37b7cb9f0ebf12daecd8ae1e53f57c4bcdd88a21d322b3a37670114777e6f7e215f323f4c0169dab8a19a085bcab5e3dcddea68b6fa641fbac32b788b565d7244dde72c97eda960a671570996e81ce8a6564389c7c115fa2b2960519215013a7f8b383e8c1e2c18e332564c22ceccb21a553920b703fb0f6de52bcb833f4077926267c3c2b84078e4afaae39b7eba7256fd2ca84be64bd7bb9ef46a49112260427b62620821229de83d20c905ae39ef4f3efbb97cdc2595ea0e4e", 0xdf}, {&(0x7f0000001140)="2b227a77a3180dff48fd233f879f07d74a4bf57edd69efc89b3b3d34719cb28d58454e587cc515ea02f223914686dc923d664f61cc8fb295522ccebe56c44e558a06ba4acef31703720a2457ed4f", 0x4e}, {&(0x7f00000011c0)="417e0b992cc55d00a5ea072141541bbc07e7986c42421ce980218440477e66295b4ff0cdcbfd58012bdf5c0640f4a655d825b967761da43a022b95fdefd2aa133ae992d653f00bfe64fac0920431ddbaf4ad50548a14156ecb24a86d6d76f59738e62973d6ac40b4f98b288c4afabd0f0f0dddc92d5869b62e291f09ea10444c8b60941eb62cf5a333c89c4319b4cc1ff8565a9a02d25471471981b8729439bda26d05a1f39c66121c941f801ed76d3b3ed5941151eb5823de1420dca70bc08f6d235e0210fefc52fa266860fd08e3867cb85996e260300f44", 0xd9}, {&(0x7f00000012c0)="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", 0xfb}, {&(0x7f00000013c0)="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", 0x1000}], 0xa}}], 0x4, 0x0)
connect$inet6(r8, &(0x7f0000000000)={0xa, 0xe0, 0x4, @empty, 0x3}, 0x1c)
sendmmsg$inet6(r5, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0x62, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000106d043ac500000000000109022400000000c80009040000010300020009210000f90122f8040905810300"], 0x0)
syz_usb_control_io$hid(r9, 0x0, 0x0)
syz_usb_control_io$hid(r9, 0x0, 0x0)
syz_usb_control_io(r9, &(0x7f0000000400)={0x2c, &(0x7f0000000800)={0x40, 0x3, 0x7, {0x7, 0x1, "cce44b0000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

1.61235143s ago: executing program 4 (id=678):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000000c0)=ANY=[@ANYRES16])
poll(0x0, 0x0, 0x0)
accept$packet(0xffffffffffffffff, 0x0, 0x0) (async)
r0 = accept$packet(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f00000001c0))
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async)
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'})
dup2(0xffffffffffffffff, 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000040), 0x8000000000000000, 0x141040)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1a, 0x10, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1a, 0x10, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = dup(r3)
write$UHID_INPUT(r4, 0x0, 0x0) (async)
write$UHID_INPUT(r4, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async)
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)

1.566047097s ago: executing program 3 (id=679):
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106a054500000040000001090224"], 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0x80000000, 0x401, {}, {<r1=>0xffffffffffffffff}, 0x0, 0x6})
sendmsg$nl_generic(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x1fc, 0x18, 0x800, 0x70bd27, 0x25dfdbfe, {0x1f}, [@typed={0xc, 0x50, 0x0, 0x0, @u64=0x5}, @generic="153529e396ddad12de658e5b6591ef13a2771933c914ae379de90fbefff440cd148810d0b604aefb38c1172df06ca162d20f23c6ab81f08101a886c2a6f6a56711303bd3b5f036", @typed={0x8, 0x40, 0x0, 0x0, @uid=r1}, @nested={0x1c, 0xea, 0x0, 0x1, [@nested={0x4, 0x46}, @nested={0x4, 0x28}, @nested={0x4, 0x127}, @typed={0x8, 0xb7, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @nested={0x4, 0x12d}]}, @generic="9ad532862213720603cef8ee18fbde3305b938fc1e05fe6fa9a84b3f23b2070ece36996386ceed46e91dfc676c28f2384f17affb4d58c80905853a132f6c3507c612bc5902dec0dedc0e3e823ca3edc5288d6db2b78d1b76bb659b06d8d01665432716c7773c59711d98c2929ef8abb1a7bc658031d3f0c59a8912e9d411609dd47b", @generic="45728f3debebeb97bdddd92e363767c4167f6423d66723d2dc57bc64a71064a4992755d753450522b7db781f3a1a4634745311eb7f328a2c38c0fa688a4bd089ed02ed5cbd7f6712137fa8d95a389a360f84c460aef2d4abcac8480cad51d7fa95e53c4162e38aebed283beb864a4edd6ceb502fb026b32f912c58471765745c2d2c049faf795d07eae79ae07e4be661608bfded5e4500cf33665e75282f04f0e2992760ad1059c5ceec81df8ad7280cb0e912b836bf2c1c25d7fe917710ce9d54740898602b40981c02b02daeb523d4dc79745a3eaeadc7ae7d8542803e0e645663fd8ff55160e0d346c9c7782f"]}, 0x1fc}, 0x1, 0x0, 0x0, 0x8002}, 0x20000050)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00')
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r3, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req3={0x2, 0x1000, 0x816a, 0xb, 0x2, 0x3ff, 0x4}, 0x1c)
fchdir(r2)
r4 = memfd_create(&(0x7f00000000c0)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYS', 0x0)
write(r4, &(0x7f0000002140)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0)
syz_open_dev$evdev(&(0x7f0000000040), 0x9, 0x14da41)

1.470097167s ago: executing program 5 (id=680):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(0xffffffffffffffff)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x50)
r3 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5, 0x0, 0x0, @void, @value}, 0x10)
syz_open_dev$vim2m(&(0x7f0000000200), 0x6, 0x2)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
socket$kcm(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500"/28], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r7, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r10, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050004000000140004"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)

312.085117ms ago: executing program 5 (id=681):
openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x802, 0x0)
syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=<r0=>0x0, &(0x7f0000000040)=<r1=>0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="ac020000", @ANYRES16=r3, @ANYBLOB="bf4400000000000000000c0000008000058014000280080001000000000008000100090000002c0002800800020001000000080004005fbe0000080001001b00000008000200000000000800020009000000070001006962000034000280080003006400000008000400090000000800030051bd000008000300fc00000008000300a9"], 0x2ac}}, 0x0)
syz_io_uring_submit(r0, r1, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31})
syz_init_net_socket$ax25(0x3, 0x3, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x11, &(0x7f00000010c0)=ANY=[@ANYBLOB="1800000005000000000000000800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000000055090100000000009500000000000000850016009100000095420c00ffffffffbf91000000000000b7020000020000000900000084000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000000200000008000300", @ANYBLOB], 0x48}}, 0x0)
socket(0x10, 0x803, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000001040)={0x8, 0x8f}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
dup(r7)
socket$inet6_tcp(0xa, 0x1, 0x0)
pipe2$watch_queue(&(0x7f00000002c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80)
r10 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r9, 0x5760, 0x19)
keyctl$KEYCTL_WATCH_KEY(0x20, r10, r9, 0x0)
keyctl$KEYCTL_WATCH_KEY(0x15, r10, r8, 0x0)

212.633117ms ago: executing program 4 (id=682):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000076000d0b0000000000000000000000000000000008000a00fcffffff"], 0x20}}, 0x0)
r1 = fsopen(&(0x7f0000000180)='pipefs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x6, 0x0, 0x0, 0x0)
fsmount(r1, 0x1, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1b5000, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r3 = io_uring_setup(0x706, &(0x7f0000000340)={0x0, 0x47c2, 0x40, 0x3, 0x157})
r4 = io_uring_setup(0x2910, &(0x7f0000000440)={0x0, 0x7b6d, 0x4, 0x0, 0x11, 0x0, r3})
syz_io_uring_setup(0x7ceb, &(0x7f0000000280)={0x0, 0x7ed1, 0x80, 0x3, 0x29a, 0x0, r4}, &(0x7f0000000080), &(0x7f0000000180))
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x200, &(0x7f0000000140)=0x1)
syz_usb_control_io(r5, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r5, &(0x7f00000002c0)={0x52, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x0, 0x3, "4586275a685dcaabd82425e38fc77c16f11e0e8fc694f56f122e5536fb16f602f7f2bb39c34e9f"}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, &(0x7f0000000000)={0x24, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0)
syz_usb_connect(0x1, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x46, 0x36, 0x56, 0x8, 0x4b4, 0x8613, 0x958f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd1, 0x6e, 0xa5}}]}}]}}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
mprotect(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x5)
r6 = open(0x0, 0x14000, 0x0)
r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000240)={0x1})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04000418"], 0x7)

0s ago: executing program 1 (id=683):
r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000340)='cgroup.stat\x00', 0x300, 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x5cd342)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x4c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x1b0, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x90, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x80, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x7c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9f, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000000, 0x7ff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x281, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0xc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x198}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xf, 0x7acba5e6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10, 0xf6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x7}}]}]}}}, @IFLA_VFINFO_LIST={0x100, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x1, 0x7}}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0xfffff782, 0x1ff}}]}, {0x3c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x0, 0x8bc, 0x7}}, @IFLA_VF_MAC={0x28, 0x1, {0xf, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}}]}, {0xa0, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x7fffffff, 0x2}}, @IFLA_VF_VLAN_LIST={0x40, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x5, 0x7e0, 0x6, 0x88a8}}, {0x14, 0x1, {0x6, 0x648, 0x0, 0x88a8}}, {0x14, 0x1, {0x9, 0x420, 0xfffffffc, 0x88a8}}]}, @IFLA_VF_VLAN={0x10, 0x2, {0x7fffffff, 0xb97}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x1, 0xfffff000}}, @IFLA_VF_LINK_STATE={0x3, 0x5, {0xa98f, 0x80000000}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x1, 0x3}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7fff, 0x7fffffff}}]}]}]}, 0x1b0}}, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r7 = socket(0x2b, 0x80801, 0x1)
socket$inet6_sctp(0xa, 0x0, 0x84)
connect$inet6(r7, &(0x7f0000000180)={0xa, 0x0, 0x10000, @private0}, 0x1c)
r8 = socket$rds(0x15, 0x5, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bind$rds(r8, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@mask_fadd={0x58, 0x114, 0x8, {{0x9, 0xa}, 0x0, 0x0, 0x4, 0xfffffffffffffffa, 0x5, 0x4, 0x8, 0x4}}], 0x58}, 0x0)
ioctl$sock_inet_udp_SIOCOUTQ(r7, 0x5411, &(0x7f0000001100))
ioctl$SIOCRSGCAUSE(r5, 0x89e0, &(0x7f0000000200))
setsockopt$inet6_group_source_req(r7, 0x29, 0x2b, &(0x7f0000000500)={0xbad, {{0xa, 0x4e24, 0xe9e, @local, 0x3}}, {{0xa, 0x4e20, 0xde0, @private2, 0x4}}}, 0x108)
r9 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r10 = dup(r9)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
ioctl$KVM_GET_CPUID2(r11, 0xc008ae91, &(0x7f00000004c0))

kernel console output (not intermixed with test programs):

dv: batadv0: Removing interface: batadv_slave_0
[  169.786317][   T29] audit: type=1400 audit(1733876515.205:560): avc:  denied  { bind } for  pid=7431 comm="syz.4.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  169.811839][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  169.819265][   T52] batman_adv: batadv0: Removing interface: batadv_slave_1
[  169.825102][    T8] libceph: connect (1)[c::]:6789 error -101
[  169.834233][    T8] libceph: mon0 (1)[c::]:6789 connect error
[  169.847150][    T8] r8152-cfgselector 2-1: USB disconnect, device number 17
[  169.916059][   T52] veth1_macvtap: left promiscuous mode
[  169.923837][   T25] page_pool_release_retry() stalled pool shutdown: id 23, 2 inflight 60 sec
[  169.932836][ T5829] Bluetooth: hci4: command tx timeout
[  169.950712][   T52] veth0_macvtap: left promiscuous mode
[  169.959905][   T52] veth1_vlan: left promiscuous mode
[  169.966598][   T52] veth0_vlan: left promiscuous mode
[  169.980755][    T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  170.012784][   T25] libceph: connect (1)[c::]:6789 error -101
[  170.018860][   T25] libceph: mon0 (1)[c::]:6789 connect error
[  170.079016][   T29] audit: type=1400 audit(1733876515.755:561): avc:  denied  { write } for  pid=7444 comm="syz.2.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  170.124913][    T8] libceph: connect (1)[c::]:6789 error -101
[  170.143683][    T8] libceph: mon0 (1)[c::]:6789 connect error
[  170.150481][    T9] usb 4-1: Using ep0 maxpacket: 16
[  170.165287][    T9] usb 4-1: config 1 has an invalid descriptor of length 230, skipping remainder of the config
[  170.198285][    T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  170.207859][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  170.233086][    T9] usb 4-1: SerialNumber: syz
[  170.257728][    T9] cdc_acm 4-1:1.0: Control and data interfaces are not separated!
[  170.280415][    T9] cdc_acm 4-1:1.0: This needs exactly 3 endpoints
[  170.300462][    T9] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22
[  170.358955][ T7436] ceph: No mds server is up or the cluster is laggy
[  170.358970][ T7433] ceph: No mds server is up or the cluster is laggy
[  170.538054][   T25] libceph: connect (1)[c::]:6789 error -101
[  170.559006][   T25] libceph: mon0 (1)[c::]:6789 connect error
[  170.606108][    T8] usb 4-1: USB disconnect, device number 27
[  171.159589][ T7444] mmap: syz.2.381 (7444): VmData 26103808 exceed data ulimit 2048. Update limits or use boot option ignore_rlimit_data.
[  171.221078][    T9] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  171.427727][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  171.450115][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  171.460026][    T9] usb 5-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00
[  171.469139][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.498372][    T9] usb 5-1: config 0 descriptor??
[  171.512987][   T52] team0 (unregistering): Port device team_slave_1 removed
[  171.565159][   T52] team0 (unregistering): Port device team_slave_0 removed
[  171.935416][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  171.942901][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  171.950048][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  171.981056][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  171.988227][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  172.000896][ T5829] Bluetooth: hci4: command tx timeout
[  172.010449][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  172.028037][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  172.038916][   T29] audit: type=1400 audit(1733876517.715:562): avc:  denied  { setopt } for  pid=7467 comm="syz.2.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  172.050447][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  172.099127][   T29] audit: type=1400 audit(1733876517.745:563): avc:  denied  { connect } for  pid=7467 comm="syz.2.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  172.099170][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  172.180410][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  172.187574][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  172.215150][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  172.224758][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  172.245907][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  172.253941][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  172.272840][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  172.279989][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  172.287699][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  172.295432][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  172.303065][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  172.310239][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  172.345620][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  172.452630][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  172.470444][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  172.481910][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  172.489899][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  172.499355][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  172.508601][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  172.515818][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  172.564077][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  172.571303][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  172.579420][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  172.588437][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  172.604084][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  172.623517][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  172.639444][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  172.648148][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  172.659498][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  172.686917][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  172.710158][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  172.720314][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  172.730086][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  172.741724][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  172.750859][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  172.758111][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  172.771903][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  172.780424][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  172.792583][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  172.802753][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  172.820445][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  172.840412][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  172.848587][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  172.857369][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  172.870370][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  172.878396][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  172.887166][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  172.898439][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  172.905662][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  172.913494][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  172.930380][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  172.940410][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  172.947594][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  172.957379][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  172.964599][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  172.971762][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  172.981291][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.001827][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.024133][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.036867][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.052876][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.060528][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.088132][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.101135][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.112382][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.121439][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.129005][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.136833][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.147750][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.176390][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.190003][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.200401][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.210384][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.219911][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.227280][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.240408][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.261915][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.269662][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.277092][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.290422][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.297647][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.305092][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.315164][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.323517][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.338716][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.349121][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.359526][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.367893][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.377953][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.385222][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.395366][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.403408][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.414336][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.424947][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.434416][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.442315][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.457756][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.467704][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.476371][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.485560][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.492841][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.500014][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.509327][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.516499][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.523757][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.531154][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.538290][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.545485][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.552662][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.559797][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.566996][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.574176][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.581361][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.588495][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x1
[  173.595676][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.602996][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.610125][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.617803][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.625015][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x4
[  173.632628][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.639772][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.647032][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.654211][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.661439][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.668574][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.675769][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.684046][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.691407][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.698556][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.705783][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.729386][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.738567][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.748291][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.762263][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.769743][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.787300][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.795048][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.808799][    T9] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  173.817471][    T9] logitech 0003:046D:CA04.000F: unexpected long global item
[  173.840452][    T9] logitech 0003:046D:CA04.000F: parse failed
[  173.848468][    T9] logitech 0003:046D:CA04.000F: probe with driver logitech failed with error -22
[  174.136167][    T9] usb 5-1: USB disconnect, device number 31
[  174.354890][ T7496] netlink: 12 bytes leftover after parsing attributes in process `syz.3.393'.
[  174.378918][ T7498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.394'.
[  174.388909][ T7498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.394'.
[  174.401944][ T7496] netlink: 732 bytes leftover after parsing attributes in process `syz.3.393'.
[  174.411122][ T7356] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  174.427403][ T7496] netlink: 732 bytes leftover after parsing attributes in process `syz.3.393'.
[  174.436560][ T7498] netlink: 'syz.1.394': attribute type 13 has an invalid length.
[  174.444746][ T7498] netlink: 'syz.1.394': attribute type 11 has an invalid length.
[  174.515587][ T7356] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  174.539376][ T7356] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  174.613409][ T7356] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  174.684367][ T7499] netlink: 100 bytes leftover after parsing attributes in process `syz.2.391'.
[  174.697478][   T29] audit: type=1400 audit(1733876520.355:564): avc:  denied  { create } for  pid=7480 comm="syz.2.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  174.773305][   T29] audit: type=1400 audit(1733876520.365:565): avc:  denied  { ioctl } for  pid=7480 comm="syz.2.391" path="socket:[16078]" dev="sockfs" ino=16078 ioctlcmd=0x8902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  174.842614][   T29] audit: type=1400 audit(1733876520.525:566): avc:  denied  { read } for  pid=7509 comm="syz.4.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  174.873479][ T7356] 8021q: adding VLAN 0 to HW filter on device bond0
[  174.951654][   T25] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  175.066388][ T7356] 8021q: adding VLAN 0 to HW filter on device team0
[  175.118996][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[  175.126108][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[  175.160013][   T25] usb 4-1: too many configurations: 15, using maximum allowed: 8
[  175.181401][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  175.188542][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  175.194418][   T25] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  175.205418][   T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.213959][   T25] usb 4-1: Product: syz
[  175.218266][   T25] usb 4-1: Manufacturer: syz
[  175.229929][   T25] usb 4-1: SerialNumber: syz
[  175.277209][   T25] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  175.294677][  T866] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  175.373809][ T7356] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  175.635470][ T5866] usb 4-1: USB disconnect, device number 28
[  176.029399][ T7524] can: request_module (can-proto-3) failed.
[  176.244013][   T29] audit: type=1400 audit(1733876521.915:567): avc:  denied  { map } for  pid=7537 comm="syz.4.400" path="/dev/net/tun" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1
[  176.323179][  T866] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  176.348738][ T7542] trusted_key: encrypted_key: insufficient parameters specified
[  176.357865][ T7356] 8021q: adding VLAN 0 to HW filter on device batadv0
[  176.394771][  T866] ath9k_htc: Failed to initialize the device
[  176.447329][   T29] audit: type=1400 audit(1733876521.915:568): avc:  denied  { execute } for  pid=7537 comm="syz.4.400" path="/dev/net/tun" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1
[  176.805375][ T5866] usb 4-1: ath9k_htc: USB layer deinitialized
[  177.195096][ T7555] netlink: 'syz.3.401': attribute type 11 has an invalid length.
[  177.217675][   T29] audit: type=1326 audit(1733876522.895:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7546 comm="syz.3.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19c17ff19 code=0x7ffc0000
[  177.680714][   T29] audit: type=1326 audit(1733876522.895:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7546 comm="syz.3.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19c17ff19 code=0x7ffc0000
[  177.846763][   T29] audit: type=1326 audit(1733876522.895:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7546 comm="syz.3.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa19c17ff19 code=0x7ffc0000
[  178.044570][   T29] audit: type=1326 audit(1733876522.895:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7546 comm="syz.3.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19c17ff19 code=0x7ffc0000
[  178.080162][    C1] vkms_vblank_simulate: vblank timer overrun
[  178.129132][   T29] audit: type=1326 audit(1733876522.895:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7546 comm="syz.3.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19c17ff19 code=0x7ffc0000
[  178.153788][ T7356] veth0_vlan: entered promiscuous mode
[  178.164588][ T7356] veth1_vlan: entered promiscuous mode
[  178.205143][ T7356] veth0_macvtap: entered promiscuous mode
[  178.221794][ T7356] veth1_macvtap: entered promiscuous mode
[  178.317235][ T7571] binder: BINDER_SET_CONTEXT_MGR already set
[  178.325563][ T7571] binder: 7570:7571 ioctl 4018620d 200001c0 returned -16
[  178.346413][ T7356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  178.365659][   T29] audit: type=1400 audit(1733876524.035:574): avc:  denied  { mount } for  pid=7565 comm="syz.4.404" name="/" dev="ramfs" ino=15255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  178.420261][ T7356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.435556][ T7356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  178.465085][   T29] audit: type=1400 audit(1733876524.095:575): avc:  denied  { ioctl } for  pid=7565 comm="syz.4.404" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  178.515377][ T7356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.533846][ T7356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  178.555663][ T7356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.585872][ T7356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  178.649778][ T7356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.685241][ T7356] batman_adv: batadv0: Interface activated: batadv_slave_0
[  178.761797][ T7356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  178.792379][ T7356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.203275][ T7356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  179.220294][ T7356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.233691][ T7356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  179.256542][ T7356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.273058][ T7594] input: syz0 as /devices/virtual/input/input13
[  179.276494][ T7356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  179.291978][ T7356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.321589][ T7356] batman_adv: batadv0: Interface activated: batadv_slave_1
[  179.430771][ T7356] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  179.439493][ T7356] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  179.464244][ T7356] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  179.473337][ T7356] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  179.681507][ T5913] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  179.711670][ T5913] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  179.767416][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  179.798564][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  179.836490][   T29] audit: type=1400 audit(1733876525.515:576): avc:  denied  { mounton } for  pid=7356 comm="syz-executor" path="/root/syzkaller.v7pVmC/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  179.846054][ T7612] xt_addrtype: ipv6 does not support BROADCAST matching
[  179.863093][    C1] vkms_vblank_simulate: vblank timer overrun
[  179.903346][   T29] audit: type=1400 audit(1733876525.525:577): avc:  denied  { connect } for  pid=7610 comm="syz.3.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  179.930450][   T51] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  180.133101][   T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  180.166896][   T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  180.196025][   T51] usb 3-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00
[  180.221867][   T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.259787][   T51] usb 3-1: config 0 descriptor??
[  180.414614][ T7626] NILFS (nullb0): couldn't find nilfs on the device
[  180.909331][ T7642] netlink: 12 bytes leftover after parsing attributes in process `syz.1.416'.
[  180.935961][   T29] audit: type=1326 audit(1733876526.615:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7640 comm="syz.3.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19c17ff19 code=0x7ffc0000
[  180.942051][   T51] usbhid 3-1:0.0: can't add hid device: -71
[  180.989204][   T51] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  181.047292][ T7639] sp0: Synchronizing with TNC
[  181.070334][   T51] usb 3-1: USB disconnect, device number 30
[  181.360715][    T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  181.516353][    T9] usb 2-1: Using ep0 maxpacket: 8
[  181.526709][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  181.957474][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  182.017510][    T9] usb 2-1: New USB device found, idVendor=09da, idProduct=0006, bcdDevice= 0.00
[  182.089855][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.144174][    T9] usb 2-1: config 0 descriptor??
[  182.212707][ T7670] befs: (nbd2): No write support. Marking filesystem read-only
[  182.221766][ T7670] syz.2.421: attempt to access beyond end of device
[  182.221766][ T7670] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0
[  182.269198][ T7671] sp0: Synchronizing with TNC
[  182.904024][   T29] kauditd_printk_skb: 11 callbacks suppressed
[  182.904042][   T29] audit: type=1400 audit(1733876528.585:590): avc:  denied  { module_request } for  pid=7637 comm="syz.1.416" kmod="net-pf-10-proto-1-type-2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  183.461421][ T7699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.428'.
[  183.497202][   T29] audit: type=1400 audit(1733876529.175:591): avc:  denied  { sys_chroot } for  pid=7701 comm="dhcpcd" capability=18  scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1
[  183.576890][   T29] audit: type=1400 audit(1733876529.195:592): avc:  denied  { read } for  pid=7691 comm="syz.4.427" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  183.600973][    C1] vkms_vblank_simulate: vblank timer overrun
[  183.731493][   T29] audit: type=1400 audit(1733876529.195:593): avc:  denied  { open } for  pid=7691 comm="syz.4.427" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  183.756256][    T9] usbhid 2-1:0.0: can't add hid device: -71
[  183.762823][    T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  183.786738][    T9] usb 2-1: USB disconnect, device number 18
[  183.792782][   T29] audit: type=1400 audit(1733876529.205:594): avc:  denied  { setgid } for  pid=7701 comm="dhcpcd" capability=6  scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1
[  183.845708][   T29] audit: type=1400 audit(1733876529.205:595): avc:  denied  { setrlimit } for  pid=7701 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1
[  184.292490][   T25] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  184.653931][ T7751] netlink: 'syz.1.433': attribute type 11 has an invalid length.
[  185.488969][   T29] audit: type=1326 audit(1733876530.345:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7747 comm="syz.1.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b7657ff19 code=0x7ffc0000
[  185.514110][   T29] audit: type=1326 audit(1733876530.345:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7747 comm="syz.1.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b7657ff19 code=0x7ffc0000
[  185.537505][   T29] audit: type=1326 audit(1733876530.345:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7747 comm="syz.1.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b7657ff19 code=0x7ffc0000
[  185.561045][   T29] audit: type=1326 audit(1733876530.355:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7747 comm="syz.1.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b7657ff19 code=0x7ffc0000
[  185.792002][   T25] usb 3-1: config 1 has an invalid interface number: 3 but max is 1
[  185.800005][   T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  185.820534][   T25] usb 3-1: config 1 has 3 interfaces, different from the descriptor's value: 2
[  185.829506][   T25] usb 3-1: config 1 has no interface number 2
[  185.849781][   T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  186.207306][   T25] usb 3-1: config 1 interface 3 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  186.220288][   T25] usb 3-1: config 1 interface 3 has no altsetting 0
[  186.262005][ T7758] overlay: ./file0 is not a directory
[  186.267566][   T25] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=ec.40
[  186.276925][   T25] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  186.285240][   T25] usb 3-1: Product: syz
[  186.289656][   T25] usb 3-1: SerialNumber: syz
[  186.308770][   T25] usb 3-1: selecting invalid altsetting 1
[  186.514460][   T25] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS
[  186.524671][   T25] cdc_ncm 3-1:1.0: bind() failure
[  186.540176][   T25] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  186.552370][   T25] cdc_ncm 3-1:1.1: bind() failure
[  186.770518][    T8] usb 3-1: USB disconnect, device number 31
[  186.889933][ T5866] IPVS: starting estimator thread 0...
[  187.000515][ T7783] IPVS: using max 23 ests per chain, 55200 per kthread
[  187.140629][ T5866] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  187.319485][ T5866] usb 6-1: unable to get BOS descriptor or descriptor too short
[  187.348666][ T5866] usb 6-1: not running at top speed; connect to a high speed hub
[  187.371338][ T5866] usb 6-1: config 4 has an invalid interface number: 111 but max is 0
[  187.385652][ T5866] usb 6-1: config 4 has no interface number 0
[  187.392146][ T5866] usb 6-1: config 4 interface 111 has no altsetting 0
[  187.401441][ T5866] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=44.99
[  187.401469][ T5866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.401489][ T5866] usb 6-1: Product: �
[  187.401506][ T5866] usb 6-1: Manufacturer: 찓？䜇痃⨰�弇�䀲È岟늩씠ὕ츼乎誢ᆿゅ点�๚䘱�﫩䃸뛞㔗젙頟㸲뽊�嗉莇垠ೌ벛ˆ疒��惆鉌쌫հ暾�뼦ɚ袋篞�ᑈ䟙⠹믯��칀椑죑김�텧澡䀋傌㖌퀭ᙒ慗즂��싘ڽ࢒葾ꀂ⻳툸릑羽籧䂊⾡롢僼꼌
[  187.401537][ T5866] usb 6-1: SerialNumber: syz
[  187.419063][ T7800] delete_channel: no stack
[  187.591010][   T25] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  187.621823][ T5866] pvrusb2: Hardware description: Terratec Grabster AV400
[  187.645789][ T5866] pvrusb2: **********
[  187.649813][ T5866] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  187.680837][ T5866] pvrusb2: Important functionality might not be entirely working.
[  187.710954][ T5866] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  187.727013][ T5866] pvrusb2: **********
[  187.735883][ T5866] usb 6-1: selecting invalid altsetting 0
[  187.759107][ T2321] pvrusb2: control-write URB failure, status=-71
[  187.759977][ T5866] usb 6-1: USB disconnect, device number 2
[  187.796257][ T2321] pvrusb2: Device being rendered inoperable
[  187.805841][ T2321] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  187.816647][ T2321] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  187.833298][   T25] usb 5-1: unable to get BOS descriptor or descriptor too short
[  187.857629][   T25] usb 5-1: too many configurations: 184, using maximum allowed: 8
[  187.889748][   T25] usb 5-1: unable to read config index 0 descriptor/start: -71
[  187.896867][ T7815] PKCS7: Unknown OID: [4] (bad)
[  187.905586][ T7815] PKCS7: Only support pkcs7_signedData type
[  187.920498][   T25] usb 5-1: can't read configurations, error -71
[  188.083752][   T29] kauditd_printk_skb: 7 callbacks suppressed
[  188.083769][   T29] audit: type=1400 audit(1733876533.765:607): avc:  denied  { ioctl } for  pid=7821 comm="syz.2.448" path="socket:[17141]" dev="sockfs" ino=17141 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  188.373376][ T7835] netlink: 144 bytes leftover after parsing attributes in process `syz.1.451'.
[  188.421182][ T7835] CUSE: info not properly terminated
[  188.451376][   T29] audit: type=1400 audit(1733876534.115:608): avc:  denied  { ioctl } for  pid=7833 comm="syz.1.451" path="socket:[17147]" dev="sockfs" ino=17147 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  188.582791][ T5824] Bluetooth: hci4: command 0x0405 tx timeout
[  188.840271][ T7846] RDS: rds_bind could not find a transport for fe88::5, load rds_tcp or rds_rdma?
[  188.851201][   T29] audit: type=1400 audit(1733876534.515:609): avc:  denied  { connect } for  pid=7845 comm="syz.4.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  188.923935][   T29] audit: type=1400 audit(1733876534.575:610): avc:  denied  { ioctl } for  pid=7845 comm="syz.4.455" path="socket:[18531]" dev="sockfs" ino=18531 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  189.074179][ T7854] misc userio: No port type given on /dev/userio
[  189.151960][ T7849] block device autoloading is deprecated and will be removed.
[  189.200947][  T866] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  189.368261][  T866] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  189.377591][  T866] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.395501][  T866] usb 6-1: config 0 descriptor??
[  189.400914][ T5822] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  189.409631][   T29] audit: type=1400 audit(1733876535.085:611): avc:  denied  { write } for  pid=5171 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  189.433680][   T29] audit: type=1400 audit(1733876535.085:612): avc:  denied  { remove_name } for  pid=5171 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  189.457542][   T29] audit: type=1400 audit(1733876535.085:613): avc:  denied  { add_name } for  pid=5171 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  189.491273][  T866] cp210x 6-1:0.0: cp210x converter detected
[  189.580543][ T5822] usb 3-1: Using ep0 maxpacket: 16
[  189.607410][ T7864] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=7864 comm=syz.1.459
[  189.656880][   T29] audit: type=1400 audit(1733876535.305:614): avc:  denied  { listen } for  pid=7863 comm="syz.4.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  189.683025][   T29] audit: type=1400 audit(1733876535.315:615): avc:  denied  { accept } for  pid=7863 comm="syz.4.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  189.803285][  T866] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  189.811485][ T5822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  189.823035][ T5822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  189.844009][ T5822] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  189.857007][ T5822] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00
[  189.866157][ T5822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.875227][  T866] usb 6-1: cp210x converter now attached to ttyUSB0
[  189.885094][ T5822] usb 3-1: config 0 descriptor??
[  189.990537][ T5866] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  190.044989][ T7869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  190.066615][ T7869] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  190.078134][    T9] usb 6-1: USB disconnect, device number 3
[  190.089426][    T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  190.119207][    T9] cp210x 6-1:0.0: device disconnected
[  190.124893][ T5866] usb 2-1: device descriptor read/64, error -71
[  190.380650][ T5866] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  190.511456][ T5822] usbhid 3-1:0.0: can't add hid device: -71
[  190.517472][ T5822] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  190.528487][ T5822] usb 3-1: USB disconnect, device number 32
[  190.530432][ T5866] usb 2-1: device descriptor read/64, error -71
[  190.639853][   T29] audit: type=1400 audit(1733876536.315:616): avc:  denied  { listen } for  pid=7873 comm="syz.3.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  190.671566][ T5866] usb usb2-port1: attempt power cycle
[  191.541041][ T5866] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  191.563620][ T5866] usb 2-1: device descriptor read/8, error -71
[  191.719629][ T7897] misc userio: Invalid payload size
[  191.727469][ T7897] misc userio: The device must be registered before sending interrupts
[  191.770029][ T7901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.470'.
[  191.830898][ T5866] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  191.861119][ T5866] usb 2-1: device descriptor read/8, error -71
[  191.948416][ T7897] futex_wake_op: syz.2.469 tries to shift op by -1; fix this program
[  191.982804][ T5866] usb usb2-port1: unable to enumerate USB device
[  192.190443][   T25] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  192.340908][   T25] usb 3-1: Using ep0 maxpacket: 32
[  192.347338][   T25] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[  192.365078][   T25] usb 3-1: config 0 has no interface number 0
[  192.392198][   T25] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  192.401484][   T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.409476][   T25] usb 3-1: Product: syz
[  192.420113][   T25] usb 3-1: Manufacturer: syz
[  192.426075][   T25] usb 3-1: SerialNumber: syz
[  192.440486][ T5822] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  192.484019][   T25] usb 3-1: config 0 descriptor??
[  192.630707][ T5822] usb 5-1: Using ep0 maxpacket: 32
[  192.707594][   T25] smsc95xx v2.0.0
[  192.737059][ T5822] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  192.925955][ T5822] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=6d.22
[  192.977206][ T5822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.025388][ T5822] usb 5-1: Product: syz
[  193.057327][ T5822] usb 5-1: Manufacturer: syz
[  193.080288][ T5822] usb 5-1: SerialNumber: syz
[  193.115728][ T5822] usb 5-1: config 0 descriptor??
[  193.147985][ T5822] usbserial_generic 5-1:0.0: The "generic" usb-serial driver is only for testing and one-off prototypes.
[  193.589128][ T5822] usbserial_generic 5-1:0.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[  193.600317][ T5822] usbserial_generic 5-1:0.0: device has no bulk endpoints
[  193.985623][   T25] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[  193.986448][   T29] audit: type=1400 audit(1733876539.665:617): avc:  denied  { nlmsg_read } for  pid=7895 comm="syz.2.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  193.999209][   T25] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  194.107461][   T25] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  194.148934][   T25] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71
[  194.166830][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  194.173568][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  194.191762][   T25] usb 3-1: USB disconnect, device number 33
[  194.212819][ T7941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.478'.
[  194.239308][ T7941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.478'.
[  194.265271][   T29] audit: type=1400 audit(1733876539.945:618): avc:  denied  { accept } for  pid=7939 comm="syz.3.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  194.330011][   T29] audit: type=1400 audit(1733876539.975:619): avc:  denied  { append } for  pid=7939 comm="syz.3.478" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  194.562002][   T29] audit: type=1400 audit(1733876540.235:620): avc:  denied  { getopt } for  pid=7951 comm="syz.3.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  194.627543][ T7955] capability: warning: `syz.3.481' uses 32-bit capabilities (legacy support in use)
[  194.938507][   T25] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  195.105275][   T25] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  195.715425][   T51] usb 5-1: USB disconnect, device number 34
[  195.741365][   T25] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  195.752491][   T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.762053][   T25] usb 6-1: Product: syz
[  195.770604][   T25] usb 6-1: Manufacturer: syz
[  195.775302][   T25] usb 6-1: SerialNumber: syz
[  195.817817][   T29] audit: type=1326 audit(1733876541.495:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7979 comm="syz.2.489" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0a0077ff19 code=0x0
[  196.122699][   T29] audit: type=1400 audit(1733876541.805:622): avc:  denied  { write } for  pid=7984 comm="syz.4.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  196.184919][   T25] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS
[  196.195531][   T25] cdc_ncm 6-1:1.0: bind() failure
[  196.226975][   T25] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found
[  196.259611][   T25] cdc_ncm 6-1:1.1: bind() failure
[  196.269125][ T7995] random: crng reseeded on system resumption
[  196.370983][   T25] usb 6-1: USB disconnect, device number 4
[  196.410550][   T29] audit: type=1400 audit(1733876541.955:623): avc:  denied  { write } for  pid=7994 comm="syz.4.493" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  197.694470][ T8020] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  198.888699][   T29] audit: type=1400 audit(1733876544.525:624): avc:  denied  { read } for  pid=8046 comm="syz.5.503" path="socket:[19520]" dev="sockfs" ino=19520 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  199.021459][ T8049] x_tables: ip_tables: osf match: only valid for protocol 6
[  199.022657][   T29] audit: type=1400 audit(1733876544.705:625): avc:  denied  { setopt } for  pid=8048 comm="syz.5.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  200.020471][   T29] audit: type=1400 audit(1733876545.015:626): avc:  denied  { connect } for  pid=8054 comm="syz.2.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  200.130403][   T29] audit: type=1400 audit(1733876545.105:627): avc:  denied  { read } for  pid=8054 comm="syz.2.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  200.460575][    T8] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  200.530530][    T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  200.655291][    T8] usb 3-1: Using ep0 maxpacket: 16
[  200.697878][    T8] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  200.723847][    T8] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  200.755046][    T8] usb 3-1: Product: syz
[  200.763892][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  200.781087][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  200.795878][    T8] usb 3-1: Manufacturer: syz
[  200.810577][    T9] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  200.822911][    T8] usb 3-1: SerialNumber: syz
[  200.828414][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.839726][    T9] usb 6-1: config 0 descriptor??
[  200.853457][    T8] usb 3-1: config 0 descriptor??
[  201.000619][ T5866] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  201.078126][ T8069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  201.097047][ T8069] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  201.117039][ T8069] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8069 comm=syz.2.509
[  201.160479][ T5866] usb 2-1: Using ep0 maxpacket: 16
[  201.167362][ T5866] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  201.177348][ T5866] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  201.200072][ T5866] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  201.218537][ T8125] netlink: 'syz.2.509': attribute type 1 has an invalid length.
[  201.227592][ T5866] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  201.245373][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.263749][ T5866] usb 2-1: Product: syz
[  201.270711][ T5866] usb 2-1: Manufacturer: syz
[  201.285072][    T9] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x1
[  201.292296][    T9] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x3
[  201.300188][    T9] pyra 0003:1E7D:2CF6.0010: item fetching failed at offset 3/7
[  201.308971][ T8125] 8021q: adding VLAN 0 to HW filter on device bond1
[  201.316036][ T5866] usb 2-1: SerialNumber: syz
[  201.322015][    T9] pyra 0003:1E7D:2CF6.0010: parse failed
[  201.322243][ T8069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  201.332268][    T9] pyra 0003:1E7D:2CF6.0010: probe with driver pyra failed with error -22
[  201.344909][    T8] usb 4-1: new full-speed USB device number 29 using dummy_hcd
[  201.398177][ T8069] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  201.416581][ T8130] bond1: (slave ip6gretap1): making interface the new active one
[  201.428504][ T8069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  201.445053][ T8130] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  201.458822][ T8069] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  201.473915][ T8130] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  201.486410][ T8130] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  201.504100][ T8112] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  201.506407][    T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  201.527790][    T8] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f
[  201.538276][   T51] usb 3-1: USB disconnect, device number 34
[  201.539711][   T29] audit: type=1326 audit(1733876547.225:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8080 comm="syz.1.511" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9b7657ff19 code=0x0
[  201.551305][   T25] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  201.568171][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.589084][    T8] usb 4-1: Product: syz
[  201.601150][    T8] usb 4-1: Manufacturer: syz
[  201.630544][  T866] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  201.636848][    T8] usb 4-1: SerialNumber: syz
[  201.665881][    T8] usb 4-1: config 0 descriptor??
[  201.701020][ T8113] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  201.783956][  T866] usb 5-1: device descriptor read/64, error -71
[  201.948894][ T8157] Bluetooth: MGMT ver 1.23
[  202.050818][  T866] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  202.054001][ T8159] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=8159 comm=syz.3.517
[  202.222912][  T866] usb 5-1: device descriptor read/64, error -71
[  202.321978][   T51] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  202.374052][  T866] usb usb5-port1: attempt power cycle
[  202.493353][   T51] usb 4-1: USB disconnect, device number 29
[  202.541846][ T8113] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  202.730549][  T866] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  202.732284][ T3893] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  202.750845][  T866] usb 5-1: device descriptor read/8, error -71
[  202.752838][ T3893] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  203.010457][  T866] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  203.051802][  T866] usb 5-1: device descriptor read/8, error -71
[  203.171832][  T866] usb usb5-port1: unable to enumerate USB device
[  203.304171][  T972] usb 6-1: USB disconnect, device number 5
[  203.442591][ T5866] usb 2-1: 0:2 : does not exist
[  203.460661][   T29] audit: type=1400 audit(1733876549.145:629): avc:  denied  { name_connect } for  pid=8206 comm="syz.5.522" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1
[  203.511847][ T5866] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1)
[  203.634136][ T5866] usb 2-1: USB disconnect, device number 23
[  203.704506][ T8113] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  203.861958][ T5953] udevd[5953]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  203.982955][    T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  204.154929][    T9] usb 6-1: Using ep0 maxpacket: 16
[  204.172111][    T9] usb 6-1: config 1 has an invalid interface number: 153 but max is 0
[  204.180286][    T9] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  204.196553][    T9] usb 6-1: config 1 has no interface number 0
[  204.226164][    T9] usb 6-1: config 1 interface 153 altsetting 7 endpoint 0xF has invalid wMaxPacketSize 0
[  204.254073][    T9] usb 6-1: config 1 interface 153 altsetting 7 endpoint 0x3 has invalid wMaxPacketSize 0
[  204.299202][    T9] usb 6-1: config 1 interface 153 altsetting 7 has an invalid descriptor for endpoint zero, skipping
[  204.317287][    T9] usb 6-1: config 1 interface 153 altsetting 7 bulk endpoint 0x9 has invalid maxpacket 16
[  204.330109][    T9] usb 6-1: config 1 interface 153 altsetting 7 has an invalid descriptor for endpoint zero, skipping
[  204.342801][    T9] usb 6-1: config 1 interface 153 altsetting 7 has an invalid descriptor for endpoint zero, skipping
[  204.354952][    T9] usb 6-1: config 1 interface 153 has no altsetting 0
[  204.363827][    T9] usb 6-1: New USB device found, idVendor=105b, idProduct=6a59, bcdDevice=e9.80
[  204.373024][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.394083][    T9] usb 6-1: Product: syz
[  204.398662][    T9] usb 6-1: Manufacturer: Ṇ
[  204.407151][    T9] usb 6-1: SerialNumber: syz
[  204.542045][   T29] audit: type=1400 audit(1733876550.125:630): avc:  denied  { listen } for  pid=8228 comm="syz.3.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  204.563318][   T29] audit: type=1400 audit(1733876550.125:631): avc:  denied  { read } for  pid=8228 comm="syz.3.527" path="socket:[19796]" dev="sockfs" ino=19796 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  204.593518][ T8213] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  204.827576][  T866] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  205.045878][    T9] usb 6-1: USB disconnect, device number 6
[  205.483300][ T8235] ptm ptm0: ldisc open failed (-12), clearing slot 0
[  205.733978][   T29] audit: type=1400 audit(1733876551.415:632): avc:  denied  { name_bind } for  pid=8239 comm="syz.2.530" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  206.304183][   T29] audit: type=1400 audit(1733876551.985:633): avc:  denied  { bind } for  pid=8246 comm="syz.1.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  206.339131][ T8250] lo speed is unknown, defaulting to 1000
[  206.340434][   T29] audit: type=1400 audit(1733876552.015:634): avc:  denied  { getopt } for  pid=8249 comm="syz.5.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  206.368222][ T8250] lo speed is unknown, defaulting to 1000
[  206.374131][  T866] usb 5-1: device descriptor read/64, error -71
[  206.426508][ T8253] »»»»»»: renamed from lo (while UP)
[  206.444978][ T8251] netlink: 20 bytes leftover after parsing attributes in process `syz.2.534'.
[  206.460249][   T29] audit: type=1400 audit(1733876552.125:635): avc:  denied  { mounton } for  pid=8248 comm="syz.2.534" path="/101/file0" dev="ramfs" ino=19182 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[  206.584312][ T8254] netlink: 'syz.5.533': attribute type 2 has an invalid length.
[  206.711328][ T8250] »»»»»» speed is unknown, defaulting to 1000
[  206.800945][    C0] ip6_tnl_xmit_ctl: 3 callbacks suppressed
[  206.800966][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  207.007176][    T9] »»»»»» speed is unknown, defaulting to 1000
[  207.017037][ T8250] infiniband s
z1: set active
[  207.025370][ T8250] infiniband s
z1: added »»»»»»
[  207.089657][ T8250] RDS/IB: s
z1: added
[  207.095451][ T8250] smc: adding ib device s
z1 with port count 1
[  207.106333][ T8250] smc:    ib device s
z1 port 1 has pnetid 
[  207.115797][    T9] »»»»»» speed is unknown, defaulting to 1000
[  207.133443][ T8250] »»»»»» speed is unknown, defaulting to 1000
[  207.263080][ T5822] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  207.288418][   T29] audit: type=1400 audit(1733876552.945:636): avc:  denied  { unmount } for  pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  207.309810][   T29] audit: type=1400 audit(1733876552.955:637): avc:  denied  { read } for  pid=8228 comm="syz.3.527" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  207.333241][   T29] audit: type=1400 audit(1733876552.955:638): avc:  denied  { open } for  pid=8228 comm="syz.3.527" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  207.356975][   T29] audit: type=1400 audit(1733876552.955:639): avc:  denied  { ioctl } for  pid=8228 comm="syz.3.527" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  207.434265][ T8250] »»»»»» speed is unknown, defaulting to 1000
[  207.509710][ T8109] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  207.536310][ T8250] »»»»»» speed is unknown, defaulting to 1000
[  207.578844][  T866] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  207.637810][ T8250] »»»»»» speed is unknown, defaulting to 1000
[  207.740955][ T8250] »»»»»» speed is unknown, defaulting to 1000
[  207.897400][ T8266] netlink: 12 bytes leftover after parsing attributes in process `syz.1.539'.
[  207.915282][ T8269] netlink: zone id is out of range
[  207.924349][ T8269] netlink: zone id is out of range
[  207.929535][ T8269] netlink: zone id is out of range
[  208.007142][ T8270] netlink: 'syz.2.537': attribute type 11 has an invalid length.
[  208.042314][ T8269] netlink: zone id is out of range
[  208.047858][ T8269] netlink: zone id is out of range
[  208.201014][  T866] usb 5-1: device descriptor read/64, error -71
[  208.301077][ T8233] syz.3.527 (8233) used greatest stack depth: 20576 bytes left
[  208.837573][  T866] usb usb5-port1: attempt power cycle
[  209.340482][  T972] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  209.494029][  T866] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  209.603720][ T8106] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  210.017573][  T866] usb 5-1: Using ep0 maxpacket: 8
[  210.026219][  T866] usb 5-1: config index 0 descriptor too short (expected 5924, got 36)
[  210.064874][  T866] usb 5-1: config 250 has an invalid interface number: 228 but max is -1
[  210.082611][  T972] usb 6-1: Using ep0 maxpacket: 8
[  210.103344][  T972] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  210.120442][  T972] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  210.150813][  T866] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0
[  210.160114][  T972] usb 6-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00
[  210.160248][  T866] usb 5-1: config 250 has no interface number 0
[  210.179870][  T866] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  210.191733][  T866] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  210.202240][  T866] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 30768, setting to 1024
[  210.216569][  T866] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024
[  210.229411][  T866] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  210.231761][  T972] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.243071][  T866] usb 5-1: config 250 interface 228 has no altsetting 0
[  210.244376][  T866] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  210.278001][  T866] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  210.288612][  T866] usb 5-1: Product: syz
[  210.294819][  T866] usb 5-1: SerialNumber: syz
[  210.305262][   T29] kauditd_printk_skb: 6 callbacks suppressed
[  210.305276][   T29] audit: type=1400 audit(1733876555.985:646): avc:  denied  { ioctl } for  pid=8284 comm="syz.3.544" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  210.341940][  T972] usb 6-1: config 0 descriptor??
[  210.355355][  T866] hub 5-1:250.228: bad descriptor, ignoring hub
[  210.361874][  T866] hub 5-1:250.228: probe with driver hub failed with error -5
[  210.436856][ T8292] netdevsim netdevsim3: Direct firmware load for — failed with error -2
[  210.455328][ T8292] netdevsim netdevsim3: Falling back to sysfs fallback for: —
[  210.523310][ T8294] netlink: 28 bytes leftover after parsing attributes in process `syz.2.548'.
[  210.550645][ T8294] netlink: 88 bytes leftover after parsing attributes in process `syz.2.548'.
[  210.561874][  T866] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 41 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  210.786803][   T29] audit: type=1400 audit(1733876556.465:647): avc:  denied  { bind } for  pid=8312 comm="syz.1.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  210.789041][  T972] lenovo 0003:17EF:6062.0011: item fetching failed at offset 0/5
[  210.822426][  T972] lenovo 0003:17EF:6062.0011: hid_parse failed
[  210.828834][  T972] lenovo 0003:17EF:6062.0011: probe with driver lenovo failed with error -22
[  210.890683][ T5866] usb 5-1: USB disconnect, device number 41
[  210.903068][ T5866] usblp0: removed
[  211.037974][  T972] usb 6-1: USB disconnect, device number 7
[  211.143153][ T8324] netlink: 'syz.2.552': attribute type 11 has an invalid length.
[  211.162081][   T29] audit: type=1326 audit(1733876556.835:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8317 comm="syz.2.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a0077ff19 code=0x7ffc0000
[  211.191512][ T8109] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  211.332118][  T866] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  211.388481][   T29] audit: type=1326 audit(1733876556.835:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8317 comm="syz.2.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a0077ff19 code=0x7ffc0000
[  211.571344][  T866] usb 2-1: device descriptor read/64, error -71
[  211.594528][   T29] audit: type=1326 audit(1733876556.835:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8317 comm="syz.2.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a0077ff19 code=0x7ffc0000
[  211.637099][ T8329] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  211.645357][   T29] audit: type=1326 audit(1733876556.835:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8317 comm="syz.2.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a0077ff19 code=0x7ffc0000
[  211.676635][ T8329] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  211.697232][   T29] audit: type=1326 audit(1733876556.835:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8317 comm="syz.2.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a0077ff19 code=0x7ffc0000
[  211.833157][  T866] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  211.947489][   T29] audit: type=1400 audit(1733876557.615:653): avc:  denied  { bind } for  pid=8330 comm="syz.5.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  211.970892][  T866] usb 2-1: device descriptor read/64, error -71
[  212.063272][   T29] audit: type=1400 audit(1733876557.615:654): avc:  denied  { name_bind } for  pid=8330 comm="syz.5.557" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1
[  212.091362][  T866] usb usb2-port1: attempt power cycle
[  212.092120][   T29] audit: type=1400 audit(1733876557.615:655): avc:  denied  { node_bind } for  pid=8330 comm="syz.5.557" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1
[  212.246151][  T972] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  212.431578][ T8112] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  212.442692][  T972] usb 3-1: Using ep0 maxpacket: 16
[  212.449507][  T972] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  212.459952][  T972] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  212.482588][  T972] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  212.496669][  T972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.505153][  T972] usb 3-1: Product: syz
[  212.509434][  T972] usb 3-1: Manufacturer: syz
[  212.519299][  T972] usb 3-1: SerialNumber: syz
[  212.533693][  T972] usb 3-1: config 0 descriptor??
[  212.548284][  T972] appledisplay 3-1:0.0: Could not find int-in endpoint
[  212.557573][  T972] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  212.590754][  T866] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  212.765749][   T25] usb 5-1: new low-speed USB device number 42 using dummy_hcd
[  212.791291][  T866] usb 2-1: device descriptor read/8, error -71
[  213.090906][   T25] usb 5-1: Invalid ep0 maxpacket: 64
[  213.102122][ T8337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  213.110927][ T8337] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  213.124004][   T51] usb 3-1: USB disconnect, device number 35
[  213.160493][  T866] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  213.182827][  T866] usb 2-1: device descriptor read/8, error -71
[  213.296926][   T25] usb 5-1: new low-speed USB device number 43 using dummy_hcd
[  213.305283][  T866] usb usb2-port1: unable to enumerate USB device
[  213.407524][ T8366] FAULT_INJECTION: forcing a failure.
[  213.407524][ T8366] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  213.420814][ T8366] CPU: 1 UID: 0 PID: 8366 Comm: syz.3.570 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0
[  213.431424][ T8366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  213.441494][ T8366] Call Trace:
[  213.444767][ T8366]  <TASK>
[  213.447689][ T8366]  dump_stack_lvl+0x16c/0x1f0
[  213.452361][ T8366]  should_fail_ex+0x497/0x5b0
[  213.457034][ T8366]  _copy_to_user+0x32/0xd0
[  213.461450][ T8366]  wext_handle_ioctl+0x276/0x2b0
[  213.466398][ T8366]  ? __pfx_wext_handle_ioctl+0x10/0x10
[  213.471863][ T8366]  ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460
[  213.478363][ T8366]  ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460
[  213.484878][ T8366]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  213.491736][ T8366]  sock_ioctl+0x3a6/0x6c0
[  213.496068][ T8366]  ? __pfx_sock_ioctl+0x10/0x10
[  213.500925][ T8366]  ? selinux_file_ioctl+0x180/0x270
[  213.506125][ T8366]  ? selinux_file_ioctl+0xb4/0x270
[  213.511244][ T8366]  ? __pfx_sock_ioctl+0x10/0x10
[  213.516099][ T8366]  __x64_sys_ioctl+0x190/0x200
[  213.520872][ T8366]  do_syscall_64+0xcd/0x250
[  213.525378][ T8366]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.531276][ T8366] RIP: 0033:0x7fa19c17ff19
[  213.535693][ T8366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  213.555306][ T8366] RSP: 002b:00007fa19cf9d058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  213.563721][ T8366] RAX: ffffffffffffffda RBX: 00007fa19c345fa0 RCX: 00007fa19c17ff19
[  213.571687][ T8366] RDX: 0000000020000440 RSI: 0000000000008b07 RDI: 0000000000000004
[  213.579652][ T8366] RBP: 00007fa19cf9d0a0 R08: 0000000000000000 R09: 0000000000000000
[  213.587614][ T8366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  213.595581][ T8366] R13: 0000000000000000 R14: 00007fa19c345fa0 R15: 00007ffe172a2138
[  213.603560][ T8366]  </TASK>
[  213.640422][   T25] usb 5-1: Invalid ep0 maxpacket: 64
[  213.645916][   T25] usb usb5-port1: attempt power cycle
[  213.709540][ T8369] netlink: 16 bytes leftover after parsing attributes in process `syz.3.571'.
[  213.740523][  T866] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  213.830583][ T8109] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  213.911887][  T866] usb 6-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid wMaxPacketSize 0
[  213.926689][  T866] usb 6-1: config 0 interface 0 has no altsetting 0
[  213.937951][  T866] usb 6-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3
[  213.947786][  T866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.956102][  T866] usb 6-1: Product: syz
[  213.961045][  T866] usb 6-1: Manufacturer: syz
[  213.965700][  T866] usb 6-1: SerialNumber: syz
[  213.976980][  T866] usb 6-1: config 0 descriptor??
[  213.984597][  T866] keyspan 6-1:0.0: Keyspan 2 port adapter converter detected
[  213.992168][   T25] usb 5-1: new low-speed USB device number 44 using dummy_hcd
[  214.002440][  T866] keyspan 6-1:0.0: unsupported endpoint type 0
[  214.009331][  T866] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 7
[  214.023916][  T866] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 81
[  214.032251][  T866] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 1
[  214.039957][   T25] usb 5-1: Invalid ep0 maxpacket: 64
[  214.082853][  T866] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 2
[  214.138187][  T866] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 85
[  214.147203][  T866] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 5
[  214.167260][  T866] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  214.289656][   T25] usb 5-1: new low-speed USB device number 45 using dummy_hcd
[  214.308857][  T866] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 83
[  214.327410][  T866] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 3
[  214.885136][  T866] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 4
[  214.893090][   T25] usb 5-1: Invalid ep0 maxpacket: 64
[  214.898849][   T25] usb usb5-port1: unable to enumerate USB device
[  214.905595][  T866] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 86
[  214.914530][  T866] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 6
[  214.935383][  T866] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  214.961396][ T3893] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  214.976557][  T866] usb 6-1: USB disconnect, device number 8
[  214.999244][  T866] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  215.110015][  T866] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  215.127383][  T866] keyspan 6-1:0.0: device disconnected
[  215.161583][ T8388] netlink: 'syz.2.576': attribute type 29 has an invalid length.
[  215.280508][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  215.451832][ T8396] netlink: 1 bytes leftover after parsing attributes in process `syz.2.578'.
[  215.491563][   T29] kauditd_printk_skb: 12 callbacks suppressed
[  215.491578][   T29] audit: type=1400 audit(1733876561.175:668): avc:  denied  { bind } for  pid=8394 comm="syz.4.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  215.579565][   T29] audit: type=1400 audit(1733876561.255:669): avc:  denied  { map } for  pid=8397 comm="syz.5.581" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  215.688713][   T29] audit: type=1400 audit(1733876561.255:670): avc:  denied  { execute } for  pid=8397 comm="syz.5.581" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  215.920631][  T866] usb 3-1: new full-speed USB device number 36 using dummy_hcd
[  216.144348][ T8106] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  216.178157][  T866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  216.192662][  T866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  216.340688][    T9] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  216.345819][  T866] usb 3-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00
[  216.357629][  T866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.369040][  T866] usb 3-1: config 0 descriptor??
[  216.399311][ T8413] netlink: 'syz.4.585': attribute type 1 has an invalid length.
[  216.447100][ T8413] bond3: (slave veth3): Enslaving as a backup interface with a down link
[  216.468019][ T8413] bond3: (slave veth5): Enslaving as a backup interface with a down link
[  216.498757][ T8413] kvm: emulating exchange as write
[  216.510483][    T9] usb 2-1: Using ep0 maxpacket: 16
[  216.517276][    T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDC, changing to 0x8C
[  216.529079][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 26000, setting to 1024
[  216.540996][    T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024
[  216.554501][    T9] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  216.569780][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.577855][    T9] usb 2-1: Product: syz
[  216.596673][    T9] usb 2-1: Manufacturer: syz
[  216.606820][    T9] usb 2-1: SerialNumber: syz
[  216.613416][    T9] usb 2-1: config 0 descriptor??
[  216.794106][  T866] usbhid 3-1:0.0: can't add hid device: -71
[  216.812053][  T866] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  216.927382][  T866] usb 3-1: USB disconnect, device number 36
[  216.986631][ T8428] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  217.210177][   T29] audit: type=1400 audit(1733876562.875:671): avc:  denied  { write } for  pid=8427 comm="syz.5.589" path="socket:[20713]" dev="sockfs" ino=20713 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  217.236387][   T29] audit: type=1400 audit(1733876562.875:672): avc:  denied  { setopt } for  pid=8427 comm="syz.5.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  217.423678][ T8109] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  217.933785][ T8439] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad)
[  217.941177][ T8439] PKCS7: Only support pkcs7_signedData type
[  218.123862][ T5822] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  218.279962][   T29] audit: type=1400 audit(1733876563.955:673): avc:  denied  { create } for  pid=8441 comm="syz.4.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  218.330614][ T5822] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[  218.347753][ T5822] usb 4-1: Dual-Role OTG device on HNP port
[  218.357362][ T5822] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=7a.b1
[  218.370118][ T5822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.383803][ T5822] usb 4-1: Product: syz
[  218.388001][ T5822] usb 4-1: Manufacturer: syz
[  218.414173][   T29] audit: type=1400 audit(1733876564.095:674): avc:  denied  { getopt } for  pid=8441 comm="syz.4.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  218.441408][ T5822] usb 4-1: SerialNumber: syz
[  218.458881][ T5866] usb 2-1: USB disconnect, device number 28
[  218.464356][ T5822] usb 4-1: config 0 descriptor??
[  218.470083][   T29] audit: type=1400 audit(1733876564.115:675): avc:  denied  { accept } for  pid=8441 comm="syz.4.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  218.497943][ T5822] usb_ehset_test 4-1:0.0: probe with driver usb_ehset_test failed with error -32
[  218.850677][    T9] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  218.870946][ T8113] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  218.942640][ T5822] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  219.032720][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  219.069156][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  219.137578][    T9] usb 3-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00
[  219.148060][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  219.167062][    T9] usb 3-1: config 0 descriptor??
[  219.213197][ T5822] usb 5-1: Using ep0 maxpacket: 16
[  219.239931][ T5822] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  219.339097][ T5822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  219.450102][ T5822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  219.541396][ T5822] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  219.645610][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  219.664944][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  219.679944][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  219.694965][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  219.712534][ T5822] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  219.738458][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  219.765602][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  219.804535][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  219.833635][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  219.864928][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  219.894979][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  220.026459][ T8113] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  220.040494][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  220.042802][ T5822] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  220.056738][ T5822] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  220.064878][ T5822] usb 5-1: Manufacturer: syz
[  220.065007][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  220.076975][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  220.303363][ T8468] sctp: [Deprecated]: syz.1.598 (pid 8468) Use of int in maxseg socket option.
[  220.303363][ T8468] Use struct sctp_assoc_value instead
[  220.630370][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  220.637556][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  220.644805][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  220.651958][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  220.659068][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  220.666202][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  220.673337][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  220.680477][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  220.687584][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  220.694711][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  220.701853][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  220.708983][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  220.716135][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  220.723298][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  220.730509][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  220.737886][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  220.745268][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  220.753204][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  220.760370][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  220.767481][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  220.774716][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  220.783694][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  220.785465][ T5822] usb 5-1: config 0 descriptor??
[  220.790912][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  220.803544][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  220.810804][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  220.817942][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  220.825153][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  220.832325][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  220.840141][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  220.847346][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  220.854549][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  220.861743][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  220.869048][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  220.876214][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  220.883580][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  220.890780][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  220.898165][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  220.905369][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  220.912893][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  220.920025][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  220.927252][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  220.934419][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  220.942201][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  220.949319][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  220.956570][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  220.963819][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  220.970969][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  220.978078][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  220.985323][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  220.992492][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  220.999603][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.006855][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.014041][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.021277][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.028394][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.035513][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.043138][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.050250][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.058382][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.065644][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.072807][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.079919][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.087174][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.094333][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.101555][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.108674][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.115840][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.123130][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.130263][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.137530][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.145154][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.152295][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.159485][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.166840][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.173977][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.181173][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.188591][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.195795][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.203078][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.210203][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.217418][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.224591][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.231773][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.238912][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.246673][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.253888][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.261116][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.268324][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.275480][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.282721][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.289892][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.299956][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.307174][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.314410][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.324061][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.332025][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.339792][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.349152][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.357018][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.360113][   T25] usb 4-1: USB disconnect, device number 31
[  221.366948][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.366977][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.390411][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.398073][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.405356][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.412545][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.419675][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.428188][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.435654][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.443231][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.450893][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x1
[  221.459499][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.466864][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.476961][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.484853][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.492245][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x4
[  221.499829][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.507260][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.517461][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.524737][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.531924][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.539082][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.546610][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.557481][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.564724][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.574117][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.580490][   T51] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  221.581369][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.596049][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.603511][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.612336][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.620064][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.627587][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.635105][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.640545][ T5822] rc_core: IR keymap rc-hauppauge not found
[  221.642293][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.648120][ T5822] Registered IR keymap rc-empty
[  221.655659][    T9] logitech 0003:046D:CA04.0012: unknown main item tag 0x0
[  221.667737][    T9] logitech 0003:046D:CA04.0012: unexpected long global item
[  221.675919][    T9] logitech 0003:046D:CA04.0012: parse failed
[  221.682026][ T5822] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  221.689542][    T9] logitech 0003:046D:CA04.0012: probe with driver logitech failed with error -22
[  221.708635][ T5822] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  221.714566][    T9] usb 3-1: USB disconnect, device number 37
[  221.761177][ T5822] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  221.784955][ T8480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.602'.
[  221.791884][ T5822] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input14
[  221.801744][ T8480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.602'.
[  221.855198][ T8480] netlink: 36 bytes leftover after parsing attributes in process `syz.1.602'.
[  221.942739][ T8480] block nbd0: Unsupported socket: shutdown callout must be supported.
[  222.039937][ T5822] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  222.521508][ T5822] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  222.562374][ T5822] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  222.590460][ T5822] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  222.611661][ T6346] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  222.677283][ T5822] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  222.702933][ T5822] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  222.732509][ T5822] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  222.753913][ T5822] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  222.811699][ T5822] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  222.857537][ T5822] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  222.891279][ T5822] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  222.908863][ T5822] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  222.939788][ T5822] usb 5-1: USB disconnect, device number 46
[  223.170610][   T51] usb 2-1: device descriptor read/64, error -71
[  223.279773][ T8512] netlink: 12 bytes leftover after parsing attributes in process `syz.3.609'.
[  223.323697][ T8512] sp0: Synchronizing with TNC
[  223.560440][   T51] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  223.570537][    T8] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  223.590526][    T9] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  223.700503][ T5822] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  223.712754][   T51] usb 2-1: unable to read config index 0 descriptor/start: -61
[  223.720659][   T51] usb 2-1: can't read configurations, error -61
[  223.727655][   T51] usb usb2-port1: attempt power cycle
[  223.744175][    T8] usb 3-1: Using ep0 maxpacket: 8
[  223.751714][    T8] usb 3-1: unable to get BOS descriptor or descriptor too short
[  223.761647][ T8105] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  223.774427][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  223.789775][    T9] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  223.803309][    T8] usb 3-1: config 12 has an invalid interface number: 17 but max is 0
[  223.816579][    T8] usb 3-1: config 12 has no interface number 0
[  223.822836][    T9] usb 5-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00
[  223.832548][    T8] usb 3-1: config 12 interface 17 has no altsetting 0
[  223.844323][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.850513][ T5822] usb 4-1: Using ep0 maxpacket: 8
[  223.859387][    T8] usb 3-1: New USB device found, idVendor=0582, idProduct=0044, bcdDevice=74.a2
[  223.860055][ T5822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  223.868808][    T9] usb 5-1: config 0 descriptor??
[  223.890389][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.891385][ T5822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  223.898391][    T8] usb 3-1: Product: syz
[  223.898418][    T8] usb 3-1: Manufacturer: syz
[  223.898434][    T8] usb 3-1: SerialNumber: syz
[  223.924806][    T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  223.927366][ T5822] usb 4-1: New USB device found, idVendor=09da, idProduct=0006, bcdDevice= 0.00
[  223.941914][ T5822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.957610][ T5822] usb 4-1: config 0 descriptor??
[  224.070473][   T51] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  224.113047][   T51] usb 2-1: unable to read config index 0 descriptor/start: -61
[  224.121104][   T51] usb 2-1: can't read configurations, error -61
[  224.146421][ T8514] netlink: 'syz.2.610': attribute type 10 has an invalid length.
[  224.154367][ T8514] netlink: 144 bytes leftover after parsing attributes in process `syz.2.610'.
[  224.192364][    T8] usb 3-1: USB disconnect, device number 38
[  224.250525][   T51] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  224.279042][   T51] usb 2-1: unable to read config index 0 descriptor/start: -61
[  224.286805][   T51] usb 2-1: can't read configurations, error -61
[  224.293660][   T51] usb usb2-port1: unable to enumerate USB device
[  224.700536][ T5822] usbhid 4-1:0.0: can't add hid device: -71
[  224.707024][ T5822] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  224.717592][ T5822] usb 4-1: USB disconnect, device number 32
[  225.110949][ T8109] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  225.707426][ T8533] netlink: 76 bytes leftover after parsing attributes in process `syz.5.614'.
[  225.719921][ T8533] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8533 comm=syz.5.614
[  225.736099][   T29] audit: type=1400 audit(1733876571.415:676): avc:  denied  { read } for  pid=8532 comm="syz.5.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  226.120573][   T25] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  226.280503][   T25] usb 4-1: Using ep0 maxpacket: 16
[  226.300567][   T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  226.318011][   T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  226.359856][   T25] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  226.360735][ T8547] xt_TCPMSS: Only works on TCP SYN packets
[  226.389389][   T25] usb 4-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0
[  226.400643][ T8109] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  226.419712][   T25] usb 4-1: Product: syz
[  226.429814][   T25] usb 4-1: Manufacturer: syz
[  226.438197][ T5822] usb 5-1: USB disconnect, device number 47
[  226.447356][   T25] usb 4-1: config 0 descriptor??
[  226.560084][   T29] audit: type=1400 audit(1733876572.235:677): avc:  denied  { create } for  pid=8548 comm="syz.2.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  226.624110][   T29] audit: type=1400 audit(1733876572.235:678): avc:  denied  { write } for  pid=8548 comm="syz.2.620" path="socket:[20913]" dev="sockfs" ino=20913 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  226.896480][   T25] kovaplus 0003:1E7D:2D50.0013: unknown main item tag 0x0
[  226.904552][   T25] kovaplus 0003:1E7D:2D50.0013: unknown main item tag 0x0
[  226.911955][   T25] kovaplus 0003:1E7D:2D50.0013: unknown main item tag 0x0
[  226.921766][   T25] kovaplus 0003:1E7D:2D50.0013: unknown main item tag 0x0
[  226.929132][   T29] audit: type=1400 audit(1733876572.605:679): avc:  denied  { getopt } for  pid=8559 comm="syz.2.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  226.950466][   T25] kovaplus 0003:1E7D:2D50.0013: unknown main item tag 0x0
[  226.960793][   T25] kovaplus 0003:1E7D:2D50.0013: unknown main item tag 0x0
[  226.968197][   T25] kovaplus 0003:1E7D:2D50.0013: unknown main item tag 0x0
[  227.013487][   T25] kovaplus 0003:1E7D:2D50.0013: hidraw0: USB HID v0.07 Device [syz syz] on usb-dummy_hcd.3-1/input0
[  227.050553][    T8] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  227.150693][   T25] kovaplus 0003:1E7D:2D50.0013: couldn't init struct kovaplus_device
[  227.158827][   T25] kovaplus 0003:1E7D:2D50.0013: couldn't install mouse
[  227.202956][   T25] kovaplus 0003:1E7D:2D50.0013: probe with driver kovaplus failed with error -71
[  227.297754][   T25] usb 4-1: USB disconnect, device number 33
[  227.310543][    T8] usb 6-1: Using ep0 maxpacket: 8
[  227.324015][    T8] usb 6-1: New USB device found, idVendor=047d, idProduct=5403, bcdDevice=2f.8c
[  227.475365][    T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  227.501966][    T8] usb 6-1: Product: syz
[  227.506166][    T8] usb 6-1: Manufacturer: syz
[  227.520774][    T8] usb 6-1: SerialNumber: syz
[  227.561202][    T8] usb 6-1: config 0 descriptor??
[  227.606061][   T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  228.290531][  T972] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  228.451867][  T972] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  228.471058][  T972] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  228.490186][ T8550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  228.490395][  T972] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  228.498927][ T8550] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  228.528033][  T972] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  228.539212][    T8] usb 3-1: new full-speed USB device number 39 using dummy_hcd
[  228.557005][  T972] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  228.578613][   T29] audit: type=1400 audit(1733876574.255:680): avc:  denied  { ioctl } for  pid=8580 comm="syz.1.625" path="socket:[21525]" dev="sockfs" ino=21525 ioctlcmd=0x941d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  228.579752][  T972] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  228.632811][  T972] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  228.650383][  T972] usb 4-1: Product: syz
[  228.660404][  T972] usb 4-1: Manufacturer: syz
[  228.671391][  T972] cdc_wdm 4-1:1.0: skipping garbage
[  228.680412][  T972] cdc_wdm 4-1:1.0: skipping garbage
[  228.691777][    T8] usb 3-1: not running at top speed; connect to a high speed hub
[  228.701014][    T8] usb 3-1: config 3 has an invalid interface number: 250 but max is 0
[  228.709201][    T8] usb 3-1: config 3 has no interface number 0
[  228.720896][  T972] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  228.730392][  T972] cdc_wdm 4-1:1.0: Unknown control protocol
[  228.736324][    T8] usb 3-1: config 3 interface 250 has no altsetting 0
[  228.754857][    T8] usb 3-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=18.b9
[  228.764029][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  228.772086][    T8] usb 3-1: Product: syz
[  228.776252][    T8] usb 3-1: Manufacturer: syz
[  228.780919][    T8] usb 3-1: SerialNumber: syz
[  228.893233][ T8105] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  228.980510][   T51] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  228.997751][    T8] comedi comedi0: This driver needs USB 2.0 to operate. Aborting...
[  229.005974][    T8] usbduxfast 3-1:3.250: driver 'usbduxfast' failed to auto-configure device.
[  229.028580][    T8] usb 3-1: USB disconnect, device number 39
[  229.064376][ T8591] netlink: 12 bytes leftover after parsing attributes in process `syz.4.632'.
[  229.080322][ T8591] sp0: Synchronizing with TNC
[  229.130491][   T51] usb 2-1: Using ep0 maxpacket: 32
[  229.137243][   T51] usb 2-1: config 0 has an invalid interface number: 111 but max is 1
[  229.146651][   T51] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  229.156743][   T51] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  229.165691][   T51] usb 2-1: config 0 has no interface number 0
[  229.173699][   T51] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83
[  229.182849][   T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.190873][   T51] usb 2-1: Product: syz
[  229.195034][   T51] usb 2-1: Manufacturer: syz
[  229.199605][   T51] usb 2-1: SerialNumber: syz
[  229.205644][   T51] usb 2-1: config 0 descriptor??
[  229.266350][ T8592] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6)
[  229.273056][ T8592] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  229.285061][ T8592] vhci_hcd vhci_hcd.0: Device attached
[  229.292207][ T8592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  229.300835][ T8592] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  229.313847][ T8592] xt_socket: unknown flags 0x50
[  229.319164][ T8593] usbip_core: unknown command
[  229.324155][ T8593] vhci_hcd: unknown pdu 3791650816
[  229.329364][ T8593] usbip_core: unknown command
[  229.339253][ T8106] vhci_hcd: stop threads
[  229.344821][ T8106] vhci_hcd: release socket
[  229.349253][ T8106] vhci_hcd: disconnect device
[  229.370423][ T5866] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  229.417750][   T51] snd-usb-6fire 2-1:0.111: unable to receive device firmware state.
[  229.425913][   T51] snd-usb-6fire 2-1:0.111: probe with driver snd-usb-6fire failed with error -71
[  229.436728][   T51] usb 2-1: USB disconnect, device number 33
[  229.540558][ T5866] usb 5-1: Using ep0 maxpacket: 8
[  229.552098][ T5866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  229.579923][ T5866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  229.583436][ T5822] usb 6-1: USB disconnect, device number 9
[  229.599912][ T5866] usb 5-1: New USB device found, idVendor=09da, idProduct=0006, bcdDevice= 0.00
[  229.615433][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  229.626492][ T5866] usb 5-1: config 0 descriptor??
[  229.799028][ T8599] overlayfs: missing 'lowerdir'
[  229.870560][  T972] usb 3-1: new full-speed USB device number 40 using dummy_hcd
[  229.965066][   T29] audit: type=1400 audit(1733876575.645:681): avc:  denied  { append } for  pid=8602 comm="syz.1.635" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  230.021300][   T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  230.023015][  T972] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  230.039558][  T972] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  230.051567][  T972] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  230.066364][  T972] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  230.075751][  T972] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  230.081079][ T8605] netlink: 'syz.1.636': attribute type 7 has an invalid length.
[  230.083860][  T972] usb 3-1: Manufacturer: syz
[  230.099606][  T972] usb 3-1: config 0 descriptor??
[  230.297856][ T5866] usbhid 5-1:0.0: can't add hid device: -71
[  230.303990][ T5866] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  230.318269][ T5866] usb 5-1: USB disconnect, device number 48
[  230.332612][ T8596] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  230.346343][  T972] usb 3-1: USB disconnect, device number 40
[  230.420465][   T25] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  230.574280][   T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  230.585500][   T25] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  230.601021][   T25] usb 2-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00
[  230.610076][   T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.619898][   T25] usb 2-1: config 0 descriptor??
[  230.629530][   T25] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  230.817330][  T972] usb 4-1: USB disconnect, device number 34
[  231.141678][ T8105] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  231.220449][ T5822] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  231.373554][ T5822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  231.389982][ T5822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  231.406060][ T5822] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  231.415500][ T5822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.450026][ T5822] usb 5-1: config 0 descriptor??
[  231.460485][   T51] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  231.470454][  T972] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  231.748451][  T972] usb 4-1: Using ep0 maxpacket: 32
[  231.967576][  T972] usb 4-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=82.d5
[  232.104668][  T972] usb 4-1: New USB device strings: Mfr=1, Product=233, SerialNumber=3
[  232.113387][  T972] usb 4-1: Product: syz
[  232.117627][  T972] usb 4-1: Manufacturer: syz
[  232.122362][  T972] usb 4-1: SerialNumber: syz
[  232.161373][   T51] usb 3-1: Using ep0 maxpacket: 8
[  232.175156][   T51] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[  232.185863][   T51] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.206789][   T51] usb 3-1: Product: syz
[  232.221645][   T51] usb 3-1: Manufacturer: syz
[  232.236689][   T51] usb 3-1: SerialNumber: syz
[  232.258590][   T51] usb 3-1: config 0 descriptor??
[  232.279696][   T51] gspca_main: sonixj-2.14.0 probing 0c45:613e
[  232.305803][  T972] usb 4-1: config 0 descriptor??
[  232.312503][  T972] hub 4-1:0.0: bad descriptor, ignoring hub
[  232.318520][  T972] hub 4-1:0.0: probe with driver hub failed with error -5
[  232.327397][  T972] gspca_main: vc032x-2.14.0 probing 0ac8:c301
[  232.341813][ T8106] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  232.518496][ T5822] keytouch 0003:0926:3333.0014: fixing up Keytouch IEC report descriptor
[  232.570469][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  232.697362][ T5822] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0014/input/input15
[  232.837442][  T972] gspca_vc032x: reg_w err -71
[  232.842301][  T972] gspca_vc032x: I2c Bus Busy Wait 00
[  232.847655][  T972] gspca_vc032x: I2c Bus Busy Wait 00
[  232.853082][  T972] gspca_vc032x: I2c Bus Busy Wait 00
[  232.858444][  T972] gspca_vc032x: I2c Bus Busy Wait 00
[  232.863814][  T972] gspca_vc032x: I2c Bus Busy Wait 00
[  232.869169][  T972] gspca_vc032x: I2c Bus Busy Wait 00
[  232.874576][  T972] gspca_vc032x: I2c Bus Busy Wait 00
[  232.879928][  T972] gspca_vc032x: I2c Bus Busy Wait 00
[  232.885309][  T972] gspca_vc032x: I2c Bus Busy Wait 00
[  232.890764][  T972] gspca_vc032x: I2c Bus Busy Wait 00
[  232.896116][  T972] gspca_vc032x: I2c Bus Busy Wait 00
[  232.901463][  T972] gspca_vc032x: I2c Bus Busy Wait 00
[  232.906806][  T972] gspca_vc032x: I2c Bus Busy Wait 00
[  232.913703][  T972] gspca_vc032x: I2c Bus Busy Wait 00
[  232.919606][  T972] gspca_vc032x: I2c Bus Busy Wait 00
[  232.925044][  T972] gspca_vc032x: I2c Bus Busy Wait 00
[  232.930451][  T972] gspca_vc032x: I2c Bus Busy Wait 00
[  232.935792][  T972] gspca_vc032x: I2c Bus Busy Wait 00
[  232.941267][  T972] gspca_vc032x: I2c Bus Busy Wait 00
[  232.946731][  T972] gspca_vc032x: Unknown sensor...
[  232.951983][  T972] vc032x 4-1:0.0: probe with driver vc032x failed with error -22
[  232.977415][ T5822] keytouch 0003:0926:3333.0014: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[  232.990301][   T29] audit: type=1400 audit(1733876578.675:682): avc:  denied  { append } for  pid=8631 comm="syz.2.647" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  232.992080][  T972] usb 4-1: USB disconnect, device number 35
[  233.269014][   T25] usb 2-1: USB disconnect, device number 34
[  233.379626][ T8632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  233.392928][ T8632] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  233.461849][  T972] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  233.477143][   T29] audit: type=1400 audit(1733876579.155:683): avc:  denied  { mount } for  pid=8652 comm="syz.1.651" name="/" dev="autofs" ino=21143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  233.520628][   T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  233.590169][   T29] audit: type=1400 audit(1733876579.265:684): avc:  denied  { unmount } for  pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  233.630975][  T972] usb 4-1: Using ep0 maxpacket: 16
[  233.660720][  T972] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  233.671861][  T972] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  233.686703][  T972] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  233.700503][  T972] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  233.701344][ T8658] netlink: 12 bytes leftover after parsing attributes in process `syz.1.652'.
[  233.719896][  T972] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  233.747445][ T8658] sp0: Synchronizing with TNC
[  233.772536][  T972] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  233.789293][  T972] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  233.806900][  T972] usb 4-1: Manufacturer: syz
[  233.813313][    T8] usb 3-1: USB disconnect, device number 41
[  233.823564][  T972] usb 4-1: config 0 descriptor??
[  234.045209][   T29] audit: type=1400 audit(1733876579.725:685): avc:  denied  { read } for  pid=8649 comm="syz.3.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  234.073998][   T25] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  234.690406][   T25] usb 2-1: Using ep0 maxpacket: 8
[  234.696933][   T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  234.708626][   T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  234.718614][   T25] usb 2-1: New USB device found, idVendor=09da, idProduct=0006, bcdDevice= 0.00
[  234.727992][   T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  234.741881][   T25] usb 2-1: config 0 descriptor??
[  234.831035][    T8] usb 3-1: new full-speed USB device number 42 using dummy_hcd
[  234.891884][ T8675] netlink: 16 bytes leftover after parsing attributes in process `syz.4.656'.
[  234.908904][ T5908] usb 5-1: USB disconnect, device number 49
[  235.183561][   T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  235.318186][    T8] usb 3-1: config 1 has an invalid interface number: 243 but max is 0
[  235.326908][    T8] usb 3-1: config 1 has no interface number 0
[  235.333133][    T8] usb 3-1: config 1 interface 243 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  235.354185][    T8] usb 3-1: config 1 interface 243 altsetting 2 endpoint 0x5 has invalid maxpacket 1024, setting to 64
[  235.366072][    T8] usb 3-1: config 1 interface 243 has no altsetting 0
[  235.384295][    T8] usb 3-1: New USB device found, idVendor=0403, idProduct=e006, bcdDevice=ae.17
[  235.405604][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  235.413758][    T8] usb 3-1: Product: syz
[  235.418775][    T8] usb 3-1: Manufacturer: syz
[  235.423821][    T8] usb 3-1: SerialNumber: syz
[  235.436277][ T8669] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  235.444249][ T8669] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  235.458207][    T8] ftdi_sio 3-1:1.243: FTDI USB Serial Device converter detected
[  235.469446][    T8] ftdi_sio ttyUSB0: unknown device type: 0xae17
[  235.669964][   T25] usbhid 2-1:0.0: can't add hid device: -71
[  235.676126][   T25] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  235.684105][   T29] audit: type=1400 audit(1733876581.365:686): avc:  denied  { create } for  pid=8668 comm="syz.2.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  235.752222][   T51] usb 3-1: USB disconnect, device number 42
[  235.759220][   T51] ftdi_sio 3-1:1.243: device disconnected
[  235.797005][   T29] audit: type=1400 audit(1733876581.365:687): avc:  denied  { ioctl } for  pid=8668 comm="syz.2.655" path="socket:[21176]" dev="sockfs" ino=21176 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  235.797334][   T25] usb 2-1: USB disconnect, device number 35
[  236.302022][   T29] audit: type=1400 audit(1733876581.975:688): avc:  denied  { mount } for  pid=8694 comm="syz.3.661" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  236.545212][ T8698] netlink: 'syz.4.659': attribute type 11 has an invalid length.
[  237.088556][   T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  237.128145][   T29] audit: type=1326 audit(1733876582.235:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8689 comm="syz.4.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f634fb7ff19 code=0x7ffc0000
[  237.244433][   T29] audit: type=1326 audit(1733876582.235:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8689 comm="syz.4.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f634fb7ff19 code=0x7ffc0000
[  237.270472][  T972] rc_core: IR keymap rc-hauppauge not found
[  237.276882][  T972] Registered IR keymap rc-empty
[  237.282943][  T972] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  237.331599][   T29] audit: type=1326 audit(1733876582.235:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8689 comm="syz.4.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f634fb7ff19 code=0x7ffc0000
[  237.336227][ T8706] netlink: 260 bytes leftover after parsing attributes in process `syz.2.662'.
[  237.369848][  T972] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  237.470889][  T972] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  237.904236][  T972] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input16
[  237.976792][  T972] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  238.000526][  T972] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  238.007952][ T8709] binder: 8707:8709 ioctl c0306201 0 returned -14
[  238.020571][  T972] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  238.050478][  T972] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  238.176379][ T5824] Bluetooth: hci3: unexpected event for opcode 0x080e
[  238.189212][   T29] kauditd_printk_skb: 7 callbacks suppressed
[  238.189222][   T29] audit: type=1400 audit(1733876583.865:699): avc:  denied  { write } for  pid=8712 comm="syz.4.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  238.230455][  T972] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  238.327273][ T8727] netlink: 'syz.5.666': attribute type 21 has an invalid length.
[  238.335463][ T8727] netlink: 156 bytes leftover after parsing attributes in process `syz.5.666'.
[  238.430024][  T972] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  238.481365][  T972] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  238.501848][  T972] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  238.522596][  T972] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  238.541327][  T972] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  238.891345][  T972] mceusb 4-1:0.0: Registered  with mce emulator interface version 1
[  238.908728][  T972] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  238.926740][  T972] usb 4-1: USB disconnect, device number 36
[  238.956287][ T8738] netlink: 12 bytes leftover after parsing attributes in process `syz.4.670'.
[  238.971316][ T8109] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  238.983853][ T8740] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8740 comm=syz.2.669
[  238.987970][ T8738] sp0: Synchronizing with TNC
[  239.001272][   T51] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  239.175940][ T8746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.672'.
[  239.184879][   T51] usb 2-1: Using ep0 maxpacket: 8
[  239.192259][   T51] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  239.204321][ T8746] netlink: 120 bytes leftover after parsing attributes in process `syz.2.672'.
[  239.213770][   T51] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  239.228221][   T51] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  239.238004][   T51] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  239.248027][   T51] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  239.261154][   T51] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  239.270227][   T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.289268][ T8747] overlayfs: failed to resolve './file0': -2
[  239.340589][    T8] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  239.496334][   T51] usb 2-1: GET_CAPABILITIES returned 0
[  239.502100][   T51] usbtmc 2-1:16.0: can't read capabilities
[  239.510525][    T8] usb 5-1: Using ep0 maxpacket: 8
[  239.516935][    T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  239.528191][    T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  239.538036][    T8] usb 5-1: New USB device found, idVendor=09da, idProduct=0006, bcdDevice= 0.00
[  239.547298][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.557069][    T8] usb 5-1: config 0 descriptor??
[  239.988877][ T8754] overlayfs: failed to resolve './file1': -2
[  240.101794][ T6346] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  240.264992][    T8] usbhid 5-1:0.0: can't add hid device: -71
[  240.277419][    T8] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  240.292600][    T8] usb 5-1: USB disconnect, device number 50
[  241.090062][ T8770] tmpfs: Unknown parameter 'ÿÿ'
[  241.161502][   T29] audit: type=1400 audit(241.139:700): avc:  denied  { mounton } for  pid=8769 comm="syz.4.678" path="/137/file1" dev="autofs" ino=21459 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1
[  241.511376][ T8778] netlink: 'syz.5.680': attribute type 11 has an invalid length.
[  242.143311][ T8113] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  242.264682][ T5824] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  242.273454][ T5824] Bluetooth: hci3: Injecting HCI hardware error event
[  242.283129][ T5824] Bluetooth: hci3: hardware error 0x00
[  242.326969][   T29] audit: type=1326 audit(241.629:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8774 comm="syz.5.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e54f7ff19 code=0x7ffc0000
[  242.440712][   T29] audit: type=1326 audit(241.629:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8774 comm="syz.5.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e54f7ff19 code=0x7ffc0000
[  242.463474][ T5822] usb 4-1: new full-speed USB device number 37 using dummy_hcd
[  242.471291][ T8781] netlink: 536 bytes leftover after parsing attributes in process `syz.5.681'.
[  242.472728][   T51] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  242.480541][   T29] audit: type=1326 audit(241.879:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8774 comm="syz.5.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e54f7ff19 code=0x7ffc0000
[  242.482089][ T8781] netlink: 8 bytes leftover after parsing attributes in process `syz.5.681'.
[  242.489428][   T29] audit: type=1326 audit(241.879:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8774 comm="syz.5.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e54f7ff19 code=0x7ffc0000
[  242.544001][   T29] audit: type=1326 audit(241.879:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8774 comm="syz.5.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e54f7ff19 code=0x7ffc0000
[  242.547334][    T8] usb 2-1: USB disconnect, device number 36
[  242.771239][   T29] audit: type=1400 audit(242.739:706): avc:  denied  { connect } for  pid=8785 comm="syz.1.683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  243.005055][   T51] usb 3-1: Using ep0 maxpacket: 16
[  243.019843][   T51] usb 3-1: config 0 has an invalid interface number: 0 but max is -1
[  243.040667][   T51] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0
[  243.062244][ T5822] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  243.090220][ T5822] usb 4-1: config 0 has no interfaces?
[  243.121680][   T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  243.147430][ T5822] usb 4-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00
[  243.200469][ T5822] usb 4-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0
[  243.223988][   T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  243.270849][   T29] audit: type=1400 audit(243.259:707): avc:  denied  { ioctl } for  pid=8785 comm="syz.1.683" path="socket:[21493]" dev="sockfs" ino=21493 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  243.300823][ T5822] usb 4-1: Manufacturer: syz
[  243.306921][ T8786] 
[  243.309257][ T8786] ======================================================
[  243.316267][ T8786] WARNING: possible circular locking dependency detected
[  243.323280][ T8786] 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 Not tainted
[  243.330385][ T8786] ------------------------------------------------------
[  243.337396][ T8786] syz.1.683/8786 is trying to acquire lock:
[  243.343281][ T8786] ffffffff8feda988 (rtnl_mutex){+.+.}-{4:4}, at: do_ipv6_setsockopt+0x214f/0x45f0
[  243.352520][ T8786] 
[  243.352520][ T8786] but task is already holding lock:
[  243.359877][ T8786] ffff8880294c8aa8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x101/0xa00
[  243.369998][ T8786] 
[  243.369998][ T8786] which lock already depends on the new lock.
[  243.369998][ T8786] 
[  243.380404][ T8786] 
[  243.380404][ T8786] the existing dependency chain (in reverse order) is:
[  243.389417][ T8786] 
[  243.389417][ T8786] -> #2 (&smc->clcsock_release_lock){+.+.}-{4:4}:
[  243.398029][ T8786]        __mutex_lock+0x19b/0xa60
[  243.403068][ T8786]        smc_switch_to_fallback+0x2d/0xa00
[  243.408887][ T8786]        smc_sendmsg+0x13d/0x520
[  243.413839][ T8786]        __sys_sendto+0x488/0x4f0
[  243.417964][ T8794] overlayfs: missing 'lowerdir'
[  243.418861][ T8786]        __x64_sys_sendto+0xe0/0x1c0
[  243.429002][ T8786]        do_syscall_64+0xcd/0x250
[  243.434032][ T8786]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.440452][ T8786] 
[  243.440452][ T8786] -> #1 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  243.448196][ T8786]        lock_sock_nested+0x3a/0xf0
[  243.453402][ T8786]        sockopt_lock_sock+0x54/0x70
[  243.458692][ T8786]        do_ipv6_setsockopt+0x2157/0x45f0
[  243.464413][ T8786]        ipv6_setsockopt+0xcb/0x170
[  243.469612][ T8786]        udpv6_setsockopt+0x7d/0xd0
[  243.474815][ T8786]        do_sock_setsockopt+0x222/0x480
[  243.480358][ T8786]        __sys_setsockopt+0x1a0/0x230
[  243.485736][ T8786]        __x64_sys_setsockopt+0xbd/0x160
[  243.490655][   T29] audit: type=1400 audit(243.449:708): avc:  denied  { create } for  pid=8793 comm="syz.5.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  243.491362][ T8786]        do_syscall_64+0xcd/0x250
[  243.515001][ T8786]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.521403][ T8786] 
[  243.521403][ T8786] -> #0 (rtnl_mutex){+.+.}-{4:4}:
[  243.528607][ T8786]        __lock_acquire+0x249e/0x3c40
[  243.533955][ T8786]        lock_acquire.part.0+0x11b/0x380
[  243.539558][ T8786]        __mutex_lock+0x19b/0xa60
[  243.544559][ T8786]        do_ipv6_setsockopt+0x214f/0x45f0
[  243.550250][ T8786]        ipv6_setsockopt+0xcb/0x170
[  243.555421][ T8786]        tcp_setsockopt+0xa4/0x100
[  243.560517][ T8786]        smc_setsockopt+0x1b4/0xa00
[  243.565705][ T8786]        do_sock_setsockopt+0x222/0x480
[  243.571226][ T8786]        __sys_setsockopt+0x1a0/0x230
[  243.576575][ T8786]        __x64_sys_setsockopt+0xbd/0x160
[  243.582183][ T8786]        do_syscall_64+0xcd/0x250
[  243.587183][ T8786]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.593570][ T8786] 
[  243.593570][ T8786] other info that might help us debug this:
[  243.593570][ T8786] 
[  243.603766][ T8786] Chain exists of:
[  243.603766][ T8786]   rtnl_mutex --> sk_lock-AF_INET6 --> &smc->clcsock_release_lock
[  243.603766][ T8786] 
[  243.617374][ T8786]  Possible unsafe locking scenario:
[  243.617374][ T8786] 
[  243.624798][ T8786]        CPU0                    CPU1
[  243.630134][ T8786]        ----                    ----
[  243.635472][ T8786]   lock(&smc->clcsock_release_lock);
[  243.640825][ T8786]                                lock(sk_lock-AF_INET6);
[  243.647822][ T8786]                                lock(&smc->clcsock_release_lock);
[  243.655690][ T8786]   lock(rtnl_mutex);
[  243.659661][ T8786] 
[  243.659661][ T8786]  *** DEADLOCK ***
[  243.659661][ T8786] 
[  243.667798][ T8786] 1 lock held by syz.1.683/8786:
[  243.672811][ T8786]  #0: ffff8880294c8aa8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x101/0xa00
[  243.683369][ T8786] 
[  243.683369][ T8786] stack backtrace:
[  243.689232][ T8786] CPU: 1 UID: 0 PID: 8786 Comm: syz.1.683 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0
[  243.699797][ T8786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  243.709845][ T8786] Call Trace:
[  243.713115][ T8786]  <TASK>
[  243.716036][ T8786]  dump_stack_lvl+0x116/0x1f0
[  243.720691][ T8786]  print_circular_bug+0x419/0x5d0
[  243.725692][ T8786]  check_noncircular+0x31a/0x400
[  243.730613][ T8786]  ? __pfx_check_noncircular+0x10/0x10
[  243.736052][ T8786]  ? lockdep_lock+0xc6/0x200
[  243.740626][ T8786]  ? __pfx_lockdep_lock+0x10/0x10
[  243.745629][ T8786]  __lock_acquire+0x249e/0x3c40
[  243.750458][ T8786]  ? __pfx___lock_acquire+0x10/0x10
[  243.755633][ T8786]  lock_acquire.part.0+0x11b/0x380
[  243.760742][ T8786]  ? do_ipv6_setsockopt+0x214f/0x45f0
[  243.766100][ T8786]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  243.771720][ T8786]  ? rcu_is_watching+0x12/0xc0
[  243.776466][ T8786]  ? trace_lock_acquire+0x14e/0x1f0
[  243.781660][ T8786]  ? __pfx___lock_acquire+0x10/0x10
[  243.786860][ T8786]  ? do_ipv6_setsockopt+0x214f/0x45f0
[  243.792210][ T8786]  ? lock_acquire+0x2f/0xb0
[  243.796688][ T8786]  ? do_ipv6_setsockopt+0x214f/0x45f0
[  243.802033][ T8786]  __mutex_lock+0x19b/0xa60
[  243.806514][ T8786]  ? do_ipv6_setsockopt+0x214f/0x45f0
[  243.811863][ T8786]  ? do_ipv6_setsockopt+0x214f/0x45f0
[  243.817224][ T8786]  ? __pfx___mutex_lock+0x10/0x10
[  243.822226][ T8786]  ? __pfx_lock_release+0x10/0x10
[  243.827231][ T8786]  ? trace_lock_acquire+0x14e/0x1f0
[  243.832409][ T8786]  ? __pfx_register_lock_class+0x10/0x10
[  243.838021][ T8786]  ? __might_fault+0xe3/0x190
[  243.842682][ T8786]  ? do_ipv6_setsockopt+0x214f/0x45f0
[  243.848027][ T8786]  ? rtnl_lock+0x9/0x20
[  243.852159][ T8786]  do_ipv6_setsockopt+0x214f/0x45f0
[  243.857332][ T8786]  ? __pfx_do_ipv6_setsockopt+0x10/0x10
[  243.862851][ T8786]  ? lock_acquire.part.0+0x11b/0x380
[  243.868120][ T8786]  ? __mutex_trylock_common+0xea/0x250
[  243.873559][ T8786]  ? __pfx___mutex_trylock_common+0x10/0x10
[  243.879430][ T8786]  ? smc_setsockopt+0x101/0xa00
[  243.884259][ T8786]  ? rcu_is_watching+0x12/0xc0
[  243.889005][ T8786]  ? trace_contention_end+0xee/0x140
[  243.894266][ T8786]  ? __mutex_lock+0x1cc/0xa60
[  243.898917][ T8786]  ? avc_has_perm+0x11b/0x1c0
[  243.903573][ T8786]  ? smc_setsockopt+0x101/0xa00
[  243.908402][ T8786]  ? __pfx___mutex_lock+0x10/0x10
[  243.913404][ T8786]  ? ipv6_setsockopt+0xcb/0x170
[  243.918228][ T8786]  ipv6_setsockopt+0xcb/0x170
[  243.922887][ T8786]  tcp_setsockopt+0xa4/0x100
[  243.927461][ T8786]  smc_setsockopt+0x1b4/0xa00
[  243.932125][ T8786]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  243.937995][ T8786]  ? __pfx_smc_setsockopt+0x10/0x10
[  243.943168][ T8786]  ? selinux_socket_setsockopt+0x6a/0x80
[  243.948773][ T8786]  ? __pfx_smc_setsockopt+0x10/0x10
[  243.953947][ T8786]  do_sock_setsockopt+0x222/0x480
[  243.958943][ T8786]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  243.964463][ T8786]  ? lock_acquire+0x2f/0xb0
[  243.968954][ T8786]  __sys_setsockopt+0x1a0/0x230
[  243.973782][ T8786]  __x64_sys_setsockopt+0xbd/0x160
[  243.978875][ T8786]  ? do_syscall_64+0x91/0x250
[  243.983537][ T8786]  ? lockdep_hardirqs_on+0x7c/0x110
[  243.988719][ T8786]  do_syscall_64+0xcd/0x250
[  243.993199][ T8786]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.999108][ T8786] RIP: 0033:0x7f9b7657ff19
[  244.003514][ T8786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  244.023100][ T8786] RSP: 002b:00007f9b773c2058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  244.031487][ T8786] RAX: ffffffffffffffda RBX: 00007f9b76745fa0 RCX: 00007f9b7657ff19
[  244.039430][ T8786] RDX: 000000000000002b RSI: 0000000000000029 RDI: 000000000000000a
[  244.047375][ T8786] RBP: 00007f9b765f3cc8 R08: 0000000000000108 R09: 0000000000000000
[  244.055318][ T8786] R10: 0000000020000500 R11: 0000000000000246 R12: 0000000000000000
[  244.063262][ T8786] R13: 0000000000000000 R14: 00007f9b76745fa0 R15: 00007ffd6e0d5a08
[  244.071210][ T8786]  </TASK>
[  244.074911][   T51] usb 3-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00
[  244.074975][    T8] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  244.085424][ T5822] usb 4-1: config 0 descriptor??
[  244.097184][   T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.118567][   T51] usb 3-1: config 0 descriptor??
[  244.125942][   T29] audit: type=1400 audit(243.499:709): avc:  denied  { connect } for  pid=8793 comm="syz.5.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  244.145978][   T51] usb 3-1: can't set config #0, error -71
[  244.156633][ T5908] usb 4-1: USB disconnect, device number 37
[  244.167345][   T51] usb 3-1: USB disconnect, device number 43
[  244.231814][ T8110] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  244.241645][    T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  244.252724][    T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  244.263432][    T8] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  244.272539][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.283596][    T8] usb 5-1: config 0 descriptor??
[  244.331089][ T5824] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  245.134929][    T8] usbhid 5-1:0.0: can't add hid device: -71
[  245.142106][    T8] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  245.153020][    T8] usb 5-1: USB disconnect, device number 51
[  245.361178][ T8109] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  246.490491][ T8113] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  247.600711][ T8113] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  248.710528][ T8113] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  249.810959][ T8109] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  250.910670][ T8109] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  252.020730][ T8109] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  253.130552][ T6346] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!