last executing test programs:
13m36.499068253s ago: executing program 3 (id=105):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc1105511, &(0x7f00000000c0)={{0xc, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x7ffc, 0x0, 0x9, 0x100000000, 0x0, 0x4, 0x8, 0x0, 0x0, 0x7f, 0x3cb7, 0x0, 0x8000000, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000000, 0x100000000, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x80000, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xdf9cd90, 0x8000000, 0x6, 0x2, 0x0, 0x0, 0x0, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7ffffffd, 0x0, 0x0, 0xffffffffffff2328, 0xffffffffffffffff, 0x3, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0x3ff, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800]})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x1000000, 0x0, 0x40000, 0x0, 0x2, 0x1}})
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}})
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82})
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000080)={0x19})
13m35.506542022s ago: executing program 3 (id=107):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@gettaction={0x24, 0x5a, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x24}}, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
13m35.397361264s ago: executing program 3 (id=108):
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r0, 0x40044104, &(0x7f0000000140)=0x394c00)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x40, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x102}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x40}}, 0x0)
mmap$snddsp_status(&(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x0, 0x4010, r0, 0x82000000)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="08002abd7000fddbdf250100000008000300010000000c0006800600010002000000"], 0x28}, 0x1, 0x0, 0x0, 0xc1}, 0x40)
shmget$private(0x0, 0x1000, 0x671c724efb7b8b2c, &(0x7f0000fff000/0x1000)=nil)
13m35.309947873s ago: executing program 3 (id=109):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
acct(&(0x7f0000000380)='./file0\x00')
r0 = socket$kcm(0x11, 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000002aec000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000040)={@broadcast, @multicast2, <r2=>0x0}, &(0x7f0000000140)=0xc)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x20, &(0x7f0000000600)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4f453bc1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$kcm(r0, &(0x7f0000000c40)={&(0x7f00000000c0)=@xdp={0x2c, 0x8, r5, 0x4}, 0x80, 0x0}, 0x91)
r6 = syz_open_dev$vcsu(&(0x7f0000000740), 0x2, 0x40001)
setsockopt$MRT_DEL_VIF(r6, 0x0, 0xcb, &(0x7f0000000780)={0x0, 0x8, 0x6, 0x5, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}, 0x10)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
r7 = syz_io_uring_setup(0x2334, &(0x7f0000000600)={0x0, 0x83bb, 0x10100, 0x7, 0x10000000}, &(0x7f0000000300), &(0x7f0000000200)=<r8=>0x0)
r9 = syz_io_uring_setup(0x34f1, &(0x7f0000000400)={0x0, 0x0, 0x40}, &(0x7f00000003c0)=<r10=>0x0, &(0x7f0000001480))
syz_io_uring_submit(r10, r8, &(0x7f00000001c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r9, 0x0, 0x0})
io_uring_enter(r7, 0x2003, 0x0, 0x0, 0x0, 0x0)
ioctl$SNAPSHOT_S2RAM(r6, 0x330b)
syz_emit_ethernet(0x3e, &(0x7f0000000440)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0x8, 0x3a, 0x0, @private2, @mcast2, {[], @echo_request}}}}}, 0x0)
mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
setpriority(0x2, 0x0, 0x5)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x84000, 0x0)
13m35.178972825s ago: executing program 3 (id=110):
r0 = socket(0x15, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x8, &(0x7f0000000000)=0x10205, 0x4)
r5 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r6 = fanotify_init(0xf00, 0x0)
fanotify_mark(r6, 0x105, 0x40009975, r5, 0x0)
ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000180)={0x60, 0x17, 0x7, 0x8, 0x37, 0x1, &(0x7f0000000240)="20a1d1edba0dfe35f267e657ff649698522b307e39dde58578341619936741640ac67db3b29c7103af3a4a98597f2f81fba20bb09440c5"})
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r7 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
msgsnd(0x0, &(0x7f0000002600)=ANY=[@ANYBLOB="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"], 0xfd1, 0x800)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x43500, 0x4)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000000b40), 0x0, 0x2, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r9 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r9, 0x40085112, &(0x7f0000000040)=@l={0x92, 0x0, 0xe0})
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
13m34.928616872s ago: executing program 3 (id=113):
r0 = io_uring_setup(0x2e34, &(0x7f0000000900)={0x0, 0x100, 0x80, 0x1})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a300000000014000380080002400000000008000140000000001400000011"], 0x68}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
13m34.563822218s ago: executing program 32 (id=113):
r0 = io_uring_setup(0x2e34, &(0x7f0000000900)={0x0, 0x100, 0x80, 0x1})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a300000000014000380080002400000000008000140000000001400000011"], 0x68}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
8m31.636633706s ago: executing program 2 (id=1199):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc1105511, &(0x7f00000000c0)={{0xc, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x7ffc, 0x0, 0x9, 0x100000000, 0x0, 0x4, 0x8, 0x0, 0x0, 0x7f, 0x3cb7, 0x0, 0x8000000, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000000, 0x100000000, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x80000, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xdf9cd90, 0x8000000, 0x6, 0x2, 0x0, 0x0, 0x0, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7ffffffd, 0x0, 0x0, 0xffffffffffff2328, 0xffffffffffffffff, 0x3, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0x3ff, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800]})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}})
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6}, &(0x7f0000000280), &(0x7f0000000380)}, 0x20)
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82})
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000080)={0x19})
8m30.580365486s ago: executing program 2 (id=1201):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="780000001000030400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r0], 0x78}}, 0x20000800)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x2e, &(0x7f00000001c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0)
8m30.376456516s ago: executing program 2 (id=1202):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@raw=[@map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}, @call={0x85, 0x0, 0x0, 0xbe}], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xba98575a95aeb70f)
ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x15, 0x0, 0x0)
execve(0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0xfffffffffffffd92)
ptrace(0x10, r1)
ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4205, r1, 0x2, &(0x7f0000000080)={0x0, 0xfffffffffffffd8c})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10)
r2 = openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000100)={'wpan0\x00', <r6=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000580)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010128bd7000fddbdf252000000008000300", @ANYRES32=r6, @ANYBLOB="a5002d80080003000900000008000300020000000500010009000000000004000000000005000100090000000800020002000000080003000600000008000300064000000800030002000000000003000100000008000300", @ANYRES32=r6, @ANYBLOB="13e4250c510a9c0dbffe4eaf9adaff08e53ebea080f74bb1c7"], 0x70}, 0x1, 0x0, 0x0, 0x8801}, 0x4040)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000040000000000000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18050000000000000000000000000000b708000000000000658af8ff00000000b7080000000000007b8af0ff00000000bfa10000000020000701040000f0ffffffb7020000080000001846ac3638b1addde6960746052c4e5534c61fe76baf76080ec62ee88f4451527dcad0dc7a247ad8f8afd7dd78989aa73957b2cb6c92ae6c43a79543ba0303623e682e7ad8fd57e63a3e4777145fe3f09ea448409caa9b29524c1b286d189795300a8ef2f114524c80953cdf05c0e521f08280", @ANYRES32=r7, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
ioctl$KVM_SET_DEBUGREGS(r11, 0x4080aea2, &(0x7f00000000c0)={[0x0, 0x0, 0x2000]})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r12, 0x1, 0x32, &(0x7f0000000640)=r8, 0x4)
sendmsg$unix(r13, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo\x00')
fchdir(r14)
8m30.021397433s ago: executing program 2 (id=1205):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
umount2(&(0x7f0000002580)='./file0/../file0\x00', 0x9)
mq_notify(r0, &(0x7f0000000000)={0x110c230000, 0x3, 0x2})
8m29.535217384s ago: executing program 2 (id=1207):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a80)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2d, 0xffffff7f, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x44080)
8m29.128924398s ago: executing program 2 (id=1210):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_fscache}, {@dfltuid}]}})
8m28.699893841s ago: executing program 33 (id=1210):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_fscache}, {@dfltuid}]}})
13.086051597s ago: executing program 5 (id=4124):
socketpair(0x29, 0x2, 0x9, &(0x7f0000000000))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4004, <r5=>r3, 0x2})
ioctl$DMA_BUF_SET_NAME_A(r5, 0x40046201, &(0x7f0000002080)='/dev/dma_heap/system\x00')
mmap$dsp(&(0x7f0000fff000/0x1000)=nil, 0x1002, 0x0, 0x11, r5, 0x0)
10.109294748s ago: executing program 5 (id=4128):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="0012ad"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$sndpcmp(&(0x7f00000002c0), 0xa, 0x110000)
socket$nl_generic(0x10, 0x3, 0x10)
openat(0xffffffffffffff9c, 0x0, 0x1a37c1, 0x1e4)
6.231657367s ago: executing program 4 (id=4148):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r0}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x14}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6}]}, 0x38}}, 0x0)
5.669521225s ago: executing program 5 (id=4150):
r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0x7, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0)
5.461863009s ago: executing program 0 (id=4152):
syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x97, 0x89, 0x59, 0x20, 0x1110, 0x9000, 0xf411, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x6, 0xb0, 0x5, [{{0x9, 0x4, 0x19, 0x9, 0x0, 0xb4, 0xa7, 0xd5}}]}}]}}, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd7000fddbdf25120000000800150001000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x80)
5.461292404s ago: executing program 4 (id=4153):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, 0x0, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd30, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xfff3, 0x3}, {0x5, 0xffff}, {0x4, 0xb}}}, 0x24}}, 0x20044004)
5.454878203s ago: executing program 1 (id=4154):
io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xb, 0x3d3})
r0 = io_uring_setup(0x4dc2, &(0x7f0000000200)={0x0, 0x40, 0x100, 0x0, 0x20})
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x18, &(0x7f0000000000), 0x1)
5.390348094s ago: executing program 1 (id=4155):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000240), 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4)
syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xb7, 0x9e, 0x69, 0x8, 0x2040, 0xd300, 0x16b3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf6, 0x0, 0x0, 0x65, 0x80, 0xca}}]}}]}}, 0x0)
shutdown(r0, 0x1)
5.389721401s ago: executing program 6 (id=4156):
r0 = syz_io_uring_setup(0x18a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000080), &(0x7f00000000c0))
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x402000, 0x0)
mkdir(&(0x7f0000001600)='./bus\x00', 0x1a9)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000240)=ANY=[@ANYRES8, @ANYRESOCT], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{0x5, 0x3, 0x13, 0x6}], 0x10, 0x39, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
socket(0x10, 0x803, 0x0)
openat$drirender128(0xffffff9c, 0x0, 0x2001, 0x0)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d80)=ANY=[@ANYBLOB="240000002c0001000000000000000000040000"], 0x24}], 0x1}, 0x0)
r5 = socket$l2tp(0x2, 0x2, 0x73)
recvmsg(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/4096, 0x1000}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
5.389127828s ago: executing program 5 (id=4157):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10)
5.276355065s ago: executing program 4 (id=4158):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x68}}, 0x0)
5.147922903s ago: executing program 4 (id=4159):
syz_open_procfs(0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000000)={0x0, 0x0, 0x0})
syz_open_dev$sndpcmc(0x0, 0x0, 0x0)
request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xcb}, 0x0)
r2 = getpid()
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, 0x0, 0x8000)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x200000400000bce)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
clock_gettime(0x0, 0x0)
semtimedop(0x0, &(0x7f00000000c0)=[{0x7, 0x8}, {0x3, 0x1, 0x1000}], 0x2, &(0x7f0000000080))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(r3, 0x1, 0x1a, 0x0, &(0x7f0000000240))
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x2}, 0x240000c4)
4.297410038s ago: executing program 6 (id=4160):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f0000004100)={0x2020}, 0x2020)
3.693258069s ago: executing program 5 (id=4161):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="0012ad"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$sndpcmp(&(0x7f00000002c0), 0xa, 0x110000)
socket$nl_generic(0x10, 0x3, 0x10)
openat(0xffffffffffffff9c, 0x0, 0x1a37c1, 0x1e4)
3.64577521s ago: executing program 0 (id=4162):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000001c0)={0x8}, 0x10)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r4}, 0x10)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@loopback}, {@in, 0x2, 0x32}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xaf}, [@replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x8}}]}, 0x158}}, 0x0)
ioctl$TIOCSETD(r1, 0x5423, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000001100), 0xffffffffffffffff)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000080)=@newtaction={0x1038, 0x30, 0x1, 0x0, 0x0, {}, [{0x1024, 0x1, [@m_bpf={0x1020, 0x1, 0x0, 0x0, {{0x8}, {0xff8, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xff4, 0x6, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x1038}}, 0x0)
sendto$inet(r0, &(0x7f0000000300)="ab", 0x1a000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10)
3.63531551s ago: executing program 4 (id=4163):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb4}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_smc(0x2b, 0x1, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendto$inet(r5, &(0x7f0000000040)='\f\x00', 0xffeb, 0x1200, &(0x7f0000000340), 0x10)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r4, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}}, 0x0)
r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3f}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
r8 = fsmount(r6, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r7, r8, 0x1, 0x0, @void}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000520000007914b800000000000600e0000000000095000000003e0000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x13, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
sendto$inet(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @fib={{0x8}, @void}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x90}}, 0x0)
2.733465636s ago: executing program 1 (id=4164):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x80)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000008580100000c0a01010000000000000000070000000900020073797a3100000000090001007379"], 0x1ec}}, 0x0)
write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0x20ff, 0x5, 0x87, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0)
sendfile(r3, r3, &(0x7f0000000080), 0x7f03)
2.732216845s ago: executing program 4 (id=4165):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010003f6fdd140402090b975f601020301090224000201005004090400f700c873b808090504105802030d580904"], &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
close(r4)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000000085000000040000", @ANYRES32=r4], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r6, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r5}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000007000010000000000000000", @ANYRES32=r8, @ANYBLOB='\f\x00'], 0x24}}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r5, 0x0, 0x0}, 0x10)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000880)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
2.53367081s ago: executing program 0 (id=4166):
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
socket(0x15, 0x5, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioprio_get$uid(0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x58, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20048848}, 0x4000)
bind$ax25(r0, &(0x7f0000000080)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @bcast, @default]}, 0x48)
sendto$ax25(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
2.228905657s ago: executing program 1 (id=4167):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x1f, 0x4)
1.719115469s ago: executing program 6 (id=4168):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000300)=0xffffffff, 0x4)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000000440)={{0x0, 0x0, 0x80}})
1.717502707s ago: executing program 1 (id=4169):
sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000080)=0x3ff)
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSBRKP(r1, 0x5425, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x20000023896)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x100, 0x0, 0x0, "7a58beca3900000000000000000000000200"})
select(0x40, &(0x7f0000000340)={0xd, 0x0, 0x0, 0x0, 0x0, 0x2e787ec3, 0x0, 0x1}, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f00000000c0)={0x200, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100800000000})
1.583192032s ago: executing program 0 (id=4170):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
1.444428649s ago: executing program 0 (id=4171):
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0xa8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendfile(r1, r0, 0x0, 0x1)
sched_setaffinity(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10)
mount(&(0x7f0000000100)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='hfsplus\x00', 0x2, &(0x7f0000000300)='#\x03\x00')
listen(r3, 0x1ff)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
sendto$inet(r4, &(0x7f0000000500)="ab", 0x34000, 0x40, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10)
r5 = syz_open_dev$usbfs(0x0, 0x201, 0x2)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000002, 0x11012, r5, 0xffffd000)
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x40084504, &(0x7f0000ffcffc)=0x4)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
openat$sysctl(0xffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
1.045178448s ago: executing program 6 (id=4172):
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
close(r0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000000c0)='P', &(0x7f0000000000)=""/8, 0x2}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50)
981.625171ms ago: executing program 0 (id=4173):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10)
981.207224ms ago: executing program 6 (id=4174):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000019080)='./file0\x00', 0x0, 0x23010, 0x0)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
658.512073ms ago: executing program 1 (id=4175):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb4}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_smc(0x2b, 0x1, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendto$inet(r5, &(0x7f0000000040)='\f\x00', 0xffeb, 0x1200, &(0x7f0000000340), 0x10)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r4, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}}, 0x0)
r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3f}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
r8 = fsmount(r6, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r7, r8, 0x1, 0x0, @void}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000520000007914b800000000000600e0000000000095000000003e0000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x13, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
sendto$inet(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @fib={{0x8}, @void}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x90}}, 0x0)
141.166543ms ago: executing program 5 (id=4176):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x18, 0x52, 0x109, 0x0, 0x0, {0x1c}, [@nested={0x4}]}, 0x18}}, 0x0)
0s ago: executing program 6 (id=4177):
syz_usb_connect(0x3, 0x3d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f0000000040))
write$char_usb(r0, &(0x7f0000000d00)="d30549dee6d4eabd338bb2d9610d59023196ac64c07f51d4ff6fd58d368bee6619387b4e5f6bccbe093b9dadea1a72f9b3090935769d46232b6887a8b0526387036722385279973d60cc90da8295f94522bb914cf26700e796ce3b2b315bd8153edbac683e0000425d63f21dfc65d64c0af88c", 0x73)
0s ago: executing program 0 (id=4180):
open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x3)
r3 = memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa0</\x00\x8eO4._\x14zC\x8a\xe8\xe0u\xe0\xff\xf1\xb2\xfd\xf6nz\x05-]\xc2Vk\xaeky\xd3\x83\xe2\xc7\xd3\xe6M^\x98ox\x14\t\xe9Q1\x1dK\x9a\x045\xd37\xb22\xfdD(\xd2\xdd\xa0\xff\x0f\x00\x00\x00\x00\x00\x00v\n\xd8?]k\x14N\x18\xf4\xc2j\xed6g\xfd\xd2\xd4\xe3\x1f\xa6 \xa0\x8d\xb5\x9aE<2`]<\x8cR\xd69\x0fO\xbf\xc3\xbd\xb0\x96\x90\x91k\x86\x1a\x10\xd2\xf5\x8b\xfc\xf4\xd0[\x12\xf5+\x1aS\x02/Yx\xf2jJb\x97\x9c/\x1f5i\xc6\x861\x9a\xff\xc3\xe7\xbfU\xd5\xac\xccB=\x8f\xfd\x84\xeepQ\x93nn\x0f\xc6\xa9?\xad\x8b~\x96@i=G\x9ft\x1d\xcc\xc6Ys7\x7f\x8ehv\xd3$\x13s\xa0\xbfi\xfaFS\xa9=Xe\xf8tI\x15\x882\x8b\x8e-X\xb8\xf2\x9du\x15S^\xec\xce\xfaf$S\x9f\xe7Ed\n\x84\\ u\xd2\x16\xc1\xa5\xa0\xaa\xe8.i\xc8\x0e\vt\xe2\xf1lA\x93\xdd\xce\x8f$\x06v\xbe\xe7\x95nN\xc5\xaa\x1ev\xc6P\x9c\\G&y\x8bYA\xc3}\xd9\x86[\xb2\xf3\x0f\x90%\xcb\x81\xe8\xea\xbcs\x95\xe9\x8eXH\x19m\xdfOY\xf1E9-\xc8\xe7\x13^+(\x034\x82\xafiOO\x14\x8f^\x8c', 0x7)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa, 0x12, r3, 0x0)
fcntl$addseals(r3, 0x409, 0x2)
r4 = openat$udambuf(0xffffff9c, &(0x7f0000000000), 0x2)
ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000040)={r3, 0x1, 0x0, 0x8000})
kernel console output (not intermixed with test programs):
[ 678.907502][T15283] veth0_vlan: entered promiscuous mode
[ 678.921077][T15283] veth1_vlan: entered promiscuous mode
[ 678.945594][T15283] veth0_macvtap: entered promiscuous mode
[ 678.984303][T15283] veth1_macvtap: entered promiscuous mode
[ 679.051778][T15283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 679.104532][T15283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 679.133469][T15283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 679.163952][T15283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 679.204258][T15283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 679.236672][T15283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 679.296752][T15283] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 679.363102][T15283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 679.394428][T15283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 679.414445][T15283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 679.428947][T15283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 679.439338][T15283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 679.450128][T15283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 679.461260][T15283] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 679.501150][T15283] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 679.680202][T15283] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 679.695887][ T5819] Bluetooth: hci1: command tx timeout
[ 679.729113][T15283] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 679.789203][T15283] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 680.045486][ T9447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 680.079464][ T9447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 680.152165][T11881] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 680.169485][T11881] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 680.249470][T15471] fuse: Unknown parameter '0x0000000000000004'
[ 682.199081][ T5867] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[ 682.439702][ T5867] usb 5-1: Using ep0 maxpacket: 8
[ 682.470544][ T5867] usb 5-1: config 162 has an invalid interface number: 63 but max is 0
[ 682.479891][ T5867] usb 5-1: config 162 has no interface number 0
[ 682.486244][ T5867] usb 5-1: config 162 interface 63 has no altsetting 0
[ 682.546888][ T5867] usb 5-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice=ed.a9
[ 682.556374][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 682.564494][ T5867] usb 5-1: Product: syz
[ 682.568766][ T5867] usb 5-1: Manufacturer: syz
[ 682.573426][ T5867] usb 5-1: SerialNumber: syz
[ 682.792522][ T5867] usb 5-1: disable ehci-hcd to run US-144
[ 682.817413][ T5867] usb 5-1: USB disconnect, device number 49
[ 683.688564][ T5819] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 683.698353][ T5819] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 683.747064][ T5819] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 683.756480][ T5819] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 683.767084][ T5819] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 683.775049][ T5819] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 683.954436][T15546] lo speed is unknown, defaulting to 1000
[ 684.747538][T15546] wlan0 speed is unknown, defaulting to 1000
[ 684.946314][T11881] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 685.061375][T11881] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 685.082186][T15546] chnl_net:caif_netlink_parms(): no params data found
[ 685.140976][T11881] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 685.266697][T11881] team0: Port device netdevsim0 removed
[ 685.288425][T15546] bridge0: port 1(bridge_slave_0) entered blocking state
[ 685.304816][T15546] bridge0: port 1(bridge_slave_0) entered disabled state
[ 685.313207][T15546] bridge_slave_0: entered allmulticast mode
[ 685.320556][T15546] bridge_slave_0: entered promiscuous mode
[ 685.331135][T15546] bridge0: port 2(bridge_slave_1) entered blocking state
[ 685.338501][T15546] bridge0: port 2(bridge_slave_1) entered disabled state
[ 685.346268][T15546] bridge_slave_1: entered allmulticast mode
[ 685.370420][T15546] bridge_slave_1: entered promiscuous mode
[ 685.459942][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[ 685.482356][T15546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 685.568065][T15584] tmpfs: Bad value for 'mpol'
[ 686.009876][ T5819] Bluetooth: hci0: command tx timeout
[ 686.027754][T15546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 686.232423][T15588] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3049'.
[ 686.309705][T15546] team0: Port device team_slave_0 added
[ 686.334942][T11881] bridge_slave_1: left allmulticast mode
[ 686.348048][T11881] bridge_slave_1: left promiscuous mode
[ 686.372593][T11881] bridge0: port 2(bridge_slave_1) entered disabled state
[ 687.506784][T11881] bond1 (unregistering): (slave geneve2): Releasing active interface
[ 687.515055][T11881] geneve2 (unregistering): left promiscuous mode
[ 687.523117][T11881] geneve2 (unregistering): left allmulticast mode
[ 687.713122][T11881] batman_adv: batadv0: Removing interface: macvlan1
[ 687.722459][T11881] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 687.733332][T11881] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 687.743187][T11881] bond0 (unregistering): Released all slaves
[ 687.753418][T11881] bond1 (unregistering): Released all slaves
[ 687.765326][T11881] bond2 (unregistering): Released all slaves
[ 687.778949][T11881] bond3 (unregistering): Released all slaves
[ 687.789313][T15546] team0: Port device team_slave_1 added
[ 687.850991][T15546] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 687.869256][T15546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 687.895856][T15546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 687.910605][T11881] : left promiscuous mode
[ 687.943872][T15546] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 687.952467][T15546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 687.979909][T15546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 688.028540][T11881] tipc: Disabling bearer <eth:team0>
[ 688.040898][T11881] tipc: Left network mode
[ 688.056853][T15546] hsr_slave_0: entered promiscuous mode
[ 688.071909][ T5819] Bluetooth: hci0: command tx timeout
[ 688.100817][T15546] hsr_slave_1: entered promiscuous mode
[ 688.118102][T15546] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 688.126059][T15546] Cannot create hsr debugfs directory
[ 688.205589][ T29] audit: type=1400 audit(1744793719.098:1115): avc: denied { cmd } for pid=15621 comm="syz.5.3060" path="socket:[47389]" dev="sockfs" ino=47389 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[ 688.594535][T15630] : renamed from bond0 (while UP)
[ 689.419156][ T5911] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[ 689.454407][T15637] IPv6: addrconf: prefix option has invalid lifetime
[ 689.699094][ T5911] usb 5-1: Using ep0 maxpacket: 8
[ 689.710464][ T5911] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 689.743059][T15642] overlayfs: failed to clone upperpath
[ 689.836829][ T5911] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 689.887111][T11881] hsr_slave_0: left promiscuous mode
[ 689.931285][ T5911] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 689.954045][ T5911] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 689.970366][ T5911] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 689.980634][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 689.995506][T11881] hsr_slave_1: left promiscuous mode
[ 690.060463][T11881] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 690.150994][ T5819] Bluetooth: hci0: command tx timeout
[ 690.166534][T11881] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 690.261651][T11881] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 690.281692][T11881] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 690.426628][T11881] veth1_macvtap: left promiscuous mode
[ 690.447584][T11881] veth0_macvtap: left promiscuous mode
[ 690.458902][T11881] veth1_vlan: left promiscuous mode
[ 690.474388][T11881] veth0_vlan: left promiscuous mode
[ 690.488200][ T5911] usb 5-1: GET_CAPABILITIES returned 0
[ 690.494236][ T5911] usbtmc 5-1:16.0: can't read capabilities
[ 690.608792][T15652] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3069'.
[ 690.694435][ T8] usb 5-1: USB disconnect, device number 50
[ 691.003996][T15662] futex_wake_op: syz.6.3069 tries to shift op by -1; fix this program
[ 691.154628][T11881] team0 (unregistering): Port device team_slave_1 removed
[ 691.203349][T11881] team0 (unregistering): Port device team_slave_0 removed
[ 691.255448][ T35] smc: removing ib device syz!
[ 691.457472][T15668] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3072'.
[ 691.842082][T15672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3073'.
[ 692.154246][T15661] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[ 692.198801][T15672] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 692.229126][ T5819] Bluetooth: hci0: command tx timeout
[ 692.244996][T15672] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 692.335532][T15672] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 692.360772][T15672] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 693.767007][T15689] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3079'.
[ 694.208965][T15546] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 694.382908][T15546] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 694.439413][T15699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3082'.
[ 694.462673][T15699] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3082'.
[ 694.550099][T15546] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 694.576996][T15699] netlink: 26 bytes leftover after parsing attributes in process `syz.4.3082'.
[ 694.592007][T15546] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 694.817347][T15546] 8021q: adding VLAN 0 to HW filter on device bond0
[ 694.857610][T15706] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3084'.
[ 694.859594][T15546] 8021q: adding VLAN 0 to HW filter on device team0
[ 694.921152][T15707] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3085'.
[ 694.934861][T15706] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[ 694.943324][T15706] futex_wake_op: syz.5.3084 tries to shift op by -1; fix this program
[ 694.943649][ T9447] bridge0: port 1(bridge_slave_0) entered blocking state
[ 694.958560][ T9447] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 694.998721][ T9447] bridge0: port 2(bridge_slave_1) entered blocking state
[ 695.005865][ T9447] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 695.061859][T15711] IPv6: addrconf: prefix option has invalid lifetime
[ 695.124973][T15546] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 696.319316][ T29] audit: type=1400 audit(1744793727.168:1116): avc: denied { read } for pid=15721 comm="syz.5.3090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[ 696.781744][T15734] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3091'.
[ 696.864444][T15546] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 697.013699][T15546] veth0_vlan: entered promiscuous mode
[ 697.036288][T15546] veth1_vlan: entered promiscuous mode
[ 697.076067][T15546] veth0_macvtap: entered promiscuous mode
[ 697.091397][ T29] audit: type=1400 audit(1744793727.988:1117): avc: denied { listen } for pid=15742 comm="syz.1.3095" lport=46474 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[ 697.095258][T15546] veth1_macvtap: entered promiscuous mode
[ 697.179162][ T5911] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[ 697.370451][ T5911] usb 5-1: Using ep0 maxpacket: 8
[ 697.383175][ T5911] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 697.616705][ T5911] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 697.640639][ T5911] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 697.651223][ T5911] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 697.664753][ T5911] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 697.674307][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 697.683961][T15546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 697.702544][T15546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 697.716807][T15546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 697.789091][T15546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 697.804721][T15546] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 697.822301][T15546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 697.838120][T15546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 697.848838][T15546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 697.864271][T15546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 697.910380][T15754] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3099'.
[ 697.911032][T15546] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 697.928632][ T5911] usb 5-1: GET_CAPABILITIES returned 0
[ 697.945317][ T5911] usbtmc 5-1:16.0: can't read capabilities
[ 697.972899][T15546] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 698.001614][T15546] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 698.021752][T15758] futex_wake_op: syz.5.3099 tries to shift op by -1; fix this program
[ 698.038083][T15546] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 698.054207][T15546] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 698.066743][T15754] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[ 698.132412][ T9] usb 5-1: USB disconnect, device number 51
[ 698.215489][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 698.235980][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 698.269502][T15762] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3101'.
[ 698.284864][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 698.293276][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 699.673482][ T29] audit: type=1400 audit(1744793730.558:1118): avc: denied { ioctl } for pid=15793 comm="syz.0.3112" path="socket:[47023]" dev="sockfs" ino=47023 ioctlcmd=0x89b0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[ 699.822093][T15792] hub 6-0:1.0: USB hub found
[ 699.834174][T15796] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3113'.
[ 699.855852][T15792] hub 6-0:1.0: 1 port detected
[ 700.656729][T15815] ptrace attach of "./syz-executor exec"[15072] was attempted by " eth0 #�u��u0*�i��Ƈ_���k�.\x22��#p� /��yL�a��~+>�����3�l {@!2�!��9k��\x0b8I$�Q �=r���\x09/�vӧ�J��#KT���_$A=z�/X�mOX)s�_�N���)��6m\x0a\x0b�뻑z�|d\x1b��yx�\x1bLTrw�|0\x09���\x5c�[� �]V :�Þ\x07x�� .TTϿ��a%�Q�CuT����YZy�!��Ѧ7�vs�\x07��j*�I��{]���*�5Jt�sĪ�~��0�fۮG����:Q\x1b㣤}�`e�L��\x0d�y�g1�\x09i/!�,�u��~)�\x1b2����j�����N��Th�\x1bo:�\x0bq7S�H�L���B��q�(� ��[�aF����*q�� �v� AN�����Te��L��+u�^��� �\x07���sha 넙���LD�7�DQ�2!8,�%$��֜y�K������ƴ�����%:��0��d��LWՐ�l\x1b��\x0bh�=m�.�\x0bh��Q}�8/��P��+:�E\x5c�Ԭ��ט���լ�C�R�r^g�Q(�>⺨=\x0c04� �*@v���Tځg�:hzW6s)x�� �\
[ 701.132987][T15818] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0
[ 701.281417][T15818] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0
[ 701.304292][T15818] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0
[ 701.314384][T15818] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0
[ 701.332271][T15818] geneve2: entered promiscuous mode
[ 701.664058][T15837] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3126'.
[ 702.304809][T15844] ALSA: mixer_oss: invalid OSS volume '/file0'
[ 703.969308][ T970] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[ 704.149170][ T970] usb 1-1: Using ep0 maxpacket: 32
[ 704.175834][T15895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3149'.
[ 704.185640][T15895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3149'.
[ 704.195228][T15895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3149'.
[ 704.204579][T15895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3149'.
[ 704.215073][T15895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3149'.
[ 704.225174][T15895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3149'.
[ 704.237739][T15895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3149'.
[ 704.248589][T15895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3149'.
[ 704.257966][ T970] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[ 704.271773][ T970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 704.280236][T15895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3149'.
[ 704.289925][T15895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3149'.
[ 704.301137][ T970] usb 1-1: Product: syz
[ 704.305379][ T970] usb 1-1: Manufacturer: syz
[ 704.310872][ T970] usb 1-1: SerialNumber: syz
[ 704.318380][ T970] usb 1-1: config 0 descriptor??
[ 704.345310][ T970] gspca_main: stk1135-2.14.0 probing 174f:6a31
[ 704.813525][T15910] dccp_close: ABORT with 15584 bytes unread
[ 705.649420][ T5868] usb 2-1: new full-speed USB device number 48 using dummy_hcd
[ 705.824912][ T5868] usb 2-1: config index 0 descriptor too short (expected 31, got 27)
[ 705.854768][ T5868] usb 2-1: config 1 interface 0 has no altsetting 0
[ 705.864520][ T5868] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72
[ 705.886223][ T5868] usb 2-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3
[ 705.902475][ T5868] usb 2-1: Product: syz
[ 705.906669][ T5868] usb 2-1: Manufacturer: syz
[ 705.924329][ T5868] usb 2-1: SerialNumber: syz
[ 705.948829][T15953] overlayfs: failed to clone upperpath
[ 706.182710][ T970] gspca_stk1135: reg_w 0x200 err -71
[ 706.209067][ T970] gspca_stk1135: serial bus timeout: status=0x00
[ 706.215455][ T970] gspca_stk1135: Sensor write failed
[ 706.243217][ T970] gspca_stk1135: serial bus timeout: status=0x00
[ 706.270627][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 706.278112][ T970] gspca_stk1135: Sensor write failed
[ 706.289128][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 706.298812][ T970] gspca_stk1135: serial bus timeout: status=0x00
[ 706.305789][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 706.319257][ T970] gspca_stk1135: Sensor read failed
[ 706.324810][ T970] gspca_stk1135: serial bus timeout: status=0x00
[ 706.331703][ T970] gspca_stk1135: Sensor read failed
[ 706.337092][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 706.348134][ T970] gspca_stk1135: Detected sensor type unknown (0x0)
[ 706.355305][ T970] gspca_stk1135: serial bus timeout: status=0x00
[ 706.362065][ T5830] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 706.362448][ T5868] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 48 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[ 706.369155][ T970] gspca_stk1135: Sensor read failed
[ 706.369190][ T970] gspca_stk1135: serial bus timeout: status=0x00
[ 706.369199][ T970] gspca_stk1135: Sensor read failed
[ 706.369223][ T970] gspca_stk1135: serial bus timeout: status=0x00
[ 706.404686][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 706.412077][ T970] gspca_stk1135: Sensor write failed
[ 706.417605][ T970] gspca_stk1135: serial bus timeout: status=0x00
[ 706.420635][T15964] ptrace attach of "./syz-executor exec"[10167] was attempted by "./syz-executor exec"[15964]
[ 706.424555][ T970] gspca_stk1135: Sensor write failed
[ 706.440252][ T970] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71
[ 706.455569][ T970] usb 1-1: USB disconnect, device number 50
[ 706.487104][ T29] audit: type=1400 audit(1744793737.378:1119): avc: denied { write } for pid=15965 comm="syz.4.3183" lport=59363 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[ 706.519102][ T5868] usb 2-1: USB disconnect, device number 48
[ 706.533131][ T5868] usblp0: removed
[ 706.540526][T15959] lo speed is unknown, defaulting to 1000
[ 706.546773][T15959] wlan0 speed is unknown, defaulting to 1000
[ 706.750426][T15959] chnl_net:caif_netlink_parms(): no params data found
[ 706.808787][T15959] bridge0: port 1(bridge_slave_0) entered blocking state
[ 706.833739][T15959] bridge0: port 1(bridge_slave_0) entered disabled state
[ 706.861140][T15959] bridge_slave_0: entered allmulticast mode
[ 706.928320][T15959] bridge_slave_0: entered promiscuous mode
[ 706.962010][T15959] bridge0: port 2(bridge_slave_1) entered blocking state
[ 706.969249][T15959] bridge0: port 2(bridge_slave_1) entered disabled state
[ 706.983218][T15959] bridge_slave_1: entered allmulticast mode
[ 707.004507][T15959] bridge_slave_1: entered promiscuous mode
[ 707.476646][T15959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 708.056147][T15959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 708.117123][T15959] team0: Port device team_slave_0 added
[ 708.145113][T15959] team0: Port device team_slave_1 added
[ 708.203328][T15959] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 708.223003][T15959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 708.279041][T15959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 708.334122][T15959] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 708.390003][T15959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 708.431722][T15959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 708.474323][T15959] hsr_slave_0: entered promiscuous mode
[ 708.519495][ T5830] Bluetooth: hci3: command tx timeout
[ 708.606543][T15959] hsr_slave_1: entered promiscuous mode
[ 708.620391][T15959] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 708.628124][T15959] Cannot create hsr debugfs directory
[ 708.703293][T16003] dccp_close: ABORT with 15604 bytes unread
[ 708.841849][T15959] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[ 708.925038][T15959] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[ 709.021169][T15959] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[ 709.099954][T15959] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[ 709.119094][ T5868] usb 1-1: new full-speed USB device number 51 using dummy_hcd
[ 709.213934][T15959] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 709.223731][T15959] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 709.232309][T15959] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 709.241397][T15959] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 709.283988][ T5868] usb 1-1: config index 0 descriptor too short (expected 31, got 27)
[ 709.304333][ T5868] usb 1-1: config 1 interface 0 has no altsetting 0
[ 709.315343][T15959] 8021q: adding VLAN 0 to HW filter on device bond0
[ 709.320628][ T5868] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72
[ 709.341946][ T5868] usb 1-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3
[ 709.346969][T15959] 8021q: adding VLAN 0 to HW filter on device team0
[ 709.364223][ T977] bridge0: port 1(bridge_slave_0) entered blocking state
[ 709.371406][ T977] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 709.387913][ T5868] usb 1-1: Product: syz
[ 709.392384][ T5868] usb 1-1: Manufacturer: syz
[ 709.396977][ T5868] usb 1-1: SerialNumber: syz
[ 709.928119][ T977] bridge0: port 2(bridge_slave_1) entered blocking state
[ 709.935227][ T977] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 710.023279][ T5868] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 51 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[ 710.550636][ T5830] Bluetooth: hci3: command tx timeout
[ 710.820534][T16037] __nla_validate_parse: 45 callbacks suppressed
[ 710.820550][T16037] netlink: 124 bytes leftover after parsing attributes in process `syz.4.3206'.
[ 710.848562][ C1] usblp0: nonzero write bulk status received: -71
[ 710.849272][ T9] usb 1-1: USB disconnect, device number 51
[ 710.880872][T15959] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 711.050724][T16014] usblp0: removed
[ 711.207698][T15959] veth0_vlan: entered promiscuous mode
[ 711.218075][T15959] veth1_vlan: entered promiscuous mode
[ 711.251696][T15959] veth0_macvtap: entered promiscuous mode
[ 711.267069][T15959] veth1_macvtap: entered promiscuous mode
[ 711.282799][T15959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 711.293638][T15959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 711.304148][T15959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 711.315004][T15959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 711.325261][T15959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 711.336671][T15959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 711.348622][T15959] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 711.359152][T15959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 711.370355][T15959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 711.381001][T15959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 711.391736][T15959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 711.401916][T15959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 711.412677][T15959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 711.423417][T15959] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 711.436635][T15959] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 711.465757][T15959] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 711.479241][T15959] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 711.487987][T15959] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 711.565996][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 711.576040][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 711.616787][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 711.625318][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 712.139483][ T25] usb 6-1: new high-speed USB device number 48 using dummy_hcd
[ 712.435416][ T25] usb 6-1: device descriptor read/64, error -71
[ 712.557616][T16076] netlink: 'syz.4.3217': attribute type 4 has an invalid length.
[ 712.639572][ T5830] Bluetooth: hci3: command tx timeout
[ 712.859098][ T25] usb 6-1: new high-speed USB device number 49 using dummy_hcd
[ 712.869284][ T5830] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[ 712.879579][ T5830] Bluetooth: hci0: Injecting HCI hardware error event
[ 712.891059][ T5819] Bluetooth: hci0: hardware error 0x00
[ 713.249131][ T25] usb 6-1: device descriptor read/64, error -71
[ 713.271482][T16084] netlink: 124 bytes leftover after parsing attributes in process `syz.6.3218'.
[ 713.359449][ T25] usb usb6-port1: attempt power cycle
[ 713.609146][ T5865] usb 2-1: new full-speed USB device number 49 using dummy_hcd
[ 713.839165][ T25] usb 6-1: new high-speed USB device number 50 using dummy_hcd
[ 713.861074][ T25] usb 6-1: device descriptor read/8, error -71
[ 713.868590][ T5865] usb 2-1: config index 0 descriptor too short (expected 31, got 27)
[ 713.883044][ T5865] usb 2-1: config 1 interface 0 has no altsetting 0
[ 713.899406][ T5865] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72
[ 713.908520][ T5865] usb 2-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3
[ 713.919105][ T5865] usb 2-1: Product: syz
[ 713.926849][ T5865] usb 2-1: Manufacturer: syz
[ 713.935500][ T5865] usb 2-1: SerialNumber: syz
[ 714.109098][ T25] usb 6-1: new high-speed USB device number 51 using dummy_hcd
[ 714.144455][ T25] usb 6-1: device descriptor read/8, error -71
[ 714.159280][T16119] 9pnet_fd: Insufficient options for proto=fd
[ 714.260190][ T25] usb usb6-port1: unable to enumerate USB device
[ 714.562078][ T5865] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 49 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[ 714.709450][ T5830] Bluetooth: hci3: command tx timeout
[ 714.868179][ C1] usblp0: nonzero write bulk status received: -71
[ 714.875101][ T5865] usb 2-1: USB disconnect, device number 49
[ 715.037103][ T5830] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[ 715.046571][ T5830] Bluetooth: hci1: Injecting HCI hardware error event
[ 715.060324][ T5830] Bluetooth: hci1: hardware error 0x00
[ 715.121271][T16091] usblp0: removed
[ 715.189575][ T5819] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[ 715.895397][T16141] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3239'.
[ 715.905938][T16141] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3239'.
[ 717.269109][ T5830] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[ 718.136103][T16103] Set syz1 is full, maxelem 65536 reached
[ 719.265282][T16161] hub 6-0:1.0: USB hub found
[ 719.270155][T16161] hub 6-0:1.0: 1 port detected
[ 719.656091][T16181] [U]
[ 719.662903][T16181] [U] K{�
[ 719.666274][T16181] [U] �T �1���F���Fˊ�`G�Jǘ�G���������O��/�MC�
[ 719.683877][T16184] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3254'.
[ 719.693549][T16181] [U] T�ؖ/,�~�Ĝ��J���}8���'O1��"�7-JQ�K��W��Q�5C%"�H12��Y������X�`���ȼ`+��(�¿!(���Z '�TXLN�I�G�J����ݭ�P�~�7�!���"ب� ��(�5�OBܤ�̓J�
[ 719.717028][T16181] [U] �K\&�}6�6�X�HX� �Ե���.`�A�$�40|϶��9��ި��� �U��4��ĮVBZ��}�W�M�T���Q��ΦR� 4��
[ 719.730184][T16181] [U] ".H6��"�KÇ[����J�4��I�N��[Z(��C|T�]Z{��3�C=��X�Ԟ˅�4�W�)\T�XJ� �SH{Q;̹���T��+���G��߮D�.˂�>Y����WUH�FN����HL]S�2���\G%�O�&Z)�К'�PUL�_<� �ذ�Ү��`ұT��ޜ� ��;_�"(�U{7J��2X �/�'��C���I����H�C�ճ�V�=��AI�%W�ES� R��J�Μ���G��R��͡HI���A��6-�D��V�� I"��Nƨ ��ASC~4���8C�*�OO5/ߜJ�~���W�VK+����3��Y)��M���V��YQƽ�DTR�OTPEM%F��EJ�A5� �T_-X~�^AAۂҘ�Q��
[ 719.768392][T16181] [U] +�W�G?]��'A: ��)�����' B>T���F/��<'�U�'��H�I�.+]E�.�-ɿ߿ �%��>2`�^U�8F.�6��3��+�A�«���G3�P��6:�^0��T��V�'E�T����YC�N��Rϩ�N�PJ� ;�Z����ۑ8!��\م�A�ʖ2 ��$е�WI.��#��/BAI���`��4J��D� Y@�Z��GW�5˿B� �ٜ�N�Y"VI2��
[ 719.792787][T16181] [U] �T�_K5�T�YJ���9� �C�$BR�L�NUL ��9W���|�G�"ʃ�%�ڶ�C�؝���Q�� ��3��Q��N^HP*��$ �.�7Yӱ�2�
[ 719.805418][T16181] [U] �?��� H��*��� �3͝7�ɍ�^ #Q�"0~� ��(�O�X L�B�,'V�� =���C�S���G�S��0�ւ��`���ه��=1(�ξ��P#�2DO*Ƀ
[ 719.818257][T16181] [U] �S��G������GU ��D-{���|&�����ѐ2��L�C_��!`��OZ֥�B�� %>�RѶ�WχݎSS�H"�YA4�O.�Y��ď�RTԶ�B�[+/<<R�B����|ФE���۠�V96#���ͤʦJ�U�%S851���ҩS�P��\��?Q�|L��QX�0�K�1ORɴ2��|��D�F���ِ��2ޔ���0� �H�}C[/ ����PX^��O
[ 719.843197][T16181] [U] �؛� � �(J�Л��M��XZ�;�����؝_����*3�3��5 �\�XM��U��AK!AQ`��;FЕ�I+��VU H���M� J��Ʒ��Z�C��Z���)_ǟ� ԑ�&�֡��A�XTO���_� ڼ�:���%��P���C ֲ�Y�+_�ܛ��}U�M��ƫC�!KJ�7пG��=B�
[ 719.864741][T16181] [U] ٽ�F�%�XA��L�2R*G��VW��$� �J �A��F����+ؾ9̈́VI�֗�Kپ�1}_����%�R6��( ]��/��ؐřYܺ��Hä��� R G��RN/ܫ�#!�D����%���D ��-{�$�VU��T���$:MTR�E�C1V�D~��];[�����SQ����(��E,X �8� "���G�D�ڵ2@T8���҃����T8.R C+�@�ʦ�P�U�P����C���'ńYL�-SS1E?�7�O���^]����C�½ H]�JKR]RKQ܆��ݣOTC��X���4�N� ��&����ڋ��@�:M7�~�+�W*���XM��>>��{Q���_�՝LX8�U����{�Z��ؐ)��7?�RR;� C�R�Hײڣ����1�>)�Mă�T���(��Aϝ�}9�ڥ�J*Mќ�ġ�'L��Q �DW��ظ=��|Q� �Æ�W;5��Ž�!�DB�X`ɧ�/��E�`ƦM��X��"�\
[ 719.921857][T16181] [U] {;� ե�٘_�O2��)�O��.2�W2ʲ��Y���X_ HPϱ�S�D����:]�{� ����Ƚ
[ 719.938558][T16181] [U] I,�>�Ӥ ��5�1��^1�N4�OǶ�'0�?֒I�9W.�_.�W�A���V��`)�Z���C6GIӹ�A��XL[����F�*��O�W)+��'\N� [K@����2�Ǭ���P"^`��� ؿ
[ 719.956906][T16181] [U] 22��Ʃ�۩X?0;3U�
[ 719.962373][T16181] [U] ޜ�ƍ�SOBX�8�W�4��(�~/���K�U��ԖOQ�E+�G�-Y�GY_�>V�����3.H�ә]̈́�2��)�D�, �� �D~�D���+�W; A\�FP��Ș|$��)�KؐI���ɿ K�YT^R���Ǚ���A=�#�ܜ �Ϳ�AE��T�1��ݯ4K�.E"R�S|П�S� ��: ��>P ��R�"Z�ڭ���#P!�KY"�}��F�N84ܳ��Hޱ�O��S��̫%DLW�MƲ�
[ 719.988235][T16181] [U] [�['XN�'�� ���,MR��/����1D=!D�X91B�WǻR�LF���K̤Z��#�`̑ L؛�˜��B~�M���
[ 719.998505][T16181] [U] �L�>�сD+�D�����"5�ʍ�H3<���IR=F^�F�N��������V���D�OIO�:U� >�Y�
[ 720.007664][T16181] [U] 'B�6V�20�ķǞ�� �"T8�{9�FW��]���̩�
[ 720.015437][T16181] [U] �72މ���U�C6����τI]8C��TۨQSK�Y��I ��¹ �|V'�TV/ ��G�$[� 9 KH`�" ܑ��}��[^=� �0�]��%�̂T�����F�_V�4C���
[ 720.028420][T16181] [U] � EC�
[ 720.032606][T16181] [U] ���|���<��:^�3$7NK~�-�@��?��/MTL��۾�I�WȬ@G~T�{��P�+�$�JP|� ��I�RIӍPM� ��Y� ڔ8�T���V�����,�L�,�
[ 720.246290][T16171] [U] �K�����)0���~ܳʪ�IP'�F�ҜZ ��R��� @B� ]�5��{��ʼ�'�8�ƥF��U TQUDǩ�K;7ͪ0C[��Y���YC���ذM��L�8�T�͚�5���RX����W� X���OQHVI'8��� �L�
[ 720.749025][T16193] fuse: Bad value for 'rootmode'
[ 721.199644][T16201] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3259'.
[ 721.272072][T16207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 721.273370][T16207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 721.274198][T16207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 721.274939][T16207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 722.376989][T16226] overlayfs: failed to clone upperpath
[ 723.253364][T16243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3277'.
[ 723.284803][T16243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3277'.
[ 723.317127][T16243] netlink: 26 bytes leftover after parsing attributes in process `syz.4.3277'.
[ 723.517248][T16248] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3278'.
[ 724.319211][ T5865] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[ 724.509465][ T5865] usb 1-1: device descriptor read/64, error -71
[ 724.769279][ T5865] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[ 724.899112][ T5865] usb 1-1: device descriptor read/64, error -71
[ 725.040077][ T5865] usb usb1-port1: attempt power cycle
[ 725.409475][ T5865] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[ 725.459337][T16299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3299'.
[ 725.473212][T16299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3299'.
[ 725.638395][ T51] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[ 725.819524][ T5865] usb 1-1: device descriptor read/8, error -71
[ 726.029534][ T51] usb 5-1: Using ep0 maxpacket: 16
[ 726.174992][ T51] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 726.215014][ T51] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 726.231077][ T51] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 726.241000][ T5865] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[ 726.273335][ T51] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 726.289119][ T51] usb 5-1: Product: syz
[ 726.295335][ T51] usb 5-1: Manufacturer: syz
[ 726.302225][ T5865] usb 1-1: device descriptor read/8, error -71
[ 726.313224][T16310] tipc: Started in network mode
[ 726.329055][ T51] usb 5-1: SerialNumber: syz
[ 726.331986][T16310] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[ 726.345322][T16310] tipc: Enabled bearer <eth:team0>, priority 0
[ 726.364148][T16310] futex_wake_op: syz.1.3305 tries to shift op by -1; fix this program
[ 726.429399][ T5865] usb usb1-port1: unable to enumerate USB device
[ 726.747238][ T51] usb 5-1: 0:2 : does not exist
[ 727.459174][ T5867] tipc: Node number set to 11578026
[ 727.589420][ T5867] usb 5-1: USB disconnect, device number 52
[ 728.973023][T16377] fuse: Unknown parameter 'user_i00000000000000000000'
[ 731.980865][T16391] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3335'.
[ 732.008796][T16391] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3335'.
[ 732.217215][T16391] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3335'.
[ 732.241829][T16391] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3335'.
[ 732.253206][T16391] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3335'.
[ 732.269053][T16391] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3335'.
[ 732.285706][T16391] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3335'.
[ 732.301447][T16391] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3335'.
[ 732.314576][T16391] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3335'.
[ 732.362643][T16391] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3335'.
[ 732.498416][T16408] fuse: Unknown parameter 'user_i00000000000000000000'
[ 732.732710][ T29] audit: type=1400 audit(1744793763.628:1120): avc: denied { read } for pid=5176 comm="acpid" name="event4" dev="devtmpfs" ino=3913 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1
[ 732.763442][ T29] audit: type=1400 audit(1744793763.628:1121): avc: denied { open } for pid=5176 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3913 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1
[ 732.786868][ T29] audit: type=1400 audit(1744793763.628:1122): avc: denied { ioctl } for pid=5176 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3913 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1
[ 734.130828][T16443] mkiss: ax0: crc mode is auto.
[ 737.189719][T16485] hub 6-0:1.0: USB hub found
[ 737.194714][T16485] hub 6-0:1.0: 1 port detected
[ 738.539047][ T9] usb 2-1: new full-speed USB device number 50 using dummy_hcd
[ 738.742710][ T9] usb 2-1: config index 0 descriptor too short (expected 31, got 27)
[ 738.835145][ T9] usb 2-1: config 1 interface 0 has no altsetting 0
[ 738.835799][T16512] __nla_validate_parse: 38 callbacks suppressed
[ 738.835812][T16512] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3380'.
[ 738.868071][T16512] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3380'.
[ 738.870092][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72
[ 738.942489][T16512] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3380'.
[ 739.039245][T16512] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3380'.
[ 739.048807][ T9] usb 2-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3
[ 739.059381][T16512] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3380'.
[ 739.084298][T16512] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3380'.
[ 739.101999][T16512] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3380'.
[ 739.117460][T16512] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3380'.
[ 739.130849][T16512] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3380'.
[ 739.143217][T16512] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3380'.
[ 739.145410][ T9] usb 2-1: Product: syz
[ 739.200665][ T9] usb 2-1: Manufacturer: syz
[ 739.239075][ T9] usb 2-1: SerialNumber: syz
[ 740.697171][ T9] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 50 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[ 741.047214][ T9] usb 2-1: USB disconnect, device number 50
[ 741.086425][ T9] usblp0: removed
[ 742.373569][ T29] audit: type=1400 audit(1744793773.268:1123): avc: denied { append } for pid=16554 comm="syz.5.3395" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[ 742.972907][ T5865] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[ 743.077299][T16559] xt_connbytes: Forcing CT accounting to be enabled
[ 743.084710][T16559] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT
[ 743.096605][T16559] xt_bpf: check failed: parse error
[ 743.129172][ T5865] usb 1-1: Using ep0 maxpacket: 8
[ 743.397850][ T5865] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 743.459100][ T5865] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 743.492549][ T5865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 743.526275][ T5865] usb 1-1: config 0 descriptor??
[ 743.848276][ T5865] iowarrior 1-1:0.0: no interrupt-in endpoint found
[ 744.521080][ T51] usb 1-1: USB disconnect, device number 56
[ 744.859056][ T9] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[ 745.072180][ T9] usb 2-1: config index 0 descriptor too short (expected 63506, got 18)
[ 745.103643][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 745.158292][ T9] usb 2-1: config 0 has no interfaces?
[ 745.261970][T16586] __nla_validate_parse: 48 callbacks suppressed
[ 745.261988][T16586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3405'.
[ 745.367525][T16586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3405'.
[ 745.370783][ T9] usb 2-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b
[ 745.386099][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 745.399777][ T9] usb 2-1: Product: syz
[ 745.408376][ T9] usb 2-1: Manufacturer: syz
[ 745.417471][ T9] usb 2-1: SerialNumber: syz
[ 745.419359][T16586] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3405'.
[ 745.592819][ T9] usb 2-1: config 0 descriptor??
[ 745.806432][ T29] audit: type=1400 audit(1744793776.698:1124): avc: denied { execute } for pid=16592 comm="syz.0.3407" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=51091 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[ 745.832747][ C1] vkms_vblank_simulate: vblank timer overrun
[ 746.972630][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[ 747.712943][ T29] audit: type=1400 audit(1744793778.128:1125): avc: denied { map } for pid=16612 comm="syz.0.3414" path="socket:[51513]" dev="sockfs" ino=51513 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 747.823475][ T29] audit: type=1400 audit(1744793778.128:1126): avc: denied { read } for pid=16612 comm="syz.0.3414" path="socket:[51513]" dev="sockfs" ino=51513 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 747.964152][T16621] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3415'.
[ 748.111458][ T9] usb 2-1: USB disconnect, device number 51
[ 748.779108][ T9] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[ 749.209157][ T9] usb 1-1: device descriptor read/64, error -71
[ 749.459736][ T9] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[ 749.864148][ T9] usb 1-1: device descriptor read/64, error -71
[ 750.026030][ T9] usb usb1-port1: attempt power cycle
[ 750.343531][T16647] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3425'.
[ 750.619223][ T9] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[ 750.690778][ T9] usb 1-1: device descriptor read/8, error -71
[ 750.831392][T16666] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3432'.
[ 750.840647][T16666] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 750.849928][T16666] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 750.859047][T15236] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[ 750.884939][T16666] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 750.893407][T16666] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 750.979150][ T9] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[ 751.019659][T15236] usb 2-1: Using ep0 maxpacket: 16
[ 751.029254][ T9] usb 1-1: device descriptor read/8, error -71
[ 751.040986][T15236] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 751.057584][T15236] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 751.152327][ T9] usb usb1-port1: unable to enumerate USB device
[ 751.163293][T15236] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 751.172851][T15236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 751.183187][T15236] usb 2-1: Product: syz
[ 751.193091][T15236] usb 2-1: Manufacturer: syz
[ 751.219074][T15236] usb 2-1: SerialNumber: syz
[ 751.264279][T16669] fuse: Unknown parameter '0x0000000000000003'
[ 751.637060][T15236] usb 2-1: cannot find UAC_HEADER
[ 751.661207][T15236] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 751.823688][T16273] udevd[16273]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 752.413710][ T25] usb 2-1: USB disconnect, device number 52
[ 753.021483][T16693] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 753.339681][T16696] overlayfs: failed to clone upperpath
[ 753.649037][T15236] usb 6-1: new full-speed USB device number 52 using dummy_hcd
[ 754.650608][ T25] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[ 755.679076][ T25] usb 2-1: device descriptor read/64, error -71
[ 755.691015][T15236] usb 6-1: config index 0 descriptor too short (expected 31, got 27)
[ 755.715056][T16725] fuse: Unknown parameter '0x0000000000000003'
[ 755.721382][T15236] usb 6-1: config 1 interface 0 has no altsetting 0
[ 755.771844][T15236] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72
[ 755.781095][T15236] usb 6-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3
[ 755.790135][T15236] usb 6-1: Product: syz
[ 755.794358][T15236] usb 6-1: Manufacturer: syz
[ 755.799019][T15236] usb 6-1: SerialNumber: syz
[ 755.929679][ T25] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[ 755.951786][T16733] overlayfs: failed to clone upperpath
[ 756.079212][ T25] usb 2-1: device descriptor read/64, error -71
[ 756.119142][ T5865] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[ 756.357648][ T25] usb usb2-port1: attempt power cycle
[ 756.440778][ T5865] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[ 756.452447][ T5865] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[ 756.467651][ T5865] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[ 756.500885][ T5865] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[ 756.516273][ T5865] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 756.526263][ T5865] usb 1-1: Product: syz
[ 756.535834][ T5865] usb 1-1: Manufacturer: syz
[ 756.543604][ T5865] usb 1-1: SerialNumber: syz
[ 756.556053][ T5865] usb 1-1: config 0 descriptor??
[ 756.572688][ T5865] iguanair 1-1:0.0: probe with driver iguanair failed with error -12
[ 756.573330][T15236] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 52 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[ 756.786996][ T5865] usb 6-1: USB disconnect, device number 52
[ 757.035238][T15236] usb 1-1: USB disconnect, device number 61
[ 757.359197][ T5865] usblp0: removed
[ 757.989141][ T29] audit: type=1400 audit(1744793788.878:1127): avc: denied { ioctl } for pid=16758 comm="syz.0.3469" path="socket:[51865]" dev="sockfs" ino=51865 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[ 758.846428][T16780] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3476'.
[ 759.699186][ T970] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[ 759.960486][ T970] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 759.979105][ T970] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 760.047820][T16794] ptrace attach of "./syz-executor exec"[10167] was attempted by " eth0 #�u��u0*�i��Ƈ_���k�.\x22��#p� /��yL�a��~+>�����3�l {@!2�!��9k��\x0b8I$�Q �=r���\x09/�vӧ�J��#KT���_$A=z�/X�mOX)s�_�N���)��6m\x0a\x0b�뻑z�|d\x1b��yx�\x1bLTrw�|0\x09���\x5c�[� �]V :�Þ\x07x�� .TTϿ��a%�Q�CuT����YZy�!��Ѧ7�vs�\x07��j*�I��{]���*�5Jt�sĪ�~��0�fۮG����:Q\x1b㣤}�`e�L��\x0d�y�g1�\x09i/!�,�u��~)�\x1b2����j�����N��Th�\x1bo:�\x0bq7S�H�L���B��q�(� ��[�aF����*q�� �v� AN�����Te��L��+u�^��� �\x07���sha 넙���LD�7�DQ�2!8,�%$��֜y�K������ƴ�����%:��0��d��LWՐ�l\x1b��\x0bh�=m�.�\x0bh��Q}�8/��P��+:�E\x5c�Ԭ��ט���լ�C�R�r^g�Q(�>⺨=\x0c04� �*@v���Tځg�:hzW6s)x�� �\
[ 760.540060][ T970] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 760.657293][T15236] usb 6-1: new full-speed USB device number 53 using dummy_hcd
[ 760.707920][ T970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 760.716824][ T970] usb 5-1: SerialNumber: syz
[ 760.904222][T15236] usb 6-1: config index 0 descriptor too short (expected 31, got 27)
[ 760.912489][T15236] usb 6-1: config 1 interface 0 has no altsetting 0
[ 760.923836][T15236] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72
[ 760.971404][T15236] usb 6-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3
[ 761.105353][ T970] usb 5-1: cannot find UAC_HEADER
[ 761.194574][T15236] usb 6-1: Product: syz
[ 761.283783][T15236] usb 6-1: Manufacturer: syz
[ 761.361074][T15236] usb 6-1: SerialNumber: syz
[ 761.470114][ T970] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 761.522692][ T970] usb 5-1: USB disconnect, device number 53
[ 761.719537][T16273] udevd[16273]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 762.177235][T15236] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 53 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[ 762.357067][ T25] usb 6-1: USB disconnect, device number 53
[ 762.604656][T16789] usblp0: removed
[ 762.907335][T16830] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3495'.
[ 763.875907][ T25] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[ 764.159049][ T25] usb 5-1: Using ep0 maxpacket: 8
[ 764.179032][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 764.195878][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 764.210085][ T25] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 764.220055][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 764.286934][ T29] audit: type=1400 audit(1744793795.128:1128): avc: denied { append } for pid=16841 comm="syz.0.3499" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[ 764.321118][ T25] usb 5-1: config 0 descriptor??
[ 764.362117][ T25] iowarrior 5-1:0.0: no interrupt-in endpoint found
[ 766.210806][T15236] usb 5-1: USB disconnect, device number 54
[ 766.689171][ T25] usb 6-1: new full-speed USB device number 54 using dummy_hcd
[ 767.048761][T16887] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3510'.
[ 767.495443][ T25] usb 6-1: config index 0 descriptor too short (expected 31, got 27)
[ 767.515354][ T25] usb 6-1: config 1 interface 0 has no altsetting 0
[ 767.541841][ T25] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72
[ 767.571903][ T25] usb 6-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3
[ 767.584001][ T25] usb 6-1: Product: syz
[ 767.588749][ T25] usb 6-1: Manufacturer: syz
[ 767.593692][ T25] usb 6-1: SerialNumber: syz
[ 769.139855][ T25] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 54 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[ 769.359836][ T25] usb 6-1: USB disconnect, device number 54
[ 769.386195][ T25] usblp0: removed
[ 771.009730][T16933] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3529'.
[ 772.219649][ T5865] usb 6-1: new high-speed USB device number 55 using dummy_hcd
[ 772.455129][ T5865] usb 6-1: Using ep0 maxpacket: 32
[ 772.466677][ T5865] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 772.475871][ T5865] usb 6-1: config 255 has an invalid interface number: 81 but max is 0
[ 772.493101][ T5865] usb 6-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config
[ 772.507769][ T5865] usb 6-1: config 255 has no interface number 0
[ 772.514867][ T5865] usb 6-1: config 255 interface 81 altsetting 3 has an endpoint descriptor with address 0x93, changing to 0x83
[ 772.533932][ T5865] usb 6-1: config 255 interface 81 altsetting 3 endpoint 0x83 has invalid wMaxPacketSize 0
[ 772.546258][ T5865] usb 6-1: config 255 interface 81 has no altsetting 0
[ 772.558325][ T5865] usb 6-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac
[ 772.572235][ T5865] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 772.580993][ T5865] usb 6-1: Product: syz
[ 772.585230][ T5865] usb 6-1: Manufacturer: 諤ᯡ㉃畬ⶃﮅ廈ᾈ㵽跨혇弫⽥眚ꩣ뼣Ἑ攊昗磛뚷㶜郙댶⁆⩋넁猪⨚Ɫ㨪ꏊ夲箕
[ 772.619902][ T5865] usb 6-1: SerialNumber: syz
[ 772.937065][ T5865] input: 諤ᯡ㉃畬ⶃﮅ廈ᾈ㵽跨혇弫⽥眚ꩣ뼣Ἑ攊昗磛뚷㶜郙댶⁆⩋넁猪⨚Ɫ㨪ꏊ夲箕 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:255.81/input/input76
[ 772.989355][ T5865] usb 6-1: USB disconnect, device number 55
[ 773.082074][T16974] mkiss: ax0: crc mode is auto.
[ 774.899086][T15236] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[ 775.080555][T15236] usb 2-1: Using ep0 maxpacket: 32
[ 775.094577][T15236] usb 2-1: config index 0 descriptor too short (expected 249, got 27)
[ 775.103081][T15236] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 775.119153][T15236] usb 2-1: config 0 has no interfaces?
[ 775.127982][T15236] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[ 775.137800][T15236] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 775.171488][T15236] usb 2-1: config 0 descriptor??
[ 776.933670][T17030] mkiss: ax0: crc mode is auto.
[ 777.664611][ T51] usb 2-1: USB disconnect, device number 56
[ 779.292220][ T970] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[ 779.400121][T17064] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 779.415939][T17064] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 779.432185][T17064] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 779.450560][T17064] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 779.478093][ T970] usb 5-1: Using ep0 maxpacket: 8
[ 779.485175][ T970] usb 5-1: config 0 has an invalid interface number: 246 but max is 0
[ 779.500651][ T970] usb 5-1: config 0 has no interface number 0
[ 779.508676][ T970] usb 5-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3
[ 779.528216][ T970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 779.540030][ T970] usb 5-1: Product: syz
[ 779.544222][ T970] usb 5-1: Manufacturer: syz
[ 779.554982][ T970] usb 5-1: SerialNumber: syz
[ 779.566454][ T970] usb 5-1: config 0 descriptor??
[ 779.579068][ T5865] usb 6-1: new high-speed USB device number 56 using dummy_hcd
[ 779.637340][ T970] msi2500 5-1:0.246: Registered as swradio24
[ 779.645926][ T970] msi2500 5-1:0.246: SDR API is still slightly experimental and functionality changes may follow
[ 779.732579][ T5865] usb 6-1: config index 0 descriptor too short (expected 63506, got 18)
[ 779.747304][ T5865] usb 6-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b
[ 779.767619][ T5865] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 779.776942][ T5865] usb 6-1: Product: syz
[ 779.788070][ T5865] usb 6-1: Manufacturer: syz
[ 779.793873][ T5865] usb 6-1: SerialNumber: syz
[ 779.821184][ T970] usb 5-1: USB disconnect, device number 55
[ 780.020865][ T5865] usb 6-1: palm_os_4_probe - error -32 getting connection info
[ 780.036019][ T5865] visor 6-1:1.0: Handspring Visor / Palm OS converter detected
[ 780.055160][ T5865] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[ 780.073421][ T5865] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[ 780.094365][ T5865] usb 6-1: USB disconnect, device number 56
[ 780.268289][ T5865] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[ 780.289786][ T5865] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[ 780.306630][ T5865] visor 6-1:1.0: device disconnected
[ 781.177732][T17094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3588'.
[ 781.212861][T17095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3585'.
[ 781.222766][T17095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3585'.
[ 781.232212][T17095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3585'.
[ 781.242246][T17095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3585'.
[ 781.253484][T17095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3585'.
[ 781.263478][T17095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3585'.
[ 781.274370][T17095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3585'.
[ 781.284416][T17095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3585'.
[ 781.296317][T17095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3585'.
[ 781.907739][T17112] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 782.655064][T17119] macvtap1: entered promiscuous mode
[ 782.822183][T17122] syz_tun: entered allmulticast mode
[ 782.890721][T17121] syz_tun: left allmulticast mode
[ 785.129753][T17172] syz_tun: entered allmulticast mode
[ 785.146920][T17171] syz_tun: left allmulticast mode
[ 785.185861][ T5911] usb 6-1: new full-speed USB device number 57 using dummy_hcd
[ 785.510308][ T5911] usb 6-1: config index 0 descriptor too short (expected 31, got 27)
[ 785.519910][ T5911] usb 6-1: config 1 interface 0 has no altsetting 0
[ 785.536238][ T5911] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72
[ 785.551082][ T5911] usb 6-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3
[ 785.589052][ T5911] usb 6-1: Product: syz
[ 785.605189][ T5911] usb 6-1: Manufacturer: syz
[ 785.625696][ T5911] usb 6-1: SerialNumber: syz
[ 786.026867][ T29] audit: type=1400 audit(1744793816.918:1129): avc: denied { read } for pid=17180 comm="syz.0.3618" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[ 786.100745][ T5911] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 57 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[ 786.137138][ T29] audit: type=1400 audit(1744793816.948:1130): avc: denied { open } for pid=17180 comm="syz.0.3618" path="/88/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[ 786.170409][ T5911] usb 6-1: USB disconnect, device number 57
[ 786.209757][ T5911] usblp0: removed
[ 786.968436][T17195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 787.170599][T17195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 787.446698][T17200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 787.766792][T17212] lo: entered allmulticast mode
[ 787.772985][T17211] lo: left allmulticast mode
[ 789.911468][ T5830] Bluetooth: hci5: command 0x0406 tx timeout
[ 791.189135][ T5911] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[ 791.226476][T17265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 791.260724][T17265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 791.303095][T17265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 791.389754][ T5911] usb 2-1: Using ep0 maxpacket: 8
[ 791.430576][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 791.461481][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 791.471457][T17272] lo: entered allmulticast mode
[ 791.491695][ T5911] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 791.502344][T17271] lo: left allmulticast mode
[ 791.516670][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 791.526777][ T5911] usb 2-1: config 0 descriptor??
[ 791.755444][ T5911] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 791.947343][T17261] iowarrior 2-1:0.0: Error -90 while submitting URB
[ 791.961999][ T5911] usb 2-1: USB disconnect, device number 57
[ 792.429248][ T5911] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[ 792.669263][ T5911] usb 5-1: Using ep0 maxpacket: 32
[ 792.727445][ T5911] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 792.779333][T15236] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[ 792.787026][ T9] usb 6-1: new high-speed USB device number 58 using dummy_hcd
[ 792.790610][ T5911] usb 5-1: config 255 has an invalid interface number: 81 but max is 0
[ 792.821448][ T5911] usb 5-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config
[ 792.841960][ T5911] usb 5-1: config 255 has no interface number 0
[ 792.848661][ T5911] usb 5-1: config 255 interface 81 altsetting 3 has an endpoint descriptor with address 0x93, changing to 0x83
[ 792.878840][ T5911] usb 5-1: config 255 interface 81 altsetting 3 endpoint 0x83 has invalid wMaxPacketSize 0
[ 792.896502][ T5911] usb 5-1: config 255 interface 81 has no altsetting 0
[ 792.916688][ T5911] usb 5-1: string descriptor 0 read error: -22
[ 792.923313][ T5911] usb 5-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac
[ 792.932695][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 792.974416][ T5911] input: USB Touchscreen 0dfc:0001 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:255.81/input/input77
[ 792.989137][ T9] usb 6-1: Using ep0 maxpacket: 32
[ 793.001060][T15236] usb 1-1: config 0 has an invalid interface number: 137 but max is 0
[ 793.024914][T15236] usb 1-1: config 0 has no interface number 0
[ 793.041654][ T9] usb 6-1: config index 0 descriptor too short (expected 35577, got 27)
[ 793.056176][T15236] usb 1-1: config 0 interface 137 has no altsetting 0
[ 793.063645][ T9] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[ 793.073681][ T29] audit: type=1400 audit(1744793823.958:1131): avc: denied { mount } for pid=17296 comm="syz.1.3653" name="/" dev="autofs" ino=54433 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[ 793.078906][T15236] usb 1-1: New USB device found, idVendor=10b8, idProduct=1f9c, bcdDevice=90.83
[ 793.105525][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 793.138979][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92
[ 793.148159][ T9] usb 6-1: config 1 has no interface number 0
[ 793.162430][T15236] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 793.174630][ T9] usb 6-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17
[ 793.180546][ T29] audit: type=1400 audit(1744793824.068:1132): avc: denied { unmount } for pid=15072 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[ 793.203997][T15236] usb 1-1: config 0 descriptor??
[ 793.220459][ T9] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[ 793.259065][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 793.335640][ T9] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found
[ 794.021249][T15236] dvb-usb: found a 'DiBcom TFE8096P reference design' in warm state.
[ 794.212291][ T9] snd_usb_pod 6-1:1.1: endpoint not available, using fallback values
[ 794.252555][ T9] snd_usb_pod 6-1:1.1: invalid control EP
[ 794.380101][T15236] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 794.389474][ T9] snd_usb_pod 6-1:1.1: cannot start listening: -22
[ 794.406626][ T9] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected
[ 794.421506][T15236] dvbdev: DVB: registering new adapter (DiBcom TFE8096P reference design)
[ 794.434137][ T9] snd_usb_pod 6-1:1.1: probe with driver snd_usb_pod failed with error -22
[ 794.443980][T15236] usb 1-1: media controller created
[ 794.465073][ T9] usb 6-1: USB disconnect, device number 58
[ 794.486719][T15236] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 794.537874][T15236] DVB: Unable to find symbol dib8000_attach()
[ 794.544782][T15236] dvb-usb: no frontend was attached by 'DiBcom TFE8096P reference design'
[ 794.619384][T15236] rc_core: IR keymap rc-dib0700-rc5 not found
[ 794.628642][T15236] Registered IR keymap rc-empty
[ 794.637077][T15236] dvb-usb: could not initialize remote control.
[ 794.648665][T15236] dvb-usb: DiBcom TFE8096P reference design successfully initialized and connected.
[ 794.693289][T15236] usb 1-1: USB disconnect, device number 62
[ 794.784049][T15236] dvb-usb: DiBcom TFE8096P reference design successfully deinitialized and disconnected.
[ 795.190698][ T25] usb 5-1: USB disconnect, device number 56
[ 796.579069][T15236] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[ 796.751014][T15236] usb 1-1: Using ep0 maxpacket: 8
[ 796.755987][ T29] audit: type=1800 audit(1744793827.648:1133): pid=17333 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.3663" name="file1" dev="tmpfs" ino=2908 res=0 errno=0
[ 796.758633][T15236] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 796.797995][T15236] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 796.807403][T15236] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 796.824899][T15236] usb 1-1: config 0 descriptor??
[ 797.928147][T15236] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 798.241127][ T5867] usb 2-1: new full-speed USB device number 58 using dummy_hcd
[ 798.325859][ T8] usb 1-1: USB disconnect, device number 63
[ 798.362813][T17346] 9pnet_fd: Insufficient options for proto=fd
[ 798.470457][ T5867] usb 2-1: config index 0 descriptor too short (expected 31, got 27)
[ 798.482733][ T5867] usb 2-1: config 1 interface 0 has no altsetting 0
[ 798.493718][ T5867] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72
[ 798.506906][ T5867] usb 2-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3
[ 798.516394][ T5867] usb 2-1: Product: syz
[ 798.524084][ T5867] usb 2-1: Manufacturer: syz
[ 798.529393][ T5867] usb 2-1: SerialNumber: syz
[ 799.512794][ T5867] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 58 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[ 799.847926][ T5867] usb 2-1: USB disconnect, device number 58
[ 799.858050][ T5867] usblp0: removed
[ 803.039970][ T5865] usb 5-1: new full-speed USB device number 57 using dummy_hcd
[ 803.683001][ T5865] usb 5-1: config index 0 descriptor too short (expected 31, got 27)
[ 803.700137][ T5865] usb 5-1: config 1 interface 0 altsetting 253 endpoint 0x1 has invalid wMaxPacketSize 0
[ 803.779537][T17470] __nla_validate_parse: 45 callbacks suppressed
[ 803.779555][T17470] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3708'.
[ 803.788621][ T5865] usb 5-1: config 1 interface 0 has no altsetting 0
[ 803.858233][ T5865] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72
[ 803.884467][ T5865] usb 5-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3
[ 804.019407][ T5865] usb 5-1: Product: syz
[ 804.023614][ T5865] usb 5-1: Manufacturer: syz
[ 804.028223][ T5865] usb 5-1: SerialNumber: syz
[ 804.128336][T17481] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[ 805.395190][ T5865] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 57 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[ 805.616146][ T5865] usb 5-1: USB disconnect, device number 57
[ 805.828009][T17439] usblp0: removed
[ 808.322895][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[ 808.779097][ T5867] usb 2-1: new full-speed USB device number 59 using dummy_hcd
[ 808.956947][ T5867] usb 2-1: config index 0 descriptor too short (expected 31, got 27)
[ 808.968650][ T5867] usb 2-1: config 1 interface 0 has no altsetting 0
[ 808.992158][ T5867] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72
[ 809.009013][ T5867] usb 2-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3
[ 809.035849][ T5867] usb 2-1: Product: syz
[ 809.045644][ T5867] usb 2-1: Manufacturer: syz
[ 809.066947][ T5867] usb 2-1: SerialNumber: syz
[ 809.504664][ T5867] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 59 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[ 809.564758][ T5867] usb 2-1: USB disconnect, device number 59
[ 809.581330][ T5867] usblp0: removed
[ 810.756103][ T9] usb 6-1: new high-speed USB device number 59 using dummy_hcd
[ 810.857385][T17580] netlink: 1304 bytes leftover after parsing attributes in process `syz.0.3747'.
[ 810.909533][ T9] usb 6-1: Using ep0 maxpacket: 32
[ 810.926245][ T9] usb 6-1: config index 0 descriptor too short (expected 35577, got 27)
[ 811.050868][ T9] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[ 811.071252][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92
[ 811.113797][ T9] usb 6-1: config 1 has no interface number 0
[ 811.122563][ T9] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 811.138326][ T9] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 811.150918][ T9] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[ 811.170591][ T9] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[ 811.185372][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 811.219362][ T9] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found
[ 811.653999][T17597] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3752'.
[ 812.512912][ T9] snd_usb_pod 6-1:1.1: cannot start listening: -90
[ 812.536388][ T9] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected
[ 812.558512][ T9] snd_usb_pod 6-1:1.1: probe with driver snd_usb_pod failed with error -90
[ 812.661741][ T9] usb 6-1: USB disconnect, device number 59
[ 814.007049][ T25] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[ 814.059045][ T9] usb 6-1: new high-speed USB device number 60 using dummy_hcd
[ 814.183492][ T25] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 814.195013][ T25] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[ 814.204708][ T25] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 814.215623][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 814.269056][ T9] usb 6-1: Using ep0 maxpacket: 8
[ 814.293459][ T9] usb 6-1: config 0 has an invalid interface number: 122 but max is 0
[ 814.302333][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 814.313379][ T9] usb 6-1: config 0 has no interface number 0
[ 814.322262][ T9] usb 6-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64
[ 814.372229][ T9] usb 6-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8
[ 814.406276][ T9] usb 6-1: config 0 interface 122 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[ 814.419103][ T9] usb 6-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0
[ 814.504331][ T9] usb 6-1: config 0 interface 122 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 8
[ 814.526189][ T9] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7
[ 814.566310][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 814.581996][ T8] usb 5-1: USB disconnect, device number 58
[ 814.598542][ T9] usb 6-1: Product: syz
[ 814.612033][ T9] usb 6-1: Manufacturer: syz
[ 814.616947][ T9] usb 6-1: SerialNumber: syz
[ 814.627592][ T9] usb 6-1: config 0 descriptor??
[ 815.177796][T17616] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 815.308461][T17635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3765'.
[ 815.391420][ T9] usb 6-1: NFC: intf ffff888077a51000 id ffffffff8f11c360
[ 815.454996][ T9] nfcmrvl 6-1:0.122: NFC: registered with nci successfully
[ 815.474427][ T9] usb 6-1: USB disconnect, device number 60
[ 815.486670][ T9] usb 6-1: NFC: intf ffff888077a51000
[ 817.879916][T17678] hub 6-0:1.0: USB hub found
[ 817.886194][T17678] hub 6-0:1.0: 1 port detected
[ 818.921390][T17695] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3783'.
[ 819.347188][T17694] dccp_close: ABORT with 15604 bytes unread
[ 819.807341][T17712] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3787'.
[ 821.211139][T17746] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3799'.
[ 821.223482][T17746] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3799'.
[ 821.236946][T17746] netlink: 34 bytes leftover after parsing attributes in process `syz.5.3799'.
[ 821.389263][T17750] mkiss: ax0: crc mode is auto.
[ 822.644813][T17771] ref_ctr_offset mismatch. inode: 0xc14 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6
[ 822.939649][ T25] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[ 823.100501][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[ 823.269174][ T25] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[ 823.819718][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[ 823.873539][ T25] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[ 823.909395][ T25] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[ 824.219085][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 824.230274][ T25] usb 1-1: config 0 descriptor??
[ 824.433729][ T25] hdpvr 1-1:0.0: firmware version 0x33 dated ~�� x�e@�Vw��S�H0"nPm�B] .� Ǥ=�U� �O�+��
[ 824.433776][ T25] hdpvr 1-1:0.0: untested firmware, the driver might not work.
[ 824.655460][T17807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3822'.
[ 825.016187][ T25] hdpvr 1-1:0.0: Could not setup controls
[ 825.016431][ T25] hdpvr 1-1:0.0: registering videodev failed
[ 825.024632][ T25] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -71
[ 825.032090][ T25] usb 1-1: USB disconnect, device number 64
[ 825.771755][T17835] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3832'.
[ 827.429063][ T25] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[ 827.593047][ T25] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 242, using maximum allowed: 30
[ 827.605502][ T5865] usb 2-1: new full-speed USB device number 60 using dummy_hcd
[ 827.617724][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11
[ 827.639347][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 827.653818][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 242
[ 827.668087][ T25] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[ 827.685273][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 827.698441][ T25] usb 5-1: config 0 descriptor??
[ 827.790451][ T5865] usb 2-1: config index 0 descriptor too short (expected 31, got 27)
[ 827.799828][ T5865] usb 2-1: config 1 interface 0 has no altsetting 0
[ 827.819568][ T5865] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72
[ 827.828692][ T5865] usb 2-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3
[ 827.851655][ T5865] usb 2-1: Product: syz
[ 827.861368][ T5865] usb 2-1: Manufacturer: syz
[ 827.872681][ T5865] usb 2-1: SerialNumber: syz
[ 828.123617][ T25] corsair-cpro 0003:1B1C:0C10.0027: item fetching failed at offset 0/3
[ 828.132800][ T25] corsair-cpro 0003:1B1C:0C10.0027: probe with driver corsair-cpro failed with error -22
[ 828.358497][ T25] usb 5-1: USB disconnect, device number 59
[ 828.522751][ T5865] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 60 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[ 828.837960][ C1] usblp0: nonzero write bulk status received: -71
[ 828.838647][ T8] usb 2-1: USB disconnect, device number 60
[ 829.039745][T17869] usblp0: removed
[ 830.876007][ T5819] Bluetooth: hci3: command 0x0406 tx timeout
[ 831.231488][ T5819] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 831.242670][ T5819] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 831.260445][ T5819] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 831.270463][ T5819] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 831.279659][ T5819] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 831.289233][ T5819] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 831.368156][T17920] lo speed is unknown, defaulting to 1000
[ 831.399756][T17920] wlan0 speed is unknown, defaulting to 1000
[ 831.633093][T17934] hub 6-0:1.0: USB hub found
[ 831.639037][T17934] hub 6-0:1.0: 1 port detected
[ 832.091256][T17920] chnl_net:caif_netlink_parms(): no params data found
[ 832.475510][T17920] bridge0: port 1(bridge_slave_0) entered blocking state
[ 832.530246][T17920] bridge0: port 1(bridge_slave_0) entered disabled state
[ 832.530527][ T8] usb 6-1: new full-speed USB device number 61 using dummy_hcd
[ 832.589209][T17920] bridge_slave_0: entered allmulticast mode
[ 832.616440][T17920] bridge_slave_0: entered promiscuous mode
[ 832.643245][T17920] bridge0: port 2(bridge_slave_1) entered blocking state
[ 832.669137][T17920] bridge0: port 2(bridge_slave_1) entered disabled state
[ 832.679334][T17920] bridge_slave_1: entered allmulticast mode
[ 832.758798][ T8] usb 6-1: config index 0 descriptor too short (expected 31, got 27)
[ 832.775692][ T8] usb 6-1: config 1 interface 0 has no altsetting 0
[ 832.795185][ T8] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72
[ 832.924010][T17920] bridge_slave_1: entered promiscuous mode
[ 832.932916][ T8] usb 6-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3
[ 832.976655][ T8] usb 6-1: Product: syz
[ 832.995330][ T8] usb 6-1: Manufacturer: syz
[ 833.003447][ T8] usb 6-1: SerialNumber: syz
[ 833.011808][T17920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 833.033822][T17920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 833.107379][T17920] team0: Port device team_slave_0 added
[ 833.134615][T17920] team0: Port device team_slave_1 added
[ 833.226356][T17920] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 833.257162][T17920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 833.294448][T17920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 833.313088][T17920] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 833.344581][T17920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 833.349137][ T5830] Bluetooth: hci4: command tx timeout
[ 833.458863][T17920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 833.880915][ T8] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 61 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[ 833.901885][ T8] usb 6-1: USB disconnect, device number 61
[ 833.940292][ T8] usblp0: removed
[ 833.958334][T17920] hsr_slave_0: entered promiscuous mode
[ 833.986077][T17920] hsr_slave_1: entered promiscuous mode
[ 834.005208][T17920] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 834.023140][T17920] Cannot create hsr debugfs directory
[ 834.415149][T17973] hub 6-0:1.0: USB hub found
[ 834.421574][T17973] hub 6-0:1.0: 1 port detected
[ 834.643720][T17920] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 835.429239][ T5830] Bluetooth: hci4: command tx timeout
[ 835.512540][T17920] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 835.780343][T17920] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 836.139419][T17920] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 836.703533][T17920] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 836.762262][T17920] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 836.792146][T17920] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 836.823000][T17920] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 837.674485][ T5830] Bluetooth: hci4: command tx timeout
[ 837.738353][T18010] input: syz0 as /devices/virtual/input/input79
[ 837.952447][T17920] 8021q: adding VLAN 0 to HW filter on device bond0
[ 837.966592][T17920] 8021q: adding VLAN 0 to HW filter on device team0
[ 837.988712][ T977] bridge0: port 1(bridge_slave_0) entered blocking state
[ 837.997261][ T977] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 838.148272][T17920] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 838.265097][T17920] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 838.291500][ T977] bridge0: port 2(bridge_slave_1) entered blocking state
[ 838.298610][ T977] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 839.212682][T17920] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 839.457829][T18035] netlink: 'syz.0.3895': attribute type 1 has an invalid length.
[ 839.465792][T18035] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3895'.
[ 839.864398][ T5830] Bluetooth: hci4: command tx timeout
[ 840.356335][T17920] veth0_vlan: entered promiscuous mode
[ 840.376255][T17920] veth1_vlan: entered promiscuous mode
[ 840.414415][T18045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3897'.
[ 840.443667][T17920] veth0_macvtap: entered promiscuous mode
[ 840.472011][T17920] veth1_macvtap: entered promiscuous mode
[ 840.505107][T17920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 840.544278][T17920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 840.564541][T17920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 840.585322][T17920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 840.610675][T17920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 840.663047][T17920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 840.688370][T17920] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 840.698309][T17920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 840.717884][T17920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 840.744655][T17920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 840.758666][T17920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 840.770033][T17920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 840.780925][T17920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 840.795653][T17920] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 840.926623][T17920] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 840.979105][T17920] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 841.007459][T17920] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 841.025096][T17920] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 841.540764][ T977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 841.580707][ T977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 841.682236][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 841.700845][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 842.216903][T18073] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[ 842.773568][ T5865] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[ 843.284295][ T5865] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 843.345957][ T29] audit: type=1400 audit(1744793874.208:1134): avc: denied { getopt } for pid=18077 comm="syz.4.3907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 843.387672][ T5865] usb 7-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 843.473708][ T5865] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 843.616566][ T5865] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 843.738012][ T5865] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 843.779347][ T5865] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[ 843.830158][ T5865] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -2
[ 843.983096][ T25] usb 7-1: USB disconnect, device number 15
[ 844.151247][ T5865] usb 6-1: new full-speed USB device number 62 using dummy_hcd
[ 844.383192][ T5865] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 844.414775][T17166] udevd[17166]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 844.439055][ T5865] usb 6-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.00
[ 844.471247][ T5865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 844.507992][ T5865] usb 6-1: config 0 descriptor??
[ 844.943954][ T5865] cypress 0003:04B4:ED81.0028: unknown main item tag 0x0
[ 844.959042][ T5865] cypress 0003:04B4:ED81.0028: unknown main item tag 0x0
[ 844.974605][ T5865] cypress 0003:04B4:ED81.0028: unknown main item tag 0x0
[ 844.989696][ T5865] cypress 0003:04B4:ED81.0028: unknown main item tag 0x0
[ 845.019175][ T5865] cypress 0003:04B4:ED81.0028: unknown main item tag 0x0
[ 845.045880][ T5865] cypress 0003:04B4:ED81.0028: hidraw0: USB HID v0.00 Device [HID 04b4:ed81] on usb-dummy_hcd.5-1/input0
[ 845.337315][ T5865] usb 6-1: USB disconnect, device number 62
[ 848.967907][T18146] mkiss: ax0: crc mode is auto.
[ 849.435795][ T29] audit: type=1800 audit(1744793880.328:1135): pid=18149 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.3931" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[ 849.457507][ C1] vkms_vblank_simulate: vblank timer overrun
[ 850.107530][T18159] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3932'.
[ 850.583646][ T29] audit: type=1400 audit(1744793881.468:1136): avc: denied { unmount } for pid=15283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[ 850.611649][T18158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3933'.
[ 850.644983][T18158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3933'.
[ 850.679207][T18158] nbd: socks must be embedded in a SOCK_ITEM attr
[ 850.929079][ T9] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[ 851.519234][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 851.535549][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 851.546489][ T9] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[ 851.558957][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 851.638675][ T9] usb 5-1: config 0 descriptor??
[ 852.074869][ T9] usbhid 5-1:0.0: can't add hid device: -71
[ 852.088071][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 852.117497][ T9] usb 5-1: USB disconnect, device number 60
[ 852.312727][T18196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 852.333533][T18196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 852.347073][T18196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 852.388541][T18200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3950'.
[ 852.984640][ T5865] usb 5-1: new full-speed USB device number 61 using dummy_hcd
[ 853.190401][ T5865] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 853.228227][T18217] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3958'.
[ 853.264955][ T5865] usb 5-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.00
[ 853.363666][ T5865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 854.464424][ T5865] usb 5-1: config 0 descriptor??
[ 854.628886][T18229] overlayfs: missing 'lowerdir'
[ 854.945103][ T5865] usbhid 5-1:0.0: can't add hid device: -71
[ 854.952470][ T5865] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 855.001876][ T5865] usb 5-1: USB disconnect, device number 61
[ 855.040289][ T5868] usb 6-1: new high-speed USB device number 63 using dummy_hcd
[ 855.509772][ T5868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 855.705940][ T5868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 855.748644][ T5868] usb 6-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[ 855.788434][ T5868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 855.820414][ T5868] usb 6-1: config 0 descriptor??
[ 856.117101][T18244] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3966'.
[ 856.836133][ T29] audit: type=1400 audit(1744793887.718:1137): avc: denied { ioctl } for pid=18245 comm="syz.4.3967" path="socket:[58047]" dev="sockfs" ino=58047 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[ 856.949717][ T5868] usbhid 6-1:0.0: can't add hid device: -71
[ 856.958626][ T5868] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 856.989990][ T5868] usb 6-1: USB disconnect, device number 63
[ 857.683630][T15236] IPVS: starting estimator thread 0...
[ 857.851304][T18263] IPVS: using max 34 ests per chain, 81600 per kthread
[ 858.269036][ T973] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[ 858.888131][ T973] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 858.888158][ T973] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 858.890178][ T973] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 858.890202][ T973] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 858.890220][ T973] usb 7-1: SerialNumber: syz
[ 859.120753][ T973] usb 7-1: cannot find UAC_HEADER
[ 859.730909][ T973] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 859.740109][ T973] usb 7-1: USB disconnect, device number 16
[ 859.928535][ T29] audit: type=1400 audit(1744793890.818:1138): avc: denied { append } for pid=18293 comm="syz.1.3981" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[ 859.928641][T18294] random: crng reseeded on system resumption
[ 859.955140][T15236] usb 6-1: new full-speed USB device number 64 using dummy_hcd
[ 860.024761][T17166] udevd[17166]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 860.760649][T15236] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 860.760675][T15236] usb 6-1: config 1 has no interface number 1
[ 860.760699][T15236] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 860.762282][T15236] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 860.762314][T15236] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 860.762333][T15236] usb 6-1: Product: syz
[ 860.762346][T15236] usb 6-1: Manufacturer: syz
[ 860.762359][T15236] usb 6-1: SerialNumber: syz
[ 860.902766][T18307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3984'.
[ 861.784985][ T973] IPVS: starting estimator thread 0...
[ 861.905709][T18312] IPVS: using max 36 ests per chain, 86400 per kthread
[ 861.952638][T18320] autofs: Bad value for 'fd'
[ 862.028616][T18323] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3989'.
[ 862.038870][T18323] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3989'.
[ 862.052042][T18323] gretap0: entered promiscuous mode
[ 862.058263][T18323] batadv_slave_1: entered promiscuous mode
[ 862.715076][ T29] audit: type=1400 audit(1744793893.158:1139): avc: denied { bind } for pid=18325 comm="syz.4.3991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[ 862.762685][ T29] audit: type=1400 audit(1744793893.168:1140): avc: denied { ioctl } for pid=18325 comm="syz.4.3991" path="socket:[58534]" dev="sockfs" ino=58534 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[ 863.181641][T15236] usb 6-1: 2:1 : unsupported format bits 0x40
[ 863.201375][T15236] usb 6-1: USB disconnect, device number 64
[ 863.400459][T17166] udevd[17166]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 863.886771][T18357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4003'.
[ 863.897564][T18357] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4003'.
[ 863.929109][T18357] nbd: socks must be embedded in a SOCK_ITEM attr
[ 863.978683][ T29] audit: type=1800 audit(1744793894.868:1141): pid=18361 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.4005" name="file1" dev="tmpfs" ino=979 res=0 errno=0
[ 864.308076][T18367] autofs: Bad value for 'fd'
[ 864.513677][T18377] ptrace attach of "./syz-executor exec"[17920] was attempted by " eth0 #�u��u0*�i��Ƈ_���k�.\x22��#p� /��yL�a��~+>�����3�l {@!2�!��9k��\x0b8I$�Q �=r���\x09/�vӧ�J��#KT���_$A=z�/X�mOX)s�_�N���)��6m\x0a\x0b�뻑z�|d\x1b��yx�\x1bLTrw�|0\x09���\x5c�[� �]V :�Þ\x07x�� .TTϿ��a%�Q�CuT����YZy�!��Ѧ7�vs�\x07��j*�I��{]���*�5Jt�sĪ�~��0�fۮG����:Q\x1b㣤}�`e�L��\x0d�y�g1�\x09i/!�,�u��~)�\x1b2����j�����N��Th�\x1bo:�\x0bq7S�H�L���B��q�(� ��[�aF����*q�� �v� AN�����Te��L��+u�^��� �\x07���sha 넙���LD�7�DQ�2!8,�%$��֜y�K������ƴ�����%:��0��d��LWՐ�l\x1b��\x0bh�=m�.�\x0bh��Q}�8/��P��+:�E\x5c�Ԭ��ט���լ�C�R�r^g�Q(�>⺨=\x0c04� �*@v���Tځg�:hzW6s)x�� �\
[ 864.859050][ T973] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[ 864.950104][ C1] vkms_vblank_simulate: vblank timer overrun
[ 865.209205][ T973] usb 5-1: Using ep0 maxpacket: 16
[ 865.221787][ T973] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 865.235058][ T973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 865.287912][ T973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 865.338831][ T973] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 865.367165][ T973] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 865.562189][ T973] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 865.579161][ T973] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 865.588794][ T973] usb 5-1: Manufacturer: syz
[ 865.601292][ T973] usb 5-1: config 0 descriptor??
[ 865.700272][T18396] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4016'.
[ 866.207509][ T29] audit: type=1400 audit(1744793897.098:1142): avc: denied { write } for pid=18395 comm="syz.0.4018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[ 866.219677][ T973] rc_core: IR keymap rc-hauppauge not found
[ 866.279017][ T973] Registered IR keymap rc-empty
[ 866.297321][ T973] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 866.349119][ T973] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 866.389562][ T973] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[ 866.433324][ T973] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input80
[ 866.472752][ T973] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 866.482778][ C1] mceusb 5-1:0.0: long-range (0x14) receiver active
[ 866.539049][ T973] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 866.572831][ T973] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 866.603104][T18409] overlayfs: failed to resolve './file0': -2
[ 866.609161][ T973] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 866.629551][ T973] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 866.659760][ T973] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 866.694545][ T973] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 866.719060][ T973] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 866.761715][ T973] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 866.819065][ T973] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 866.860344][ T973] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 866.864559][T18416] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4023'.
[ 866.899020][ T973] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x14 active)
[ 866.942989][ T973] usb 5-1: USB disconnect, device number 62
[ 866.960625][T18416] tipc: Started in network mode
[ 866.965519][T18416] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[ 867.012837][T18416] tipc: Enabled bearer <eth:team0>, priority 0
[ 867.012854][T18419] futex_wake_op: syz.0.4023 tries to shift op by -1; fix this program
[ 868.139073][ T970] tipc: Node number set to 11578026
[ 868.322924][T18437] xt_hashlimit: overflow, rate too high: 0
[ 868.483166][T18441] overlayfs: failed to resolve './file0': -2
[ 868.990721][T18449] delete_channel: no stack
[ 868.995534][T18449] delete_channel: no stack
[ 869.789340][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[ 870.990707][ T29] audit: type=1800 audit(1744793901.888:1143): pid=18480 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.4046" name="file1" dev="tmpfs" ino=1047 res=0 errno=0
[ 871.156752][ T5865] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[ 871.755325][ T5911] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[ 871.890941][ T5865] usb 7-1: Using ep0 maxpacket: 16
[ 871.899550][ T5865] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 871.910705][ T5865] usb 7-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00
[ 871.920386][ T5865] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 871.934209][ T5865] usb 7-1: config 0 descriptor??
[ 871.998392][ T5911] usb 5-1: Using ep0 maxpacket: 16
[ 872.010912][ T5911] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 872.020070][ T5911] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 872.034943][T18492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4047'.
[ 872.045945][ T5911] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 872.057657][ T5911] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 872.068444][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 872.076913][ T5911] usb 5-1: Product: syz
[ 872.081639][ T5911] usb 5-1: Manufacturer: syz
[ 872.086315][ T5911] usb 5-1: SerialNumber: syz
[ 872.189096][ T973] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[ 872.339152][ T973] usb 1-1: Using ep0 maxpacket: 8
[ 872.350365][ T973] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[ 872.361976][ T5865] glorious 0003:258A:0036.0029: item fetching failed at offset 0/3
[ 872.370444][ T973] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 872.383198][ T5865] glorious 0003:258A:0036.0029: probe with driver glorious failed with error -22
[ 872.392774][ T973] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 872.417714][ T973] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 872.445115][ T973] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 872.470672][ T973] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 872.480096][ T973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 872.514527][ T5911] usb 5-1: 0:2 : does not exist
[ 872.589459][T15236] usb 7-1: USB disconnect, device number 17
[ 872.696364][ T973] usb 1-1: usb_control_msg returned -32
[ 872.702101][ T973] usbtmc 1-1:16.0: can't read capabilities
[ 873.901387][ T29] audit: type=1400 audit(1744793904.788:1144): avc: denied { append } for pid=18507 comm="syz.1.4054" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[ 874.066906][T18513] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[ 874.067121][ T5911] usb 5-1: 1:0: failed to get current value for ch 0 (-22)
[ 874.693073][ T5911] usb 5-1: USB disconnect, device number 63
[ 875.608538][ T973] usb 1-1: USB disconnect, device number 65
[ 876.769176][ T973] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[ 876.967681][ T5830] Bluetooth: hci3: unexpected event 0x09 length: 9 > 3
[ 877.032668][T18553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4066'.
[ 877.080253][ T973] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 877.097339][ T973] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 877.120499][ T973] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 877.136943][ T973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 877.155991][T18557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 877.166335][ T973] usb 2-1: SerialNumber: syz
[ 877.189391][T18557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 877.242434][T18557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 877.441996][ T973] usb 2-1: cannot find UAC_HEADER
[ 877.494944][ T973] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 877.813820][T18561] program syz.5.4070 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 877.869477][ T973] usb 2-1: USB disconnect, device number 61
[ 878.181068][T17166] udevd[17166]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 879.072144][ T5830] Bluetooth: hci5: unexpected event 0x09 length: 9 > 3
[ 880.071641][T15236] IPVS: starting estimator thread 0...
[ 880.112655][ T29] audit: type=1400 audit(1744793910.998:1145): avc: denied { mount } for pid=18612 comm="syz.5.4088" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[ 880.117510][T18617] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 880.144430][ T9] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[ 880.156275][T18613] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 880.169055][T18617] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 880.219128][T18611] IPVS: using max 33 ests per chain, 79200 per kthread
[ 880.251509][ T29] audit: type=1400 audit(1744793911.148:1146): avc: denied { unmount } for pid=15959 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[ 880.271502][ C1] vkms_vblank_simulate: vblank timer overrun
[ 880.342112][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 880.367312][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 880.410310][ T9] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 880.462248][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 880.572647][ T9] usb 2-1: SerialNumber: syz
[ 880.852224][ T9] usb 2-1: cannot find UAC_HEADER
[ 880.859113][ T9] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 880.860870][ T9] usb 2-1: USB disconnect, device number 62
[ 881.058334][T17166] udevd[17166]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 881.569450][T18645] overlayfs: failed to resolve './file1': -2
[ 882.363845][ T973] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[ 882.739085][ T973] usb 7-1: Using ep0 maxpacket: 16
[ 882.752415][ T973] usb 7-1: config 0 has an invalid interface number: 41 but max is 0
[ 882.919381][ T973] usb 7-1: config 0 has no interface number 0
[ 882.949281][ T973] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 882.994764][ T973] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[ 883.039725][ T973] usb 7-1: config 0 interface 41 has no altsetting 0
[ 883.058087][ T973] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[ 883.087304][ T973] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 883.109109][ T973] usb 7-1: Product: syz
[ 883.129308][ T973] usb 7-1: Manufacturer: syz
[ 883.139046][ T973] usb 7-1: SerialNumber: syz
[ 883.170150][ T973] usb 7-1: config 0 descriptor??
[ 883.183388][T18636] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 883.199300][T18636] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 883.423460][T18636] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 883.432668][T18636] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 883.875289][ T973] Error reading MAC address
[ 883.892042][T18636] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 883.919221][T18636] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 884.376965][ T973] sr9700 7-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address
[ 884.519470][ T5911] usb 6-1: new high-speed USB device number 65 using dummy_hcd
[ 884.574747][ T973] usb 7-1: USB disconnect, device number 18
[ 884.682258][ T5911] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 884.713618][ T5911] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 884.740030][ T5911] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 884.758629][ T5911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 884.767304][ T5911] usb 6-1: SerialNumber: syz
[ 885.023313][T18693] overlayfs: failed to resolve './file0': -2
[ 885.329864][ T5911] usb 6-1: cannot find UAC_HEADER
[ 885.480123][ T5911] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 885.658189][ T5911] usb 6-1: USB disconnect, device number 65
[ 886.202886][T18707] netlink: 1304 bytes leftover after parsing attributes in process `syz.6.4116'.
[ 886.300054][T17166] udevd[17166]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 889.801295][ T29] audit: type=1400 audit(1744793920.548:1147): avc: denied { create } for pid=18730 comm="syz.4.4129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[ 889.905586][T18736] overlayfs: failed to resolve './file0': -2
[ 890.476171][ T970] usb 6-1: new high-speed USB device number 66 using dummy_hcd
[ 890.679272][ T5911] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[ 890.859465][ T5911] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 890.890798][ T5911] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 890.909005][ T970] usb 6-1: Using ep0 maxpacket: 16
[ 890.913539][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 890.915545][ T970] usb 6-1: config 0 has an invalid interface number: 41 but max is 0
[ 890.933627][ T5911] usb 2-1: Product: syz
[ 890.946843][ T5911] usb 2-1: Manufacturer: syz
[ 890.954403][ T5911] usb 2-1: SerialNumber: syz
[ 890.956568][ T970] usb 6-1: config 0 has no interface number 0
[ 890.979621][ T5911] hub 2-1:1.0: bad descriptor, ignoring hub
[ 890.980405][ T970] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 890.985537][ T5911] hub 2-1:1.0: probe with driver hub failed with error -5
[ 891.007483][ T970] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[ 891.017468][ T970] usb 6-1: config 0 interface 41 has no altsetting 0
[ 891.025865][ T970] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[ 891.069574][ T970] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 891.077599][ T970] usb 6-1: Product: syz
[ 891.086448][ T970] usb 6-1: Manufacturer: syz
[ 891.096188][ T970] usb 6-1: SerialNumber: syz
[ 891.111526][ T970] usb 6-1: config 0 descriptor??
[ 891.117397][T18729] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 891.129224][T15236] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[ 891.129275][T18729] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 891.362188][T18729] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 891.369878][T18729] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 891.409017][T15236] usb 1-1: Using ep0 maxpacket: 8
[ 891.444515][T15236] usb 1-1: config 0 has an invalid interface number: 246 but max is 0
[ 891.478425][T15236] usb 1-1: config 0 has no interface number 0
[ 891.534309][T15236] usb 1-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3
[ 891.557836][T15236] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 891.604059][T15236] usb 1-1: Product: syz
[ 891.637937][T15236] usb 1-1: Manufacturer: syz
[ 891.669463][T15236] usb 1-1: SerialNumber: syz
[ 891.737592][T15236] usb 1-1: config 0 descriptor??
[ 891.784839][ T970] Error reading MAC address
[ 891.809507][T18729] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 891.857548][T18729] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 891.891514][T15236] msi2500 1-1:0.246: Registered as swradio24
[ 891.898289][T15236] msi2500 1-1:0.246: SDR API is still slightly experimental and functionality changes may follow
[ 891.997550][T15236] usb 1-1: USB disconnect, device number 66
[ 892.093065][ T5911] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 892.099677][ T5911] cdc_ncm 2-1:1.0: setting tx_max = 184
[ 892.152962][ T5911] cdc_ncm 2-1:1.0 eth9: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[ 892.421357][ T970] sr9700 6-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address
[ 892.438868][ T970] usb 6-1: USB disconnect, device number 66
[ 892.542477][ T5911] usb 2-1: USB disconnect, device number 63
[ 892.596323][ T5911] cdc_ncm 2-1:1.0 eth9: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP)
[ 893.416299][T18787] overlayfs: failed to resolve './file0': -2
[ 894.479507][ T5868] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[ 894.508990][ T5911] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[ 894.630038][T18815] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4156'.
[ 895.269087][ T5911] usb 2-1: Using ep0 maxpacket: 8
[ 895.274246][ T5868] usb 1-1: Using ep0 maxpacket: 32
[ 895.295783][ T5911] usb 2-1: config 0 has an invalid interface number: 246 but max is 0
[ 895.327933][ T5868] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 895.340114][ T5911] usb 2-1: config 0 has no interface number 0
[ 895.350537][ T5868] usb 1-1: unable to read config index 0 descriptor/start: -71
[ 895.362016][ T5911] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3
[ 895.377448][ T5868] usb 1-1: can't read configurations, error -71
[ 895.385873][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 895.398734][ T5911] usb 2-1: Product: syz
[ 895.403179][ T5911] usb 2-1: Manufacturer: syz
[ 895.408021][ T5911] usb 2-1: SerialNumber: syz
[ 895.418467][ T5911] usb 2-1: config 0 descriptor??
[ 895.470712][ T5911] msi2500 2-1:0.246: Registered as swradio24
[ 895.478778][ T5911] msi2500 2-1:0.246: SDR API is still slightly experimental and functionality changes may follow
[ 895.689917][ T8] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[ 895.783531][T15236] usb 2-1: USB disconnect, device number 64
[ 895.949229][ T8] usb 7-1: Using ep0 maxpacket: 16
[ 895.963013][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 896.009226][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 896.027113][ T8] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 896.048983][ T8] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[ 896.068974][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 896.090419][ T8] usb 7-1: config 0 descriptor??
[ 896.150137][ T5911] usb 6-1: new high-speed USB device number 67 using dummy_hcd
[ 896.309596][ T5911] usb 6-1: Using ep0 maxpacket: 16
[ 896.329043][ T5911] usb 6-1: config 0 has an invalid interface number: 41 but max is 0
[ 896.344240][ T5911] usb 6-1: config 0 has no interface number 0
[ 896.354351][ T5911] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 896.365272][ T5911] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[ 896.375347][ T5911] usb 6-1: config 0 interface 41 has no altsetting 0
[ 896.383848][ T5911] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[ 896.393185][ T5911] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 896.407262][ T5911] usb 6-1: Product: syz
[ 896.531375][ T8] shield 0003:0955:7214.002A: unknown main item tag 0x0
[ 896.556245][ T5911] usb 6-1: Manufacturer: syz
[ 896.561855][ T5911] usb 6-1: SerialNumber: syz
[ 896.579296][ T8] shield 0003:0955:7214.002A: unknown main item tag 0x0
[ 896.586282][ T8] shield 0003:0955:7214.002A: unknown main item tag 0x0
[ 896.589635][ T5911] usb 6-1: config 0 descriptor??
[ 896.594048][ T8] shield 0003:0955:7214.002A: unknown main item tag 0x0
[ 896.605580][ T8] shield 0003:0955:7214.002A: unknown main item tag 0x0
[ 896.607018][T18826] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 896.614830][ T8] input: HID 0955:7214 Haptics as /devices/virtual/input/input81
[ 896.649181][T18826] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 896.688565][ T8] shield 0003:0955:7214.002A: Registered Thunderstrike controller
[ 896.699088][ T8] shield 0003:0955:7214.002A: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.6-1/input0
[ 896.769681][ T970] shield 0003:0955:7214.002A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[ 896.793900][ T8] usb 7-1: USB disconnect, device number 19
[ 896.804318][ T970] shield 0003:0955:7214.002A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[ 896.825239][ T970] shield 0003:0955:7214.002A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[ 896.863721][ T970] shield 0003:0955:7214.002A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[ 896.875745][T18826] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 896.906099][T18826] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 897.179478][ T970] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[ 897.413854][ T970] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 897.496994][ T970] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 897.621989][ T970] usb 5-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 897.782391][ T5911] Error reading MAC address
[ 897.787408][ T29] audit: type=1400 audit(1744793928.218:1148): avc: denied { bind } for pid=18843 comm="syz.0.4166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[ 897.808719][T18826] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 897.808803][T18826] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 897.828729][ T970] usb 5-1: config 1 interface 0 has no altsetting 1
[ 897.853139][ T29] audit: type=1400 audit(1744793928.218:1149): avc: denied { write } for pid=18843 comm="syz.0.4166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[ 897.862591][ T970] usb 5-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75
[ 897.979594][ T970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 897.988099][ T970] usb 5-1: Product: syz
[ 897.992908][ T970] usb 5-1: Manufacturer: syz
[ 897.997512][ T970] usb 5-1: SerialNumber: syz
[ 898.011665][ T970] smsusb:smsusb_probe: board id=8, interface number 0
[ 898.172812][ T5911] sr9700 6-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address
[ 898.316717][ T5911] usb 6-1: USB disconnect, device number 67
[ 898.497490][ T970] smsusb:smsusb_probe: Device initialized with return code -19
[ 899.919269][T15236] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[ 899.935267][ T29] audit: type=1400 audit(1744793930.828:1150): avc: denied { override_creds } for pid=18885 comm="syz.5.4178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[ 900.006337][T18892] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4179'.
[ 900.022798][T18892] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[ 900.030819][T18892] futex_wake_op: syz.0.4179 tries to shift op by -1; fix this program
[ 900.089058][T15236] usb 7-1: Using ep0 maxpacket: 8
[ 900.097329][T15236] usb 7-1: config 0 has an invalid interface number: 55 but max is 0
[ 900.108153][T15236] usb 7-1: config 0 has no interface number 0
[ 900.240766][T15236] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 900.273599][T15236] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 900.384253][T18896] ------------[ cut here ]------------
[ 900.390108][T18896] kernel BUG at mm/hugetlb.c:2333!
[ 900.395226][T18896] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI
[ 900.402332][T18896] CPU: 1 UID: 0 PID: 18896 Comm: syz.0.4180 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0
[ 900.413085][T18896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 900.423132][T18896] RIP: 0010:alloc_hugetlb_folio_reserve+0xac/0xc0
[ 900.429557][T18896] Code: a3 d0 00 00 00 e8 e4 43 a2 ff 48 c7 c7 40 56 e1 8d e8 f8 f4 41 09 48 89 e8 5b 5d 41 5c 41 5d c3 cc cc cc cc e8 c5 43 a2 ff 90 <0f> 0b e8 2d 5c 05 00 eb ac 66 66 2e 0f 1f 84 00 00 00 00 00 90 90
[ 900.449166][T18896] RSP: 0018:ffffc9000490f900 EFLAGS: 00010083
[ 900.455231][T18896] RAX: 0000000000001575 RBX: ffffffff9a8d8758 RCX: ffffc9000eaf2000
[ 900.463199][T18896] RDX: 0000000000080000 RSI: ffffffff8217901b RDI: 0000000000000007
[ 900.471167][T18896] RBP: ffffea0008eb0000 R08: 0000000000000007 R09: 0000000000000000
[ 900.479135][T18896] R10: 0000000000000000 R11: 00000000000000c0 R12: 0000000000000000
[ 900.487103][T18896] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000015
[ 900.495070][T18896] FS: 00007f1c8d7e46c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[ 900.503986][T18896] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 900.510550][T18896] CR2: 0000001b2e805ff8 CR3: 00000000620a6000 CR4: 00000000003526f0
[ 900.518502][T18896] Call Trace:
[ 900.521760][T18896] <TASK>
[ 900.524672][T18896] ? die+0x31/0x80
[ 900.528383][T18896] ? do_trap+0x232/0x430
[ 900.532607][T18896] ? alloc_hugetlb_folio_reserve+0xac/0xc0
[ 900.538397][T18896] ? alloc_hugetlb_folio_reserve+0xac/0xc0
[ 900.544184][T18896] ? do_error_trap+0xf4/0x230
[ 900.548852][T18896] ? alloc_hugetlb_folio_reserve+0xac/0xc0
[ 900.554652][T18896] ? handle_invalid_op+0x34/0x40
[ 900.559581][T18896] ? alloc_hugetlb_folio_reserve+0xac/0xc0
[ 900.565372][T18896] ? exc_invalid_op+0x2e/0x50
[ 900.570034][T18896] ? asm_exc_invalid_op+0x1a/0x20
[ 900.575047][T18896] ? alloc_hugetlb_folio_reserve+0xab/0xc0
[ 900.580835][T18896] ? alloc_hugetlb_folio_reserve+0xac/0xc0
[ 900.586633][T18896] memfd_alloc_folio+0x16c/0x3b0
[ 900.591556][T18896] memfd_pin_folios+0xe8c/0x1150
[ 900.596473][T18896] ? __pfx_memfd_pin_folios+0x10/0x10
[ 900.601848][T18896] ? lock_acquire.part.0+0x155/0x380
[ 900.607145][T18896] ? __pfx_down_read+0x10/0x10
[ 900.611893][T18896] ? __fget_files+0x206/0x3a0
[ 900.616549][T18896] udmabuf_create+0x641/0x11e0
[ 900.621296][T18896] ? __pfx_udmabuf_create+0x10/0x10
[ 900.626469][T18896] ? lock_acquire+0x2f/0xb0
[ 900.630953][T18896] ? __might_fault+0xe3/0x190
[ 900.635612][T18896] ? __might_fault+0xe3/0x190
[ 900.640283][T18896] udmabuf_ioctl+0x193/0x310
[ 900.644848][T18896] ? __pfx_udmabuf_ioctl+0x10/0x10
[ 900.649941][T18896] ? selinux_file_ioctl+0xb4/0x270
[ 900.655036][T18896] ? __pfx_udmabuf_ioctl+0x10/0x10
[ 900.660122][T18896] __x64_sys_ioctl+0x190/0x200
[ 900.664868][T18896] do_syscall_64+0xcd/0x250
[ 900.669354][T18896] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 900.675240][T18896] RIP: 0033:0x7f1c8c98cde9
[ 900.679635][T18896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 900.699221][T18896] RSP: 002b:00007f1c8d7e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 900.707610][T18896] RAX: ffffffffffffffda RBX: 00007f1c8cba6160 RCX: 00007f1c8c98cde9
[ 900.715568][T18896] RDX: 0000400000000040 RSI: 0000000040187542 RDI: 0000000000000008
[ 900.723529][T18896] RBP: 00007f1c8ca0e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 900.731490][T18896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 900.739445][T18896] R13: 0000000000000000 R14: 00007f1c8cba6160 R15: 00007ffe2e844558
[ 900.747403][T18896] </TASK>
[ 900.750400][T18896] Modules linked in:
[ 900.754277][T18896] ---[ end trace 0000000000000000 ]---
[ 900.759710][T18896] RIP: 0010:alloc_hugetlb_folio_reserve+0xac/0xc0
[ 900.766115][T18896] Code: a3 d0 00 00 00 e8 e4 43 a2 ff 48 c7 c7 40 56 e1 8d e8 f8 f4 41 09 48 89 e8 5b 5d 41 5c 41 5d c3 cc cc cc cc e8 c5 43 a2 ff 90 <0f> 0b e8 2d 5c 05 00 eb ac 66 66 2e 0f 1f 84 00 00 00 00 00 90 90
[ 900.785705][T18896] RSP: 0018:ffffc9000490f900 EFLAGS: 00010083
[ 900.791758][T18896] RAX: 0000000000001575 RBX: ffffffff9a8d8758 RCX: ffffc9000eaf2000
[ 900.799724][T18896] RDX: 0000000000080000 RSI: ffffffff8217901b RDI: 0000000000000007
[ 900.807676][T18896] RBP: ffffea0008eb0000 R08: 0000000000000007 R09: 0000000000000000
[ 900.815638][T18896] R10: 0000000000000000 R11: 00000000000000c0 R12: 0000000000000000
[ 900.823588][T18896] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000015
[ 900.831538][T18896] FS: 00007f1c8d7e46c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[ 900.840466][T18896] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 900.847030][T18896] CR2: 0000001b2e805ff8 CR3: 00000000620a6000 CR4: 00000000003526f0
[ 900.854984][T18896] Kernel panic - not syncing: Fatal exception
[ 900.861256][T18896] Kernel Offset: disabled
[ 900.865555][T18896] Rebooting in 86400 seconds..