last executing test programs:

5m6.345259258s ago: executing program 2 (id=527):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="4000000068000100030010000000008000000000000000000c000200010000001500000014000c8008000300000000070800020002000000080005"], 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000)
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15)
ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"})
syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaa"], 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xf9)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)=0x9)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r2, 0x84, 0x7, 0x0, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000280)=0xb3)
unshare(0x2a020400)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
pidfd_getfd(r3, 0xffffffffffffffff, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x1)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000006400000000000000260f01c2"], 0x64})
ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0xc9, 0x0, 0xc})
r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0xf4b5, 0x10000, 0x1, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3], 0xeeee8000, 0x2011c0})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x4)

5m2.790908457s ago: executing program 2 (id=534):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x0, 0x2, 0x0, "e5e81571c97b166978ff61fcfd2409b2b73e0f936ed774de107de8a9041b5113"})
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x2, 0x0)
syz_open_dev$sndmidi(0x0, 0x3, 0x361103)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
fsopen(0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20042, 0x1})
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r2}, 0x18)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_GET_MSRS(r5, 0xc048aeca, &(0x7f0000000200))

5m0.221385406s ago: executing program 2 (id=542):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_init_net_socket$rose(0xb, 0x5, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40004)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
read$msr(0xffffffffffffffff, &(0x7f0000002700)=""/102392, 0x18ff8)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x9}, 0x18)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
iopl(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0xfffffffc, 0x2, 0x7, 0x10, r2, 0x5, '\x00', 0x0, r2, 0x0, 0x5, 0x4, 0x5, @void, @value, @void, @value}, 0x50)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000040))
r3 = getpgid(0x0)
r4 = syz_pidfd_open(r3, 0x0)
r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0xac63094eb3328933, 0x0)
pidfd_getfd(r4, r5, 0x0)

4m59.292979865s ago: executing program 2 (id=546):
mknod(&(0x7f0000000080)='./bus\x00', 0x8000, 0x7)
ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x302, 0x0, 0xe0, 0x2, 0x0})
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0)
r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x1a3302, 0x0)
ioctl$PTP_ENABLE_PPS(r4, 0x40043d04, 0x0)

4m58.266427242s ago: executing program 2 (id=549):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x101c02, 0x26)
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000001c0)={0x30, 0x5, 0x0, {0x0, 0x4, 0x0, 0x8}}, 0x30)
ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f00000000c0)={0x3ff, "de18cef373eab21b67d94050accb92fa42b075f928cdeabfdf2285678475fc6c", 0x1, 0x6, 0x4, 0xc00000, 0x8000020, 0x2})
mlock(&(0x7f0000ffb000/0x1000)=nil, 0xffffffffdf004fff)
openat$kvm(0xffffffffffffff9c, 0x0, 0x40400, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f00000000c0)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, 0x0)
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x3b, 0x2, 0x1})
io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0xfffffffffffffc76)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0)
r4 = syz_io_uring_setup(0x1110, &(0x7f0000000140)={0x0, 0x4, 0x400}, &(0x7f00000001c0)=<r5=>0x0, &(0x7f0000000040)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x40000, 0x2})
io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0)
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80000)
openat(r7, &(0x7f0000000080)='./file0\x00', 0x521842, 0x1a)

4m57.253147032s ago: executing program 2 (id=553):
r0 = io_uring_setup(0x2ef1, &(0x7f0000000000)={0x0, 0x5712, 0x80, 0x1, 0x400001})
r1 = socket$kcm(0x21, 0x2, 0x2)
close_range(r0, r1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, @void, @value}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000040)={0x0, &(0x7f0000000840)})
ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r3, 0x4002f516, &(0x7f00000000c0)={0x6, 0x3})
syz_open_dev$rtc(&(0x7f0000000080), 0x2, 0x2)
socket$kcm(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000001b00)=""/102392, 0x18ff8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000796412000000000000000001851000000600000018000000", @ANYRES16=r1, @ANYBLOB="00000000000000106608000000001000180000000000001000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000200085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x60680, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00008100010000000000000000000000000000000000000000000000acfc7bc97a5ae2410ab4a61cd90d26a694e00b5f0000d7da2ae75950641cadc076427ed4c01cf61d2404566b1111db6aa2de035ea3234de7e95d949dd896c87cd6877c391ef52a0de5fa917bfc3c573dd06762a7466902debd7448"], 0x48)
r6 = syz_open_procfs(0x0, &(0x7f00000006c0)='fdinfo/3\x00')
pread64(r6, &(0x7f0000000a00)=""/107, 0x6b, 0x4)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'macsec0\x00', <r9=>0x0})
setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000000)={@remote, r9}, 0x14)
getsockopt$inet_sctp_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000600)={<r10=>0x0, 0x1}, &(0x7f0000000680)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f00000007c0)={r10, 0x536bb4d2}, &(0x7f0000000800)=0x8)
ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000880))
sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newtfilter={0x24, 0x11, 0x8, 0x70bd27, 0x2000, {0x0, 0x0, 0x74, r9, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x840)
r11 = open_tree(r6, &(0x7f0000000200)='./file0\x00', 0x0)
sendto$packet(r11, &(0x7f0000000700)="fc56cef851a22307a70baa79bf05d12538018d7129abfde0641f1d872017617270564706031f88d89079910a850fae7cbdadfeb8a13125db511876fe5583a809125c15054e1ac6cb7f4fd4cf1d2be65191ccdfc02f00a24791858b29eaff17d9528091f5e9ac607980125b5a08a48c4ad4c2b7c340939fca77bab83e1d06f1a2137e590587437c619fc67e82fda1ef6adc150fa6c5f612b56ab6a862bb3dcf86358a75ec2fadba870ab0d93084a19137a19f9327de40", 0xb6, 0x10, &(0x7f00000005c0)={0x11, 0x1b, r9, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14)
close_range(r4, 0xffffffffffffffff, 0x0)

4m41.987556719s ago: executing program 32 (id=553):
r0 = io_uring_setup(0x2ef1, &(0x7f0000000000)={0x0, 0x5712, 0x80, 0x1, 0x400001})
r1 = socket$kcm(0x21, 0x2, 0x2)
close_range(r0, r1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, @void, @value}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000040)={0x0, &(0x7f0000000840)})
ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r3, 0x4002f516, &(0x7f00000000c0)={0x6, 0x3})
syz_open_dev$rtc(&(0x7f0000000080), 0x2, 0x2)
socket$kcm(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000001b00)=""/102392, 0x18ff8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000796412000000000000000001851000000600000018000000", @ANYRES16=r1, @ANYBLOB="00000000000000106608000000001000180000000000001000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000200085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x60680, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00008100010000000000000000000000000000000000000000000000acfc7bc97a5ae2410ab4a61cd90d26a694e00b5f0000d7da2ae75950641cadc076427ed4c01cf61d2404566b1111db6aa2de035ea3234de7e95d949dd896c87cd6877c391ef52a0de5fa917bfc3c573dd06762a7466902debd7448"], 0x48)
r6 = syz_open_procfs(0x0, &(0x7f00000006c0)='fdinfo/3\x00')
pread64(r6, &(0x7f0000000a00)=""/107, 0x6b, 0x4)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'macsec0\x00', <r9=>0x0})
setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000000)={@remote, r9}, 0x14)
getsockopt$inet_sctp_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000600)={<r10=>0x0, 0x1}, &(0x7f0000000680)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f00000007c0)={r10, 0x536bb4d2}, &(0x7f0000000800)=0x8)
ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000880))
sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newtfilter={0x24, 0x11, 0x8, 0x70bd27, 0x2000, {0x0, 0x0, 0x74, r9, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x840)
r11 = open_tree(r6, &(0x7f0000000200)='./file0\x00', 0x0)
sendto$packet(r11, &(0x7f0000000700)="fc56cef851a22307a70baa79bf05d12538018d7129abfde0641f1d872017617270564706031f88d89079910a850fae7cbdadfeb8a13125db511876fe5583a809125c15054e1ac6cb7f4fd4cf1d2be65191ccdfc02f00a24791858b29eaff17d9528091f5e9ac607980125b5a08a48c4ad4c2b7c340939fca77bab83e1d06f1a2137e590587437c619fc67e82fda1ef6adc150fa6c5f612b56ab6a862bb3dcf86358a75ec2fadba870ab0d93084a19137a19f9327de40", 0xb6, 0x10, &(0x7f00000005c0)={0x11, 0x1b, r9, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14)
close_range(r4, 0xffffffffffffffff, 0x0)

2m40.979581913s ago: executing program 3 (id=1045):
r0 = shmget(0x3, 0x1000, 0x78000000, &(0x7f0000ffd000/0x1000)=nil)
shmat(r0, &(0x7f0000ff2000/0xe000)=nil, 0x2000)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="1250c170ce01020301093300011870fd0009058202000200040000002000560000000000f2b9ab77bd0befb3c42705728f0c09fa470d63a97f9dd44ecf94be1150db57b0e2f81b6fa693a15a5a9801a038e295d2a60e300b3c6a0a63c76cad1bed3a3d0691b45779bd4dfe17"], 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0xb1, @mcast1, 0x4}, 0x1c)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"])
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x8000, &(0x7f0000000580)=ANY=[@ANYRES32=r1, @ANYRES16=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r4=>r3}, './file0\x00'})
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x58, 0x2, 0x6, 0x301, 0x6c, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}}, 0x20004000)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x288, 0x288, 0xd0, 0x1b8, 0x358, 0x440, 0x440, 0x440, 0x440, 0x440, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [0xffffffff, 0xff000000, 0xffffff00, 0xff000000], [0xffffff00, 0xff, 0xff, 0x7fffffff], 'hsr0\x00', 'xfrm0\x00', {0xff}, {0xff}, 0x29, 0x7, 0x2, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x12}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570)
openat(r4, &(0x7f0000000080)='./file1\x00', 0x2009c2, 0x0)
r6 = signalfd4(0xffffffffffffffff, &(0x7f0000001140)={[0xfffffffffffffff5]}, 0x8, 0x0)
r7 = socket(0x5, 0x2, 0x2)
connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x3)
r8 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f00000002c0)={0x10000005})
close(r6)
r9 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/145, 0x91, 0x1, &(0x7f00000004c0)=""/85, 0x55}, &(0x7f0000000540)=0x40)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000640)={'macvtap0\x00', <r10=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1a, 0x4, 0x7fe2, 0xfffffffe, 0x40, 0xffffffffffffffff, 0x8, '\x00', r10, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50)

2m37.815536652s ago: executing program 3 (id=1056):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000580)='attr/exec\x00')
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0])
r1 = syz_io_uring_setup(0x2e3b, &(0x7f0000000240)={0x0, 0x69e5, 0x10000, 0x3, 0x166, 0x0, r0}, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000001040)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/9, 0x9}], 0x1})
io_uring_enter(r1, 0x567, 0xa1ff, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000002c0)={0x7, &(0x7f0000000000)=[{0x2, 0x9, 0xfc}, {0xff, 0x9, 0xe3, 0x3ff}, {0x7, 0x2, 0x5, 0x5}, {0x90, 0xc4, 0xe, 0x5}, {0x7, 0x5, 0x5}, {0x8001, 0x1, 0x5, 0x7}, {0xb, 0x4}]}, 0x10)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r6, 0x0, r7, 0x0, 0x7, 0x9)
write$P9_RWRITE(r7, &(0x7f0000000040)={0xb, 0x77, 0x810}, 0x11000)
syz_open_dev$sg(0x0, 0x0, 0x8102)

2m36.891771472s ago: executing program 3 (id=1061):
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180))
ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000280)={[{0x48, 0x20fe, 0x6, 0x7, 0x4c, 0x9, 0x2, 0xc3, 0x4, 0x81, 0x5, 0x5, 0x9}, {0x711, 0x4, 0x8, 0x1, 0x33, 0xc, 0x7, 0x6, 0xfc, 0xa0, 0x84, 0xbb, 0x3}, {0xfffffffc, 0xe0, 0xc, 0x2, 0x3, 0x3, 0x2, 0xf, 0x8, 0xf, 0x7, 0x3, 0x9}], 0x2})
r4 = dup3(r1, r0, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
write(r4, &(0x7f0000000100)="1b5b21b6a1d3302a810d3ee4952b75cdab7672f6817147e1871d42940e54718abc271ba72fd9e2f63b04140042d0d3feeb137654693f02f568f99cb0bd", 0x3d)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000001340)="0e9849f1332c3a4f7cd80c990e6bb6b5979749a4fbaef24bc5bcc03ac73ad01da6441277f5ac3b4d0ab075522859b01dff8f24e16cd420439da93470adbb7411843f018e01848aec434d0395f241ae92"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x98, 0x0, &(0x7f0000000440)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @acquire_done={0x40106309, 0x2}, @acquire_done={0x40106309, 0x2}, @acquire={0x40046305, 0x3}, @enter_looper, @acquire, @clear_death={0x400c630f, 0x3}, @release], 0x0, 0x0, 0x0})
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7f, 0x0, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
read$alg(r4, &(0x7f0000000240)=""/45, 0x2d)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000001a40)=""/102392, 0x18ff8)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
openat$vcsu(0xffffffffffffff9c, 0x0, 0x183822, 0x0)

2m33.956489102s ago: executing program 3 (id=1069):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])
chdir(&(0x7f0000000100)='./file0\x00')
read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0xfffffffffffff000, 0x0)

2m33.580993923s ago: executing program 3 (id=1073):
r0 = socket$packet(0x11, 0x3, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000780)={<r2=>0x0, 0xfff, 0x1, [0x2, 0x7, 0x8, 0x1, 0x100000000], [0x7, 0x8000000000000001, 0x81, 0x7f, 0xfff, 0x3, 0x7, 0x1ff, 0x7fffffffffffffff, 0x8, 0x8, 0x1, 0x8, 0x3d, 0x4, 0x8, 0x26, 0xffffffffffffffff, 0x81, 0x100000001, 0x200, 0x1, 0x10001, 0x100, 0x1, 0x8, 0x1, 0x100, 0xa, 0x401, 0x3, 0x1, 0x6, 0xebf3, 0xfffffffffffffff3, 0xffffffff00000000, 0x7, 0x1, 0xf, 0xd, 0x80000000, 0x80000000, 0x4, 0x7, 0x0, 0xc, 0xd91d, 0x3, 0x6, 0xffff, 0x5, 0xbbc, 0x69311de2, 0x2, 0x2, 0x2, 0x7, 0x3, 0x7, 0x6, 0x8, 0xfffffffffffffffe, 0x80, 0xc, 0xbc73, 0x80, 0x1, 0x6, 0xc, 0x2, 0x800, 0x3, 0x1, 0x5, 0x8000, 0x7, 0x6cf4714d, 0x1, 0x5, 0x4, 0x6, 0x2, 0xfffffffffffffff9, 0x4, 0x6, 0x5, 0x5, 0x6, 0x6, 0x800, 0x5, 0x665, 0xf, 0x9, 0x100000001, 0x800, 0x0, 0x1, 0xfff, 0xfffffffffffff801, 0xffff, 0xf200, 0x5, 0x5, 0x92dd, 0x7f, 0x80000000, 0x3, 0x0, 0x5a1, 0x1d182b5f, 0x9, 0x10000, 0x7ff, 0xffffffff, 0x2, 0x1, 0xc3, 0x1000, 0x9, 0xffffffffffffffff]})
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000bc0)={r2, 0x4, 0xae, 0x1})
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, 0xffffffffffffffff, 0x0)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}]}}}]}, 0x38}}, 0x1000000)
mkdir(&(0x7f00000000c0)='./cgroup/../file0\x00', 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x51)
move_pages(0x0, 0x0, 0x0, &(0x7f0000000000)=[0x5, 0x8, 0x1, 0x3, 0x8, 0x1, 0x3ff, 0x7], 0x0, 0x0)

2m30.685066352s ago: executing program 3 (id=1077):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x4e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x35, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[], 0x180}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r2 = getpid()
getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, <r3=>0x0}, 0x0)
ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000400)={0x0, @vsock={0x28, 0x0, 0x2710, @my=0x0}, @phonet={0x23, 0xf, 0x7, 0x1}, @can={0x1d, r3}, 0x1010, 0x0, 0x0, 0x0, 0x3, &(0x7f00000003c0)='batadv0\x00', 0x5, 0x401, 0x9})
sched_setscheduler(r2, 0x2, &(0x7f0000000280)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x4000010, 0xffffffffffffffff, 0x4000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xb0)
r6 = dup(0xffffffffffffffff)
write$6lowpan_enable(r6, 0x0, 0x0)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000004000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0xf00000000000000)

2m15.316865826s ago: executing program 33 (id=1077):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x4e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x35, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[], 0x180}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r2 = getpid()
getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, <r3=>0x0}, 0x0)
ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000400)={0x0, @vsock={0x28, 0x0, 0x2710, @my=0x0}, @phonet={0x23, 0xf, 0x7, 0x1}, @can={0x1d, r3}, 0x1010, 0x0, 0x0, 0x0, 0x3, &(0x7f00000003c0)='batadv0\x00', 0x5, 0x401, 0x9})
sched_setscheduler(r2, 0x2, &(0x7f0000000280)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x4000010, 0xffffffffffffffff, 0x4000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xb0)
r6 = dup(0xffffffffffffffff)
write$6lowpan_enable(r6, 0x0, 0x0)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000004000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0xf00000000000000)

17.559895637s ago: executing program 0 (id=1500):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x1, 0x1, 0x0, 0x0, 0x0, 0x1})
r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301)
r2 = fcntl$getown(r0, 0x9)
sched_setscheduler(r2, 0x3, &(0x7f0000000040)=0xe7)
ioctl$USBDEVFS_ALLOC_STREAMS(r1, 0x8008551c, &(0x7f0000000000)={0xd616, 0x1, [{0x1, 0x1}]})

17.404995233s ago: executing program 0 (id=1501):
add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000480)="0055bb3739eb33", 0x7, 0xfffffffffffffffd)
add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
add_key(&(0x7f0000000180)='trusted\x00', 0x0, 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f0000000380), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, @in=@remote, 0x0, 0x400, 0x1000, 0x0, 0x2, 0x20, 0x20, 0x84, 0x0, 0xee01}}}, 0xb8}}, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x188}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x34)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @local}}}, 0x90)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000480)=0x1)

16.499776444s ago: executing program 0 (id=1507):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b80200001800a00010071756f7461000000100002800c0001"], 0x118}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x200000000000000)

16.294490263s ago: executing program 0 (id=1509):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
listen(r0, 0xa9f)
close(r0)

16.210455342s ago: executing program 0 (id=1510):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0x6}, 0x10)
r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r1}, 0x8)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ee, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f00000034c0)={0x2020}, 0xcac)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
syz_init_net_socket$ax25(0x3, 0x2, 0xce)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
prlimit64(0x0, 0x7, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5)
ftruncate(0xffffffffffffffff, 0x2)
mmap(&(0x7f00002d6000/0x2000)=nil, 0x2000, 0x27fff13, 0x4002011, 0xffffffffffffffff, 0x893c8000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4)

15.245187514s ago: executing program 0 (id=1514):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000380)=ANY=[@ANYRES8=r0], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0xffffffffffffffff, 0x4}, 0x6)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000540)={'#! ', './file0', [{0x20, '\xff\xff\xff\xff\xff\xff'}, {}, {0x20, 'fd/3\x00'}, {0x20, ')$'}, {0x20, '\xff\xff\xff\xff\xff\xff'}, {0x20, '%,*]{(.'}, {0x20, '\xff\xff\xff\xff\xff\xff'}, {0x20, '\xff\xff\xff\xff\xff\xff'}], 0xa, "eed78a6adf6178fa21fca116c65099363085ac74d1622ddd619cf8e64ba87e848993839477d7437c9c421a00e9ae5806e23aa9d8a7a1f0b39c6c9c3ea0d3fdd8e53cfcb20b405ff09482e5"}, 0x84)
r3 = syz_io_uring_setup(0x499, &(0x7f00000004c0)={0x0, 0x3355, 0x8, 0xffffffff, 0x288}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000480)=<r5=>0x0)
io_setup(0x8, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0xfffe}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
r6 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xc1ad, 0x0, 0xffffffff, 0x29d}, &(0x7f0000000000)=<r7=>0x0, &(0x7f0000000280)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r2, 0x0, &(0x7f00000003c0)="7a48a12a7f9e179af2f05772df32c40dc0b0b0801a7e5c7cb2f9a2819e89463bc413ca42f59d36ba8586189797890b9f4d0b4dbde60e2bc92b0c2554babe46ebfd8ce8659857ec89cb239088dee69d6be2556d6bda", 0x55, 0x0, 0x1})
io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe)
unshare(0x6a040000)
io_uring_enter(r3, 0x40f9, 0x217, 0x9d, 0x0, 0x0)

10.174041416s ago: executing program 6 (id=1530):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r3, {0xee01}}, './file0/file0\x00'})
bind$alg(r5, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="240000002000010300000000fbdbdf250200"], 0x24}}, 0x40)
sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000080601020000000000fff400000000000500010007000000"], 0x1c}}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioperm(0x0, 0x8000, 0x2)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r6, 0x18000000000002a0, 0x6e, 0x0, &(0x7f0000000840)="b9ff03316845268cb89614f008007357c3d45863d83e8b53d6ac737496df76df3e984d5fee2bd16b19fa0884c1d41c5e19019de81f33d205fb9195464a2bfbb7fc1b6679782c2a7f9be4ba60aee27c11fc8b63ac25cb2375778a584f23d2627565b6ba210c90582fac21b0eb92bc", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0)
r8 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r8, 0x40045731, &(0x7f0000000140)=0x1)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}})
recvmsg(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000300)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000380)=""/79, 0x4f}, {&(0x7f0000000180)=""/45, 0x2d}, {&(0x7f0000000440)=""/86, 0x56}, {&(0x7f00000004c0)=""/111, 0x6f}, {&(0x7f00000008c0)=""/143, 0x8f}, {&(0x7f0000000540)}], 0x6}, 0x1)
syz_usb_connect(0x5, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="120110010928fc10ac0591122543010223010902"], 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

7.756596693s ago: executing program 6 (id=1539):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_udp(0x2, 0x2, 0x0)
socket(0x10, 0x2, 0x0)
pipe(&(0x7f0000000080))
socket$netlink(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$l2tp6(0xa, 0x2, 0x73)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x801, 0x84)
socket$igmp(0x2, 0x3, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0xb)
socket$inet6_udplite(0xa, 0x2, 0x88)
pipe(&(0x7f0000000080))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
socket$pppoe(0x18, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

7.043671946s ago: executing program 6 (id=1542):
syz_usb_connect(0x3, 0x34, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x59, 0xfb, 0x80, 0x8, 0x1199, 0x683b, 0xc79f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x78, 0x0, 0x1, 0x46, 0x41, 0x55, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "94ef6333ef"}]}}]}}]}}]}}, 0x0)

6.843947716s ago: executing program 5 (id=1543):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
r1 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/if_inet6\x00')
pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a)
setsockopt$inet_int(r1, 0x0, 0xd, &(0x7f0000019080)=0x2, 0x4)
r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x1b, 0x61, 0xe3, 0x8, 0x16d0, 0x10a9, 0x3052, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x7f, 0x88, 0x0, [], [{{0x9, 0x5, 0x3, 0x2}}]}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="40158d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000"/14], 0xf8}}, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009968810524711004f320102030109021b0001000000000904"], 0x0)
r4 = syz_open_dev$I2C(&(0x7f0000001940), 0x0, 0x0)
ioctl$I2C_PEC(r4, 0x703, 0x60)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'ovf\x00', 0x0, 0x10000000}, 0x2c)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001c0001"], 0x14}}, 0x0)

5.32530645s ago: executing program 6 (id=1552):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000000)=0x10, 0x4)
syz_emit_ethernet(0x46, &(0x7f0000000040)=ANY=[@ANYBLOB="05c38c886b60aaaaaaaaaabb86dd6052000800103afffe8010000000000000000000000000bbff020000000000000000000000000002"], 0x0)

4.926559941s ago: executing program 6 (id=1554):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x2)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x2)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0500000000000109022400010000000009040001090300000009210000000122220009058103"], 0x0)
syz_emit_ethernet(0xa6, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, [{0x5, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffff60000000000000"}]}}}}}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x358, 0x0, 0x1a0, 0xfeffffff, 0x270, 0x270, 0x338, 0x338, 0xffffffff, 0x338, 0x338, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @private, @rand_addr, @gre_key, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8)
syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002222000000a3618e0b67aff52807000000002b049b9190194e051a7bfa9e274a2b"], 0x0}, 0x0)
syz_usb_connect(0x5, 0xc92, &(0x7f0000000cc0)={{0x12, 0x1, 0x0, 0x19, 0x86, 0xd3, 0x40, 0xac8, 0x302, 0x944f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0xc80, 0x4, 0x3, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xde, 0x80, 0xd, 0x67, 0xae, 0xb, 0xa, [@uac_as={[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x5, 0x4, 0x0, "84de08bee036a229"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x7, 0xe, 0x7f, "a0"}, @as_header={0x7, 0x24, 0x1, 0x0, 0xa1}]}, @cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "a4acba66"}, {0x5, 0x24, 0x0, 0x3ff}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x0, 0x6, 0x7}, [@country_functional={0x10, 0x24, 0x7, 0x98, 0x8001, [0x6, 0x6, 0x40, 0x18c, 0xfff8]}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x3}, @country_functional={0xa, 0x24, 0x7, 0x8, 0x2, [0xf, 0x200]}]}], [{{0x9, 0x5, 0xb, 0x0, 0x8, 0x1, 0x3, 0xf6, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xeb, 0xfff1}, @generic={0x8, 0x4, "f81ccfac3073"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x1ff, 0x3, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x5, 0x8000}]}}, {{0x9, 0x5, 0x0, 0x4, 0x8, 0xa, 0x2, 0xc5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xa, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xe, 0x1}]}}, {{0x9, 0x5, 0xd, 0xc, 0x400, 0x7, 0x4, 0xf, [@generic={0x1d, 0x24, "d3bd1ca96bdfa6b1bfcc6416183fbfadf15d7d5b9c16c4811617d3"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x3ff, 0x4, 0x5, 0x5}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0xc, 0x6, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x19, 0xfc}, @generic={0xb, 0x22, "5c15bf20a9ab4c5902"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0x4, 0x9, 0x1, [@generic={0xa, 0x2, "9875322a8e9ea513"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x8, 0x3, 0x46, [@generic={0xf2, 0x30, "1b4a6143fcd693a3e9a24d3425aa77b93c8dd61ba0390c3523b81c28ff46db1f0e298ac6a12e7b9d5bf77b0f544da00cf1ef1c530f947a41c33b99d2ad733733b38e24affe3b8f328d6ac2e36a8e5db93e58136849d14df9e6361917fec6d4a84c2a8745905c78b0f45c89428ccd84057375b5513ca431fa70947665f402a7fa51675b5e13c6875ee30e041dd23f11544d6094879bca54e550ffb961f97f31565379d589a074731741882553c62077d1dedede5481596d66d6c2344b3f1553bcf690f0281eeab664d54f26cd17d951b53d3131309dad012e8926c306748c908bceded72a7002bff797c2e3ba7beb151a"}, @generic={0xd3, 0x21, "c1addb91053bf3e22261406f1e971086010eb6f0b8b535305e01d4b4f9b9527bfa10fc0ce384c675989130dfa14f1678e0a7407fe795c619910bbf0b5b4711d1b795bb4e71bc308da599d399854b70def835664d50cbb6673189134c36ed53a09dfb7331d646c22daf235622b9280f0f65de5b46df84035adbeb58cd64b86c108b9746943b3c653fc44067934b63cf7f838c32d6ec83097bb76d10c73eba78462a48251d5c91ec02b2cbbc319d5f4c6bfc24911dfbe014b4f105e6d852fa2058f7eb0b359f0027630b31f324f97c4844b9"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x1, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xba, 0x6f1}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0xac, 0x9, 0x6, [@generic={0x100, 0x33, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xdc, 0x8}]}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0x9, 0xf, 0x80, [@generic={0xf9, 0x19, "9890eb65e147723e3dda0802eeef53d4341d42720c420eb10d5dc25518571269eef0017b18c298a49dc8216aafabff8be7461d2852fc566e8a01241e02d56ee7f94fb2e8ed2e12fabf11fd5b1b14e729654c3747af2fa1da35acfc1569d56963cadb4054ce9398aafa450a06c7fcc3ac448d8eb5d61ba2453ed7c3ae9fd37edc2aabd00647ce7caaa107abe536ac8a4b2b2540055d9d6a38cbf30b534e3040c549b9318862279b3ee3ddc2e5e4d7c2787afa2e69566db3fd36bcc5c68451792df99b33b46768cbb2d5b48c73fafc6285589543b5c8342b4120e2e76793da4d1fb9064465921db442a298d803e262124240f9494b0b5aaf"}]}}, {{0x9, 0x5, 0x0, 0x3, 0x200, 0x8d, 0xff, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0x1}]}}, {{0x9, 0x5, 0x9, 0x3, 0x400, 0xb, 0x7, 0x1}}]}}, {{0x9, 0x4, 0xee, 0x7, 0x4, 0xd2, 0x29, 0xfb, 0x4, [@uac_control={{0xa, 0x24, 0x1, 0x9, 0x7}, [@mixer_unit={0x6, 0x24, 0x4, 0x5, 0x4, "f7"}, @feature_unit={0x9, 0x24, 0x6, 0x5, 0x3, 0x1, [0x27be78eb6520a22c], 0x10}, @mixer_unit={0x5, 0x24, 0x4, 0x1, 0xdc}, @processing_unit={0xb, 0x24, 0x7, 0x5, 0x3, 0xff, "567236dc"}, @processing_unit={0xc, 0x24, 0x7, 0x2, 0x1, 0x9, "935581429c"}]}, @cdc_ncm={{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x5, 0x3, 0x1}, {0x6, 0x24, 0x1a, 0x9, 0x5}}], [{{0x9, 0x5, 0xd, 0x4, 0x10, 0x1, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x66a}]}}, {{0x9, 0x5, 0xd, 0x3, 0x3ff, 0xe, 0xbe, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0x400}]}}, {{0x9, 0x5, 0x4, 0x1, 0x400, 0x61, 0xf, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x24, 0x2}, @generic={0x3f, 0x9, "135f4fb0309a3761eb20e7dc037d2be9628a78bfd500b7dd5e0bf5ea38999a221a7f3862c2a871851e69aa369abf1a60759fdbd63bf30613d58d716251"}]}}, {{0x9, 0x5, 0x9, 0x2, 0x40, 0x8, 0xe, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0xb}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x4c3}]}}]}}, {{0x9, 0x4, 0x26, 0x9, 0x0, 0x94, 0xea, 0x43, 0x3}}, {{0x9, 0x4, 0xb8, 0x91, 0x9, 0x3f, 0xd4, 0x43, 0x1, [@uac_control={{0xa, 0x24, 0x1, 0x6}, [@output_terminal={0x9, 0x24, 0x3, 0x6, 0x301, 0x3, 0x1, 0x7}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x202, 0x3, 0x6, 0x0, 0xfe, 0x6}, @feature_unit={0xd, 0x24, 0x6, 0x4, 0x4, 0x3, [0x9, 0x4, 0x6], 0x1}, @processing_unit={0x9, 0x24, 0x7, 0x6, 0x3, 0x2, "d60e"}, @processing_unit={0x9, 0x24, 0x7, 0x5, 0x5, 0x1, "9d66"}]}, @cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "3a5d080517"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x4, 0x1, 0x73}, {0x6, 0x24, 0x1a, 0x438c, 0x22}, [@network_terminal={0x7, 0x24, 0xa, 0x6, 0x5, 0x90, 0x9}, @obex={0x5, 0x24, 0x15, 0xf}, @obex={0x5, 0x24, 0x15, 0x612}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x95, 0x3, 0xac}, @mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x4d, 0x5}, @acm={0x4, 0x24, 0x2, 0x9}]}], [{{0x9, 0x5, 0x0, 0x2, 0x40, 0xe, 0x1, 0x8, [@generic={0xba, 0x26, "81b86ee1e738e2f5bfcea43f0781f2020d8a4beb6e647da231fbd4b00defd70109253292a1badf85ab4d1218bce422448aab3724de973912775dbbb3eef9ec82d3e67a5902fc5cd5956af137bea22a4914b782d169a9297e5435c9d8e6e1975043045831b7b7af030e384bc98a791eaf647378a2993dac8e88e947f854ec5fae7c6b1abfaf4d169c6b36f1a9f2ca7421370b2d10f1e4168d187bbae3a784b05fe43638f7f0d70a39ccfbc1beca2820963ed9cefba0001829"}, @generic={0x3e, 0x22, "b3e1d384df5d623cbc6fec47ea6f0e177d2899303ca0ee492e76d7cf49cc47334166861746b9b325d9d75335ea24f1b705236f98b60142f90e494d78"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x3, 0x70, 0x8}}, {{0x9, 0x5, 0x0, 0x8, 0x200, 0x3, 0xfa, 0x7, [@generic={0x6e, 0x8, "32e385e84b67837c7bddcb1caafef1d8337e5adaacad8676900aa53a3ccafe20e82de810039338dda0ff2a912b7ccaa47713f735018211c39ba39b29cc2a5b21d73c58af9b8228479b93bd20726ed325b8effffc15761d66eceaab1fa2830eb7cfbfb242427efc16636e816e"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xf, 0x6}]}}, {{0x9, 0x5, 0x5, 0x5, 0x200, 0x0, 0x9, 0x6}}, {{0x9, 0x5, 0xa, 0x2, 0x200, 0x4, 0xe, 0x8, [@generic={0xad, 0xa, "b85d38683375df465f1575eff1481d3cb02b0d4a5670914916b2bf4c2c0e164fa06cd7006ddc65358b4e25169532c043648a921aa5b220329a8e91f7818e5c11f94e06845e15bc94d59bfcc0d4c9ccbd8ca109733b49ffae2107a1be8c3660e64bfe8c28f575ada4d8db931a8f6eaf72ff6409e00a06a1da30f69b4e7ea7411da25c8cff2cd7934f15005a3414b27d7a294777df421706fa81e25ad2a606ded4a5347d2e21c21fa471d2e3"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x5, 0xd, 0x7, [@generic={0xfc, 0xc, "44944e83f6b2f5657d6168d6a811e5307418cb0ad8e339612f10ab7ca2090d3afcd3b88eb09510d017505ab8d8debcc4a0a3f640551924ad8b65dd9a70ee5a527a71f38558f927fd9d00dd9eef43ea924836658554c5ee53aad3a1ca9392d00c6c798b5ddbc448574b734c0976be47d2d2af8c92016ae9ee7e6866dcf4170fc7470f37d3265aba4939ad4bdabe6c588bca0eb79beb56ec2856218c915994a98025e532f0c5d9fc6f1f68d22649d77a824663a4a3afbd2bbb8ca70b19599b7f367d129e232672fc7e045a075cfb479afb6d590cc4cec68775fb8ce3cc4ade4f21e4aaf050326e0654417a7f1d806a06602a0783fb0b88b4a3fa43"}, @generic={0xe3, 0x23, "1e17526d6735668a10b0f2a8b96310e0be1bad51d3cda1d6110458d05980c431383d78ac09f1502e0dc0f3c070f925a8f35a11be4de08fca929d37d4f420332111ef25c2ca660bb8f87a31257c3f9dee2e5ab133fe6ab70f3477e0867a56ceca2502c560089f4faa0a90181f408d278ef32fc5b911248fcc40fdb5497bd33bfa89ebd307729d6d35a21d3e56bb7582006c6f3b59cf999099c2c1c9b0b476c77b39c4e641c67d726dd44bde86a3c0cfc65209f032b562a5abb7f73cdf093bc6aaee37bd546f4bee27369d10db2adb487660a4a78588b813d9f5041cd01167b9fafa"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x7, 0x4d, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x100, 0x3, 0x7000}]}}, {{0x9, 0x5, 0xd, 0x4, 0x10, 0x7, 0xd7, 0x7f}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x7, 0xb, 0x3f, [@generic={0xdf, 0x5, "e3155d41ba298f70f993c0d3eb72240ca7987ccc1fe6dc89c5b7ee6f99d4fde6fec137b0fb27ad9a255a3c61df1da4c5d58a2974ea8518dc720e1c77323bdf05f7b4fe024bd0120b99a835e67685c56963576d9a6d37b105b442fcad2d008e8ad4947051133768ddaf92103a5b232ece398a00d5f2b42db683b2dbea523defa2a643eeb354032bb51fa371eb7f4986ff62cec2665eb4b470755bdb757095e56c233266a9b0aeed1934563a953a206d567698031ccb3f9feab3921e1976cc1b4a07d01bfe89439341db1057f7aa2a6d1d13fd49558bd986b27f03c990ea"}, @generic={0xc8, 0xe, "ef024a2620bbe145ba982572edb0a315df825a56230bdac6e0f405a37086eae5a4ebbf05769ea0cc384a231a187ce8516a1c38295ca4a192061f76e0753a52dd243eade2457b1fa8d64caaeff01166bdbb1a6e0a1e7fe4553a2f6312b61af30787bcecd193413e892160a2cf5ec0b7fbc5013888d8452415d037f967cd0e7ccee417387f0b11c6d22fc6ee9273e41b5ba44f871e3dba9f2e8be8e8e05d1acd16ef69773157edd6743e10f71444b123567142817094257257ef85e0cefb5e5b281f7e6424ec23"}]}}]}}]}}]}}, 0x0)

4.709101355s ago: executing program 5 (id=1555):
mkdir(0x0, 0x62)
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[])
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_io_uring_setup(0x24fa, 0x0, 0x0, &(0x7f0000000140))
clock_gettime(0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_emit_ethernet(0x82, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000001080)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
request_key(&(0x7f00000005c0)='big_key\x00', &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000500)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\nT\xdd\xd1{\xff\xcb\xdb\xb1\xfc\xf4\xbc\xc3\x83\xdd31\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x14\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17Zf9\xcc\xdcR\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@', 0xffffffffffffffff)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, 0x0, 0x0)
keyctl$get_persistent(0x16, 0x0, r2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000180))
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r3, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x47, 0x0, &(0x7f00000013c0)=0xe00)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x2000, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

4.297493364s ago: executing program 5 (id=1556):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe8}}, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2002, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
io_submit(r1, 0xb, &(0x7f0000000040)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x7, 0x13, r0, &(0x7f0000000000)='~', 0x1, 0x3e7ffffffc, 0x0, 0x10}])
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0x4}, 'port0\x00', 0x62, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x5, 0x0, 0x7cce8c743ee810df})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f00000000c0)={0x800080, 0x80, 0xffffffbc, 0x7, 0x0, 0x55a})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f0000000bc0)={0x800080, 0x858, 0x8, 0x7, 0x43, 0x558})
setfsuid(0xee00)
lseek(0xffffffffffffffff, 0x1, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="82", 0x1}, {0x0, 0x2}], 0x2}}], 0x1, 0x4400c800)
getdents(0xffffffffffffffff, 0x0, 0x48)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="100a06000908010014001a80100004800c000680080001"], 0x34}, 0x1, 0x0, 0x0, 0xc0c0}, 0x14)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0)
preadv2(r2, &(0x7f0000000a80)=[{&(0x7f0000000980)=""/248, 0xf8}], 0x1, 0x800, 0x79c2, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="4bea00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400faff03000000000100"/28], 0x50)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0)
write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB='6'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000480)=[0x0], ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580), 0x0, 0x30, &(0x7f0000000680)=[{}], 0x8, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x7c, 0x8, 0x8, &(0x7f0000000740)}}, 0x10)
sendmsg$nl_route_sched(r7, &(0x7f0000000940)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)=@deltfilter={0x2c, 0x2d, 0xe10, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x3, 0xc}, {0x3, 0xf}, {0x10, 0x9}}, [@TCA_CHAIN={0x8, 0xb, 0x7ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20040000)
gettid()

4.246576055s ago: executing program 1 (id=1557):
syz_io_uring_setup(0x49e, &(0x7f0000000380)={0x0, 0x7d8, 0x8000, 0x0, 0x104}, &(0x7f0000000140)=<r0=>0x0, &(0x7f0000000040)=<r1=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_READ_FIXED={0x4, 0x10, 0x6000, @fd_index=0x8, 0x80000000, 0x4, 0x401, 0x14, 0x1})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/rt_acct\x00')
read$char_usb(r2, &(0x7f00000003c0)=""/164, 0xa4)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r4 = openat$cgroup_type(r2, &(0x7f00000001c0), 0x2, 0x0)
write$cgroup_type(r4, &(0x7f0000000280), 0x9)
r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000000c40), 0x12)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_ro(r6, &(0x7f0000000180)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
write$cgroup_int(r7, &(0x7f0000000200)=0x41, 0x12)
write$cgroup_int(r7, &(0x7f00000000c0), 0x12)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x3, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdir(0x0, 0x2)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)
open(&(0x7f0000000580)='./bus\x00', 0x94642, 0x1df2a23c5997fb7f)

4.057000362s ago: executing program 5 (id=1558):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="000001e8b0ee1247932827331390b66959b439330203df8bfd7a3f9c13fbc068f3e030a507a8c53b53e2a17bbec9108bca4374dbe166c59a2f6146f47138ebd9c3b06c0a16575fa7d1e18f5e0233f8195e3e4844f68ca4d1973784f7fbd75e2262223df0f55b032d53d9b9ba4998cc21fa226b2de4766537084d6dbac6821b4791c60155de6cbc0de3bcaddbfd3fe9b02c6eb3d6adb0000000", @ANYRES16=r2, @ANYBLOB="010029bd7000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="7400330080a44500ffffffffffffffffffffffff5050505050505300040005c1ffffffffffffffff07003810000601010101010101000406500e030007002a01073c04000464052d1a00201b03000000000000003f0080001b00000000040b0000000772060303030303037107010001ff0204600600cd0000020000"], 0x98}}, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2c, 0x0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
accept4(r4, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX])
sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r2, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @random="dcfb2656e94b"}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4000040)
r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x12, r6, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0)
write$selinux_load(r5, &(0x7f0000000000)=ANY=[], 0xfd0f)

4.017511824s ago: executing program 4 (id=1559):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$inet(0x2, 0x3, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)={0x20, r1, 0x1, 0xffffffff, 0xffffff7f, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x703d33dc4b18a98e}, 0x4040814)

2.986786237s ago: executing program 5 (id=1560):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
fspick(0xffffffffffffffff, 0x0, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r2, 0x400448de, &(0x7f00000024c0))
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='rxrpc_recvmsg\x00', r3}, 0x10)
r4 = socket(0x25, 0x3, 0x10000000000002)
recvmmsg(r4, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000000180), 0x12)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r7, 0x29, 0x37, &(0x7f0000000180)=ANY=[], 0x8)
setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
unshare(0x50040080)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x0)

2.905351227s ago: executing program 1 (id=1561):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000002400)=ANY=[@ANYBLOB="0100000000f2ffff83000040"])
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x700, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, @remote, @private}}}})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000002400)=ANY=[@ANYBLOB="0100000000f2ffff83000040"]) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x700, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, @remote, @private}}}}) (async)

2.904019942s ago: executing program 4 (id=1562):
syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
io_setup(0x8, &(0x7f0000000000)=<r1=>0x0)
r2 = eventfd2(0x0, 0x80001)
io_submit(r1, 0x3, &(0x7f00000005c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000280)="d1f7624a630e53c3", 0x8, 0x2, 0x0, 0x0, r2}, 0x0, 0x0])
writev(r2, &(0x7f00000010c0)=[{&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8}], 0x1)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="10100000000000000800200005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r0], 0x40c}}, 0x0)
r3 = shmget(0x2, 0x3000, 0x400, &(0x7f0000ffd000/0x3000)=nil)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r4, 0x6, 0x6, 0x0, &(0x7f0000000500))
r5 = shmat(r3, &(0x7f0000ffd000/0x3000)=nil, 0x0)
shmdt(r5)

2.75716359s ago: executing program 1 (id=1563):
openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_mptcp(0x2, 0x1, 0x106)
pselect6(0x40, &(0x7f0000000240)={0x7500, 0x0, 0x980, 0x8, 0x2, 0xb}, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0x400d, 0x0, 0x9, 0x466}, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

1.829641037s ago: executing program 4 (id=1564):
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
syz_clone(0x2220100, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1})
r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}})
ioctl$VIDIOC_QBUF(r1, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x700, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800})

1.741152878s ago: executing program 1 (id=1565):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x2}, 0x6e) (async)
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x2}, 0x6e)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000040)=0x4)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x20000000)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r7, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) (async)
connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000040)=0x4, 0x5e)
socket$inet_udp(0x2, 0x2, 0x0)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="010300000100fddbdf2526"], 0x14}}, 0x0) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="010300000100fddbdf2526"], 0x14}}, 0x0)

1.556502579s ago: executing program 1 (id=1566):
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0)
setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)={0x1, '\x00', {}, 0x388})
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
iopl(0x3)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x11)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="240000005200000427bd7000fcdbdf251c080006000b00000008000600070000000000008646087ac1b5d433d70c64c1f2246844298c55bd4a91e99f8075b7c463b6c039e1591470262436037a18d8a69a4bc5e92250f6ebd5261ef14a1dd9d3769a9a6558fe83cfc556eab2e190102a72e16162f1f21d20deeb797ee74521db37cb44093668dd8db717dc0213a933998c5310d3a40bc6b7d28a8c8846c546d82bd6feca7616fdb282615cddab07c6eed420ef01cc9f67029893029032b34b53369c4017c51d2f09d1c512bfa272628246bd53f88a1c3e0950f05e2cc1"], 0x24}, 0x1, 0x0, 0x0, 0x240480d6}, 0x20000000)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000240), 0x6e, &(0x7f00000001c0)=[{0xfffffffffffffffc}, {&(0x7f00000002c0)=""/92, 0x5c}, {&(0x7f0000000540)=""/205, 0xcd}], 0x3}, 0x160) (async)
recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000240), 0x6e, &(0x7f00000001c0)=[{0xfffffffffffffffc}, {&(0x7f00000002c0)=""/92, 0x5c}, {&(0x7f0000000540)=""/205, 0xcd}], 0x3}, 0x160)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x54, r7, 0x28543634fae43ad, 0x70bd2b, 0x0, {0xd}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0x4}]}, 0x54}}, 0x0) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x54, r7, 0x28543634fae43ad, 0x70bd2b, 0x0, {0xd}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0x4}]}, 0x54}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), 0x0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)

1.503597657s ago: executing program 4 (id=1567):
capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xffffffbb})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0)
r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, <r3=>0x0, <r4=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r4, 0xc00464c9, &(0x7f0000000280)={r3})
ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f0000000080)={r3})
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x1)
r6 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00')
getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8)
ioctl$SIOCAX25GETUID(r5, 0x89e0, &(0x7f0000000480)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}})
r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x8042, 0x0)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="06b3981a9a14b11fb5788f7ec093f5d0a42665e8a300000000"], 0x10}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
r9 = creat(&(0x7f0000000440)='./file0\x00', 0x0)
open_by_handle_at(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="1700"], 0x830200)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r7, 0x8008330e, 0x0)

1.12559523s ago: executing program 6 (id=1568):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r2=>0x0})
sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=@updsa={0x144, 0x10, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@remote, 0x0, 0xfffe}, {@in6=@private1, 0x200000, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {}, {}, 0x4, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @offload={0xc, 0x1c, {r2, 0x2}}]}, 0x144}}, 0x0)
prctl$PR_GET_TIMERSLACK(0x1e)
r3 = socket$kcm(0x2b, 0x1, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r4, &(0x7f00000005c0)={0x9, {"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", 0x1000}}, 0x1006)
sendmsg$inet(r3, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818)
sendmsg$kcm(r3, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003a00)=[{0x10, 0x1, 0x4f}], 0x10}, 0x4008812)
mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000140)='udf\x00', 0x1000040, 0x0)
pipe2(&(0x7f0000000000)={<r5=>0xffffffffffffffff}, 0x0)
r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
splice(r5, 0x0, r6, 0x0, 0x12, 0x4)
fchmodat(r5, &(0x7f0000000000)='./file0\x00', 0xc4)

1.073113075s ago: executing program 4 (id=1569):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="000001e8b0ee1247932827331390b66959b439330203df8bfd7a3f9c13fbc068f3e030a507a8c53b53e2a17bbec9108bca4374dbe166c59a2f6146f47138ebd9c3b06c0a16575fa7d1e18f5e0233f8195e3e4844f68ca4d1973784f7fbd75e2262223df0f55b032d53d9b9ba4998cc21fa226b2de4766537084d6dbac6821b4791c60155de6cbc0de3bcaddbfd3fe9b02c6eb3d6adb0000000", @ANYRES16=r2, @ANYBLOB="010029bd7000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="7400330080a44500ffffffffffffffffffffffff5050505050505300040005c1ffffffffffffffff07003810000601010101010101000406500e030007002a01073c04000464052d1a00201b03000000000000003f0080001b00000000040b0000000772060303030303037107010001ff0204600600cd0000020000"], 0x98}}, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2c, 0x0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
accept4(r4, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX])
sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r2, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @random="dcfb2656e94b"}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4000040)
r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x12, r6, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0)
write$selinux_load(r5, &(0x7f0000000000)=ANY=[], 0xfd0f)

1.071168015s ago: executing program 5 (id=1570):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="000001e8b0ee1247932827331390b66959b439330203df8bfd7a3f9c13fbc068f3e030a507a8c53b53e2a17bbec9108bca4374dbe166c59a2f6146f47138ebd9c3b06c0a16575fa7d1e18f5e0233f8195e3e4844f68ca4d1973784f7fbd75e2262223df0f55b032d53d9b9ba4998cc21fa226b2de4766537084d6dbac6821b4791c60155de6cbc0de3bcaddbfd3fe9b02c6eb3d6adb0000000", @ANYRES16=r2, @ANYBLOB="010029bd7000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="7400330080a44500ffffffffffffffffffffffff5050505050505300040005c1ffffffffffffffff07003810000601010101010101000406500e030007002a01073c04000464052d1a00201b03000000000000003f0080001b00000000040b0000000772060303030303037107010001ff0204600600cd0000020000"], 0x98}}, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2c, 0x0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
accept4(r4, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX])
sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r2, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @random="dcfb2656e94b"}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4000040)
r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x12, r6, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0)
write$selinux_load(r5, &(0x7f0000000000)=ANY=[], 0xfd0f)

918.633621ms ago: executing program 1 (id=1571):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000000850000007a00000095"], &(0x7f0000000500)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
prlimit64(0x0, 0x7, &(0x7f00000000c0)={0x0, 0xfffffffffffffffd}, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r1, r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r5 = io_uring_setup(0x4dc2, &(0x7f0000000400)={0x0, 0x0, 0x1})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x1)
fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x80000001, 0x1})
fcntl$lock(r4, 0x24, &(0x7f0000000080)={0x0, 0x0, 0x4b, 0xfffffffffffffffc})
syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xb3, 0x93, 0x81, 0x8, 0xb48, 0x1003, 0x7b54, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xb7, 0xfd, 0x27}}]}}]}}, 0x0)

55.660628ms ago: executing program 34 (id=1514):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000380)=ANY=[@ANYRES8=r0], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0xffffffffffffffff, 0x4}, 0x6)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000540)={'#! ', './file0', [{0x20, '\xff\xff\xff\xff\xff\xff'}, {}, {0x20, 'fd/3\x00'}, {0x20, ')$'}, {0x20, '\xff\xff\xff\xff\xff\xff'}, {0x20, '%,*]{(.'}, {0x20, '\xff\xff\xff\xff\xff\xff'}, {0x20, '\xff\xff\xff\xff\xff\xff'}], 0xa, "eed78a6adf6178fa21fca116c65099363085ac74d1622ddd619cf8e64ba87e848993839477d7437c9c421a00e9ae5806e23aa9d8a7a1f0b39c6c9c3ea0d3fdd8e53cfcb20b405ff09482e5"}, 0x84)
r3 = syz_io_uring_setup(0x499, &(0x7f00000004c0)={0x0, 0x3355, 0x8, 0xffffffff, 0x288}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000480)=<r5=>0x0)
io_setup(0x8, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0xfffe}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
r6 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xc1ad, 0x0, 0xffffffff, 0x29d}, &(0x7f0000000000)=<r7=>0x0, &(0x7f0000000280)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r2, 0x0, &(0x7f00000003c0)="7a48a12a7f9e179af2f05772df32c40dc0b0b0801a7e5c7cb2f9a2819e89463bc413ca42f59d36ba8586189797890b9f4d0b4dbde60e2bc92b0c2554babe46ebfd8ce8659857ec89cb239088dee69d6be2556d6bda", 0x55, 0x0, 0x1})
io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe)
unshare(0x6a040000)
io_uring_enter(r3, 0x40f9, 0x217, 0x9d, 0x0, 0x0)

0s ago: executing program 4 (id=1573):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000240), 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$getflags(r5, 0xb)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x5)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r6, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r8})
ioctl$IOMMU_HWPT_INVALIDATE$TEST(r7, 0x3b8d, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="d80000001c0081044e81f782db44b904021d080214000000000018a118000c000600142603600e1208000f0100810401a8001600200001400300600803610cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c13223e3f52a98516277ce06bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x80)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0)

kernel console output (not intermixed with test programs):

has an invalid length.
[  434.570668][T10532] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1153'.
[  434.920495][T10527] veth0_macvtap: left promiscuous mode
[  434.945986][T10527] batman_adv: batadv0: Adding interface: macvtap0
[  434.959979][T10527] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  435.061433][T10538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1156'.
[  435.218447][T10539] 9pnet_fd: Insufficient options for proto=fd
[  435.379488][T10527] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active
[  435.448492][T10542] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16154 sclass=netlink_route_socket pid=10542 comm=syz.5.1158
[  435.486520][ T5822] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  435.653445][ T5822] usb 5-1: Using ep0 maxpacket: 16
[  435.672822][ T5822] usb 5-1: config index 0 descriptor too short (expected 8192, got 18)
[  435.701903][ T5822] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  435.742336][   T30] audit: type=1400 audit(1749453061.567:610): avc:  denied  { map } for  pid=10548 comm="syz.6.1161" path="/dev/sg0" dev="devtmpfs" ino=766 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  435.744998][ T5822] usb 5-1: config 0 has no interfaces?
[  435.796509][ T5822] usb 5-1: New USB device found, idVendor=05ac, idProduct=1291, bcdDevice=43.25
[  435.805598][ T5822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  435.848279][   T30] audit: type=1400 audit(1749453061.567:611): avc:  denied  { execute } for  pid=10548 comm="syz.6.1161" path="/dev/sg0" dev="devtmpfs" ino=766 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  435.969883][ T5822] usb 5-1: Product: syz
[  435.981061][ T5822] usb 5-1: Manufacturer: syz
[  435.993290][ T5822] usb 5-1: SerialNumber: syz
[  436.010601][ T5822] apple-mfi-fastcharge 5-1: config 0 descriptor??
[  436.189249][T10556] openvswitch: : Dropping previously announced user features
[  436.224372][T10556] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1162'.
[  436.701866][T10561] 9pnet_fd: Insufficient options for proto=fd
[  436.720806][   T30] audit: type=1400 audit(1749453062.547:612): avc:  denied  { write } for  pid=10560 comm="syz.0.1165" name="btrfs-control" dev="devtmpfs" ino=1310 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  436.776025][   T30] audit: type=1400 audit(1749453062.577:613): avc:  denied  { read write } for  pid=10560 comm="syz.0.1165" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  436.835455][   T30] audit: type=1400 audit(1749453062.577:614): avc:  denied  { open } for  pid=10560 comm="syz.0.1165" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  436.942812][   T30] audit: type=1400 audit(1749453062.577:615): avc:  denied  { watch } for  pid=10560 comm="syz.0.1165" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  437.276452][   T30] audit: type=1400 audit(1749453062.577:616): avc:  denied  { watch_sb watch_reads } for  pid=10560 comm="syz.0.1165" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  437.305596][   T30] audit: type=1400 audit(1749453062.717:617): avc:  denied  { bind } for  pid=10548 comm="syz.6.1161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  437.412869][ T5822] apple-mfi-fastcharge 5-1: USB disconnect, device number 43
[  438.079418][   T30] audit: type=1400 audit(1749453063.887:618): avc:  denied  { write } for  pid=10574 comm="syz.5.1170" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  439.131337][   T30] kauditd_printk_skb: 20 callbacks suppressed
[  439.131353][   T30] audit: type=1400 audit(1749453064.957:639): avc:  denied  { write } for  pid=10584 comm="syz.1.1172" name="mcfilter6" dev="proc" ino=4026532962 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  439.174304][   T30] audit: type=1400 audit(1749453064.997:640): avc:  denied  { ioctl } for  pid=10588 comm="syz.4.1173" path="socket:[29722]" dev="sockfs" ino=29722 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  439.205879][   T30] audit: type=1400 audit(1749453064.997:641): avc:  denied  { write } for  pid=10588 comm="syz.4.1173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  439.236184][   T30] audit: type=1400 audit(1749453064.997:642): avc:  denied  { read } for  pid=10588 comm="syz.4.1173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  439.318847][   T30] audit: type=1400 audit(1749453065.127:643): avc:  denied  { create } for  pid=10590 comm="syz.0.1174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  439.474888][   T30] audit: type=1400 audit(1749453065.127:644): avc:  denied  { ioctl } for  pid=10590 comm="syz.0.1174" path="socket:[29358]" dev="sockfs" ino=29358 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  439.543023][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  439.550526][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  439.601268][   T30] audit: type=1400 audit(1749453065.127:645): avc:  denied  { module_request } for  pid=10590 comm="syz.0.1174" kmod="netdev-vxcan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  439.623699][   T30] audit: type=1400 audit(1749453065.177:646): avc:  denied  { mount } for  pid=10591 comm="syz.4.1175" name="/" dev="configfs" ino=1128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  439.673578][   T30] audit: type=1400 audit(1749453065.177:647): avc:  denied  { search } for  pid=10591 comm="syz.4.1175" name="/" dev="configfs" ino=1128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  439.737510][   T30] audit: type=1400 audit(1749453065.177:648): avc:  denied  { search } for  pid=10591 comm="syz.4.1175" name="/" dev="configfs" ino=1128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  439.853460][ T5928] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  440.028988][ T5928] usb 6-1: Using ep0 maxpacket: 32
[  440.110757][ T5928] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88
[  440.186232][ T5928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  440.463392][T10599] loop6: detected capacity change from 0 to 7
[  440.470040][T10599] buffer_io_error: 14 callbacks suppressed
[  440.470049][T10599] Buffer I/O error on dev loop6, logical block 0, async page read
[  440.483868][T10599] Buffer I/O error on dev loop6, logical block 0, async page read
[  440.491736][T10599] Buffer I/O error on dev loop6, logical block 0, async page read
[  440.499635][T10599] Buffer I/O error on dev loop6, logical block 0, async page read
[  440.507559][T10599] Buffer I/O error on dev loop6, logical block 0, async page read
[  440.515647][T10599] Buffer I/O error on dev loop6, logical block 0, async page read
[  440.523549][T10599] Buffer I/O error on dev loop6, logical block 0, async page read
[  440.531373][T10599] ldm_validate_partition_table(): Disk read failed.
[  440.538014][T10599] Buffer I/O error on dev loop6, logical block 0, async page read
[  440.546107][T10599] Buffer I/O error on dev loop6, logical block 0, async page read
[  440.553992][T10599] Buffer I/O error on dev loop6, logical block 0, async page read
[  440.561874][T10599] Dev loop6: unable to read RDB block 0
[  440.567764][T10599]  loop6: unable to read partition table
[  440.573646][T10599] loop6: partition table beyond EOD, truncated
[  440.579799][T10599] loop_reread_partitions: partition scan of loop6 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨�â·û
[  440.579799][T10599] 
) failed (rc=-5)
[  440.657516][T10615] netlink: 'syz.6.1181': attribute type 83 has an invalid length.
[  442.142706][T10630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1184'.
[  442.177282][T10630] 9pnet_fd: Insufficient options for proto=fd
[  442.504720][ T5871] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  442.518861][ T5928] usb 6-1: string descriptor 0 read error: -71
[  442.636348][ T5928] usb 6-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11
[  442.662114][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  442.718045][ T5928] usb 6-1: config 0 descriptor??
[  442.734004][T10637] loop6: detected capacity change from 0 to 7
[  442.754168][ T5928] usb 6-1: can't set config #0, error -71
[  442.776728][T10637] Dev loop6: unable to read RDB block 7
[  442.782314][T10637]  loop6: AHDI p1 p2 p3
[  442.786720][ T5871] usb 2-1: Using ep0 maxpacket: 16
[  442.794685][ T5928] usb 6-1: USB disconnect, device number 23
[  442.822236][ T5871] usb 2-1: config index 0 descriptor too short (expected 8192, got 18)
[  442.842734][T10637] loop6: partition table partially beyond EOD, truncated
[  442.866490][ T5871] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  442.887051][T10637] loop6: p1 start 1601398130 is beyond EOD, truncated
[  442.905177][ T5871] usb 2-1: config 0 has no interfaces?
[  442.934364][T10637] loop6: p2 start 1702059890 is beyond EOD, truncated
[  442.972686][T10641] IPVS: set_ctl: invalid protocol: 136 172.30.1.5:20003
[  442.989786][ T5871] usb 2-1: New USB device found, idVendor=05ac, idProduct=1291, bcdDevice=43.25
[  443.032906][ T6170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  443.068552][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  443.151586][ T5871] usb 2-1: Product: syz
[  443.155972][ T6170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  443.260670][ T5871] usb 2-1: Manufacturer: syz
[  443.277974][ T5871] usb 2-1: SerialNumber: syz
[  443.301912][ T5871] apple-mfi-fastcharge 2-1: config 0 descriptor??
[  443.448046][T10648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1191'.
[  444.608982][   T30] kauditd_printk_skb: 286 callbacks suppressed
[  444.608999][   T30] audit: type=1400 audit(1749453069.987:935): avc:  denied  { create } for  pid=10655 comm="syz.4.1193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  444.667788][   T30] audit: type=1400 audit(1749453069.987:936): avc:  denied  { connect } for  pid=10655 comm="syz.4.1193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  444.724308][   T30] audit: type=1400 audit(1749453069.987:937): avc:  denied  { write } for  pid=10655 comm="syz.4.1193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  444.836589][   T30] audit: type=1400 audit(1749453069.987:938): avc:  denied  { setopt } for  pid=10655 comm="syz.4.1193" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  445.020120][ T5871] apple-mfi-fastcharge 2-1: USB disconnect, device number 46
[  445.133408][ T5898] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  445.283066][ T5898] usb 5-1: device descriptor read/64, error -71
[  445.660181][   T30] audit: type=1400 audit(1749453071.487:939): avc:  denied  { read write } for  pid=10671 comm="syz.5.1197" name="video1" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  446.325581][   T30] audit: type=1400 audit(1749453071.487:940): avc:  denied  { open } for  pid=10671 comm="syz.5.1197" path="/dev/video1" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  446.831230][T10686] openvswitch: : Dropping previously announced user features
[  446.846985][T10686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1198'.
[  447.768214][   T30] audit: type=1400 audit(1749453073.597:941): avc:  denied  { read } for  pid=10691 comm="syz.4.1202" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  447.813111][   T30] audit: type=1400 audit(1749453073.597:942): avc:  denied  { open } for  pid=10691 comm="syz.4.1202" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  447.864244][   T30] audit: type=1400 audit(1749453073.627:943): avc:  denied  { ioctl } for  pid=10691 comm="syz.4.1202" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  447.889451][   T30] audit: type=1400 audit(1749453073.667:944): avc:  denied  { write } for  pid=10691 comm="syz.4.1202" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  448.833643][ T5898] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  448.883607][   T43] usb 5-1: new full-speed USB device number 46 using dummy_hcd
[  449.088305][ T5898] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  449.135912][   T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  449.147754][   T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  449.155097][ T5898] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  449.159519][   T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  449.181759][   T43] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  449.195988][   T43] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  449.205150][   T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  449.230129][   T43] usb 5-1: config 0 descriptor??
[  449.270267][ T5898] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  449.274924][   T43] gspca_main: spca561-2.14.0 probing abcd:cdee
[  449.311861][ T5898] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  449.414935][ T5898] usb 7-1: config 0 descriptor??
[  449.428711][ T5969] usb 6-1: new full-speed USB device number 24 using dummy_hcd
[  449.483905][  T972] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  449.492024][   T43] spca561 5-1:0.0: probe with driver spca561 failed with error -22
[  449.494457][ T5898] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[  449.502934][   T43] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  449.549059][   T43] usb 5-1: MIDIStreaming interface descriptor not found
[  449.602856][T10726] gfs2: not a GFS2 filesystem
[  449.606660][   T43] usb 5-1: USB disconnect, device number 46
[  449.627911][ T5969] usb 6-1: unable to get BOS descriptor or descriptor too short
[  449.639164][ T5969] usb 6-1: not running at top speed; connect to a high speed hub
[  449.655182][ T5969] usb 6-1: config 14 interface 0 altsetting 3 endpoint 0x4 has invalid wMaxPacketSize 0
[  449.671198][ T5969] usb 6-1: config 14 interface 0 has no altsetting 0
[  449.671459][  T972] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  449.690569][   T30] kauditd_printk_skb: 19 callbacks suppressed
[  449.690584][   T30] audit: type=1400 audit(1749453075.507:964): avc:  denied  { read } for  pid=10727 comm="syz.1.1212" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  449.739845][  T972] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  449.752674][   T30] audit: type=1400 audit(1749453075.507:965): avc:  denied  { open } for  pid=10727 comm="syz.1.1212" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  449.783619][ T5969] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=df.16
[  449.792674][ T5969] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  449.794737][   T30] audit: type=1400 audit(1749453075.507:966): avc:  denied  { ioctl } for  pid=10727 comm="syz.1.1212" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 ioctlcmd=0x642e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  449.812881][  T972] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  449.832081][   T30] audit: type=1400 audit(1749453075.577:967): avc:  denied  { ioctl } for  pid=10729 comm="syz.1.1213" path="/dev/input/event2" dev="devtmpfs" ino=924 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  449.846441][ T5969] usb 6-1: Product: syz
[  449.869174][T10730] SELinux:  Context Ü is not valid (left unmapped).
[  449.876517][  T972] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  449.878877][   T30] audit: type=1400 audit(1749453075.667:968): avc:  denied  { write } for  pid=10729 comm="syz.1.1213" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  449.893341][  T972] usb 1-1: SerialNumber: syz
[  449.908705][   T30] audit: type=1400 audit(1749453075.667:969): avc:  denied  { open } for  pid=10729 comm="syz.1.1213" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  449.922871][ T5969] usb 6-1: Manufacturer: syz
[  449.938700][   T30] audit: type=1400 audit(1749453075.697:970): avc:  denied  { mac_admin } for  pid=10729 comm="syz.1.1213" capability=33  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  449.964719][   T30] audit: type=1400 audit(1749453075.707:971): avc:  denied  { write } for  pid=10729 comm="syz.1.1213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  449.967413][ T5969] usb 6-1: SerialNumber: syz
[  450.195064][   T30] audit: type=1400 audit(1749453076.027:972): avc:  denied  { append } for  pid=10720 comm="syz.0.1210" name="sg0" dev="devtmpfs" ino=766 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  450.199947][  T972] usb 1-1: 0:2 : does not exist
[  450.222928][   T30] audit: type=1400 audit(1749453076.027:973): avc:  denied  { open } for  pid=10720 comm="syz.0.1210" path="/dev/sg0" dev="devtmpfs" ino=766 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  450.488170][ T5969] usb 6-1: ucan: probing device on interface #0
[  450.598834][ T5969] usb 6-1: ucan: invalid endpoint configuration
[  450.706894][ T5969] usb 6-1: ucan: probe failed; try to update the device firmware
[  450.722801][T10737] netlink: 'syz.4.1215': attribute type 25 has an invalid length.
[  450.725969][  T972] usb 1-1: USB disconnect, device number 38
[  450.751677][ T5969] usb 6-1: USB disconnect, device number 24
[  451.039694][T10747] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  451.106168][T10747] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=22566 sclass=netlink_route_socket pid=10747 comm=syz.1.1219
[  452.180241][ T5871] usb 7-1: USB disconnect, device number 2
[  454.082890][T10782] netlink: 136 bytes leftover after parsing attributes in process `syz.5.1229'.
[  454.166330][T10770] openvswitch: : Dropping previously announced user features
[  454.228115][T10783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1223'.
[  455.676415][   T30] kauditd_printk_skb: 20 callbacks suppressed
[  455.680931][   T30] audit: type=1400 audit(1749453081.107:994): avc:  denied  { read } for  pid=10795 comm="syz.1.1232" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  455.939501][   T30] audit: type=1400 audit(1749453081.107:995): avc:  denied  { open } for  pid=10795 comm="syz.1.1232" path="/dev/ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  456.043537][   T30] audit: type=1400 audit(1749453081.117:996): avc:  denied  { ioctl } for  pid=10795 comm="syz.1.1232" path="/dev/ptp0" dev="devtmpfs" ino=1266 ioctlcmd=0x3d12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  456.083468][  T972] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  456.306945][T10805] overlay: Unknown parameter 'fsmagic'
[  456.388018][T10806] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  456.788187][   T30] audit: type=1400 audit(1749453082.127:997): avc:  denied  { mount } for  pid=10802 comm="syz.4.1234" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  456.833899][   T30] audit: type=1400 audit(1749453082.237:998): avc:  denied  { create } for  pid=10802 comm="syz.4.1234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  456.923381][  T972] usb 6-1: Using ep0 maxpacket: 16
[  456.962874][  T972] usb 6-1: too many configurations: 206, using maximum allowed: 8
[  456.983179][   T30] audit: type=1400 audit(1749453082.247:999): avc:  denied  { read write } for  pid=10802 comm="syz.4.1234" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  456.996054][  T972] usb 6-1: unable to read config index 0 descriptor/start: -61
[  457.053373][   T30] audit: type=1400 audit(1749453082.247:1000): avc:  denied  { open } for  pid=10802 comm="syz.4.1234" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  457.055545][  T972] usb 6-1: can't read configurations, error -61
[  457.139534][   T30] audit: type=1400 audit(1749453082.817:1001): avc:  denied  { read } for  pid=10807 comm="syz.1.1235" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  457.217963][   T30] audit: type=1400 audit(1749453082.817:1002): avc:  denied  { open } for  pid=10807 comm="syz.1.1235" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  457.253394][  T972] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  457.321685][   T30] audit: type=1400 audit(1749453082.817:1003): avc:  denied  { ioctl } for  pid=10807 comm="syz.1.1235" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  457.363456][ T5825] usb 5-1: new full-speed USB device number 47 using dummy_hcd
[  458.175647][ T5825] usb 5-1: config 1 interface 0 has no altsetting 0
[  458.188014][ T5825] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  458.197222][ T5825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  458.205353][ T5825] usb 5-1: Product: syz
[  458.212559][ T5825] usb 5-1: Manufacturer: syz
[  458.217525][ T5825] usb 5-1: SerialNumber: syz
[  458.234654][T10828] bridge_slave_1: left allmulticast mode
[  458.240364][T10828] bridge_slave_1: left promiscuous mode
[  458.259591][T10828] bridge0: port 2(bridge_slave_1) entered disabled state
[  458.275397][T10828] bridge_slave_0: left allmulticast mode
[  458.281252][T10828] bridge_slave_0: left promiscuous mode
[  458.291559][T10828] bridge0: port 1(bridge_slave_0) entered disabled state
[  458.300956][T10824] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10824 comm=syz.6.1239
[  458.326685][T10824] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10824 comm=syz.6.1239
[  458.340896][T10824] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10824 comm=syz.6.1239
[  458.354088][T10824] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10824 comm=syz.6.1239
[  458.833530][  T972] usb 6-1: device not accepting address 26, error -71
[  458.845244][  T972] usb usb6-port1: attempt power cycle
[  459.066084][T10813] loop2: detected capacity change from 0 to 7
[  459.112687][T10813] Dev loop2: unable to read RDB block 7
[  459.119191][T10813]  loop2: unable to read partition table
[  459.303429][T10813] loop2: partition table beyond EOD, truncated
[  459.309625][T10813] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  459.763738][T10839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  459.873037][T10846] binder: 10842:10846 ioctl c0306201 0 returned -14
[  459.901815][T10846] o2cb: This node has not been configured.
[  459.907950][T10846] o2cb: Cluster check failed. Fix errors before retrying.
[  459.915171][T10846] (syz.5.1245,10846,1):user_dlm_register:674 ERROR: status = -22
[  459.923028][T10846] (syz.5.1245,10846,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1"
[  460.199843][T10839] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  460.310327][  T972] hid-generic C990:0003:0000.001D: unknown main item tag 0x0
[  460.336827][  T972] hid-generic C990:0003:0000.001D: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  460.412400][T10852] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1247'.
[  461.520745][ T5825] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 47 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[  461.870666][ T5825] usb 5-1: USB disconnect, device number 47
[  461.879213][ T5825] usblp0: removed
[  462.405305][T10869] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  462.414621][T10869] netlink: 'syz.4.1251': attribute type 12 has an invalid length.
[  462.422687][T10869] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1251'.
[  462.437844][   T30] kauditd_printk_skb: 21 callbacks suppressed
[  462.437857][   T30] audit: type=1400 audit(1749453088.227:1025): avc:  denied  { connect } for  pid=10863 comm="syz.4.1251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  462.452514][T10870] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  462.488426][T10870] netlink: 'syz.1.1252': attribute type 12 has an invalid length.
[  462.496314][T10870] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1252'.
[  462.507578][  T972] usb 6-1: new full-speed USB device number 28 using dummy_hcd
[  462.543656][   T30] audit: type=1400 audit(1749453088.377:1026): avc:  denied  { mounton } for  pid=10875 comm="syz.0.1254" path="/proc/906/task" dev="proc" ino=30365 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  462.574538][   T30] audit: type=1400 audit(1749453088.397:1027): avc:  denied  { mount } for  pid=10875 comm="syz.0.1254" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  462.654840][   T30] audit: type=1400 audit(1749453088.487:1028): avc:  denied  { append } for  pid=10878 comm="syz.6.1255" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  462.705254][  T972] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  462.716509][  T972] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  462.716536][T10879] netlink: 'syz.6.1255': attribute type 10 has an invalid length.
[  462.732615][  T972] usb 6-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00
[  462.737496][T10879] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1255'.
[  462.746807][  T972] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  462.871999][  T972] usb 6-1: config 0 descriptor??
[  462.906912][   T30] audit: type=1400 audit(1749453088.737:1029): avc:  denied  { write } for  pid=10881 comm="syz.1.1257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  462.930135][   T30] audit: type=1400 audit(1749453088.737:1030): avc:  denied  { read } for  pid=10881 comm="syz.1.1257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  462.984869][   T30] audit: type=1400 audit(1749453088.817:1031): avc:  denied  { create } for  pid=10888 comm="syz.6.1258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  463.191685][   T30] audit: type=1400 audit(1749453088.817:1032): avc:  denied  { read } for  pid=10882 comm="syz.4.1256" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  463.197171][T10890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1257'.
[  463.218728][   T30] audit: type=1400 audit(1749453088.817:1033): avc:  denied  { bind } for  pid=10888 comm="syz.6.1258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  464.197480][   T30] audit: type=1400 audit(1749453089.397:1034): avc:  denied  { bind } for  pid=10888 comm="syz.6.1258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  464.645227][T10866] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1253'.
[  465.080789][  T972] usbhid 6-1:0.0: can't add hid device: -71
[  465.087168][  T972] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  465.600382][  T972] usb 6-1: USB disconnect, device number 28
[  466.093585][  T972] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  466.429949][T10933] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  466.439336][T10933] netlink: 'syz.1.1267': attribute type 12 has an invalid length.
[  466.447195][T10933] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1267'.
[  467.123710][T10934] : entered promiscuous mode
[  467.631611][T10930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1268'.
[  467.645267][T10930] 9pnet_fd: Insufficient options for proto=fd
[  467.912384][   T30] kauditd_printk_skb: 13 callbacks suppressed
[  467.912395][   T30] audit: type=1400 audit(1749453093.737:1048): avc:  denied  { create } for  pid=10936 comm="syz.1.1270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  467.983493][  T972] usb 5-1: Using ep0 maxpacket: 32
[  468.009439][  T972] usb 5-1: too many configurations: 111, using maximum allowed: 8
[  468.026735][T10940] batadv0: entered promiscuous mode
[  468.032027][   T30] audit: type=1400 audit(1749453093.857:1049): avc:  denied  { read write } for  pid=10938 comm="syz.1.1271" name="rdma_cm" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  468.058853][  T972] usb 5-1: unable to read config index 0 descriptor/start: -61
[  468.061176][   T30] audit: type=1400 audit(1749453093.857:1050): avc:  denied  { open } for  pid=10938 comm="syz.1.1271" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  468.067784][  T972] usb 5-1: can't read configurations, error -61
[  468.091614][    C0] vkms_vblank_simulate: vblank timer overrun
[  468.123377][ T5898] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  468.273409][  T972] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  468.294007][ T5898] usb 1-1: Using ep0 maxpacket: 16
[  468.300399][ T5898] usb 1-1: config index 0 descriptor too short (expected 8192, got 18)
[  468.308733][ T5898] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  468.318850][ T5898] usb 1-1: config 0 has no interfaces?
[  468.329575][ T5898] usb 1-1: New USB device found, idVendor=05ac, idProduct=1291, bcdDevice=43.25
[  468.333455][   T43] usb 2-1: new low-speed USB device number 47 using dummy_hcd
[  468.338813][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  468.354544][ T5898] usb 1-1: Product: syz
[  468.359012][ T5898] usb 1-1: Manufacturer: syz
[  468.364328][ T5898] usb 1-1: SerialNumber: syz
[  468.370193][ T5898] apple-mfi-fastcharge 1-1: config 0 descriptor??
[  468.423517][ T5825] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  468.443389][  T972] usb 5-1: Using ep0 maxpacket: 32
[  468.443452][ T5871] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  468.451860][  T972] usb 5-1: too many configurations: 111, using maximum allowed: 8
[  468.465838][  T972] usb 5-1: unable to read config index 0 descriptor/start: -61
[  468.473473][  T972] usb 5-1: can't read configurations, error -61
[  468.473521][   T43] usb 2-1: device descriptor read/64, error -71
[  468.480779][  T972] usb usb5-port1: attempt power cycle
[  468.574721][ T5825] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  468.587792][ T5825] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  468.598805][ T5825] usb 7-1: too many endpoints for config 1 interface 1 altsetting 145: 217, using maximum allowed: 30
[  468.609834][ T5825] usb 7-1: config 1 interface 1 altsetting 145 has 0 endpoint descriptors, different from the interface descriptor's value: 217
[  468.613441][ T5871] usb 6-1: Using ep0 maxpacket: 32
[  468.623100][ T5825] usb 7-1: config 1 interface 1 has no altsetting 0
[  468.634081][ T5871] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[  468.637542][ T5825] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  468.646443][ T5871] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  468.652968][ T5825] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  468.663918][ T5871] usb 6-1: config 0 has no interfaces?
[  468.679735][ T5871] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  468.680447][ T5825] usb 7-1: Product: syz
[  468.688901][ T5871] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  468.693010][ T5825] usb 7-1: Manufacturer: syz
[  468.701652][ T5871] usb 6-1: Product: syz
[  468.710038][ T5825] usb 7-1: SerialNumber: syz
[  468.710281][ T5871] usb 6-1: Manufacturer: syz
[  468.718924][ T5825] cdc_acm 7-1:1.0: probe with driver cdc_acm failed with error -22
[  468.719524][ T5871] usb 6-1: SerialNumber: syz
[  468.735962][ T5871] usb 6-1: config 0 descriptor??
[  468.744265][   T43] usb 2-1: new low-speed USB device number 48 using dummy_hcd
[  468.833433][  T972] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  468.853748][  T972] usb 5-1: device descriptor read/8, error -71
[  468.873405][   T43] usb 2-1: device descriptor read/64, error -71
[  468.905290][   T30] audit: type=1400 audit(1749453094.737:1051): avc:  denied  { name_connect } for  pid=10954 comm="syz.4.1277" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  468.925570][    C0] vkms_vblank_simulate: vblank timer overrun
[  468.936236][   T30] audit: type=1400 audit(1749453094.737:1052): avc:  denied  { setopt } for  pid=10954 comm="syz.4.1277" lport=33232 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  469.056938][   T43] usb usb2-port1: attempt power cycle
[  469.074025][T10950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  469.082764][T10950] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  469.090103][ T5825] usb 6-1: USB disconnect, device number 29
[  469.093542][ T5871] usb 7-1: USB disconnect, device number 3
[  469.615817][ T5898] apple-mfi-fastcharge 1-1: USB disconnect, device number 39
[  469.704397][   T30] audit: type=1400 audit(1749453095.537:1053): avc:  denied  { write } for  pid=10959 comm="syz.6.1279" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  469.900434][   T43] usb 2-1: new low-speed USB device number 49 using dummy_hcd
[  469.923905][   T30] audit: type=1400 audit(1749453095.727:1054): avc:  denied  { create } for  pid=10965 comm="syz.4.1281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  470.049761][   T43] usb 2-1: device descriptor read/8, error -71
[  470.160609][T10971] Bluetooth: MGMT ver 1.23
[  470.860846][   T30] audit: type=1400 audit(1749453095.987:1055): avc:  denied  { setopt } for  pid=10959 comm="syz.6.1279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  470.914281][ T5830] Bluetooth: hci2: unexpected event for opcode 0x0419
[  471.033419][   T43] usb 2-1: new low-speed USB device number 50 using dummy_hcd
[  471.065349][   T43] usb 2-1: device descriptor read/8, error -71
[  471.686052][   T43] usb usb2-port1: unable to enumerate USB device
[  471.840542][   T30] audit: type=1400 audit(1749453097.667:1056): avc:  denied  { shutdown } for  pid=10980 comm="syz.4.1283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  471.977394][   T30] audit: type=1400 audit(1749453097.797:1057): avc:  denied  { create } for  pid=10984 comm="syz.0.1286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  472.051586][T10989] openvswitch: netlink: Message has 191 unknown bytes.
[  472.058666][T10989] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  472.090290][T10985] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[  472.277828][T10990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1284'.
[  472.302851][T10990] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1284'.
[  472.327393][T10990] syz.1.1284: attempt to access beyond end of device
[  472.327393][T10990] nbd1: rw=0, sector=16, nr_sectors = 1 limit=0
[  472.341064][T10990] qnx6: unable to read the first superblock
[  472.348576][T10990] syz.1.1284: attempt to access beyond end of device
[  472.348576][T10990] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0
[  472.363643][T10990] qnx6: unable to read the first superblock
[  472.370428][T10990] qnx6: unable to read the first superblock
[  472.377202][T10985] overlayfs: missing 'lowerdir'
[  472.873520][ T5822] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  472.940518][T10999] 8021q: VLANs not supported on wg2
[  472.949537][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  472.949551][   T30] audit: type=1400 audit(1749453098.767:1059): avc:  denied  { ioctl } for  pid=10997 comm="syz.0.1289" path="socket:[31803]" dev="sockfs" ino=31803 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  473.103749][   T30] audit: type=1400 audit(1749453098.917:1060): avc:  denied  { name_bind } for  pid=11000 comm="syz.1.1290" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  473.203550][ T5822] usb 7-1: Using ep0 maxpacket: 16
[  473.218062][ T5822] usb 7-1: config 16 has too many interfaces: 68, using maximum allowed: 32
[  473.281237][ T5822] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  473.293125][ T5822] usb 7-1: config 16 has 1 interface, different from the descriptor's value: 68
[  473.358421][ T5822] usb 7-1: New USB device found, idVendor=07c4, idProduct=a103, bcdDevice=94.38
[  473.383386][ T5822] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  473.391507][ T5822] usb 7-1: Product: syz
[  473.395780][ T5822] usb 7-1: Manufacturer: syz
[  473.408883][ T5822] usb 7-1: SerialNumber: syz
[  473.472153][   T30] audit: type=1400 audit(1749453099.297:1061): avc:  denied  { setopt } for  pid=11010 comm="syz.1.1294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  474.459720][   T30] audit: type=1400 audit(1749453099.797:1062): avc:  denied  { create } for  pid=10995 comm="syz.6.1288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  474.493747][   T30] audit: type=1400 audit(1749453099.797:1063): avc:  denied  { write } for  pid=10995 comm="syz.6.1288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  474.963475][ T5830] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  474.988785][ T5830] Bluetooth: hci2: Injecting HCI hardware error event
[  475.014043][ T5821] Bluetooth: hci2: hardware error 0x00
[  475.386661][ T5898] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  475.723944][ T5822] ums-sddr55 7-1:16.0: USB Mass Storage device detected
[  476.082656][ T5822] ums-sddr55 7-1:16.0: Quirks match for vid 07c4 pid a103: 8
[  476.097775][   T30] audit: type=1400 audit(1749453101.927:1064): avc:  denied  { bind } for  pid=11045 comm="syz.6.1304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  476.117256][    C0] vkms_vblank_simulate: vblank timer overrun
[  476.394352][   T30] audit: type=1400 audit(1749453102.217:1065): avc:  denied  { listen } for  pid=11045 comm="syz.6.1304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  476.415301][   T30] audit: type=1400 audit(1749453102.217:1066): avc:  denied  { accept } for  pid=11045 comm="syz.6.1304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  476.437239][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  476.449383][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  476.470322][ T5822] usb 7-1: USB disconnect, device number 4
[  476.564130][ T5898] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  476.573738][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  476.589838][ T5898] usb 1-1: config 0 descriptor??
[  477.033767][T11054] 9pnet: Could not find request transport: f0xffffffffffffffff0xffffffffffffffff
[  477.053426][ T5821] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  477.770068][ T5898] hid-steam 0003:28DE:1142.001E: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0
[  477.863572][   T30] audit: type=1400 audit(1749453103.687:1067): avc:  denied  { write } for  pid=11060 comm="syz.6.1307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  478.187237][ T5822] usb 1-1: USB disconnect, device number 40
[  478.212735][   T30] audit: type=1400 audit(1749453103.727:1068): avc:  denied  { read } for  pid=11060 comm="syz.6.1307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  478.240704][   T30] audit: type=1400 audit(1749453103.737:1069): avc:  denied  { setopt } for  pid=11060 comm="syz.6.1307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  478.443475][T11074] xt_policy: neither incoming nor outgoing policy selected
[  478.473372][   T43] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  478.535276][   T30] audit: type=1400 audit(1749453104.347:1070): avc:  denied  { bind } for  pid=11071 comm="syz.6.1309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  478.592681][   T30] audit: type=1400 audit(1749453104.347:1071): avc:  denied  { name_bind } for  pid=11071 comm="syz.6.1309" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  478.639262][   T30] audit: type=1400 audit(1749453104.347:1072): avc:  denied  { node_bind } for  pid=11071 comm="syz.6.1309" saddr=127.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[  479.506910][   T30] audit: type=1400 audit(1749453105.327:1073): avc:  denied  { sqpoll } for  pid=11079 comm="syz.6.1312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  479.530771][   T30] audit: type=1400 audit(1749453105.347:1074): avc:  denied  { append } for  pid=11079 comm="syz.6.1312" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  479.539484][T11085] trusted_key: syz.1.1311 sent an empty control message without MSG_MORE.
[  479.575472][   T43] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  479.586583][   T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  479.624405][   T43] usb 6-1: config 0 descriptor??
[  479.643215][   T43] cp210x 6-1:0.0: cp210x converter detected
[  479.743373][ T5928] usb 1-1: new full-speed USB device number 41 using dummy_hcd
[  479.913509][ T5825] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  479.986072][T11092] Can't find a SQUASHFS superblock on nullb0
[  480.001025][ T5821] Bluetooth: hci3: unexpected cc 0x2039 length: 9 > 1
[  480.008375][ T5821] Bluetooth: hci3: unexpected event for opcode 0x2039
[  480.016644][   T30] audit: type=1800 audit(1749453105.797:1075): pid=11092 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1314" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  480.096981][ T5825] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  480.113524][ T5825] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  480.136578][ T5825] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  480.157641][ T5825] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  480.185613][ T5825] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  480.218235][ T5825] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  480.253529][  T972] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  480.277152][T11064] netlink: 14601 bytes leftover after parsing attributes in process `syz.5.1308'.
[  480.293691][   T43] usb 6-1: cp210x converter now attached to ttyUSB0
[  480.295909][ T5825] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  480.304685][ T5928] usb 1-1: config 0 has an invalid interface number: 50 but max is 0
[  480.309963][ T5825] usb 2-1: Product: syz
[  480.321778][ T5928] usb 1-1: config 0 has no interface number 0
[  480.321795][ T5825] usb 2-1: Manufacturer: syz
[  480.329382][ T5928] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  480.344637][ T5928] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 255, setting to 64
[  480.346395][ T5825] cdc_wdm 2-1:1.0: skipping garbage
[  480.358348][ T5928] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  480.363206][ T5825] cdc_wdm 2-1:1.0: skipping garbage
[  480.370003][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  480.381930][ T5825] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  480.383150][ T5928] usb 1-1: Product: syz
[  480.391014][ T5825] cdc_wdm 2-1:1.0: Unknown control protocol
[  480.393410][ T5928] usb 1-1: Manufacturer: syz
[  480.393428][ T5928] usb 1-1: SerialNumber: syz
[  480.412619][ T5928] usb 1-1: config 0 descriptor??
[  480.419182][T11082] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  480.428787][ T5928] yurex 1-1:0.50: USB YUREX device now attached to Yurex #1
[  480.453446][  T972] usb 5-1: Using ep0 maxpacket: 16
[  480.460403][  T972] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[  480.468777][  T972] usb 5-1: config 0 has no interface number 0
[  480.476573][  T972] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7
[  480.491869][ T5825] usb 6-1: USB disconnect, device number 30
[  480.499683][  T972] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  480.521105][ T5825] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  480.531436][  T972] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  480.544400][ T5825] cp210x 6-1:0.0: device disconnected
[  480.551614][  T972] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  480.574844][  T972] usb 5-1: Product: syz
[  480.579803][ T5971] usb 2-1: USB disconnect, device number 51
[  480.591334][  T972] usb 5-1: SerialNumber: syz
[  480.597870][  T972] usb 5-1: config 0 descriptor??
[  480.605000][  T972] usbhid 5-1:0.8: couldn't find an input interrupt endpoint
[  481.068296][   T30] audit: type=1400 audit(1749453106.897:1076): avc:  denied  { set_context_mgr } for  pid=11096 comm="syz.5.1316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  481.071098][T11097] binder_alloc: 11096: pid 11096 spamming oneway? 1 buffers allocated for a total size of 4096
[  481.089717][   T30] audit: type=1400 audit(1749453106.897:1077): avc:  denied  { write } for  pid=11096 comm="syz.5.1316" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  481.135836][T11099] binder_alloc: 11096: binder_alloc_buf size -256 failed, no address space
[  481.149209][T11099] binder_alloc: allocated: 5120 (num: 2 largest: 4096), free: 7168 (num: 1 largest: 7168)
[  482.687314][ T5971] usb 1-1: USB disconnect, device number 41
[  482.695436][ T5971] yurex 1-1:0.50: USB YUREX #1 now disconnected
[  482.793951][ T5928] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  482.818767][ T5825] usb 5-1: USB disconnect, device number 52
[  482.921001][   T43] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  482.943903][ T5928] usb 7-1: device descriptor read/64, error -71
[  483.169694][   T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  483.181230][   T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  483.196805][   T43] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  483.206848][   T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  483.222316][   T43] usb 6-1: config 0 descriptor??
[  483.273608][ T5928] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  483.302481][T11123] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1323'.
[  483.666274][T11121] 9pnet_fd: Insufficient options for proto=fd
[  483.803355][ T5928] usb 7-1: device descriptor read/64, error -71
[  483.879108][   T43] hid-steam 0003:28DE:1142.001F: unknown main item tag 0x0
[  483.898161][   T43] hid-steam 0003:28DE:1142.001F: unknown main item tag 0x0
[  483.913380][ T5825] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  483.926019][   T43] hid-steam 0003:28DE:1142.001F: unknown main item tag 0x0
[  483.933679][ T5928] usb usb7-port1: attempt power cycle
[  483.965097][   T43] hid-steam 0003:28DE:1142.001F: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0
[  484.073423][ T5825] usb 5-1: Using ep0 maxpacket: 16
[  484.082033][ T5971] usb 6-1: USB disconnect, device number 31
[  484.088118][ T5821] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  484.096620][ T5821] Bluetooth: hci3: Injecting HCI hardware error event
[  484.104850][ T5821] Bluetooth: hci3: hardware error 0x00
[  484.117104][ T5825] usb 5-1: config index 0 descriptor too short (expected 8192, got 18)
[  484.133566][ T5825] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  484.143757][ T5825] usb 5-1: config 0 has no interfaces?
[  484.155240][ T5825] usb 5-1: New USB device found, idVendor=05ac, idProduct=1291, bcdDevice=43.25
[  484.164540][ T5825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  484.172693][ T5825] usb 5-1: Product: syz
[  484.177983][ T5825] usb 5-1: Manufacturer: syz
[  484.182669][ T5825] usb 5-1: SerialNumber: syz
[  484.189418][ T5825] apple-mfi-fastcharge 5-1: config 0 descriptor??
[  484.210537][T11126] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1324'.
[  484.261439][   T30] kauditd_printk_skb: 5 callbacks suppressed
[  484.261453][   T30] audit: type=1400 audit(1749453110.087:1083): avc:  denied  { read write } for  pid=11128 comm="syz.0.1325" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  484.266632][T11129] FAULT_INJECTION: forcing a failure.
[  484.266632][T11129] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  484.267579][   T30] audit: type=1400 audit(1749453110.087:1084): avc:  denied  { open } for  pid=11128 comm="syz.0.1325" path="/dev/ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  484.291105][T11129] CPU: 1 UID: 0 PID: 11129 Comm: syz.0.1325 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(full) 
[  484.291128][T11129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  484.291137][T11129] Call Trace:
[  484.291143][T11129]  <TASK>
[  484.291149][T11129]  dump_stack_lvl+0x16c/0x1f0
[  484.291179][T11129]  should_fail_ex+0x512/0x640
[  484.291204][T11129]  _copy_from_user+0x2e/0xd0
[  484.291227][T11129]  core_sys_select+0x35b/0xc10
[  484.291253][T11129]  ? __pfx_core_sys_select+0x10/0x10
[  484.291295][T11129]  ? set_user_sigmask+0x21b/0x2b0
[  484.291312][T11129]  ? __pfx_set_user_sigmask+0x10/0x10
[  484.291333][T11129]  do_pselect.constprop.0+0x19f/0x1e0
[  484.291355][T11129]  ? __pfx_do_pselect.constprop.0+0x10/0x10
[  484.291384][T11129]  __x64_sys_pselect6+0x182/0x240
[  484.291405][T11129]  ? __pfx___x64_sys_pselect6+0x10/0x10
[  484.291432][T11129]  do_syscall_64+0xcd/0x4c0
[  484.291456][T11129]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  484.291472][T11129] RIP: 0033:0x7f5d01b8e929
[  484.291484][T11129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  484.291499][T11129] RSP: 002b:00007f5d029e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e
[  484.291515][T11129] RAX: ffffffffffffffda RBX: 00007f5d01db5fa0 RCX: 00007f5d01b8e929
[  484.291525][T11129] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040
[  484.291534][T11129] RBP: 00007f5d029e1090 R08: 0000200000000300 R09: 0000000000000000
[  484.291543][T11129] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001
[  484.291553][T11129] R13: 0000000000000000 R14: 00007f5d01db5fa0 R15: 00007fff1e167ae8
[  484.291573][T11129]  </TASK>
[  484.313607][ T5928] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  484.328064][   T30] audit: type=1400 audit(1749453110.087:1085): avc:  denied  { ioctl } for  pid=11128 comm="syz.0.1325" path="/dev/ppp" dev="devtmpfs" ino=710 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  484.369329][ T5928] usb 7-1: device descriptor read/8, error -71
[  484.820079][   T30] audit: type=1400 audit(1749453110.617:1086): avc:  denied  { load_policy } for  pid=11130 comm="syz.0.1326" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  484.843423][ T5928] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  485.309707][T11134] SELinux: failed to load policy
[  485.538314][   T30] audit: type=1400 audit(1749453110.687:1087): avc:  denied  { read } for  pid=11132 comm="syz.5.1327" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  485.562679][    C1] vkms_vblank_simulate: vblank timer overrun
[  485.587032][   T30] audit: type=1400 audit(1749453110.687:1088): avc:  denied  { open } for  pid=11132 comm="syz.5.1327" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  485.611803][    C1] vkms_vblank_simulate: vblank timer overrun
[  485.678831][ T5928] usb 7-1: device descriptor read/8, error -71
[  485.728018][   T30] audit: type=1400 audit(1749453111.557:1089): avc:  denied  { ioctl } for  pid=11132 comm="syz.5.1327" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  485.809093][ T5928] usb usb7-port1: unable to enumerate USB device
[  485.870368][   T30] audit: type=1400 audit(1749453111.707:1090): avc:  denied  { read write } for  pid=11140 comm="syz.1.1330" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  485.895311][    C1] vkms_vblank_simulate: vblank timer overrun
[  485.915955][   T30] audit: type=1400 audit(1749453111.707:1091): avc:  denied  { open } for  pid=11140 comm="syz.1.1330" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  485.946481][T11141] tls_set_device_offload_rx: netdev not found
[  486.011665][ T5825] apple-mfi-fastcharge 5-1: USB disconnect, device number 53
[  486.163374][ T5821] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  486.233191][   T30] audit: type=1400 audit(1749453112.057:1092): avc:  denied  { setopt } for  pid=11151 comm="syz.6.1334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  486.336831][T11158] ceph: No mds server is up or the cluster is laggy
[  486.345119][ T5928] libceph: connect (1)[c::]:6789 error -101
[  486.351209][ T5928] libceph: mon0 (1)[c::]:6789 connect error
[  486.483611][ T5825] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  487.191956][T11196] SET target dimension over the limit!
[  487.457733][T11203] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1348'.
[  488.308477][T11219] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1352'.
[  488.653394][ T5825] usb 5-1: new full-speed USB device number 55 using dummy_hcd
[  489.115947][ T5825] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  489.163374][ T5825] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 130, using maximum allowed: 30
[  489.194678][ T5825] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 130
[  489.220803][T11235] wireguard0: entered promiscuous mode
[  489.226598][T11235] wireguard0: entered allmulticast mode
[  489.291850][ T5825] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00
[  489.305938][ T5825] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0
[  489.325856][ T5825] usb 5-1: Product: syz
[  489.342310][ T5825] usb 5-1: config 0 descriptor??
[  489.361858][ T5825] gspca_main: spca501-2.14.0 probing 0000:0000
[  489.588601][ T5830] Bluetooth: hci5: command 0x0405 tx timeout
[  489.597146][ T5825] gspca_spca501: reg write: error -71
[  489.603068][ T5825] spca501 5-1:0.0: Reg write failed for 0x02,0x0f,0x05
[  489.846206][T11246] openvswitch: : Dropping previously announced user features
[  490.393412][ T5825] spca501 5-1:0.0: probe with driver spca501 failed with error -22
[  490.402065][ T5825] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  490.411377][ T5825] usb 5-1: USB disconnect, device number 55
[  490.720703][T11249] lo speed is unknown, defaulting to 1000
[  490.728566][T11249] lo speed is unknown, defaulting to 1000
[  490.734761][   T30] kauditd_printk_skb: 5 callbacks suppressed
[  490.734774][   T30] audit: type=1326 audit(1749453116.557:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11248 comm="syz.0.1359" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5d01b8e929 code=0x0
[  490.763700][    C1] vkms_vblank_simulate: vblank timer overrun
[  490.868159][   T30] audit: type=1400 audit(1749453116.697:1099): avc:  denied  { getopt } for  pid=11248 comm="syz.0.1359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  491.205614][ T5928] usb 5-1: new full-speed USB device number 56 using dummy_hcd
[  492.549821][ T5928] usb 5-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config
[  493.733688][   T30] audit: type=1400 audit(1749453119.557:1100): avc:  denied  { create } for  pid=11263 comm="syz.1.1364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  494.183808][ T5928] usb 5-1: config 5 has 0 interfaces, different from the descriptor's value: 1
[  494.203753][ T5928] usb 5-1: string descriptor 0 read error: -71
[  494.210013][ T5928] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  494.233333][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  494.264719][ T5928] usb 5-1: can't set config #5, error -71
[  494.280430][ T5928] usb 5-1: USB disconnect, device number 56
[  494.375067][   T30] audit: type=1400 audit(1749453120.197:1101): avc:  denied  { getopt } for  pid=11270 comm="syz.6.1366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  495.404383][T11286] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  495.623418][   T30] audit: type=1400 audit(1749453121.337:1102): avc:  denied  { connect } for  pid=11274 comm="syz.0.1368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  495.693403][T11286] netlink: 'syz.5.1367': attribute type 12 has an invalid length.
[  495.701504][T11286] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1367'.
[  496.004078][T11269] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1365'.
[  497.679825][T11304] SELinux: failed to load policy
[  498.369063][   T30] audit: type=1400 audit(1749453124.197:1103): avc:  denied  { relabelto } for  pid=11303 comm="syz.6.1373" name="45" dev="tmpfs" ino=255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:login_exec_t:s0"
[  498.395219][    C0] vkms_vblank_simulate: vblank timer overrun
[  498.422580][   T30] audit: type=1400 audit(1749453124.197:1104): avc:  denied  { associate } for  pid=11303 comm="syz.6.1373" name="45" dev="tmpfs" ino=255 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:login_exec_t:s0"
[  498.451071][   T30] audit: type=1400 audit(1749453124.267:1105): avc:  denied  { bind } for  pid=11309 comm="syz.5.1374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  498.592694][   T30] audit: type=1400 audit(1749453124.417:1106): avc:  denied  { ioctl } for  pid=11309 comm="syz.5.1374" path="socket:[33837]" dev="sockfs" ino=33837 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  498.625834][   T30] audit: type=1400 audit(1749453124.417:1107): avc:  denied  { getopt } for  pid=11309 comm="syz.5.1374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  498.805506][   T30] audit: type=1400 audit(1749453124.617:1108): avc:  denied  { connect } for  pid=11315 comm="syz.1.1377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  499.096431][   T30] audit: type=1400 audit(1749453124.927:1109): avc:  denied  { write } for  pid=11322 comm="syz.5.1378" path="socket:[33892]" dev="sockfs" ino=33892 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  499.217353][ T5830] Bluetooth: hci1: ISO packet for unknown connection handle 0
[  499.241083][   T30] audit: type=1400 audit(1749453125.067:1110): avc:  denied  { create } for  pid=11313 comm="syz.0.1375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  499.636942][T11334] lo speed is unknown, defaulting to 1000
[  499.655539][T11334] lo speed is unknown, defaulting to 1000
[  499.681328][T11336] overlayfs: failed to resolve './file1': -2
[  499.818904][T11339] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  499.826981][T11339] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock
[  499.835637][T11339] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  499.843759][T11339] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock
[  500.191565][ T5822] usb 6-1: new full-speed USB device number 32 using dummy_hcd
[  500.308465][   T30] audit: type=1400 audit(1749453126.127:1111): avc:  denied  { execute } for  pid=11348 comm="syz.6.1384" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=33143 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  500.968670][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  500.973859][ T5830] Bluetooth: hci5: command 0x0405 tx timeout
[  500.978477][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  501.079004][ T5822] usb 6-1: config 0 has no interfaces?
[  501.080587][ T5822] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  501.080603][ T5822] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  501.080615][ T5822] usb 6-1: Product: syz
[  501.080623][ T5822] usb 6-1: Manufacturer: syz
[  501.080632][ T5822] usb 6-1: SerialNumber: syz
[  501.083595][ T5822] usb 6-1: config 0 descriptor??
[  501.175835][   T30] audit: type=1400 audit(1749453127.007:1112): avc:  denied  { setopt } for  pid=11335 comm="syz.1.1380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  501.346742][    C1] vkms_vblank_simulate: vblank timer overrun
[  503.012727][ T5822] usb 6-1: USB disconnect, device number 32
[  503.213455][ T5897] usb 2-1: new full-speed USB device number 52 using dummy_hcd
[  503.581455][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  503.652179][T11398] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  503.666946][T11398] netlink: 'syz.4.1394': attribute type 12 has an invalid length.
[  503.674861][T11398] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1394'.
[  504.003510][T11401] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1393'.
[  504.060487][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  504.060730][ T5897] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00
[  504.060947][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  504.151653][ T5897] usb 2-1: config 0 descriptor??
[  504.249288][   T30] kauditd_printk_skb: 6 callbacks suppressed
[  504.249304][   T30] audit: type=1400 audit(1749453130.077:1119): avc:  denied  { nlmsg_read } for  pid=11393 comm="syz.6.1395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  504.281868][T11399] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1395'.
[  504.542116][T11403] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1396'.
[  504.551011][T11403] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1396'.
[  504.559863][T11403] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1396'.
[  504.568852][T11403] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1396'.
[  504.577750][T11403] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1396'.
[  504.586633][T11403] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1396'.
[  504.595500][T11403] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1396'.
[  504.876185][ T5897] zydacron 0003:13EC:0006.0020: unknown main item tag 0x0
[  504.905020][ T5897] zydacron 0003:13EC:0006.0020: unknown main item tag 0x0
[  504.913195][ T5897] zydacron 0003:13EC:0006.0020: unbalanced collection at end of report description
[  505.104168][ T5897] zydacron 0003:13EC:0006.0020: parse failed
[  505.140446][T11377] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  505.158538][ T5897] zydacron 0003:13EC:0006.0020: probe with driver zydacron failed with error -22
[  505.228424][T11417] bridge0: port 3(netdevsim2) entered blocking state
[  505.235664][T11417] bridge0: port 3(netdevsim2) entered disabled state
[  505.243143][T11417] netdevsim netdevsim6 netdevsim2: entered allmulticast mode
[  505.260097][T11417] netdevsim netdevsim6 netdevsim2: entered promiscuous mode
[  505.269491][T11417] bridge0: port 3(netdevsim2) entered blocking state
[  505.276427][T11417] bridge0: port 3(netdevsim2) entered forwarding state
[  505.296108][   T30] audit: type=1400 audit(1749453131.047:1120): avc:  denied  { create } for  pid=11412 comm="syz.6.1399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  505.331950][   T43] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  505.485415][ T5897] usb 2-1: USB disconnect, device number 52
[  505.613497][   T43] usb 5-1: Using ep0 maxpacket: 8
[  505.654447][   T43] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7
[  505.718354][   T43] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  505.728258][   T43] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  505.741651][   T43] usb 5-1: Product: syz
[  505.923696][   T43] usb 5-1: Manufacturer: syz
[  505.929811][   T43] usb 5-1: SerialNumber: syz
[  506.521982][   T43] usb 5-1: Handspring Visor / Palm OS: port 0, is for unknown use
[  506.567193][T11433] lo speed is unknown, defaulting to 1000
[  506.578247][   T43] usb 5-1: Handspring Visor / Palm OS: port 0, is for Generic use
[  506.588282][   T30] audit: type=1326 audit(1749453132.407:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11432 comm="syz.1.1403" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faef8d8e929 code=0x0
[  506.612764][   T43] usb 5-1: Handspring Visor / Palm OS: Number of ports: 2
[  506.631711][T11433] lo speed is unknown, defaulting to 1000
[  506.759964][T11407] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[  506.815646][T11407] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2871044158 (367493652224 ns) > initial count (78692655488 ns). Using initial count to start timer.
[  507.281247][   T43] usb 5-1: palm_os_3_probe - error -110 getting bytes available request
[  507.293111][   T43] visor 5-1:1.0: Handspring Visor / Palm OS converter detected
[  507.317827][   T43] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  507.341314][   T43] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  507.360626][   T43] usb 5-1: USB disconnect, device number 57
[  507.393001][   T43] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  507.433365][   T43] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  507.448708][   T30] audit: type=1400 audit(1749453133.277:1122): avc:  denied  { setopt } for  pid=11447 comm="syz.6.1406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  507.456174][   T43] visor 5-1:1.0: device disconnected
[  507.543500][ T5969] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  507.570308][   T30] audit: type=1400 audit(1749453133.397:1123): avc:  denied  { mount } for  pid=11449 comm="syz.6.1407" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  507.696185][ T5969] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  507.833814][ T5969] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  507.959822][T11457] lo speed is unknown, defaulting to 1000
[  507.965865][ T5969] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  507.998882][ T5969] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  508.038753][T11457] lo speed is unknown, defaulting to 1000
[  508.092439][ T5969] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  508.144854][ T5969] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  508.154090][ T5969] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  508.162049][ T5969] usb 2-1: Product: syz
[  508.166308][ T5969] usb 2-1: Manufacturer: syz
[  508.199841][ T5969] cdc_wdm 2-1:1.0: skipping garbage
[  508.205256][ T5969] cdc_wdm 2-1:1.0: skipping garbage
[  508.211232][ T5969] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  508.218730][ T5969] cdc_wdm 2-1:1.0: Unknown control protocol
[  508.507201][   T30] audit: type=1400 audit(1749453134.307:1124): avc:  denied  { read } for  pid=11459 comm="syz.5.1410" path="socket:[34250]" dev="sockfs" ino=34250 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  508.530921][    C1] vkms_vblank_simulate: vblank timer overrun
[  508.944277][T11462] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  508.953455][T11462] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  508.962215][T11462] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  508.971082][T11462] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  508.996466][T11462] vxlan0: entered promiscuous mode
[  509.002741][T11462] vxlan0: entered allmulticast mode
[  509.997678][T11475] syz.6.1415: vmalloc error: size 536870912, failed to allocated page array size 1048576, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  510.052128][T11478] SELinux: failed to load policy
[  510.058342][T11475] CPU: 0 UID: 0 PID: 11475 Comm: syz.6.1415 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(full) 
[  510.058360][T11475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  510.058367][T11475] Call Trace:
[  510.058371][T11475]  <TASK>
[  510.058375][T11475]  dump_stack_lvl+0x16c/0x1f0
[  510.058396][T11475]  warn_alloc+0x248/0x3a0
[  510.058412][T11475]  ? __pfx_warn_alloc+0x10/0x10
[  510.058433][T11475]  ? xt_alloc_entry_offsets+0x3a/0x60
[  510.058447][T11475]  ? __vmalloc_node_noprof+0xad/0xf0
[  510.058462][T11475]  __vmalloc_node_range_noprof+0x101b/0x14b0
[  510.058474][T11475]  ? stack_depot_save_flags+0x28/0xa40
[  510.058494][T11475]  ? xt_alloc_entry_offsets+0x3a/0x60
[  510.058508][T11475]  ? do_ipt_set_ctl+0x50e/0xae0
[  510.058525][T11475]  ? __x64_sys_setsockopt+0xbd/0x160
[  510.058542][T11475]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  510.058555][T11475]  ? __alloc_pages_noprof+0xb/0x1b0
[  510.058570][T11475]  ? ___kmalloc_large_node+0x84/0x1e0
[  510.058586][T11475]  __kvmalloc_node_noprof+0x30a/0x620
[  510.058600][T11475]  ? xt_alloc_entry_offsets+0x3a/0x60
[  510.058614][T11475]  ? xt_alloc_entry_offsets+0x3a/0x60
[  510.058630][T11475]  ? xt_alloc_entry_offsets+0x3a/0x60
[  510.058643][T11475]  xt_alloc_entry_offsets+0x3a/0x60
[  510.058656][T11475]  translate_table+0x22d/0x1720
[  510.058674][T11475]  ? _copy_from_user+0x59/0xd0
[  510.058693][T11475]  ? __pfx_translate_table+0x10/0x10
[  510.058707][T11475]  ? xt_alloc_table_info+0x3e/0xa0
[  510.058725][T11475]  do_ipt_set_ctl+0x570/0xae0
[  510.058740][T11475]  ? nf_sockopt_find.constprop.0+0x222/0x290
[  510.058756][T11475]  ? __pfx_do_ipt_set_ctl+0x10/0x10
[  510.058771][T11475]  ? lockdep_hardirqs_on+0x7c/0x110
[  510.058788][T11475]  ? sockopt_release_sock+0x52/0x60
[  510.058806][T11475]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  510.058824][T11475]  ? sockopt_release_sock+0x52/0x60
[  510.058847][T11475]  ? nf_sockopt_find.constprop.0+0x222/0x290
[  510.058862][T11475]  nf_setsockopt+0x8d/0xf0
[  510.058876][T11475]  ip_setsockopt+0xcb/0xf0
[  510.058893][T11475]  tcp_setsockopt+0xa7/0x100
[  510.058912][T11475]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  510.058924][T11475]  do_sock_setsockopt+0x224/0x470
[  510.058935][T11475]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  510.058960][T11475]  __sys_setsockopt+0x1a0/0x230
[  510.058989][T11475]  __x64_sys_setsockopt+0xbd/0x160
[  510.059013][T11475]  ? do_syscall_64+0x91/0x4c0
[  510.059038][T11475]  ? lockdep_hardirqs_on+0x7c/0x110
[  510.059062][T11475]  do_syscall_64+0xcd/0x4c0
[  510.059091][T11475]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  510.059109][T11475] RIP: 0033:0x7f8c1f38e929
[  510.059124][T11475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  510.059141][T11475] RSP: 002b:00007f8c202ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  510.059158][T11475] RAX: ffffffffffffffda RBX: 00007f8c1f5b5fa0 RCX: 00007f8c1f38e929
[  510.059170][T11475] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003
[  510.059180][T11475] RBP: 00007f8c1f410b39 R08: 00000000000002e8 R09: 0000000000000000
[  510.059191][T11475] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000000
[  510.059201][T11475] R13: 0000000000000000 R14: 00007f8c1f5b5fa0 R15: 00007ffd718c50f8
[  510.059225][T11475]  </TASK>
[  510.061536][T11475] Mem-Info:
[  510.427738][ T5969] usb 2-1: USB disconnect, device number 53
[  510.439393][T11475] active_anon:5688 inactive_anon:0 isolated_anon:0
[  510.439393][T11475]  active_file:15471 inactive_file:4052 isolated_file:0
[  510.439393][T11475]  unevictable:785 dirty:324 writeback:0
[  510.439393][T11475]  slab_reclaimable:8643 slab_unreclaimable:107474
[  510.439393][T11475]  mapped:35965 shmem:1631 pagetables:1050
[  510.439393][T11475]  sec_pagetables:0 bounce:0
[  510.439393][T11475]  kernel_misc_reclaimable:0
[  510.439393][T11475]  free:1300309 free_pcp:18539 free_cma:0
[  510.718578][T11475] Node 0 active_anon:22752kB inactive_anon:0kB active_file:61768kB inactive_file:16072kB unevictable:6004kB isolated(anon):0kB isolated(file):0kB mapped:143744kB dirty:1292kB writeback:0kB shmem:4988kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB writeback_tmp:0kB kernel_stack:12148kB pagetables:4072kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  511.917686][T11486] netlink: 'syz.0.1420': attribute type 3 has an invalid length.
[  512.011880][T11486] netlink: 'syz.0.1420': attribute type 3 has an invalid length.
[  512.120427][T11486] netlink: 'syz.0.1420': attribute type 3 has an invalid length.
[  512.238445][T11486] netlink: 'syz.0.1420': attribute type 3 has an invalid length.
[  512.331149][T11486] netlink: 'syz.0.1420': attribute type 3 has an invalid length.
[  512.417490][T11486] netlink: 'syz.0.1420': attribute type 3 has an invalid length.
[  512.480407][T11475] Node 1 active_anon:0kB inactive_anon:0kB active_file:116kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  512.512250][    C1] vkms_vblank_simulate: vblank timer overrun
[  512.521865][T11475] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  512.522271][T11486] netlink: 'syz.0.1420': attribute type 3 has an invalid length.
[  512.550698][    C1] vkms_vblank_simulate: vblank timer overrun
[  512.550869][T11475] lowmem_reserve[]: 0 2481 2482 2482 2482
[  512.550909][T11475] Node 0 DMA32 free:1280044kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17908kB inactive_anon:0kB active_file:61456kB inactive_file:15096kB unevictable:9780kB writepending:848kB present:3129332kB managed:2540652kB mlocked:8244kB bounce:0kB free_pcp:53036kB local_pcp:31724kB free_cma:0kB
[  512.550962][T11475] lowmem_reserve[]: 0 0 1 1 1
[  512.550997][T11475] Node 0 Normal free:4kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:56kB inactive_anon:0kB active_file:312kB inactive_file:976kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:40kB local_pcp:20kB free_cma:0kB
[  512.551045][T11475] lowmem_reserve[]: 0 0 0 0 0
[  512.551079][T11475] Node 1 Normal free:3904376kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:116kB inactive_file:136kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:18016kB local_pcp:11232kB free_cma:0kB
[  512.551129][T11475] lowmem_reserve[]: 0 0 0 0 0
[  512.551163][T11475] Node 0 DMA: 0*4kB 
[  512.603411][    C1] vkms_vblank_simulate: vblank timer overrun
[  512.637635][    C1] vkms_vblank_simulate: vblank timer overrun
[  512.674115][    C1] vkms_vblank_simulate: vblank timer overrun
[  512.763155][T11475] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  512.763644][T11486] netlink: 'syz.0.1420': attribute type 3 has an invalid length.
[  512.774468][T11475] Node 0 DMA32: 1011*4kB (UME) 70*8kB (UME) 61*16kB (UE) 151*32kB (UME) 256*64kB (ME) 92*128kB (UME) 37*256kB (UME) 44*512kB (ME) 21*1024kB (M) 6*2048kB (M) 287*4096kB (M) = 1279916kB
[  512.809576][T11475] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB
[  512.833967][T11486] netlink: 'syz.0.1420': attribute type 3 has an invalid length.
[  512.856478][T11486] netlink: 'syz.0.1420': attribute type 3 has an invalid length.
[  512.913633][T11475] Node 1 Normal: 190*4kB (UME) 54*8kB (UME) 39*16kB (UME) 201*32kB (UME) 65*64kB (UME) 20*128kB (UME) 5*256kB (UM) 6*512kB (UME) 2*1024kB (ME) 2*2048kB (ME) 947*4096kB (M) = 3904376kB
[  512.933346][ T5969] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  512.953555][T11494] overlayfs: conflicting options: metacopy=on,redirect_dir=follow
[  512.961403][T11475] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  512.998676][T11475] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  513.008650][T11475] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  513.018312][T11475] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  513.095053][ T5969] usb 5-1: Using ep0 maxpacket: 32
[  513.101881][T11475] 20894 total pagecache pages
[  513.140206][T11475] 0 pages in swap cache
[  513.147552][ T5969] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  513.194323][T11502] fuse: Unknown parameter '0177777777777777777777700000000000000000000'
[  513.203365][T11475] Free swap  = 124996kB
[  513.207806][T11475] Total swap = 124996kB
[  513.211959][T11475] 2097051 pages RAM
[  513.224252][ T5969] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  513.251677][ T5969] usb 5-1: config 0 descriptor??
[  513.257969][T11475] 0 pages HighMem/MovableOnly
[  513.262636][T11475] 429910 pages reserved
[  513.270667][ T5969] gspca_main: nw80x-2.14.0 probing 055f:d001
[  513.283651][T11475] 0 pages cma reserved
[  513.709322][T11507] openvswitch: : Dropping previously announced user features
[  513.731060][T11507] __nla_validate_parse: 43 callbacks suppressed
[  513.731088][T11507] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1424'.
[  514.062564][ T5969] gspca_nw80x: reg_r err -110
[  514.082290][ T5969] nw80x 5-1:0.0: probe with driver nw80x failed with error -110
[  514.159100][   T43] usb 5-1: USB disconnect, device number 58
[  514.346045][T11514] openvswitch: : Dropping previously announced user features
[  514.355639][T11514] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1423'.
[  515.197448][ T5969] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  515.393346][ T5969] usb 2-1: Using ep0 maxpacket: 16
[  515.421017][ T5969] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  515.463742][ T5969] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  515.499796][ T5969] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  515.523336][ T5969] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  515.543399][ T5969] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  515.606255][ T5969] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  515.634570][ T5969] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  515.653773][ T5969] usb 2-1: Manufacturer: syz
[  515.660452][ T5969] usb 2-1: config 0 descriptor??
[  515.673524][ T5822] usb 6-1: new low-speed USB device number 33 using dummy_hcd
[  515.884875][ T5822] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  515.931366][ T5822] usb 6-1: config 0 has no interface number 0
[  516.584287][ T5822] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 34719, setting to 8
[  516.628337][T11539] binder: 11534:11539 ioctl c0306201 0 returned -14
[  516.629158][ T5822] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  516.649517][T11539] o2cb: This node has not been configured.
[  516.655754][T11539] o2cb: Cluster check failed. Fix errors before retrying.
[  516.663083][T11539] (syz.0.1433,11539,0):user_dlm_register:674 ERROR: status = -22
[  516.670933][T11539] (syz.0.1433,11539,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1"
[  516.725700][   T30] audit: type=1400 audit(2000000003.480:1125): avc:  denied  { name_bind } for  pid=11528 comm="syz.6.1431" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  516.836514][ T5822] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  516.847974][ T5822] usb 6-1: config 0 descriptor??
[  516.853561][T11525] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  516.879832][ T5822] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  516.957000][ T5969] rc_core: IR keymap rc-hauppauge not found
[  516.987609][ T5969] Registered IR keymap rc-empty
[  516.992577][ T5969] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  517.033772][ T5969] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  517.078168][ T5969] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  517.093234][ T5969] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input24
[  517.115679][T11545] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1435'.
[  517.120175][ T5969] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  517.136811][   T30] audit: type=1400 audit(2000000003.900:1126): avc:  denied  { read } for  pid=5175 comm="acpid" name="event4" dev="devtmpfs" ino=3673 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  517.165838][ T5969] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  517.174708][ T5822] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  517.203903][ T5969] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  517.225395][ T5969] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  517.254210][   T30] audit: type=1400 audit(2000000003.900:1127): avc:  denied  { open } for  pid=5175 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3673 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  517.278417][ T5969] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  517.295682][   T30] audit: type=1400 audit(2000000003.900:1128): avc:  denied  { ioctl } for  pid=5175 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3673 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  517.323167][ T5969] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  517.333431][ T5822] usb 5-1: device descriptor read/64, error -71
[  517.353528][ T5969] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  517.374055][ T5969] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  517.403545][ T5969] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  517.423774][ T5969] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  517.455798][ T5969] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  517.464873][ T5969] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  517.476996][ T5969] usb 2-1: USB disconnect, device number 54
[  517.573587][ T5822] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  517.713408][ T5822] usb 5-1: device descriptor read/64, error -71
[  517.824415][ T5822] usb usb5-port1: attempt power cycle
[  518.580715][ T5822] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[  518.806503][ T5822] usb 5-1: device descriptor read/8, error -71
[  518.848914][ T5971] usb 6-1: USB disconnect, device number 33
[  519.683616][ T5822] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[  519.756282][ T5822] usb 5-1: device descriptor read/8, error -71
[  519.813378][ T5971] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  519.864309][T11573] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1439'.
[  519.883922][ T5822] usb usb5-port1: unable to enumerate USB device
[  519.899717][T11573] 9pnet_fd: Insufficient options for proto=fd
[  519.973437][ T5971] usb 1-1: Using ep0 maxpacket: 16
[  519.986833][ T5971] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[  520.004454][ T5971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  520.029899][ T5971] usb 1-1: config 0 descriptor??
[  520.043530][   T43] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[  520.045392][ T5971] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  520.062432][   T30] audit: type=1400 audit(2000000006.840:1129): avc:  denied  { bind } for  pid=11575 comm="syz.4.1444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  520.085887][T11576] overlay: Bad value for 'nfs_export'
[  520.092783][   T30] audit: type=1400 audit(2000000006.860:1130): avc:  denied  { write } for  pid=11575 comm="syz.4.1444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  520.248489][T11566] hfs: can't find a HFS filesystem on dev nullb0
[  520.248873][ T5897] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  520.270740][   T43] usb 2-1: device descriptor read/64, error -71
[  520.523493][ T5897] usb 6-1: Using ep0 maxpacket: 16
[  520.529420][ T5897] usb 6-1: config index 0 descriptor too short (expected 8192, got 18)
[  520.529445][ T5897] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  520.529463][ T5897] usb 6-1: config 0 has no interfaces?
[  520.537229][ T5897] usb 6-1: New USB device found, idVendor=05ac, idProduct=1291, bcdDevice=43.25
[  520.537265][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  520.537286][ T5897] usb 6-1: Product: syz
[  520.537300][ T5897] usb 6-1: Manufacturer: syz
[  520.537314][ T5897] usb 6-1: SerialNumber: syz
[  520.539426][ T5897] apple-mfi-fastcharge 6-1: config 0 descriptor??
[  520.543356][   T43] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[  520.893747][   T43] usb 2-1: device descriptor read/64, error -71
[  521.014809][   T43] usb usb2-port1: attempt power cycle
[  521.168552][T11581] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  521.373520][   T43] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[  521.394201][   T43] usb 2-1: device descriptor read/8, error -71
[  521.633451][   T43] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[  521.654086][   T43] usb 2-1: device descriptor read/8, error -71
[  521.838477][   T43] usb usb2-port1: unable to enumerate USB device
[  522.197380][T11586] openvswitch: : Dropping previously announced user features
[  522.399802][ T5897] apple-mfi-fastcharge 6-1: USB disconnect, device number 34
[  522.707263][ T5971] usb 1-1: Detected FT232A
[  522.721259][ T5971] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  522.738693][ T5971] usb 1-1: USB disconnect, device number 42
[  522.780479][ T5971] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  522.793455][   T30] audit: type=1400 audit(2000000009.550:1131): avc:  denied  { create } for  pid=11593 comm="syz.4.1448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  522.843863][ T5971] ftdi_sio 1-1:0.0: device disconnected
[  523.186281][T11601] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1450'.
[  523.250040][T11606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1450'.
[  523.263595][T11597] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1448'.
[  523.290360][T11605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1451'.
[  523.311356][T11605] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1451'.
[  523.523573][ T5898] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[  523.531984][ T5825] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  523.593380][ T5971] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  523.654986][T11616] syzkaller1: entered allmulticast mode
[  523.693555][ T5825] usb 7-1: Using ep0 maxpacket: 16
[  523.701180][ T5898] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  523.716211][ T5825] usb 7-1: config 0 descriptor has 1 excess byte, ignoring
[  523.727045][ T5898] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  523.738716][ T5825] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024
[  523.752315][ T5898] usb 2-1: config 220 has no interface number 2
[  523.760786][ T5825] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024
[  523.786025][ T5898] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  523.801769][ T5825] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 188
[  523.813117][ T5898] usb 2-1: config 220 interface 0 has no altsetting 0
[  523.822907][ T5898] usb 2-1: config 220 interface 76 has no altsetting 0
[  523.831501][ T5898] usb 2-1: config 220 interface 1 has no altsetting 0
[  523.845126][ T5898] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  523.862705][ T5825] usb 7-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  523.873015][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  523.888088][ T5825] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  523.899185][ T5898] usb 2-1: Product: syz
[  523.904255][ T5898] usb 2-1: Manufacturer: syz
[  523.909184][ T5825] usb 7-1: Product: syz
[  523.915430][ T5898] usb 2-1: SerialNumber: syz
[  523.920140][ T5825] usb 7-1: Manufacturer: syz
[  523.926664][ T5825] usb 7-1: SerialNumber: syz
[  523.938483][ T5825] usb 7-1: config 0 descriptor??
[  523.944346][T11608] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[  523.950849][   T30] audit: type=1400 audit(2000000010.720:1132): avc:  denied  { read } for  pid=11617 comm="syz.5.1454" name="sg0" dev="devtmpfs" ino=766 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  523.975706][T11608] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[  523.989151][ T5825] mcba_usb 7-1:0.0: Microchip CAN BUS Analyzer connected
[  523.996810][    C0] mcba_usb 7-1:0.0 can0: Tx URB aborted (-71)
[  523.996904][    C0] mcba_usb 7-1:0.0 can0: Tx URB aborted (-71)
[  524.016748][ T5971] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  524.028868][ T5971] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  524.041007][ T5971] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  524.050161][ T5971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  524.067261][T11605] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[  524.077889][ T5971] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  524.141423][ T5898] usb 2-1: selecting invalid altsetting 0
[  524.158837][ T5898] usb 2-1: Found UVC 7.01 device syz (8086:0b07)
[  524.168891][ T5898] usb 2-1: No valid video chain found.
[  524.180162][ T5898] usb 2-1: selecting invalid altsetting 0
[  524.194173][ T5898] usbtest 2-1:220.1: probe with driver usbtest failed with error -22
[  524.232566][ T5898] usb 2-1: USB disconnect, device number 59
[  524.270397][   T43] usb 7-1: USB disconnect, device number 9
[  524.277038][   T43] mcba_usb 7-1:0.0 can0: device disconnected
[  524.321698][ T5971] usb 1-1: USB disconnect, device number 43
[  524.624759][T11628] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11628 comm=syz.4.1456
[  525.030202][T11643] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1462'.
[  525.234537][   T30] audit: type=1400 audit(2000000012.010:1133): avc:  denied  { connect } for  pid=11640 comm="syz.6.1461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  525.277553][T11648] fuseblk: Unknown parameter 'f»äS»{9âÞR‡ìÓ<d'
[  525.530730][T11651] validate_nla: 38 callbacks suppressed
[  525.530745][T11651] netlink: 'syz.4.1464': attribute type 1 has an invalid length.
[  525.545672][T11651] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  525.552882][T11651] IPv6: NLM_F_CREATE should be set when creating new route
[  525.843424][ T5897] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[  526.061452][T11652] mmap: syz.6.1465 (11652): VmData 37597184 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data.
[  526.121595][ T5897] usb 5-1: device descriptor read/64, error -71
[  526.257105][T11660] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  526.277720][T11660] netlink: 'syz.5.1466': attribute type 12 has an invalid length.
[  526.285638][T11660] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1466'.
[  526.586387][   T30] audit: type=1400 audit(2000000013.360:1134): avc:  denied  { open } for  pid=11663 comm="syz.6.1469" path="/dev/ttyr0" dev="devtmpfs" ino=391 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  526.616883][   T30] audit: type=1400 audit(2000000013.390:1135): avc:  denied  { setopt } for  pid=11663 comm="syz.6.1469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  526.697403][T11665] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  526.723721][T11665] netlink: 'syz.1.1468': attribute type 12 has an invalid length.
[  526.731637][T11665] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1468'.
[  526.984607][ T5897] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[  527.253355][ T5897] usb 5-1: device descriptor read/64, error -71
[  527.424668][ T5897] usb usb5-port1: attempt power cycle
[  528.042951][   T30] audit: type=1400 audit(2000000014.810:1136): avc:  denied  { setopt } for  pid=11683 comm="syz.5.1476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  528.065874][   T30] audit: type=1400 audit(2000000014.840:1137): avc:  denied  { connect } for  pid=11683 comm="syz.5.1476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  528.254184][ T5897] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[  528.294499][ T5897] usb 5-1: device descriptor read/8, error -71
[  528.323412][   T43] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  528.473339][   T43] usb 6-1: device descriptor read/64, error -71
[  528.495250][   T30] audit: type=1326 audit(2000000015.260:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11681 comm="syz.1.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faef8d8e929 code=0x7ffc0000
[  528.528442][T11704] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  528.575202][ T5897] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[  528.603166][   T30] audit: type=1326 audit(2000000015.260:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11681 comm="syz.1.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faef8d8e929 code=0x7ffc0000
[  528.651566][   T30] audit: type=1326 audit(2000000015.260:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11681 comm="syz.1.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7faef8d8e929 code=0x7ffc0000
[  528.674218][T11709] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1482'.
[  528.684792][   T30] audit: type=1326 audit(2000000015.260:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11681 comm="syz.1.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faef8d8e929 code=0x7ffc0000
[  528.752964][   T43] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[  528.846086][ T5897] usb 5-1: device not accepting address 66, error -71
[  528.854902][ T5897] usb usb5-port1: unable to enumerate USB device
[  528.993520][   T43] usb 6-1: device descriptor read/64, error -71
[  529.073335][   T30] audit: type=1326 audit(2000000015.260:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11681 comm="syz.1.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faef8d8e929 code=0x7ffc0000
[  529.096792][    C0] vkms_vblank_simulate: vblank timer overrun
[  529.106957][   T43] usb usb6-port1: attempt power cycle
[  529.126916][T11714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1482'.
[  529.238250][T11718] syz_tun: entered allmulticast mode
[  529.509494][ T5897] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[  529.691489][   T43] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[  530.139408][T11726] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1486'.
[  531.088850][   T43] usb 6-1: device descriptor read/8, error -71
[  532.015245][ T5897] usb 5-1: config 220 has an invalid interface number: 76 but max is 2
[  532.028271][ T5897] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  532.039024][ T5897] usb 5-1: config 220 has no interface number 2
[  532.064139][ T5897] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  532.166209][T11738] dlm: non-version read from control device 36
[  532.199724][ T5897] usb 5-1: config 220 interface 0 has no altsetting 0
[  532.318798][ T5897] usb 5-1: config 220 interface 76 has no altsetting 0
[  532.358974][T11738] SELinux:  Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  532.367325][ T5897] usb 5-1: config 220 interface 1 has no altsetting 0
[  532.954969][ T5897] usb 5-1: string descriptor 0 read error: -71
[  532.961560][ T5897] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  532.971467][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  532.982736][ T5897] usb 5-1: can't set config #220, error -71
[  532.991424][ T5897] usb 5-1: USB disconnect, device number 67
[  533.096923][T11765] usb usb8: usbfs: process 11765 (syz.0.1500) did not claim interface 0 before use
[  533.242152][T11767] input: syz1 as /devices/virtual/input/input26
[  533.407203][T11767] SELinux:  Context system_u:object_r:mount_exec_t:s0 is not valid (left unmapped).
[  533.428238][   T30] audit: type=1400 audit(2000000020.200:1143): avc:  denied  { relabelto } for  pid=11763 comm="syz.6.1499" name="cgroup.procs" dev="cgroup" ino=816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:mount_exec_t:s0"
[  533.467332][   T30] audit: type=1400 audit(2000000020.200:1144): avc:  denied  { associate } for  pid=11763 comm="syz.6.1499" name="cgroup.procs" dev="cgroup" ino=816 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:mount_exec_t:s0"
[  533.700531][   T30] audit: type=1400 audit(2000000020.200:1145): avc:  denied  { ioctl } for  pid=11763 comm="syz.6.1499" path="socket:[35134]" dev="sockfs" ino=35134 ioctlcmd=0xf50a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  533.935394][   T30] audit: type=1326 audit(2000000020.710:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11778 comm="syz.1.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faef8d8e929 code=0x7ffc0000
[  533.960997][   T30] audit: type=1326 audit(2000000020.710:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11778 comm="syz.1.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faef8d8e929 code=0x7ffc0000
[  533.987198][   T30] audit: type=1326 audit(2000000020.710:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11778 comm="syz.1.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7faef8d8e929 code=0x7ffc0000
[  534.015223][ T5897] usb 5-1: new high-speed USB device number 68 using dummy_hcd
[  534.027716][   T30] audit: type=1326 audit(2000000020.730:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11778 comm="syz.1.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faef8d8e929 code=0x7ffc0000
[  534.057783][   T30] audit: type=1326 audit(2000000020.730:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11778 comm="syz.1.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faef8d8e929 code=0x7ffc0000
[  534.088226][   T30] audit: type=1326 audit(2000000020.730:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11778 comm="syz.1.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7faef8d8e929 code=0x7ffc0000
[  534.171420][   T30] audit: type=1326 audit(2000000020.730:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11778 comm="syz.1.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faef8d8e929 code=0x7ffc0000
[  534.228109][ T5897] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[  534.244982][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  534.256611][ T5897] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  534.292462][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  534.309202][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  534.321395][ T5897] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  534.339334][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  534.358207][ T5897] usb 5-1: Product: syz
[  534.362440][ T5897] usb 5-1: Manufacturer: syz
[  534.369390][ T5897] usb 5-1: SerialNumber: syz
[  534.379145][ T5897] usb 5-1: config 0 descriptor??
[  534.387617][ T5897] iguanair 5-1:0.0: probe with driver iguanair failed with error -12
[  535.203764][ T5897] usb 5-1: USB disconnect, device number 68
[  536.150508][T11809] netlink: 'syz.5.1515': attribute type 2 has an invalid length.
[  536.185535][T11809] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1515'.
[  536.480280][T11815] lo speed is unknown, defaulting to 1000
[  536.502958][T11815] lo speed is unknown, defaulting to 1000
[  537.443820][ T5822] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[  537.618246][ T5822] usb 6-1: config 0 has an invalid interface number: 2 but max is 0
[  538.050962][ T5822] usb 6-1: config 0 has no interface number 0
[  538.058864][ T5822] usb 6-1: New USB device found, idVendor=19d2, idProduct=1021, bcdDevice=f3.5f
[  538.059206][T11839] overlayfs: failed to resolve './file1': -2
[  538.067972][ T5822] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  538.085662][ T5822] usb 6-1: config 0 descriptor??
[  538.183344][ T5897] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  539.029230][   T30] kauditd_printk_skb: 36 callbacks suppressed
[  539.029248][   T30] audit: type=1400 audit(2000000025.130:1189): avc:  denied  { watch_sb watch_reads } for  pid=11838 comm="syz.1.1523" path="/297/bus/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1602 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  539.070537][ T5821] Bluetooth: hci5: command 0x0405 tx timeout
[  539.122915][T11826] lo speed is unknown, defaulting to 1000
[  539.141482][T11826] lo speed is unknown, defaulting to 1000
[  539.188943][ T5971] usb 6-1: USB disconnect, device number 39
[  539.292898][ T5897] usb 7-1: config 0 has an invalid interface number: 222 but max is 0
[  539.385417][ T5897] usb 7-1: config 0 has no interface number 0
[  539.391782][ T5897] usb 7-1: config 0 interface 222 has no altsetting 0
[  539.466506][ T5897] usb 7-1: New USB device found, idVendor=04e6, idProduct=1010, bcdDevice=8f.b0
[  539.503712][ T5897] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  539.548619][ T5897] usb 7-1: Product: syz
[  539.568658][ T5897] usb 7-1: Manufacturer: syz
[  539.575955][ T5897] usb 7-1: SerialNumber: syz
[  539.582652][ T5897] usb 7-1: config 0 descriptor??
[  539.592588][ T5897] ums-usbat 7-1:0.222: USB Mass Storage device detected
[  539.607607][ T5897] ums-usbat 7-1:0.222: Quirks match for vid 04e6 pid 1010: 1
[  539.800480][   T30] audit: type=1400 audit(2000000026.570:1190): avc:  denied  { read } for  pid=11833 comm="syz.6.1522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  539.856352][ T5898] usb 7-1: USB disconnect, device number 10
[  539.953346][ T5971] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[  540.103333][ T5971] usb 2-1: Using ep0 maxpacket: 8
[  540.110283][ T5971] usb 2-1: unable to get BOS descriptor or descriptor too short
[  540.119209][ T5971] usb 2-1: unable to read config index 0 descriptor/start: -71
[  540.126796][ T5971] usb 2-1: can't read configurations, error -71
[  540.243606][ T5825] usb 5-1: new full-speed USB device number 69 using dummy_hcd
[  540.394940][ T5825] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  540.406425][ T5825] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  540.416438][ T5825] usb 5-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00
[  540.425581][ T5825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  540.446261][ T5825] usb 5-1: config 0 descriptor??
[  540.652221][T11870] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1530'.
[  540.676834][T11870] 9pnet_fd: Insufficient options for proto=fd
[  540.967471][  T972] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  541.116373][ T5825] logitech-hidpp-device 0003:046D:C262.0021: hidraw0: USB HID v0.04 Device [HID 046d:c262] on usb-dummy_hcd.4-1/input0
[  541.305683][  T972] usb 7-1: Using ep0 maxpacket: 16
[  541.448344][  T972] usb 7-1: config index 0 descriptor too short (expected 8192, got 18)
[  541.475155][ T5825] usb 5-1: USB disconnect, device number 69
[  541.516389][  T972] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  541.579404][  T972] usb 7-1: config 0 has no interfaces?
[  541.591521][  T972] usb 7-1: New USB device found, idVendor=05ac, idProduct=1291, bcdDevice=43.25
[  541.602204][  T972] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  541.614205][  T972] usb 7-1: Product: syz
[  541.618344][  T972] usb 7-1: Manufacturer: syz
[  541.624994][  T972] usb 7-1: SerialNumber: syz
[  541.630780][  T972] apple-mfi-fastcharge 7-1: config 0 descriptor??
[  541.778268][   T30] audit: type=1400 audit(2000000028.550:1191): avc:  denied  { unmount } for  pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  542.996909][  T972] apple-mfi-fastcharge 7-1: USB disconnect, device number 11
[  543.101480][T11892] bridge0: port 3(netdevsim0) entered blocking state
[  543.109137][T11892] bridge0: port 3(netdevsim0) entered disabled state
[  543.117168][T11892] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  543.197369][   T30] audit: type=1400 audit(2000000029.870:1192): avc:  denied  { ioctl } for  pid=11887 comm="syz.4.1538" path="socket:[36294]" dev="sockfs" ino=36294 ioctlcmd=0x89a2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  543.466069][T11892] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  543.474895][T11892] bridge0: port 3(netdevsim0) entered blocking state
[  543.481655][T11892] bridge0: port 3(netdevsim0) entered forwarding state
[  543.692269][   T30] audit: type=1400 audit(2000000030.460:1193): avc:  denied  { bind } for  pid=11894 comm="syz.1.1540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  543.741534][   T30] audit: type=1400 audit(2000000030.460:1194): avc:  denied  { connect } for  pid=11894 comm="syz.1.1540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  543.761525][   T30] audit: type=1400 audit(2000000030.460:1195): avc:  denied  { accept } for  pid=11894 comm="syz.1.1540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  543.866965][T11907] lo speed is unknown, defaulting to 1000
[  543.878348][T11907] lo speed is unknown, defaulting to 1000
[  543.983356][  T972] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  544.173786][  T972] usb 7-1: Using ep0 maxpacket: 8
[  544.194635][ T5825] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[  544.229523][  T972] usb 7-1: config 0 has an invalid interface number: 120 but max is 0
[  544.268238][  T972] usb 7-1: config 0 has no interface number 0
[  544.323373][ T5969] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[  544.338896][  T972] usb 7-1: config 0 interface 120 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  544.353392][  T972] usb 7-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[  544.374945][  T972] usb 7-1: config 0 interface 120 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11
[  544.390330][  T972] usb 7-1: config 0 interface 120 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024
[  544.414913][  T972] usb 7-1: config 0 interface 120 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  544.457779][  T972] usb 7-1: New USB device found, idVendor=1199, idProduct=683b, bcdDevice=c7.9f
[  544.470873][  T972] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  544.479151][ T5825] usb 2-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36
[  544.488694][ T5825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  544.500760][  T972] usb 7-1: Product: syz
[  544.506408][  T972] usb 7-1: Manufacturer: syz
[  544.511732][ T5825] usb 2-1: config 0 descriptor??
[  544.516838][  T972] usb 7-1: SerialNumber: syz
[  544.525947][  T972] usb 7-1: config 0 descriptor??
[  544.533733][  T972] sierra 7-1:0.120: Sierra USB modem converter detected
[  544.543469][ T5969] usb 6-1: Using ep0 maxpacket: 8
[  544.551083][ T5969] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  544.560853][ T5969] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  544.573237][ T5969] usb 6-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[  544.582362][ T5969] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  544.590407][ T5969] usb 6-1: Product: syz
[  544.594643][ T5969] usb 6-1: Manufacturer: syz
[  544.599255][ T5969] usb 6-1: SerialNumber: syz
[  544.606606][ T5969] usb 6-1: config 0 descriptor??
[  544.747404][ T5825] kaweth 2-1:0.0: Firmware present in device.
[  544.754457][  T972] usb 7-1: Sierra USB modem converter now attached to ttyUSB0
[  544.768836][ T5825] kaweth 2-1:0.0: Error reading configuration (-71), no net device created
[  544.783854][  T972] usb 7-1: USB disconnect, device number 12
[  544.795126][ T5825] kaweth 2-1:0.0: probe with driver kaweth failed with error -5
[  544.804724][  T972] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[  544.822210][ T5825] usb 2-1: USB disconnect, device number 62
[  544.832310][  T972] sierra 7-1:0.120: device disconnected
[  545.025003][T11906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  545.033720][T11906] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  545.052875][  T972] usb 6-1: USB disconnect, device number 40
[  545.184548][   T30] audit: type=1400 audit(2000000031.960:1196): avc:  denied  { create } for  pid=11925 comm="syz.4.1550" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  545.205661][   T30] audit: type=1400 audit(2000000031.960:1197): avc:  denied  { mounton } for  pid=11925 comm="syz.4.1550" path="/302/file0" dev="tmpfs" ino=1629 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  545.290188][T11929] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1551'.
[  545.655171][   T30] audit: type=1400 audit(2000000032.420:1198): avc:  denied  { unlink } for  pid=5818 comm="syz-executor" name="file0" dev="tmpfs" ino=1629 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  546.060035][   T30] audit: type=1400 audit(2000000032.830:1199): avc:  denied  { view } for  pid=11940 comm="syz.5.1555" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  546.114185][  T972] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  546.453438][  T972] usb 7-1: Using ep0 maxpacket: 16
[  547.331209][  T972] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  547.342358][  T972] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[  547.352225][  T972] usb 7-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  547.365710][  T972] usb 7-1: config 0 interface 0 has no altsetting 0
[  547.372506][  T972] usb 7-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00
[  547.382366][  T972] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  547.416528][  T972] usb 7-1: config 0 descriptor??
[  547.617979][T11952] SELinux: failed to load policy
[  547.700289][T11956] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  547.739270][T11960] IPv6: syztnl0: Disabled Multicast RS
[  547.791976][T11965] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1562'.
[  547.869358][  T972] hid-generic 0003:045E:05DA.0022: unknown main item tag 0x0
[  547.880111][  T972] hid-generic 0003:045E:05DA.0022: unknown main item tag 0x0
[  547.888204][  T972] hid-generic 0003:045E:05DA.0022: unknown main item tag 0x0
[  547.912232][  T972] hid-generic 0003:045E:05DA.0022: ignoring exceeding usage max
[  548.065731][T11939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  548.566237][  T972] hid-generic 0003:045E:05DA.0022: ignoring exceeding usage max
[  548.783505][T11939] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  548.791529][  T972] hid-generic 0003:045E:05DA.0022: unknown main item tag 0x0
[  548.799000][  T972] hid-generic 0003:045E:05DA.0022: unknown main item tag 0x0
[  548.806432][  T972] hid-generic 0003:045E:05DA.0022: unbalanced collection at end of report description
[  548.818326][  T972] hid-generic 0003:045E:05DA.0022: probe with driver hid-generic failed with error -22
[  548.833825][  T972] usb 7-1: USB disconnect, device number 13
[  548.926341][   T30] audit: type=1400 audit(2000000035.700:1200): avc:  denied  { setopt } for  pid=11971 comm="syz.1.1565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  549.245368][   T30] audit: type=1400 audit(2000000036.020:1201): avc:  denied  { map } for  pid=11983 comm="syz.4.1567" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  549.305663][   T30] audit: type=1400 audit(2000000036.020:1202): avc:  denied  { execute } for  pid=11983 comm="syz.4.1567" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  549.416310][   T30] audit: type=1400 audit(2000000036.070:1203): avc:  denied  { ioctl } for  pid=11983 comm="syz.4.1567" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x64c9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  549.454807][   T30] audit: type=1400 audit(2000000036.080:1204): avc:  denied  { read write } for  pid=11983 comm="syz.4.1567" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  549.482291][   T30] audit: type=1400 audit(2000000036.080:1205): avc:  denied  { open } for  pid=11983 comm="syz.4.1567" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  549.763969][ T5830] Bluetooth: hci0: command tx timeout
[  550.110271][ T5969] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[  550.150496][T11989] SELinux: failed to load policy
[  550.219113][   T30] audit: type=1400 audit(2000000036.920:1206): avc:  denied  { write } for  pid=11990 comm="syz.6.1568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  550.343513][ T5969] usb 2-1: Using ep0 maxpacket: 32
[  550.351260][ T5969] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  550.351292][ T5969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  550.420076][ T5969] usb 2-1: config 0 descriptor??
[  550.438898][ T5969] gspca_main: sq930x-2.14.0 probing 041e:403c
[  550.751704][T11992] netdevsim netdevsim6 netdevsim0: Unsupported IPsec algorithm
[  551.431856][ T5821] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  551.436578][ T5821] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  551.437576][ T5821] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  551.438903][ T5821] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  551.439414][ T5821] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  551.460502][   T30] audit: type=1400 audit(2000000038.220:1207): avc:  denied  { mounton } for  pid=12007 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  551.470488][T12007] lo speed is unknown, defaulting to 1000
[  551.505871][    C1] vkms_vblank_simulate: vblank timer overrun
[  551.523778][T12007] lo speed is unknown, defaulting to 1000
[  551.524521][   T31] INFO: task kworker/u8:3:49 blocked for more than 145 seconds.
[  551.524537][   T31]       Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0
[  551.524548][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  551.524555][   T31] task:kworker/u8:3    state:D stack:22504 pid:49    tgid:49    ppid:2      task_flags:0x4208160 flags:0x00004000
[  551.524609][   T31] Workqueue: netns cleanup_net
[  551.524652][   T31] Call Trace:
[  551.524658][   T31]  <TASK>
[  551.524669][   T31]  __schedule+0x116a/0x5de0
[  551.524709][   T31]  ? __pfx___schedule+0x10/0x10
[  551.524735][   T31]  ? find_held_lock+0x2b/0x80
[  551.524755][   T31]  ? schedule+0x2d7/0x3a0
[  551.524802][   T31]  schedule+0xe7/0x3a0
[  551.524828][   T31]  schedule_preempt_disabled+0x13/0x30
[  551.524853][   T31]  __mutex_lock+0x6c7/0xb90
[  551.524884][   T31]  ? rdma_dev_change_netns+0x30/0x320
[  551.524906][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  551.524954][   T31]  ? __mutex_unlock_slowpath+0x161/0x6a0
[  551.524986][   T31]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  551.525016][   T31]  ? find_held_lock+0x2b/0x80
[  551.525044][   T31]  ? rdma_dev_change_netns+0x30/0x320
[  551.525063][   T31]  rdma_dev_change_netns+0x30/0x320
[  551.525104][   T31]  rdma_dev_exit_net+0x2dd/0x590
[  551.525128][   T31]  ? __pfx_rdma_dev_exit_net+0x10/0x10
[  551.525150][   T31]  ? __pfx___might_resched+0x10/0x10
[  551.525172][   T31]  ? __pfx_cfg80211_pernet_exit+0x10/0x10
[  551.525196][   T31]  ? mutex_is_locked+0x17/0x60
[  551.525247][   T31]  ? __pfx_rdma_dev_exit_net+0x10/0x10
[  551.525269][   T31]  ops_undo_list+0x2eb/0xab0
[  551.525295][   T31]  ? __pfx_ops_undo_list+0x10/0x10
[  551.525316][   T31]  ? __local_bh_enable_ip+0xa4/0x120
[  551.525342][   T31]  cleanup_net+0x408/0x890
[  551.525381][   T31]  ? __pfx_cleanup_net+0x10/0x10
[  551.525405][   T31]  ? rcu_is_watching+0x12/0xc0
[  551.525433][   T31]  process_one_work+0x9cf/0x1b70
[  551.525465][   T31]  ? __pfx_process_one_work+0x10/0x10
[  551.525513][   T31]  ? assign_work+0x1a0/0x250
[  551.525546][   T31]  worker_thread+0x6c8/0xf10
[  551.525581][   T31]  ? __pfx_worker_thread+0x10/0x10
[  551.525600][   T31]  kthread+0x3c5/0x780
[  551.525619][   T31]  ? __pfx_kthread+0x10/0x10
[  551.525657][   T31]  ? rcu_is_watching+0x12/0xc0
[  551.525679][   T31]  ? __pfx_kthread+0x10/0x10
[  551.525699][   T31]  ret_from_fork+0x5d4/0x6f0
[  551.525724][   T31]  ? __pfx_kthread+0x10/0x10
[  551.525743][   T31]  ret_from_fork_asm+0x1a/0x30
[  551.525796][   T31]  </TASK>
[  551.525895][   T31] INFO: task syz.3.1077:10246 blocked for more than 145 seconds.
[  551.525926][   T31]       Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0
[  551.525937][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  551.525945][   T31] task:syz.3.1077      state:D stack:23816 pid:10246 tgid:10224 ppid:5823   task_flags:0x400140 flags:0x00004006
[  551.525997][   T31] Call Trace:
[  551.526003][   T31]  <TASK>
[  551.526014][   T31]  __schedule+0x116a/0x5de0
[  551.526068][   T31]  ? __lock_acquire+0x622/0x1c90
[  551.526103][   T31]  ? __pfx___schedule+0x10/0x10
[  551.526134][   T31]  ? find_held_lock+0x2b/0x80
[  551.526158][   T31]  ? schedule+0x2d7/0x3a0
[  551.526205][   T31]  schedule+0xe7/0x3a0
[  551.526232][   T31]  schedule_timeout+0x257/0x290
[  551.526262][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  551.526295][   T31]  ? mark_held_locks+0x49/0x80
[  551.526341][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  551.526369][   T31]  __wait_for_common+0x2fc/0x4e0
[  551.526395][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  551.526422][   T31]  ? __pfx___wait_for_common+0x10/0x10
[  551.526453][   T31]  ? ib_cq_pool_cleanup+0x220/0x360
[  551.526499][   T31]  disable_device+0x16f/0x280
[  551.526517][   T31]  ? __pfx_disable_device+0x10/0x10
[  551.526545][   T31]  __ib_unregister_device+0x2b4/0x480
[  551.526562][   T31]  ? __pfx_ib_device_get_by_index+0x10/0x10
[  551.526590][   T31]  ib_unregister_device_and_put+0x5a/0x80
[  551.526628][   T31]  nldev_dellink+0x21f/0x320
[  551.526654][   T31]  ? __pfx_nldev_dellink+0x10/0x10
[  551.526783][   T31]  ? cap_capable+0xb3/0x250
[  551.526807][   T31]  ? bpf_lsm_capable+0x9/0x10
[  551.526827][   T31]  ? security_capable+0x7e/0x260
[  551.526850][   T31]  ? ns_capable+0xd7/0x110
[  551.526869][   T31]  ? __pfx_nldev_dellink+0x10/0x10
[  551.526916][   T31]  rdma_nl_rcv_msg+0x38a/0x6e0
[  551.526944][   T31]  ? __pfx_rdma_nl_rcv_msg+0x10/0x10
[  551.526986][   T31]  ? __lock_acquire+0x622/0x1c90
[  551.527017][   T31]  rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430
[  551.527068][   T31]  ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10
[  551.527109][   T31]  ? netlink_deliver_tap+0x1ae/0xd30
[  551.527130][   T31]  ? is_vmalloc_addr+0x86/0xa0
[  551.527158][   T31]  netlink_unicast+0x53d/0x7f0
[  551.527202][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  551.527234][   T31]  netlink_sendmsg+0x8d1/0xdd0
[  551.527265][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  551.527298][   T31]  ____sys_sendmsg+0xa98/0xc70
[  551.527338][   T31]  ? copy_msghdr_from_user+0x10a/0x160
[  551.527365][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  551.527393][   T31]  ? __pfx_futex_wake_mark+0x10/0x10
[  551.527418][   T31]  ___sys_sendmsg+0x134/0x1d0
[  551.527447][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  551.527489][   T31]  ? __lock_acquire+0x622/0x1c90
[  551.527555][   T31]  __sys_sendmsg+0x16d/0x220
[  551.527583][   T31]  ? __pfx___sys_sendmsg+0x10/0x10
[  551.527626][   T31]  ? __x64_sys_futex+0x1e0/0x4c0
[  551.527672][   T31]  do_syscall_64+0xcd/0x4c0
[  551.527701][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  551.527717][   T31] RIP: 0033:0x7f9f0f18e929
[  551.527731][   T31] RSP: 002b:00007f9f0fff4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  551.527767][   T31] RAX: ffffffffffffffda RBX: 00007f9f0f3b6080 RCX: 00007f9f0f18e929
[  551.527781][   T31] RDX: 0f00000000000000 RSI: 00002000000002c0 RDI: 0000000000000009
[  551.527793][   T31] RBP: 00007f9f0f210b39 R08: 0000000000000000 R09: 0000000000000000
[  551.527805][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  551.527816][   T31] R13: 0000000000000000 R14: 00007f9f0f3b6080 R15: 00007ffc1ad1a858
[  551.527845][   T31]  </TASK>
[  551.527862][   T31] 
[  551.527862][   T31] Showing all locks held in the system:
[  551.527872][   T31] 1 lock held by khungtaskd/31:
[  551.527882][   T31]  #0: ffffffff8e5c4840 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0
[  551.527956][   T31] 4 locks held by kworker/u8:3/49:
[  551.527967][   T31]  #0: ffff88801c6f3948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  551.528013][   T31]  #1: ffffc90000ba7d10 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  551.528077][   T31]  #2: ffffffff90336b90 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x890
[  551.528121][   T31]  #3: ffff88806c34c6d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x30/0x320
[  551.528201][   T31] 2 locks held by getty/5582:
[  551.528212][   T31]  #0: ffff8880376320a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  551.528264][   T31]  #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0
[  551.528332][   T31] 5 locks held by kworker/0:6/5969:
[  551.528343][   T31]  #0: ffff888143ec9948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  551.528385][   T31]  #1: ffffc90004edfd10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  551.528429][   T31]  #2: ffff888144381198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0
[  551.528497][   T31]  #3: ffff88802af61198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0
[  551.528550][   T31]  #4: ffff88807f51d160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0
[  551.528622][   T31] 2 locks held by syz.3.1077/10246:
[  551.528632][   T31]  #0: ffffffff9b114b38 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv_msg+0x169/0x6e0
[  551.528684][   T31]  #1: ffff88806c34c6d0 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x23b/0x480
[  551.528730][   T31] 2 locks held by syz.0.1514/11815:
[  551.528759][   T31]  #0: ffffffff90336b90 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0
[  551.528805][   T31]  #1: ffff88806c34c6d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x30/0x320
[  551.528850][   T31] 5 locks held by syz.6.1568/11995:
[  551.528861][   T31] 3 locks held by syz.5.1570/12002:
[  551.528872][   T31] 1 lock held by syz.4.1573/12003:
[  551.528901][   T31]  #0: ffff88803459b7a0 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1d8/0x450
[  551.528954][   T31] 2 locks held by syz.4.1573/12004:
[  551.528965][   T31] 2 locks held by syz-executor/12007:
[  551.528976][   T31] 
[  551.528981][   T31] =============================================
[  551.528981][   T31] 
[  551.528989][   T31] NMI backtrace for cpu 0
[  551.528998][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(full) 
[  551.529022][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  551.529032][   T31] Call Trace:
[  551.529038][   T31]  <TASK>
[  551.529045][   T31]  dump_stack_lvl+0x116/0x1f0
[  551.529072][   T31]  nmi_cpu_backtrace+0x27b/0x390
[  551.529094][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  551.529118][   T31]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[  551.529142][   T31]  watchdog+0xf70/0x12c0
[  551.529166][   T31]  ? __pfx_watchdog+0x10/0x10
[  551.529183][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  551.529210][   T31]  ? __kthread_parkme+0x19e/0x250
[  551.529235][   T31]  ? __pfx_watchdog+0x10/0x10
[  551.529262][   T31]  kthread+0x3c5/0x780
[  551.529279][   T31]  ? __pfx_kthread+0x10/0x10
[  551.529297][   T31]  ? rcu_is_watching+0x12/0xc0
[  551.529319][   T31]  ? __pfx_kthread+0x10/0x10
[  551.529336][   T31]  ret_from_fork+0x5d4/0x6f0
[  551.529360][   T31]  ? __pfx_kthread+0x10/0x10
[  551.529377][   T31]  ret_from_fork_asm+0x1a/0x30
[  551.529408][   T31]  </TASK>
[  551.529430][   T31] Sending NMI from CPU 0 to CPUs 1:
[  551.529451][    C1] NMI backtrace for cpu 1
[  551.529460][    C1] CPU: 1 UID: 0 PID: 12007 Comm: syz-executor Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(full) 
[  551.529477][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  551.529484][    C1] RIP: 0010:lock_release+0x183/0x2f0
[  551.529504][    C1] Code: 0f c1 05 58 89 34 12 83 f8 01 0f 85 1d 01 00 00 9c 58 f6 c4 02 0f 85 08 01 00 00 41 f7 c5 00 02 00 00 74 01 fb 48 8b 44 24 10 <65> 48 2b 05 6d 47 34 12 0f 85 58 01 00 00 48 83 c4 18 5b 41 5c 41
[  551.529517][    C1] RSP: 0018:ffffc9000b807500 EFLAGS: 00000206
[  551.529528][    C1] RAX: 80dbf150f0615d00 RBX: ffff88801c6f4880 RCX: ffffc9000b80750c
[  551.529537][    C1] RDX: 0000000000000003 RSI: ffffffff8ddf3a91 RDI: ffffffff8c157060
[  551.529546][    C1] RBP: 00000000000380b3 R08: 0000000000000004 R09: 00000000000380b2
[  551.529554][    C1] R10: 00000000000380b3 R11: 0000000000000001 R12: ffffffff82614618
[  551.529565][    C1] R13: 0000000000000206 R14: ffff888027328000 R15: 0000000000000004
[  551.529574][    C1] FS:  000055556d2e6500(0000) GS:ffff888124854000(0000) knlGS:0000000000000000
[  551.529587][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  551.529596][    C1] CR2: 00007f05f46e5000 CR3: 00000000678dd000 CR4: 00000000003526f0
[  551.529606][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  551.529613][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  551.529622][    C1] Call Trace:
[  551.529626][    C1]  <TASK>
[  551.529633][    C1]  _raw_spin_unlock+0x16/0x50
[  551.529651][    C1]  __kernfs_new_node+0x208/0x8e0
[  551.529671][    C1]  ? __pfx___kernfs_new_node+0x10/0x10
[  551.529693][    C1]  ? find_held_lock+0x2b/0x80
[  551.529709][    C1]  ? kernfs_root+0xee/0x2a0
[  551.529729][    C1]  kernfs_new_node+0x13c/0x1e0
[  551.529744][    C1]  __kernfs_create_file+0x53/0x350
[  551.529761][    C1]  sysfs_add_file_mode_ns+0x207/0x3c0
[  551.529781][    C1]  internal_create_group+0x578/0xf30
[  551.529803][    C1]  ? __pfx_internal_create_group+0x10/0x10
[  551.529823][    C1]  ? kernfs_create_link+0x1bd/0x240
[  551.529840][    C1]  internal_create_groups+0x9d/0x150
[  551.529859][    C1]  device_add+0xf30/0x1a70
[  551.529872][    C1]  ? __pfx_device_add+0x10/0x10
[  551.529884][    C1]  ? lockdep_init_map_type+0x5c/0x280
[  551.529904][    C1]  ? __init_waitqueue_head+0xca/0x150
[  551.529921][    C1]  netdev_register_kobject+0x182/0x3a0
[  551.529936][    C1]  register_netdevice+0x13dc/0x2270
[  551.529950][    C1]  ? __pfx_register_netdevice+0x10/0x10
[  551.529966][    C1]  __ip_tunnel_create+0x540/0x6e0
[  551.529983][    C1]  ? __pfx___ip_tunnel_create+0x10/0x10
[  551.530008][    C1]  ip_tunnel_init_net+0x22f/0x7d0
[  551.530025][    C1]  ? __pfx_ip_tunnel_init_net+0x10/0x10
[  551.530043][    C1]  ? trace_kmalloc+0x2b/0xd0
[  551.530061][    C1]  ? __kmalloc_noprof+0x242/0x510
[  551.530077][    C1]  ? lockdep_init_map_type+0x5c/0x280
[  551.530097][    C1]  ? __pfx_ipgre_init_net+0x10/0x10
[  551.530111][    C1]  ops_init+0x1df/0x5f0
[  551.530132][    C1]  setup_net+0x1ff/0x510
[  551.530142][    C1]  ? lockdep_init_map_type+0x5c/0x280
[  551.530161][    C1]  ? __pfx_setup_net+0x10/0x10
[  551.530174][    C1]  ? debug_mutex_init+0x37/0x70
[  551.530190][    C1]  copy_net_ns+0x2a6/0x5f0
[  551.530204][    C1]  create_new_namespaces+0x3ea/0xa90
[  551.530223][    C1]  unshare_nsproxy_namespaces+0xc0/0x1f0
[  551.530242][    C1]  ksys_unshare+0x45b/0xa40
[  551.530261][    C1]  ? __pfx_ksys_unshare+0x10/0x10
[  551.530277][    C1]  ? __pfx_fput_close_sync+0x10/0x10
[  551.530290][    C1]  ? dnotify_flush+0x79/0x4c0
[  551.530313][    C1]  __x64_sys_unshare+0x31/0x40
[  551.530329][    C1]  do_syscall_64+0xcd/0x4c0
[  551.530349][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  551.530361][    C1] RIP: 0033:0x7f05f3990127
[  551.530373][    C1] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  551.530387][    C1] RSP: 002b:00007fff74fa4678 EFLAGS: 00000206 ORIG_RAX: 0000000000000110
[  551.530399][    C1] RAX: ffffffffffffffda RBX: 00007f05f3bb5f40 RCX: 00007f05f3990127
[  551.530408][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  551.530416][    C1] RBP: 00007f05f3bb6738 R08: 0000000000000000 R09: 0000000000000000
[  551.530423][    C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008
[  551.530431][    C1] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[  551.530446][    C1]  </TASK>
[  551.531449][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  551.531464][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(full) 
[  551.531485][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  551.531496][   T31] Call Trace:
[  551.531502][   T31]  <TASK>
[  551.531509][   T31]  dump_stack_lvl+0x3d/0x1f0
[  551.531536][   T31]  panic+0x71c/0x800
[  551.531560][   T31]  ? __pfx_panic+0x10/0x10
[  551.531588][   T31]  ? nmi_backtrace_stall_check+0x6e/0x540
[  551.531616][   T31]  ? irq_work_queue+0xce/0x100
[  551.531639][   T31]  ? watchdog+0xdda/0x12c0
[  551.531656][   T31]  ? watchdog+0xdcd/0x12c0
[  551.531678][   T31]  watchdog+0xdeb/0x12c0
[  551.531701][   T31]  ? __pfx_watchdog+0x10/0x10
[  551.531719][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  551.531744][   T31]  ? __kthread_parkme+0x19e/0x250
[  551.531768][   T31]  ? __pfx_watchdog+0x10/0x10
[  551.531787][   T31]  kthread+0x3c5/0x780
[  551.531803][   T31]  ? __pfx_kthread+0x10/0x10
[  551.531821][   T31]  ? rcu_is_watching+0x12/0xc0
[  551.531841][   T31]  ? __pfx_kthread+0x10/0x10
[  551.531857][   T31]  ret_from_fork+0x5d4/0x6f0
[  551.531880][   T31]  ? __pfx_kthread+0x10/0x10
[  551.531895][   T31]  ret_from_fork_asm+0x1a/0x30
[  551.531924][   T31]  </TASK>
[  551.532113][   T31] Kernel Offset: disabled