last executing test programs:

6m54.175087505s ago: executing program 0 (id=501):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0x0, 0x1}, 0x10)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = socket$inet6(0xa, 0x40000080806, 0x0)
listen(r4, 0x20000005)
pipe2(&(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
r7 = openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
splice(r7, 0x0, r6, 0x0, 0x800000000fc, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x18, &(0x7f0000000080)=0x20000000, 0x4)
r8 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r8, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r9 = accept4(r4, 0x0, 0x0, 0x0)
sendmmsg$inet6(r9, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0)

6m52.958282763s ago: executing program 0 (id=504):
syz_open_dev$tty1(0xc, 0x4, 0x1)
pipe2(&(0x7f0000000400)={<r0=>0xffffffffffffffff}, 0x800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040f0200b70604"], 0x7)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
epoll_create(0x1)
read$FUSE(0xffffffffffffffff, &(0x7f0000002900)={0x2020, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x2020)
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
splice(r0, 0x0, r6, 0x0, 0x100000000, 0x0)
ioctl$GIO_CMAP(r0, 0x4bfb, &(0x7f0000000000))
wait4(r5, 0x0, 0x8, &(0x7f0000000440))
ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'gretap0\x00', {0x2, 0x4e20, @empty}})

6m51.408363112s ago: executing program 0 (id=506):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x13, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x765d5f19}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x24b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)={0x0, 0x7, 0x6, {0x6, 0xe, "09f297d0"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)

6m50.460146538s ago: executing program 0 (id=509):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000240)={0x0, 0x1000000})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00', <r1=>0x0})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000080000000000000000000018110000", @ANYRES32, @ANYRES8=r1, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x8, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10)
r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0)
preadv(r7, &(0x7f0000000740)=[{&(0x7f0000000500)=""/97, 0x61}], 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r7, 0xc018643a, &(0x7f0000000080)={0x4000000})
r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
renameat2(r5, &(0x7f0000000240)='./bus\x00', r8, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000380)='mm_page_alloc\x00', r4}, 0x10)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r12 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r12, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x199100a, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)

6m49.992538067s ago: executing program 0 (id=511):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x3)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)

6m48.208408109s ago: executing program 0 (id=517):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
getpid()
clock_adjtime(0x0, &(0x7f0000000280)={0x3ff, 0x100000000, 0x8000000000000001, 0x7, 0x81, 0x6, 0xd, 0x9, 0x80000000007fff, 0x9, 0x1, 0x401, 0x7, 0x7, 0x9, 0x6, 0x80000000002, 0xc3e, 0xfffffffffffffffd, 0x6, 0x6, 0x0, 0x4, 0x8, 0x9, 0x7f})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'})
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
close_range(0xffffffffffffffff, r3, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x4000, 0x1}, 0x10)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmmsg(r1, &(0x7f00000030c0), 0x0, 0x9200000008004801)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0)
r6 = getpgid(r0)
kcmp(r0, r6, 0x3, r2, r2)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x4c, 0x1a, 0x190, 0x73, 0x270, 0x258, 0x258, 0x270, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'netdevsim0\x00', 'macvlan1\x00'}, 0x0, 0x160, 0x190, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x2}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @dev, [0x0, 0x0, 0x0, 0xff]}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0)
sched_setaffinity(0x0, 0x0, 0x0)

6m47.393542077s ago: executing program 32 (id=517):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
getpid()
clock_adjtime(0x0, &(0x7f0000000280)={0x3ff, 0x100000000, 0x8000000000000001, 0x7, 0x81, 0x6, 0xd, 0x9, 0x80000000007fff, 0x9, 0x1, 0x401, 0x7, 0x7, 0x9, 0x6, 0x80000000002, 0xc3e, 0xfffffffffffffffd, 0x6, 0x6, 0x0, 0x4, 0x8, 0x9, 0x7f})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'})
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
close_range(0xffffffffffffffff, r3, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x4000, 0x1}, 0x10)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmmsg(r1, &(0x7f00000030c0), 0x0, 0x9200000008004801)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0)
r6 = getpgid(r0)
kcmp(r0, r6, 0x3, r2, r2)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x4c, 0x1a, 0x190, 0x73, 0x270, 0x258, 0x258, 0x270, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'netdevsim0\x00', 'macvlan1\x00'}, 0x0, 0x160, 0x190, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x2}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @dev, [0x0, 0x0, 0x0, 0xff]}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0)
sched_setaffinity(0x0, 0x0, 0x0)

6m10.028345242s ago: executing program 4 (id=628):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x220c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r7, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x8000000004)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r11 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r11)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
writev(r8, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1)
syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r8)

6m9.948604327s ago: executing program 4 (id=630):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x44804}, 0x800)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r2 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2)
r3 = epoll_create(0x6)
r4 = dup3(r2, r3, 0x0)
read$FUSE(r4, 0x0, 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r5, &(0x7f0000002140)={0x2020, 0x0, <r6=>0x0}, 0x2020)
syz_fuse_handle_req(r5, &(0x7f0000008400)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9474a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'\x00', 0x8411})
ioctl$TUNGETVNETBE(r7, 0x800454df, 0x0)
write$FUSE_INIT(r5, &(0x7f0000000340)={0x50, 0x0, r6}, 0x50)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0)
ioctl$FIBMAP(r8, 0x401870cb, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
capget(&(0x7f00000000c0)={0x19980330}, 0x0)
r9 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00')
readv(r9, &(0x7f0000000140)=[{&(0x7f0000000380)=""/198, 0xc6}], 0x1)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={0xe0, 0x2, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x6}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x1}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x82}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x54, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x10000}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x11}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x2}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0xe0}, 0x1, 0x0, 0x0, 0x8000}, 0x40005)
setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x4, 0x7f, 0x400, @vifc_lcl_addr=@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x541b, 0x0)

6m9.516675328s ago: executing program 4 (id=632):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x74)
sendmmsg$unix(r4, &(0x7f0000000b00), 0x0, 0xc000)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x21)
ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f0000000240)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000bb86c7385ce78052ba0200030601020000000000000000070800007301800000000000297c3adef91038c5ce8933824c2e080c24329e7547fd39d6aa6f68343eb1d81d5321f23fa84e3bfde61121ffb0f85a3df3145840a5b9ca29da9561c31dce9dfecd0a0a2ce516ee14d60cc24abecfddb22c629633234af1bd3633e4777a3e33630a3ccb68bc83e634fa9cf7422c29d9f5932c1457bacf9791a5426795e0c033b545a496"], 0x2c}}, 0x20004040)
r6 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
ioctl$USBDEVFS_ALLOC_STREAMS(r6, 0x8008551c, 0x0)

6m8.288659066s ago: executing program 4 (id=634):
r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000340)="e8", 0x1}, {0x0, 0x2000000}], 0x2)
open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
fcntl$setsig(r2, 0xa, 0x18)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8)
bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6)
setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x0, 0x80}]}, 0x10)
write$binfmt_misc(r3, &(0x7f0000000100), 0x6)
fcntl$setlease(r1, 0x400, 0x1)
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x26)
close_range(r1, 0xffffffffffffffff, 0x0)

6m8.096223522s ago: executing program 4 (id=636):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0100000008000000020000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000004000000000000"], 0x48)
close(r1)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x6, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26)
syz_emit_ethernet(0xbe, &(0x7f0000000140)={@multicast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "edec9803bad6f44945f8dea4c70a3a476113f7847d17851fb0e2e894332bd0e8", "f6ac0f50c8b75bec7e0e6526b0e5e05bcb5c7da1578ab61a2b7f5715cb99186c2c1939a1c69a05a795d5e75bf20b61c9", "8b2cd710ccf0bb10fd30dfc67044ebb965178bbd0ce57a33a5536bb3", {"4d7f1eccefedd8f5a14477918f8fa29d", "1428df12de8c29fbc4b92e6767dd6fa0"}}}}}}}, 0x0)

6m7.537084676s ago: executing program 4 (id=637):
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = syz_io_uring_setup(0x7d7f, &(0x7f0000000180)={0x0, 0xb8e5, 0x80, 0x3, 0x105}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000f5ff000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r2}, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r3}, 0x10)
r4 = socket$kcm(0x2, 0x1, 0x106)
sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x3, 0x0}, 0x30004001)
io_uring_register$IORING_REGISTER_PROBE(r1, 0x8, &(0x7f0000000600)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x2a)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x8a002, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000580))
ioctl$KVM_RUN(r7, 0xae80, 0x0)

6m1.416125324s ago: executing program 1 (id=639):
socket(0x10, 0x803, 0x0) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid() (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 64)
openat$tun(0xffffffffffffff9c, 0x0, 0x58000, 0x0) (async, rerun: 64)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b0000000505", @ANYRES32=0x0], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000c40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) (async)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x9, 0x3, 0x328, 0x118, 0xffffffff, 0xffffffff, 0x118, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f00000003c0), {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xf}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'batadv_slave_1\x00', {0x5}}}}, {{@ipv6={@empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffff00, 0xffffffff, 0xffffff00, 0xff000000], [0xffffffff, 0xffffff00, 0xffffffff, 0xffffff00], 'bond_slave_0\x00', 'macvtap0\x00', {0xff}, {0xff}, 0x33, 0x80, 0x2, 0x10}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@ipv6header={{0x28}, {0x8, 0x44, 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x297, 'syz1\x00', {0x819}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) (async)
pipe2$9p(&(0x7f00000001c0), 0x4900) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') (async)
chdir(&(0x7f0000000080)='./file1\x00') (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x6, 0x7fffffff}) (async)
setresuid(0x0, 0xee01, 0x0)
setfsuid(0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 32)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x9000000, 0x61, 0x11, 0x50}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (rerun: 32)

6m0.655919596s ago: executing program 1 (id=642):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYRESOCT], 0x0, 0x8000a, 0x0, 0x0, 0x20780, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x7fffffffffffffff, 0x5, 0x1})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r2 = socket(0x2b, 0x5, 0x2)
getsockopt(r2, 0x113, 0x2715, 0x0, &(0x7f0000000100))
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000007898cc0d0c4dfcffffffb86db3c312f85ece26bd1e93ef4518", @ANYRES16=r6, @ANYBLOB="0100000000000000000009000000300003801400020076657468315f746f5f7465616d00000008000100020000000800030000000000080005007f000001"], 0x44}}, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRES8=r3], 0x250}, 0x1, 0x0, 0x0, 0xc080}, 0x48044)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
close(r9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'veth1_to_team\x00', @random="a78092d4436f"})
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080029bd7000ffdbdf250100000008000300d802000008000200040000001400040009000000090000000a0b0000090000001400010000000000000000000000000000000001140001bc21edc9fa801dfe000000020000000001"], 0x60}, 0x1, 0x0, 0x0, 0x8000000}, 0x4)
sendmsg$nl_route_sched(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005b80)=@delchain={0x24, 0x26, 0x2, 0x0, 0x1}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7)
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0x7, &(0x7f0000000200)={0x4cd3, 0xb, 0x7, 0x8000}, 0x10)
r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000000c0)=0x2)
ioctl$TIOCVHANGUP(r10, 0x5437, 0x0)

5m56.505610479s ago: executing program 1 (id=644):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
getpid()
socket$packet(0x11, 0x1, 0x300)
sched_setaffinity(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x1})
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/235, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)

5m54.938132742s ago: executing program 1 (id=650):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0)
write(r1, &(0x7f0000000180)="0016f23bf767bef0980fa2c06aed1097a1da65fb9fc61106676d1b636f1341677d83a2dd4a3a8197c233e476e2e48f53daa2", 0x32)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="7570c72d7eee283a715961756c7420747275737465643a"], 0x1c, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
sendfile(r1, r1, &(0x7f00000000c0), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000100001000000000000000000090a050000001800000000000000000208000a4000000000091d94d5441faa25c500020073797a31000000000900010073797a3000000000080005400000000a08000340000000f01400000010000100"/108], 0x6c}}, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xfffffffc, 0x0, 0x30, 0x700, @ib={0x1b, 0x9, 0x6, {"8787f0fa1c5211f2e3ed9984b315036a"}, 0x3, 0x0, 0x101}, @ib={0x1b, 0xb7a, 0x3, {"26c534f9b5ea65d87e140202fbe4cbf6"}, 0x7, 0xffffffffffffffc0, 0xfffffffffffffff8}}}, 0x118)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0xa0, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x74, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x8}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0xb32}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0xffffeffd}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9}}]}}]}, 0xa0}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008040)

5m53.514791747s ago: executing program 1 (id=652):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r1=>r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) (async)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
eventfd(0x0) (async)
eventfd(0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0), 0x0) (async)
setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0), 0x0)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f00000000c0)={0x1, [0x2]}, &(0x7f0000000100)=0x6) (async)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f00000000c0)={0x1, [0x2]}, &(0x7f0000000100)=0x6)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
r6 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r6, 0x0, 0x0)
sendmsg$tipc(r6, 0x0, 0x810)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)}, 0x0)
r7 = socket$kcm(0x29, 0x2, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x1, &(0x7f0000000080)=0x2, 0x4)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x141002, 0x0) (async)
r8 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x141002, 0x0)
write$P9_RVERSION(r8, &(0x7f0000000040)=ANY=[@ANYRESHEX=r8], 0x15)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) (async)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x18)

5m50.930897777s ago: executing program 33 (id=637):
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = syz_io_uring_setup(0x7d7f, &(0x7f0000000180)={0x0, 0xb8e5, 0x80, 0x3, 0x105}, &(0x7f0000000380), &(0x7f00000003c0))
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000f5ff000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r2}, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r3}, 0x10)
r4 = socket$kcm(0x2, 0x1, 0x106)
sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x3, 0x0}, 0x30004001)
io_uring_register$IORING_REGISTER_PROBE(r1, 0x8, &(0x7f0000000600)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x2a)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x8a002, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000580))
ioctl$KVM_RUN(r7, 0xae80, 0x0)

5m46.102599398s ago: executing program 3 (id=663):
r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x8c, 0x54, &(0x7f0000000340)="4e834119cd7bd4b37a49caa607492bbd437d0701f96e25c46961adf492af3b611180537d8f7b52ba7e2a3becc17bcadaea96d6391b0c8a46ee9416976c210caf663aa4085247d878fcbdac663481e413cc1dca3c6ee301394903493c39eac641d826f6c10fcb538db516445c3ae579af7ccd219ed35e156fa0345972f20cc1f527cc625a1117f4f497e53fea", &(0x7f0000000140)=""/84, 0x5, 0x0, 0x1000, 0xe9, &(0x7f0000001580)="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", &(0x7f0000000400)="e7f94bb778fc10dcc335b88715b377dbab3882386f8e02a0542b40d09395442b7afec97d3eac386be270590d2fe84c26b41d3a82d7536f4744bac3bd1d3e080e8ca8feb85bc828fba3d7c42944938040aa231e5ad2d82f84b2ffd052b5ccaa6043b6769e8d417af6bbf313ae3d6b7052e3448756d2b4e58a617b7471ad0ed7ab2c0e145db5837074b6c295e0c232b25d41753fa60379ef750d10b7e388a38ac0010d7f1575468a99b91983423a9cd488122e3345665a6fbc596cfaaadabe15cfff6fa3698a7b8711c4d859c7d8a84b0753f7ab7285bcb072ef370808ec023900430d479dc83e9ee051", 0x1, 0x0, 0x6}, 0x50)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003400)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}]}}]}, 0x44}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0xb, "08405af3"}, @local=@item_4={0x3, 0x2, 0x0, '\x00\x00 \x00'}, @local=@item_4={0x3, 0x2, 0x0, "6fe695cd"}]}}, 0x0}, 0x0)
r6 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGDEVINFO(r6, 0x801c4803, &(0x7f00000001c0)=""/211)

5m40.950824935s ago: executing program 3 (id=668):
r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000540)='user\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)=',$:@^@,\x00', r0)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000580), 0x0, r0)
request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)='\x9f\x00', r0)
openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
ioprio_set$pid(0x2, 0x0, 0x2004)
ioprio_get$pid(0x0, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x4004)
r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0)
ioctl$VIDIOC_QUERYMENU(r1, 0xc008561c, &(0x7f0000000000)={0x980915, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9a86b6b1a959ef9dc"})
r2 = io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x8d58, 0x0, 0x0, 0x4})
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r4}, 0x38)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r4}, 0x38)
r5 = socket(0x28, 0x1, 0x0)
bind$vsock_stream(r5, &(0x7f0000000040), 0x10)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f0000000240)}, 0x10)
listen(r5, 0x477)
r6 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r6, &(0x7f0000000080), 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
socket(0x2, 0x5, 0x0)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r7, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000b00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="01000000000000000000050000000800020000000001"], 0x1c}}, 0x0)

5m40.821206522s ago: executing program 1 (id=669):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2}, 0x0)
prlimit64(0x0, 0x3, &(0x7f0000000140)={0x4, 0x2}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
creat(0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
io_setup(0x8, &(0x7f0000004200))
open_by_handle_at(r0, &(0x7f0000000100)=ANY=[], 0x20000)
setrlimit(0xf, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2b8, 0xffffffff, 0x98, 0x170, 0x0, 0xffffffff, 0xffffffff, 0x220, 0x220, 0x220, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@ip={@multicast1, @multicast2, 0x0, 0x0, 'vlan0\x00', 'syzkaller1\x00', {}, {}, 0x33}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x3, 0x4}, {0x4, 0x5, 0x4}, {0xffffffffffffffff, 0x6, 0x1}, 0x2b, 0x1000}}}, {{@ip={@private, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'xfrm0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x20}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318)
setsockopt$sock_timeval(r1, 0x1, 0x2, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000380), 0x0, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301)

5m38.489710358s ago: executing program 3 (id=670):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000211c0000004041fd0a52912a304b4d482c5023bec041d7e4dd505c4d6ac3125c20e29c68db851f00"/56, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0xd, &(0x7f0000001480)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10180}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='7'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc)

5m37.864489528s ago: executing program 3 (id=673):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c7f5200001000000186200000a0000000000000200"/48], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = dup(r1)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setaffinity(r5, 0x0, 0x0)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
r6 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_buf(r6, 0x29, 0x3e, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
openat$ptp0(0xffffffffffffff9c, 0x0, 0x40, 0x0)
preadv(r4, &(0x7f0000000040), 0x0, 0x5c, 0x2)
ioctl$int_in(r3, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000200)={0x1, 0x0, 0x0, &(0x7f0000000140)=""/41, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000580))
r9 = dup(r2)
ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)={0x1, r9})
ioctl$VHOST_NET_SET_BACKEND(r3, 0xaf02, 0x0)

5m35.924848261s ago: executing program 3 (id=674):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000018b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="e1ffffff00"})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, &(0x7f0000000140)={@flat=@binder={0x73622a85, 0x1009, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000a40)=""/206, 0xce}, @fda={0x66646185, 0x5, 0x1, 0xfffffffffffffffd}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
socket$nl_route(0x10, 0x3, 0x0)

5m35.686239727s ago: executing program 3 (id=675):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000014c0)={&(0x7f0000001380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@ptr, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x8, 0x1}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61, 0x5f, 0x5f, 0x5f]}}, 0x0, 0x46, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000000c0)={'gretap0\x00', <r1=>0x0, 0x80, 0x1, 0x1000, 0x8, {{0xd, 0x4, 0x1, 0x3, 0x34, 0x67, 0x0, 0x7, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@rr={0x7, 0x1f, 0x5e, [@broadcast, @broadcast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0x3a}, @remote]}]}}}}})
r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000000a80)=[{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000005c0)="b9b39b21b7f96fca8395142c5adfcd892c050b3b6852aa7f17ea8b78de57a4c8d695068d9841530de53c017c73aba772a3eab61bf9b3da62fd90d663565d9ccc671babc3f69a0034c4032001961d311dd45b17b14b498109317b0c1bf6d6098d15945dd30816e47857ec5c3ea43a2bb65caf4302d1f24ed8ea11754f85679254e0adc77c02f19d25690b2df45e7b0c08b9aff38b0cbe81ca3729ca0254dc6e85b9bdc612202ebbdf19f80b8942b1", 0xae}, {&(0x7f0000001500)="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", 0x1000}, {&(0x7f0000000680)="95dd8382131f28beae200a321ea67d19772fe8924f57c260426805ff6add50e36600fe3a238409ba94d6cab9bf4457504b58f1", 0x33}], 0x3, &(0x7f0000000700)=[@iv={0x100, 0x117, 0x2, 0xec, "1b32c2a802666fcbb4942cb84d38270da7cca8f4ea9c6a79e958005a2d75258547c0f4b567731c77092c814d982005123b916855c94d578654b2d0ee8c5133f879bce620588f266cd3d1472cdf89ff4fb546da43f0b17df5ae1c97b825352e8af679e100d8459b14c78c2bfdc53f42ca6d4a4c791387f22e087a724858b327d4f007a6d397fc87efa50911bfa95ab320db5a05a251c697969621e4b01fc74553ae8816cee6c4d1b0b6bffd83d8e493db229f7e903515542c22863540817145469517d65198b556954eff9bd84930bf5184b83b781502b562e4d3c50327ddd6a61afd4f164059e88c48f0f3e5"}, @iv={0x100, 0x117, 0x2, 0xe5, "6ac5e23fc5bef92b66f560f36872795f4964182a98006a31350f24bc0c6de25a91ed0ab55f3493a367e8302fde36c97d4f2e1c01129e4942cb569ce7f8b24632883e224b84379a893776433f70a2a3d171e49bb809f137004b4a961ff9cb168f8066629763671a52f1d9cdf702082299affbd2372881140665f6c74baa0f4ead8062a9f70f4f3bf53988f47db01ef2c3cd945b9d5378cd195180fb52fa942639e3585e7b0072884380d2bf356d997ad22673f8a5e62d52cbd9d0ca84329d7c2e6c19a3ceb90361fa4090e09cadbd0f47d46e4a24abca64047c952bcc5dfa35bb6b1a8a9834"}, @iv={0x20, 0x117, 0x2, 0x6, "043718f85c99"}, @op={0x18}, @iv={0xc8, 0x117, 0x2, 0xb1, "d05f1953eb855f0d426dd77fcfb21103bec3d0d31a249c1f380a915d3a78f59dd7bdd7b815075d691a61a08f75d131cbb4fc4fcfe7217ae737e7ccf9dcaa0718682880eb6b444e06f5789e59603ba88fb7c071b4e8eb3ebb12889b8d3e8d29d51b018a35b167c37a5c38a73b9e5bfd614183583da193456dea02abb3280a9acad6e606860586453b2f2f417ba4c722c4eb8eefbdf721791f34d3f440575e5f826bb2fe66094215d12304ff5ffcb067a1d0"}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x1d3}, @op={0x18, 0x117, 0x3, 0x1}], 0x348, 0x4}], 0x1, 0x4040004)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/meminfo\x00', 0x0, 0x0)
getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000080)={<r4=>0x0, 0xaa2dbbb, 0x4, 0x5}, &(0x7f00000000c0)=0x10)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000100)={r4, 0x500}, 0x8)
lseek(r3, 0x1000000, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, 0x0, 0x275a, 0x0)
preadv(r6, &(0x7f0000000140)=[{&(0x7f0000000540)=""/72, 0x48}], 0x1, 0x9, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, <r7=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0xe158, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, r0, 0x4, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0x0, 0x3ff, 0x8}, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
read$rfkill(r6, &(0x7f0000000ac0), 0x8)
r11 = fanotify_init(0xf00, 0x0)
fanotify_mark(r11, 0x105, 0x4800003a, r10, 0x0)
read$FUSE(r11, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x4040, &(0x7f0000000b40)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_on}], [{@smackfsdef={'smackfsdef', 0x3d, 'lowerdir'}}]})
r12 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0xfffffff9, 0x7, 0x9, 0x40000, 0xffffffffffffffff, 0x1, '\x00', 0x0, r0, 0x2, 0x4, 0x2, 0x3, @void, @value, @void, @value}, 0x50)
r14 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8b05, &(0x7f0000000040)={'wlan0\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x3, 0x2, 0x2, 0x3, 0x3, 0xb73780cd953e9ee, 0xfffffffffffffff0}, @exit]}, &(0x7f0000000040)='syzkaller\x00', 0x10001, 0x29, &(0x7f0000000080)=""/41, 0x41100, 0x2, '\x00', r1, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x2, 0xf, 0xfffffffe, 0x28}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000400)=[r6, r7, 0xffffffffffffffff, r8, r9, r12, r13], &(0x7f0000000440)=[{0x5, 0x5, 0x7, 0x1}], 0x10, 0x4, @void, @value}, 0x94)

5m24.548676023s ago: executing program 34 (id=669):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2}, 0x0)
prlimit64(0x0, 0x3, &(0x7f0000000140)={0x4, 0x2}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
creat(0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
io_setup(0x8, &(0x7f0000004200))
open_by_handle_at(r0, &(0x7f0000000100)=ANY=[], 0x20000)
setrlimit(0xf, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2b8, 0xffffffff, 0x98, 0x170, 0x0, 0xffffffff, 0xffffffff, 0x220, 0x220, 0x220, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@ip={@multicast1, @multicast2, 0x0, 0x0, 'vlan0\x00', 'syzkaller1\x00', {}, {}, 0x33}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x3, 0x4}, {0x4, 0x5, 0x4}, {0xffffffffffffffff, 0x6, 0x1}, 0x2b, 0x1000}}}, {{@ip={@private, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'xfrm0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x20}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318)
setsockopt$sock_timeval(r1, 0x1, 0x2, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000380), 0x0, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301)

5m16.371526255s ago: executing program 35 (id=675):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000014c0)={&(0x7f0000001380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@ptr, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x8, 0x1}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61, 0x5f, 0x5f, 0x5f]}}, 0x0, 0x46, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000000c0)={'gretap0\x00', <r1=>0x0, 0x80, 0x1, 0x1000, 0x8, {{0xd, 0x4, 0x1, 0x3, 0x34, 0x67, 0x0, 0x7, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@rr={0x7, 0x1f, 0x5e, [@broadcast, @broadcast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0x3a}, @remote]}]}}}}})
r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000000a80)=[{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000005c0)="b9b39b21b7f96fca8395142c5adfcd892c050b3b6852aa7f17ea8b78de57a4c8d695068d9841530de53c017c73aba772a3eab61bf9b3da62fd90d663565d9ccc671babc3f69a0034c4032001961d311dd45b17b14b498109317b0c1bf6d6098d15945dd30816e47857ec5c3ea43a2bb65caf4302d1f24ed8ea11754f85679254e0adc77c02f19d25690b2df45e7b0c08b9aff38b0cbe81ca3729ca0254dc6e85b9bdc612202ebbdf19f80b8942b1", 0xae}, {&(0x7f0000001500)="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", 0x1000}, {&(0x7f0000000680)="95dd8382131f28beae200a321ea67d19772fe8924f57c260426805ff6add50e36600fe3a238409ba94d6cab9bf4457504b58f1", 0x33}], 0x3, &(0x7f0000000700)=[@iv={0x100, 0x117, 0x2, 0xec, "1b32c2a802666fcbb4942cb84d38270da7cca8f4ea9c6a79e958005a2d75258547c0f4b567731c77092c814d982005123b916855c94d578654b2d0ee8c5133f879bce620588f266cd3d1472cdf89ff4fb546da43f0b17df5ae1c97b825352e8af679e100d8459b14c78c2bfdc53f42ca6d4a4c791387f22e087a724858b327d4f007a6d397fc87efa50911bfa95ab320db5a05a251c697969621e4b01fc74553ae8816cee6c4d1b0b6bffd83d8e493db229f7e903515542c22863540817145469517d65198b556954eff9bd84930bf5184b83b781502b562e4d3c50327ddd6a61afd4f164059e88c48f0f3e5"}, @iv={0x100, 0x117, 0x2, 0xe5, "6ac5e23fc5bef92b66f560f36872795f4964182a98006a31350f24bc0c6de25a91ed0ab55f3493a367e8302fde36c97d4f2e1c01129e4942cb569ce7f8b24632883e224b84379a893776433f70a2a3d171e49bb809f137004b4a961ff9cb168f8066629763671a52f1d9cdf702082299affbd2372881140665f6c74baa0f4ead8062a9f70f4f3bf53988f47db01ef2c3cd945b9d5378cd195180fb52fa942639e3585e7b0072884380d2bf356d997ad22673f8a5e62d52cbd9d0ca84329d7c2e6c19a3ceb90361fa4090e09cadbd0f47d46e4a24abca64047c952bcc5dfa35bb6b1a8a9834"}, @iv={0x20, 0x117, 0x2, 0x6, "043718f85c99"}, @op={0x18}, @iv={0xc8, 0x117, 0x2, 0xb1, "d05f1953eb855f0d426dd77fcfb21103bec3d0d31a249c1f380a915d3a78f59dd7bdd7b815075d691a61a08f75d131cbb4fc4fcfe7217ae737e7ccf9dcaa0718682880eb6b444e06f5789e59603ba88fb7c071b4e8eb3ebb12889b8d3e8d29d51b018a35b167c37a5c38a73b9e5bfd614183583da193456dea02abb3280a9acad6e606860586453b2f2f417ba4c722c4eb8eefbdf721791f34d3f440575e5f826bb2fe66094215d12304ff5ffcb067a1d0"}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x1d3}, @op={0x18, 0x117, 0x3, 0x1}], 0x348, 0x4}], 0x1, 0x4040004)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/meminfo\x00', 0x0, 0x0)
getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000080)={<r4=>0x0, 0xaa2dbbb, 0x4, 0x5}, &(0x7f00000000c0)=0x10)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000100)={r4, 0x500}, 0x8)
lseek(r3, 0x1000000, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, 0x0, 0x275a, 0x0)
preadv(r6, &(0x7f0000000140)=[{&(0x7f0000000540)=""/72, 0x48}], 0x1, 0x9, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, <r7=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0xe158, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, r0, 0x4, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0x0, 0x3ff, 0x8}, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
read$rfkill(r6, &(0x7f0000000ac0), 0x8)
r11 = fanotify_init(0xf00, 0x0)
fanotify_mark(r11, 0x105, 0x4800003a, r10, 0x0)
read$FUSE(r11, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x4040, &(0x7f0000000b40)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_on}], [{@smackfsdef={'smackfsdef', 0x3d, 'lowerdir'}}]})
r12 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0xfffffff9, 0x7, 0x9, 0x40000, 0xffffffffffffffff, 0x1, '\x00', 0x0, r0, 0x2, 0x4, 0x2, 0x3, @void, @value, @void, @value}, 0x50)
r14 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8b05, &(0x7f0000000040)={'wlan0\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x3, 0x2, 0x2, 0x3, 0x3, 0xb73780cd953e9ee, 0xfffffffffffffff0}, @exit]}, &(0x7f0000000040)='syzkaller\x00', 0x10001, 0x29, &(0x7f0000000080)=""/41, 0x41100, 0x2, '\x00', r1, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x2, 0xf, 0xfffffffe, 0x28}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000400)=[r6, r7, 0xffffffffffffffff, r8, r9, r12, r13], &(0x7f0000000440)=[{0x5, 0x5, 0x7, 0x1}], 0x10, 0x4, @void, @value}, 0x94)

4m33.308016512s ago: executing program 7 (id=792):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000007000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r1 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e0021768238324ee0d5b18eabeda10c06e6143315"], 0x1c}}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000015eaae20da05b600b7cd01a19b010902120001000000000904000000bf4635000e36ee3b2dd35f4737ef33225c605b37e3699a067be722e7e29bf315b3b55d0a770a12b12c97ffc1baea23ae1e2c84596c9eee8b938fba9c6c12fa3c929c98d1a8c3c451e47506015c1e14c5c63ae59eb98fce811a59bcd8405cad5d12da27aa7df6479d444663508e7cefe884b5a5a5dda6f75403"], 0x0)
recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xa}], 0x2, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES64=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000001c0)='mr_alloc\x00', r2, 0x0, 0x9}, 0xfffffffffffffcbf)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.stat\x00', 0x26e1, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000000)='--\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7, 0x0, 0xfffffffffffffffe}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_freezer_state(r8, &(0x7f0000000140), 0x2, 0x0)
sendfile(r9, r9, 0x0, 0x9)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
setsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000000040)=0x7, 0x4)

4m29.518473985s ago: executing program 7 (id=806):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0) (async)
ptrace(0x10, r0)
ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000000)={&(0x7f0000000080)=""/4096, 0x1000}) (async)
ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000000)={&(0x7f0000000080)=""/4096, 0x1000})
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/376]}, 0x1f0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) (async)
r3 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r3, 0x3, &(0x7f0000000400)='roo4c\xbe\xb1\x8f/hi\"9\xf2\xe7\xe0\xa7/\x17\'?\xae)\x18\xb2r\xfc%(\xe4\x9c\f\xbf\xb5\x83\x18\xb6^X\xa0\xf6\xdd\x0f\x1d\xd0\x03\x14\xe3\x96\x0f\xc4\xd1\xdb\xfb\x8dU\x15\xcb\xf3f\xf2\xd0y3\vz/\\\xe9\xf5*\xa5\xdf\xdf\xbeP%4\xe0\xcc!\xff\x140\x8b\xdeX\xc4\xfe\x85\x80X\b\x1d\xe9T\x95K\xad\xaf@\x9b\xbb\xf4\x96c\v\xe0\x8dG\xe0~\xde\x86=\xc0\xd0 \xbf\xf8\x0f\xd7\x99\xb8\t\x8amhG\xb5_\\\x14$d\xf3\\]*>\xcf\x18\xcb!\xe9i\x01\xcd\x1e\xc6\x9d$d\x9f*@|\a\xe8\x17\xe8M2Z;\xd4\x03\xfe\x8a_G\xfd\xf8\xf2\xc1\x11\x9f\xfc)\xd5\xeaP\xe6\xaf|4ad\xd6\xca%0\xe0\xfcf[7m\xba\x1f\xff\x9e\xa3\xcd\x1e\xaaj\xd2Pp8\x19\vJl!K\xfd\xe7\x9f\x1d\'\xc6\xd2\xe2\xf2[+\x83+\x8b\x8c\xf7\xb4C\xac\x02\xc4\xbf\x89\x93l\x9b\xd6s', &(0x7f0000000300), 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001100)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x80004}, 0x0)

4m29.07085885s ago: executing program 7 (id=809):
syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', <r0=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x4, 0xcf9, 0x46, 0x10, 0x1, 0x8, '\x00', r0, 0xffffffffffffffff, 0x3, 0x1, 0x1, 0x5, @void, @value, @void, @value}, 0x50) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x4, 0xcf9, 0x46, 0x10, 0x1, 0x8, '\x00', r0, 0xffffffffffffffff, 0x3, 0x1, 0x1, 0x5, @void, @value, @void, @value}, 0x50)
openat$sndtimer(0xffffff9c, 0x0, 0x40) (async)
openat$sndtimer(0xffffff9c, 0x0, 0x40)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
fsopen(&(0x7f0000000000)='exfat\x00', 0x0) (async)
fsopen(&(0x7f0000000000)='exfat\x00', 0x0)
socket$kcm(0x10, 0x400000002, 0x0)
pipe2$watch_queue(&(0x7f0000000080), 0x80)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd}, 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10)
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r5, &(0x7f0000000540)={&(0x7f00000003c0), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r6, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r5, &(0x7f0000000540)={&(0x7f00000003c0), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r6, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/cgroup', 0x0, 0x0) (async)
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/cgroup', 0x0, 0x0)
getdents64(r8, &(0x7f0000000000)=""/22, 0x54)
setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x278, 0xe0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, &(0x7f00000001c0), {[{{@ip={@multicast1, @multicast1, 0xffffffff, 0x0, 'syz_tun\x00', 'wlan1\x00', {}, {}, 0x2d, 0x0, 0x40}, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x6cf4, 0x1, 0x0, 'syz0\x00', {0x3ff}}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4c, 0xc23]}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local, 0x6, 0xe, [0x24, 0x1a, 0x27, 0xd, 0x3e, 0x2e, 0x2, 0x1b, 0x2b, 0x20, 0x29, 0xb, 0x2b, 0x6, 0x2c, 0x3f], 0x1, 0x9, 0x5f62}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socket$kcm(0x29, 0x2, 0x0) (async)
r9 = socket$kcm(0x29, 0x2, 0x0)
getsockopt$kcm_KCM_RECV_DISABLE(r9, 0x11e, 0xf4240, 0x0, 0x0) (async)
getsockopt$kcm_KCM_RECV_DISABLE(r9, 0x11e, 0xf4240, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r7}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0500000004000000ff0f00000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000009507000200439639987fe0ad4af5f29de09e804f73dd3156a13f92fdff692f5097a4b8e24e583d579d756e44d0b590776197b5bf1960a7033f390fc4a0f58bc390f5f946dc65b20720b6f19da7104b1b31223c73ea7073c84e41b41f924749cf3ac6980843d157605680f5436d9b8ad243a314", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)

4m25.738516588s ago: executing program 7 (id=819):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = socket$key(0xf, 0x3, 0x2)
mkdir(&(0x7f00000009c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
mount$overlay(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r1 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
getdents(r1, &(0x7f0000000180)=""/98, 0x62)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000240), 0x2e50, 0x222040)
sendmsg$key(r0, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0)
futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r2 = socket(0x11, 0x3, 0x0)
setsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000200)=0x10001, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000000280)='#', 0x1}], 0x1}, 0x0)
recvmsg$kcm(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x7, &(0x7f0000000180), 0x43)
getsockopt$bt_BT_SECURITY(r2, 0x107, 0x18, 0x0, 0x20000002)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100153a42908f00a71729188010203010902240001060000000904020002ffffff0009050b0000000000000905", @ANYRES8], 0x0)

4m21.871155592s ago: executing program 7 (id=828):
r0 = socket$kcm(0x29, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, 0xffffffffffffff1e, 0x0}, 0x0)
capset(&(0x7f0000000300)={0x20080522}, &(0x7f0000000340))
r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x8202)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, &(0x7f0000000000))

4m19.10444448s ago: executing program 7 (id=835):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_x25_SIOCADDRT(r1, 0x890b, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
ioctl$SIOCX25SENDCALLACCPT(r1, 0x89e9)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000900000000000000", @ANYRES32, @ANYBLOB="0104000000000000000000efffffff0000000000e3e1320d4483264979577440d557cf8650d89d6429d7094c763cd78e583d753db00cd59f4ccc4e26c3b88134860e10c4671a8ac5740ef148bd2fc5447f520da8a4dbe0efb58e9895606e90f68fdc278c19f967c2b8387e051ddad7c0a9b541948f0dd0f2", @ANYRES32, @ANYRES32, @ANYBLOB="02000000030000000300"/28], 0x50)
r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, 0x0, 0x26e1, 0x0)
r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x5)
writev(r6, 0x0, 0x0)
r7 = dup(r4)
mkdirat$cgroup(r7, &(0x7f0000000100)='syz1\x00', 0x1ff)
socket$kcm(0xa, 0x2, 0x88)
ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0)
ioctl$I2C_PEC(0xffffffffffffffff, 0x708, 0x9)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f0000000180))
setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x4401, 0x8, 0x80000002, 0x6, 0x1ff}, 0x14)
add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)

4m18.818013636s ago: executing program 36 (id=835):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_x25_SIOCADDRT(r1, 0x890b, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
ioctl$SIOCX25SENDCALLACCPT(r1, 0x89e9)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000900000000000000", @ANYRES32, @ANYBLOB="0104000000000000000000efffffff0000000000e3e1320d4483264979577440d557cf8650d89d6429d7094c763cd78e583d753db00cd59f4ccc4e26c3b88134860e10c4671a8ac5740ef148bd2fc5447f520da8a4dbe0efb58e9895606e90f68fdc278c19f967c2b8387e051ddad7c0a9b541948f0dd0f2", @ANYRES32, @ANYRES32, @ANYBLOB="02000000030000000300"/28], 0x50)
r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, 0x0, 0x26e1, 0x0)
r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x5)
writev(r6, 0x0, 0x0)
r7 = dup(r4)
mkdirat$cgroup(r7, &(0x7f0000000100)='syz1\x00', 0x1ff)
socket$kcm(0xa, 0x2, 0x88)
ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0)
ioctl$I2C_PEC(0xffffffffffffffff, 0x708, 0x9)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f0000000180))
setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x4401, 0x8, 0x80000002, 0x6, 0x1ff}, 0x14)
add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)

9.038831264s ago: executing program 9 (id=1645):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="67d8902400aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x427}], 0x2}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0x30}}, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYRES64=r0], 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0)

8.143466862s ago: executing program 8 (id=1647):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x11, 0x80a, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x1400}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x2004}, @IFLA_BOND_USE_CARRIER={0x5}]}}}]}, 0x44}}, 0x0)
setsockopt$netrom_NETROM_T1(r3, 0x103, 0x1, &(0x7f0000000080)=0x5, 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r6, 0x80de02bd3ca0bfdb}, 0x14}}, 0x0)
sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r6, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xe71}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x1)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
socket$kcm(0x10, 0x2, 0x0) (async)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) (async)
syz_usb_control_io$hid(r1, 0x0, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket(0x11, 0x80a, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async)
sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x1400}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x2004}, @IFLA_BOND_USE_CARRIER={0x5}]}}}]}, 0x44}}, 0x0) (async)
setsockopt$netrom_NETROM_T1(r3, 0x103, 0x1, &(0x7f0000000080)=0x5, 0x4) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) (async)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r6, 0x80de02bd3ca0bfdb}, 0x14}}, 0x0) (async)
sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r6, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xe71}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x1) (async)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) (async)

7.85914755s ago: executing program 5 (id=1649):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000400)={r2, &(0x7f0000000300)}, 0x20)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8)
close(r3)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x13, 0x10, 0x8, 0x0, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r6, 0x0, 0x0}, 0x10)
fstat(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
r8 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r9=>0x0}, &(0x7f0000cab000)=0xc)
setuid(r9)
r10 = getegid()
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001080)=@mangle={'mangle\x00', 0x1f, 0x6, 0x610, 0x380, 0x470, 0x130, 0x470, 0x220, 0x540, 0x540, 0x540, 0x540, 0x540, 0x6, &(0x7f0000000040), {[{{@uncond, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@owner={{0x38}, {r7, r9, 0x0, r10, 0x2, 0x2}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x81, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv4=@rand_addr=0x64010100, 0x2c, 0x3f, 0x9c0}}}, {{@uncond, 0x0, 0x120, 0x160, 0x0, {}, [@common=@dst={{0x48}, {0x8, 0x3, 0x0, [0x40, 0x3, 0x7b9, 0x5, 0x7ff, 0xff7f, 0x6, 0xe1c, 0x2, 0x8250, 0x2, 0x8001, 0x2, 0x3, 0x101, 0x7], 0xb}}, @common=@frag={{0x30}, {[0x9, 0x6], 0x8000, 0x5}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x7, 0x2, @ipv4=@multicast2, 0x4e20}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@private2, 0x1a, 0x3f, 0x400}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast2, [0xffffffff, 0xffffff00, 0x0, 0xffffffff], [0xff0000ff, 0xff000000, 0xff000000, 0xffff00], 'veth1_to_bridge\x00', 'team0\x00', {0xff}, {}, 0x1, 0x9, 0x7, 0x10}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x670)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup=r4, r6, 0x1, 0x0, 0xffffffffffffffff, @void, @value=r3}, 0x20)
syz_usb_connect(0x0, 0x36, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05044000000905", @ANYBLOB="62cf"], 0x0)

7.143730694s ago: executing program 6 (id=1650):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r2 = io_uring_setup(0x4c8d, &(0x7f0000000900)={0x0, 0x46ff, 0x80, 0x3, 0xb1})
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000001cc0), 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0x2, 0x3}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000100)})
move_pages(0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000006c0)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}}, 0x108)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000002c0)={{0x0, 0x0, 0x10001, 0x2, 0xd}})
mount(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='pstore\x00', 0x0, 0x0)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000034615020000000400000000000000070000000000000000da863093ddd134b5e078cc"], 0x1c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELFLOWTABLE={0x80, 0x18, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x38, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5c4}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWSETELEM={0x5c4, 0xc, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x578, 0x3, 0x0, 0x1, [{0x56c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @cmp={{0x8}, @void}}, @NFTA_SET_ELEM_USERDATA={0x19, 0x6, 0x1, 0x0, "8bd53e65877d8fe49c54b04ade3fc216b141107a5a"}, @NFTA_SET_ELEM_DATA={0x1f8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd8, 0x1, "3ef879ff27a59426ea407c567a3b65c7eeb56ad8442ba5676ada7f11c12c3832703682af2a5955529b7629531c0dc3ecab3572e5f127d5c757f13d5affb36077f49971b12d1f46d1530d647eac290286719db2d72341c91c40d6dfb585247da2017f6906f997c1be447c85af7a06ac3c043a660dc8e61680ab15561e10c58c166ea4e3b2780ce483c5569e48e8f4d5ecfb155a916a614b8ad9a3a0ffec1548a957812568f67aa75a093a6daf4444bc20dd8babb7338009fd6879c0c99cb460718b10544a25ef241ccd76ae16e0269f7a14ff33a0"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0xa5, 0x1, "9044b3c10e8b28353a77d387eff7468c2d01e2dca8d96b8f4faf8ab600258f5cf4386d60cbbc19e2720ff88de4904a46057090e22551ed3130f49097b485bf7455db3a380799a5c072c1c77dd79a83f8796b49392e6cb27356f26821166ae42dd045a6f07719eba7d1612e158812c4c1324b8782b6dfb0768e0922db7782c1c863397492d22b348a26a0c6b769d8b6ed5dbca1a02418bed8abff527cae120ccff8"}, @NFTA_DATA_VALUE={0x5e, 0x1, "e445df764deb495f428731d77d41ed5b0463542ed3874ed5f7c12dd0c299604ed0116c65a10926f2818ee23893cd53d5d1b1eba79aa27b66f5d1c8a727570b049e46688c40f5cb43852e8266f0a5939bf9cda2eb23b8d931cd39"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPR={0x34, 0x7, 0x0, 0x1, @redir={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x20}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4e}]}}}, @NFTA_SET_ELEM_DATA={0x21c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xad, 0x1, "d9a2937a6cbc7fa3f999c3fd3a0596dd4447203d5dda1bb270a586361757a51000ba4ffbbd5414d6c7b821bcd4b2a628d978e9f832f5f6c43d7127c5a1babf5814064c1470d0504b7eed9e815a23b322d900c1a8a66bedd5b60255a4026459ed43f5ff3dbc000744fa4c4b4803c083632f892c8f1c4d7203eed0fd82ae4a60a818e9845ce0edd68e4381f63063ba7f0712ac0548b124c084c468e31cecb180db97cf54718b0d720a49"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x9, 0x1, "8a026f644a"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff9}]}, @NFTA_DATA_VALUE={0xaf, 0x1, "b710596580161d78a6d5d12cb087a4df8b4352cbd82448879aa1986fd5ba32a9ef1000bfba61952468ef5750837b2b6e620d76a093781511b2c1351cb6f89da095f26e65b86d01f41551ee88d36c689e395d39b9345579f2630f1e6c82ff846440b98c1f777d8ee72429e7f2054509ab2ea58ef4164187f660fa95989668afe615b3be2edcdf4b2c72ffd33cf08b7184a4c9a3df30083511c262c9a7d1b37869776d9d3e8050d973c59a92"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0xf0, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}]}}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x44, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_OBJREF_SET_ID={0x8}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz2\x00'}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x11}]}}}, {0x34, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}]}]}, {0x4}, {0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x66c}, 0x1, 0x0, 0x0, 0x4080}, 0x801)

6.908840727s ago: executing program 8 (id=1651):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x40000008, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='attr/exec\x00')
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x2}]})
syz_clone(0x10000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
fsopen(&(0x7f0000000040)='ncpfs\x00', 0x1)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r0, 0xffffffffffffffff, 0x0)

6.286690224s ago: executing program 5 (id=1652):
syz_emit_ethernet(0x3a, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0) (async)
syz_emit_ethernet(0x3a, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x4e00, 0x0, 0x0, 0xbdff, 0x0, "fdffffffffffffff"})
write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xfffffeb7)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x90, 0x1b, "00bf46f8bbde7047bcd4a280000400"}) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x90, 0x1b, "00bf46f8bbde7047bcd4a280000400"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0) (async)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) (async)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17)
syz_emit_ethernet(0xd2, &(0x7f0000001600)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x28, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x45, 0x0, [{0x0, 0xc, "df61168c24ac88ad078c"}, {0x0, 0xa, "2189ea43a2149b84"}, {0x0, 0x12, "ffd11634eea26b0faffa0dea2e903528"}, {0x0, 0x9, "02a20948fd7406"}, {0x0, 0xe, "ccf0294e2a3bdb4aa40b249e"}]}, @timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [0x0]}]}}, "a815a23da43974ff"}}}}}, 0x0) (async)
syz_emit_ethernet(0xd2, &(0x7f0000001600)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x28, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x45, 0x0, [{0x0, 0xc, "df61168c24ac88ad078c"}, {0x0, 0xa, "2189ea43a2149b84"}, {0x0, 0x12, "ffd11634eea26b0faffa0dea2e903528"}, {0x0, 0x9, "02a20948fd7406"}, {0x0, 0xe, "ccf0294e2a3bdb4aa40b249e"}]}, @timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [0x0]}]}}, "a815a23da43974ff"}}}}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r3)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300) (async)
r5 = socket$packet(0x11, 0x3, 0x300)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff})
getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async)
getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r5, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r7}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="00000000010000000000000000000000ff030000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='\a\x00'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r9, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20)
sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x14}}, 0x0)
sendto$inet6(r4, &(0x7f0000000040)="0b118f2b4190be586d04d99304c7975dfca451f6a36e5e11c583738f22bfc241adfd70c9456ea4fe6a5e0716c24ab3", 0xfffffffffffffea5, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c)
r10 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x10, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r10, 0xf4240, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x2, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040257d15a440000104000109026000420100000009040000010209"], 0x0)

6.224247276s ago: executing program 2 (id=1653):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x1)
syz_usb_connect(0x0, 0x24, &(0x7f0000001080)=ANY=[@ANYBLOB="120100000575c820490d00702f26010203010902120001000000830904"], 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e24, 0x0, @mcast1}, 0x10)
syz_open_dev$ndb(0x0, 0x0, 0x410640)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])

6.157842745s ago: executing program 6 (id=1654):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2172, 0xffffffffffffffff, 0x0)
quotactl$Q_QUOTAON(0xf11a0da8af4766ba, 0x0, 0x0, 0x0)
munmap(&(0x7f0000000000/0x4000)=nil, 0x4000)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
ioctl$SNDCTL_SEQ_SYNC(r1, 0x5101)
timer_create(0x0, 0x0, &(0x7f0000001400))

6.072090207s ago: executing program 6 (id=1655):
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
fcntl$getflags(0xffffffffffffffff, 0xb)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x8, @dev={0xfe, 0x80, '\x00', 0x33}, 0x2}, 0x1c)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000020c0)={'erspan0\x00', 0x0})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl1\x00', 0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000002140)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x2, 0x80000004, 0x5, 0x2}, {0x5, 0x5, 0x5, 0x6}], 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0xe22, 0x0, @rand_addr, 0x1}, 0x1c)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000280)={0xa, 0x4e22, 0x7, @mcast1, 0x3}, 0x1c)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
add_key$keyring(&(0x7f0000000040), &(0x7f0000002100)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000004380), 0x101602, 0x0)
read$FUSE(r2, &(0x7f0000002180)={0x2020}, 0x2020)
r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
io_setup(0x8, &(0x7f0000004200)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}])

5.251634521s ago: executing program 8 (id=1656):
r0 = socket$inet_udplite(0x2, 0x2, 0x88) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000000)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) (async)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
preadv(r1, &(0x7f0000001e00)=[{&(0x7f0000001e40)=""/4096, 0x1000}], 0x1, 0x9, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
rmdir(0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000e141743a682380847fccace8c94b886d027117f01249a3e4c12e6e03dd54ea896877bdd48e8d1b240764bdca889b4215a83ed04bd3c3fda0a5bba90bc21ca9a39979b6720463b5fd11318eb3731e1d3955cd9279f7655952b2c9"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, 0x0, 0x0)
r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x80000d})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000280)=[0x1], &(0x7f0000000340)=[{0x4, 0x2, 0x6, 0x8}, {0x0, 0x1, 0xb, 0x8}, {0x0, 0x2, 0x9, 0x5}, {0x1, 0x2, 0xf, 0x7}, {0x3, 0x5, 0xe, 0xa}, {0x5, 0x2, 0xf, 0x2}, {0x5, 0x5, 0x3, 0x9}], 0x10, 0xfffffffb, @void, @value}, 0x94)
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') (async)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) (async)
r5 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_FREE_MR(r5, 0x114, 0x3, &(0x7f00000005c0)={{0x0, 0x66}, 0x44}, 0x10) (async)
creat(&(0x7f0000000300)='./bus\x00', 0x0)
listxattr(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) (async, rerun: 32)
writev(r4, &(0x7f0000000200)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) (async, rerun: 32)
r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x4f}, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f000000fd00), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000001a0000000c002280040200800400008005009200000000"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
r9 = socket$inet_tcp(0x2, 0x3, 0x6)
connect$inet(r9, &(0x7f0000000300)={0x2, 0x0, @loopback}, 0x10) (async, rerun: 64)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xf, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (rerun: 64)

5.222322869s ago: executing program 9 (id=1657):
syz_emit_ethernet(0x3b6, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0, 0x0, 0x100}, 0x18)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940))
openat$tun(0xffffffffffffff9c, 0x0, 0x98041, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = openat$incfs(0xffffffffffffff9c, 0x0, 0x10841, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$FUSE_INIT(r3, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000400), 0x3, 0x1)
mkdir(&(0x7f0000000440)='./file1\x00', 0x1a0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000140)='./file1\x00')
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
read$FUSE(r1, &(0x7f0000000980)={0x2020, 0x0, 0x0, <r5=>0x0}, 0x2020)
quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, r5, &(0x7f00000000c0)={0xffffffffffffffff, 0x1, 0xa960, 0x0, 0x201, 0x1, 0x0, 0xfffffffffffffffc, 0x2062})
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
r8 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r8, &(0x7f0000000480), 0x21, 0x0)
migrate_pages(0x0, 0xfc, &(0x7f0000000200)=0x8000000000000001, &(0x7f0000000240)=0x1)

4.19829004s ago: executing program 9 (id=1658):
syz_open_dev$tty1(0xc, 0x4, 0x1)
pipe2(0x0, 0x800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040f0200b70604"], 0x7)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="48000000100001047fff00"/20, @ANYRES32=r5, @ANYBLOB="0000040000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r5], 0x48}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
epoll_create(0x1)
read$FUSE(0xffffffffffffffff, &(0x7f0000002900)={0x2020, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}, 0x2020)
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
splice(0xffffffffffffffff, 0x0, r7, 0x0, 0x100000000, 0x0)
ioctl$GIO_CMAP(0xffffffffffffffff, 0x4bfb, &(0x7f0000000000))
wait4(r6, 0x0, 0x8, &(0x7f0000000440))
ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'gretap0\x00', {0x2, 0x4e20, @empty}})

4.07721884s ago: executing program 6 (id=1659):
r0 = socket$xdp(0x2c, 0x3, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0xfffffe60, &(0x7f00000002c0)=0x400001000000002)
read$msr(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
r2 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/138, 0x0})
close(r0)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040))
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000240)={0x0, 0x0, 0x80000, 0x0, <r3=>0xffffffffffffffff})
write$midi(r3, &(0x7f0000000440)="97904d559ddaf5cbdc5c4feb8c1c8dfb98d7ea3e696c5d78bd9aa167c7c13734addc1ef72caf89ba76150be2f6413db282b5f6c6f51304e43690393183166a61cc4d5902f8fa3b3e82596ceaf12db304b7cbcc3162986184087a15e2a1bef9ac8afbe4f25204cafc3b156b97a910851cd7bb32718613484d5e12df29a439d7deed5396c5272268e8c91b7913e65730f1d9b910", 0x93)
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0})
msgget$private(0x0, 0x1)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900020073797a3200000082fbab55300a9fa4c223debf658c000900010073797a3000000000140000001100010000000000000000000000000a179bc8770d86cc037ee10a211a572d07c0357f45542e88b61e06af67f3"], 0x54}}, 0x0)
syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r5}, 0x10)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r7}, 0x10)
close(r6)

3.280158285s ago: executing program 8 (id=1660):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f00000004c0)={0x23d17, 0x0, 0xfffffffd, 0x3, 0x0, "7e12105588f633bbb1df022dace17a32d211ee"}) (async)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000003c0)={'vlan0\x00', &(0x7f0000000340)=@ethtool_coalesce={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x80001}})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
r3 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10)
syz_usb_connect(0x0, 0x38, &(0x7f00000002c0)=ANY=[@ANYBLOB="120110038121e940e60491553994010203010902260001000000000904000002e515bb00090504020900000000090588"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) (async)
write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) (async)
recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})

2.915689777s ago: executing program 2 (id=1661):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x4, &(0x7f0000000200)=ANY=[@ANYRES64=r1], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = gettid()
sched_setscheduler(r4, 0x7, &(0x7f0000000240)=0x6)
write$qrtrtun(r2, &(0x7f0000000900)="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", 0x45c)
r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x40)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000000400)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x3e, &(0x7f0000002380)={@link_local={0x1, 0x80, 0xc2, 0x3}, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x8, 0x11, 0x0, @private2, @mcast2, {[], {0x60, 0xe22, 0x8}}}}}}, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r5, 0x0, 0x0}, 0x10)

2.342784474s ago: executing program 2 (id=1662):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000000400000005"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r1}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x3)
syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0xff, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604000000020060100000000000000000000000000000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="800700009078000f080a00000405000000004000"], 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x4, 0x4, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3)

2.264451397s ago: executing program 5 (id=1663):
mq_open(&(0x7f00000001c0)='!,#$*\x00', 0x40, 0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000400)={0x77359400}, &(0x7f0000000480)={[0x5]}, 0x8)

2.262993759s ago: executing program 6 (id=1664):
syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000d5e58d1045058080020001020101090212000000f2adf70000000000000000007ee9f20d7debc604e7b193540a0b40a35f7b2f80507f2df8ed8354cb7d73c4ca810d07286d9be5eff005bddc99642fb0fc7d0e20f18748a39a50524ec3d09130fbe74c5dafad6016a235e2154f25f4fa339b9b6a44bfcfcd6d8ab3f9d3b98fd852fce480adfd2c2d953cd500e57967551baf6759dd0049bd52ff0c6e03e6d61f0d0cacd135c8da4b2dbbe94bf8aee8f13da50026e145ebfc"], 0x0)
r0 = fsopen(&(0x7f0000000000)='iso9660\x00', 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x280000, 0x0)
set_mempolicy(0x4000, 0x0, 0x3)
set_mempolicy(0x3, 0x0, 0x856)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e40000000201010802000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000004900018014000300ff010000000000000000000000000001001e000000000000000000000001c190c85a050001000000000047000280050001000100d66f6a1d26e922868900000600034000000000060005"], 0xe4}}, 0x20044000)
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x20040, 0x0)
syz_open_dev$swradio(&(0x7f0000000180), 0x0, 0x2)
syz_emit_vhci(&(0x7f00000036c0)=ANY=[@ANYBLOB="043e0c0201050000003074c5f1c18a"], 0xf)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000008300), r3)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000008440)={0x0, 0x0, &(0x7f0000008400)={&(0x7f0000008340)={0x4c, r4, 0x9, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3d}}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:crack_db_t:s0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r3)
sched_setaffinity(0x0, 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, 0x0)
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, r5, 0x0, 0x1000, 0x2000})
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000040)={'bond0\x00', 0xff})
ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000080)={0x28, 0x4, r5, 0x0, &(0x7f0000000040)="c5dbad6c7d43aa6171040d44dfa72a3b", 0x10, 0x3})
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0)

2.12733154s ago: executing program 2 (id=1665):
r0 = io_uring_setup(0x2e34, &(0x7f0000000180)={0x0, 0xfffffffe})
r1 = socket(0x15, 0x5, 0x0)
getsockopt(r1, 0x200000000114, 0x2710, &(0x7f0000019580)=""/102392, &(0x7f0000000000)=0x18ff8)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000108500000008000000bf08fffff900000055090100000000009500000000ec0000bf916a0000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)

2.114249472s ago: executing program 9 (id=1666):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00')
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0)
write$vhost_msg(r1, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0xc4b00, 0x0)
ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000080))
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x40241, 0x0)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000004700)={'team0\x00', <r7=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r6, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r7}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084)
r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_open_dev$tty1(0xc, 0x4, 0x2)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r9 = socket(0x400000000010, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x100}, 0x0)
write(r9, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000240)="67f30f09660fae7e0066b9c100000066b80d00000066ba000000000f3066670f30f2e18d0f20c06635000001000f22c066b9800000c00f326635008000000f30c02d1866b9ac0200000f32f30f01df", 0x4f}], 0x1, 0x2, 0x0, 0x0)
ioctl$KVM_NMI(r8, 0xae9a)
ioctl$KVM_RUN(r8, 0xae80, 0x0)

1.948528423s ago: executing program 2 (id=1667):
mount$tmpfs(0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0))
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x280000)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x14})
prctl$PR_SET_IO_FLUSHER(0x43, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f010400000009058303"], 0x0)

1.872518447s ago: executing program 9 (id=1668):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x5, 0x4, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000013c0)={{r0}, &(0x7f0000001340), &(0x7f0000001380)='%pI4   \x00'}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r0}, &(0x7f0000001780)=0x4, &(0x7f00000017c0)='%-010d \x00'}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0)
ioctl$TCXONC(r1, 0x540a, 0x2420a5e89e75800a)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
landlock_create_ruleset(0x0, 0x0, 0x0)
r3 = open$dir(&(0x7f0000000200)='./file0\x00', 0xa400, 0x5d)
renameat2(r3, &(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, 0x0, 0x5)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x400200, 0x0)
write$sysctl(r4, &(0x7f0000000180)='0\x00', 0x2)
landlock_create_ruleset(&(0x7f0000000000)={0x405, 0x3, 0x2}, 0x18, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r5 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080))
r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$802154_dgram(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xffff}}, 0x14, &(0x7f0000000080)={0x0}}, 0x0)
recvmmsg(r6, 0x0, 0x0, 0x162, 0x0)
r7 = socket(0x10, 0x3, 0x0)
getpeername$packet(r7, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r7)
ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2})
socketpair$unix(0x1, 0x1, 0x0, 0x0)
pipe(&(0x7f0000000080))
syz_open_dev$tty1(0xc, 0x4, 0x1)

1.260014596s ago: executing program 5 (id=1669):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@private=0xa010100, 0x0, 0x6c}, 0x0, @in6=@dev, 0x0, 0x4, 0x0, 0x0, 0xb7b0}}, 0xe8) (async, rerun: 32)
ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, 0x0) (async, rerun: 32)
sched_setscheduler(0x0, 0x1, 0x0) (rerun: 32)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 64)
sched_setscheduler(r1, 0x0, &(0x7f0000000200)=0x362) (async, rerun: 64)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) (rerun: 32)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (rerun: 32)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) (async, rerun: 64)
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xf6ff) (async, rerun: 64)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, 0x0, 0x0) (async)
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) (async)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6)
ioctl$sock_bt_hci(r7, 0x400448c8, &(0x7f0000000000)) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (rerun: 32)
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x4}, 0x8) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

1.128449839s ago: executing program 8 (id=1670):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0xa0800, 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000100)={0x28, 0x0, r2, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2519d911})
setsockopt$packet_int(r1, 0x107, 0x13, &(0x7f00000000c0)=0x4009, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'vlan1\x00', <r4=>0x0})
sendto$packet(r0, &(0x7f0000000180)="0b031000e0ff030002004788aa96a13bb1000000000081000500", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14)

1.001396824s ago: executing program 5 (id=1671):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES64=r1, @ANYRES16, @ANYRES32=r2, @ANYRES64=r3], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4004050)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
syz_emit_ethernet(0x6b, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x4e23, @local}, 0x10)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0)
write$cgroup_int(r7, &(0x7f0000000280)=0x7, 0x12)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10)
r8 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
pwritev2(r8, &(0x7f0000000180)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$USBDEVFS_REAPURBNDELAY(r8, 0x4008550d, &(0x7f0000000040))
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)=';', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)}}], 0x2, 0x16da)

818.686388ms ago: executing program 8 (id=1672):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
bind$inet(r0, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r2}, 0x10)
sync_file_range(0xffffffffffffffff, 0x8, 0x2, 0x3)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
ioctl$TCGETS(r3, 0x5401, &(0x7f0000000080))
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0xb7}}, 0xe8)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)

193.33774ms ago: executing program 9 (id=1673):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00')
open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) (async)
open_tree(r0, &(0x7f0000000640)='\x00', 0x89901)
r1 = memfd_create(&(0x7f0000000a80)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\x01\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xe1*\xa2c\x12.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xf7\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x1f\x00\x00\x00\x00\x00\x00\x00]\x81\xf3\xf9\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\xa3\xac9&\xe6\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\x1ag\x00\x8eCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9\x1f\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4X,\v\xa5\xca\v|\xe2L\xac\x80\xc7\x11\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\v)\x06B\xf0\x01\x91 )y\xb4\xba\xba\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5\x92\xc3V\x116jY-\x83\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x03\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0s\xa8\x1f(\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9\x00\x00\x00\x00\x00\x00\xba3?Q\x00\x00SDl\xc6\xe0\xc5\xbc\x9c\xe8\x15\xe5kJ\xc2\x8a\x9a7\xff\xd1\r\x96=\x81\xb6\xdb\xf8\x03\x91L\b\xa3\r#\x9cX\xc4\x92\x90[p\xbb]X\rm^}\xa3\xe46(\x9d-\xf8\xf9o\xa9\x13\x00\x00\x00\x00\x00\x00&2\xdfy\xd0\x15\x9d`\x83\xa4\xa6\x14^9]H\xd7/KP\xae\xa8\a.\fHo\xaa\x85@\xae\x8d\xfag\xa5F\xe6\xdf\xc1\x80Sv\x92\x01?\xf6\xad\xe2\xf9A\'\xf49\xb1uo\xc1\x95H\xd6\xdew-;\vR\x15z8\xfe\xcb\xd1]\xe1\xebF\xe8\xe7\x9b\xa81\x8eEp\x99\xd8X\x06\'\xff2\xa8Q\v\x19)\xc35\x03Z0\xfcd5\xb1\x89v?4R,\xd8\x1e\xb3\xfa \x80t\xd8\xc3 \x97A\xef\xc5.\xb1\x02b\xb9\xab\x12@\xa9\x18\x84\xb2\xf6\x16\xb7\xbb\xa4\x89G\b\xc1\n\x04\xbb\a\x14DC#V>\x88\xa09\x8aPU\xf1\xebXn%$\x13\xaa\x80\x86Fb\xc0\\Z\xb3U\x00\xd3\xbb\xbb\xe3\xfe\x9br\xa2\x06\xe63\x1a/(s\xce\xda\x83n-v\x17\xf1D\x8c\xf4x\xc1v\a%\x87\x11\x86\xc92\xb7\x06\xe2\x0e\xb1\xe3KoE#\x88\xdb\xa5\x7fc[\xfd]\r\x87\x94\xf4\x0e47Bo\x8a\xfc\xb9\xcd\xbcK\xc9\x02\x00&\xae*\xa7\xfc\xc6\xf6-T\x1f\xad.\xf0\x00\x00\xf2\xb5\xafq?/\xc0\xec7\xe6>\xa2\x02\xc7x\x98#\xb6\xac\xfd\x86\x91%\x0f\xca><\x02.\xcb3\xfc\ns\xea\xbf&\xae`\x1d\x0f\xd4g\xd7\x81g:u9\xa3\xb2(yK\xcd\xa7\xa1\xc9%\x1b\xee\xd6Ob>\x8c\xde-#W\xfc&-\xd2\xc9\x0eW\xfcV?\x81\x9f+\xda<p\"\xd8\xe8\x98\xd2$\x1f\xa0U\xfc{\x13&\x0f \xe5\x14\x13ln\xc1\x00\x00\x00\x00\xff\xff\xff\xfe\x00\x00\x00\x00\x00\xfb\x97\xbcl\x9fc\x9c\xdfz\xaa\xbbd\x9c\x1fU\x10\x00\xad\x9cZ\xcf\x92\x17\xfa`\xad!\x1a$\xc30\t9\xbcG!\x8eI\x01\r\x91\x1e(\xfb\xb0N\xdb\xe8\x95\x13\x1a\t\xe0\x9e_\b\xa4\xec\xb1PD\x1bj\xc2\x84%\xb7]nQ}y\x84\xf8\x96\x1f\x19\xc7\xf4\x106\x99a\n\x94\xe4j\xe3\x7f%\x95\x82\x84\'\xcf\x19\xa7\x05\xd6h$C\xa4C\x94\xf9P\xf2K~\x1c\x80\xa0\xbeA\xf4\x15\xe7\xdb\x19g4O\xd4\x01\xeaaa\xe8\xef\xc6\xa6\xecp\x9fI\xc4\x01\x16\xe9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00g\xfaO\xd7>i\xf2\xd1\xb8[\xd0\x95\xa5\x04\xf9~\x93kj\xc3\xe1\xc2\xd8*SZ\xc3\xf9H/\xd7\v\xcb\x99_\x1d\xaan\"\xde\xc2\xc9\xe7>\a]Q\xce\\\xbas\xfcB\xaf\xf5\xb3-\xb95\xb9\f\x1f\xeb\xb3\xaf\xcb\x96\xfe \x81\xc0\xfb\xc7D\xf1)\x1d\xad\xf9V\xd1T\x9d\xb2\xba/\x0e\x17\xf6\xbd3F\x9e<\x1d\xf9\b\xd0\xe3Z\a\n\x14\nzY\xd2/\xe8\xdb\x066am\xad@\xbf\x11h\x9c\xcdQ\xf9\xc7\xd1g\r\x1bb\xc6\xc5\xba!`\xd7\xdcx\x92\'\x7f\xc4\xdf\xaf\x90\x94r\x93\x17\x18\xb8#gS:6\x93s\xcf\vqG', 0x0)
fallocate(r1, 0x0, 0x0, 0x1)
lseek(r1, 0x0, 0x4) (async)
lseek(r1, 0x0, 0x4)
fstat(r0, &(0x7f00000029c0))

140.299653ms ago: executing program 6 (id=1674):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000002e000102000000000000000000000017"], 0x14}}, 0x0) (async)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async)
syz_io_uring_setup(0x6d81, &(0x7f0000000080)={0x0, 0x17da, 0x10100, 0x0, 0x368}, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) (async)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) (async)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d974fcf00fd4ef6dece6c7c58", "0000f200", "006e34e400"}, 0x28) (async)
sendto$inet6(r5, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) (async)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()

128.040961ms ago: executing program 2 (id=1675):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r1 = socket$inet(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000000c0)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x130, 0x130, 0x0, 0xffffffff, 0xffffffff, 0x130, 0x1c8, 0x208, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @private, 0x0, 0x0, 'pimreg\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@empty, @rand_addr, 0x0, 0x0, 'veth1_to_bridge\x00', 'pim6reg1\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='signal_generate\x00', r0}, 0x10)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x769, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x1b, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, @ldst={0x0, 0x1, 0x4, 0x5, 0x6, 0xfffffffffffffff4, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000015884234b7cbdf04a99c898c00"/35], 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

0s ago: executing program 5 (id=1676):
syz_open_dev$tty1(0xc, 0x4, 0x1)
pipe2(0x0, 0x800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040f0200b70604"], 0x7)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="48000000100001047fff00"/20, @ANYRES32=r5, @ANYBLOB="0000040000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r5], 0x48}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
epoll_create(0x1)
read$FUSE(0xffffffffffffffff, &(0x7f0000002900)={0x2020, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}, 0x2020)
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
splice(0xffffffffffffffff, 0x0, r7, 0x0, 0x100000000, 0x0)
ioctl$GIO_CMAP(0xffffffffffffffff, 0x4bfb, &(0x7f0000000000))
wait4(r6, 0x0, 0x8, &(0x7f0000000440))
ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'gretap0\x00', {0x2, 0x4e20, @empty}})

kernel console output (not intermixed with test programs):

fig 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  477.899837][ T5923] usbhid 6-1:0.0: can't add hid device: -71
[  477.905851][ T5923] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  477.990534][ T5923] usb 6-1: USB disconnect, device number 30
[  478.008207][ T3474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  478.019251][ T3474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  478.051295][  T969] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  478.061136][  T969] usb 7-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  478.070253][  T969] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  478.162204][  T969] usb 7-1: config 0 descriptor??
[  478.448453][T11974] net_ratelimit: 10 callbacks suppressed
[  478.448466][T11974] ebtables: ebtables: counters copy to user failed while replacing table
[  478.686839][ T5923] usb 10-1: new high-speed USB device number 17 using dummy_hcd
[  479.076413][ T5923] usb 10-1: too many configurations: 229, using maximum allowed: 8
[  479.119953][ T5923] usb 10-1: unable to read config index 0 descriptor/start: -61
[  479.138659][ T5923] usb 10-1: can't read configurations, error -61
[  479.252553][  T969] usbhid 7-1:0.0: can't add hid device: -71
[  479.258674][  T969] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  479.290489][  T969] usb 7-1: USB disconnect, device number 35
[  479.296551][ T5923] usb 10-1: new high-speed USB device number 18 using dummy_hcd
[  479.476785][ T5923] usb 10-1: too many configurations: 229, using maximum allowed: 8
[  479.488229][ T5923] usb 10-1: unable to read config index 0 descriptor/start: -61
[  479.509273][ T5923] usb 10-1: can't read configurations, error -61
[  479.520698][  T972] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  479.538152][ T5923] usb usb10-port1: attempt power cycle
[  479.681050][  T972] usb 3-1: Using ep0 maxpacket: 8
[  479.689325][T11998] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1219'.
[  479.689629][  T972] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  479.698640][T11998] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1219'.
[  479.707620][  T972] usb 3-1: config 179 has no interface number 0
[  479.722528][  T972] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  479.733986][  T972] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  479.745837][  T972] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  479.757498][  T972] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  479.769323][  T972] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  479.784514][  T972] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  479.795375][  T972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  479.809019][T11994] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  479.905651][ T5923] usb 10-1: new high-speed USB device number 19 using dummy_hcd
[  479.928316][ T5923] usb 10-1: too many configurations: 229, using maximum allowed: 8
[  479.938322][ T5923] usb 10-1: unable to read config index 0 descriptor/start: -61
[  479.946495][ T5923] usb 10-1: can't read configurations, error -61
[  480.061396][  T972] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input37
[  480.266712][ T5923] usb 10-1: new high-speed USB device number 20 using dummy_hcd
[  480.527322][ T5923] usb 10-1: too many configurations: 229, using maximum allowed: 8
[  480.537177][ T5923] usb 10-1: unable to read config index 0 descriptor/start: -61
[  480.547021][ T5923] usb 10-1: can't read configurations, error -61
[  480.554917][  T969] usb 3-1: USB disconnect, device number 49
[  480.554943][    C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  480.569230][    C0] dummy_hcd dummy_hcd.2: timer fired with no URBs pending?
[  480.585586][ T5923] usb usb10-port1: unable to enumerate USB device
[  480.615783][  T969] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  480.678018][ T5827] usb 9-1: new high-speed USB device number 21 using dummy_hcd
[  480.880365][ T5827] usb 9-1: Using ep0 maxpacket: 8
[  480.894497][ T5827] usb 9-1: config 150 has an invalid interface number: 204 but max is 1
[  480.903218][ T5827] usb 9-1: config 150 has no interface number 0
[  480.909461][ T5827] usb 9-1: config 150 interface 204 has no altsetting 0
[  480.921113][ T5827] usb 9-1: config 150 interface 1 has no altsetting 0
[  480.936303][   T29] kauditd_printk_skb: 4 callbacks suppressed
[  480.936316][   T29] audit: type=1400 audit(1733869584.218:1474): avc:  denied  { setopt } for  pid=12017 comm="syz.2.1224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  480.972815][T12018] xt_hashlimit: overflow, try lower: 0/0
[  481.012052][ T5827] usb 9-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  481.030887][ T5827] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  481.060147][ T5827] usb 9-1: Product: syz
[  481.071907][ T5827] usb 9-1: Manufacturer: syz
[  481.076684][ T5827] usb 9-1: SerialNumber: syz
[  481.337414][ T5827] xr_serial 9-1:150.204: xr_serial converter detected
[  482.215255][ T5827] usb 9-1: xr_serial converter now attached to ttyUSB0
[  482.563766][  T969] usb 9-1: USB disconnect, device number 21
[  482.573485][  T969] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0
[  482.591986][  T969] xr_serial 9-1:150.204: device disconnected
[  482.668605][T12044] sock: sock_timestamping_bind_phc: sock not bind to device
[  482.791976][ T5827] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  482.952410][ T5827] usb 6-1: Using ep0 maxpacket: 32
[  482.964396][ T5827] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  482.984505][ T5827] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  483.001981][ T5827] usb 6-1: config 0 descriptor??
[  483.016687][ T5870] usb 7-1: new high-speed USB device number 36 using dummy_hcd
[  483.018578][ T5827] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  483.295247][   T29] audit: type=1400 audit(1733869586.435:1475): avc:  denied  { accept } for  pid=12058 comm="syz.2.1236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  483.401825][ T5870] usb 7-1: config 0 has an invalid interface number: 3 but max is 0
[  483.446720][ T5870] usb 7-1: config 0 has no interface number 0
[  483.457194][ T5870] usb 7-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01
[  483.494117][ T5870] usb 7-1: New USB device strings: Mfr=1, Product=19, SerialNumber=3
[  483.536853][ T5870] usb 7-1: Product: syz
[  483.541251][ T5870] usb 7-1: Manufacturer: syz
[  483.545931][ T5870] usb 7-1: SerialNumber: syz
[  483.660301][ T5870] usb 7-1: config 0 descriptor??
[  483.821917][ T5870] go7007 7-1:0.3: Sensoray 2250 found
[  483.827407][ T5870] go7007 7-1:0.3: probe with driver go7007 failed with error -12
[  483.941285][ T5923] usb 7-1: USB disconnect, device number 36
[  484.505212][   T29] audit: type=1400 audit(1733869587.510:1476): avc:  denied  { append } for  pid=12069 comm="syz.2.1239" name="sg0" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  485.042610][ T5923] usb 9-1: new high-speed USB device number 22 using dummy_hcd
[  485.057063][ T5827] gspca_vc032x: reg_w err -110
[  485.104611][ T5827] gspca_vc032x: I2c Bus Busy Wait 00
[  485.110230][ T5827] gspca_vc032x: I2c Bus Busy Wait 00
[  485.115959][ T5827] gspca_vc032x: I2c Bus Busy Wait 00
[  485.121291][ T5827] gspca_vc032x: I2c Bus Busy Wait 00
[  485.126703][ T5827] gspca_vc032x: I2c Bus Busy Wait 00
[  485.132069][ T5827] gspca_vc032x: I2c Bus Busy Wait 00
[  485.137504][ T5827] gspca_vc032x: I2c Bus Busy Wait 00
[  485.142869][ T5827] gspca_vc032x: I2c Bus Busy Wait 00
[  485.148481][ T5827] gspca_vc032x: I2c Bus Busy Wait 00
[  485.156129][ T5827] gspca_vc032x: I2c Bus Busy Wait 00
[  485.161436][ T5827] gspca_vc032x: I2c Bus Busy Wait 00
[  485.166948][ T5827] gspca_vc032x: I2c Bus Busy Wait 00
[  485.172242][ T5827] gspca_vc032x: I2c Bus Busy Wait 00
[  485.177625][ T5827] gspca_vc032x: I2c Bus Busy Wait 00
[  485.183029][ T5827] gspca_vc032x: I2c Bus Busy Wait 00
[  485.188868][ T5827] gspca_vc032x: I2c Bus Busy Wait 00
[  485.194157][ T5827] gspca_vc032x: I2c Bus Busy Wait 00
[  485.199683][ T5827] gspca_vc032x: I2c Bus Busy Wait 00
[  485.205373][ T5827] gspca_vc032x: Unknown sensor...
[  485.215184][ T5827] vc032x 6-1:0.0: probe with driver vc032x failed with error -22
[  485.486044][ T5923] usb 9-1: Using ep0 maxpacket: 32
[  485.493443][ T5923] usb 9-1: config 2 has an invalid interface number: 126 but max is 0
[  485.502507][ T5923] usb 9-1: config 2 has no interface number 0
[  485.508807][ T5923] usb 9-1: config 2 interface 126 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024
[  485.519261][ T5923] usb 9-1: config 2 interface 126 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  485.539429][ T5923] usb 9-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=ea.37
[  485.549419][ T5923] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  485.558555][ T5923] usb 9-1: Product: syz
[  485.563955][ T5923] usb 9-1: Manufacturer: syz
[  485.568760][ T5923] usb 9-1: SerialNumber: syz
[  485.729351][T12072] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  485.766854][T12072] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  485.852594][ T5923] kvaser_usb 9-1:2.126: error -ENODEV: Cannot get usb endpoint(s)
[  486.046080][ T5866] usb 9-1: USB disconnect, device number 22
[  486.339891][ T5866] usb 6-1: USB disconnect, device number 31
[  486.880729][T12097] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1247'.
[  486.913203][   T29] audit: type=1400 audit(1733869589.811:1477): avc:  denied  { setopt } for  pid=12096 comm="syz.6.1247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  486.936135][ T5820] Bluetooth: hci5: unexpected event 0x3e length: 268 > 260
[  486.936168][ T5820] Bluetooth: hci5: unexpected subevent 0x02 length: 267 > 260
[  486.951186][ T5820] Bluetooth: hci5: Dropping invalid advertising data
[  486.958531][ T5820] Bluetooth: hci5: Dropping invalid advertising data
[  486.966920][ T5820] Bluetooth: hci5: Malformed LE Event: 0x02
[  487.117129][T12104] binder: 12098:12104 ioctl 4018620d 0 returned -22
[  487.447595][    T9] usb 6-1: new full-speed USB device number 32 using dummy_hcd
[  487.764645][T12112] binder: 12111:12112 ioctl c010640b 20002440 returned -22
[  487.772345][T12112] binder: 12111:12112 ioctl c00c642d 20002480 returned -22
[  487.986739][    T9] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[  488.016519][    T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  488.580322][    T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  488.591348][    T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  488.601059][    T9] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[  488.725754][    T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  488.760556][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  488.816976][    T9] usb 6-1: SerialNumber: syz
[  488.864377][T12099] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  490.520129][   T29] audit: type=1400 audit(1733869593.179:1478): avc:  denied  { setopt } for  pid=12135 comm="syz.9.1257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  490.918606][    T9] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -12
[  490.967261][    T9] usb 6-1: USB disconnect, device number 32
[  491.026945][   T29] audit: type=1400 audit(1733869593.656:1479): avc:  denied  { write } for  pid=12146 comm="syz.2.1262" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  491.049796][    C0] vkms_vblank_simulate: vblank timer overrun
[  491.398043][  T972] usb 7-1: new high-speed USB device number 37 using dummy_hcd
[  491.545174][  T972] usb 7-1: device descriptor read/64, error -71
[  491.717028][T12170] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1267'.
[  491.718861][ T5870] usb 10-1: new high-speed USB device number 21 using dummy_hcd
[  491.781174][T12170] vlan3: entered allmulticast mode
[  491.791713][T12170] macsec0: entered allmulticast mode
[  491.804133][  T972] usb 7-1: new high-speed USB device number 38 using dummy_hcd
[  491.825524][T12170] veth1_macvtap: entered allmulticast mode
[  491.943400][  T972] usb 7-1: device descriptor read/64, error -71
[  492.060945][  T972] usb usb7-port1: attempt power cycle
[  492.099423][ T5870] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  492.109879][ T5870] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  492.119574][ T5870] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  492.129600][ T5870] usb 10-1: config 0 descriptor??
[  492.137472][ T5870] pwc: Askey VC010 type 2 USB webcam detected.
[  492.195451][   T29] audit: type=1400 audit(1733869594.750:1480): avc:  denied  { name_bind } for  pid=12179 comm="syz.2.1269" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  492.469479][  T972] usb 7-1: new high-speed USB device number 39 using dummy_hcd
[  492.669675][ T5870] pwc: recv_control_msg error -32 req 02 val 2b00
[  492.735047][  T972] usb 7-1: device descriptor read/8, error -71
[  492.957844][T12159] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1264'.
[  493.076464][  T972] usb 7-1: new high-speed USB device number 40 using dummy_hcd
[  493.108553][  T972] usb 7-1: device descriptor read/8, error -71
[  493.128048][ T5870] pwc: recv_control_msg error -71 req 02 val 2c00
[  493.135239][ T5870] pwc: recv_control_msg error -71 req 04 val 1000
[  493.142141][ T5870] pwc: recv_control_msg error -71 req 04 val 1300
[  493.149674][ T5870] pwc: recv_control_msg error -71 req 04 val 1400
[  493.156497][ T5870] pwc: recv_control_msg error -71 req 02 val 2000
[  493.172887][ T5870] pwc: recv_control_msg error -71 req 02 val 2100
[  493.183466][ T5870] pwc: recv_control_msg error -71 req 04 val 1500
[  493.211410][ T5870] pwc: recv_control_msg error -71 req 02 val 2500
[  493.873729][  T972] usb usb7-port1: unable to enumerate USB device
[  493.928068][ T5870] pwc: recv_control_msg error -71 req 02 val 2400
[  493.939362][ T5870] pwc: recv_control_msg error -71 req 02 val 2600
[  493.947577][ T5870] pwc: recv_control_msg error -71 req 02 val 2900
[  493.955223][ T5870] pwc: recv_control_msg error -71 req 02 val 2800
[  493.970128][ T5870] pwc: recv_control_msg error -71 req 04 val 1100
[  493.978062][ T5870] pwc: recv_control_msg error -71 req 04 val 1200
[  494.206022][ T5870] pwc: Registered as video103.
[  494.232279][ T5870] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input39
[  494.363558][ T5870] usb 10-1: USB disconnect, device number 21
[  494.671839][T12201] input: syz1 as /devices/virtual/input/input40
[  494.677595][T12204] syz.8.1275: attempt to access beyond end of device
[  494.677595][T12204] nbd8: rw=0, sector=16, nr_sectors = 1 limit=0
[  494.707028][T12204] qnx6: unable to read the first superblock
[  494.714104][T12204] syz.8.1275: attempt to access beyond end of device
[  494.714104][T12204] nbd8: rw=0, sector=0, nr_sectors = 1 limit=0
[  494.726980][T12204] qnx6: unable to read the first superblock
[  494.732896][T12204] qnx6: unable to read the first superblock
[  494.874984][   T29] audit: type=1400 audit(1733869597.257:1481): avc:  denied  { connect } for  pid=12212 comm="syz.2.1278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  495.224534][   T29] audit: type=1400 audit(1733869597.585:1482): avc:  denied  { name_bind } for  pid=12218 comm="syz.6.1279" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  495.325387][   T29] audit: type=1400 audit(1733869597.678:1483): avc:  denied  { wake_alarm } for  pid=12225 comm="syz.6.1281" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  495.717117][  T972] usb 7-1: new full-speed USB device number 41 using dummy_hcd
[  495.878989][  T972] usb 7-1: config 0 has an invalid interface number: 107 but max is 0
[  495.899857][  T972] usb 7-1: config 0 has no interface number 0
[  495.917234][  T972] usb 7-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10
[  495.929803][  T972] usb 7-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  495.955666][   T29] audit: type=1400 audit(1733869598.258:1484): avc:  denied  { read } for  pid=12235 comm="syz.2.1284" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  495.981504][   T29] audit: type=1400 audit(1733869598.258:1485): avc:  denied  { open } for  pid=12235 comm="syz.2.1284" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  496.005045][    C0] vkms_vblank_simulate: vblank timer overrun
[  496.021691][  T972] usb 7-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60
[  496.048277][  T972] usb 7-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3
[  496.078007][  T972] usb 7-1: Product: syz
[  496.100061][T12238] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  496.117788][T12238] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  496.121336][  T972] usb 7-1: Manufacturer: syz
[  496.150177][  T972] usb 7-1: SerialNumber: syz
[  496.170988][T12238] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  496.182968][T12238] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  496.188558][  T972] usb 7-1: config 0 descriptor??
[  496.196456][  T972] keyspan 7-1:0.107: Keyspan 4 port adapter converter detected
[  496.211281][  T972] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 81
[  496.221878][T12238] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  496.231625][T12238] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  496.247323][  T972] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 1
[  496.257534][T12238] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  496.264661][T12238] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  496.271607][  T972] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[  496.285069][  T972] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 2
[  496.294903][  T972] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[  496.296833][T12238] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  496.303876][  T972] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 4
[  496.319060][  T972] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[  496.328571][  T972] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 6
[  496.337630][  T972] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[  496.453222][  T972] usb 7-1: USB disconnect, device number 41
[  496.491663][  T972] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[  496.509413][  T972] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[  496.542208][  T972] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[  496.582081][  T972] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[  496.608644][   T29] audit: type=1400 audit(1733869598.885:1486): avc:  denied  { validate_trans } for  pid=12248 comm="syz.8.1287" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  496.627099][  T972] keyspan 7-1:0.107: device disconnected
[  496.764611][   T47] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  496.949590][   T47] usb 3-1: Using ep0 maxpacket: 32
[  496.968767][   T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  496.979654][   T47] usb 3-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00
[  496.988725][   T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  497.009143][T12252] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1288'.
[  497.010989][   T47] usb 3-1: config 0 descriptor??
[  497.125066][T12252] ip6gre1: entered allmulticast mode
[  497.157744][T12255] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1289'.
[  497.169012][T12255] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1289'.
[  497.517486][   T47] logitech 0003:046D:CA03.0016: item fetching failed at offset 0/3
[  497.544176][   T47] logitech 0003:046D:CA03.0016: parse failed
[  497.839658][   T47] logitech 0003:046D:CA03.0016: probe with driver logitech failed with error -22
[  497.887861][   T47] usb 3-1: USB disconnect, device number 50
[  497.954784][   T29] audit: type=1326 audit(1733869600.138:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12266 comm="syz.8.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe05bf7ff19 code=0x7ffc0000
[  498.005330][   T29] audit: type=1326 audit(1733869600.138:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12266 comm="syz.8.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe05bf7ff19 code=0x7ffc0000
[  498.047945][   T29] audit: type=1326 audit(1733869600.138:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12266 comm="syz.8.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fe05bf7ff19 code=0x7ffc0000
[  498.072358][   T29] audit: type=1326 audit(1733869600.185:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12266 comm="syz.8.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe05bf7ff19 code=0x7ffc0000
[  498.247701][T12270] batman_adv: batadv0: Adding interface: ip6gretap1
[  498.315681][ T5820] Bluetooth: hci5: command 0x0406 tx timeout
[  498.321778][ T5823] Bluetooth: hci3: command 0x0406 tx timeout
[  498.393046][T12270] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500.
[  498.400336][ T5820] Bluetooth: hci2: command 0x0405 tx timeout
[  498.419974][ T5823] Bluetooth: hci0: command 0x0405 tx timeout
[  498.539528][T12270] batman_adv: batadv0: Interface activated: ip6gretap1
[  499.671743][T12295] 9pnet_fd: Insufficient options for proto=fd
[  499.755330][T12298] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9)
[  499.761875][T12298] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  499.769927][T12298] vhci_hcd vhci_hcd.0: Device attached
[  499.999600][T12299] input: syz1 as /devices/virtual/input/input41
[  500.579166][  T972] usb 46-1: SetAddress Request (2) to port 0
[  500.591860][ T5820] Bluetooth: hci5: command 0x0406 tx timeout
[  500.597901][ T5820] Bluetooth: hci3: command 0x0406 tx timeout
[  500.610620][  T972] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd
[  500.628024][ T5823] Bluetooth: hci2: command 0x0405 tx timeout
[  500.634132][ T5823] Bluetooth: hci0: command 0x0405 tx timeout
[  500.637970][T12301] vhci_hcd: connection closed
[  500.646731][T12302] vhci_hcd: sendmsg failed!, ret=-32 for 48
[  500.667836][ T3443] vhci_hcd: stop threads
[  500.672839][ T3443] vhci_hcd: release socket
[  500.683654][ T3443] vhci_hcd: disconnect device
[  501.287744][T12327] syz.2.1309: attempt to access beyond end of device
[  501.287744][T12327] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0
[  501.301609][T12327] syz.2.1309: attempt to access beyond end of device
[  501.301609][T12327] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0
[  501.315039][T12327] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256
[  501.325442][T12327] syz.2.1309: attempt to access beyond end of device
[  501.325442][T12327] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0
[  501.338684][T12327] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512
[  501.350984][T12327] syz.2.1309: attempt to access beyond end of device
[  501.350984][T12327] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0
[  501.351068][   T29] kauditd_printk_skb: 24 callbacks suppressed
[  501.351081][   T29] audit: type=1400 audit(1733869603.234:1515): avc:  denied  { create } for  pid=12323 comm="syz.2.1309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  501.385986][T12327] syz.2.1309: attempt to access beyond end of device
[  501.385986][T12327] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0
[  501.403261][T12327] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256
[  501.413559][T12327] syz.2.1309: attempt to access beyond end of device
[  501.413559][T12327] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0
[  501.426976][T12327] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512
[  501.439270][T12327] syz.2.1309: attempt to access beyond end of device
[  501.439270][T12327] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0
[  501.453127][T12327] syz.2.1309: attempt to access beyond end of device
[  501.453127][T12327] nbd2: rw=0, sector=2048, nr_sectors = 8 limit=0
[  501.467736][T12327] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256
[  501.477968][T12327] syz.2.1309: attempt to access beyond end of device
[  501.477968][T12327] nbd2: rw=0, sector=4096, nr_sectors = 8 limit=0
[  501.491546][T12327] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512
[  501.501191][T12327] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1)
[  501.725051][   T29] audit: type=1400 audit(1733869603.244:1516): avc:  denied  { ioctl } for  pid=12323 comm="syz.2.1309" path="socket:[37611]" dev="sockfs" ino=37611 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  502.099438][ T5923] usb 10-1: new high-speed USB device number 22 using dummy_hcd
[  502.119320][    T9] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  502.676570][ T5923] usb 10-1: Using ep0 maxpacket: 8
[  502.683300][ T5923] usb 10-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  502.692964][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  502.708136][    T9] usb 3-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53
[  502.717480][ T5923] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  502.725656][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  502.736772][ T5923] usb 10-1: config 0 descriptor??
[  502.742670][    T9] usb 3-1: config 0 descriptor??
[  502.805985][ T5827] usb 7-1: new high-speed USB device number 42 using dummy_hcd
[  502.839201][T12340] bridge0: port 2(bridge_slave_1) entered disabled state
[  502.846452][T12340] bridge0: port 1(bridge_slave_0) entered disabled state
[  502.853809][ T5823] Bluetooth: hci2: command 0x0405 tx timeout
[  502.875461][T12340] bridge0: entered allmulticast mode
[  502.903584][T12340] bridge0: port 2(bridge_slave_1) entered blocking state
[  502.912102][T12340] bridge0: port 2(bridge_slave_1) entered forwarding state
[  502.919404][T12340] bridge0: port 1(bridge_slave_0) entered blocking state
[  502.926480][T12340] bridge0: port 1(bridge_slave_0) entered forwarding state
[  502.941521][T12340] bridge0: entered promiscuous mode
[  502.976101][ T5827] usb 7-1: Using ep0 maxpacket: 16
[  502.990513][ T5827] usb 7-1: config 0 has no interfaces?
[  503.002851][ T5827] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  503.015706][ T5827] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  503.025775][T12334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  503.038833][ T5827] usb 7-1: Manufacturer: syz
[  503.046250][ T5827] usb 7-1: config 0 descriptor??
[  503.072403][T12334] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  503.093190][    T9] usb 3-1: USB disconnect, device number 51
[  503.326776][ T9076] udevd[9076]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  503.357072][T12346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  503.383438][T12346] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  503.576238][ T5923] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  503.586422][ T5923] asix 10-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  503.606317][ T5923] asix 10-1:0.0: probe with driver asix failed with error -71
[  503.613932][T12354] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1316'.
[  503.613966][T12354] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1316'.
[  503.656875][ T5923] usb 10-1: USB disconnect, device number 22
[  504.088335][   T29] audit: type=1400 audit(1733869605.816:1517): avc:  denied  { execute } for  pid=12358 comm="syz.9.1317" path="/dev/audio1" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1
[  504.296665][T12365] 9pnet_fd: Insufficient options for proto=fd
[  504.303829][    T9] usb 3-1: new full-speed USB device number 52 using dummy_hcd
[  504.451153][    T9] usb 3-1: device descriptor read/64, error -71
[  504.697122][ T5923] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  504.879237][T12376] syzkaller1: entered promiscuous mode
[  504.884804][T12376] syzkaller1: entered allmulticast mode
[  505.277885][    T9] usb 3-1: new full-speed USB device number 53 using dummy_hcd
[  505.289428][   T29] audit: type=1400 audit(1733869606.518:1518): avc:  denied  { read } for  pid=12372 comm="syz.9.1321" name="/" dev="configfs" ino=1238 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  505.336265][   T29] audit: type=1400 audit(1733869606.518:1519): avc:  denied  { open } for  pid=12372 comm="syz.9.1321" path="/84/file0" dev="configfs" ino=1238 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  505.360229][   T29] audit: type=1400 audit(1733869606.527:1520): avc:  denied  { setattr } for  pid=12372 comm="syz.9.1321" name="/" dev="configfs" ino=1238 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  505.440528][    T9] usb 3-1: device descriptor read/64, error -71
[  505.469205][ T5923] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  505.480082][ T5923] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  505.492514][ T5923] usb 6-1: config 1 interface 1 altsetting 17 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  505.563560][    T9] usb usb3-port1: attempt power cycle
[  505.576974][ T5923] usb 6-1: config 1 interface 1 has no altsetting 1
[  505.584565][   T29] audit: type=1400 audit(1733869607.247:1521): avc:  denied  { unmount } for  pid=10066 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  505.592777][ T5923] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  505.680135][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  505.689500][ T5923] usb 6-1: Product: syz
[  505.700696][ T5923] usb 6-1: Manufacturer: syz
[  505.711253][ T5923] usb 6-1: SerialNumber: syz
[  505.780116][ T5923] usb 6-1: selecting invalid altsetting 1
[  505.860232][   T47] usb 7-1: USB disconnect, device number 42
[  505.947963][    T9] usb 3-1: new full-speed USB device number 54 using dummy_hcd
[  505.979356][T12388] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6)
[  505.985894][T12388] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  505.988738][    T9] usb 3-1: device descriptor read/8, error -71
[  506.012680][  T972] usb 46-1: device descriptor read/8, error -110
[  506.029106][ T5923] cdc_ncm 6-1:1.0: bind() failure
[  506.035254][T12388] vhci_hcd vhci_hcd.0: Device attached
[  506.037061][ T5923] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found
[  506.047664][ T5923] cdc_ncm 6-1:1.1: bind() failure
[  506.090960][ T5923] usb 6-1: USB disconnect, device number 33
[  506.125799][T12396] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1328'.
[  506.236540][  T969] vhci_hcd: vhci_device speed not set
[  506.277488][    T9] usb 3-1: new full-speed USB device number 55 using dummy_hcd
[  506.290049][ T5870] usb 10-1: new low-speed USB device number 23 using dummy_hcd
[  506.312188][  T969] usb 51-1: new full-speed USB device number 3 using vhci_hcd
[  506.314040][    T9] usb 3-1: device descriptor read/8, error -71
[  506.493591][ T5870] usb 10-1: device descriptor read/64, error -71
[  506.494946][  T972] usb usb46-port1: attempt power cycle
[  506.590574][    T9] usb usb3-port1: unable to enumerate USB device
[  506.723095][   T29] audit: type=1400 audit(1733869608.342:1522): avc:  denied  { read } for  pid=12401 comm="syz.8.1329" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  506.746807][   T29] audit: type=1400 audit(1733869608.342:1523): avc:  denied  { open } for  pid=12401 comm="syz.8.1329" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  506.771115][   T29] audit: type=1400 audit(1733869608.342:1524): avc:  denied  { ioctl } for  pid=12401 comm="syz.8.1329" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  506.771175][ T5870] usb 10-1: new low-speed USB device number 24 using dummy_hcd
[  507.081048][ T5870] usb 10-1: device descriptor read/64, error -71
[  507.164684][  T972] usb usb46-port1: unable to enumerate USB device
[  507.190243][   T29] audit: type=1400 audit(1733869608.744:1525): avc:  denied  { unlink } for  pid=12409 comm="syz.5.1331" name="#17" dev="tmpfs" ino=460 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  507.221196][ T5870] usb usb10-port1: attempt power cycle
[  507.604977][ T5870] usb 10-1: new low-speed USB device number 25 using dummy_hcd
[  507.670462][ T5870] usb 10-1: device descriptor read/8, error -71
[  508.154666][ T5870] usb 10-1: new low-speed USB device number 26 using dummy_hcd
[  508.227009][ T5870] usb 10-1: device descriptor read/8, error -71
[  508.342956][ T5870] usb usb10-port1: unable to enumerate USB device
[  508.452598][   T29] audit: type=1400 audit(1733869609.960:1526): avc:  denied  { create } for  pid=12428 comm="syz.5.1337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  509.055910][T12442] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1340'.
[  509.251354][T12390] vhci_hcd: connection reset by peer
[  509.368881][ T6414] vhci_hcd: stop threads
[  509.378407][ T6414] vhci_hcd: release socket
[  509.389100][ T6414] vhci_hcd: disconnect device
[  509.459863][   T29] audit: type=1400 audit(1733869610.905:1527): avc:  denied  { create } for  pid=12448 comm="syz.5.1343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  509.489114][   T29] audit: type=1400 audit(1733869610.905:1528): avc:  denied  { bind } for  pid=12448 comm="syz.5.1343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  509.509913][T12454] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0)
[  510.287380][   T29] audit: type=1400 audit(1733869611.672:1529): avc:  denied  { setopt } for  pid=12448 comm="syz.5.1343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  510.336766][ T5870] usb 9-1: new high-speed USB device number 23 using dummy_hcd
[  510.572339][T12469] xt_CT: You must specify a L4 protocol and not use inversions on it
[  511.801430][ T5870] usb 9-1: config 0 interface 0 altsetting 12 has an invalid descriptor for endpoint zero, skipping
[  511.813069][ T5870] usb 9-1: config 0 interface 0 has no altsetting 0
[  511.859984][  T969] vhci_hcd: vhci_device speed not set
[  512.190777][ T5870] usb 9-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3
[  512.201288][ T5870] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  512.210496][ T5870] usb 9-1: Product: syz
[  512.215070][ T5870] usb 9-1: Manufacturer: syz
[  512.223184][ T5870] usb 9-1: SerialNumber: syz
[  512.229641][ T5870] usb 9-1: config 0 descriptor??
[  512.298283][ T5870] keyspan 9-1:0.0: Keyspan 2 port adapter converter detected
[  512.319174][ T5870] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 87
[  512.358624][ T5870] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 7
[  512.367191][ T5870] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 81
[  512.375129][ T5870] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 1
[  512.382711][ T5870] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 2
[  512.390607][ T5870] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 85
[  512.399340][ T5870] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 5
[  512.416537][ T5870] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  512.425459][ T5870] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 83
[  512.433307][ T5870] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 3
[  512.441020][ T5870] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 4
[  512.448737][ T5870] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 86
[  512.456418][ T5870] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 6
[  512.467707][ T5870] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  512.490517][  T972] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  512.533648][    T9] usb 9-1: USB disconnect, device number 23
[  512.541787][    T9] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  512.589718][    T9] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  512.609303][    T9] keyspan 9-1:0.0: device disconnected
[  512.635035][T12490] netlink: 'syz.6.1353': attribute type 8 has an invalid length.
[  512.640334][ T5923] usb 10-1: new high-speed USB device number 27 using dummy_hcd
[  512.643642][T12490] netlink: 163260 bytes leftover after parsing attributes in process `syz.6.1353'.
[  512.682975][  T972] usb 3-1: Using ep0 maxpacket: 16
[  512.716464][  T972] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10
[  512.730818][T12484] ebtables: ebtables: counters copy to user failed while replacing table
[  512.747255][  T972] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024
[  512.758722][  T972] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  512.772869][  T972] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  512.782711][  T972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  512.805712][  T972] usb 3-1: config 0 descriptor??
[  513.033040][ T5923] usb 10-1: Using ep0 maxpacket: 16
[  513.055933][ T5923] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  513.067909][ T5923] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  513.078092][ T5923] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  513.092495][ T5923] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  513.109486][ T5923] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  513.144620][ T5923] usb 10-1: config 0 descriptor??
[  513.225577][   T29] audit: type=1400 audit(1733869614.422:1530): avc:  denied  { append } for  pid=12501 comm="syz.8.1356" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  513.317942][  T972] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0017/input/input42
[  513.376365][   T29] audit: type=1326 audit(1733869614.562:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12507 comm="syz.8.1357" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe05bf7ff19 code=0x0
[  513.417227][  T972] microsoft 0003:045E:07DA.0017: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  513.625636][ T5923] microsoft 0003:045E:07DA.0018: item 0 4 0 8 parsing failed
[  513.634192][ T5923] microsoft 0003:045E:07DA.0018: parse failed
[  513.641942][ T5923] microsoft 0003:045E:07DA.0018: probe with driver microsoft failed with error -22
[  513.698597][    T9] usb 9-1: new high-speed USB device number 24 using dummy_hcd
[  513.910157][   T47] usb 3-1: USB disconnect, device number 56
[  514.980684][ T5870] usb 10-1: USB disconnect, device number 27
[  514.990125][   T29] audit: type=1400 audit(1733869615.161:1532): avc:  denied  { write } for  pid=12513 comm="syz.5.1358" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  515.066907][    T9] usb 9-1: Using ep0 maxpacket: 8
[  515.075936][    T9] usb 9-1: config 179 has an invalid interface number: 65 but max is 0
[  515.084298][    T9] usb 9-1: config 179 has no interface number 0
[  515.090641][    T9] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  515.101768][    T9] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  515.113165][    T9] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  515.634165][    T9] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  515.645680][    T9] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  515.658963][    T9] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  515.668247][    T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  515.770758][T12510] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  516.156239][T12510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  516.167556][T12510] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  516.244517][    T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:179.65/input/input43
[  516.274370][T12533] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1364'.
[  516.317015][T12533] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1364'.
[  516.327554][ T5870] usb 10-1: new high-speed USB device number 28 using dummy_hcd
[  516.518753][ T5870] usb 10-1: Using ep0 maxpacket: 32
[  516.526442][ T5870] usb 10-1: config 0 has an invalid interface number: 67 but max is 0
[  516.546027][ T5870] usb 10-1: config 0 has no interface number 0
[  516.557600][ T5870] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  516.573293][ T5870] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  516.797279][ T5870] usb 10-1: Product: syz
[  516.813328][ T5870] usb 10-1: Manufacturer: syz
[  516.818037][ T5870] usb 10-1: SerialNumber: syz
[  516.841817][ T5870] usb 10-1: config 0 descriptor??
[  517.825197][ T5870] smsc95xx v2.0.0
[  518.046476][    T8] usb 9-1: USB disconnect, device number 24
[  518.052573][    C0] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  518.052627][    C0] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  518.070490][    T8] xpad 9-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  518.773540][T12554] binder: BINDER_SET_CONTEXT_MGR already set
[  518.780424][ T5870] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  518.791480][ T5870] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  518.803642][T12554] binder: 12549:12554 ioctl 4018620d 20000040 returned -16
[  518.919941][    T8] usb 7-1: new high-speed USB device number 43 using dummy_hcd
[  519.017887][ T5870] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  519.029081][ T5870] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -71
[  519.079138][ T5870] usb 10-1: USB disconnect, device number 28
[  519.090575][    T8] usb 7-1: Using ep0 maxpacket: 32
[  519.104439][    T8] usb 7-1: config 1 has an invalid interface number: 236 but max is 0
[  519.128363][    T8] usb 7-1: config 1 has no interface number 0
[  519.145420][    T8] usb 7-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 1024
[  519.178524][    T8] usb 7-1: config 1 interface 236 has no altsetting 0
[  519.206844][    T8] usb 7-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a
[  519.224591][    T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  519.250085][    T8] usb 7-1: Product: syz
[  519.259335][    T8] usb 7-1: Manufacturer: syz
[  519.276112][    T8] usb 7-1: SerialNumber: syz
[  519.300330][T12553] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  519.327439][    T8] ti_usb_3410_5052 7-1:1.236: TI USB 5052 2 port adapter converter detected
[  519.592333][    T8] usb 7-1: USB disconnect, device number 43
[  519.877698][    T9] usb 9-1: new high-speed USB device number 25 using dummy_hcd
[  520.038518][    T9] usb 9-1: Using ep0 maxpacket: 32
[  520.045069][    T9] usb 9-1: config 0 has an invalid interface number: 19 but max is 0
[  520.068994][    T9] usb 9-1: config 0 has no interface number 0
[  520.087286][    T9] usb 9-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=da.65
[  520.096405][    T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  520.104565][    T9] usb 9-1: Product: syz
[  520.108763][    T9] usb 9-1: Manufacturer: syz
[  520.113506][    T9] usb 9-1: SerialNumber: syz
[  520.120962][    T9] usb 9-1: config 0 descriptor??
[  520.332400][T12566] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1374'.
[  520.344968][    T9] peak_usb 9-1:0.19 can0: unable to request usb[type=0 value=1] err=-71
[  520.355838][    T9] peak_usb 9-1:0.19: unable to read PCAN-USB Pro firmware info (err -71)
[  520.371114][T12566] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1374'.
[  520.494261][    T9] peak_usb 9-1:0.19: probe with driver peak_usb failed with error -71
[  520.543429][    T9] usb 9-1: USB disconnect, device number 25
[  520.663906][T12573] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1377'.
[  520.697385][T12573] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1377'.
[  520.928784][T12574] syzkaller1: entered promiscuous mode
[  520.940806][T12574] syzkaller1: entered allmulticast mode
[  522.605749][T12595] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1383'.
[  522.796243][ T5923] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  522.904145][T12602] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1387'.
[  522.919871][T12602] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1387'.
[  522.982417][ T5923] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  523.022142][ T5923] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  523.185933][ T5923] usb 6-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00
[  523.195109][ T5923] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  523.220468][ T5923] usb 6-1: config 0 descriptor??
[  523.790429][   T29] audit: type=1400 audit(1733869623.897:1533): avc:  denied  { ioctl } for  pid=12603 comm="syz.8.1386" path="pid:[4026533084]" dev="nsfs" ino=4026533084 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  523.908199][ T5870] usb 7-1: new high-speed USB device number 44 using dummy_hcd
[  524.100639][ T5870] usb 7-1: Using ep0 maxpacket: 16
[  524.108484][ T5870] usb 7-1: config 0 has an invalid interface number: 214 but max is 0
[  524.138689][ T5870] usb 7-1: config 0 has no interface number 0
[  524.188839][ T5870] usb 7-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  524.219258][ T5870] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  524.227282][ T5870] usb 7-1: Product: syz
[  524.287493][ T5870] usb 7-1: Manufacturer: syz
[  524.303027][ T5870] usb 7-1: SerialNumber: syz
[  524.336428][ T5870] usb 7-1: config 0 descriptor??
[  524.363782][T12625] binder: 12622:12625 ioctl 800448f0 200002c0 returned -22
[  524.581426][ T5870] usb 7-1: USB disconnect, device number 44
[  524.668328][T12618] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1389'.
[  524.688849][T12618] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1389'.
[  524.922807][ T5923] usbhid 6-1:0.0: can't add hid device: -71
[  524.977203][ T5923] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  525.017358][ T5923] usb 6-1: USB disconnect, device number 34
[  526.503699][T12650] syzkaller1: entered promiscuous mode
[  526.509336][T12650] syzkaller1: entered allmulticast mode
[  527.543037][   T29] audit: type=1400 audit(1733869626.919:1534): avc:  denied  { setattr } for  pid=12642 comm="syz.5.1395" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  527.567199][   T29] audit: type=1400 audit(1733869626.919:1535): avc:  denied  { getopt } for  pid=12642 comm="syz.5.1395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  527.672331][   T29] audit: type=1400 audit(1733869627.938:1536): avc:  denied  { map } for  pid=12659 comm="syz.5.1400" path="/dev/video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  527.714887][   T29] audit: type=1400 audit(1733869627.985:1537): avc:  denied  { getopt } for  pid=12649 comm="syz.6.1397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  528.337972][T12671] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  528.489303][T12675] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1402'.
[  528.644287][T12675] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1402'.
[  528.821723][   T29] audit: type=1400 audit(1733869629.014:1538): avc:  denied  { mount } for  pid=12678 comm="syz.2.1403" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  532.528089][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  532.534412][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  534.107700][T12749] tmpfs: Bad value for 'mpol'
[  534.141359][T12749] netlink: 209836 bytes leftover after parsing attributes in process `syz.9.1424'.
[  534.337596][T12756] syzkaller1: entered promiscuous mode
[  534.353088][T12756] syzkaller1: entered allmulticast mode
[  536.245641][T12777] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1431'.
[  536.276750][T12782] XFS (nullb0): Invalid superblock magic number
[  536.297457][T12777] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1431'.
[  537.354884][T12796] trusted_key: encrypted_key: insufficient parameters specified
[  538.853680][ T5923] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  538.987192][T12812] loop7: detected capacity change from 0 to 16384
[  539.002800][   T29] audit: type=1400 audit(1733869638.536:1539): avc:  denied  { read } for  pid=12811 comm="syz.8.1439" name="mouse0" dev="devtmpfs" ino=1005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  539.040766][   T29] audit: type=1326 audit(1733869638.564:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12811 comm="syz.8.1439" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe05bf7ff19 code=0x0
[  539.075926][ T5923] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  539.100441][ T5923] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11
[  539.164837][   T29] audit: type=1400 audit(1733869638.602:1541): avc:  denied  { mount } for  pid=12815 comm="syz.9.1441" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[  539.177173][ T5923] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024
[  539.233778][ T5923] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  539.256736][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  539.281255][   T29] audit: type=1400 audit(1733869638.733:1542): avc:  denied  { unmount } for  pid=10066 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[  539.290926][T12810] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  539.345864][   T29] audit: type=1400 audit(1733869638.854:1543): avc:  denied  { lock } for  pid=12820 comm="syz.8.1443" path="socket:[40421]" dev="sockfs" ino=40421 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  539.387035][ T5923] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  539.403034][  T969] usb 7-1: new high-speed USB device number 45 using dummy_hcd
[  539.595506][T12810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  539.607286][T12810] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  539.619056][ T5870] usb 3-1: USB disconnect, device number 57
[  540.383189][   T29] audit: type=1400 audit(1733869639.827:1544): avc:  denied  { read } for  pid=12825 comm="syz.2.1444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  540.422662][  T969] usb 7-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  540.510564][  T969] usb 7-1: config 0 interface 0 has no altsetting 0
[  541.351492][   T29] audit: type=1400 audit(1733869640.276:1545): avc:  denied  { setopt } for  pid=12825 comm="syz.2.1444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  541.441498][  T969] usb 7-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3
[  541.450597][  T969] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  541.462806][  T969] usb 7-1: Product: syz
[  541.467069][  T969] usb 7-1: Manufacturer: syz
[  541.471638][  T969] usb 7-1: SerialNumber: syz
[  542.259681][  T969] usb 7-1: config 0 descriptor??
[  542.370895][ T5870] usb 10-1: new high-speed USB device number 29 using dummy_hcd
[  542.393240][  T969] keyspan 7-1:0.0: Keyspan 2 port adapter converter detected
[  542.412693][  T969] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 7
[  542.493841][  T969] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 81
[  542.522306][  T969] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 1
[  542.529938][  T969] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 2
[  542.539537][  T969] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 85
[  542.547390][  T969] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 5
[  542.561721][  T969] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  542.574312][T12845] binder: BINDER_SET_CONTEXT_MGR already set
[  542.580278][T12845] binder: 12844:12845 ioctl 4018620d 20000000 returned -16
[  542.592741][  T969] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 83
[  542.600501][  T969] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 3
[  542.608160][  T969] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 4
[  542.615741][  T969] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 86
[  542.626666][  T969] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 6
[  542.812795][  T969] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  542.823739][  T969] usb 7-1: USB disconnect, device number 45
[  542.833084][  T969] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  542.845649][  T969] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  542.903547][  T969] keyspan 7-1:0.0: device disconnected
[  543.488336][ T5870] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  543.508285][ T5870] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  543.518892][ T5870] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  543.550596][ T5870] usb 10-1: Product: syz
[  543.604085][ T5870] usb 10-1: Manufacturer: syz
[  543.608817][ T5870] usb 10-1: SerialNumber: syz
[  544.890335][T12870] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1454'.
[  544.909750][T12870] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1454'.
[  546.933083][T12874] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1456'.
[  546.942263][T12874] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1456'.
[  547.049451][ T5870] cdc_ncm 10-1:1.0: failed GET_NTB_PARAMETERS
[  547.055680][ T5870] cdc_ncm 10-1:1.0: bind() failure
[  547.066543][ T5870] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found
[  547.081353][ T5870] cdc_ncm 10-1:1.1: bind() failure
[  547.106927][ T5870] usb 10-1: USB disconnect, device number 29
[  547.415044][T12896] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1462'.
[  547.425422][T12896] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1462'.
[  547.434986][T12896] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1462'.
[  547.557489][  T972] usb 7-1: new high-speed USB device number 46 using dummy_hcd
[  547.820268][  T972] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  547.888316][  T972] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  547.953937][  T972] usb 7-1: Product: syz
[  547.961693][  T972] usb 7-1: Manufacturer: syz
[  547.982018][  T972] usb 7-1: SerialNumber: syz
[  548.011277][  T972] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  548.076473][   T29] audit: type=1400 audit(1733869647.020:1546): avc:  denied  { map } for  pid=12904 comm="syz.2.1465" path="socket:[40556]" dev="sockfs" ino=40556 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  548.091883][T12907] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1466'.
[  548.109990][   T29] audit: type=1400 audit(1733869647.020:1547): avc:  denied  { read } for  pid=12904 comm="syz.2.1465" path="socket:[40556]" dev="sockfs" ino=40556 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  548.110030][   T29] audit: type=1400 audit(1733869647.020:1548): avc:  denied  { connect } for  pid=12904 comm="syz.2.1465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  548.110066][   T29] audit: type=1400 audit(1733869647.020:1549): avc:  denied  { map } for  pid=12904 comm="syz.2.1465" path="/dev/vcs" dev="devtmpfs" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1
[  548.110098][   T29] audit: type=1400 audit(1733869647.020:1550): avc:  denied  { execute } for  pid=12904 comm="syz.2.1465" path="/dev/vcs" dev="devtmpfs" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1
[  548.152287][    T8] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  548.162015][T12907] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1466'.
[  548.410967][    T9] usb 9-1: new high-speed USB device number 26 using dummy_hcd
[  548.473320][   T47] kernel write not supported for file [eventfd] (pid: 47 comm: kworker/1:1)
[  548.630722][T12922] netlink: 'syz.5.1469': attribute type 1 has an invalid length.
[  548.657076][T12922] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1469'.
[  548.803189][    T9] usb 9-1: config index 0 descriptor too short (expected 23569, got 27)
[  548.812204][    T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  548.823865][    T9] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  548.836599][    T9] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  548.845058][    T9] usb 9-1: Manufacturer: syz
[  548.959208][    T9] usb 9-1: config 0 descriptor??
[  549.288730][   T29] audit: type=1400 audit(1733869648.162:1551): avc:  denied  { ioctl } for  pid=12927 comm="syz.5.1471" path="socket:[40608]" dev="sockfs" ino=40608 ioctlcmd=0x9201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  549.313449][    C1] vkms_vblank_simulate: vblank timer overrun
[  549.629676][   T29] audit: type=1400 audit(1733869648.470:1552): avc:  denied  { accept } for  pid=12929 comm="syz.5.1472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  549.751645][   T29] audit: type=1400 audit(1733869648.508:1553): avc:  denied  { map } for  pid=12902 comm="syz.8.1464" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  550.271184][ T5823] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[  550.281441][ T5823] Bluetooth: hci5: Injecting HCI hardware error event
[  550.300364][ T5823] Bluetooth: hci5: hardware error 0x00
[  550.372924][T12934] syz.5.1472 (12934) used obsolete PPPIOCDETACH ioctl
[  550.430442][T12937] veth3: entered promiscuous mode
[  550.463764][T12938] veth5: entered promiscuous mode
[  552.462656][ T5823] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  555.753722][   T29] audit: type=1400 audit(1733869654.204:1554): avc:  denied  { connect } for  pid=12949 comm="syz.5.1479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  555.824774][T12955] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma?
[  555.885530][T12957] 9pnet_fd: Insufficient options for proto=fd
[  555.921589][   T29] audit: type=1400 audit(1733869654.242:1555): avc:  denied  { bind } for  pid=12949 comm="syz.5.1479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  556.109793][   T29] audit: type=1400 audit(1733869654.391:1556): avc:  denied  { ioctl } for  pid=12949 comm="syz.5.1479" path="socket:[40700]" dev="sockfs" ino=40700 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  556.350072][   T29] audit: type=1400 audit(1733869654.644:1557): avc:  denied  { create } for  pid=12961 comm="syz.9.1481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1
[  556.451181][    T8] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive
[  556.458190][    T8] ath9k_htc: Failed to initialize the device
[  556.472461][ T5923] usb 7-1: USB disconnect, device number 46
[  556.490526][ T5923] usb 7-1: ath9k_htc: USB layer deinitialized
[  556.558115][T12974] __nla_validate_parse: 2 callbacks suppressed
[  556.558132][T12974] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1483'.
[  556.595845][ T5827] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  556.609242][ T5827] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  556.616727][ T5827] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  556.624193][ T5827] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  556.631798][ T5827] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  556.639652][ T5827] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  556.647523][ T5827] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  557.221918][ T5827] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  557.229350][ T5827] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  557.236856][ T5827] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  557.244521][ T5827] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  557.251930][ T5827] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  557.259634][ T5827] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  557.267126][ T5827] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  557.275838][ T5827] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  557.283996][ T5827] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  557.291452][ T5827] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  557.299548][ T5827] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  557.307364][ T5827] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  557.314755][ T5827] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  557.322205][ T5827] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  557.329796][ T5827] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  557.337196][ T5827] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  557.344691][ T5827] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  557.352136][ T5827] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  557.359572][ T5827] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  557.366924][ T5827] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  557.375155][ T5827] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  557.382632][ T5827] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  557.390016][ T5827] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  557.397456][ T5827] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  557.405391][ T5827] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  557.413533][ T5827] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  557.421307][ T5827] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  557.428782][ T5827] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  557.436559][ T5827] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  557.443965][ T5827] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  557.451413][ T5827] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  557.458844][ T5827] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  557.466328][ T5827] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  557.473714][ T5827] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  557.481159][ T5827] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  557.488818][ T5827] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  557.496296][ T5827] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  557.503747][ T5827] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  557.511200][ T5827] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  557.519457][ T5827] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  557.526849][ T5827] hid-generic 0000:0000:0003.0019: unknown main item tag 0x0
[  557.631178][ T5827] hid-generic 0000:0000:0003.0019: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  557.642580][    T9] rc_core: IR keymap rc-hauppauge not found
[  557.648870][    T9] Registered IR keymap rc-empty
[  557.654321][    T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0
[  557.665434][    T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input44
[  558.270913][T12993] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1487'.
[  558.287561][    T9] usb 9-1: USB disconnect, device number 26
[  558.304915][T12993] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1487'.
[  559.054822][T13010] 9pnet_fd: Insufficient options for proto=fd
[  559.063031][T13009] netlink: 'syz.5.1492': attribute type 12 has an invalid length.
[  559.464734][T13016] input: syz1 as /devices/virtual/input/input45
[  560.183573][T13021] netlink: 372 bytes leftover after parsing attributes in process `syz.6.1495'.
[  560.331071][    T9] usb 9-1: new low-speed USB device number 27 using dummy_hcd
[  560.776464][    T9] usb 9-1: No LPM exit latency info found, disabling LPM.
[  560.798181][    T9] usb 9-1: config 1 interface 0 altsetting 48 endpoint 0x81 has invalid maxpacket 16, setting to 8
[  560.830749][    T9] usb 9-1: config 1 interface 0 altsetting 48 endpoint 0x2 has invalid maxpacket 16, setting to 8
[  560.983020][  T972] usb 7-1: new high-speed USB device number 47 using dummy_hcd
[  561.040344][    T9] usb 9-1: config 1 interface 0 has no altsetting 0
[  561.253993][    T9] usb 9-1: New USB device found, idVendor=1477, idProduct=1007, bcdDevice= 0.40
[  561.264611][    T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  561.295876][    T9] usb 9-1: Product: ᠌
[  561.300066][    T9] usb 9-1: Manufacturer: Х
[  561.314690][    T9] usb 9-1: SerialNumber: ц
[  561.349298][T13010] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  561.371810][T13010] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  561.425770][  T972] usb 7-1: Using ep0 maxpacket: 16
[  561.439853][  T972] usb 7-1: config 0 has no interfaces?
[  561.446538][  T972] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  561.463818][  T972] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  561.473187][  T972] usb 7-1: Manufacturer: syz
[  561.484540][  T972] usb 7-1: config 0 descriptor??
[  561.573428][T13043] 9pnet_fd: Insufficient options for proto=fd
[  561.645033][    T8] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  561.668641][    T9] usbhid 9-1:1.0: can't add hid device: -71
[  561.675771][    T9] usbhid 9-1:1.0: probe with driver usbhid failed with error -71
[  561.708015][    T9] usb 9-1: USB disconnect, device number 27
[  561.823501][    T8] usb 6-1: Using ep0 maxpacket: 16
[  561.856083][    T8] usb 6-1: config 0 has no interfaces?
[  561.862920][    T8] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  561.875988][    T8] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  561.891989][    T8] usb 6-1: Manufacturer: syz
[  561.900185][    T8] usb 6-1: config 0 descriptor??
[  561.977630][ T5870] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[  562.175595][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  562.483264][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  562.500425][ T5870] usb 3-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00
[  562.522114][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  562.551811][ T5870] usb 3-1: config 0 descriptor??
[  563.939546][  T969] usb 7-1: USB disconnect, device number 47
[  564.073569][ T5870] usbhid 3-1:0.0: can't add hid device: -71
[  564.079693][ T5870] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  564.100555][ T5870] usb 3-1: USB disconnect, device number 58
[  564.119799][T13063] pim6reg1: entered promiscuous mode
[  564.138211][T13063] pim6reg1: entered allmulticast mode
[  564.145102][T13066] tmpfs: Unknown parameter ''
[  564.185677][   T29] audit: type=1400 audit(1733869662.071:1558): avc:  denied  { execute } for  pid=13065 comm="syz.6.1505" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=41232 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  564.211922][    C0] vkms_vblank_simulate: vblank timer overrun
[  564.239823][T13063] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1504'.
[  564.259921][   T29] audit: type=1400 audit(1733869662.165:1559): avc:  denied  { listen } for  pid=13065 comm="syz.6.1505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  564.607526][ T5870] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[  564.727485][T13082] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1510'.
[  564.748619][T13082] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1510'.
[  564.785113][ T5870] usb 3-1: Using ep0 maxpacket: 16
[  564.798570][ T5870] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  564.813784][ T5870] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  564.839107][ T5870] usb 3-1: config 0 has no interface number 0
[  564.856382][ T5870] usb 3-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  564.891284][ T5870] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  564.923855][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  564.943791][ T5870] usb 3-1: config 0 descriptor??
[  564.967953][ T5870] usbhid 3-1:0.1: couldn't find an input interrupt endpoint
[  565.217161][    T8] usb 6-1: USB disconnect, device number 35
[  565.282640][ T5923] usb 3-1: USB disconnect, device number 59
[  566.766704][ T5923] usb 7-1: new high-speed USB device number 48 using dummy_hcd
[  566.941317][ T5923] usb 7-1: Using ep0 maxpacket: 32
[  566.975615][ T5923] usb 7-1: config 0 has an invalid interface number: 67 but max is 0
[  567.210308][T13128] No such timeout policy "syz0"
[  567.408400][   T29] audit: type=1400 audit(1733869665.036:1560): avc:  denied  { bind } for  pid=13124 comm="syz.5.1520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  567.686561][ T5923] usb 7-1: config 0 has no interface number 0
[  567.699760][ T5923] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  567.714381][ T5923] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  567.776858][ T5923] usb 7-1: Product: syz
[  567.797809][ T5923] usb 7-1: Manufacturer: syz
[  567.827982][ T5923] usb 7-1: SerialNumber: syz
[  567.934965][ T5923] usb 7-1: config 0 descriptor??
[  567.969277][ T5923] smsc95xx v2.0.0
[  568.005159][T13135] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1522'.
[  568.027136][T13135] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1522'.
[  569.952721][  T969] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[  570.032391][ T5923] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71
[  570.043483][ T5923] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD
[  570.053160][ T5923] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  570.070312][ T5923] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71
[  570.086089][ T5923] usb 7-1: USB disconnect, device number 48
[  570.160096][  T969] usb 3-1: Using ep0 maxpacket: 16
[  570.401780][  T972] usb 10-1: new full-speed USB device number 30 using dummy_hcd
[  570.564035][  T972] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  570.596849][  T972] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  570.618333][  T972] usb 10-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00
[  571.218934][  T972] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  571.253861][  T969] usb 3-1: config 0 has an invalid interface number: 243 but max is 0
[  571.287459][  T969] usb 3-1: config 0 has no interface number 0
[  571.341733][  T969] usb 3-1: config 0 interface 243 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023
[  571.348488][  T972] usb 10-1: config 0 descriptor??
[  571.385371][  T969] usb 3-1: New USB device found, idVendor=06cd, idProduct=010c, bcdDevice=d0.ce
[  571.394431][  T969] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  571.403182][  T969] usb 3-1: Product: syz
[  571.416555][  T969] usb 3-1: Manufacturer: syz
[  571.421353][  T969] usb 3-1: SerialNumber: syz
[  571.443359][  T969] usb 3-1: config 0 descriptor??
[  571.456738][T13158] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  571.715779][  T969] usb 3-1: can't set config #0, error -71
[  571.756632][  T969] usb 3-1: USB disconnect, device number 60
[  572.492630][T13194] netlink: 'syz.6.1538': attribute type 29 has an invalid length.
[  572.590816][T13171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  572.607500][T13171] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  572.631244][T13192] Invalid ELF header magic: != ELF
[  572.679370][T13201] netlink: 'syz.6.1538': attribute type 29 has an invalid length.
[  572.687863][T13201] netlink: 'syz.6.1538': attribute type 29 has an invalid length.
[  572.786546][  T972] usbhid 10-1:0.0: can't add hid device: -71
[  572.793584][  T972] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[  572.845942][  T972] usb 10-1: USB disconnect, device number 30
[  573.107268][   T29] audit: type=1400 audit(1733869670.443:1561): avc:  denied  { create } for  pid=13211 comm="syz.8.1541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1
[  573.249810][   T29] audit: type=1400 audit(1733869670.574:1562): avc:  denied  { setattr } for  pid=13211 comm="syz.8.1541" name="NETLINK" dev="sockfs" ino=42341 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  573.465293][   T29] audit: type=1326 audit(1733869670.770:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13217 comm="syz.9.1542" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6110f7ff19 code=0x0
[  573.513218][   T29] audit: type=1400 audit(1733869670.808:1564): avc:  denied  { name_bind } for  pid=13220 comm="syz.6.1543" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1
[  574.297315][T13239] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1546'.
[  574.330663][T13239] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1546'.
[  574.686290][   T29] audit: type=1400 audit(1733869671.911:1565): avc:  denied  { bind } for  pid=13250 comm="syz.6.1550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  574.806231][ T5870] usb 9-1: new high-speed USB device number 28 using dummy_hcd
[  574.912802][T13262] binder: 13261:13262 ioctl c018620c 20000000 returned -1
[  574.955730][ T5870] usb 9-1: device descriptor read/64, error -71
[  574.991908][   T29] audit: type=1326 audit(1733869672.201:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13263 comm="syz.5.1554" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd18f77ff19 code=0x0
[  575.033372][T13265] binder: 13261:13265 ioctl 7a4 20000280 returned -22
[  575.126904][ T5866] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[  575.187227][T13266] syzkaller1: entered promiscuous mode
[  575.222652][T13266] syzkaller1: entered allmulticast mode
[  575.228431][ T5870] usb 9-1: new high-speed USB device number 29 using dummy_hcd
[  575.299748][ T5866] usb 3-1: config 0 has an invalid interface number: 127 but max is 0
[  575.315254][ T5866] usb 3-1: config 0 has no interface number 0
[  575.344516][ T5866] usb 3-1: New USB device found, idVendor=066b, idProduct=0105, bcdDevice= 1.00
[  575.367506][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  575.389276][ T5866] usb 3-1: Product: syz
[  575.393626][ T5866] usb 3-1: Manufacturer: syz
[  575.398458][ T5870] usb 9-1: device descriptor read/64, error -71
[  575.405206][ T5866] usb 3-1: SerialNumber: syz
[  575.437051][ T5866] usb 3-1: config 0 descriptor??
[  575.448459][ T5866] ums-sddr09 3-1:0.127: USB Mass Storage device detected
[  575.460421][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  575.533663][ T5870] usb usb9-port1: attempt power cycle
[  575.728652][    T8] usb 3-1: USB disconnect, device number 61
[  575.917948][ T5870] usb 9-1: new high-speed USB device number 30 using dummy_hcd
[  575.928822][  T972] usb 10-1: new high-speed USB device number 31 using dummy_hcd
[  575.976764][ T5870] usb 9-1: device descriptor read/8, error -71
[  576.118936][  T972] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  576.161475][  T972] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  576.174653][  T972] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  576.205100][  T972] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  576.225017][T13272] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22
[  576.237621][  T972] usb 10-1: Quirk or no altset; falling back to MIDI 1.0
[  576.249296][ T5870] usb 9-1: new high-speed USB device number 31 using dummy_hcd
[  576.271949][ T5870] usb 9-1: device descriptor read/8, error -71
[  576.356234][T13279] trusted_key: encrypted_key: master key parameter 'PruneCalled' is invalid
[  576.387924][   T29] audit: type=1400 audit(1733869673.474:1567): avc:  denied  { ioctl } for  pid=13277 comm="syz.6.1557" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x5408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  576.429230][ T5870] usb usb9-port1: unable to enumerate USB device
[  577.631271][ T5870] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[  577.693898][  T972] usb 10-1: USB disconnect, device number 31
[  577.847794][ T5870] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  577.847839][ T5870] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  577.854241][ T5870] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  577.854272][ T5870] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  577.854295][ T5870] usb 6-1: Product: syz
[  577.854312][ T5870] usb 6-1: Manufacturer: syz
[  577.854329][ T5870] usb 6-1: SerialNumber: syz
[  577.908334][T13307] can0: slcan on ttyS3.
[  577.925449][T13308] netlink: 760 bytes leftover after parsing attributes in process `syz.9.1563'.
[  578.167035][T13312] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  578.176148][T13312] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  578.185217][T13312] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  578.193919][T13312] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  578.210037][T13307] can0 (unregistered): slcan off ttyS3.
[  578.297094][T13290] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  578.390705][T13319] netlink: 'syz.9.1566': attribute type 16 has an invalid length.
[  578.408898][T13319] netlink: 64138 bytes leftover after parsing attributes in process `syz.9.1566'.
[  579.532734][T13290] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  579.559078][T13324] FAULT_INJECTION: forcing a failure.
[  579.559078][T13324] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  579.608579][T13324] CPU: 0 UID: 0 PID: 13324 Comm: syz.9.1568 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0
[  579.619383][T13324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  579.629442][T13324] Call Trace:
[  579.632717][T13324]  <TASK>
[  579.635648][T13324]  dump_stack_lvl+0x16c/0x1f0
[  579.640326][T13324]  should_fail_ex+0x497/0x5b0
[  579.645016][T13324]  _copy_from_user+0x2e/0xd0
[  579.649625][T13324]  kstrtouint_from_user+0xd7/0x1c0
[  579.654736][T13324]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  579.660481][T13324]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  579.666108][T13324]  proc_fail_nth_write+0x84/0x250
[  579.671138][T13324]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  579.676786][T13324]  ? ksys_write+0x12b/0x250
[  579.681323][T13324]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  579.686982][T13324]  vfs_write+0x24c/0x1150
[  579.691343][T13324]  ? __fget_files+0x1fc/0x3a0
[  579.696049][T13324]  ? __pfx___mutex_lock+0x10/0x10
[  579.701077][T13324]  ? __pfx_vfs_write+0x10/0x10
[  579.705871][T13324]  ? __fget_files+0x206/0x3a0
[  579.710560][T13324]  ksys_write+0x12b/0x250
[  579.714896][T13324]  ? __pfx_ksys_write+0x10/0x10
[  579.719735][T13324]  do_syscall_64+0xcd/0x250
[  579.724241][T13324]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  579.730150][T13324] RIP: 0033:0x7f6110f7e9cf
[  579.734559][T13324] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  579.754179][T13324] RSP: 002b:00007f6111d16050 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  579.762605][T13324] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6110f7e9cf
[  579.770580][T13324] RDX: 0000000000000001 RSI: 00007f6111d160b0 RDI: 0000000000000005
[  579.778550][T13324] RBP: 00007f6111d160a0 R08: 0000000000000000 R09: 0000000000000014
[  579.786510][T13324] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  579.794573][T13324] R13: 0000000000000000 R14: 00007f6111145fa0 R15: 00007fff0d1d4928
[  579.799840][ T5870] cdc_mbim 6-1:1.0: MAC-Address: 42:42:42:42:42:42
[  579.802561][T13324]  </TASK>
[  579.802666][    C0] vkms_vblank_simulate: vblank timer overrun
[  579.809120][ T5870] cdc_mbim 6-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[  579.861295][ T5870] cdc_mbim 6-1:1.0: setting rx_max = 2048
[  580.070240][ T5870] cdc_mbim 6-1:1.0: setting tx_max = 184
[  580.079533][ T5870] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device
[  580.095572][ T5870] wwan wwan0: port wwan0mbim0 attached
[  580.160237][ T5923] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[  580.166565][ T5870] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, 42:42:42:42:42:42
[  580.633840][ T5923] usb 3-1: config 0 has no interfaces?
[  580.641213][ T5923] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  580.663846][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  580.674310][    C1] cdc_mbim 6-1:1.0: nonzero urb status received: -71
[  580.680593][ T5923] usb 3-1: SerialNumber: syz
[  580.681001][    C1] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes
[  580.692511][    C1] cdc_mbim 6-1:1.0: nonzero urb status received: -71
[  580.699220][    C1] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes
[  580.706175][    C1] cdc_mbim 6-1:1.0: nonzero urb status received: -71
[  580.712884][    C1] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes
[  580.719395][    C1] cdc_mbim 6-1:1.0: nonzero urb status received: -71
[  580.726079][    C1] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes
[  580.732588][    C1] cdc_mbim 6-1:1.0: nonzero urb status received: -71
[  580.739370][    C1] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes
[  580.745878][    C1] cdc_mbim 6-1:1.0: nonzero urb status received: -71
[  580.752550][    C1] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes
[  580.758872][    C1] cdc_mbim 6-1:1.0: nonzero urb status received: -71
[  580.765539][    C1] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes
[  580.771859][    C1] cdc_mbim 6-1:1.0: nonzero urb status received: -71
[  580.778525][    C1] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes
[  580.784824][    C1] cdc_mbim 6-1:1.0: nonzero urb status received: -71
[  580.791483][    C1] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes
[  580.797786][    C1] cdc_mbim 6-1:1.0: nonzero urb status received: -71
[  580.804453][    C1] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes
[  580.842694][ T5923] usb 3-1: config 0 descriptor??
[  580.891261][T13346] binder: 13345:13346 ioctl 8004550f 20000280 returned -22
[  581.077126][T13329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  581.087593][T13329] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  581.151799][ T5923] usb 3-1: USB disconnect, device number 62
[  581.626888][ T5870] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[  581.811256][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  581.836285][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  581.847093][ T5870] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  581.860655][ T5870] usb 3-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 0.00
[  581.870174][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  581.889279][ T5870] usb 3-1: config 0 descriptor??
[  582.097095][    C1] cdc_mbim 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1
[  582.113385][ T5866] usb 6-1: USB disconnect, device number 37
[  582.119834][ T5866] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM
[  582.195736][ T5866] wwan wwan0: port wwan0mbim0 disconnected
[  582.257624][ T5867] usb 10-1: new high-speed USB device number 32 using dummy_hcd
[  582.514687][ T5870] apple 0003:05AC:0264.001A: item fetching failed at offset 4/5
[  582.533759][ T5870] apple 0003:05AC:0264.001A: parse failed
[  582.556852][ T5870] apple 0003:05AC:0264.001A: probe with driver apple failed with error -22
[  582.571752][ T5867] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  582.619554][   T29] audit: type=1400 audit(1733869679.292:1568): avc:  denied  { getopt } for  pid=13366 comm="syz.6.1579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  582.740602][T13373] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1579'.
[  582.797205][ T5867] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  582.823639][   T29] audit: type=1400 audit(1733869679.292:1569): avc:  denied  { connect } for  pid=13366 comm="syz.6.1579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  582.833981][ T5867] usb 10-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  582.860326][   T29] audit: type=1400 audit(1733869679.292:1570): avc:  denied  { write } for  pid=13366 comm="syz.6.1579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  582.909251][ T5867] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  582.944991][ T5867] usb 10-1: config 0 descriptor??
[  582.972432][ T5867] gspca_main: spca561-2.14.0 probing abcd:cdee
[  583.478797][ T5867] spca561 10-1:0.0: probe with driver spca561 failed with error -22
[  583.488149][ T5867] usb 10-1: Quirk or no altset; falling back to MIDI 1.0
[  583.495222][ T5867] usb 10-1: MIDIStreaming interface descriptor not found
[  583.592097][ T5867] usb 10-1: USB disconnect, device number 32
[  583.683501][T13387] netlink: 'syz.6.1580': attribute type 5 has an invalid length.
[  584.485596][   T29] audit: type=1400 audit(1733869681.050:1571): avc:  denied  { ioctl } for  pid=13388 comm="syz.5.1582" path="socket:[41943]" dev="sockfs" ino=41943 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  584.563048][ T9081] udevd[9081]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  584.929377][ T5923] usb 3-1: USB disconnect, device number 63
[  585.105524][ T5867] usb 7-1: new high-speed USB device number 49 using dummy_hcd
[  585.137043][T13409] binder: Unknown parameter 'smackfsroot'
[  585.304431][T13411] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1587'.
[  585.436788][ T5867] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  585.452101][ T5867] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  585.560113][ T5867] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  585.610389][ T5867] usb 7-1: config 0 descriptor??
[  585.620445][T13420] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1588'.
[  585.683750][T13420] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1588'.
[  586.074031][   T47] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[  586.090576][T13430] syzkaller1: entered promiscuous mode
[  586.096707][ T5870] usb 9-1: new high-speed USB device number 32 using dummy_hcd
[  586.105502][ T5867] keytouch 0003:0926:3333.001B: fixing up Keytouch IEC report descriptor
[  586.106333][T13430] syzkaller1: entered allmulticast mode
[  586.117991][ T5867] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.001B/input/input46
[  586.364325][ T5867] keytouch 0003:0926:3333.001B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0
[  586.425385][   T47] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  586.436609][   T47] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  586.497505][   T29] audit: type=1400 audit(1733869682.930:1572): avc:  denied  { write } for  pid=13429 comm="syz.9.1593" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  586.672287][ T5870] usb 9-1: New USB device found, idVendor=0403, idProduct=0000, bcdDevice= 4.00
[  586.844615][ T5870] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  586.884696][   T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  586.924865][ T5870] usb 9-1: config 0 descriptor??
[  586.933891][T13425] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  586.945277][   T47] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  586.956077][ T5870] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected
[  586.995678][ T5870] usb 9-1: Detected FT232B
[  587.202624][   T29] audit: type=1400 audit(1733869683.613:1573): avc:  denied  { mounton } for  pid=13421 comm="syz.8.1590" path="/proc/644/cgroup" dev="proc" ino=42803 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[  587.256942][ T5870] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  587.280271][ T5870] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  587.291506][ T5870] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  587.294508][   T29] audit: type=1326 audit(1733869683.623:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13433 comm="syz.2.1594" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f8f37ff19 code=0x0
[  587.306914][ T5870] usb 9-1: USB disconnect, device number 32
[  587.332013][ T5870] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  587.342681][ T5870] ftdi_sio 9-1:0.0: device disconnected
[  587.354551][ T5923] usb 6-1: USB disconnect, device number 38
[  587.360808][ T9079] udevd[9079]: setting mode of /dev/bus/usb/009/032 to 020664 failed: No such file or directory
[  587.423311][ T9079] udevd[9079]: setting owner of /dev/bus/usb/009/032 to uid=0, gid=0 failed: No such file or directory
[  587.479790][   T29] audit: type=1326 audit(1733869683.744:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13433 comm="syz.2.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8f37ff19 code=0x7fc00000
[  587.527864][   T29] audit: type=1326 audit(1733869683.744:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13433 comm="syz.2.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8f8f37ff19 code=0x7fc00000
[  587.554631][   T29] audit: type=1326 audit(1733869683.744:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13433 comm="syz.2.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8f37ff19 code=0x7fc00000
[  587.978068][  T972] usb 7-1: USB disconnect, device number 49
[  588.091798][T13450] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  588.899549][T13457] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1601'.
[  588.918112][T13457] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1601'.
[  590.789290][  T972] usb 7-1: new full-speed USB device number 50 using dummy_hcd
[  590.841729][T13470] 9pnet_fd: p9_fd_create_tcp (13470): problem connecting socket to 127.0.0.1
[  590.969751][ T5866] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[  591.156446][  T972] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  591.167005][  T972] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  591.186323][  T972] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  591.227041][ T5866] usb 3-1: Using ep0 maxpacket: 16
[  591.232977][  T972] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  591.234243][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  591.266369][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  591.289664][ T5866] usb 3-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00
[  591.290104][  T972] usb 7-1: Product: syz
[  591.298955][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  591.329474][  T972] usb 7-1: Manufacturer: syz
[  591.335287][T13484] netlink: 'syz.9.1607': attribute type 2 has an invalid length.
[  591.344156][  T972] usb 7-1: SerialNumber: syz
[  591.350184][ T5866] usb 3-1: config 0 descriptor??
[  591.432440][   T29] kauditd_printk_skb: 716 callbacks suppressed
[  591.457307][   T29] audit: type=1400 audit(1733869687.570:2294): avc:  denied  { getopt } for  pid=13478 comm="syz.8.1606" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  591.599929][  T972] usb 7-1: cannot find UAC_HEADER
[  591.682862][  T972] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22
[  591.714124][  T972] usb 7-1: USB disconnect, device number 50
[  592.176751][   T29] audit: type=1326 audit(1733869688.272:2295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13456 comm="syz.2.1601" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f8f37ff19 code=0x0
[  592.199753][    C1] vkms_vblank_simulate: vblank timer overrun
[  592.490047][ T9076] udevd[9076]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  592.563323][   T47] usb 9-1: new high-speed USB device number 33 using dummy_hcd
[  592.735850][   T47] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  592.744736][   T47] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  592.766564][   T47] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[  592.793311][   T47] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  592.814161][   T47] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  592.827727][   T47] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  592.837232][   T47] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  592.845547][   T47] usb 9-1: Product: syz
[  592.849727][   T47] usb 9-1: Manufacturer: syz
[  592.858957][   T47] cdc_wdm 9-1:1.0: skipping garbage
[  592.864334][ T5867] usb 10-1: new high-speed USB device number 33 using dummy_hcd
[  592.875722][   T47] cdc_wdm 9-1:1.0: skipping garbage
[  592.885556][   T47] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device
[  592.891505][   T47] cdc_wdm 9-1:1.0: Unknown control protocol
[  593.054918][  T972] usb 7-1: new high-speed USB device number 51 using dummy_hcd
[  593.056945][ T5867] usb 10-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00
[  593.071952][ T5867] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  593.083024][ T5867] usb 10-1: config 0 descriptor??
[  593.095984][T13492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  593.105172][T13492] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  593.119413][    C1] wdm_int_callback: 7001 callbacks suppressed
[  593.119438][    C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[  593.132107][    C1] wdm_int_callback: 7001 callbacks suppressed
[  593.132126][    C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[  593.144341][    C1] vkms_vblank_simulate: vblank timer overrun
[  593.151158][    C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[  593.157790][    C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[  593.165416][    C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[  593.172043][    C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[  593.178683][    C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[  593.185309][    C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[  593.191719][   T47] usb 9-1: USB disconnect, device number 33
[  593.197769][    C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[  593.197785][    C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[  593.197798][    C1] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  593.226219][  T972] usb 7-1: Using ep0 maxpacket: 8
[  593.232883][  T972] usb 7-1: config index 0 descriptor too short (expected 1307, got 27)
[  593.246166][  T972] usb 7-1: config 0 has an invalid interface number: 0 but max is -1
[  593.255394][  T972] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0
[  593.264714][  T972] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  593.276442][  T972] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  593.289075][  T972] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  593.301166][  T972] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  593.313562][  T972] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  593.328745][  T972] usb 7-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  593.341549][  T972] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  593.362461][  T972] usb 7-1: Product: syz
[  593.367399][  T972] usb 7-1: Manufacturer: syz
[  593.372068][  T972] usb 7-1: SerialNumber: syz
[  593.386870][  T972] usb 7-1: config 0 descriptor??
[  593.394846][T13499] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22
[  593.399680][ T5866] usbhid 3-1:0.0: can't add hid device: -71
[  593.409084][ T5866] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  593.415170][  T972] hub 7-1:0.0: bad descriptor, ignoring hub
[  593.426885][  T972] hub 7-1:0.0: probe with driver hub failed with error -5
[  593.437641][  T972] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input47
[  593.449084][ T5866] usb 3-1: USB disconnect, device number 64
[  593.531673][ T5867] playstation 0003:054C:0DF2.001C: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.9-1/input0
[  593.743420][   T29] audit: type=1400 audit(1733869689.740:2296): avc:  denied  { write } for  pid=13496 comm="syz.9.1611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  593.763413][    C1] vkms_vblank_simulate: vblank timer overrun
[  593.921140][ T5866] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[  593.989136][T13504] 9pnet_virtio: no channels available for device syz
[  594.015474][ T5867] playstation 0003:054C:0DF2.001C: Failed to retrieve feature with reportID 32: -71
[  594.039923][ T5867] playstation 0003:054C:0DF2.001C: Failed to retrieve DualSense firmware info: -71
[  594.102649][ T5866] usb 3-1: device descriptor read/64, error -71
[  594.247798][ T5867] playstation 0003:054C:0DF2.001C: Failed to get firmware info from DualSense
[  594.448705][ T5867] playstation 0003:054C:0DF2.001C: Failed to create dualsense.
[  594.456527][ T5866] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[  594.467676][ T5867] playstation 0003:054C:0DF2.001C: probe with driver playstation failed with error -71
[  594.484435][ T5867] usb 10-1: USB disconnect, device number 33
[  594.594504][ T5866] usb 3-1: device descriptor read/64, error -71
[  594.723521][ T5866] usb usb3-port1: attempt power cycle
[  594.757924][   T29] audit: type=1400 audit(1733869690.694:2297): avc:  denied  { name_bind } for  pid=13511 comm="syz.9.1617" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  594.778885][    C1] vkms_vblank_simulate: vblank timer overrun
[  594.786829][   T47] usb 9-1: new high-speed USB device number 34 using dummy_hcd
[  594.814523][   T29] audit: type=1400 audit(1733869690.741:2298): avc:  denied  { create } for  pid=13511 comm="syz.9.1617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  595.107596][   T47] usb 9-1: Using ep0 maxpacket: 16
[  595.114342][   T47] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  595.125369][   T47] usb 9-1: New USB device found, idVendor=046d, idProduct=c20a, bcdDevice= 0.00
[  595.134657][   T47] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  595.150044][   T47] usb 9-1: config 0 descriptor??
[  595.155383][ T5866] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[  595.195596][ T5866] usb 3-1: device descriptor read/8, error -71
[  596.315755][ T5866] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[  596.345609][ T5867] usb 7-1: USB disconnect, device number 51
[  596.398250][ T5866] usb 3-1: device descriptor read/8, error -71
[  596.607375][ T5866] usb usb3-port1: unable to enumerate USB device
[  597.273605][   T47] logitech 0003:046D:C20A.001D: unknown main item tag 0x0
[  597.281137][   T47] logitech 0003:046D:C20A.001D: unknown main item tag 0x0
[  597.314184][   T47] logitech 0003:046D:C20A.001D: unknown main item tag 0x0
[  597.321518][   T47] logitech 0003:046D:C20A.001D: unknown main item tag 0x0
[  597.352721][   T47] logitech 0003:046D:C20A.001D: unknown main item tag 0x0
[  597.360986][   T47] logitech 0003:046D:C20A.001D: unknown main item tag 0x0
[  597.370424][   T47] logitech 0003:046D:C20A.001D: unknown main item tag 0x0
[  597.379124][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  597.385628][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  597.517501][T13545] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1624'.
[  597.660957][   T47] logitech 0003:046D:C20A.001D: hidraw0: USB HID v0.36 Device [HID 046d:c20a] on usb-dummy_hcd.8-1/input0
[  597.661007][   T47] logitech 0003:046D:C20A.001D: no inputs found
[  598.890485][T13544] tty tty2: ldisc open failed (-12), clearing slot 1
[  598.920075][   T47] usb 9-1: USB disconnect, device number 34
[  599.031044][ T5867] usb 7-1: new high-speed USB device number 52 using dummy_hcd
[  599.544347][ T5867] usb 7-1: Using ep0 maxpacket: 16
[  599.563772][ T5867] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  599.575637][ T5867] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 12352, setting to 64
[  599.660569][T13557] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1627'.
[  600.496669][ T5867] usb 7-1: string descriptor 0 read error: -71
[  600.503099][ T5867] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55
[  600.604719][   T29] audit: type=1400 audit(1733869696.138:2299): avc:  denied  { mount } for  pid=13558 comm="syz.2.1628" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  600.648906][ T5867] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  600.788455][ T5867] usb 7-1: config 0 descriptor??
[  600.833325][ T5867] usb 7-1: can't set config #0, error -71
[  600.905307][ T5867] usb 7-1: USB disconnect, device number 52
[  600.989490][   T29] audit: type=1400 audit(1733869696.148:2300): avc:  denied  { mounton } for  pid=13558 comm="syz.2.1628" path="/346/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  601.105526][   T29] audit: type=1400 audit(1733869696.157:2301): avc:  denied  { read } for  pid=13558 comm="syz.2.1628" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  601.293726][T13576] pim6reg: entered allmulticast mode
[  601.311982][T13576] pim6reg: left allmulticast mode
[  601.740246][   T29] audit: type=1400 audit(1733869696.157:2302): avc:  denied  { open } for  pid=13558 comm="syz.2.1628" path="/346/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  602.281372][   T29] audit: type=1400 audit(1733869697.597:2303): avc:  denied  { mount } for  pid=13587 comm="syz.9.1633" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  602.859704][   T29] audit: type=1400 audit(1733869698.271:2304): avc:  denied  { unmount } for  pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  603.464625][   T29] audit: type=1400 audit(1733869698.711:2305): avc:  denied  { write } for  pid=13587 comm="syz.9.1633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  603.502500][T13596] delete_channel: no stack
[  603.555223][   T29] audit: type=1400 audit(1733869698.916:2306): avc:  denied  { unmount } for  pid=10066 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  603.816729][T13602] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1636'.
[  603.828321][T13602] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1636'.
[  603.929819][T13603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1634'.
[  604.135833][   T29] audit: type=1400 audit(1733869699.450:2307): avc:  denied  { create } for  pid=13600 comm="syz.9.1637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  604.404554][T13601] binder: 13600:13601 ioctl c0306201 20000580 returned -14
[  604.429771][   T29] audit: type=1400 audit(1733869699.711:2308): avc:  denied  { ioctl } for  pid=13600 comm="syz.9.1637" path="socket:[44158]" dev="sockfs" ino=44158 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  604.772637][T13616] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  604.788454][T13611] netlink: 'syz.2.1638': attribute type 2 has an invalid length.
[  604.797333][T13617] netlink: 'syz.2.1638': attribute type 2 has an invalid length.
[  604.808579][T13617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  604.817826][T13617] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  604.836185][T13616] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  605.044909][T13623] pimreg: entered allmulticast mode
[  605.082309][ T5867] usb 3-1: new high-speed USB device number 69 using dummy_hcd
[  606.249958][ T5823] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  606.560261][ T5867] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  606.582090][   T29] kauditd_printk_skb: 1 callbacks suppressed
[  606.582105][   T29] audit: type=1400 audit(1733869701.751:2310): avc:  denied  { write } for  pid=13635 comm="syz.9.1645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  606.587136][ T5867] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  606.673102][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  606.793411][ T5867] usb 3-1: config 0 descriptor??
[  606.826769][ T5867] pwc: Askey VC010 type 2 USB webcam detected.
[  606.847674][  T972] usb 10-1: new high-speed USB device number 34 using dummy_hcd
[  607.436791][T13621] pimreg: left allmulticast mode
[  607.497941][  T972] usb 10-1: device descriptor read/64, error -71
[  607.679740][   T47] usb 9-1: new high-speed USB device number 35 using dummy_hcd
[  607.769635][  T972] usb 10-1: new high-speed USB device number 35 using dummy_hcd
[  607.879439][   T47] usb 9-1: config index 0 descriptor too short (expected 23569, got 27)
[  607.890205][   T47] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  607.904891][   T47] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  607.916129][   T47] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  607.924267][   T47] usb 9-1: Manufacturer: syz
[  607.960027][   T47] usb 9-1: config 0 descriptor??
[  608.153748][ T5867] pwc: send_video_command error -71
[  608.159071][ T5867] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  608.167234][ T5867] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71
[  608.184171][  T972] usb 10-1: device descriptor read/64, error -71
[  608.244213][ T5867] usb 3-1: USB disconnect, device number 69
[  608.321235][   T47] rc_core: IR keymap rc-hauppauge not found
[  608.328771][   T47] Registered IR keymap rc-empty
[  608.334296][   T47] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0
[  608.364056][   T47] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input48
[  608.383363][    C1] igorplugusb 9-1:0.0: Error: urb status = -32
[  608.419382][T13643] netlink: 'syz.8.1647': attribute type 10 has an invalid length.
[  608.564317][  T972] usb usb10-port1: attempt power cycle
[  608.605619][ T5923] usb 9-1: USB disconnect, device number 35
[  609.159442][   T29] audit: type=1400 audit(1733869703.752:2311): avc:  denied  { mount } for  pid=13651 comm="syz.6.1650" name="/" dev="pstore" ino=3294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1
[  609.208228][   T29] audit: type=1326 audit(1733869704.201:2312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13661 comm="syz.8.1651" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe05bf7ff19 code=0x0
[  609.234691][  T972] usb 10-1: new high-speed USB device number 36 using dummy_hcd
[  609.284194][  T972] usb 10-1: device descriptor read/8, error -71
[  609.378330][   T29] audit: type=1400 audit(1733869704.360:2313): avc:  denied  { unmount } for  pid=8914 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1
[  609.679727][  T972] usb 10-1: new high-speed USB device number 37 using dummy_hcd
[  610.267265][    T8] usb 3-1: new high-speed USB device number 70 using dummy_hcd
[  610.274976][ T5923] usb 6-1: new full-speed USB device number 39 using dummy_hcd
[  610.300680][  T972] usb 10-1: device descriptor read/8, error -71
[  610.416693][  T972] usb usb10-port1: unable to enumerate USB device
[  611.281006][    T8] usb 3-1: Using ep0 maxpacket: 32
[  611.288206][ T5923] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  611.297524][ T5923] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  611.313559][ T5923] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  611.323575][ T5923] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  611.343370][ T5923] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  611.353700][    T8] usb 3-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=26.2f
[  611.363167][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  611.385163][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  611.401226][    T8] usb 3-1: Product: syz
[  611.405422][    T8] usb 3-1: Manufacturer: syz
[  611.410031][    T8] usb 3-1: SerialNumber: syz
[  611.477344][ T5923] usb 6-1: Product: syz
[  611.481547][ T5923] usb 6-1: Manufacturer: syz
[  611.498131][    T8] usb 3-1: config 0 descriptor??
[  611.596198][    T8] ums-onetouch 3-1:0.0: USB Mass Storage device detected
[  611.604249][ T5923] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22
[  611.668612][T13689] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1659'.
[  611.804105][   T47] kernel write not supported for file /snd/seq (pid: 47 comm: kworker/1:1)
[  611.807451][ T5923] kernel read not supported for file /vbi8 (pid: 5923 comm: kworker/0:8)
[  612.073687][    T8] usb 3-1: USB disconnect, device number 70
[  612.565779][ T5923] usb 9-1: new high-speed USB device number 36 using dummy_hcd
[  613.202824][  T972] usb 6-1: USB disconnect, device number 39
[  613.273929][ T5923] usb 9-1: unable to get BOS descriptor or descriptor too short
[  613.299462][ T5923] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  613.314508][ T5923] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9
[  613.383686][ T5923] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  613.399235][ T5923] usb 9-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39
[  613.423370][ T5923] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  613.459678][ T5923] usb 9-1: Product: syz
[  613.485397][ T5923] usb 9-1: Manufacturer: syz
[  613.495631][ T5923] usb 9-1: SerialNumber: syz
[  613.509177][ T5923] usb 9-1: config 0 descriptor??
[  613.517453][T13696] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  613.525923][ T5923] pn533_usb 9-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[  613.566616][T13712] team0: No ports can be present during mode change
[  613.591625][   T47] usb 7-1: new high-speed USB device number 53 using dummy_hcd
[  613.744334][ T5923] usb 9-1: USB disconnect, device number 36
[  613.762976][   T47] usb 7-1: Using ep0 maxpacket: 16
[  613.916549][   T47] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  613.943304][   T47] usb 7-1: config 0 has no interfaces?
[  613.951193][   T47] usb 7-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02
[  613.967395][   T47] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1
[  613.975767][   T47] usb 7-1: Product: syz
[  613.980367][ T5867] usb 3-1: new high-speed USB device number 71 using dummy_hcd
[  613.994789][   T47] usb 7-1: Manufacturer: syz
[  614.007275][   T47] usb 7-1: SerialNumber: syz
[  614.043885][   T47] usb 7-1: config 0 descriptor??
[  614.158654][ T5867] usb 3-1: Using ep0 maxpacket: 8
[  614.248250][ T5867] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  614.258583][ T5867] usb 3-1: config 179 has no interface number 0
[  614.265593][ T5867] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  614.277429][ T5867] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  614.309483][T13710] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1664'.
[  614.338403][ T5867] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  614.375322][T13710] netlink: 49 bytes leftover after parsing attributes in process `syz.6.1664'.
[  614.389052][ T5867] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  614.410258][ T5867] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  614.435306][   T47] usb 7-1: USB disconnect, device number 53
[  614.454297][ T5867] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  614.463983][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  614.505121][T13717] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  614.525550][ T5867] xpad 3-1:179.65: probe with driver xpad failed with error -5
[  614.735867][ T5867] usb 3-1: USB disconnect, device number 71
[  615.580666][T13746] x_tables: duplicate entry at hook 2
Connection to 10.128.0.85 closed by remote host.
[  616.740730][ T6415] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  616.878930][ T6415] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  617.017283][ T6415] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  617.079035][ T6415] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  617.179665][ T6415] bridge_slave_1: left allmulticast mode
[  617.186624][ T6415] bridge_slave_1: left promiscuous mode
[  617.192280][ T6415] bridge0: port 2(bridge_slave_1) entered disabled state
[  617.202896][ T6415] bridge_slave_0: left allmulticast mode
[  617.208698][ T6415] bridge_slave_0: left promiscuous mode
[  617.214369][ T6415] bridge0: port 1(bridge_slave_0) entered disabled state
[  617.233508][ T6415] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  617.307190][ T6415] batman_adv: batadv0: Removing interface: ip6gretap1
[  617.629664][ T6415] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  617.640114][ T6415] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  617.650225][ T6415] bond0 (unregistering): (slave team0): Releasing backup interface
[  617.658838][ T6415] bond0 (unregistering): Released all slaves
[  617.959090][ T6415] hsr_slave_0: left promiscuous mode
[  617.967972][ T6415] hsr_slave_1: left promiscuous mode
[  617.973704][ T6415] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  617.981183][ T6415] batman_adv: batadv0: Removing interface: batadv_slave_0
[  617.989484][ T6415] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  617.997373][ T6415] batman_adv: batadv0: Removing interface: batadv_slave_1
[  618.013295][ T6415] veth1_macvtap: left promiscuous mode
[  618.018922][ T6415] veth0_macvtap: left promiscuous mode
[  618.024437][ T6415] veth1_vlan: left promiscuous mode
[  618.029828][ T6415] veth0_vlan: left promiscuous mode
[  618.428984][ T6415] team0 (unregistering): Port device team_slave_1 removed
[  618.469895][ T6415] team0 (unregistering): Port device team_slave_0 removed
[  619.236216][ T6415] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  619.250004][ T6415] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  619.324712][ T6415] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  619.335166][ T6415] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  619.405756][ T6415] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  619.416270][ T6415] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  619.472957][ T6415] team0: Port device netdevsim0 removed
[  619.479940][ T6415] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  619.490308][ T6415] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  619.584300][ T6415] bridge_slave_1: left allmulticast mode
[  619.591762][ T6415] bridge_slave_1: left promiscuous mode
[  619.597397][ T6415] bridge0: port 2(bridge_slave_1) entered disabled state
[  619.606926][ T6415] bridge_slave_0: left allmulticast mode
[  619.612787][ T6415] bridge_slave_0: left promiscuous mode
[  619.618419][ T6415] bridge0: port 1(bridge_slave_0) entered disabled state
[  619.940649][ T6415] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  619.950814][ T6415] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  619.961542][ T6415] bond0 (unregistering): Released all slaves
[  620.216815][ T6415] hsr_slave_0: left promiscuous mode
[  620.222964][ T6415] hsr_slave_1: left promiscuous mode
[  620.228674][ T6415] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  620.236301][ T6415] batman_adv: batadv0: Removing interface: batadv_slave_0
[  620.244861][ T6415] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  620.255048][ T6415] batman_adv: batadv0: Removing interface: batadv_slave_1
[  620.272568][ T6415] veth1_macvtap: left promiscuous mode
[  620.281699][ T6415] veth0_macvtap: left promiscuous mode
[  620.287338][ T6415] veth1_vlan: left promiscuous mode
[  620.292617][ T6415] veth0_vlan: left promiscuous mode
[  620.314875][ T6415] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000012: 0000 [#1] PREEMPT SMP KASAN NOPTI
[  620.327822][ T6415] KASAN: null-ptr-deref in range [0x0000000000000090-0x0000000000000097]
[  620.336245][ T6415] CPU: 1 UID: 0 PID: 6415 Comm: kworker/u8:17 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0
[  620.347164][ T6415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  620.357223][ T6415] Workqueue: netns cleanup_net
[  620.361973][ T6415] RIP: 0010:__fib6_drop_pcpu_from.part.0+0x199/0x510
[  620.368637][ T6415] Code: 48 c1 ea 03 42 80 3c 32 00 0f 85 5e 03 00 00 4c 8b 28 4d 85 ed 74 2e e8 65 fe bc f7 49 8d bd 90 00 00 00 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 0f 85 24 03 00 00 49 8b 85 90 00 00 00 4c 39 e0 0f
[  620.388232][ T6415] RSP: 0018:ffffc9000c08f000 EFLAGS: 00010206
[  620.394274][ T6415] RAX: 0000000000000012 RBX: 0000000000000000 RCX: 1ffffffff1b4e97c
[  620.402221][ T6415] RDX: ffff888055ae8000 RSI: ffffffff89dd051b RDI: 0000000000000091
[  620.410428][ T6415] RBP: ffff8880254bf0b8 R08: 0000000000000005 R09: 0000000000000007
[  620.418372][ T6415] R10: 0000000000000000 R11: 0000000000000006 R12: ffff8880254bf000
[  620.426331][ T6415] R13: 0000000000000001 R14: dffffc0000000000 R15: ffffed1004a97e22
[  620.434293][ T6415] FS:  0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  620.443208][ T6415] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  620.449783][ T6415] CR2: 00007ffd6c3a8669 CR3: 000000000df7e000 CR4: 00000000003526f0
[  620.457740][ T6415] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  620.465699][ T6415] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  620.473660][ T6415] Call Trace:
[  620.476922][ T6415]  <TASK>
[  620.479842][ T6415]  ? die_addr+0x3b/0xa0
[  620.483989][ T6415]  ? exc_general_protection+0x155/0x230
[  620.489531][ T6415]  ? asm_exc_general_protection+0x26/0x30
[  620.495241][ T6415]  ? __fib6_drop_pcpu_from.part.0+0x18b/0x510
[  620.501300][ T6415]  ? __fib6_drop_pcpu_from.part.0+0x199/0x510
[  620.507357][ T6415]  ? lockdep_hardirqs_on+0x7c/0x110
[  620.512545][ T6415]  ? rt6_flush_exceptions+0x6a/0x80
[  620.517737][ T6415]  fib6_purge_rt+0x80c/0x9e0
[  620.522320][ T6415]  ? __pfx_fib6_purge_rt+0x10/0x10
[  620.527426][ T6415]  fib6_del+0xa5a/0x1760
[  620.531669][ T6415]  ? __pfx_fib6_del+0x10/0x10
[  620.536338][ T6415]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  620.542221][ T6415]  ? fib6_ifdown+0xcd/0x8f0
[  620.546723][ T6415]  fib6_clean_node+0x426/0x5b0
[  620.551481][ T6415]  ? __pfx_fib6_clean_node+0x10/0x10
[  620.556760][ T6415]  ? fib6_walk+0x17a/0x370
[  620.561163][ T6415]  ? __pfx_lock_release+0x10/0x10
[  620.566179][ T6415]  fib6_walk_continue+0x44f/0x8d0
[  620.571198][ T6415]  fib6_walk+0x182/0x370
[  620.575432][ T6415]  ? __pfx_fib6_ifdown+0x10/0x10
[  620.580363][ T6415]  fib6_clean_tree+0xd7/0x120
[  620.585030][ T6415]  ? __pfx_fib6_clean_tree+0x10/0x10
[  620.590307][ T6415]  ? __pfx_fib6_clean_node+0x10/0x10
[  620.595589][ T6415]  ? __pfx_fib6_ifdown+0x10/0x10
[  620.600519][ T6415]  ? lock_acquire+0x2f/0xb0
[  620.605009][ T6415]  ? __fib6_clean_all+0xe5/0x2d0
[  620.609939][ T6415]  ? __pfx_fib6_ifdown+0x10/0x10
[  620.614870][ T6415]  __fib6_clean_all+0x100/0x2d0
[  620.619732][ T6415]  rt6_disable_ip+0x2ef/0x940
[  620.624399][ T6415]  ? find_held_lock+0x2d/0x110
[  620.629153][ T6415]  ? __pfx_rt6_disable_ip+0x10/0x10
[  620.634340][ T6415]  ? tee_netdev_event+0x306/0x3d0
[  620.639360][ T6415]  ? __pfx_lock_release+0x10/0x10
[  620.644382][ T6415]  ? rcu_is_watching+0x12/0xc0
[  620.649141][ T6415]  addrconf_ifdown.isra.0+0x126/0x1af0
[  620.654593][ T6415]  ? __mutex_unlock_slowpath+0x164/0x690
[  620.660220][ T6415]  ? net_generic+0xea/0x2a0
[  620.664719][ T6415]  ? __pfx_addrconf_ifdown.isra.0+0x10/0x10
[  620.670603][ T6415]  addrconf_notify+0x220/0x19c0
[  620.675442][ T6415]  ? ip6mr_device_event+0x1bc/0x230
[  620.680635][ T6415]  notifier_call_chain+0xb7/0x410
[  620.685657][ T6415]  ? __pfx_addrconf_notify+0x10/0x10
[  620.690939][ T6415]  call_netdevice_notifiers_info+0xbe/0x140
[  620.696824][ T6415]  dev_close_many+0x333/0x6a0
[  620.701490][ T6415]  ? find_held_lock+0x2d/0x110
[  620.706248][ T6415]  ? __pfx_dev_close_many+0x10/0x10
[  620.711434][ T6415]  ? batadv_tt_local_event+0x647/0x7f0
[  620.716888][ T6415]  unregister_netdevice_many_notify+0x489/0x1e60
[  620.723212][ T6415]  ? lockdep_hardirqs_on+0x7c/0x110
[  620.728400][ T6415]  ? batadv_tt_local_event+0x647/0x7f0
[  620.733851][ T6415]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  620.740611][ T6415]  ? mutex_is_locked+0x17/0x60
[  620.745363][ T6415]  ? unregister_netdevice_queue+0x22f/0x3f0
[  620.751250][ T6415]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  620.757485][ T6415]  ? batadv_softif_destroy_vlan+0xdf/0x160
[  620.763286][ T6415]  default_device_exit_batch+0x867/0xae0
[  620.768906][ T6415]  ? __pfx_default_device_exit_batch+0x10/0x10
[  620.775048][ T6415]  ? __pfx_rdma_dev_exit_net+0x10/0x10
[  620.780503][ T6415]  ? __pfx___might_resched+0x10/0x10
[  620.785782][ T6415]  ? __pfx_cfg802154_pernet_exit+0x10/0x10
[  620.791581][ T6415]  ? __pfx_default_device_exit_batch+0x10/0x10
[  620.797725][ T6415]  ops_exit_list+0x128/0x180
[  620.802311][ T6415]  cleanup_net+0x5b7/0xb40
[  620.806714][ T6415]  ? __pfx_cleanup_net+0x10/0x10
[  620.811640][ T6415]  ? lock_acquire+0x2f/0xb0
[  620.816129][ T6415]  ? process_one_work+0x921/0x1ba0
[  620.821230][ T6415]  process_one_work+0x9c5/0x1ba0
[  620.826157][ T6415]  ? __pfx_cleanup_net+0x10/0x10
[  620.831083][ T6415]  ? __pfx_process_one_work+0x10/0x10
[  620.836442][ T6415]  ? rcu_is_watching+0x12/0xc0
[  620.841205][ T6415]  ? assign_work+0x1a0/0x250
[  620.845780][ T6415]  worker_thread+0x6c8/0xf00
[  620.850362][ T6415]  ? __pfx_worker_thread+0x10/0x10
[  620.855465][ T6415]  kthread+0x2c1/0x3a0
[  620.859526][ T6415]  ? _raw_spin_unlock_irq+0x23/0x50
[  620.864719][ T6415]  ? __pfx_kthread+0x10/0x10
[  620.869302][ T6415]  ret_from_fork+0x45/0x80
[  620.873706][ T6415]  ? __pfx_kthread+0x10/0x10
[  620.878286][ T6415]  ret_from_fork_asm+0x1a/0x30
[  620.883047][ T6415]  </TASK>
[  620.886050][ T6415] Modules linked in:
[  620.889968][ T6415] ---[ end trace 0000000000000000 ]---
[  620.895442][ T6415] RIP: 0010:__fib6_drop_pcpu_from.part.0+0x199/0x510
[  620.902132][ T6415] Code: 48 c1 ea 03 42 80 3c 32 00 0f 85 5e 03 00 00 4c 8b 28 4d 85 ed 74 2e e8 65 fe bc f7 49 8d bd 90 00 00 00 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 0f 85 24 03 00 00 49 8b 85 90 00 00 00 4c 39 e0 0f
[  620.921755][ T6415] RSP: 0018:ffffc9000c08f000 EFLAGS: 00010206
[  620.927835][ T6415] RAX: 0000000000000012 RBX: 0000000000000000 RCX: 1ffffffff1b4e97c
[  620.935790][ T6415] RDX: ffff888055ae8000 RSI: ffffffff89dd051b RDI: 0000000000000091
[  620.943760][ T6415] RBP: ffff8880254bf0b8 R08: 0000000000000005 R09: 0000000000000007
[  620.951726][ T6415] R10: 0000000000000000 R11: 0000000000000006 R12: ffff8880254bf000
[  620.959687][ T6415] R13: 0000000000000001 R14: dffffc0000000000 R15: ffffed1004a97e22
[  620.967639][ T6415] FS:  0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  620.976566][ T6415] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  620.983138][ T6415] CR2: 00007ffd6c3a8669 CR3: 000000000df7e000 CR4: 00000000003526f0
[  620.991128][ T6415] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  620.999093][ T6415] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  621.007063][ T6415] Kernel panic - not syncing: Fatal exception in interrupt
[  621.014434][ T6415] Kernel Offset: disabled
[  621.018738][ T6415] Rebooting in 86400 seconds..