last executing test programs:

19m16.804104684s ago: executing program 0 (id=619):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x20, 0x13, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008841}, 0x8000) (fail_nth: 1)

19m16.803776289s ago: executing program 0 (id=620):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002400090e22bf7000fcffff8389c1a2000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x4048957}, 0x50) (fail_nth: 1)

19m16.410219017s ago: executing program 0 (id=622):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRESDEC=r0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x449d7}, 0x0)

19m15.248195096s ago: executing program 0 (id=627):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(&(0x7f0000000340)='./file0/file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2001080, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x2881400, 0x0)

19m15.184385368s ago: executing program 0 (id=630):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018bc0d341fa55a85f11d950040ac05236cc8e44aed2544db671002e7741854bc8f9c8003000000000001090224000100feff000009210c00100122"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x0, 0xb7, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa5, 0x3, 0x1, 0x3, 0xf0, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0xf7}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x300, 0x2, 0x3, 0x80}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x303, 0x6, 0x4, 0xfb}, @mixer_unit={0x9, 0x24, 0x4, 0x4, 0xd1, "f0f12851"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x203, 0x6, 0x7e, 0xc30e, 0x6, 0x7f}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x6, 0x9, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xd6, 0x6a, 0x1, {0x7, 0x25, 0x1, 0x3, 0x3, 0x4801}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x4f, 0x9ffa, 0x2, "9607"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x0, 0x2, 0x8, 0x2, "50ba9e56db"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x6, 0x2, 0x0, {0x7, 0x25, 0x1, 0x2, 0xf3, 0xfffc}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x67, 0xe2, 0x9, 0x20, 0x6}, 0x25, &(0x7f0000000180)={0x5, 0xf, 0x25, 0x2, [@ssp_cap={0xc, 0x10, 0xa, 0x8, 0x0, 0x5, 0xf00, 0xc}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "9530e5c398472e6d43d3225c8241c72e"}]}, 0x7, [{0x55, &(0x7f00000001c0)=@string={0x55, 0x3, "dde1b923ecbd366b592c4b7803410baa903cfc67af9e787dc173c8ea86b6ada82c0a9533862d84c5d683e865cdbbb76f60b1dc8fd768a7ef96bbea5e880efbf3181539aa64be06a2784de42ed7d37d545e43de"}}, {0xbb, &(0x7f0000000240)=@string={0xbb, 0x3, "de4a2f8c01860e1601a1fb0407b65950a7c05bd2284b8f0b469550abc4122eb187253b42ff9b882bddb36ccdb814940eb8af6974a4ccd5b86cf2371726ceedd014c62d4fce3299c033ff8bc60d39bcbcabba3128a872cbcfa3b1ae18072d9a9cd842d60d9b87492603899ca7136eac270219a42166bb4795f0c5b406c020d1aa112b36b0e6e5905179c23e46ccf50418a153f6bcb75a36b90d3c5bd7e605ba2e3a3efdd794b3354a038a027eec1be952f6f0be6009088067fe"}}, {0xc4, &(0x7f0000000300)=@string={0xc4, 0x3, "9178ac37475f334dbcb6769574578de935585d6d0363bbd553bb02dafa875bd77cf136dc9cc29ae076b1984f72b128c54aa964af59df1656bffe582b33887ea1ac284d845f11704472122b01b8549057a77ebf737b984a62022c28abb54a95f898353e8a7817332e6ab510b33bfe7da2924bca9c926c43a179c3a451bb39a91da4dfffe63ed2782163b010f1292574e53fdcf619bf6f90fdc8690f931f8cca72827c1765a6ab76ac8da41319561beb33c4a14268c1f25b3ff834ae5b285d7f928ada"}}, {0xe2, &(0x7f0000000400)=@string={0xe2, 0x3, "640c013347a096ce4b5930c85f120d7116df83f0ef86fad743ccc106439f3c8f80b4ec1291cd715fc338d15a2d1fbf2dccb49c2a75a483aa38575830120e7977a3f827eb914bf89b917484634df9a747fa8b30b56154278b9c88b4993570a33ff2a165c7297db3fc3a9af020cb0c81863328a51edb23950dab0612d8b548998806329cdf114e2045b40c055498fd63537bee034f276967f209d468f2875e024ff70b2f36bede3c7719be6eb926ef46d3ea9ecb66ec43126725912907b5fa1b7b3e9492d9ddfb1ff8b0bf1d2de31416a5f675c2f3eff6f83d73991d2626a6c1f6"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0xc0c}}, {0x5d, &(0x7f0000000540)=@string={0x5d, 0x3, "3c7337cff605b8d43963c41a2e19e54cc77eabc08ee36bd6e71b29e17114a14389c68ca8e8dc1c78f46a5fc665bb1b6ef7f5aee1400ad613837cb6943394ff787c386c48ae5b50589dc0a9d49ff95f1013313aba4676f2b726c71d"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x480a}}]})

19m14.73538441s ago: executing program 0 (id=635):
r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x4200, 0x0)
ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
sendmsg$nl_route(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x40, 0x10, 0x401, 0x0, 0xfffffffc, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r5}]}]}, 0x40}}, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x48, r9, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x24, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1}, {}, @broadcast, @device_a, @random="37e6fc966e04", {0x0, 0x7}}, 0x4c00, 0x5d, @default, @val, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x1, 0x0]}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
socket(0x2d, 0x2, 0x0)

19m13.660481497s ago: executing program 32 (id=635):
r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x4200, 0x0)
ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
sendmsg$nl_route(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x40, 0x10, 0x401, 0x0, 0xfffffffc, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r5}]}]}, 0x40}}, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x48, r9, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x24, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1}, {}, @broadcast, @device_a, @random="37e6fc966e04", {0x0, 0x7}}, 0x4c00, 0x5d, @default, @val, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x1, 0x0]}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
socket(0x2d, 0x2, 0x0)

17m32.513603731s ago: executing program 5 (id=1124):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x1, 0x2}, {}]}]}, {0x0, [0x61, 0x61]}}, &(0x7f00000003c0)=""/232, 0x38, 0xe8, 0x3}, 0x28)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000200)='ubifs\x00', 0x1a0c099, 0x0)
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x0, 0x9, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0x3}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0x8, '\x00', 0xb4}, {0x0, 0x7, 0x54, '\x00', 0xff}, {0x75, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x5, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0x9, 0x3, 0x8, '\x00', 0x6}, {0xf, 0x3, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x1}, {0x4, 0xc, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x4, 0x12, '\x00', 0x10}, {0x1, 0x3, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
close(0x3)
syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000ae000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r5}, 0x90)
statx(0xffffffffffffffff, 0x0, 0x48e0cdf8471afff4, 0x54663aafb2d54055, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load default user:t0000000000000004096 '], 0x31, 0xfffffffffffffffc)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
syncfs(0xffffffffffffffff)
readahead(r0, 0x2a91, 0x7ff)
preadv2(r0, &(0x7f0000000000), 0x0, 0x0, 0x20000000, 0x1f)

17m27.892672936s ago: executing program 5 (id=1147):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000006040)={&(0x7f00000001c0)={0x10, 0x140f, 0x1, 0x70bd27, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x20000010}, 0xc4000) (fail_nth: 1)

17m27.155780028s ago: executing program 5 (id=1151):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x4800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802)
ioctl$EVIOCSABS0(r2, 0x401845c0, 0x0)
syz_emit_ethernet(0x6a, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa008100000086dd60f53a0400303a00fe8000000000000000000000000000bb0802000000000000000000000000000102009078000005006050835900000000fc010000000000000000000000000002200100"/106], 0x0)
ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000000)={0x2198, &(0x7f0000000040)})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x100}, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r3 = fsopen(&(0x7f0000000380)='gadgetfs\x00', 0x0)
fsmount(r3, 0x0, 0xf)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0xffffffffffffff6c, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000)
socket$alg(0x26, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8)
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0)
preadv2(r7, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/100, 0x64}], 0x3, 0x2b, 0x0, 0x0)
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x3, 0x7, 0x4000000008000e53, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x2, 0xfff, 0xc2, 0x800000068], 0x2000, 0x80cd4})

17m26.323644513s ago: executing program 5 (id=1156):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000900)={0x1, 0x7ff, 0x401, 0x4080, <r0=>0xffffffffffffffff})
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000940)=@o_path={&(0x7f00000008c0)='./file0/../file0\x00', 0x0, 0x4000, r0}, 0x18)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xd, 0x11, r1, 0x0)
ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000280)=0x40000000)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x181097, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x410000, 0x0)
r3 = open(&(0x7f0000000240)='./file0\x00', 0x40, 0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
unshare(0x400)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10)
bpf$ITER_CREATE(0x21, &(0x7f0000006200)={r5}, 0x8)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3, {0x2}}, './file0\x00'})
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58)
r8 = accept4(r7, 0x0, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_GET(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000300)={0x100, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [{{0x8}, {0x4}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x109}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x4}}]}, 0x100}, 0x1, 0x0, 0x0, 0x1}, 0x100)
recvmmsg$unix(r6, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/209, 0xd1}, {&(0x7f0000000080)=""/19, 0x13}, {&(0x7f0000000340)=""/97, 0x61}, {&(0x7f0000000500)=""/19, 0x13}], 0x4}}, {{&(0x7f0000000600)=@abs, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000680)=""/126, 0x7e}, {&(0x7f0000000700)=""/173, 0xad}], 0x2, &(0x7f00000007c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}], 0x2, 0x40010060, &(0x7f0000000880)={0x77359400})
r9 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/../file0\x00', 0x2002c2, 0x0)
open_tree(r9, &(0x7f0000000300)='\x00', 0x89901)
r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000980), 0x101000, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r10, 0x3b71, &(0x7f0000000280)={0x20, 0x0, 0x0, 0x1c, 0x1c})

17m26.090859018s ago: executing program 5 (id=1159):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
ioctl$RTC_UIE_ON(r0, 0x7003)
ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0xc, 0x1, 0x20a9, 0x3, 0x2, 0x1})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
pipe(&(0x7f0000000100))
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xfff7fffffffffff5}, 0x18)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r2 = getpid()
ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
syz_open_dev$tty1(0xc, 0x4, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000804}, 0x44810)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}})
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6, 0xfe}]}, 0x10)
sendmmsg(r6, &(0x7f0000000180), 0x4000190, 0x0)

17m25.596832287s ago: executing program 5 (id=1161):
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r2=>0x0})
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4)
bind$xdp(r3, &(0x7f0000000140)={0x2c, 0x1c, r2}, 0x10)
ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@generic={0x0, 0x0, 0x6})
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4400, 0x6, @mcast1, 0x1}, 0x1c)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl(r6, 0x8b2c, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r7 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
fallocate(r7, 0x0, 0x0, 0x1001f0)
r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r8, &(0x7f0000000300)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
io_uring_setup(0x85a, &(0x7f0000000180)={0x0, 0x58b9, 0x1, 0x2, 0x383})
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0)

17m25.38872542s ago: executing program 33 (id=1161):
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r2=>0x0})
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4)
bind$xdp(r3, &(0x7f0000000140)={0x2c, 0x1c, r2}, 0x10)
ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@generic={0x0, 0x0, 0x6})
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4400, 0x6, @mcast1, 0x1}, 0x1c)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl(r6, 0x8b2c, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r7 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
fallocate(r7, 0x0, 0x0, 0x1001f0)
r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r8, &(0x7f0000000300)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
io_uring_setup(0x85a, &(0x7f0000000180)={0x0, 0x58b9, 0x1, 0x2, 0x383})
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0)

12m31.736239391s ago: executing program 6 (id=2744):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/shm\x00', 0x0, 0x0)
lseek(r0, 0x7, 0x0)

12m31.619927292s ago: executing program 6 (id=2749):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x9}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x480c0}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newqdisc={0x88, 0x24, 0xd0f, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {}, {0x8, 0x2}, {0xb}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x9, 0xe, 0xd, 0xe, 0x0, 0x6, 0x1, 0xd, 0xd, 0x0, 0x3, 0xc, 0x2, 0x1, 0x10, 0xb], 0x0, [0x6, 0x0, 0x0, 0x101, 0x0, 0x4, 0x3ff, 0x6, 0x9, 0x9, 0x5, 0x0, 0x4, 0x4, 0x3, 0x9], [0x81, 0x8001, 0x80, 0x3a8a, 0xc, 0xc546, 0x83, 0x3, 0x2, 0x5, 0xc3, 0x1, 0x0, 0x0, 0xb, 0x40]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x2000090}, 0x40000)

12m31.505366866s ago: executing program 6 (id=2751):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x7}, 0x1c)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x13, 0x8, 0x6}]}, 0x10)
connect$inet6(r0, 0x0, 0x0)
sendmmsg$inet6(r0, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="02", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1}}], 0x2, 0x404c851)

12m31.340144745s ago: executing program 6 (id=2755):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x20000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)

12m31.219982043s ago: executing program 6 (id=2757):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={<r1=>0xffffffffffffffff}, 0x2, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000780), r1, 0x0, 0x2, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @loopback, 0x40203}, r1}}, 0x30)

12m30.707878436s ago: executing program 6 (id=2771):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r2=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000280)={r2, @in={{0x2, 0x4e24, @empty}}, 0x0, 0x3}, 0x90)

12m30.51972384s ago: executing program 34 (id=2771):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r2=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000280)={r2, @in={{0x2, 0x4e24, @empty}}, 0x0, 0x3}, 0x90)

7m35.978003277s ago: executing program 3 (id=4031):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$kcm(0x11, 0x2, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
unshare(0x2c020400)
open_by_handle_at(r2, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x21, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x61, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="00000200"/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)

7m33.044889541s ago: executing program 3 (id=4037):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$DRM_IOCTL_MODE_SETGAMMA(0xffffffffffffffff, 0xc02064a5, &(0x7f00000001c0)={0x0, 0x7, &(0x7f0000000100)=[0x0, 0x1, 0x5, 0xe2df, 0x7fff, 0x81, 0xd], &(0x7f0000000140)=[0x1000, 0xe5, 0x8, 0x101], &(0x7f0000000180)=[0x6, 0x7]})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00', <r1=>0x0})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = eventfd2(0x0, 0x0)
writev(r5, 0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8100, 0x31)
fsopen(0x0, 0x1)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0x7ee}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001b00)=@newqdisc={0x98, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa], 0xfe, [0x5, 0x4, 0x2, 0x0, 0x8, 0x4000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x0)
socket$kcm(0x2d, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0)

7m32.000976408s ago: executing program 3 (id=4042):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0)
fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000a200000000000000000000000000000a5c000000060a0b16000000000000000002000008300004802c0001800b0001006e756d67656e00001c0002800800014000000014080002400000005008000340000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000500000a"], 0x84}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1d4e}}, './file0\x00'})

7m31.135799094s ago: executing program 3 (id=4043):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_BLACKHOLE={0x4}, @NHA_FDB={0x4}]}, 0x20}}, 0x0)

7m30.943186273s ago: executing program 3 (id=4045):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="180000000003000000000000000000"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400f4ff0f00010000000000000000000000000a50000000060a0b040000000000000000020000002400049d20000180080001006e6174001400028008000140000340000000030900010073797a30000000000900020073797a3200000000140002001100010000000000000000000000000a"], 0x78}}, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00010002"], 0x8)
syz_open_dev$sg(&(0x7f0000000440), 0xa, 0x241)
io_setup(0x6, &(0x7f0000000540)=<r3=>0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
io_submit(r3, 0x1, &(0x7f0000000880)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, r4, 0x0}])
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0xd0ec}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f0000000140)="32931a8e7456e873a73f6cebd8d82eb894", 0x4690}, {0x0}], 0x2)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
setresgid(0x0, 0xee01, 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8000, &(0x7f00000024c0)=ANY=[@ANYBLOB='quota'])
openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x250942, 0x1cd)
lchown(&(0x7f0000000240)='./file1\x00', 0x0, 0x0)

7m29.187939274s ago: executing program 3 (id=4049):
r0 = creat(&(0x7f0000000040)='./file1\x00', 0x1b5)
r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80)
pipe2(&(0x7f0000001440)={<r2=>0xffffffffffffffff}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}})
sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, 0x1, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x10a}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="120100000ca38f40d813110062d0010603010902120001000000000904"], 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000340)={0x2000, r4}, 0x0)
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0)
sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x665}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000}, 0x400c000)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, 0x0, 0x4c05c)
unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0)
r6 = socket(0x15, 0x80005, 0x0)
getsockopt(r6, 0x200000000114, 0x3, 0x0, &(0x7f0000000000))
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', <r8=>0x0})
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r7, @ANYRES32=r6, @ANYRES32=0x0, @ANYBLOB="081f0100505ea5364b3b6e606d86a58ac41ba7d15a472f008a05cb23ff24e25bcb535398de584e99ebcfb8290923c83dc155a7d859d71e88a43f2c1af6b4b0e280e9c8a63b8f95a8fbdae00cb705b96835dfc1f9939942281dd0a48f4d40a7a7c4bf6ab7e4f0b384d5dd0cdeef8163b1ea971dfe601379471297c0a9cfff7075e3d3af98cbdda8d00b6031a9c70d9fb4393c79b71d407e036cd069f8b8af7ac4c1ea6a7fb52cafdc200f1ba0577509c3c9e6b43b", @ANYRES32=0x0, @ANYBLOB="08060000", @ANYRES16=r8, @ANYBLOB="140002007866726d3000000000000000000000001400020076657468305f746f5f62726964676500"], 0x60}, 0x1, 0x0, 0x0, 0x48804}, 0x24004040)

7m12.639418622s ago: executing program 35 (id=4049):
r0 = creat(&(0x7f0000000040)='./file1\x00', 0x1b5)
r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80)
pipe2(&(0x7f0000001440)={<r2=>0xffffffffffffffff}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}})
sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, 0x1, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x10a}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="120100000ca38f40d813110062d0010603010902120001000000000904"], 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000340)={0x2000, r4}, 0x0)
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0)
sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x665}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000}, 0x400c000)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, 0x0, 0x4c05c)
unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0)
r6 = socket(0x15, 0x80005, 0x0)
getsockopt(r6, 0x200000000114, 0x3, 0x0, &(0x7f0000000000))
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', <r8=>0x0})
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r7, @ANYRES32=r6, @ANYRES32=0x0, @ANYBLOB="081f0100505ea5364b3b6e606d86a58ac41ba7d15a472f008a05cb23ff24e25bcb535398de584e99ebcfb8290923c83dc155a7d859d71e88a43f2c1af6b4b0e280e9c8a63b8f95a8fbdae00cb705b96835dfc1f9939942281dd0a48f4d40a7a7c4bf6ab7e4f0b384d5dd0cdeef8163b1ea971dfe601379471297c0a9cfff7075e3d3af98cbdda8d00b6031a9c70d9fb4393c79b71d407e036cd069f8b8af7ac4c1ea6a7fb52cafdc200f1ba0577509c3c9e6b43b", @ANYRES32=0x0, @ANYBLOB="08060000", @ANYRES16=r8, @ANYBLOB="140002007866726d3000000000000000000000001400020076657468305f746f5f62726964676500"], 0x60}, 0x1, 0x0, 0x0, 0x48804}, 0x24004040)

13.930029376s ago: executing program 2 (id=5261):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = epoll_create(0x203)
epoll_pwait(r0, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0xa, 0x1, &(0x7f0000000100)={[0x7fff]}, 0x8)
r1 = socket$inet(0x2, 0x80000, 0x4)
setsockopt$inet_int(r1, 0x0, 0xa, &(0x7f0000000180)=0x93, 0x4)
epoll_wait(r0, &(0x7f0000000240)=[{}, {}], 0x2, 0x5)
sendto$inet(r1, 0x0, 0xfffffe92, 0x200007fd, 0x0, 0xff86)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x1, 0x0)
fchdir(r5)
ioprio_set$pid(0x3, 0x0, 0x0)
r6 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0)
write$FUSE_CREATE_OPEN(r6, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0)
ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000240)={0x0, 0x0, 0x6, &(0x7f0000000000)={0x5, "14956544c869ef45cda7dd68fe132f1d0259da184039589d199f3db71c15666d95"}})
sendfile(r6, r6, &(0x7f0000000080)=0x2, 0x7f03)
fcntl$getflags(r0, 0x0)
ioctl$SNDCTL_DSP_GETIPTR(r5, 0x800c5011, &(0x7f0000000140))
setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000000)={{0x29, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x3, 'rr\x00', 0x2, 0x0, 0x32}, {@local, 0x4e22, 0x10000, 0x9, 0x5, 0x9}}, 0x44)

12.577887619s ago: executing program 8 (id=5262):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
r1 = socket$tipc(0x1e, 0x5, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
socket$inet_tcp(0x2, 0x1, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x20010, 0xffffffffffffffff, 0x200000)
openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0)
r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x5)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x5412, &(0x7f0000002640)={'team_slave_0\x00', @random="76f64c34b99d"})
bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10)
listen(r1, 0x0)
r5 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r5, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0)
r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r6, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffe, 0x6, 0x2, @scatter={0x0, 0x40000, 0x0}, &(0x7f0000000080)="0000501effd4", 0x0, 0x800004, 0x10030, 0x1, 0x0})
r7 = accept4(0xffffffffffffffff, &(0x7f0000000180)=@xdp, &(0x7f0000000140)=0x80, 0x80000)
connect$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x9}, 0xa)
connect$bt_rfcomm(r7, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4}, 0xa)

11.300468658s ago: executing program 1 (id=5263):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000004c0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x1, 0xfffff010}, {0x20, 0x0, 0x1, 0xdffff010}, {0x6}]}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg(r1, &(0x7f0000001580)={&(0x7f0000000240)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @multicast1}}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="4000000000000000010100000b000000b59b55473f926d1551ee3c4da0140aaf23aa02039c1681d2d6f5c4f36974d6f8e46ad023"], 0x40}, 0x24080)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = syz_open_dev$vim2m(0x0, 0x10001, 0x2)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r5=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r8, r5, 0x25, 0x0, @val=@tcx={@void, @value=r8}}, 0x1c)
syz_emit_ethernet(0xd98, &(0x7f0000000a80)=ANY=[@ANYBLOB="0180c20000030180c200000100040000e13fc0bb4b88f8d8f2beea11cb6b8b6ebfdcf57b2fb1c38df7d548308bf4b456b5117d6ca25fd1e79dbab8b0c7d55622538c2b03d6d23d1d09c4d2596e7ddf76dedb3c800722b32701188960fcdc1d0586c1fd7b7997a4c6d590a265e2cbb81d3e8b1d419f416533930e374d9a9c3eb9c0e2b5a3a32dfcc6802ce0a5c30b92d42c68526f255d998d5ec4500a88540adcfe4cf43b6c783859e4c8eb25ce200e99563f16510f4de6521463878a8567ab447d9d9d867b79dd659fd8f8f1d87bea373ca3f8439cd5c32a1af2c31acca6195fec4964f7f172d2f97141dc2aba798e6e1b4cac46b33564b4cd509920b29952735a9cf3dcbc9c58b9f6a7ffb8211a7e3b76755f3acfe8e17a6953e16f43340864cf336eb72ae116324881c312f2f43ad5ba2c26f874d05f6d3a204207f444f78264414797caea3f9148446e2ba5d9ec9d8ad8b3bf33cbddae4ca772ab84a946f97ef742acca17dd8ed0b385279bc7a02a1f3867ba2b4868b417bab78084f1d8f81262a93452986084fcfd0185933db9cbe3d5f5496c3a2ba4a7a349fc52500478369f16d404b1df9b24bddfbce72693068d8a795a2aa6b425e87a92c2af8ff09ee9a5c87d7a3e57ae19276f8c322280529b6af0f1a734d95f098aae1a67496604ae60eb728a238fde7b81125e76cd52871a21b1352a243fd629ee6c36280d4cac9f95466f6bf0dec710da118a6eb2365cfb6da7110a9d7cf0789c9386cfa37fd7613a211ec66a1df1093f81b193582cf89c7885fbc4b01977344a691f2c40d8896c9bc2234924a0489362473cb762cceea2465fc095e90c2fc99776e765eb2a3d3100442eb3b6f4938f8b452f78446591dad245638a0ff0d04cbbc5509227365f0615b3976ceed55f8a5feb437538488e0990cf4c93237ffe3fb5aec95aea5f0d580fd8cb1ba95834697afdb87932c7e35472201ef6b7d9e0b4ae1edb99042c1ac78b05f3f2cf6c8ab58ae0758d67ac2e2a07e768bedf71eabd5175092870dc4135500d941fa3fb5a8bea2f7226f91d936d01cf11d024b0eda2cb8c9bb380a950d40f5d1dad637d249e14143a5637a7a2ebb5e756bd5142f32a976596f11af6b4f999f3238be8021bc9718e6c01badabc7a597dbdf3899537e4cd594e57adb81941016f766e96a98ab911742498bbaef3d619e17658aed86d982d82fad50ad5278b96221b5ceea303d6c84f9802e427a1b2903b131694314de670fb896381a934c5498a6f45a042385210ceb745cdfcf18c2d0d2867cb5c0f7fcc67e0876dbbadcf51279a37d2b5c843ade053a24688eae50bce0c96f957a5dcdb268161c02b46da961feb36d446aa9439d5b9a3392f4c522f46303b5a8383446d0b6467665fbf90d33b39001f646de8bed60846e23bbf162a9a79ce4a48a2fdd5e682c22b72533383d5d4c2b0bfd5ab828773c1478737db4e6a87c46288659f31d7c3c946d59047b433629414005c1a992397b9726c921eea8a9b5764480ca5778bf6b568be891c66cc08e0836810b9f72bd01baa35d23af337999bae6dd37925479d32e4674d891c884d663775e848a9b7f1ac0c66d19532a82db8d8df1ba06a4f1f3c81bb88dcd3ae027e34863a8c68228ee1907a46ac4a454f1f5e187683bb2ffaf81e56688c4f50564c0813f071c7091f42545b5ef32f12bd8344027e5fb995453ecd84b9ea293981c28b8ce730220b9fc6c651061920faa9fb26a59365598a68e0da99366106c6b21f11ba0ee330b1809daff4694f6020ce5d801ea322968830f3a6ef93ceeff5b623277fb11dfb8d60b48a0fc6c653a2cc8b9c907384c95e2078ee614ec3e0415c5630ec3ef080a6642b757400972f1cf14205ffbdad8fa24b0895b3a1e22c7ea93f52bfd4f6d4e9b2f0d3fb2b8aec779d2c91710bdc4592df51c5fb09e19711e5fc19d30be78d609ed5d98652037073459fa82a9f7fad40a90ba3c15f6a89553316bbf4a88c2ed651d9173e36e15a91a28c136c6b07e6b77a3c99a9bb481bc1b3e6c9e8d188f8dfc8b5a6112c816ec5a9052576ac1df4c1df29187ce6f5164b6eac2647d846af52972a656f3649253d4f16f3d872572cab6f216ffb164fa38f3f493d5ff7a33311d035dccb25636e2e2e7d7c2139db4b1039ed595cc4bb77fa57a11248615103ea2a777b90d59f9dfc8baf7bcc5b8d447cef20e0d0e95de53fd8a1d24624ad5a83025aa73ab47d09117db7dab431acfce50ecb8b3405d3d3681d11a673e77c8498e92d4354cacb7ca64df388f5bca9dc56acde62262eaf60c03a4deb661c8e63b95426d8fdd6584c1fd547857f733cbe5129e4ab69ce0636d308599f044438a345f91b7835df49f524ad975ec7992018248bb997a05b9dae627125f424256233b6d324716be4ae7fb55c62539c61f7d09511ac1cf49b490abc2be17a0dbe55d5e56eec8fe911199d4304478b41e74296ce8f19e5ee4b09f827bb849d2e65db7abb8dff9bb6a86194f3af9d62b4e3b2d32d09ee8c455874b4c57b36916d9301e56a538e49b750f3cd357e9ba491a81be74829f8fb347afed81fbe173b62fd7e98e343b672e6e909588e3aff4665ab7e38c263dcf3de9bbb43bb308e72e897615e7c82bebff58466f4a2c69d2f4a967e04b58b8f1dd723b9c132c974733913b8363d0b36ed29ed82512c4cd6dd5febe6ec8432428726c1b79aa9750634c46ff3e3237c9f59ab01fd2328150e585db2d4dbee4d8ece1a170cc89e64ff5732be6d0aca155eb5c32b48144b8f039600006bf5120799207b4d7cc064b175355f84ef576e6aea336ef80cbd4f5bd40b198d6c967ef111adef549a6ed059bf3b34ce1618e7a8a6581cd0a69b9ab3cff008354c92f4f726a956fec42248d97986333cdb929be3b000b9c7c6395ecaa0ac3d0b87c3c4936b0a2fac663e3ce1a4e37cd8586d7e728f67327ea03b2835b2efaeb929290804b3b189368d9997d8775e3d08df8f08f840a718410ae97139adafacc4e272976adb1b84b0fb604c44d9e6909b99682f2c061ff276c0b54de14440cec75735255dec07d787d2c129cd1e1c020d4569efdeda7d3ba4cbc8176150ba65706bd8f2ee07d45e7fd566403abb8240d9366cc41c91e299e694b21592ecf414db9bc4b7a97785e3728b084f987a69b38e64254938df97f6d39a9b95ac37f4a99b43408153155401752fdfc5a9fad9505230b18f996a478d3949bf1b68b887d555e63ba4a04047b4b97e080cc0a8f4166b6803651968928d057d797eaa2d16e82b0d70a447ffa59b03d183653f44ae6a93606d31b023551c4849a942846de6cbbf6e27fc98587db33c76c8f7acd3e1558933e4b6079f6959eacb8049353b2c41f0db0d99f78585008df5cf65a7cb1a42ada94dc526b3936b777e30dee8e86a8fab82e29227283b9af14fdf74641ca63d4c603b78dcd0d2f0e0df61fc281383c8804507cdcbd2b818f6e787f9a6d33952c7cfe85bb0aefd58c473772cde690519bfdeebf8543a690652a7c67b89052607cc12d8cfee96a17266c3b7552675da55997be9578cc00658ad6d43109be0fb649c7f66bc20acc156fe9957f4d402588b242e1fff1d68845f9901e8231bbfea464260b15003560372fccec9970f56a8f481607b0aff39e4e009c5e22bf4e08c9ad7827bdb8f7a6e9da8c021de394a5e3bd729de5e435d13aab6b71a0302c0a1b4e2d856cfa3f1754d59d7117cc79cdb16a11c28dcddb1f6671d0c1359c2bb6e681c8277f049f73e4dc6c7539a065309a5ca716ee03130e33fd1b6bb1283cb6443e7190155218e5ab93b2d77152754cb606776683f2b8d59097d7a773a7487518ca80f4e000e73eaf922e059c0a6567ffd353a675337cc32ad5325bfbb05c4faa1b2270d18fe742cdfc708f4a8c0cad4ed5f013836bbf56d284527ed85744278e79a036ac73109fcaa237685a46156466cd0757155c4f40a402b65d991b0564331c191f33b9100016af34b177a1010d3c6e107175ac8883975fd051e6112790a3658a6aab3ea9630b77aa55b8f62e98a27dd1704cef1e37ce4cc8786cbd9129bb06c89b978c88aea4cf376d382bb8a95f79b1d7cf70feaa52ecb61e3d124bbb3477fa48241456f3ffce5978bbe86d8a399758d27bef0ef93411e4a2c93deb4be9d0537a21e04874d2c897bf93f7f699724b10e169aae9e419730032423e808a954944c2d70df95e743d4fdc4ac75a0c84168b5a94685947378eff246008cc1992ca682008d07ca38aa2c8404a7a37054a62495ba34413a0e1e2fa77c58c46608214e9a7a14068ee54e08a7241599f70bf82da1d1369ae922f392aa6f2b779aa80e3bb9d12204c14dcfb3a391b8fbb66f020fad894775fa075411b9c7a18036189fd9bad706f169fb9f39b55a44d7edcea3b141fd3674f1eedd25bdb5f6705d4d27a744d4247ab23a7b7d247c5acd319ec0de8b89d6e14de9844edb9aee42a6d0d8574d6e804d125ca1fd95f9f328cdaf34a8fbaf817b295048c1c8c27f9f12737b1cf169b6395e8d3c02402865dd3def96c6e496e67c173104e4a47ffc00201e79fc07ddb98b23ec9b6e4180ecc0c41f4b70bc280a21d6fc0450e8578767e409e5c4dfa6f33ec4e13a3f438c4c549567639d156331beeb0a0961e796887308b33bbf26ebdbc39bf34a4ba6bca3ad90c66f97b6daa6a2609863c97fe1989cea84b3087ca2dfaa85e345d4eb6b1681f697dd48a20c08ef376fa1f5735e967df657222a1dc588bba2dace5c0561876b542377a112f093fb5e9241c7263ace874fd468a71c092f40709b1253aa61174cb7c91e9c199a991985f366e057b62cb110635f51d1c71ad7e3b7ddcf6656aafe156db1df6ea7360886885aa61bf60c6d320308db52af9a17abe0caed1c572468293a5193"], 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@updsa={0x184, 0x1a, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@loopback}, {@in6=@dev, 0x4d2, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, {0x407}, {}, 0x40, 0x0, 0xa, 0x0, 0x3}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}, @algo_auth={0x48, 0x1, {{'blake2s-160-generic\x00'}, 0x16}}]}, 0x184}}, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f15852323460608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"})
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "966a82f2"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf8}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
r10 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$setperm(0x5, r10, 0x52b242d)
keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3})
keyctl$join(0x1, &(0x7f0000000140)={'syz', 0x3})
syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100153a42908f00a71729188110203010902240001060000000904020002ffffff0009050b0000000000000905", @ANYRES16], 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)

10.952405142s ago: executing program 8 (id=5264):
openat(0xffffffffffffff9c, 0x0, 0xa41, 0x23)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
mount$9p_tcp(0x0, 0x0, 0x0, 0x810000, &(0x7f0000000d00)={'trans=tcp,', {'port', 0x3d, 0x4e21}})
syz_clone3(&(0x7f0000000400)={0x801400, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, 0x0)
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x20048, 0x6, 0x4)
syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x18, 0xfffffffffffffffe, 0x1b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f00000083c0)="f1737118458723aa6fad9674b336ce0f0e4f9a590af9cbc892ffaeebd2c1911812584b169f9691cb3843c1544afa9da08dc0efe3e6714bb529f3285f9633156f21460f0b19504f21e4202650e68b3cd97a3824ce159744f16e07623a38f6077b995bb70ca4e6ee313fbd9937f0a8cd1043a853b5ec18a6add5500124870643635a47134d5f346d2ce498528b289030d689ee4f1933955547d7a1a02c16d1323328f83c6e39efa19b3a4e8e2acb7d446ec70955b9c122a881df65114e309ed9605225a19a07f6df3a52599aa974975a7598fd5d8977a4083422a83d795e95efd11e78201892c1a667576f54faa2b090f363c5c6c58d64e62332e935aeeebdf0a580617d12f4dd957d13d21eafc3987ae43c0bdb0571c290227757115432768af7581cfa8bd90a2f0c85aa43e6e7496a6a1d16636eb153961195e194707bfcced6b31cda93d1d82824bdcba11ce636211e6a2d8fd8b49abcf68e35d4b5b2be9e08570d89896359bbe3fd3fd8df8d37d6f34009635b6f14922e0e13938f591e5dfd3ee64a13d1010109afaba564256699f40d4af9acb29f57cafe956852787e5b1dc0c6dc61314cb51346926eb41a252a2a44066fb7c38772c55f0caff0da346821b1efe13669272b084972ca5eaa678896bbbd2194429e310ce954cf3de048ecf8843b82acb61bf7d1760cda8f0f8d781f207c0b81c655b52c41e8b2070a7ef45a8e1ac0070709f837b2b78ecb7c50332f1ed5c1f9a369548629b0f10457a7ea478168fed1f0c261921e19ac478eb8e9f703fb6096925b3bfa6d3d60bf712220ea5f5a6e9c33ecf653f40849eb4610ed32c7d3ee443aaa6aed33dc590d8133e71391dc45d560d7442ba325aa88eb81cdad58f16794832f214de3ac2aaba11e4fe94b8c2002f101e0ca72cf67de89f6beeabe2eca30841cb62bfcd70b3c973bd6bb3b1d5612fd02c03bea24e54edeb558d656e494f2f9753e241ba8cca7ab22a0c386fb13139db2b8b182f9449f98a745abca05a5ce4f0fd500584a975264eecae3decf0b81c9b0cb16a53be0f7cd101e75e6d355b6410c62ce731739f06141c1a0185dea457167f1f07acf137d854eedbb63e3d4812aaf8bd89dc405be6a55b08555bf6fc8f082a3a6dfc359669bb11c8245def27675f9f7843b5b930bdc7e8a086f2313f35739c29369c1380370021583af2620fc001a0f283d2ab738a936b56d9444e5e321d0277ec0528c1ca6fc17241f6de1b797f0f9bc83b47addff767926ca527d409eb23ba7f8269212f40b886d00affad255871275ac0640e2db57cd710798c29b09ac4074f69df4f172b95941e8caf60aacb9f84f71bfd9980c7dbdb0e3e06ef74bb4593b63f38859de8215e1cdea56832830e1c6c416889dbdf5a58492151876cf501884abfdafbdb8fde2d82dd77cbd20207ac9ab0d8e5976292ede3bc3358703f720a960e1cc53158b6c05a68815aecce32d51fc2abfedb2ed709eaa45193da955b7d44b6722af26f3ec6c437653b267218f8cfbaf013aae88a9a0bec88aa9916cca6e9115eaa299549eaa847ba5d9490c65037c1cc94281645ca39d6f2d2706f952c1e0cbf53389dc66d442553e894c7656512eb157e3c39144988c1e3ed27af98318d630fc0896e96d7d212ae80f9bdaaca8e558e6033414f5e8c86e4b2ebe4cdb077ef6f286f3c98a9545f5dcfd46739a745150ab762459cceb1d2e9f56e2f1e59c741c47c519da2a15a14b75f1266d023ce78e9e29782e6b616deeec488408fa53962bf412937bdf63b25c469c92867b145cb73a46f88fb81df683e979bfe15b65ed905b6c0eceff85c3d0b52efd411b3b512d897775b64ff301ba9cb2618595af4a40c95795f8993aa34f13684d7e56101fe2b9869df1d6ca3c4ef81c62323734c8dba6cf4bccfd9074147ecbb5f43b3e85cb064ce45af5b6086fc016413afce0d38f9a4e916e1fc08772f158d791d1ef86e58a60893962bb93b21e2e0cf01c35158718f395df1489767e94b4cb717dbe73693cd98620f1dda1351e40495e6d166a1d5b56054a97a40ee86b4b48cd751831352e9bbda8361eda2bd9fecd6df15ac7dd6c51723c7eeb58ffe63746dcae6851eef9473b9200f4681f8b14a36215fb6279a19335009c6b1068c042d0977ea75ad60ed06961ede6fc74f84f49d3fb72b251a8acff52d0a1e8ec8e9632b831cd24c62867eacb7ee36532c801e3567d7f2fda8768f98b981ddd583dc4e3424c59c6d2de874d3a7c2b4fbcc6e3b96503020ecea0728480ca04a2b90b183ddcfbe34156341df97aab3953aa9b81c3d69d9b20511e1cd850609b3f1d1e8dfa6e8bf90a927d4d3b010dca06a1b09aad8f661c56a895b15375a6a532e76486509b7c17e516c2c67b3f80d3510127252096df0fd45e0cd62d24cb7658460f674dae61e932335fddba62ee35143c1071459a8f55e42768b777237d797418b5267423bf1f0c1fc130e2b7d40a0997d26030c9f485994df68f30a910221f502f26ee500bfa54487dd6a82ae964da5b967e8eab9ffc9d4d5d0199f4f633dcd9713ec2e4484cc25dc7cd06cc3eeecf874270871854a5e96c8b424214e1202edb23ef6fe692640ece04ff9665ec050bcaa0c1ccdd96e285bae472032d9e2f889559596a357a5fb9481599013d9dc0888c33cbfa9941e9739cc342ecf9ff6f0a08d898c2df11eec9a9c994d227436156dbd07f128f1ed53ad4ea1245d43cb1191a0afd18049f86ff0f2f33a22a40e3f32a04c7b888d044f38be60e9379cff5e7cfcddd195cd465dadaaaf03123dbd3e6195d50a24a8e3479cc82f14cd92375a80594e7031789153a6f88f1f1d9df102c9247c1169159d4a724125710f6404b899e4b9dd1ad8867eed6267db02186b1583d9178845c667617b09f82203fcef74d45a7de4c04c4d131cce81aaacf12d05eb6d83facb43e102a2fae3a0985b896edb6be894c3681a594e3b3c7d543094a3fbaefc75184e1f5deb061390033d0fd6dcb0c70594b85f0b9948a4ed3f1139ba381e5a22c65a72cb061f515ebd2df85ac162266832b6665af9c04ad0e6add65a1d209bcef3f5e41c95011c31f6a4421ba939fb3c15ee9e4a8195b374dc1008c6de0fec3631b06ad559f82b4b36c2fe39cff4341a3b46b119b27a9df883eb3229f835190b3b6f7f4b7f9f7824191bf1af104a658bf2d4499c7f619bdf25aa42917599f42776933dfbdcf20db67987f11f89019985d93a93eeb6aeb8e9690c9924db1c36c34b1bd5cc6fbac54a17b98def767a5de26e64698a9778d59e50e75e3345eb7ec79db59a8f99a84603d274986e913dc4d626bd44b2fec6090f1de8fc22ebf16ef5340bb1af38b72e370e565289a6ee1de185d7f353e5b860963e998aa58044a9b1bf847233e16952342ca24f07415c0a88675b26a89782efbe22ac0af0def87aa7ed8d14fd23bdf46c2f08b0c40c4c179a282a46c0fcd50a8280c7050eb5a546c9158416e9f8c8b5e64ecf18922c73968f8dd7bbff56a3983f2502cb76fd0cb3ddbe59ddfae5e6a95d887adbd2b781b136fc5a5c19e808dc9aa84f315f5c184b9e7dd037e6db1085f922f0bbd442156b84616f033efed03c206a87c733cfc57d1202dd89dcad1787e076686b1621a8fdcc80816973771ebde777c4f7ff755b84728b51bbf652c69da3308841ee8c946ba0302f09318818c763a1d38751930d5f2debc407c7041437087322a1960795de89ddba8aaf11a082305f696be662be7653a7ed397e5dddea74932e1e6f000e2969fdfc979ef263040f3559a83a64c546c5cc585dd9a38b238819ac1ae65cc78d3e0ff7e66328503b489cb3acbc6308c13fd8477831d700650dcf909de1cf8caadb71649fb022adb5e4f7887940a076966cea00a2c21ea802455d1d6d9ce91364f69414b4d7bb30c78ffb5ed4e8f35340b53ce066e11af44ad34efa6ada894754617d0c2ab97c9e9562193bb799e42e4bad44dc445d371a1b62f358b19727f3efb868c3f73c473b000bdba882634b3ab4393c0fdcd902ef42c6f369740839dad77756c4fe2b67ee95c34d7329b77880cbd2437e2ae63385df40eb92e300632c8338688fb2be65bcfd90150c577ca23e591995a386fa59e6faa9e9dd58e250c0a0d4c81177d0e7337c3b6be151644a8ec5c71f888c21373876e673ddb8397839ab7d83111b4c9fac9a416105cef6d7bbbcc149c1a72f1a568739aeff4d43aa70ea4707cbab6dfa37a693a74a462e26693e6a6fe398711984e1d287469fcaacbaff0db800b94a450e6624f1680e3c8553bb4273b901d895aface688bc12e1350aed78df83b153c61586dbaa53f9108fd00069e593f613823284d42121cde40d7aadd98500cbab00cf593075cedfae93ebd19e0246beed22f0988886a77b49e50c71b0838819b4e1ef89eb1634b8c020856955578ebbc94bfde7c8b409576bdce4153d4146bd29b66fb639c8a2c6b2d5d04e9605e25c6fc5edad73f870128915a00ae9ab0f170e0917ce627ee1ccce3de5332c368417ca9784d6acb3adcfddf8b62f05f628ca044a0e9c18ba0b2f5b46c76787418ad81f60c6a50d7402abc68cb6458a8bd460b8cfac86d6a31ad5a00210d49234313a093bd4ac39c1c5a9562c4fc33c66f7729ae41d84273c3f71049fe380cb6615ea5cc578867fc10c4e5b041291cb3a6a1c3a28c0f839aa356875ea064ab5c057c588642b23466c4835b89d3aab81de754428b138278c5caa627e5aa3e797ea27c2da530314b65dd35bb8c1f8d265a2b71e6a1dfa7093d75b907e9d35b1be90fa7934b93cc2d8e5811f421774e6e66182483867d15ff0f47b933b8a18815a099593f443d1d2a9827a49fea6b598b76a0d1ea3aac5e9791c8ad36db3d9d936e977e819fd4beeb1dbe2ea06a9156c99f124bf7fb93d48142fdd65486ec4987284210f0d9a194f87bbad0b8277da0fc016f4393ddc6e66ba19cb8f5df4e5dfeb2e12ceba9fba5670b3fbfd3670b2f59ca3ac02214cb800082b1329f3d4f216e2c4f328b9d35b0407f4e478f93e3b6103dc71527a095fc9f7858ff32616b0e3eb8cd1893690a00a9738e78902e6c44d42816bb5bfb00aceda90b2665c21dba51b6576e66dbda31abec2fc651f2959b1afa8a36217d8c928061e6c1fe11c8d3b561eb48fb419bad1094fea3cd5897abe8142425e3f4a40086d2cee919f1227eecc8a67a5ca6aeca58112c25fa0b637f2066ac53094b3ad1248686228ddda88539afe18ea4194335e601097c4c86a358a6ccf033cca09873704f694b31a8c126ac428acfdfb7d90f5fc1d8749322c73f1d9b9314ab57d4043083a825fe162c66015a273640f1b79d26f3a3c4494fdffdf7aea4510d7d25e2cd55280ca3b2bb3df2c20cb6699a61364c3b5faf122a9f4080d0b9f0772b86f73be13244fbfc095c2a29ea490b340ae6d3dfa31468fdc5c4b6fcffd9a58e32786ada21e978b23bb568173cb74f1846c4480903a0892abf5080c12e811da8b41ca46ee43f0f4f2aa1527b582f037906f48f9025cc71403be4875b03afea87501f48b3eb86016dbc4307ed907dac26a7d8674a552a73ec9cda9cd41de8057028269022b8540ba54adcfec3e3daf83a7d853602bc41aeac6bcee06421c82f83c14c725cbb10661fe1bf41b574837f5f6cc502c8605d6ca8f7308dc4660e565dccd81fa77b0c2c35aadddfb6f5d259e874ff9d5827480f6a70b7dca12c1170ec504e2fefa0d9a087ec736c8f2c26f1e23b11008b84c976350884dd050d03b2fd6ee3784a12b336fe742768c2e0a9c918c07f73f5b2eb6b789c055d9a6d7d27d11b76876f9798f4b65ac4769729eb82a0339a84aa9af45083e19580a2d85ecb1a994747fa3ca3ddd84b2d7cd0f3ba1e5258f59bf3b573d2f3063bdf1a9080d09875a56ce890572ddd4e799d54749619f587f992d72b7bb56eb2906b1ea8eb78add294817271baec90a6ed91f34283c3e0a1d313c0e90947a04164d688fa045884ccfee71cc3ba53767f2030ccad1c09cb31d1e071008869fdcacad466db57782360f398d0b17a4f8e27e3f8333ec3b4042824ea4ccc76178fb5cb438c0aff1e93ba9986237ab426b7efa966be2fd02ab3213750396cec5f44df923f5cc3f9c68955ab606ad7b572375bb4c668d4edba8c0ccea550bea5d5fd3e92c2fcd78c019e1df0021c1bb00198df9d6084d0ad6fde6f426a2b34e1e7d4b352721be93668a88300f0acb63da70bc1d3588c5942f92d50e583a6a94ece7d18cbfe35c06ae6a54a94d6cd37b16fdc4f3065c9639cb5db7f498510fcf855f3a104769c2d19244b6ef2d4b3c0a42ef0241aa8a8d6f804bf711a9d8512fae4abe127aec074602b78fc4642f7fff959714293df2fb8fd7e5e785c8f0de835fa8e5a067b347c98a359ea7985cbf802f62540d2b764e3877e1ffcc73dedfa2567eb68c3b8151b4434dd2bb947a2a0d71c626cb38e266702399c19f09b426528609186d00e87865f53ebff94930c49d20c41032148b3df4259324f5773c1c8435e6968e9792d762a4a87642c75215cebdb80da1d48b8cf3075769dbb482a642b1a714fbc3e8c96419abf2d9e310a04d468d4471fe19f41da18a3b9838c74762d72af909fd965900b3f6811c830955ae04d42a4808edfdf8983a624be8988b8a32a0ce2adcbd2478a6ed05207b91da8f1afb0b7189c9f87b0ba58e5f29d6ea811280f86a4bc8106a2129d07b915da29f0d230d95df7a27a93b2836d973af86bd2ec5fad21ad70af8896f404e5441f6416124908f85befca958e2b537d50b047ad70a8b5acf160505c3450b37e3aafa8e6b50dd8fab7fb98df24d6b13e7930abe7785dc6433c882bbf87069a000d5ffcb99ee0b1b79cbba4902b85bde0069394b2cfd70bd887230b5866ba25e728253b17d2854d601cb7f12b2f72ac4f784298747b904b1eaa52b7edc42f0f23dec2de8ae3091bb57b6e5dc1f4bbf67ed79ef764184867877ca49907646e4f1aee642ae865ce645707ae524b974c36b719ef3b30dd8bd4677d656be027a09727daa538ba3b0aa942329b80b769de13bc32edff90c562022a3385d5ef583d59d59f53ac4f1deae3de3016c300cf62838a60bf29f76debfcd893b80c6138fd17436471a9dbae3b8f12ea110d6464153d89f54117ba0ab44d7f948909efe0fc1e28301155759e94c35e54c758551ca66b51044ca98d92963586ba2c5bc358201cf33578290459baf1a672f486aa1eff62290df694f747f9e72ceb185448ea16fe43acfe958bd810a9c33d6baa8977628163d5224aa2023b49057638fc25095a2cf3f1191ab5d6e744da451255f08add20aa6544eb3f1b69d92a3d02ceb1adf4508a8a217004a51c69af3b5ce7f33ab3c6c2dbb6a78952cdb8dd857dd99dd2fc78acd876da17b1b8a91d1f4c96e156c55bdf513ed0522c8bc7e8cfc8dd1a76977c45c636c168650d82e3ca7560ee9312c1e54a15811fffad89bc44c0210368e12bb320ba9f763a116c8ab7724190075cbba1cc1d15d4e790e95be4329c7c35b61cf6a69e32c66ac2cdea1e1c39c347c5efbb96d9237d85243880df5b696bf2235f802c2d3d7cbd6cf42d2834bf0d47c5b856eca14a166306db9e17217d1c9e22e5a748720da74050f1421cb6ade2733d934ff3f4ac06348ebd9b248dc8dfda2be1bb137d09ffb0da3500000e1820fcba98a5249c0192129d2a806371d2dcf624dd2e0962fd8920cd2176e5e292fa366ad5571d1fd440dbb0f4f1d246b44dad609aeee816cd7a0e9f2dd49476a908107f4bf1ee71ea55a8fcd75470d63a5a1066e83aa230c9b35c484142572c89d2d66d1554e3be9adab0cc94ff88637dc45de22caf4974fee6ee6305906a970bb94f9f9845a25ceb7c020e78e9f0235369309e84954604d751de90d31bf764e9065a48724ee3a62ef8296ced0170f40c9201a09b8e0f4329416868036996a35b39ce75aebf3f5525aa68b94487e53596f70b5e091dc8957cf952f319c6b02485e132dbacdae8602c185c8ecf86cc26a58dde9265c46149694a9bf7ec12627ce2e485457de508bc0b9b96e560ef2d5cd2704118aece1e4ea15b4c04449c75e91bf0dc594eeb249e5a458307fa0d8e3a2a7c1035ad8155b3aaac508574325d7dd02bb02ec4701132b8cfb558a5a30c919cb2633c733c0b0826c13cecd71c66c6c7c43831104e7f8e70e51d36727e4426dd36c726f7a07653c240f71a7bcf5b6f56b77824a50765f1fd50b3a6408a0e4334deb5c84b71bb7c739c35ac2c98358604aa2f8c7ed6d4165704dca679a2e3d47f609dd78d3885a50e9305ac50b776d0e29fa4c286e6a4906328eef1244729b8a6c41afa29ce7adecc5fbcd443fcfa27c59d54c6ffd53ade6a63893b4efdf94ca0bb974ed253781b2697da2979eea306e9ed53ce4efc9d85c7ee6ed378cc6ecce8d508e5c6a9134539c8088a138924ec6a1935f96f9a6f6864056128a35bbef306b913c100965e32459b96754a16c33c1c9eb9a385a17601badf3a0e2098bf255cab5791ead7ee1a3268aaeb59a6b225b1986dfbe297d90d9b395f676d3a8e38a2bde9165f1ab17c1890b23eac5760d62014a19c7e15bf4b939ef1ec0b4e160fbc031813138d1d336c0cefe17bd501b84b455d01ba3ae2a6d21b990c009c6e6fe1151017c721079dcab44c1de8d0cf6ca655cdb32c70f72080be5f99abd81af3954082d072d05aa277528cf4828ede3572f663b23fcc2a655bce6e35bd341f4d91f63cd95c46da122f49f45c564562e252fb03099db6f9a7134f03c82ae9e2af98ea8def5d5d40c7c62f56723d0f6fca05b64bb6a406fe38f0a1824c12f8bebae475773f163830eb61b6f97bee538044d53895bf9ce8f68b4aa12a66fb163d68cafa301f67e6ebdf4c55d627208315a20ae2f0d477f394f9b6c94e0adb86028595f3b11cca00e57b68e73da304e324a9297f17370184b80bc29b98ac4b3b918b5330494e1ed3c96af7e423651e69cce63b6c32dd8324c0d6022165958588669d6aae81d03ec64308680e087029676235341947216646af7783e7eabe9c2df6ada36d7cc453a2c3b96078d9db69064771ab0d6428d8d8c258f32bf9cc7e90d1131328bfae23fa499d02907b9acdf2bb24f8c083baaf305c31160cef6eff3a1ae243f0d29142235b073a19fc547fa0bac54f3dad14d501eea3f0b5207bb966c7168e1fb175841fe4ca98ad75c6480d208458383b771450179a4febf14779e7a021ff6d87681215041d2225caa3549f1c26551ec97e1b056bb2cebb294ff48f4ffd7812c7b77d8a38cec1be54629400736c9ecbec21b639694980ca10e1ffc2d72b633c4117ce5fb7fea75810e2c30f78ae290cd4cef094d5834932f244fdde8e299192fe1db4713ff23ead0cbe3b38ad1836d8aa646818d3de42c77676abb79f05f31d2fa63c17c3c70835269716fd0417c1440afada13ed57575165e42a7f160475c32177b6f50b2e65e20c74a27f481d5871297ae805a11bb99b9c7b373c629c3a08d84adbb6ce26e66329d83ecfa6c03710a3ff013a43dcc69ab3a72c99944f05d20e20e530a465f57ca9a309989c3a0df1d1f041af84409906e333fa685ab17b941297bdef6346e34448478ddbcaf31c0376251e0cbd186d26edf58c364eb511e30d26dc5ccd32e1252d665e645954b4c3c96cbd7cc3296f440b665a53bb57e1160a025ae725ca007945fe347f06ac64f9fcdd00c5eb01a0d1bf0cf9007742a9592c3cb5db7421d9205a13c71281990b82667510496af5bc8db8e7453ebd430be8f474644e943cc6806b7a59d060c8840a54312bf5238562a1e272d3a88857480a9328cea37de53b7bb7844ef6655171a8a1a49c76cb0e50cb7892fc081db3cbda4268402b0e092ac10cc5e39a7297b6812a3e918a2e510ed021c605357c4a2eb3d5f7a1c5f3a4559f761cae740b3f5d6afae6f9a7899791ef492733dbabaf62cca0f4eb8b4d87d015a1b126b58d5371fe4fc1c81a217a53d3b24881a7bd0de3ef94b9487a14f831697a6c9547fc9df2bff8e228caffbde702a0e7cd267be77365394e8ba2475bd6e50a54737bd713901d8d1f53718275b6f1c1bee6d5a00519ec610ff305e20d276b7413ab1527cd6072d84842218d43dd026f4ea31610faacd33ae4ff49172cb410ef4ce8b8ab5b0ef70aabaecd981506d6616b3c30fcc405c5222291e2f3cbde7383a6814b56b1641cd983bda427c6182ebfb462dd20f7e46fc55516db690abc5c8ab4caaa21548c763eaa80140a51d1a037b87c829f65b4e628665655513787346837c3094d3d8e38aeaf0a8f1d4bf6ba84a09bc47980037ee2b0dc05d6ef7a9d63eba77cf803218b4689fa8ca706236d91d8ed8852c75c4a492a77964107dd7cabf1172868f51e87ee96f38c56da92e511a7062997026f01e0dd13cc30f53a90a5aa7f696088d945557afd10e3e062ba1804bcce2c52a8a2b54b0eb7b865b9fe394f9ab0c8bd0890117f1bb01d4f331560014afaca39b16d98b4a40f536f690a69ceb2fc6bc4bd7540f760c3738770c0764a9fa3108c7119fa6492d498988e4bd496eb42dd60bd01a323e77ce4949c9d7f7da7f98dff0b90598e5e32c600e7724287c6e4762b7a4be4d69f80d125987444cff287ed2c3c80eba2f91450d0d13d1b9189dd4b24700917545c7adbb4d86aa63be04c61954821617c53877458c7ad3ed2970116ea28a4237e27a81426baf32f60f4c430c4dd63f387b50996d1c7303374725f2008498688dbb5a6e84fd8fe42b027937296a9f37e8f5be730ac7a0902bf1b1169f56c6ae7d9849c64c1e483b7d9852a19c255793a41064a97b4f5036b3eba49219e51f7647d652f310b386c47bbf758beacac9d4a5afa2fa84fb9ae82f6484698bdf8a950c07fa4cd3a720af136f52de4df29f7c3cb9aa71f4a6c7b14eac577b6a0aaff394ed5144a4f89500abb6b8b48f64c1f119628ca8a0cff11b12b92cec6ed71e3d99bafec75a30357c1e59ed6de22ffb42fe420b6ad863587c02d889de3fc24462c9a70912956a633a857c185a151e9922ca9365045ba275c10278736fdc5b221a41f207a4e8c878761a1afb7f9fa59eefa395a91b2d08344a7fa0a1518bc3a1b0d749bbf5a6772ffe8b0f612c5d4ee72eddf3007dd6f83403606ba74d101cf57a3881f78332666fea99e8394926c734f1bc3de5a8bdf5f486e5e557d2e3a4e9c0334cdad51ba2186dc58c70c117ee99a22dc14a7370e88e45d5ee35f4ddc349b333de6510a3b34ca558920e04808bed886638db09a07ca17b4709f56b6bd247f71c1dc7d888104857fd1b9f2c95f43604b48058e7a044dc3a0a46c344951865e9f2c47451abe215f12fb255d08775b0a977dab035cdfad6c2574e10a9b9c983fac90a7933d1e46acd260d0982a54151faabe6e0829b8a27bc9939a9fe65f538db514261be4e257a7d9b820143608560bb00351e67b35ffc90f288526e373453ec499ba2cb64b44c8149a81f742553d25be0689eb8f2ca48d90728e423636de06c64a5a0bbbb5da2a7c17521c09192230d3f61093d1fbd3a4d1", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x18, 0x0, 0x0, {0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

10.881287059s ago: executing program 2 (id=5265):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, 0x0, 0x0)

10.735648114s ago: executing program 2 (id=5267):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x30, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0)
read$rfkill(r0, &(0x7f0000000040), 0x8)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
sendfile(0xffffffffffffffff, r0, 0x0, 0x23b)

10.439918671s ago: executing program 2 (id=5268):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@bridge_dellink={0x2c, 0x13, 0x5, 0x40003, 0x25dfdbfb, {0x7, 0x0, 0x0, r2, 0x33e8a, 0x8}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0xa}}]}]}, 0x2c}}, 0x880)
socket$inet6_sctp(0xa, 0x801, 0x84)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
r4 = io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xe3fd, 0x80, 0x0, 0x2})
io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
writev(r3, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x7a, 0x601, 0x70bd2a, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r9 = socket(0x40000000015, 0x5, 0x0)
getsockopt(r9, 0x200000000114, 0x2710, 0x0, &(0x7f0000000000))
r10 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r10, &(0x7f0000000000)={0x27}, 0x74)
sendmmsg$unix(r10, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x41}}], 0x1, 0x40008c0)

8.919380132s ago: executing program 1 (id=5272):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000180)='tlb_flush\x00', r1, 0x0, 0x51}, 0x18)
r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f080, 0x1})
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

8.502163885s ago: executing program 4 (id=5275):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)='\a', 0x1}], 0x1, &(0x7f0000000340)=[@sndrcv={0x30, 0x84, 0x1, {0x2, 0x0, 0x41, 0x808, 0x2, 0xffffffff, 0x3, 0x7fffffff}}], 0x30}, 0x4000001) (fail_nth: 1)

8.019982305s ago: executing program 4 (id=5276):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02)
writev(r5, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1)
read(r5, &(0x7f0000001400)=""/4076, 0xfffffeea)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x19, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0xd35d0cc0f5855fca, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400000004000000120000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00M\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000e9ff00"/28], 0x48)
socket$kcm(0x11, 0x2, 0x0)

7.615146208s ago: executing program 8 (id=5277):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
statx(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x1000, 0x200, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x207a98, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00'})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40000)
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card1/oss_mixer\x00', 0x1, 0x0)
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000400)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'vlan0\x00', 0x400})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x9, 0xaaed}, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000100)=0x20082, 0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETA(r1, 0x560a, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x20, 0x2, "08000000f28f00"})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(0x0, r2)
r3 = syz_open_dev$sndpcmc(&(0x7f0000000140), 0x8000000000, 0x1)
fcntl$setstatus(r3, 0x4, 0x42400)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x8, &(0x7f0000000040)=[{0x2, 0x1, 0x40, 0x2}, {0xaecc, 0x4, 0x8, 0x3}, {0x3ff, 0xf, 0x2, 0x3}, {0x0, 0x0, 0x6, 0x3}, {0x80, 0xf, 0x2, 0x22d9afb6}, {0x1, 0x2, 0x88, 0x82}, {0x21, 0x53, 0x2, 0x80000000}, {0xe000, 0xb, 0x3}]})
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone3(&(0x7f0000000240)={0x4c000000, 0x0, 0x0, 0x0, {0x23}, 0x0, 0x0, 0x0, 0x0}, 0x58)
close_range(r4, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000540), 0xffffffffffffffff)
socket$inet6(0x10, 0x2, 0x0)

7.135029126s ago: executing program 1 (id=5278):
r0 = gettid()
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
ptrace$peekuser(0x3, r0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet6_udp(0xa, 0x2, 0x0)
r4 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r4, 0x0, 0x0)
listen(r4, 0x8)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendto(r5, &(0x7f0000000000)="f6", 0x1, 0x0, 0x0, 0x0)
sendto$inet(r5, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000001840)={0x0, 0x3}, 0x8)
unshare(0x8000000)
timer_create(0x0, 0x0, 0x0)
setns(0xffffffffffffffff, 0x24020000)
syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xf)

6.886494865s ago: executing program 4 (id=5279):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x8)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x4)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xdfffffff, 0x740844e0, 0x2, 0xffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x88}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104)
ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000280)={0x1, 0x2, 0x1000, 0x100000, 0x0, 0x0, 0x0, 0x0})
socket$packet(0x11, 0x2, 0x300)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000240)="259a53f271a76d2688f54c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180))
open_tree(r2, &(0x7f0000000300)='./file0\x00', 0x6dece19e73b82006)
r4 = syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
sched_setparam(r4, &(0x7f0000000200)=0x1)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x20000023896)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000340)={{0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00', 0x4}, {0xa, 0x4e20, 0xa16, @dev={0xfe, 0x80, '\x00', 0x35}, 0x1}, 0x0, {[0xfffffffe, 0xf, 0x6, 0x1, 0x9, 0x1, 0x7, 0x3]}}, 0x5c)
ppoll(&(0x7f0000000140)=[{r5, 0x21f0}], 0x1, &(0x7f0000000180), 0x0, 0x0)
syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0)
getpgid(0x0)
pidfd_send_signal(0xffffffffffffffff, 0x11, 0x0, 0x4)

6.203954568s ago: executing program 7 (id=5280):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
syz_emit_ethernet(0x63e, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
read(r2, &(0x7f0000032440)=""/102364, 0x18fdc)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d4, 0x5})
mprotect(&(0x7f0000cc1000/0x2000)=nil, 0x2000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r4 = userfaultfd(0x801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x9, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000070000000000000001000000850000006900000059731800000000001840000001000000000000000000000018150000", @ANYRES32=r2, @ANYBLOB="000000000000000095030000000000000077b40fa57409732db6337ed3c6d0f6a741ba0d4adb5a0cef45d9714f9ec8cb"], &(0x7f0000000100)='GPL\x00', 0x9, 0x64, &(0x7f0000000940)=""/100, 0x40f00, 0x2, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000180)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r5 = socket(0x80000000000000a, 0x2, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
write$P9_RREADLINK(r7, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)
open(&(0x7f0000000200)='./file1\x00', 0xeaa00, 0x1)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000040)={'tunl0\x00', &(0x7f0000000bc0)={'syztnl1\x00', 0x0, 0x7800, 0x7800, 0x90, 0x40000000, {{0x5, 0x4, 0x0, 0x3, 0x14, 0x65, 0x0, 0x0, 0x4, 0x0, @remote, @multicast1}}}})
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r5, 0x1, 0x9, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'dummy0\x00', 0x4000})
r8 = syz_open_dev$usbfs(&(0x7f0000000000), 0x434, 0x3000)
mmap$usbfs(&(0x7f000015f000/0x3000)=nil, 0x3000, 0xb, 0x50, r8, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

5.772177166s ago: executing program 8 (id=5281):
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100028a8f6620402010720c5b0102030109021200010005500409048100000d356409"], 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01)
ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000240)={0x15, 0xfffffffffffffec9, 0x0})
ioctl$EVIOCGMASK(r2, 0x80104592, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
io_uring_register$IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x15, &(0x7f0000000640)=[{0x0, 0x1, 0x0, &(0x7f0000001ec0), &(0x7f0000000300)}, {0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x3, 0x887]}, {0x0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000a80)}, {0x5, 0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000000ac0)=""/26, 0x1a}, {&(0x7f0000000b00)=""/140, 0x8c}, {0x0}, {&(0x7f0000000cc0)=""/24, 0x18}, {0x0}], &(0x7f0000001d40)}, {0x0, 0x1, 0x0, 0x0, &(0x7f00000002c0)=[0x1, 0x659, 0x1, 0x3]}, {0x0, 0x1, 0x0, &(0x7f0000002380), 0x0}, {0x0, 0x1, 0x0, 0x0, &(0x7f0000000180)}, {0x0, 0x1, 0x0, &(0x7f0000003dc0), 0x0}], 0x8)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
prctl$PR_SET_IO_FLUSHER(0x43, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
sendmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x10}, 0x20040001)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_script(r4, &(0x7f0000000400)={'#! ', './file0', [], 0xa, "1f411d2552ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bda4de504f5a3c7c04055f1f70e4064d46b2bb"}, 0x3e)
write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000040)=ANY=[@ANYBLOB='\t'], 0x28)
close(r4)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

5.319231693s ago: executing program 2 (id=5282):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$kcm(0x11, 0x2, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
unshare(0x2c020400)
open_by_handle_at(r2, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89c, 0x20, 0x2, 0x20002f7, 0x0, r2})

5.253401574s ago: executing program 1 (id=5283):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000020000000000000060b4000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000700000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2)
sendmmsg(0xffffffffffffffff, &(0x7f00000007c0)=[{{&(0x7f0000000380)=@in={0x2, 0x4e24, @local}, 0x80, 0x0}}], 0x1, 0x2c000011)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0)
ioctl$TCSETAF(r2, 0x5408, &(0x7f00000000c0)={0x4e00, 0x0, 0x730, 0xbdff, 0x90, "febbad541a00"})
write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"})
r3 = syz_open_pts(r2, 0x8182)
r4 = dup3(r3, r2, 0x80000)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x17)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockopt$bt_hci(r5, 0x0, 0x1, &(0x7f00000000c0)=""/95, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x3, 0x81, 0xffffffff})
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0)
ioctl$IOC_PR_CLEAR(r7, 0x401070cd, 0x0)
read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8)
open_tree(0xffffffffffffff9c, 0x0, 0x89901)
socket$inet_udp(0x2, 0x2, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x20})
socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})

4.887817709s ago: executing program 4 (id=5284):
r0 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2)
ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x0)
sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x41}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xe9}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x14004040}, 0x10004)
r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x2, 0x2, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x0)
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000002c0)=<r2=>0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000300)=0x5)
r3 = syz_io_uring_setup(0x346b, &(0x7f0000000340)={0x0, 0xa34f, 0x2, 0x1, 0x26d, 0x0, r1}, &(0x7f00000003c0), &(0x7f0000000400))
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x110050, r3, 0x8000000)
r4 = accept4$nfc_llcp(r1, &(0x7f0000000440), &(0x7f00000004c0)=0x60, 0x1000)
r5 = accept$nfc_llcp(r4, &(0x7f0000000500), &(0x7f0000000580)=0x60)
close_range(r3, r1, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'vcan0\x00', <r6=>0x0})
ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000600)={0x0, @rc={0x1f, @any, 0xb7}, @can={0x1d, <r7=>r6}, @llc={0x1a, 0x1b, 0xff, 0xfa, 0x6, 0x0, @multicast}, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x0, 0xff, 0x8000000000000001, 0x4})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r8, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x78, 0x4, 0x8, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6558}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x8307}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x400}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0xe9}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0xf}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x78}, 0x1, 0x0, 0x0, 0x40c0}, 0x10)
ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r1, 0x0, 0x63, 0x40, &(0x7f00000007c0)="3d5fece769941374ed87e8d4af3a8d747aa2caf73dbbfc6cb2bb5a071c4aed1b0f02a6569dd0a97769ddab9ac0a0b0c706d6cf08b092e01aa8454e107894c86ed45d868ce734fa9e50b0a7016318337f06022950ec7a8b1801147866ad094a4b90aa0f", &(0x7f0000000840)=""/64, 0x7ab, 0x0, 0x7b, 0x9, &(0x7f0000000880)="111393a6b6c62056fb9488da2bbebad67fdb99934105bd010b72951d4e260f7610ee26b7d423fd05fa8aaf0cd55885a5c66793f81111355c40e9d0df2486a020e4aa4b8ebbc0211e30af5ed3a8de43aa5ab9c849b3d90c48b54d756a0a668f996fe904da47ba4ca75454c2556c7f1f7e71cb2a92d7433d2ac09854", &(0x7f0000000900)="576cf1b625ca878b44", 0x1, 0x0, 0x8}, 0x50)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000009c0)={<r9=>0x0, 0x800}, &(0x7f0000000a00)=0x8)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000a40)={r9, 0x1, 0x401, 0x300, 0xa, 0x4}, 0x14)
r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000000ac0), 0xffffffffffffffff)
sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x4c, r10, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_LINK={0x8, 0x1, r7}, @GTPA_FAMILY={0x5, 0xd, 0x9}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xe)
openat$mice(0xffffffffffffff9c, &(0x7f0000000c00), 0x202302)
r11 = add_key$user(&(0x7f0000000c40), &(0x7f0000000c80)={'syz', 0x1}, &(0x7f0000000cc0)="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", 0x1000, 0xfffffffffffffffc)
r12 = add_key$user(&(0x7f0000001cc0), &(0x7f0000001d00)={'syz', 0x1}, &(0x7f0000001d40)="4b08369a77d35760e49d528dff275040ce1b0d41f31d5587b76cc1371f0bcd9958c314a1960a078c70cc0bcf059befae6ca58947fe0c4cb4e4e122898341b6e0c2fc2f386646069ec4b1e819443328d16c5c04da2e", 0x55, 0xfffffffffffffff9)
r13 = add_key$fscrypt_v1(&(0x7f0000001dc0), &(0x7f0000001e00)={'fscrypt:', @auto=[0x39, 0x31, 0x38, 0x37, 0x64, 0x63, 0x30, 0x30, 0x32, 0x0, 0x39, 0x62, 0x38, 0x32, 0x65, 0x33]}, &(0x7f0000001e40)={0x0, "7a795f23f6bf7125d16771abfa936a14d69da34a7f633db758e45d595b3f2ccc4726dfc5305a47200b922c4cfcf370a902ab55981586aa593831934e32741115", 0x1e}, 0x48, 0xfffffffffffffffb)
keyctl$dh_compute(0x17, &(0x7f0000001ec0)={r11, r12, r13}, &(0x7f0000001f00)=""/71, 0x47, &(0x7f0000002080)={&(0x7f0000001f80)={'cbcmac-aes-neon\x00'}, &(0x7f0000001fc0)="204620b1539aa1741baef9028c0415367fd8ac5c81a085d3650a65539d6dffcf9c99b11efee33e2cbceee7dbeaa05ab9ea297e72bfa90391c727cca406b269a5d2fd0e4eeaaddc004f96f3c3519bbc071ab39548da6f010e80694d460ea201f436308c2c96fa7b2dfc9a5cc5bde16374989b4530eaff346502c7436ead737f376124ef4a33b7b6ef65180e02fd18294cfc6e8494a5c2f1e71c7192580425a09e0b79e74f7933a991bb81bee64fabacbd27124ce49e9a", 0xb6})
keyctl$negate(0xd, r11, 0x2, 0xfffffffffffffffe)
syz_open_dev$tty1(0xc, 0x4, 0x2)

4.832239964s ago: executing program 7 (id=5285):
getpid()
getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0)
sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000030000000060a010400000000000000000100000008000b40000000000900010073797a30000000000500074008000000140000"], 0xa4}, 0x1, 0x0, 0x0, 0x2004c899}, 0x0)
recvmmsg(r3, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
socket$kcm(0xa, 0x2, 0x73)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32, @ANYRES16], 0x4c}}, 0x40000)
syz_open_dev$tty20(0xc, 0x4, 0x0)

3.888964465s ago: executing program 1 (id=5286):
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4})
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00')
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)=0x1)
timerfd_settime(r0, 0x3, &(0x7f0000000240)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000280)={{}, {0x0, <r1=>0x0}})
mremap(&(0x7f0000244000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000bd3000/0x4000)=nil)
ioctl$UFFDIO_MOVE(0xffffffffffffffff, 0xc028aa05, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1)
ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f00000005c0))
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc)
bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r8, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$sock(r8, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='S', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="a6", 0x1}], 0x1}}], 0x2, 0x2000c000)
shutdown(r8, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x40, r7, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x24, 0x7d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x1e, 0x3, "0c8d9ecd00476fe0233440edb3f02b00008879c8a7bfc8000000"}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000)
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYBLOB="a40800001000deb100", @ANYRES16=r0, @ANYRES64=r1, @ANYRESDEC=r6, @ANYBLOB="0c009900ff0100001000000034005e80080009000300000008000200f8ffffff080007009b050000080005003a0000000800090000010000080003000000000048005e8008000200ffffffff0800020070010000080006000104000014000100090000009f0000000000000003000000080003000700000008000700a10000000800050026000000"], 0xa4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44814)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r9=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r9, <r10=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000540)={r10, 0x0, 0x0, 0x0, 0x1, [<r11=>0x0], [0x0, 0x7, 0x0, 0x80000001], [0x0, 0x80000002, 0x2], [0xfffffffffffffffe, 0x0, 0x1, 0x1]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r11})
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000080)={r11})
ioctl$F2FS_IOC_SEC_TRIM_FILE(0xffffffffffffffff, 0x4018f514, &(0x7f0000000040)={0xff, 0xf08, 0x1})

3.78382773s ago: executing program 7 (id=5287):
mkdir(&(0x7f0000000000)='./file0\x00', 0x10)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58)
mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno='])
chdir(&(0x7f0000000100)='./file0\x00')
read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020)
readlink(&(0x7f0000000640)='./file0\x00', &(0x7f0000001740)=""/4075, 0xfeb)

3.781042127s ago: executing program 4 (id=5288):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f0000000000)=0xfffffffd, 0x4)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = getpid()
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203030100000000000000000400000a0800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010)
sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000000103030000000000000000deff00000a0c00020000000002"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mknod$loop(0x0, 0xffff2000, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000780), 0x20000, 0x0)
epoll_pwait2(r5, &(0x7f0000001d80), 0x0, 0x0, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REQ_SET_REG(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x18, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x8095)
r7 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004400)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0d022bbd7000fedbdf2501000000050005000400000008000400ffff00000800030006000000050006"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x44, r7, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @SEG6_ATTR_DST={0x14, 0x1, @private0}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x880)
recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x4, @empty, 0xfffffffe}, 0x1c, 0x0}}], 0x1, 0x20080058)
ptrace(0x10, 0x0)

2.554804593s ago: executing program 7 (id=5289):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02)
writev(r5, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1)
read(r5, &(0x7f0000001400)=""/4076, 0xfffffeea)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x19, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0xd35d0cc0f5855fca, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400000004000000120000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00M\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000e9ff00"/28], 0x48)
socket$kcm(0x11, 0x2, 0x0)

2.554244938s ago: executing program 1 (id=5290):
getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x7, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000100001000000000000"], 0xe0}}, 0x0)
syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, <r1=>0x0})
sched_setscheduler(r1, 0x5, &(0x7f0000000140)=0x3)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000100)=0xffffbff6, 0x4)
listen(r0, 0x5)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x8, 0xfff1}, {0xfff1, 0x2}, {0xb, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x24044801}, 0x20000000)
setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000000)={@multicast2, @local, r4}, 0xc)
syz_open_dev$sndctrl(&(0x7f0000000380), 0x3, 0xbc01)
setsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
chdir(0x0)
r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi3\x00', 0xc00, 0x0)
ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x40404f26, 0x5, 0x2, 0x401, 0xc, 0x9, 0xfff, 0x5c95239c, 0x5, 0x3bb, 0x802, 0x1600, 0x1, 0x20000001, 0x9, 0xe1cb, 0x6, 0x0, 0x400, 0x195, 0x6, 0x0, 0xb, 0x402, 0x9, 0x3, 0x41, 0x5, 0x6, 0x8000003, 0xdffffffa]})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r2, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000010000100000020000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094)
r6 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'})

2.349329815s ago: executing program 4 (id=5291):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0)
r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r3=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, <r4=>0x0})
r5 = userfaultfd(0x801)
ioctl$UFFDIO_WAKE(r5, 0x8010aa02, &(0x7f00000002c0)={&(0x7f000062f000/0x3000)=nil, 0x3000})
ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000200)={r4, 0x1, 0x800, 0x7, 0x0, [], [0x0, 0x6], [0xa, 0x8, 0x10000, 0x3], [0x1019cd22, 0x0, 0xe4, 0x21d]})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x6, "0fa9b688"}]}}, 0x0}, 0x0)
r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2302, 0x0)
ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f00000000c0)=0x8)
syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x12, @string={0x12, 0x3, "9a00"/16}}, 0x0, 0x0}, 0x0)

1.735328087s ago: executing program 2 (id=5292):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000d972a440b72040155ab7010203010902120001000000000904800000ff"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000680)=ANY=[@ANYBLOB="40154600000050"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000240)=ANY=[@ANYRES32=r0])
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='i', @ANYRES32=r2, @ANYBLOB="000000001400000000000000010000000100", @ANYRES32=r2, @ANYBLOB="871cbad3569de96f25e2a140b393914bce0e40e0955de3a49a53a30000000000000000"], 0x30, 0x40}, 0x4004011)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
openat$selinux_access(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040895}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340), 0x40500, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd7e)
r6 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./file1\x00', 0x0, 0x244)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000001c0)=0x10)
chown(&(0x7f0000000040)='./file1\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b000000000000"], 0x48)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018eeffffffffffff147ed900000000003800604d237a1ca5be9aff2e5f03910000000000000000"], &(0x7f0000000000)=""/42, 0x1c, 0x2a, 0x1, 0x6}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

1.443719706s ago: executing program 7 (id=5293):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000440), 0x10)
listen(r2, 0xfffffffc)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="ce5bff46f569d10400", 0x9}, {&(0x7f0000000480)="78e5cdc8091de1177dfe78ca4bb2a60248218b0a28e302d8becae34e7d14ad0b309d9695612089b4a54136faa50a4b24bb2b7dbfb9666e22b9b1ef40777f83c95e341f59d8b9fdb4da93a51100abf499ad172c28a8ae071d533a4709cdd609d694c6fb059fbf6a8d6bd53e5684b7b3c18fb345f30d61f7340e4e82f5e5a7d7714ee8af2bda5390b8e988608f498362749f54aab3df9f5c2c63691e91be20ea965e356b6cc9bfa8f99eeb50f4ff5fab2982e279ad8dcf2a37514d8ddec929d037ed1891927916", 0xc6}], 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1c)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0)
ftruncate(0xffffffffffffffff, 0x8800000)
r5 = accept4$unix(r2, 0x0, 0x0, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0)
recvmmsg(r5, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)}}], 0x1, 0x2, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x800003}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

222.133568ms ago: executing program 7 (id=5294):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
shutdown(r2, 0x1)
bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @empty, 0x5}, 0x1c)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffff7, @empty, 0x2}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000000480)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, 0x0}}], 0x1, 0x240c089d)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0xfffffd9a, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a0104000000", @ANYRESDEC=r0, @ANYRESDEC=r1], 0xcc}, 0x1, 0x0, 0x0, 0x408c4}, 0x0)
sendmmsg$sock(r1, &(0x7f0000000680)=[{{&(0x7f0000000040)=@isdn={0x22, 0x0, 0x55, 0x9, 0x4}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)="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", 0xff}], 0x1, &(0x7f00000001c0)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x6a3}}, @mark={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x6fb}}], 0xc0}}, {{&(0x7f0000000400)=@hci={0x1f, 0x2, 0x3}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000140)="7f71005edccfdcc87dd76e7a220d18d5be15d3cdf866da4d6ab57d896368b788495f0490", 0x24}, {&(0x7f0000000480)="5aff4d6812bde2c819675c9b594200eafd1aab8a40de097d96acc3fae951db5acc5a2c2bed421f196c24565da4114e2651f5abbef85bf91bf9b5f63d87c54eb3140d3586f49626a5a303073c48e458543757099832275fd961f14c18195b73d6f809ee78cd1a147b55b1f17dbcaba388fe823db46127198e", 0x78}, {&(0x7f0000000500)="9f2bb30659eb7e109239b3b54a45b7ccf59819782e6dd7c17d44501d1bc23e9c1d490344c0b8551f1d0e59f53e969d1c61cc038f0ab80685b693d2535a7824406e990c31062af73bd1bcdab74b0e801dac79ddd9abdab33de06476a5a6b57f18f85894400ba1", 0x66}, {&(0x7f0000000700)="ab176d526b78e8579079db05db0850900d73ef10aadce4346912140324b179a5de30b4c6a08dd795c4dae1b48e165cc1012541a7dd390b2f9e10e6d6f51d376fe272c49388641e03b624e5d770432b676da2e2f20bb82b7cd6f76d0a16c40fb49ed0da04500b0ba25439c7dd17faad135e8dc39e55b1318f1f5676e22af7", 0x7e}], 0x4, &(0x7f0000000640)=[@mark={{0x14, 0x1, 0x24, 0x60bf}}], 0x18}}], 0x2, 0x800)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0xff80, 0x4, 0x0, 0x9}, 'syz1\x00', 0x15})
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x50)
ioctl$UI_DEV_CREATE(r0, 0x5501)
r3 = syz_open_dev$evdev(&(0x7f0000000100), 0x72, 0x0)
ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000180)={0x50, 0xffff, 0x7, {0x2, 0xcac}, {0x8000, 0x7}, @cond=[{0x5, 0x402, 0x5, 0x610b, 0x800, 0x2ce2}, {0xa, 0x106, 0x6, 0x3, 0x6, 0x3b76}]})

83.294555ms ago: executing program 8 (id=5295):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4)
r1 = socket(0x2, 0x2, 0x1)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x38)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r2, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x47be2ac91a822b12, 0x0)
r4 = dup(r3)
ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000300)=ANY=[@ANYBLOB="d0"])
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r5=>0x0})
sendto$packet(r0, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xff18, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r5, 0x1, 0xe5, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14)

0s ago: executing program 8 (id=5296):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c800}, 0x810)

kernel console output (not intermixed with test programs):

utes in process `syz.8.4913'.
[ 1328.449563][T23352] nbd: must specify at least one socket
[ 1328.824008][T23355] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22
[ 1329.980553][T23377] /dev/sg0: Can't lookup blockdev
[ 1330.415066][T23382] netlink: 'syz.2.4920': attribute type 1 has an invalid length.
[ 1330.443402][T23382] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4920'.
[ 1331.261827][T23394] /dev/sg0: Can't lookup blockdev
[ 1331.741465][T23390] ptrace attach of "./syz-executor exec"[15795] was attempted by "./syz-executor exec"[23390]
[ 1331.918069][T23390] netlink: 332 bytes leftover after parsing attributes in process `syz.4.4924'.
[ 1331.927191][T23390] netlink: 160 bytes leftover after parsing attributes in process `syz.4.4924'.
[ 1331.974161][T23398] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22
[ 1332.688827][ T5935] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[ 1333.209432][ T5935] usb 2-1: Using ep0 maxpacket: 16
[ 1333.382822][ T5935] usb 2-1: device descriptor read/all, error -71
[ 1333.514413][T23420] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22
[ 1333.752053][T23425] /dev/sg0: Can't lookup blockdev
[ 1333.768594][T23425] ptrace attach of "./syz-executor exec"[15405] was attempted by "./syz-executor exec"[23425]
[ 1333.806977][T23425] netlink: 332 bytes leftover after parsing attributes in process `syz.1.4929'.
[ 1333.838761][T23425] netlink: 160 bytes leftover after parsing attributes in process `syz.1.4929'.
[ 1334.987698][T23439] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1335.639832][T23447] Bluetooth: MGMT ver 1.23
[ 1335.860035][ T5889] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[ 1335.952617][   T30] audit: type=1400 audit(1759430807.137:1268): avc:  denied  { read } for  pid=23451 comm="syz.4.4940" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[ 1335.976314][T18292] Bluetooth: hci1: command 0x0406 tx timeout
[ 1335.979187][   T30] audit: type=1400 audit(1759430807.137:1269): avc:  denied  { open } for  pid=23451 comm="syz.4.4940" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[ 1336.035238][ T5889] usb 9-1: too many configurations: 67, using maximum allowed: 8
[ 1336.138250][   T30] audit: type=1400 audit(1759430807.193:1270): avc:  denied  { ioctl } for  pid=23451 comm="syz.4.4940" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[ 1336.172634][ T5889] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1336.182204][ T5889] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1336.624460][ T5889] usb 9-1: Product: syz
[ 1336.628649][ T5889] usb 9-1: Manufacturer: syz
[ 1336.633475][ T5889] usb 9-1: SerialNumber: syz
[ 1336.667503][ T5889] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1336.699696][    T9] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1337.936528][   T30] audit: type=1400 audit(1759430808.877:1271): avc:  denied  { read } for  pid=23458 comm="syz.2.4942" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[ 1338.369201][    T9] usb 9-1: Service connection timeout for: 256
[ 1338.375755][    T9] ath9k_htc 9-1:1.0: ath9k_htc: Unable to initialize HTC services
[ 1338.395800][T23463] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1338.403022][T23463] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1338.410698][T23463] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1338.412611][    T9] ath9k_htc: Failed to initialize the device
[ 1338.416762][T23463] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1338.430624][T23463] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1338.436694][T23463] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 1338.444428][    T9] usb 9-1: ath9k_htc: USB layer deinitialized
[ 1338.461950][T23463] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1338.566827][ T5889] usb 9-1: USB disconnect, device number 15
[ 1338.607334][T23470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4945'.
[ 1338.735813][ T5965] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[ 1338.906907][ T5965] usb 5-1: Using ep0 maxpacket: 8
[ 1338.919571][ T5965] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1338.971101][ T5965] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1338.981707][ T5965] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1338.998120][ T5965] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[ 1339.013834][ T5965] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1339.023112][ T5965] usb 5-1: Product: syz
[ 1339.027736][ T5965] usb 5-1: Manufacturer: syz
[ 1339.035347][ T5965] usb 5-1: SerialNumber: syz
[ 1339.053293][ T5965] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22
[ 1339.065582][ T5965] usbtest 5-1:1.0: couldn't get endpoints, -22
[ 1339.076201][ T5965] usbtest 5-1:1.0: probe with driver usbtest failed with error -22
[ 1339.266379][ T5965] usb 5-1: USB disconnect, device number 42
[ 1339.860226][T23476] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22
[ 1340.574903][T23324] Bluetooth: hci2: command 0x0406 tx timeout
[ 1340.575079][T18292] Bluetooth: hci1: command 0x0406 tx timeout
[ 1340.580936][T23324] Bluetooth: hci4: command 0x0406 tx timeout
[ 1340.586941][ T5146] Bluetooth: hci5: command 0x0406 tx timeout
[ 1340.593474][T21599] Bluetooth: hci3: command 0x0406 tx timeout
[ 1340.660200][T21599] Bluetooth: hci0: command 0x0405 tx timeout
[ 1342.808974][T21599] Bluetooth: hci2: command 0x0406 tx timeout
[ 1359.918993][T23493] FAULT_INJECTION: forcing a failure.
[ 1359.918993][T23493] name failslab, interval 1, probability 0, space 0, times 0
[ 1359.944080][T23493] CPU: 0 UID: 0 PID: 23493 Comm: syz.1.4949 Not tainted syzkaller #0 PREEMPT(full) 
[ 1359.944105][T23493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1359.944114][T23493] Call Trace:
[ 1359.944120][T23493]  <TASK>
[ 1359.944127][T23493]  dump_stack_lvl+0x16c/0x1f0
[ 1359.944156][T23493]  should_fail_ex+0x512/0x640
[ 1359.944176][T23493]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[ 1359.944209][T23493]  should_failslab+0xc2/0x120
[ 1359.944224][T23493]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[ 1359.944249][T23493]  ? __alloc_skb+0x2b2/0x380
[ 1359.944271][T23493]  ? avc_has_perm+0x144/0x1f0
[ 1359.944298][T23493]  __alloc_skb+0x2b2/0x380
[ 1359.944319][T23493]  ? __pfx___alloc_skb+0x10/0x10
[ 1359.944337][T23493]  ? selinux_socket_getpeersec_dgram+0x1a4/0x370
[ 1359.944357][T23493]  ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10
[ 1359.944384][T23493]  netlink_alloc_large_skb+0x69/0x130
[ 1359.944413][T23493]  netlink_sendmsg+0x6a1/0xdd0
[ 1359.944440][T23493]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1359.944474][T23493]  ____sys_sendmsg+0xa95/0xc70
[ 1359.944494][T23493]  ? copy_msghdr_from_user+0x10a/0x160
[ 1359.944518][T23493]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1359.944545][T23493]  ___sys_sendmsg+0x134/0x1d0
[ 1359.944568][T23493]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1359.944615][T23493]  __sys_sendmsg+0x16d/0x220
[ 1359.944637][T23493]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1359.944675][T23493]  do_syscall_64+0xcd/0x4e0
[ 1359.944702][T23493]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1359.944721][T23493] RIP: 0033:0x7f524b98eec9
[ 1359.944736][T23493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1359.944752][T23493] RSP: 002b:00007f524c8a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1359.944770][T23493] RAX: ffffffffffffffda RBX: 00007f524bbe5fa0 RCX: 00007f524b98eec9
[ 1359.944782][T23493] RDX: 000000000004084c RSI: 0000200000000d80 RDI: 0000000000000004
[ 1359.944793][T23493] RBP: 00007f524c8a7090 R08: 0000000000000000 R09: 0000000000000000
[ 1359.944804][T23493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1359.944815][T23493] R13: 00007f524bbe6038 R14: 00007f524bbe5fa0 R15: 00007ffc33b96418
[ 1359.944838][T23493]  </TASK>
[ 1361.315084][ T5902] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[ 1361.520238][ T5902] usb 5-1: Using ep0 maxpacket: 32
[ 1361.542727][ T5902] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[ 1361.585840][ T5902] usb 5-1: config 0 has no interface number 0
[ 1361.674325][ T5902] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1361.689919][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1361.698275][ T5902] usb 5-1: Product: syz
[ 1361.708417][ T5902] usb 5-1: Manufacturer: syz
[ 1362.173831][ T5902] usb 5-1: SerialNumber: syz
[ 1362.199883][ T5902] usb 5-1: config 0 descriptor??
[ 1362.211418][ T5902] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1362.298037][T12037] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[ 1362.442943][ T5902] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[ 1362.447591][T12037] usb 9-1: device descriptor read/64, error -71
[ 1362.459739][ T5902] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[ 1362.725915][T12037] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[ 1362.885930][T12037] usb 9-1: device descriptor read/64, error -71
[ 1362.886552][    C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71
[ 1362.932337][ T5889] usb 5-1: USB disconnect, device number 43
[ 1362.943996][ T5889] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[ 1363.025985][T12037] usb usb9-port1: attempt power cycle
[ 1363.058898][ T5889] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[ 1363.089792][ T5889] quatech2 5-1:0.51: device disconnected
[ 1363.914171][T12037] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[ 1363.946948][T12037] usb 9-1: device descriptor read/8, error -71
[ 1363.971317][   T30] audit: type=1400 audit(1759430833.347:1272): avc:  denied  { create } for  pid=23548 comm="syz.7.4965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[ 1364.013029][   T30] audit: type=1400 audit(1759430833.375:1273): avc:  denied  { bind } for  pid=23548 comm="syz.7.4965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[ 1364.258551][T23555] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4966'.
[ 1364.269227][T23555] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4966'.
[ 1364.614623][T12037] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[ 1364.693045][T12037] usb 9-1: device descriptor read/8, error -71
[ 1364.926611][T12037] usb usb9-port1: unable to enumerate USB device
[ 1365.590697][T23558] syz_tun: entered allmulticast mode
[ 1365.660252][T23558] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[ 1365.845090][T23556] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4967'.
[ 1365.851273][T23558] dvmrp1: entered allmulticast mode
[ 1366.086927][T23571] lo speed is unknown, defaulting to 1000
[ 1366.178902][ T5889] usb 8-1: new high-speed USB device number 48 using dummy_hcd
[ 1367.033302][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 1367.782546][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 1368.598732][T23557] syz_tun: left allmulticast mode
[ 1368.990322][   T30] audit: type=1400 audit(1759430838.033:1274): avc:  denied  { connect } for  pid=23597 comm="syz.7.4977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1369.535863][T23603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4975'.
[ 1370.667523][T23613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4978'.
[ 1370.978665][ T5902] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[ 1371.132881][ T5902] usb 2-1: device descriptor read/64, error -71
[ 1371.479702][ T5902] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[ 1371.882155][ T5965] usb 8-1: new high-speed USB device number 49 using dummy_hcd
[ 1371.972056][T23613] bond0: (slave bond_slave_1): Releasing backup interface
[ 1372.069389][ T5902] usb 2-1: device descriptor read/64, error -71
[ 1372.102719][ T5965] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1372.118883][ T5965] usb 8-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00
[ 1372.128422][ T5965] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1372.139447][ T5965] usb 8-1: config 0 descriptor??
[ 1372.189626][ T5902] usb usb2-port1: attempt power cycle
[ 1372.208140][ T5935] usb 9-1: new high-speed USB device number 20 using dummy_hcd
[ 1372.379123][ T5935] usb 9-1: Using ep0 maxpacket: 32
[ 1372.582297][ T5902] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[ 1372.666787][ T5935] usb 9-1: config 0 has an invalid interface number: 35 but max is 0
[ 1372.689253][ T5902] usb 2-1: device descriptor read/8, error -71
[ 1372.716512][ T5935] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1372.749202][ T5935] usb 9-1: config 0 has no interface number 0
[ 1372.787022][ T5935] usb 9-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1372.808205][ T5935] usb 9-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[ 1372.828044][ T5935] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1372.853709][ T5965] maltron 0003:058F:9410.0015: hidraw0: USB HID v40.00 Device [HID 058f:9410] on usb-dummy_hcd.7-1/input0
[ 1372.888729][ T5935] usb 9-1: Product: syz
[ 1372.904366][ T5935] usb 9-1: Manufacturer: syz
[ 1372.918337][ T5935] usb 9-1: SerialNumber: syz
[ 1372.952541][ T5935] usb 9-1: config 0 descriptor??
[ 1372.957743][ T5902] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[ 1372.983973][ T5935] radio-si470x 9-1:0.35: could not find interrupt in endpoint
[ 1373.000941][ T5935] radio-si470x 9-1:0.35: probe with driver radio-si470x failed with error -5
[ 1373.016140][ T5902] usb 2-1: device descriptor read/8, error -71
[ 1373.068043][   T24] usb 8-1: USB disconnect, device number 49
[ 1373.149485][ T5902] usb usb2-port1: unable to enumerate USB device
[ 1373.185982][T23645] fido_id[23645]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory
[ 1373.226757][T23629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1373.235387][T23629] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1373.463763][T23648] ptrace attach of "./syz-executor exec"[15795] was attempted by "./syz-executor exec"[23648]
[ 1373.484728][T23648] netlink: 332 bytes leftover after parsing attributes in process `syz.4.4987'.
[ 1373.496228][T23648] netlink: 160 bytes leftover after parsing attributes in process `syz.4.4987'.
[ 1373.689672][ T5935] radio-raremono 9-1:0.35: this is not Thanko's Raremono.
[ 1373.752267][ T5935] usbhid 9-1:0.35: couldn't find an input interrupt endpoint
[ 1375.032100][ T5935] usb 9-1: USB disconnect, device number 20
[ 1375.317023][T23667] input: syz1 as /devices/virtual/input/input14
[ 1375.997917][T23672] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22
[ 1376.490252][T23681] block device autoloading is deprecated and will be removed.
[ 1377.157846][ T5965] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[ 1377.228761][T23700] kvm: user requested TSC rate below hardware speed
[ 1377.232782][T12037] usb 9-1: new high-speed USB device number 21 using dummy_hcd
[ 1377.293136][T23702] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1839467258 (3678934516 ns) > initial count (3516277304 ns). Using initial count to start timer.
[ 1377.334742][ T5965] usb 2-1: Using ep0 maxpacket: 8
[ 1377.347172][ T5965] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[ 1377.363224][ T5965] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1377.372562][T23702] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5001'.
[ 1377.386832][ T5965] usb 2-1: config 0 descriptor??
[ 1377.430297][T12037] usb 9-1: device descriptor read/64, error -71
[ 1377.972321][T23720] syz_tun: entered allmulticast mode
[ 1380.044023][T23718] syz_tun: left allmulticast mode
[ 1380.138740][   T30] audit: type=1400 audit(1759430848.473:1275): avc:  denied  { ioctl } for  pid=23743 comm="syz.8.5010" path="socket:[70753]" dev="sockfs" ino=70753 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[ 1380.651186][T12037] usb 9-1: new full-speed USB device number 23 using dummy_hcd
[ 1380.803634][T12037] usb 9-1: device descriptor read/64, error -71
[ 1380.908276][T23764] FAULT_INJECTION: forcing a failure.
[ 1380.908276][T23764] name failslab, interval 1, probability 0, space 0, times 0
[ 1380.922336][T23764] CPU: 0 UID: 0 PID: 23764 Comm: syz.2.5017 Not tainted syzkaller #0 PREEMPT(full) 
[ 1380.922362][T23764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1380.922372][T23764] Call Trace:
[ 1380.922378][T23764]  <TASK>
[ 1380.922386][T23764]  dump_stack_lvl+0x16c/0x1f0
[ 1380.922415][T23764]  should_fail_ex+0x512/0x640
[ 1380.922440][T23764]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[ 1380.922470][T23764]  should_failslab+0xc2/0x120
[ 1380.922488][T23764]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[ 1380.922514][T23764]  ? __alloc_skb+0x2b2/0x380
[ 1380.922541][T23764]  __alloc_skb+0x2b2/0x380
[ 1380.922563][T23764]  ? __pfx___alloc_skb+0x10/0x10
[ 1380.922587][T23764]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[ 1380.922617][T23764]  netlink_alloc_large_skb+0x69/0x130
[ 1380.922644][T23764]  netlink_sendmsg+0x6a1/0xdd0
[ 1380.922673][T23764]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1380.922708][T23764]  ____sys_sendmsg+0xa95/0xc70
[ 1380.922727][T23764]  ? copy_msghdr_from_user+0x10a/0x160
[ 1380.922751][T23764]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1380.922780][T23764]  ___sys_sendmsg+0x134/0x1d0
[ 1380.922804][T23764]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1380.922858][T23764]  __sys_sendmsg+0x16d/0x220
[ 1380.922882][T23764]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1380.922921][T23764]  do_syscall_64+0xcd/0x4e0
[ 1380.922948][T23764]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1380.922966][T23764] RIP: 0033:0x7f91ee78eec9
[ 1380.922981][T23764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1380.922998][T23764] RSP: 002b:00007f91ef5e3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1380.923015][T23764] RAX: ffffffffffffffda RBX: 00007f91ee9e5fa0 RCX: 00007f91ee78eec9
[ 1380.923027][T23764] RDX: 000000002004c040 RSI: 0000200000000140 RDI: 0000000000000003
[ 1380.923038][T23764] RBP: 00007f91ef5e3090 R08: 0000000000000000 R09: 0000000000000000
[ 1380.923049][T23764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1380.923061][T23764] R13: 00007f91ee9e6038 R14: 00007f91ee9e5fa0 R15: 00007ffe5ba02598
[ 1380.923085][T23764]  </TASK>
[ 1381.138387][ T5902] usb 8-1: new high-speed USB device number 50 using dummy_hcd
[ 1381.230951][T12037] usb 9-1: new full-speed USB device number 24 using dummy_hcd
[ 1381.243261][ T5965] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[ 1381.253900][ T5965] asix 2-1:0.0: probe with driver asix failed with error -71
[ 1381.270619][ T5965] usb 2-1: USB disconnect, device number 53
[ 1381.282783][T23773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5020'.
[ 1381.291788][T23773] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5020'.
[ 1381.300825][T23773] netlink: 'syz.1.5020': attribute type 20 has an invalid length.
[ 1381.314976][T23773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5020'.
[ 1381.324086][T23773] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5020'.
[ 1381.333607][T23773] netlink: 'syz.1.5020': attribute type 20 has an invalid length.
[ 1381.337895][ T5902] usb 8-1: Using ep0 maxpacket: 32
[ 1381.346601][   T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1381.364355][   T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1381.389475][ T5902] usb 8-1: config 0 has an invalid interface number: 184 but max is 0
[ 1381.416977][T12037] usb 9-1: device descriptor read/64, error -71
[ 1381.428886][   T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1381.452669][ T7734] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1381.462731][ T5902] usb 8-1: config 0 has no interface number 0
[ 1381.474002][ T5902] usb 8-1: config 0 interface 184 has no altsetting 0
[ 1381.547515][T12037] usb usb9-port1: attempt power cycle
[ 1381.549967][ T5902] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1381.563663][ T5902] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1381.593096][ T5902] usb 8-1: Product: syz
[ 1381.748140][ T5902] usb 8-1: Manufacturer: syz
[ 1381.773634][ T5902] usb 8-1: SerialNumber: syz
[ 1381.879726][ T5902] usb 8-1: config 0 descriptor??
[ 1381.899426][ T5902] smsc75xx v1.0.0
[ 1381.932775][   T30] audit: type=1400 audit(1759430850.147:1276): avc:  denied  { setopt } for  pid=23777 comm="syz.1.5021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[ 1382.063948][T23780] new mount options do not match the existing superblock, will be ignored
[ 1382.094417][T23780] loop6: detected capacity change from 0 to 2560
[ 1382.107171][T23780] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1382.116997][T23780] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1382.125669][T23780] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1382.134155][T23780] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1382.145238][T23780] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1382.154799][T23780] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1382.163322][T23780] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1382.171679][T23780] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1382.179867][T23780] ldm_validate_partition_table(): Disk read failed.
[ 1382.222567][T23780] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1382.231360][T23780] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1382.239554][T23780] Dev loop6: unable to read RDB block 0
[ 1382.245585][T23780]  loop6: unable to read partition table
[ 1382.253283][T23780] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³˜) failed (rc=-5)
[ 1382.289351][T12037] usb 9-1: new full-speed USB device number 25 using dummy_hcd
[ 1382.322389][T12037] usb 9-1: device descriptor read/8, error -71
[ 1382.408040][T23783] netlink: 276 bytes leftover after parsing attributes in process `syz.4.5022'.
[ 1382.490692][ T5902] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[ 1382.534531][ T5902] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32
[ 1382.566064][ T5902] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[ 1382.580231][ T5902] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -32
[ 1382.593612][T12037] usb 9-1: new full-speed USB device number 26 using dummy_hcd
[ 1382.604883][T23785] syz_tun: entered allmulticast mode
[ 1382.612509][T23785] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[ 1382.622819][T12037] usb 9-1: device descriptor read/8, error -71
[ 1382.636838][T23785] lo speed is unknown, defaulting to 1000
[ 1382.768661][   T30] audit: type=1400 audit(1759430850.933:1277): avc:  denied  { unmount } for  pid=15405 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 1382.772292][T12037] usb usb9-port1: unable to enumerate USB device
[ 1382.873825][T23784] syz_tun: left allmulticast mode
[ 1383.861356][   T30] audit: type=1400 audit(1759430851.952:1278): avc:  denied  { compute_member } for  pid=23803 comm="syz.2.5027" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[ 1383.928500][ T5902] usb 8-1: USB disconnect, device number 50
[ 1384.085977][T23817] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5032'.
[ 1384.106793][    T9] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[ 1384.470347][ T5902] usb 8-1: new high-speed USB device number 51 using dummy_hcd
[ 1384.785692][    T9] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[ 1384.801650][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1384.809968][    T9] usb 5-1: Product: syz
[ 1384.820340][    T9] usb 5-1: Manufacturer: syz
[ 1384.825231][    T9] usb 5-1: SerialNumber: syz
[ 1384.832573][    T9] r8152-cfgselector 5-1: Unknown version 0x0000
[ 1384.839961][    T9] r8152-cfgselector 5-1: config 0 descriptor??
[ 1384.844368][ T5902] usb 8-1: Using ep0 maxpacket: 16
[ 1384.868092][ T5902] usb 8-1: config 8 has an invalid interface number: 206 but max is 0
[ 1384.886191][ T5902] usb 8-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[ 1384.903354][ T5902] usb 8-1: config 8 has no interface number 0
[ 1384.909728][ T5902] usb 8-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87
[ 1384.927748][ T5902] usb 8-1: config 8 interface 206 altsetting 1 endpoint 0x87 has an invalid bInterval 0, changing to 7
[ 1384.955435][ T5902] usb 8-1: config 8 interface 206 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1384.980376][ T5902] usb 8-1: config 8 interface 206 has no altsetting 0
[ 1384.995807][ T5902] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb
[ 1385.008245][ T5902] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1385.017067][ T5902] usb 8-1: Product: syz
[ 1385.021335][ T5902] usb 8-1: Manufacturer: syz
[ 1385.025937][ T5902] usb 8-1: SerialNumber: syz
[ 1385.040817][T23826] FAULT_INJECTION: forcing a failure.
[ 1385.040817][T23826] name failslab, interval 1, probability 0, space 0, times 0
[ 1385.053887][T23826] CPU: 1 UID: 0 PID: 23826 Comm: syz.8.5035 Not tainted syzkaller #0 PREEMPT(full) 
[ 1385.053913][T23826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1385.053928][T23826] Call Trace:
[ 1385.053935][T23826]  <TASK>
[ 1385.053943][T23826]  dump_stack_lvl+0x16c/0x1f0
[ 1385.053974][T23826]  should_fail_ex+0x512/0x640
[ 1385.053995][T23826]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[ 1385.054030][T23826]  should_failslab+0xc2/0x120
[ 1385.054047][T23826]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[ 1385.054073][T23826]  ? __alloc_skb+0x2b2/0x380
[ 1385.054098][T23826]  __alloc_skb+0x2b2/0x380
[ 1385.054118][T23826]  ? __pfx___alloc_skb+0x10/0x10
[ 1385.054141][T23826]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[ 1385.054172][T23826]  netlink_alloc_large_skb+0x69/0x130
[ 1385.054200][T23826]  netlink_sendmsg+0x6a1/0xdd0
[ 1385.054229][T23826]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1385.054263][T23826]  ____sys_sendmsg+0xa95/0xc70
[ 1385.054281][T23826]  ? copy_msghdr_from_user+0x10a/0x160
[ 1385.054304][T23826]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1385.054333][T23826]  ___sys_sendmsg+0x134/0x1d0
[ 1385.054358][T23826]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1385.054411][T23826]  __sys_sendmsg+0x16d/0x220
[ 1385.054434][T23826]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1385.054473][T23826]  do_syscall_64+0xcd/0x4e0
[ 1385.054500][T23826]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1385.054518][T23826] RIP: 0033:0x7fcd69f8eec9
[ 1385.054534][T23826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1385.054550][T23826] RSP: 002b:00007fcd6add6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1385.054568][T23826] RAX: ffffffffffffffda RBX: 00007fcd6a1e5fa0 RCX: 00007fcd69f8eec9
[ 1385.054580][T23826] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000006
[ 1385.054591][T23826] RBP: 00007fcd6add6090 R08: 0000000000000000 R09: 0000000000000000
[ 1385.054603][T23826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1385.054614][T23826] R13: 00007fcd6a1e6038 R14: 00007fcd6a1e5fa0 R15: 00007ffc61642548
[ 1385.054639][T23826]  </TASK>
[ 1385.399484][T23829] FAULT_INJECTION: forcing a failure.
[ 1385.399484][T23829] name failslab, interval 1, probability 0, space 0, times 0
[ 1385.418799][T23829] CPU: 0 UID: 0 PID: 23829 Comm: syz.8.5036 Not tainted syzkaller #0 PREEMPT(full) 
[ 1385.418828][T23829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1385.418839][T23829] Call Trace:
[ 1385.418845][T23829]  <TASK>
[ 1385.418853][T23829]  dump_stack_lvl+0x16c/0x1f0
[ 1385.418886][T23829]  should_fail_ex+0x512/0x640
[ 1385.418933][T23829]  ? fs_reclaim_acquire+0xae/0x150
[ 1385.418955][T23829]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[ 1385.418977][T23829]  should_failslab+0xc2/0x120
[ 1385.418995][T23829]  __kmalloc_noprof+0xd2/0x510
[ 1385.419018][T23829]  ? kernel_text_address+0x8d/0x100
[ 1385.419047][T23829]  tomoyo_realpath_from_path+0xc2/0x6e0
[ 1385.419074][T23829]  ? tomoyo_profile+0x47/0x60
[ 1385.419102][T23829]  tomoyo_path_number_perm+0x245/0x580
[ 1385.419120][T23829]  ? tomoyo_path_number_perm+0x237/0x580
[ 1385.419141][T23829]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1385.419163][T23829]  ? __pfx__kstrtoull+0x10/0x10
[ 1385.419196][T23829]  ? find_held_lock+0x2b/0x80
[ 1385.419244][T23829]  ? from_kuid+0x8d/0xd0
[ 1385.419271][T23829]  ? __pfx_from_kuid+0x10/0x10
[ 1385.419301][T23829]  tomoyo_path_chown+0x173/0x1b0
[ 1385.419327][T23829]  ? __pfx_tomoyo_path_chown+0x10/0x10
[ 1385.419355][T23829]  ? from_vfsuid+0xea/0x140
[ 1385.419377][T23829]  ? __pfx_from_vfsuid+0x10/0x10
[ 1385.419402][T23829]  security_path_chown+0x12a/0x2e0
[ 1385.419424][T23829]  chown_common+0x3d3/0x680
[ 1385.419450][T23829]  ? __pfx_chown_common+0x10/0x10
[ 1385.419470][T23829]  ? find_held_lock+0x2b/0x80
[ 1385.419501][T23829]  ? mnt_get_write_access+0x20c/0x300
[ 1385.419529][T23829]  ksys_fchown+0x11a/0x190
[ 1385.419550][T23829]  __x64_sys_fchown+0x72/0xb0
[ 1385.419567][T23829]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1385.419592][T23829]  do_syscall_64+0xcd/0x4e0
[ 1385.419619][T23829]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1385.419641][T23829] RIP: 0033:0x7fcd69f8eec9
[ 1385.419658][T23829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1385.419675][T23829] RSP: 002b:00007fcd6add6038 EFLAGS: 00000246 ORIG_RAX: 000000000000005d
[ 1385.419692][T23829] RAX: ffffffffffffffda RBX: 00007fcd6a1e5fa0 RCX: 00007fcd69f8eec9
[ 1385.419703][T23829] RDX: 0000000000000000 RSI: 000000000000ee00 RDI: 0000000000000003
[ 1385.419714][T23829] RBP: 00007fcd6add6090 R08: 0000000000000000 R09: 0000000000000000
[ 1385.419725][T23829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1385.419736][T23829] R13: 00007fcd6a1e6038 R14: 00007fcd6a1e5fa0 R15: 00007ffc61642548
[ 1385.419762][T23829]  </TASK>
[ 1385.443932][T23829] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1385.818793][ T5902] garmin_gps 8-1:8.206: Garmin GPS usb/tty converter detected
[ 1385.827670][ T5902] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8
[ 1385.865119][ T5902] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8
[ 1385.880349][ T5902] usb 8-1: USB disconnect, device number 51
[ 1385.887365][ T5902] garmin_gps 8-1:8.206: device disconnected
[ 1385.937731][ T5965] r8152-cfgselector 5-1: USB disconnect, device number 44
[ 1386.074123][    T9] usb 9-1: new full-speed USB device number 27 using dummy_hcd
[ 1386.234405][    T9] usb 9-1: device descriptor read/64, error -71
[ 1386.440534][T23849] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5041'.
[ 1386.454962][T23849] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5041'.
[ 1386.465284][T23849] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5041'.
[ 1386.474400][T23849] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5041'.
[ 1386.565834][    T9] usb 9-1: new full-speed USB device number 28 using dummy_hcd
[ 1386.788784][    T9] usb 9-1: device descriptor read/64, error -71
[ 1387.352055][    T9] usb usb9-port1: attempt power cycle
[ 1387.720224][    T9] usb 9-1: new full-speed USB device number 29 using dummy_hcd
[ 1387.762511][    T9] usb 9-1: device descriptor read/8, error -71
[ 1387.804992][   T30] audit: type=1400 audit(1759430855.638:1279): avc:  granted  { setsecparam } for  pid=23869 comm="syz.4.5047" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[ 1387.861195][T23877] FAULT_INJECTION: forcing a failure.
[ 1387.861195][T23877] name failslab, interval 1, probability 0, space 0, times 0
[ 1387.875166][T23877] CPU: 1 UID: 0 PID: 23877 Comm: syz.4.5048 Not tainted syzkaller #0 PREEMPT(full) 
[ 1387.875192][T23877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1387.875203][T23877] Call Trace:
[ 1387.875210][T23877]  <TASK>
[ 1387.875217][T23877]  dump_stack_lvl+0x16c/0x1f0
[ 1387.875247][T23877]  should_fail_ex+0x512/0x640
[ 1387.875268][T23877]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[ 1387.875296][T23877]  should_failslab+0xc2/0x120
[ 1387.875312][T23877]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[ 1387.875335][T23877]  ? __alloc_skb+0x2b2/0x380
[ 1387.875356][T23877]  ? avc_has_perm+0x144/0x1f0
[ 1387.875384][T23877]  __alloc_skb+0x2b2/0x380
[ 1387.875405][T23877]  ? __pfx___alloc_skb+0x10/0x10
[ 1387.875426][T23877]  ? selinux_socket_getpeersec_dgram+0x1a4/0x370
[ 1387.875447][T23877]  ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10
[ 1387.875475][T23877]  netlink_alloc_large_skb+0x69/0x130
[ 1387.875502][T23877]  netlink_sendmsg+0x6a1/0xdd0
[ 1387.875532][T23877]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1387.875566][T23877]  ____sys_sendmsg+0xa95/0xc70
[ 1387.875585][T23877]  ? copy_msghdr_from_user+0x10a/0x160
[ 1387.875609][T23877]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1387.875638][T23877]  ___sys_sendmsg+0x134/0x1d0
[ 1387.875663][T23877]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1387.875717][T23877]  __sys_sendmsg+0x16d/0x220
[ 1387.875741][T23877]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1387.875781][T23877]  do_syscall_64+0xcd/0x4e0
[ 1387.875807][T23877]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1387.875826][T23877] RIP: 0033:0x7faf4b18eec9
[ 1387.875841][T23877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1387.875858][T23877] RSP: 002b:00007faf493ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1387.875877][T23877] RAX: ffffffffffffffda RBX: 00007faf4b3e5fa0 RCX: 00007faf4b18eec9
[ 1387.875889][T23877] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[ 1387.875906][T23877] RBP: 00007faf493ee090 R08: 0000000000000000 R09: 0000000000000000
[ 1387.875917][T23877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1387.875927][T23877] R13: 00007faf4b3e6038 R14: 00007faf4b3e5fa0 R15: 00007ffdbead5828
[ 1387.875951][T23877]  </TASK>
[ 1388.104882][   T30] audit: type=1400 audit(1759430855.638:1280): avc:  granted  { setsecparam } for  pid=23869 comm="syz.4.5047" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[ 1388.124191][   T30] audit: type=1400 audit(1759430855.666:1281): avc:  granted  { setsecparam } for  pid=23869 comm="syz.4.5047" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[ 1388.143537][   T30] audit: type=1400 audit(1759430855.666:1282): avc:  granted  { setsecparam } for  pid=23869 comm="syz.4.5047" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[ 1388.184605][T23873] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5046'.
[ 1388.245149][    T9] usb 9-1: new full-speed USB device number 30 using dummy_hcd
[ 1388.282649][    T9] usb 9-1: device descriptor read/8, error -71
[ 1388.307122][T23882] bridge0: entered promiscuous mode
[ 1388.339973][T23882] macvlan2: entered promiscuous mode
[ 1388.417699][    T9] usb usb9-port1: unable to enumerate USB device
[ 1388.532695][ T5965] usb 5-1: new full-speed USB device number 45 using dummy_hcd
[ 1388.823289][ T5965] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[ 1388.843056][ T5965] usb 5-1: config 0 has no interface number 0
[ 1388.852299][ T5965] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[ 1388.863085][ T5965] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1388.885567][ T5965] usb 5-1: config 0 descriptor??
[ 1388.894011][ T5965] usb 5-1: selecting invalid altsetting 1
[ 1388.923195][ T5965] dvb_ttusb_budget: ttusb_init_controller: error
[ 1388.946226][T21599] Bluetooth: hci4: unexpected event for opcode 0x203d
[ 1388.971154][ T5965] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[ 1389.162238][ T5965] DVB: Unable to find symbol cx22700_attach()
[ 1389.267094][ T5965] DVB: Unable to find symbol tda10046_attach()
[ 1389.323176][ T5965] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[ 1389.372722][T23911] FAULT_INJECTION: forcing a failure.
[ 1389.372722][T23911] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1389.392494][T23911] CPU: 1 UID: 0 PID: 23911 Comm: syz.8.5056 Not tainted syzkaller #0 PREEMPT(full) 
[ 1389.392512][T23911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1389.392519][T23911] Call Trace:
[ 1389.392523][T23911]  <TASK>
[ 1389.392529][T23911]  dump_stack_lvl+0x16c/0x1f0
[ 1389.392549][T23911]  should_fail_ex+0x512/0x640
[ 1389.392566][T23911]  _copy_from_user+0x2e/0xd0
[ 1389.392582][T23911]  core_sys_select+0x35b/0xc10
[ 1389.392603][T23911]  ? __pfx_core_sys_select+0x10/0x10
[ 1389.392634][T23911]  ? set_user_sigmask+0x21b/0x2b0
[ 1389.392648][T23911]  ? __pfx_set_user_sigmask+0x10/0x10
[ 1389.392665][T23911]  do_pselect.constprop.0+0x19f/0x1e0
[ 1389.392684][T23911]  ? __pfx_do_pselect.constprop.0+0x10/0x10
[ 1389.392707][T23911]  __x64_sys_pselect6+0x182/0x240
[ 1389.392724][T23911]  ? __pfx___x64_sys_pselect6+0x10/0x10
[ 1389.392746][T23911]  do_syscall_64+0xcd/0x4e0
[ 1389.392764][T23911]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1389.392775][T23911] RIP: 0033:0x7fcd69f8eec9
[ 1389.392785][T23911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1389.392796][T23911] RSP: 002b:00007fcd6adb5038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e
[ 1389.392808][T23911] RAX: ffffffffffffffda RBX: 00007fcd6a1e6090 RCX: 00007fcd69f8eec9
[ 1389.392815][T23911] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040
[ 1389.392822][T23911] RBP: 00007fcd6adb5090 R08: 0000000000000000 R09: 0000000000000000
[ 1389.392828][T23911] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001
[ 1389.392835][T23911] R13: 00007fcd6a1e6128 R14: 00007fcd6a1e6090 R15: 00007ffc61642548
[ 1389.392849][T23911]  </TASK>
[ 1389.697940][ T5935] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[ 1389.837023][ T5935] usb 2-1: device descriptor read/64, error -71
[ 1390.093646][ T5935] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[ 1390.125578][ T5965] usb 8-1: new high-speed USB device number 52 using dummy_hcd
[ 1390.235539][T23931] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad)
[ 1390.245736][T23931] PKCS7: Only support pkcs7_signedData type
[ 1390.285920][ T5935] usb 2-1: device descriptor read/64, error -71
[ 1390.317994][ T5965] usb 8-1: Using ep0 maxpacket: 32
[ 1390.730599][   T30] audit: type=1400 audit(1759430858.378:1283): avc:  denied  { ioctl } for  pid=23906 comm="syz.1.5055" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1390.755622][ T5935] usb usb2-port1: attempt power cycle
[ 1390.772095][   T30] audit: type=1400 audit(1759430858.416:1284): avc:  denied  { ioctl } for  pid=23906 comm="syz.1.5055" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1390.802366][   T30] audit: type=1400 audit(1759430858.453:1285): avc:  denied  { ioctl } for  pid=23916 comm="syz.7.5058" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1390.807871][ T5965] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1390.837959][   T30] audit: type=1400 audit(1759430858.453:1286): avc:  denied  { ioctl } for  pid=23916 comm="syz.7.5058" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1390.875671][ T5965] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1390.893218][ T5965] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1390.913530][ T5965] usb 8-1: Product: syz
[ 1390.918385][ T5965] usb 8-1: Manufacturer: syz
[ 1390.925332][ T5965] usb 8-1: SerialNumber: syz
[ 1390.938822][ T5965] usb 8-1: config 0 descriptor??
[ 1390.947833][   T30] audit: type=1400 audit(1759430858.584:1287): avc:  denied  { ioctl } for  pid=23916 comm="syz.7.5058" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1390.979049][T23918] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22
[ 1390.997505][ T5965] hub 8-1:0.0: bad descriptor, ignoring hub
[ 1391.009677][ T5965] hub 8-1:0.0: probe with driver hub failed with error -5
[ 1391.086402][   T30] audit: type=1400 audit(1759430858.715:1288): avc:  denied  { read write } for  pid=19995 comm="syz-executor" name="loop8" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1391.195137][ T5935] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[ 1391.223018][ T5935] usb 2-1: device descriptor read/8, error -71
[ 1391.398685][   T24] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[ 1391.875771][ T5935] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[ 1391.913965][ T5965] usb 5-1: USB disconnect, device number 45
[ 1391.934735][ T5935] usb 2-1: device descriptor read/8, error -71
[ 1392.051003][ T5935] usb usb2-port1: unable to enumerate USB device
[ 1392.057426][   T24] usb 3-1: Using ep0 maxpacket: 16
[ 1392.067699][   T24] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[ 1392.077827][   T24] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[ 1392.086119][   T24] usb 3-1: Product: syz
[ 1392.231973][   T24] usb 3-1: Manufacturer: syz
[ 1392.236637][   T24] usb 3-1: SerialNumber: syz
[ 1392.251587][   T24] usb 3-1: config 0 descriptor??
[ 1393.081221][T23954] comedi comedi3: 8255: I/O port conflict (0x40404f26,4)
[ 1393.090266][T23954] comedi comedi3: 8255: I/O port conflict (0x5,4)
[ 1393.097060][T23954] comedi comedi3: 8255: I/O port conflict (0x2,4)
[ 1393.104217][T23954] comedi comedi3: 8255: I/O port conflict (0xc,4)
[ 1393.111000][T23954] comedi comedi3: 8255: I/O port conflict (0x9,4)
[ 1393.117936][T23954] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4)
[ 1393.125325][T23954] comedi comedi3: 8255: I/O port conflict (0x5,4)
[ 1393.132888][T23954] comedi comedi3: 8255: I/O port conflict (0x1,4)
[ 1393.139729][T23954] comedi comedi3: 8255: I/O port conflict (0x20000001,4)
[ 1393.147118][T23954] comedi comedi3: 8255: I/O port conflict (0x9,4)
[ 1393.155039][T23954] comedi comedi3: 8255: I/O port conflict (0x6,4)
[ 1393.155962][   T30] kauditd_printk_skb: 76 callbacks suppressed
[ 1393.155973][   T30] audit: type=1400 audit(1759430860.558:1365): avc:  denied  { read append } for  pid=23935 comm="syz.2.5064" name="comedi3" dev="devtmpfs" ino=1278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1393.394411][   T30] audit: type=1400 audit(1759430860.558:1366): avc:  denied  { open } for  pid=23935 comm="syz.2.5064" path="/dev/comedi3" dev="devtmpfs" ino=1278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1393.423581][   T30] audit: type=1400 audit(1759430860.567:1367): avc:  denied  { ioctl } for  pid=23935 comm="syz.2.5064" path="/dev/comedi3" dev="devtmpfs" ino=1278 ioctlcmd=0x6400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1393.448444][   T30] audit: type=1400 audit(1759430860.670:1368): avc:  denied  { read write } for  pid=15405 comm="syz-executor" name="loop1" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1393.500113][   T30] audit: type=1400 audit(1759430860.670:1369): avc:  denied  { open } for  pid=15405 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1393.537455][ T5965] usb 3-1: USB disconnect, device number 42
[ 1393.564923][   T30] audit: type=1400 audit(1759430860.670:1370): avc:  denied  { ioctl } for  pid=15405 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1393.637463][   T30] audit: type=1400 audit(1759430860.904:1371): avc:  denied  { read write } for  pid=19995 comm="syz-executor" name="loop8" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1393.663020][   T30] audit: type=1400 audit(1759430860.904:1372): avc:  denied  { read write open } for  pid=19995 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1393.688785][   T30] audit: type=1400 audit(1759430860.904:1373): avc:  denied  { ioctl } for  pid=19995 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1393.714706][   T30] audit: type=1400 audit(1759430860.969:1374): avc:  denied  { create } for  pid=23935 comm="syz.2.5064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1393.780007][T12037] usb 8-1: USB disconnect, device number 52
[ 1394.317850][   T24] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[ 1394.496849][   T24] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[ 1394.506338][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1394.516923][   T24] usb 2-1: Product: syz
[ 1394.527211][   T24] usb 2-1: Manufacturer: syz
[ 1394.534229][   T24] usb 2-1: SerialNumber: syz
[ 1394.595411][   T24] usb 2-1: config 0 descriptor??
[ 1394.605351][ T5935] usb 9-1: new high-speed USB device number 31 using dummy_hcd
[ 1394.639607][   T24] hub 2-1:0.0: bad descriptor, ignoring hub
[ 1394.648238][T21599] Bluetooth: hci5: SCO packet for unknown connection handle 200
[ 1394.648314][T21599] Bluetooth: hci5: SCO packet for unknown connection handle 201
[ 1394.656177][T21599] Bluetooth: hci5: ACL packet for unknown connection handle 200
[ 1394.682128][   T24] hub 2-1:0.0: probe with driver hub failed with error -5
[ 1394.797588][ T5935] usb 9-1: Using ep0 maxpacket: 32
[ 1395.098650][ T5935] usb 9-1: config 0 has an invalid interface number: 129 but max is 0
[ 1395.111587][   T24] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware
[ 1395.140101][T23958] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5068'.
[ 1395.175769][ T5935] usb 9-1: config 0 has no interface number 0
[ 1395.203647][ T5935] usb 9-1: New USB device found, idVendor=2040, idProduct=7210, bcdDevice=5b.0c
[ 1395.251457][   T24] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[ 1395.272486][ T5935] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1395.381694][T23982] ptrace attach of "./syz-executor exec"[16323] was attempted by "./syz-executor exec"[23982]
[ 1395.597887][ T5935] usb 9-1: Product: syz
[ 1395.610655][   T24] dib0700: firmware download failed at 7 with -22
[ 1395.635331][ T5935] usb 9-1: Manufacturer: syz
[ 1395.649252][ T5935] usb 9-1: SerialNumber: syz
[ 1395.927219][ T5935] usb 9-1: config 0 descriptor??
[ 1396.003893][T23984] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22
[ 1396.240651][ T5965] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[ 1396.411686][ T5965] usb 3-1: Using ep0 maxpacket: 16
[ 1396.426427][ T5965] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1396.675181][ T5965] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1396.760328][ T5965] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1396.812190][ T5965] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1396.834148][ T5965] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1396.854214][ T5965] usb 3-1: config 0 descriptor??
[ 1397.191369][T24000] netlink: 56 bytes leftover after parsing attributes in process `syz.7.5082'.
[ 1397.200454][T24000] netlink: 56 bytes leftover after parsing attributes in process `syz.7.5082'.
[ 1397.313157][T24000] ubi31: attaching mtd0
[ 1397.329329][T24000] ubi31: scanning is finished
[ 1397.334123][T24000] ubi31: empty MTD device detected
[ 1397.530563][ T1799] usb 2-1: USB disconnect, device number 58
[ 1397.603884][T24000] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[ 1397.611519][T24000] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[ 1397.618798][T24000] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[ 1397.625872][T24000] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[ 1397.633370][T24000] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[ 1397.640207][T24000] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[ 1397.648311][T24000] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3479307057
[ 1397.658399][T24000] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[ 1397.669895][T24001] ubi31: background thread "ubi_bgt31d" started, PID 24001
[ 1397.672244][ T5965] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0
[ 1397.691717][ T5965] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0
[ 1397.699064][ T5965] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0
[ 1397.716013][ T5965] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0016/input/input16
[ 1397.860323][ T5965] microsoft 0003:045E:07DA.0016: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[ 1399.011655][   T30] kauditd_printk_skb: 226 callbacks suppressed
[ 1399.011689][   T30] audit: type=1400 audit(1759430866.133:1601): avc:  denied  { read write } for  pid=16323 comm="syz-executor" name="loop2" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1399.055674][   T30] audit: type=1400 audit(1759430866.133:1602): avc:  denied  { read write open } for  pid=16323 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1399.133051][   T30] audit: type=1400 audit(1759430866.133:1603): avc:  denied  { ioctl } for  pid=16323 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1399.201257][   T30] audit: type=1400 audit(1759430866.301:1604): avc:  denied  { read write } for  pid=24011 comm="syz.4.5086" name="virtual_nci" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1399.216363][T21599] Bluetooth: hci4: SCO packet for unknown connection handle 200
[ 1399.236205][T21599] Bluetooth: hci4: SCO packet for unknown connection handle 201
[ 1399.248719][T21599] Bluetooth: hci4: ACL packet for unknown connection handle 200
[ 1399.281550][   T30] audit: type=1400 audit(1759430866.301:1606): avc:  denied  { create } for  pid=24010 comm="syz.2.5085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[ 1399.347134][   T30] audit: type=1400 audit(1759430866.301:1607): avc:  denied  { write } for  pid=24010 comm="syz.2.5085" path="/dev/vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[ 1399.373050][   T30] audit: type=1400 audit(1759430866.301:1605): avc:  denied  { open } for  pid=24011 comm="syz.4.5086" path="/dev/virtual_nci" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1399.445179][   T30] audit: type=1400 audit(1759430866.348:1608): avc:  denied  { write } for  pid=24010 comm="syz.2.5085" path="/dev/vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[ 1399.482635][   T30] audit: type=1400 audit(1759430866.357:1609): avc:  denied  { read write } for  pid=24011 comm="syz.4.5086" name="raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1399.508624][   T30] audit: type=1400 audit(1759430866.357:1610): avc:  denied  { open } for  pid=24011 comm="syz.4.5086" path="/dev/raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1399.560088][ T5889] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[ 1399.726820][ T5889] usb 5-1: Using ep0 maxpacket: 32
[ 1399.763374][ T5889] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[ 1399.763772][ T5935] usb 9-1: USB disconnect, device number 31
[ 1399.786372][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1399.839392][ T5889] usb 5-1: Product: syz
[ 1399.860065][ T5889] usb 5-1: Manufacturer: syz
[ 1399.872820][    C1] sd 0:0:1:0: [sda] tag#755 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 1399.875938][ T5889] usb 5-1: SerialNumber: syz
[ 1399.883234][    C1] sd 0:0:1:0: [sda] tag#755 CDB: Write(6) 0a 00 00 00 00 00 00 00 fe 80 00 00
[ 1399.891292][ T5889] usb 5-1: config 0 descriptor??
[ 1399.910380][ T5889] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[ 1400.123953][T24030] ptrace attach of "./syz-executor exec"[19995] was attempted by "./syz-executor exec"[24030]
[ 1400.161317][T12037] usb 3-1: USB disconnect, device number 43
[ 1400.211443][T24030] netlink: 332 bytes leftover after parsing attributes in process `syz.8.5090'.
[ 1400.222262][T24030] netlink: 160 bytes leftover after parsing attributes in process `syz.8.5090'.
[ 1400.516895][T12037] usb 3-1: new full-speed USB device number 44 using dummy_hcd
[ 1400.678913][T12037] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1400.703358][T12037] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[ 1400.753294][T12037] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1400.766533][T12037] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1400.777002][T12037] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1401.083133][T24045] /dev/sg0: Can't lookup blockdev
[ 1401.126462][T12037] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -22
[ 1401.174389][T24047] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22
[ 1401.692889][T24054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1401.701444][T24054] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1401.710744][T24054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1401.719319][T24054] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1401.925529][T24015] lo speed is unknown, defaulting to 1000
[ 1402.056449][ T5889] gspca_ov534_9: reg_w failed -110
[ 1402.387856][ T5889] gspca_ov534_9: Unknown sensor 0000
[ 1402.387921][ T5889] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22
[ 1402.577146][T21599] Bluetooth: hci3: unexpected event for opcode 0x0c22
[ 1403.009926][ T5889] usb 3-1: USB disconnect, device number 44
[ 1403.453243][ T5935] usb 5-1: USB disconnect, device number 46
[ 1404.656901][   T30] kauditd_printk_skb: 283 callbacks suppressed
[ 1404.656919][   T30] audit: type=1400 audit(1759430871.128:1894): avc:  denied  { create } for  pid=24088 comm="syz.8.5105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1404.728892][   T30] audit: type=1400 audit(1759430871.128:1895): avc:  denied  { connect } for  pid=24088 comm="syz.8.5105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1404.761157][   T30] audit: type=1400 audit(1759430871.128:1896): avc:  denied  { name_connect } for  pid=24088 comm="syz.8.5105" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[ 1404.790061][   T30] audit: type=1400 audit(1759430871.128:1897): avc:  denied  { listen } for  pid=24088 comm="syz.8.5105" lport=59024 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1404.832125][T24097] netlink: 'syz.7.5107': attribute type 13 has an invalid length.
[ 1404.839864][   T30] audit: type=1400 audit(1759430871.128:1898): avc:  denied  { accept } for  pid=24088 comm="syz.8.5105" lport=59024 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1404.873901][   T30] audit: type=1400 audit(1759430871.128:1899): avc:  denied  { write } for  pid=24088 comm="syz.8.5105" lport=59024 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[ 1404.915135][   T30] audit: type=1400 audit(1759430871.128:1900): avc:  denied  { setopt } for  pid=24088 comm="syz.8.5105" lport=59024 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[ 1405.157288][   T30] audit: type=1400 audit(1759430871.380:1901): avc:  denied  { read write } for  pid=15405 comm="syz-executor" name="loop1" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1405.454196][   T30] audit: type=1400 audit(1759430871.380:1902): avc:  denied  { open } for  pid=15405 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1405.514587][   T30] audit: type=1400 audit(1759430871.380:1903): avc:  denied  { ioctl } for  pid=15405 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1405.669915][ T5889] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[ 1405.822688][T24117] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22
[ 1405.843352][ T5889] usb 3-1: Using ep0 maxpacket: 16
[ 1405.906076][ T5889] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b
[ 1405.923924][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[ 1405.947328][ T5889] usb 3-1: Product: syz
[ 1405.958918][ T5889] usb 3-1: SerialNumber: syz
[ 1405.967680][ T5889] usb 3-1: config 0 descriptor??
[ 1405.986934][ T5889] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[ 1406.691937][ T5889] dvb_usb_af9015 3-1:0.0: probe with driver dvb_usb_af9015 failed with error -22
[ 1406.718270][ T5889] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[ 1406.724722][ T5889] dvb_usb_af9035 3-1:0.0: probe with driver dvb_usb_af9035 failed with error -22
[ 1406.974655][T24103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5110'.
[ 1407.685671][T24138] sctp: [Deprecated]: syz.7.5115 (pid 24138) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1407.685671][T24138] Use struct sctp_sack_info instead
[ 1409.923660][T18400] usb 3-1: USB disconnect, device number 45
[ 1410.012081][   T30] kauditd_printk_skb: 178 callbacks suppressed
[ 1410.012093][   T30] audit: type=1400 audit(1759430876.422:2082): avc:  denied  { read write } for  pid=15405 comm="syz-executor" name="loop1" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1410.060390][   T30] audit: type=1400 audit(1759430876.450:2083): avc:  denied  { read write open } for  pid=15405 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1410.087750][   T30] audit: type=1400 audit(1759430876.450:2084): avc:  denied  { ioctl } for  pid=15405 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1410.170426][   T30] audit: type=1400 audit(1759430876.563:2085): avc:  denied  { create } for  pid=24158 comm="syz.4.5122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1410.410172][   T30] audit: type=1400 audit(1759430876.572:2086): avc:  denied  { map_create } for  pid=24159 comm="syz.8.5121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1410.429957][   T30] audit: type=1400 audit(1759430876.572:2087): avc:  denied  { map_read map_write } for  pid=24159 comm="syz.8.5121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1410.475556][   T30] audit: type=1400 audit(1759430876.572:2088): avc:  denied  { prog_load } for  pid=24159 comm="syz.8.5121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1410.861686][   T30] audit: type=1400 audit(1759430876.572:2089): avc:  denied  { bpf } for  pid=24159 comm="syz.8.5121" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1410.906108][T24173] fuse: Bad value for 'fd'
[ 1410.909019][   T30] audit: type=1400 audit(1759430876.572:2090): avc:  denied  { perfmon } for  pid=24159 comm="syz.8.5121" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1410.957700][   T30] audit: type=1400 audit(1759430876.572:2091): avc:  denied  { prog_run } for  pid=24159 comm="syz.8.5121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1411.356583][T24175] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5126'.
[ 1411.430699][T24175] tmpfs: Bad value for 'mpol'
[ 1411.543034][T18400] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[ 1411.549588][ T1799] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[ 1411.721863][T18400] usb 2-1: too many configurations: 67, using maximum allowed: 8
[ 1411.752796][ T1799] usb 3-1: Using ep0 maxpacket: 32
[ 1411.758333][T18400] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1411.768306][ T1799] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[ 1411.782770][T18400] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1411.783322][ T1799] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1411.791035][T18400] usb 2-1: Product: syz
[ 1411.803310][T18400] usb 2-1: Manufacturer: syz
[ 1411.808887][T18400] usb 2-1: SerialNumber: syz
[ 1411.810257][ T1799] usb 3-1: Product: syz
[ 1411.818232][ T1799] usb 3-1: Manufacturer: syz
[ 1411.822872][ T1799] usb 3-1: SerialNumber: syz
[ 1411.825472][T18400] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1411.838194][   T24] usb 8-1: new full-speed USB device number 53 using dummy_hcd
[ 1411.838749][ T5889] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[ 1411.854438][ T1799] usb 3-1: config 0 descriptor??
[ 1411.866236][ T1799] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[ 1411.866978][T12037] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1411.998827][   T24] usb 8-1: device descriptor read/64, error -71
[ 1412.041487][ T5889] usb 5-1: Using ep0 maxpacket: 16
[ 1412.058006][ T5889] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[ 1412.067429][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[ 1412.076767][ T5889] usb 5-1: Product: syz
[ 1412.081516][ T5889] usb 5-1: Manufacturer: syz
[ 1412.086640][ T5889] usb 5-1: SerialNumber: syz
[ 1412.108963][ T5889] usb 5-1: config 0 descriptor??
[ 1412.276887][   T24] usb 8-1: new full-speed USB device number 54 using dummy_hcd
[ 1412.474914][ T1799] gspca_topro: reg_w err -110
[ 1412.504913][T24186] comedi comedi3: 8255: I/O port conflict (0x40404f26,4)
[ 1412.512589][T24186] comedi comedi3: 8255: I/O port conflict (0x5,4)
[ 1412.521043][T24186] comedi comedi3: 8255: I/O port conflict (0x2,4)
[ 1412.529410][T24186] comedi comedi3: 8255: I/O port conflict (0xc,4)
[ 1412.536401][T24186] comedi comedi3: 8255: I/O port conflict (0x9,4)
[ 1412.543322][T24186] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4)
[ 1412.550984][T24186] comedi comedi3: 8255: I/O port conflict (0x5,4)
[ 1412.569667][T24186] comedi comedi3: 8255: I/O port conflict (0x1,4)
[ 1412.580401][T24186] comedi comedi3: 8255: I/O port conflict (0x20000001,4)
[ 1412.589080][T24186] comedi comedi3: 8255: I/O port conflict (0x9,4)
[ 1412.596383][T24186] comedi comedi3: 8255: I/O port conflict (0x6,4)
[ 1412.841070][   T24] usb 8-1: device descriptor read/64, error -71
[ 1412.929968][ T5889] usb 5-1: USB disconnect, device number 47
[ 1412.971571][ T1799] gspca_topro: Sensor soi763a
[ 1412.987610][ T1799] usb 3-1: USB disconnect, device number 46
[ 1413.057747][   T24] usb usb8-port1: attempt power cycle
[ 1413.270756][T12037] usb 2-1: Service connection timeout for: 256
[ 1413.276993][T12037] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services
[ 1413.301271][T12037] ath9k_htc: Failed to initialize the device
[ 1413.309504][T12037] usb 2-1: ath9k_htc: USB layer deinitialized
[ 1413.463397][   T24] usb 8-1: new full-speed USB device number 55 using dummy_hcd
[ 1413.486113][   T24] usb 8-1: device descriptor read/8, error -71
[ 1413.741225][   T24] usb 8-1: new full-speed USB device number 56 using dummy_hcd
[ 1413.763687][   T24] usb 8-1: device descriptor read/8, error -71
[ 1413.807760][ T5889] usb 5-1: new low-speed USB device number 48 using dummy_hcd
[ 1413.936766][   T24] usb usb8-port1: unable to enumerate USB device
[ 1413.989651][ T5889] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[ 1414.043176][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1414.076613][ T5889] usb 5-1: config 0 descriptor??
[ 1414.094291][   T24] usb 8-1: new full-speed USB device number 57 using dummy_hcd
[ 1414.314374][   T24] usb 8-1: device descriptor read/64, error -71
[ 1414.575000][   T24] usb 8-1: new full-speed USB device number 58 using dummy_hcd
[ 1414.660738][ T5965] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[ 1414.714190][   T24] usb 8-1: device descriptor read/64, error -71
[ 1414.845551][   T24] usb usb8-port1: attempt power cycle
[ 1415.023973][ T5965] usb 3-1: Using ep0 maxpacket: 16
[ 1415.041223][ T5965] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1415.053358][ T5965] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1415.070972][ T5965] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1415.121145][T24212] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5137'.
[ 1415.130210][ T5965] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1415.203302][ T5965] usb 3-1: config 0 descriptor??
[ 1415.363540][T24214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5132'.
[ 1415.372627][T24214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5132'.
[ 1415.775822][   T30] kauditd_printk_skb: 237 callbacks suppressed
[ 1415.775841][   T30] audit: type=1400 audit(1759430881.511:2329): avc:  denied  { allowed } for  pid=24211 comm="syz.7.5137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[ 1415.808648][   T30] audit: type=1400 audit(1759430881.511:2330): avc:  denied  { create } for  pid=24211 comm="syz.7.5137" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1415.868224][   T30] audit: type=1400 audit(1759430881.511:2331): avc:  denied  { map } for  pid=24211 comm="syz.7.5137" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=71616 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1415.995093][   T30] audit: type=1400 audit(1759430881.511:2332): avc:  denied  { read write } for  pid=24211 comm="syz.7.5137" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=71616 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1416.121192][   T30] audit: type=1400 audit(1759430881.801:2333): avc:  denied  { name_bind } for  pid=24211 comm="syz.7.5137" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[ 1416.155273][   T30] audit: type=1400 audit(1759430881.810:2334): avc:  denied  { prog_load } for  pid=24211 comm="syz.7.5137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1416.270753][    T9] usb 2-1: USB disconnect, device number 59
[ 1416.398230][   T30] audit: type=1400 audit(1759430881.810:2335): avc:  denied  { bpf } for  pid=24211 comm="syz.7.5137" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1416.446657][   T30] audit: type=1400 audit(1759430881.838:2336): avc:  denied  { read write } for  pid=19995 comm="syz-executor" name="loop8" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1416.471537][   T30] audit: type=1400 audit(1759430881.838:2337): avc:  denied  { open } for  pid=19995 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1416.504655][   T30] audit: type=1400 audit(1759430881.838:2338): avc:  denied  { ioctl } for  pid=19995 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1416.884663][    T9] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[ 1417.076581][    T9] usb 2-1: Using ep0 maxpacket: 8
[ 1417.162679][    T9] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[ 1417.188143][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1417.230585][    T9] usb 2-1: config 0 descriptor??
[ 1417.236961][ T5965] usbhid 3-1:0.0: can't add hid device: -71
[ 1417.265715][ T5965] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1417.285755][ T5965] usb 3-1: USB disconnect, device number 47
[ 1417.564158][    T9] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[ 1418.496815][ T5889] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[ 1418.547138][ T5889] asix 5-1:0.0: probe with driver asix failed with error -71
[ 1418.656835][ T5889] usb 5-1: USB disconnect, device number 48
[ 1418.890956][    T9] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[ 1418.902737][    T9] asix 2-1:0.0: probe with driver asix failed with error -71
[ 1418.920394][T24269] bond0: (slave macsec1): Error -34 calling dev_set_mtu
[ 1418.961175][    T9] usb 2-1: USB disconnect, device number 60
[ 1418.980786][T24273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5150'.
[ 1419.193548][ T1799] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[ 1419.497086][ T1799] usb 5-1: Using ep0 maxpacket: 8
[ 1419.505765][ T1799] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1419.516141][ T1799] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00
[ 1419.526197][ T1799] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1419.542603][ T1799] usb 5-1: config 0 descriptor??
[ 1419.960742][T24270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1419.971679][T24270] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1419.996565][ T1799] usbhid 5-1:0.0: can't add hid device: -71
[ 1420.002662][ T1799] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 1420.024117][ T1799] usb 5-1: USB disconnect, device number 49
[ 1420.696162][T24288] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22
[ 1421.282050][   T30] kauditd_printk_skb: 222 callbacks suppressed
[ 1421.282061][   T30] audit: type=1400 audit(1759430886.964:2561): avc:  denied  { read write } for  pid=16323 comm="syz-executor" name="loop2" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1421.312472][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1421.350585][T24307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5158'.
[ 1421.378018][   T30] audit: type=1400 audit(1759430886.992:2562): avc:  denied  { open } for  pid=16323 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1421.402230][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1421.421970][T24307] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5158'.
[ 1421.438831][T24307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5158'.
[ 1421.453755][T24307] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5158'.
[ 1421.518964][   T30] audit: type=1400 audit(1759430886.992:2563): avc:  denied  { ioctl } for  pid=16323 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1421.544705][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1421.872133][   T30] audit: type=1400 audit(1759430887.086:2564): avc:  denied  { read write } for  pid=15405 comm="syz-executor" name="loop1" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1422.070846][   T30] audit: type=1400 audit(1759430887.086:2565): avc:  denied  { open } for  pid=15405 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1422.594222][   T30] audit: type=1400 audit(1759430887.086:2566): avc:  denied  { ioctl } for  pid=15405 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1422.674833][   T30] audit: type=1400 audit(1759430887.142:2567): avc:  denied  { create } for  pid=24308 comm="syz.1.5159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[ 1422.708062][   T30] audit: type=1400 audit(1759430887.151:2568): avc:  denied  { bind } for  pid=24308 comm="syz.1.5159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[ 1423.363410][   T30] audit: type=1400 audit(1759430887.151:2569): avc:  denied  { setopt } for  pid=24308 comm="syz.1.5159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[ 1423.426845][   T30] audit: type=1400 audit(1759430887.151:2570): avc:  denied  { accept } for  pid=24308 comm="syz.1.5159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[ 1424.119498][T21599] Bluetooth: hci3: unexpected event for opcode 0x0c1c
[ 1425.067058][T24351] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5170'.
[ 1425.230356][T24351] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5170'.
[ 1425.792361][T24359] netlink: 92 bytes leftover after parsing attributes in process `syz.4.5168'.
[ 1425.887397][T24349] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5171'.
[ 1425.914255][T24362] syz_tun: entered allmulticast mode
[ 1425.926066][T24362] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[ 1426.049548][T24362] lo speed is unknown, defaulting to 1000
[ 1426.144669][T24360] syz_tun: left allmulticast mode
[ 1426.227822][T12037] usb 8-1: new high-speed USB device number 60 using dummy_hcd
[ 1426.452358][T12037] usb 8-1: Using ep0 maxpacket: 16
[ 1426.503894][T12037] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1426.532737][T12037] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1426.554798][T12037] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1426.578942][T12037] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1426.599978][T12037] usb 8-1: config 0 descriptor??
[ 1426.700442][   T30] kauditd_printk_skb: 219 callbacks suppressed
[ 1426.700456][   T30] audit: type=1400 audit(1759430892.034:2790): avc:  denied  { read write } for  pid=15405 comm="syz-executor" name="loop1" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1426.744675][   T30] audit: type=1400 audit(1759430892.034:2791): avc:  denied  { open } for  pid=15405 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1426.789670][T24368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5176'.
[ 1426.798780][T24368] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5176'.
[ 1426.819612][T24368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5176'.
[ 1426.836260][T24368] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5176'.
[ 1426.846747][   T30] audit: type=1400 audit(1759430892.034:2792): avc:  denied  { ioctl } for  pid=15405 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1426.980529][   T30] audit: type=1400 audit(1759430892.212:2793): avc:  denied  { read write } for  pid=15405 comm="syz-executor" name="loop1" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1427.030923][T24370] IPVS: Error joining to the multicast group
[ 1427.040269][   T30] audit: type=1400 audit(1759430892.212:2794): avc:  denied  { open } for  pid=15405 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1427.133087][   T30] audit: type=1400 audit(1759430892.221:2795): avc:  denied  { ioctl } for  pid=15405 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1427.190023][   T30] audit: type=1400 audit(1759430892.324:2796): avc:  denied  { create } for  pid=24369 comm="syz.1.5177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1427.222013][   T30] audit: type=1400 audit(1759430892.324:2797): avc:  denied  { create } for  pid=24369 comm="syz.1.5177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1427.243463][   T30] audit: type=1400 audit(1759430892.324:2798): avc:  denied  { write } for  pid=24369 comm="syz.1.5177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1427.265047][   T30] audit: type=1400 audit(1759430892.333:2799): avc:  denied  { read } for  pid=24369 comm="syz.1.5177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1428.228439][T12037] usbhid 8-1:0.0: can't add hid device: -71
[ 1428.239344][T12037] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[ 1428.506540][T12037] usb 8-1: USB disconnect, device number 60
[ 1428.575965][T24380] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5179'.
[ 1428.585587][T24380] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5179'.
[ 1429.507383][T21599] Bluetooth: hci4: unexpected event for opcode 0x0c1c
[ 1432.127234][   T30] kauditd_printk_skb: 165 callbacks suppressed
[ 1432.127250][   T30] audit: type=1400 audit(1759430897.104:2965): avc:  denied  { write } for  pid=24398 comm="syz.2.5185" path="socket:[72935]" dev="sockfs" ino=72935 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 1432.257831][   T30] audit: type=1400 audit(1759430897.132:2966): avc:  denied  { write } for  pid=24398 comm="syz.2.5185" path="socket:[72935]" dev="sockfs" ino=72935 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 1432.407173][   T30] audit: type=1400 audit(1759430897.216:2967): avc:  denied  { read write } for  pid=15572 comm="syz-executor" name="loop7" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1432.499234][T24423] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5189'.
[ 1432.524531][   T30] audit: type=1400 audit(1759430897.216:2968): avc:  denied  { open } for  pid=15572 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1432.557240][   T30] audit: type=1400 audit(1759430897.216:2969): avc:  denied  { ioctl } for  pid=15572 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1432.587725][   T30] audit: type=1400 audit(1759430897.328:2970): avc:  denied  { read write } for  pid=19995 comm="syz-executor" name="loop8" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1432.671533][   T30] audit: type=1400 audit(1759430897.328:2971): avc:  denied  { read write open } for  pid=19995 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1432.701355][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 1432.766828][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 1432.778902][T12037] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[ 1432.804746][   T30] audit: type=1400 audit(1759430897.328:2972): avc:  denied  { ioctl } for  pid=19995 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1432.831587][   T30] audit: type=1400 audit(1759430897.403:2973): avc:  denied  { prog_load } for  pid=24428 comm="syz.7.5191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1433.086696][   T30] audit: type=1400 audit(1759430897.403:2974): avc:  denied  { bpf } for  pid=24428 comm="syz.7.5191" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1433.247842][T12037] usb 5-1: Using ep0 maxpacket: 16
[ 1433.257718][T12037] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1433.330927][T12037] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1433.604223][T12037] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1433.613291][T12037] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1433.682004][T12037] usb 5-1: config 0 descriptor??
[ 1434.423059][T23324] Bluetooth: hci0: unexpected event for opcode 0x0c1c
[ 1434.699663][T12037] usbhid 5-1:0.0: can't add hid device: -71
[ 1434.721015][T12037] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 1434.888766][T12037] usb 5-1: USB disconnect, device number 50
[ 1434.972721][ T5889] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[ 1435.766561][ T5889] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[ 1435.891670][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1436.144486][ T5889] usb 3-1: config 0 descriptor??
[ 1436.631683][ T5889] ath6kl: Failed to submit usb control message: -71
[ 1436.638297][ T5889] ath6kl: unable to send the bmi data to the device: -71
[ 1436.648304][ T5889] ath6kl: Unable to send get target info: -71
[ 1436.691713][ T5889] ath6kl: Failed to init ath6kl core: -71
[ 1436.715855][ T5889] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71
[ 1436.794874][ T5889] usb 3-1: USB disconnect, device number 48
[ 1436.822370][T12037] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[ 1436.993606][T12037] usb 2-1: Using ep0 maxpacket: 16
[ 1437.013056][T12037] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[ 1437.023010][T12037] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[ 1437.095107][T12037] usb 2-1: Product: syz
[ 1437.115673][T12037] usb 2-1: Manufacturer: syz
[ 1437.133839][T12037] usb 2-1: SerialNumber: syz
[ 1437.158041][T12037] usb 2-1: config 0 descriptor??
[ 1437.511038][   T30] kauditd_printk_skb: 211 callbacks suppressed
[ 1437.511079][   T30] audit: type=1400 audit(1759430902.136:3186): avc:  denied  { create } for  pid=24482 comm="syz.1.5202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1437.720944][T12037] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[ 1437.727554][   T30] audit: type=1400 audit(1759430902.136:3187): avc:  denied  { ioctl } for  pid=24491 comm="syz.2.5204" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1437.808303][ T5889] usb 2-1: USB disconnect, device number 61
[ 1437.818787][   T30] audit: type=1400 audit(1759430902.136:3188): avc:  denied  { ioctl } for  pid=24482 comm="syz.1.5202" path="socket:[73156]" dev="sockfs" ino=73156 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1437.844493][   T30] audit: type=1400 audit(1759430902.258:3189): avc:  denied  { ioctl } for  pid=24491 comm="syz.2.5204" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1437.909463][   T30] audit: type=1400 audit(1759430902.389:3190): avc:  denied  { ioctl } for  pid=24491 comm="syz.2.5204" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1437.935817][   T30] audit: type=1400 audit(1759430902.398:3191): avc:  denied  { prog_load } for  pid=24493 comm="syz.4.5203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1437.964408][   T30] audit: type=1400 audit(1759430902.398:3192): avc:  denied  { bpf } for  pid=24493 comm="syz.4.5203" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1438.029806][T12037] usb 3-1: Using ep0 maxpacket: 32
[ 1438.141767][   T30] audit: type=1400 audit(1759430902.398:3193): avc:  denied  { perfmon } for  pid=24493 comm="syz.4.5203" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1438.144993][T12037] usb 3-1: config 0 has an invalid interface number: 58 but max is 0
[ 1438.331110][T24503] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22
[ 1438.351490][   T30] audit: type=1400 audit(1759430902.408:3194): avc:  denied  { prog_run } for  pid=24493 comm="syz.4.5203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1438.370682][T12037] usb 3-1: config 0 has no interface number 0
[ 1438.370718][T12037] usb 3-1: config 0 interface 58 has no altsetting 0
[ 1438.667185][T12037] usb 3-1: New USB device found, idVendor=0711, idProduct=0902, bcdDevice=43.1b
[ 1438.688497][T12037] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1438.757572][T12037] usb 3-1: Product: syz
[ 1438.768557][T12037] usb 3-1: Manufacturer: syz
[ 1438.784426][T12037] usb 3-1: SerialNumber: syz
[ 1438.785979][   T30] audit: type=1400 audit(1759430902.483:3195): avc:  denied  { ioctl } for  pid=24491 comm="syz.2.5204" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1438.928776][T12037] usb 3-1: config 0 descriptor??
[ 1439.004520][T12037] sisusb 3-1:0.58: Invalid USB2VGA device
[ 1439.012171][T24512] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5207'.
[ 1439.021492][T24512] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5207'.
[ 1439.051146][T12037] sisusb 3-1:0.58: probe with driver sisusb failed with error -22
[ 1439.188347][T24492] 9pnet: Unknown protocol version 9p20\++}
[ 1439.378063][   T24] usb 3-1: USB disconnect, device number 49
[ 1439.442408][T24520] syz_tun: entered allmulticast mode
[ 1439.448564][T24520] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[ 1439.490188][T24520] dvmrp1: entered allmulticast mode
[ 1439.649360][T24520] lo speed is unknown, defaulting to 1000
[ 1439.869508][T24521] lo speed is unknown, defaulting to 1000
[ 1439.874138][T24518] syz_tun: left allmulticast mode
[ 1439.883780][T24517] lo speed is unknown, defaulting to 1000
[ 1440.041085][   T24] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[ 1440.224932][   T24] usb 5-1: too many configurations: 67, using maximum allowed: 8
[ 1440.246401][   T24] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1440.255889][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1440.265514][   T24] usb 5-1: Product: syz
[ 1440.271641][   T24] usb 5-1: Manufacturer: syz
[ 1440.298270][   T24] usb 5-1: SerialNumber: syz
[ 1440.327535][   T24] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1440.367646][ T5935] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1440.474842][T24544] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22
[ 1441.173727][   T24] usb 5-1: USB disconnect, device number 51
[ 1441.768042][ T5935] usb 5-1: Service connection timeout for: 256
[ 1441.778123][ T5935] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services
[ 1441.800107][ T5935] ath9k_htc: Failed to initialize the device
[ 1441.812660][   T24] usb 5-1: ath9k_htc: USB layer deinitialized
[ 1441.950167][T24568] syz_tun: entered allmulticast mode
[ 1442.064640][T24575] dvmrp1: entered allmulticast mode
[ 1442.080529][T24572] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5221'.
[ 1442.090084][T24572] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5221'.
[ 1442.483859][T24568] lo speed is unknown, defaulting to 1000
[ 1442.531184][T12037] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[ 1442.552091][T24567] syz_tun: left allmulticast mode
[ 1442.758741][T12037] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[ 1442.862508][   T30] kauditd_printk_skb: 307 callbacks suppressed
[ 1442.862519][   T30] audit: type=1400 audit(1759430907.150:3503): avc:  denied  { read write } for  pid=15572 comm="syz-executor" name="loop7" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1442.945642][T12037] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1442.954229][   T30] audit: type=1400 audit(1759430907.178:3504): avc:  denied  { open } for  pid=15572 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1443.024257][   T30] audit: type=1400 audit(1759430907.178:3505): avc:  denied  { ioctl } for  pid=15572 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1443.057947][T12037] usb 2-1: config 0 descriptor??
[ 1443.095332][   T30] audit: type=1400 audit(1759430907.225:3506): avc:  denied  { read } for  pid=24585 comm="syz.4.5226" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1443.160204][ T5935] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[ 1443.177238][   T30] audit: type=1400 audit(1759430907.225:3507): avc:  denied  { open } for  pid=24585 comm="syz.4.5226" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1443.205252][   T30] audit: type=1400 audit(1759430907.234:3508): avc:  denied  { ioctl } for  pid=24585 comm="syz.4.5226" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1443.231482][   T30] audit: type=1400 audit(1759430907.281:3509): avc:  denied  { read write } for  pid=15572 comm="syz-executor" name="loop7" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1443.255894][   T30] audit: type=1400 audit(1759430907.281:3510): avc:  denied  { read write open } for  pid=15572 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1443.282715][   T30] audit: type=1400 audit(1759430907.281:3511): avc:  denied  { ioctl } for  pid=15572 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1443.314023][   T30] audit: type=1400 audit(1759430907.291:3512): avc:  denied  { ioctl } for  pid=24583 comm="syz.2.5225" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1443.343904][   T24] usb 8-1: new high-speed USB device number 61 using dummy_hcd
[ 1443.514696][T24593] netlink: 88 bytes leftover after parsing attributes in process `syz.4.5226'.
[ 1443.595195][ T5935] usb 3-1: Using ep0 maxpacket: 32
[ 1443.600623][T12037] ath6kl: Failed to submit usb control message: -71
[ 1443.607932][ T5935] usb 3-1: config 0 has an invalid interface number: 230 but max is 0
[ 1443.609953][T12037] ath6kl: unable to send the bmi data to the device: -71
[ 1443.637855][ T5935] usb 3-1: config 0 contains an unexpected descriptor of type 0x1, skipping
[ 1443.693142][ T5935] usb 3-1: config 0 has no interface number 0
[ 1443.695765][T12037] ath6kl: Unable to send get target info: -71
[ 1443.708581][ T5935] usb 3-1: config 0 interface 230 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1443.717292][T12037] ath6kl: Failed to init ath6kl core: -71
[ 1443.722110][ T5935] usb 3-1: config 0 interface 230 has no altsetting 0
[ 1443.756802][T12037] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71
[ 1443.766146][ T5935] usb 3-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05
[ 1443.778680][   T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1443.792351][   T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1443.802256][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1443.802394][T12037] usb 2-1: USB disconnect, device number 62
[ 1443.829931][   T24] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1443.858619][ T5935] usb 3-1: Product: syz
[ 1443.864817][ T5935] usb 3-1: Manufacturer: syz
[ 1443.869967][ T5935] usb 3-1: SerialNumber: syz
[ 1443.874644][   T24] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1443.906291][ T5935] usb 3-1: config 0 descriptor??
[ 1443.937278][   T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1444.171927][   T24] usb 8-1: config 0 descriptor??
[ 1444.300378][ T5935] ums-usbat 3-1:0.230: USB Mass Storage device detected
[ 1444.310969][ T5935] ums-usbat 3-1:0.230: Quirks match for vid 0781 pid 0005: 1
[ 1444.561956][T24606] ptrace attach of "./syz-executor exec"[15795] was attempted by "./syz-executor exec"[24606]
[ 1444.577327][T24606] netlink: 332 bytes leftover after parsing attributes in process `syz.4.5231'.
[ 1444.587176][T24606] netlink: 160 bytes leftover after parsing attributes in process `syz.4.5231'.
[ 1444.826438][T24608] tipc: Started in network mode
[ 1444.834974][T24608] tipc: Node identity fe302b6fe7da, cluster identity 4711
[ 1444.848614][T24608] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1444.858795][T24608] syzkaller0: entered promiscuous mode
[ 1444.865133][T24608] syzkaller0: entered allmulticast mode
[ 1445.015807][T24591] netlink: 68 bytes leftover after parsing attributes in process `syz.7.5228'.
[ 1445.515667][   T24] usbhid 8-1:0.0: can't add hid device: -71
[ 1445.526938][   T24] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[ 1445.537508][   T24] usb 8-1: USB disconnect, device number 61
[ 1445.709103][T24607] tipc: Resetting bearer <eth:syzkaller0>
[ 1445.831326][T24607] tipc: Disabling bearer <eth:syzkaller0>
[ 1446.151266][T12037] usb 3-1: USB disconnect, device number 50
[ 1446.311275][T24625] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5237'.
[ 1446.315581][ T5965] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[ 1446.322608][T24625] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5237'.
[ 1446.385719][T24630] TCP: TCP_TX_DELAY enabled
[ 1446.658162][ T5965] usb 2-1: too many configurations: 67, using maximum allowed: 8
[ 1446.675662][ T5965] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1446.685118][ T5965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1446.693267][ T5965] usb 2-1: Product: syz
[ 1446.697634][ T5965] usb 2-1: Manufacturer: syz
[ 1446.702332][ T5965] usb 2-1: SerialNumber: syz
[ 1446.711567][ T5965] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1446.734603][T12037] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1446.775293][   T24] usb 8-1: new high-speed USB device number 62 using dummy_hcd
[ 1446.950381][   T24] usb 8-1: Using ep0 maxpacket: 32
[ 1446.965409][   T24] usb 8-1: config 0 has an invalid interface number: 239 but max is 0
[ 1446.984379][   T24] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1446.996096][   T24] usb 8-1: config 0 has no interface number 0
[ 1447.003607][   T24] usb 8-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8
[ 1447.014443][   T24] usb 8-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[ 1447.203769][   T24] usb 8-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89
[ 1447.320431][   T24] usb 8-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024
[ 1447.354586][   T24] usb 8-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024
[ 1447.389787][T24649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1447.404305][   T24] usb 8-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85
[ 1447.415208][T24649] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1447.421530][   T24] usb 8-1: config 0 interface 239 altsetting 4 endpoint 0x85 has an invalid bInterval 0, changing to 7
[ 1447.436358][   T24] usb 8-1: config 0 interface 239 has no altsetting 0
[ 1447.445811][   T24] usb 8-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9
[ 1447.455327][   T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1447.463410][   T24] usb 8-1: Product: syz
[ 1447.467604][   T24] usb 8-1: Manufacturer: syz
[ 1447.489396][   T24] usb 8-1: SerialNumber: syz
[ 1447.499041][   T24] usb 8-1: config 0 descriptor??
[ 1447.506212][T24634] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22
[ 1447.513916][T24634] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22
[ 1447.558201][T23324] Bluetooth: hci6: urb ffff88806d518d00 submission failed (90)
[ 1447.612012][   T24] usb 2-1: USB disconnect, device number 63
[ 1447.640882][T24646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1447.649481][T24646] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1447.673406][ T1799] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[ 1447.716126][ T5965] usb 9-1: new high-speed USB device number 32 using dummy_hcd
[ 1448.206140][ T1799] usb 3-1: Using ep0 maxpacket: 16
[ 1448.217737][T12037] usb 2-1: Service connection timeout for: 256
[ 1448.224231][   T30] kauditd_printk_skb: 306 callbacks suppressed
[ 1448.224246][   T30] audit: type=1400 audit(1759430912.155:3819): avc:  denied  { open } for  pid=24628 comm="syz.7.5239" path="net:[4026534131]" dev="nsfs" ino=4026534131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 1448.225425][ T5935] usb 8-1: USB disconnect, device number 62
[ 1448.230546][ T5965] usb 9-1: Using ep0 maxpacket: 32
[ 1448.255109][ T1799] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[ 1448.255136][ T1799] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[ 1448.255155][ T1799] usb 3-1: Product: syz
[ 1448.255170][ T1799] usb 3-1: Manufacturer: syz
[ 1448.255185][ T1799] usb 3-1: SerialNumber: syz
[ 1448.258007][ T1799] usb 3-1: config 0 descriptor??
[ 1448.272044][   T30] audit: type=1400 audit(1759430912.155:3820): avc:  denied  { create } for  pid=24628 comm="syz.7.5239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1448.324761][T12037] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services
[ 1448.348937][T12037] ath9k_htc: Failed to initialize the device
[ 1448.360792][   T24] usb 2-1: ath9k_htc: USB layer deinitialized
[ 1448.408710][   T30] audit: type=1400 audit(1759430912.155:3821): avc:  denied  { ioctl } for  pid=24648 comm="syz.2.5244" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1448.409304][ T5965] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[ 1448.462843][ T5965] usb 9-1: config 0 has no interface number 0
[ 1448.471907][ T5965] usb 9-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[ 1448.471914][   T30] audit: type=1400 audit(1759430912.155:3822): avc:  denied  { write } for  pid=24628 comm="syz.7.5239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1448.471954][   T30] audit: type=1400 audit(1759430912.155:3823): avc:  denied  { read } for  pid=24628 comm="syz.7.5239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1448.560185][ T5965] usb 9-1: config 0 interface 1 has no altsetting 0
[ 1448.578217][ T5965] usb 9-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[ 1448.591506][ T5965] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1448.608762][T24660] netlink: 'syz.1.5246': attribute type 1 has an invalid length.
[ 1448.616529][T24660] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5246'.
[ 1448.730286][ T5965] usb 9-1: Product: syz
[ 1448.738143][ T5965] usb 9-1: Manufacturer: syz
[ 1448.760561][ T5965] usb 9-1: SerialNumber: syz
[ 1448.767452][   T30] audit: type=1400 audit(1759430912.155:3824): avc:  denied  { ioctl } for  pid=24648 comm="syz.2.5244" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1448.826730][   T30] audit: type=1400 audit(1759430912.211:3825): avc:  denied  { ioctl } for  pid=24648 comm="syz.2.5244" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1448.830756][T24661] comedi comedi3: 8255: I/O port conflict (0x40404f26,4)
[ 1448.859267][T24661] comedi comedi3: 8255: I/O port conflict (0x5,4)
[ 1448.865849][T24661] comedi comedi3: 8255: I/O port conflict (0x2,4)
[ 1448.875554][T24661] comedi comedi3: 8255: I/O port conflict (0xc,4)
[ 1448.882329][T24661] comedi comedi3: 8255: I/O port conflict (0x9,4)
[ 1448.897365][T24661] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4)
[ 1448.904677][T24661] comedi comedi3: 8255: I/O port conflict (0x5,4)
[ 1448.911766][T24661] comedi comedi3: 8255: I/O port conflict (0x1,4)
[ 1448.919998][T24661] comedi comedi3: 8255: I/O port conflict (0x20000001,4)
[ 1448.927427][T24661] comedi comedi3: 8255: I/O port conflict (0x9,4)
[ 1448.936614][T24661] comedi comedi3: 8255: I/O port conflict (0x6,4)
[ 1449.072676][   T30] audit: type=1400 audit(1759430912.211:3826): avc:  denied  { ioctl } for  pid=24648 comm="syz.2.5244" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1449.073137][ T5965] usb 9-1: config 0 descriptor??
[ 1449.271802][ T5935] usb 3-1: USB disconnect, device number 51
[ 1449.302191][   T30] audit: type=1400 audit(1759430912.332:3827): avc:  denied  { ioctl } for  pid=24645 comm="syz.8.5243" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1449.347401][   T30] audit: type=1400 audit(1759430912.332:3828): avc:  denied  { ioctl } for  pid=24645 comm="syz.8.5243" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1449.487686][ T5965] cx231xx 9-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[ 1449.593313][ T5965] cx231xx 9-1:0.1: Failed to read PCB config
[ 1449.619648][ T5965] cx231xx 9-1:0.1: probe with driver cx231xx failed with error -71
[ 1449.650713][ T5965] usb 9-1: USB disconnect, device number 32
[ 1450.541327][T24680] netlink: 100 bytes leftover after parsing attributes in process `syz.8.5251'.
[ 1451.201637][   T24] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[ 1451.399737][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1451.480162][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1451.565513][T24695] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5256'.
[ 1451.573648][   T24] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[ 1451.625621][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1451.636529][T24693] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22
[ 1451.803521][   T24] usb 2-1: config 0 descriptor??
[ 1452.378563][   T24] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0
[ 1453.279555][   T24] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0
[ 1453.289969][   T24] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0
[ 1453.299677][   T24] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0
[ 1453.306712][   T24] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0
[ 1453.314141][   T24] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0
[ 1453.326212][   T24] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0
[ 1453.345173][   T24] cp2112 0003:10C4:EA90.0017: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0
[ 1453.432117][   T24] cp2112 0003:10C4:EA90.0017: Part Number: 0x00 Device Version: 0x00
[ 1453.443749][T24721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1453.467799][T24721] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1453.586577][   T30] kauditd_printk_skb: 208 callbacks suppressed
[ 1453.586594][   T30] audit: type=1400 audit(1759430917.178:4037): avc:  denied  { ioctl } for  pid=24710 comm="syz.7.5260" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1453.706267][   T24] cp2112 0003:10C4:EA90.0017: error setting SMBus config
[ 1453.745498][ T1799] usb 8-1: new full-speed USB device number 63 using dummy_hcd
[ 1453.780459][   T30] audit: type=1400 audit(1759430917.224:4038): avc:  denied  { mount } for  pid=24709 comm="syz.2.5261" name="/" dev="ramfs" ino=73671 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[ 1453.803784][   T30] audit: type=1400 audit(1759430917.271:4039): avc:  denied  { ioctl } for  pid=24710 comm="syz.7.5260" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1453.804749][   T24] cp2112 0003:10C4:EA90.0017: probe with driver cp2112 failed with error -71
[ 1453.831217][   T30] audit: type=1400 audit(1759430917.346:4040): avc:  denied  { create } for  pid=24724 comm="syz.8.5262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1453.895880][T24729] mkiss: ax0: crc mode is auto.
[ 1453.947039][   T30] audit: type=1400 audit(1759430917.365:4041): avc:  denied  { ioctl } for  pid=24710 comm="syz.7.5260" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1454.059399][ T1799] usb 8-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config
[ 1454.116759][ T1799] usb 8-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e
[ 1454.126292][ T1799] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1454.134590][ T1799] usb 8-1: Product: syz
[ 1454.155288][ T1799] usb 8-1: Manufacturer: syz
[ 1454.169862][   T24] usb 2-1: USB disconnect, device number 64
[ 1454.180359][ T1799] usb 8-1: SerialNumber: syz
[ 1454.197684][   T30] audit: type=1400 audit(1759430917.449:4042): avc:  denied  { bpf } for  pid=24724 comm="syz.8.5262" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1454.418576][ T1799] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state.
[ 1454.441398][ T1799] dvb-usb: bulk message failed: -22 (3/0)
[ 1454.465447][   T30] audit: type=1400 audit(1759430917.477:4043): avc:  denied  { bind } for  pid=24724 comm="syz.8.5262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1454.489133][   T30] audit: type=1400 audit(1759430917.486:4044): avc:  denied  { listen } for  pid=24724 comm="syz.8.5262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1454.516864][ T1799] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[ 1454.530780][   T30] audit: type=1400 audit(1759430917.486:4045): avc:  denied  { create } for  pid=24724 comm="syz.8.5262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1454.557470][ T1799] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 error while loading driver (-19)
[ 1454.566044][ T1799] dvb_usb_umt_010 8-1:54.0: probe with driver dvb_usb_umt_010 failed with error -22
[ 1454.577583][   T30] audit: type=1400 audit(1759430917.486:4046): avc:  denied  { write } for  pid=24724 comm="syz.8.5262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1454.852514][T24714] netlink: 'syz.7.5260': attribute type 21 has an invalid length.
[ 1454.860629][T24714] netlink: 128 bytes leftover after parsing attributes in process `syz.7.5260'.
[ 1454.873383][T24714] netlink: 'syz.7.5260': attribute type 5 has an invalid length.
[ 1454.886579][T24714] netlink: 'syz.7.5260': attribute type 6 has an invalid length.
[ 1454.896489][T24714] netlink: 3 bytes leftover after parsing attributes in process `syz.7.5260'.
[ 1455.188641][ T1799] usb 2-1: new full-speed USB device number 65 using dummy_hcd
[ 1455.373014][ T1799] usb 2-1: config 6 has an invalid interface number: 2 but max is 0
[ 1455.389847][ T1799] usb 2-1: config 6 has no interface number 0
[ 1455.498204][ T1799] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[ 1455.536354][ T1799] usb 2-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1455.650645][ T1799] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1455.729114][ T1799] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1455.772767][ T1799] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[ 1455.783228][ T1799] usb 2-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3
[ 1455.791878][ T1799] usb 2-1: Product: syz
[ 1455.796201][ T1799] usb 2-1: Manufacturer: syz
[ 1455.806023][ T5935] usb 8-1: USB disconnect, device number 63
[ 1455.847205][ T1799] usb 2-1: SerialNumber: syz
[ 1455.869709][ T1799] hso 2-1:6.2: Failed to find BULK IN ep
[ 1456.086101][T12037] usb 2-1: USB disconnect, device number 65
[ 1456.121001][T23482] Bluetooth: hci0: command 0x0405 tx timeout
[ 1456.897224][T24755] /dev/sg0: Can't lookup blockdev
[ 1457.387674][T24764] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[ 1457.424906][T24764] lo speed is unknown, defaulting to 1000
[ 1457.592581][T24770] FAULT_INJECTION: forcing a failure.
[ 1457.592581][T24770] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1457.606069][T24770] CPU: 0 UID: 0 PID: 24770 Comm: syz.4.5275 Not tainted syzkaller #0 PREEMPT(full) 
[ 1457.606098][T24770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1457.606109][T24770] Call Trace:
[ 1457.606116][T24770]  <TASK>
[ 1457.606123][T24770]  dump_stack_lvl+0x16c/0x1f0
[ 1457.606154][T24770]  should_fail_ex+0x512/0x640
[ 1457.606181][T24770]  _copy_from_user+0x2e/0xd0
[ 1457.606207][T24770]  copy_msghdr_from_user+0x98/0x160
[ 1457.606233][T24770]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 1457.606269][T24770]  ___sys_sendmsg+0xfe/0x1d0
[ 1457.606295][T24770]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1457.606349][T24770]  __sys_sendmsg+0x16d/0x220
[ 1457.606374][T24770]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1457.606414][T24770]  do_syscall_64+0xcd/0x4e0
[ 1457.606442][T24770]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1457.606460][T24770] RIP: 0033:0x7faf4b18eec9
[ 1457.606476][T24770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1457.606493][T24770] RSP: 002b:00007faf493ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1457.606513][T24770] RAX: ffffffffffffffda RBX: 00007faf4b3e5fa0 RCX: 00007faf4b18eec9
[ 1457.606525][T24770] RDX: 0000000004000001 RSI: 0000200000000540 RDI: 0000000000000003
[ 1457.606536][T24770] RBP: 00007faf493ee090 R08: 0000000000000000 R09: 0000000000000000
[ 1457.606548][T24770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1457.606558][T24770] R13: 00007faf4b3e6038 R14: 00007faf4b3e5fa0 R15: 00007ffdbead5828
[ 1457.606582][T24770]  </TASK>
[ 1458.904943][T24780] lo speed is unknown, defaulting to 1000
[ 1458.959432][   T30] kauditd_printk_skb: 169 callbacks suppressed
[ 1458.959449][   T30] audit: type=1400 audit(1759430922.201:4216): avc:  denied  { prog_load } for  pid=24781 comm="syz.1.5278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1459.120532][   T30] audit: type=1400 audit(1759430922.229:4217): avc:  denied  { bpf } for  pid=24781 comm="syz.1.5278" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1459.141391][   T30] audit: type=1400 audit(1759430922.229:4218): avc:  denied  { perfmon } for  pid=24781 comm="syz.1.5278" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1459.183171][   T30] audit: type=1400 audit(1759430922.229:4219): avc:  denied  { prog_run } for  pid=24781 comm="syz.1.5278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1459.293133][   T30] audit: type=1400 audit(1759430922.397:4220): avc:  denied  { read write } for  pid=15795 comm="syz-executor" name="loop4" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1459.390059][   T30] audit: type=1400 audit(1759430922.397:4221): avc:  denied  { read write open } for  pid=15795 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1459.422584][   T30] audit: type=1400 audit(1759430922.397:4222): avc:  denied  { ioctl } for  pid=15795 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1459.551171][   T30] audit: type=1400 audit(1759430922.444:4223): avc:  denied  { prog_load } for  pid=24783 comm="syz.4.5279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1459.602958][   T30] audit: type=1400 audit(1759430922.444:4224): avc:  denied  { bpf } for  pid=24783 comm="syz.4.5279" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1459.676551][   T30] audit: type=1400 audit(1759430922.547:4225): avc:  denied  { create } for  pid=24781 comm="syz.1.5278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1460.010422][T24788] lo speed is unknown, defaulting to 1000
[ 1460.747804][   T24] usb 9-1: new high-speed USB device number 33 using dummy_hcd
[ 1460.935139][   T24] usb 9-1: Using ep0 maxpacket: 32
[ 1460.942185][   T24] usb 9-1: config 0 has an invalid interface number: 129 but max is 0
[ 1460.982970][   T24] usb 9-1: config 0 has no interface number 0
[ 1461.034917][   T24] usb 9-1: New USB device found, idVendor=2040, idProduct=7210, bcdDevice=5b.0c
[ 1461.073391][   T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1461.118057][   T24] usb 9-1: Product: syz
[ 1461.146975][   T24] usb 9-1: Manufacturer: syz
[ 1461.151628][   T24] usb 9-1: SerialNumber: syz
[ 1461.431929][   T24] usb 9-1: config 0 descriptor??
[ 1462.823696][T24831] 9pnet_fd: Insufficient options for proto=fd
[ 1464.217267][ T5965] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[ 1464.327888][   T30] kauditd_printk_skb: 161 callbacks suppressed
[ 1464.327903][   T30] audit: type=1400 audit(1759430927.224:4387): avc:  denied  { ioctl } for  pid=24835 comm="syz.1.5290" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1464.359090][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1464.384046][T12037] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[ 1464.403905][ T5965] usb 2-1: Using ep0 maxpacket: 16
[ 1464.414301][   T30] audit: type=1400 audit(1759430927.261:4388): avc:  denied  { read write } for  pid=16323 comm="syz-executor" name="loop2" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1464.444261][   T30] audit: type=1400 audit(1759430927.261:4389): avc:  denied  { open } for  pid=16323 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1464.482103][   T30] audit: type=1400 audit(1759430927.261:4390): avc:  denied  { ioctl } for  pid=16323 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1464.517167][   T30] audit: type=1400 audit(1759430927.289:4391): avc:  denied  { ioctl } for  pid=24840 comm="syz.4.5291" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1464.639103][   T30] audit: type=1400 audit(1759430927.299:4392): avc:  denied  { read write } for  pid=24843 comm="syz.2.5292" name="raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1464.659050][ T5965] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[ 1464.684072][T12037] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1464.688087][   T30] audit: type=1400 audit(1759430927.299:4393): avc:  denied  { open } for  pid=24843 comm="syz.2.5292" path="/dev/raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1464.718549][ T5965] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[ 1464.732491][   T30] audit: type=1400 audit(1759430927.299:4394): avc:  denied  { ioctl } for  pid=24843 comm="syz.2.5292" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1464.737765][T12037] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1464.771027][ T5935] usb 3-1: new full-speed USB device number 52 using dummy_hcd
[ 1464.777701][ T5965] usb 2-1: Product: syz
[ 1464.823974][ T5965] usb 2-1: Manufacturer: syz
[ 1464.828603][ T5965] usb 2-1: SerialNumber: syz
[ 1464.857596][ T5965] usb 2-1: config 0 descriptor??
[ 1464.864835][T12037] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 1464.879941][T12037] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[ 1464.909109][T12037] usb 5-1: Manufacturer: syz
[ 1464.968645][T12037] usb 5-1: config 0 descriptor??
[ 1464.977710][   T30] audit: type=1400 audit(1759430927.505:4395): avc:  denied  { read write } for  pid=15572 comm="syz-executor" name="loop7" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1465.079647][ T5935] usb 3-1: config 0 has an invalid interface number: 128 but max is 0
[ 1465.091699][ T5935] usb 3-1: config 0 has no interface number 0
[ 1465.113570][   T30] audit: type=1400 audit(1759430927.505:4396): avc:  denied  { read write open } for  pid=15572 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1465.217988][ T5935] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 1465.258796][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1465.354306][ T5935] usb 3-1: Product: syz
[ 1465.684804][T24836] comedi comedi3: 8255: I/O port conflict (0x40404f26,4)
[ 1465.691935][T24836] comedi comedi3: 8255: I/O port conflict (0x5,4)
[ 1465.698667][T24836] comedi comedi3: 8255: I/O port conflict (0x2,4)
[ 1465.705117][T24836] comedi comedi3: 8255: I/O port conflict (0xc,4)
[ 1465.711567][T24836] comedi comedi3: 8255: I/O port conflict (0x9,4)
[ 1465.718022][T24836] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4)
[ 1465.725073][T24836] comedi comedi3: 8255: I/O port conflict (0x5,4)
[ 1465.731557][T24836] comedi comedi3: 8255: I/O port conflict (0x1,4)
[ 1465.737990][T24836] comedi comedi3: 8255: I/O port conflict (0x20000001,4)
[ 1465.745052][T24836] comedi comedi3: 8255: I/O port conflict (0x9,4)
[ 1465.751515][T24836] comedi comedi3: 8255: I/O port conflict (0x6,4)
[ 1465.801703][ T5935] usb 3-1: Manufacturer: syz
[ 1465.804237][ T5889] usb 2-1: USB disconnect, device number 66
[ 1465.812284][ T5935] usb 3-1: SerialNumber: syz
[ 1465.868005][ T5935] usb 3-1: config 0 descriptor??
[ 1465.969958][   T24] usb 9-1: USB disconnect, device number 33
[ 1466.072133][T24856] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5294'.
[ 1466.087850][T24856] input: syz1 as /devices/virtual/input/input17
[ 1466.113307][T24856] 
[ 1466.115653][T24856] ======================================================
[ 1466.122659][T24856] WARNING: possible circular locking dependency detected
[ 1466.129673][T24856] syzkaller #0 Not tainted
[ 1466.134078][T24856] ------------------------------------------------------
[ 1466.141069][T24856] syz.7.5294/24856 is trying to acquire lock:
[ 1466.147109][T24856] ffff88803717e070 (&newdev->mutex){+.+.}-{4:4}, at: uinput_request_submit.part.0+0x25/0x2e0
[ 1466.157264][T24856] 
[ 1466.157264][T24856] but task is already holding lock:
[ 1466.164599][T24856] ffff8880583bc0b0 (&ff->mutex){+.+.}-{4:4}, at: input_ff_upload+0x1dd/0xc40
[ 1466.173362][T24856] 
[ 1466.173362][T24856] which lock already depends on the new lock.
[ 1466.173362][T24856] 
[ 1466.183739][T24856] 
[ 1466.183739][T24856] the existing dependency chain (in reverse order) is:
[ 1466.192725][T24856] 
[ 1466.192725][T24856] -> #3 (&ff->mutex){+.+.}-{4:4}:
[ 1466.199912][T24856]        __mutex_lock+0x193/0x1060
[ 1466.205008][T24856]        input_ff_flush+0x63/0x1a0
[ 1466.210101][T24856]        uinput_dev_flush+0x2a/0x40
[ 1466.215277][T24856]        input_flush_device+0xc9/0x140
[ 1466.220720][T24856]        evdev_release+0x344/0x420
[ 1466.225814][T24856]        __fput+0x402/0xb70
[ 1466.230296][T24856]        fput_close_sync+0x118/0x210
[ 1466.235557][T24856]        __x64_sys_close+0x8b/0x120
[ 1466.240742][T24856]        do_syscall_64+0xcd/0x4e0
[ 1466.245749][T24856]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1466.252139][T24856] 
[ 1466.252139][T24856] -> #2 (&dev->mutex#2){+.+.}-{4:4}:
[ 1466.259594][T24856]        __mutex_lock+0x193/0x1060
[ 1466.264690][T24856]        input_register_handle+0xca/0x630
[ 1466.270394][T24856]        kbd_connect+0xca/0x160
[ 1466.275223][T24856]        input_attach_handler.isra.0+0x173/0x250
[ 1466.281535][T24856]        input_register_device+0xab9/0x1180
[ 1466.287410][T24856]        acpi_button_add+0x582/0xb70
[ 1466.292673][T24856]        acpi_device_probe+0xc9/0x330
[ 1466.298022][T24856]        really_probe+0x23e/0xa90
[ 1466.303033][T24856]        __driver_probe_device+0x1de/0x440
[ 1466.308822][T24856]        driver_probe_device+0x4c/0x1b0
[ 1466.314350][T24856]        __driver_attach+0x283/0x580
[ 1466.319617][T24856]        bus_for_each_dev+0x13e/0x1d0
[ 1466.324979][T24856]        bus_add_driver+0x2e9/0x690
[ 1466.330165][T24856]        driver_register+0x15c/0x4b0
[ 1466.335435][T24856]        __acpi_bus_register_driver+0xdf/0x130
[ 1466.341574][T24856]        acpi_button_driver_init+0x82/0x110
[ 1466.347444][T24856]        do_one_initcall+0x120/0x6e0
[ 1466.352711][T24856]        kernel_init_freeable+0x5c2/0x910
[ 1466.358422][T24856]        kernel_init+0x1c/0x2b0
[ 1466.363254][T24856]        ret_from_fork+0x56a/0x730
[ 1466.368344][T24856]        ret_from_fork_asm+0x1a/0x30
[ 1466.373613][T24856] 
[ 1466.373613][T24856] -> #1 (input_mutex){+.+.}-{4:4}:
[ 1466.380884][T24856]        __mutex_lock+0x193/0x1060
[ 1466.385978][T24856]        input_register_device+0x992/0x1180
[ 1466.391860][T24856]        uinput_ioctl_handler.isra.0+0x1357/0x1df0
[ 1466.398351][T24856]        __x64_sys_ioctl+0x18b/0x210
[ 1466.403617][T24856]        do_syscall_64+0xcd/0x4e0
[ 1466.408626][T24856]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1466.415022][T24856] 
[ 1466.415022][T24856] -> #0 (&newdev->mutex){+.+.}-{4:4}:
[ 1466.422554][T24856]        __lock_acquire+0x12a6/0x1ce0
[ 1466.427902][T24856]        lock_acquire+0x179/0x350
[ 1466.432904][T24856]        __mutex_lock+0x193/0x1060
[ 1466.437995][T24856]        uinput_request_submit.part.0+0x25/0x2e0
[ 1466.444304][T24856]        uinput_dev_upload_effect+0x174/0x1f0
[ 1466.450350][T24856]        input_ff_upload+0x57f/0xc40
[ 1466.455613][T24856]        evdev_do_ioctl+0xf40/0x1b30
[ 1466.460873][T24856]        evdev_ioctl+0x16f/0x1a0
[ 1466.465787][T24856]        __x64_sys_ioctl+0x18b/0x210
[ 1466.471052][T24856]        do_syscall_64+0xcd/0x4e0
[ 1466.476059][T24856]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1466.482447][T24856] 
[ 1466.482447][T24856] other info that might help us debug this:
[ 1466.482447][T24856] 
[ 1466.492662][T24856] Chain exists of:
[ 1466.492662][T24856]   &newdev->mutex --> &dev->mutex#2 --> &ff->mutex
[ 1466.492662][T24856] 
[ 1466.504980][T24856]  Possible unsafe locking scenario:
[ 1466.504980][T24856] 
[ 1466.512402][T24856]        CPU0                    CPU1
[ 1466.517742][T24856]        ----                    ----
[ 1466.523079][T24856]   lock(&ff->mutex);
[ 1466.527038][T24856]                                lock(&dev->mutex#2);
[ 1466.533780][T24856]                                lock(&ff->mutex);
[ 1466.540266][T24856]   lock(&newdev->mutex);
[ 1466.544570][T24856] 
[ 1466.544570][T24856]  *** DEADLOCK ***
[ 1466.544570][T24856] 
[ 1466.552689][T24856] 2 locks held by syz.7.5294/24856:
[ 1466.557860][T24856]  #0: ffff88802a123118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_ioctl+0x7f/0x1a0
[ 1466.566886][T24856]  #1: ffff8880583bc0b0 (&ff->mutex){+.+.}-{4:4}, at: input_ff_upload+0x1dd/0xc40
[ 1466.576090][T24856] 
[ 1466.576090][T24856] stack backtrace:
[ 1466.581953][T24856] CPU: 1 UID: 0 PID: 24856 Comm: syz.7.5294 Not tainted syzkaller #0 PREEMPT(full) 
[ 1466.581971][T24856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1466.581979][T24856] Call Trace:
[ 1466.581984][T24856]  <TASK>
[ 1466.581990][T24856]  dump_stack_lvl+0x116/0x1f0
[ 1466.582011][T24856]  print_circular_bug+0x275/0x350
[ 1466.582030][T24856]  check_noncircular+0x14c/0x170
[ 1466.582045][T24856]  __lock_acquire+0x12a6/0x1ce0
[ 1466.582062][T24856]  lock_acquire+0x179/0x350
[ 1466.582077][T24856]  ? uinput_request_submit.part.0+0x25/0x2e0
[ 1466.582097][T24856]  ? __pfx___might_resched+0x10/0x10
[ 1466.582119][T24856]  ? uinput_request_submit.part.0+0x25/0x2e0
[ 1466.582135][T24856]  __mutex_lock+0x193/0x1060
[ 1466.582155][T24856]  ? uinput_request_submit.part.0+0x25/0x2e0
[ 1466.582171][T24856]  ? find_held_lock+0x2b/0x80
[ 1466.582190][T24856]  ? uinput_request_reserve_slot+0x3ca/0x4d0
[ 1466.582207][T24856]  ? __pfx___mutex_lock+0x10/0x10
[ 1466.582229][T24856]  ? _raw_spin_unlock+0x28/0x50
[ 1466.582247][T24856]  ? __pfx_uinput_request_reserve_slot+0x10/0x10
[ 1466.582263][T24856]  ? __pfx___might_resched+0x10/0x10
[ 1466.582282][T24856]  ? rcu_is_watching+0x12/0xc0
[ 1466.582302][T24856]  ? uinput_request_submit.part.0+0x25/0x2e0
[ 1466.582318][T24856]  uinput_request_submit.part.0+0x25/0x2e0
[ 1466.582336][T24856]  uinput_dev_upload_effect+0x174/0x1f0
[ 1466.582354][T24856]  ? __pfx_uinput_dev_upload_effect+0x10/0x10
[ 1466.582376][T24856]  ? __might_fault+0x13b/0x190
[ 1466.582399][T24856]  input_ff_upload+0x57f/0xc40
[ 1466.582415][T24856]  evdev_do_ioctl+0xf40/0x1b30
[ 1466.582429][T24856]  ? __pfx_evdev_do_ioctl+0x10/0x10
[ 1466.582447][T24856]  evdev_ioctl+0x16f/0x1a0
[ 1466.582459][T24856]  ? __pfx_evdev_ioctl+0x10/0x10
[ 1466.582472][T24856]  __x64_sys_ioctl+0x18b/0x210
[ 1466.582491][T24856]  do_syscall_64+0xcd/0x4e0
[ 1466.582514][T24856]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1466.582529][T24856] RIP: 0033:0x7f9f1518eec9
[ 1466.582541][T24856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1466.582555][T24856] RSP: 002b:00007f9f133f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1466.582568][T24856] RAX: ffffffffffffffda RBX: 00007f9f153e6180 RCX: 00007f9f1518eec9
[ 1466.582577][T24856] RDX: 0000200000000180 RSI: 0000000040304580 RDI: 0000000000000006
[ 1466.582586][T24856] RBP: 00007f9f15211f91 R08: 0000000000000000 R09: 0000000000000000
[ 1466.582594][T24856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1466.582602][T24856] R13: 00007f9f153e6218 R14: 00007f9f153e6180 R15: 00007ffe9d748ac8
[ 1466.582615][T24856]  </TASK>
[ 1467.060549][ T5935] usb 3-1: Firmware: major: 80, minor: 0, hardware type: ATUSB (0)
[ 1467.096472][T12037] uclogic 0003:256C:006D.0018: failed retrieving string descriptor #200: -71
[ 1467.105540][T12037] uclogic 0003:256C:006D.0018: failed retrieving pen parameters: -71
[ 1467.113841][T12037] uclogic 0003:256C:006D.0018: failed probing pen v2 parameters: -71
[ 1467.121961][T12037] uclogic 0003:256C:006D.0018: failed probing parameters: -71
[ 1467.129444][T12037] uclogic 0003:256C:006D.0018: probe with driver uclogic failed with error -71
[ 1467.140626][T12037] usb 5-1: USB disconnect, device number 52
[ 1467.549830][ T5935] usb 3-1: failed to fetch extended address, random address set
[ 1467.582296][ T5935] usb 3-1: USB disconnect, device number 52