last executing test programs:

9m25.619500077s ago: executing program 2 (id=1437):
r0 = syz_usb_connect(0x0, 0xfffffffffffffdd3, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xb5, 0x40, 0x33, 0x40, 0x1a86, 0x7522, 0x3536, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xd6, 0x24}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000180)={0x40, 0x3, 0x2, "3283"}, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)

9m22.466830575s ago: executing program 2 (id=1453):
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000140)={{0x3, 0x0, 0xfffffffffffffcea, {0xd5c74000, 0x8000000}}, "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", "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"})
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRES8], 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000d40)=ANY=[@ANYBLOB="12010000000000104c05f20d00002000000109022400010000000c09040000020300000009210900710122050009058103"], 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
syz_emit_vhci(0x0, 0x0)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/oops_count', 0x140000, 0x0)
ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f0000000380))
sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x40080)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000030500f3ffffff06000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000200001400128009000100", @ANYRES32=r5, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000002700)=""/102392, 0x18ff8)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @random="429e82211cf8", @void, {@ipv6={0x86dd, @generic={0xa, 0x6, "7abd6a", 0x0, 0x67, 0x1, @private0, @mcast2}}}}, 0x0)
utime(&(0x7f0000000240)='./bus\x00', &(0x7f0000000340)={0x1, 0x100})
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000002240)=0x2)
write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000"], 0x78)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_ep_write(r0, 0x81, 0xffffffffffffffdc, &(0x7f0000000140)="00012c615bc20000adf307fd66e187daef6065418ebc2dc59ab4d2bac4babaa77c25c25839e7cbd2d6289a1d1c97b515ebf61101c97e162c28f301ff8f1833eb5264b500be85a1d0592095210e776df046c298c6f9bd7605e54dbd9fbf8fe4b19971c1e8c003dfb4b804d8e2a48e2262357716bb98535dfe3ae24d53e487359db44a4a64587c9bff6cf5294d438f32ddb84ee89d372a9386a285cc4da53e6e548e13386b3457a6fde0047453e6f6e618cba6e4f036590248221793d5c4a9a414f82db6d2dced88a472a178f7fce198def8e4621d70b53e0d7808a4")

9m17.237976458s ago: executing program 2 (id=1477):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[], 0x54}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
r2 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r2, 0x0, 0x0)
socket$unix(0x1, 0x5, 0x0) (async)
r3 = socket$unix(0x1, 0x5, 0x0)
connect$unix(r3, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
socket$kcm(0x10, 0x2, 0x0) (async)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62a9a3f72cc9f0ba1f848360000005e120602000000000e000a0010000000de8000001294", 0x2e}], 0x1}, 0x20000040) (async)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62a9a3f72cc9f0ba1f848360000005e120602000000000e000a0010000000de8000001294", 0x2e}], 0x1}, 0x20000040)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000"/66], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {}, {0x3, 0x3, 0x6, 0xa, 0x5, 0xfe00, 0xa1}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x3004408c)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="01000000000000000000010000040001000000000000262bdd1aadbfc9f5d7911dde0ec2ba014944ad5aa531f0cf2c676adeb2d5b1dff42450e413f76518005f2baaa56d5e6b55ace0dbe1a545839ce295e48c3e02"], 0x1c}}, 0x0) (async)
sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="01000000000000000000010000040001000000000000262bdd1aadbfc9f5d7911dde0ec2ba014944ad5aa531f0cf2c676adeb2d5b1dff42450e413f76518005f2baaa56d5e6b55ace0dbe1a545839ce295e48c3e02"], 0x1c}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) (async)
read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$FOU_CMD_DEL(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="060000005504bb4772f9a1bbe3ecd5c08a35754d4985c50205084e7f8cab803e3d39f8bfd852ba65ff5c5b97626033809059895cfa5102b72ffbed583ad3130c8fc67ecb683e0aaee02ce88adaa5e8679e2db906c9af387f36e76c3f4e2c2380d466c2f996f0e2f6b70d3b7b5cd19cff6c8634e579247043a9482d1384045c01077661a23ec034c1a88623", @ANYRES16=r8, @ANYBLOB="0100000000000000000002000000"], 0x14}}, 0x0) (async)
sendmsg$FOU_CMD_DEL(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="060000005504bb4772f9a1bbe3ecd5c08a35754d4985c50205084e7f8cab803e3d39f8bfd852ba65ff5c5b97626033809059895cfa5102b72ffbed583ad3130c8fc67ecb683e0aaee02ce88adaa5e8679e2db906c9af387f36e76c3f4e2c2380d466c2f996f0e2f6b70d3b7b5cd19cff6c8634e579247043a9482d1384045c01077661a23ec034c1a88623", @ANYRES16=r8, @ANYBLOB="0100000000000000000002000000"], 0x14}}, 0x0)

9m15.853231569s ago: executing program 2 (id=1481):
mkdir(&(0x7f0000000200)='./file0\x00', 0x28e08a7aa33ba155)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x54)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, 0xd, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0xc011)
chdir(&(0x7f0000000140)='./bus\x00')
r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10000000000016, 0x0)
r2 = open(&(0x7f0000000300)='./bus\x00', 0x14103e, 0x18a)
r3 = open(&(0x7f00000001c0)='./file0\x00', 0x14b042, 0x83)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x80000001)

9m15.647455496s ago: executing program 2 (id=1487):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2840, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip6_vti0\x00'}}, 0x1e)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
r3 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r3, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000040)=0x2)
ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f0000000200)=0x1)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
close(0x3)
r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r6, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)
r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r7, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48)
listen(r7, 0x80)
accept$netrom(r7, 0x0, 0x0)
write$tun(r5, 0x0, 0xfdef)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
close_range(r9, 0xffffffffffffffff, 0x0)

9m13.624432749s ago: executing program 2 (id=1491):
keyctl$set_reqkey_keyring(0xe, 0x3)
write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000001fc0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x0, 0x0, 0x101, 0x2, 0x2, 0x8, 0xfca7}}, 0x11c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet(0x2, 0x3, 0x2)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x2}}, 0x26)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)

9m13.18783039s ago: executing program 32 (id=1491):
keyctl$set_reqkey_keyring(0xe, 0x3)
write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000001fc0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x0, 0x0, 0x101, 0x2, 0x2, 0x8, 0xfca7}}, 0x11c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet(0x2, 0x3, 0x2)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x2}}, 0x26)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)

4m47.464440078s ago: executing program 3 (id=2644):
r0 = socket$alg(0x26, 0x5, 0x0)
close(0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250", 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000005000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8}, 0x94)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x10)

4m46.550398239s ago: executing program 3 (id=2649):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x0, @local}, 0x2}}, 0x26)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r5, 0x1, 0x60bd27, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}, 0x1, 0x0, 0x300}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x434001, 0x0)
socket$kcm(0x2, 0x5, 0x84)

4m45.587995721s ago: executing program 3 (id=2652):
r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x10, 0x0)
landlock_restrict_self(r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
syz_usb_connect(0x5, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000a4d2ff40f3054002241b0102030109021b00010000000009040000014eaf32000905d693"], 0x0)

4m44.955327864s ago: executing program 3 (id=2654):
mkdir(&(0x7f0000000200)='./file0\x00', 0x28e08a7aa33ba155)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x54)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, 0xd, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0xc011)
chdir(&(0x7f0000000140)='./bus\x00')
pipe2$9p(&(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
splice(r1, 0x0, r2, 0x0, 0x10000000000016, 0x0)
r3 = open(&(0x7f0000000300)='./bus\x00', 0x14103e, 0x18a)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x14b042, 0x83)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x80000001)

4m44.362087831s ago: executing program 3 (id=2655):
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r1 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r1, 0x13)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)
tkill(0x0, 0x800012)
waitid(0x0, r1, 0x0, 0x2100000a, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ed50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18)
r6 = syz_open_dev$radio(&(0x7f00000000c0), 0x3, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205647, &(0x7f0000000080)={0xf000000, 0x1, 0x3, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x1ff, '\x00', @value64=0xfffffffffffffffe}})

4m43.083381504s ago: executing program 3 (id=2660):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', <r1=>0x0})
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001340), 0x880, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, 0x0, 0x0)
read$FUSE(r2, &(0x7f0000001680)={0x2020}, 0x2020)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2e, 0x100008, 0x0, 0x8, 0xf, 0x3, 0x3, 0xfc, 0x0, 0x1, 0x0, 0x4000000, 0x0, 0xff, 0x0, 0xfffffeff}})
getpeername$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x526cfcdef080db03, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)

4m41.634969822s ago: executing program 33 (id=2660):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', <r1=>0x0})
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001340), 0x880, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, 0x0, 0x0)
read$FUSE(r2, &(0x7f0000001680)={0x2020}, 0x2020)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2e, 0x100008, 0x0, 0x8, 0xf, 0x3, 0x3, 0xfc, 0x0, 0x1, 0x0, 0x4000000, 0x0, 0xff, 0x0, 0xfffffeff}})
getpeername$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x526cfcdef080db03, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)

7.449900672s ago: executing program 4 (id=3843):
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000400000109022400010000000009040000010300020009210000000122070009058103"], 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000180)={0x79, 0x0, 0xdf7})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000280), 0x200, 0x0)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, r4, 0x300000b, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x7, 0x3, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x80000004000080, 0xfffffffffffffffd, 0x8, 0x0, 0x4, 0x0, 0x8001], 0x1, 0x3c4210})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r6)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r6, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f00003f028000001294", 0x2e}], 0x1}, 0x0)

6.355568867s ago: executing program 0 (id=3847):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x2, 0x4, 0x6, 0xb}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="18ffffff97000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc)

6.332161298s ago: executing program 0 (id=3848):
mkdir(&(0x7f0000000200)='./file0\x00', 0x28e08a7aa33ba155)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x4, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x10, 0x9}, {0xd}, {0xfff3, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008084}, 0x0)
write$sndseq(r0, &(0x7f0000000000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0x95ffffff]}}], 0xffc8)
mkdir(&(0x7f0000000300)='./bus\x00', 0x54)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, &(0x7f0000000080))
chdir(&(0x7f0000000140)='./bus\x00')
creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000300)='./bus\x00', 0x14103e, 0x18a)
r2 = open(&(0x7f00000001c0)='./file0\x00', 0x14b042, 0x83)
sendfile(r1, r2, 0x0, 0x80000001)

6.201143854s ago: executing program 0 (id=3849):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x400, 0x0) (async)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x809, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x5390, 0x2309}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xfffffff8, 0x2cc}}]}]}]}, 0x3c}}, 0xc0084)

6.109947129s ago: executing program 0 (id=3851):
r0 = io_uring_setup(0x6cb6, &(0x7f0000000880)={0x0, 0x8cbc, 0x2, 0x20000002, 0x10026c})
socketpair$unix(0x1, 0x2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r2, &(0x7f0000000000)={0x1f, @none}, 0x8)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x62}, 0x94)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r5=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r5}, 0x10)
syz_emit_ethernet(0xfdef, &(0x7f0000000240)=ANY=[@ANYRES64=r4, @ANYBLOB="c795fd38880f901078d2287baf7c5abfa861b1ca5758260088125262450a77b2ee1a26a4d309dd6523593a50dfa32fca08e7d558713679e549a1e65ad67e34618b634a5d44f70935e6753c65624eba9993ee9c7aef8fcfb1141e7dd7bb89e8fb7f4ddb0361"], 0x0)
listen(r2, 0x0)
shutdown(r2, 0x0)
r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0)
ioctl$SNDCTL_MIDI_INFO(r6, 0xc074510c, &(0x7f0000000000)={"8a22a004f973bbd0e4e70fc00c438949951cefd90a46684024b2ccf3d865", 0x1, 0xa86d, 0xb2, [0x5, 0x4, 0xfc2, 0x1000007, 0x4, 0x1, 0x7, 0x0, 0xd, 0x7fffffff, 0x0, 0x5, 0x8, 0x6, 0xc, 0x1, 0x9, 0x7fff]})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(0xffffffffffffffff, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r9, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x0, 0x1, 0x2501, 0x7, 0x54, 0x100a}, 0x77)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26})
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, 0x0, 0x0)
r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00')
read$FUSE(r10, &(0x7f00000020c0)={0x2020}, 0x2020)

5.348807712s ago: executing program 1 (id=3856):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x2}, [@TCA_NETEM_RATE={0x14, 0xd}]}}}]}, 0x60}}, 0xf1ff)

5.242458921s ago: executing program 6 (id=3858):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
recvmmsg(r0, &(0x7f0000001a00), 0x0, 0x40010080, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'tunl0\x00'})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0)
syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24008800)
socket$nl_generic(0x10, 0x3, 0x10)
bind$inet(0xffffffffffffffff, 0x0, 0xa0)
socket$kcm(0x10, 0x3, 0x10)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[], 0x18}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000540)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x900}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94)

5.242140348s ago: executing program 1 (id=3859):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000003c003c0000003c00000006000000040000000000000e0400000000000000000000000100000d0400000004000000040000000000000000000010040000000000000000000002030000000000000061"], 0x0, 0x5a, 0x0, 0x4, 0x80000}, 0x28)

4.957194508s ago: executing program 1 (id=3860):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]})
cachestat(r0, &(0x7f0000000040)={0x5, 0xefc4}, &(0x7f0000000080), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94)
r1 = socket$packet(0x11, 0x3, 0x300)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
flock(0xffffffffffffffff, 0x1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = accept(r3, 0x0, 0x0)
fcntl$setown(r4, 0x8, 0x0)
writev(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x11)
getsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f0000000280)=0x3c6, &(0x7f0000000340)=0x2)
connect$unix(r4, 0x0, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000540)={'sit0\x00', 0x0})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=""/40, 0x0, &(0x7f00000003c0)="2447bb4223ab53e4369dad1dd84f661bafa4979cf0f3911f7648a13011786c66118d54872eb4a2edf3d3c21ebbd3bd06dcb0c20c1d07c82bec03bc6189e1b02ea22681ffffff0b9738531edea8ea79e0c65d0ccdec722075e29b050521e7267bbe8e74540ee2f66d9e8c07f1801f0eb0b6a8fe3407b219a140db7c9433ddde618ea92010928bf8a4ef0a5b", 0x1, r6}, 0x38)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'erspan0\x00'})
sendto$packet(r1, &(0x7f0000000180)="0b032200eb1025120212475400f6a13bb1000000", 0x14, 0x0, 0x0, 0x0)
socket(0x1e, 0x4, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))

4.94698881s ago: executing program 6 (id=3861):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8932, &(0x7f00000000c0)={'gre0\x00', 0x0})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8840)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x2151a, 0x1, 0x40000333}, &(0x7f00000006c0)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xffffffff, 0x0, 0x4)
r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4d9, 0xa072, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x180, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc}}}}}]}}]}}, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io(r4, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x20, 0x23, 0x5, {0x5, 0xa, "a7ea31"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{0x0}], 0x1})
r6 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4000010)

4.891084592s ago: executing program 0 (id=3862):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="2072dc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000100)={0x20, 0xa, 0x88, {0x88, 0x2d, "3c93efbac68d2bda156a05b0a2d456bfe3fc69ebaa11f858a265266d449bd3ef4d0c51285e11bbd0072c9c4c43c0c5e3be77ef41434e11a17c63b6730ef48c2a21dd73fb56e0568c88362c3c1fd1b432639a7638e2724952181a795f13d7c364d719d391487baab24b42a3d497db4736975e2462b68d765483895ac219fd4d724815dca6ed61"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0a}}, &(0x7f00000001c0)={0x0, 0x22, 0x12, {[@global=@item_4={0x3, 0x1, 0x2, "0d0aae9c"}, @global=@item_012={0x2, 0x1, 0x8, "8037"}, @main=@item_4={0x3, 0x0, 0x9, "d77dd48c"}, @local=@item_4={0x3, 0x2, 0x3, "63f3cdfc"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x962, 0xff, 0x1, {0x22, 0xd25}}}}, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x20, 0xa, 0x5c, "8eb6b8c4f885db68f3192ced97af273536a4c98757192e8141dd00432b79eb7f86ee34f7f6d8bf6b75c7fd7e1e7f0667d710795e595e75d1c44c4bbda2fde421e2db043686cc64f0edcf06c4c26bbf33e4a56300c42fe1de603e662d"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xa}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000380)={0x20, 0x1, 0x10, "5fc491125b0216e437538333e41e52eb"}, &(0x7f0000000440)={0x20, 0x3, 0x1, 0x6}})
ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000003c0)={&(0x7f0000000400)=[{0xd0, 0x4201, 0x0, 0x0}], 0x1})

4.837455506s ago: executing program 4 (id=3863):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r1 = syz_open_dev$sg(0x0, 0x0, 0x8002)
r2 = fcntl$dupfd(r1, 0x0, r1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6, 0x0, 0x7}, 0x18)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6)
setgroups(0x0, 0x0)
setregid(0x0, 0x0)
r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[<r8=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000})
syz_open_dev$MSR(0x0, 0x0, 0x0)
ioctl$SG_IO(r2, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x0, 0xf9, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000040), 0x0, 0x5, 0x0, 0x0, 0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)

4.494572149s ago: executing program 1 (id=3864):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x42, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
socketpair$unix(0x1, 0x2, 0x0, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8f0, &(0x7f0000002400)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r5, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}])
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$can_bcm(0xffffffffffffffff, 0x0, 0x0)
connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r3, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0)
recvmsg(r3, &(0x7f0000000100)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f0000000780)=""/4108, 0x437aba2}], 0x1, 0x0, 0xfffffdee, 0x407006}, 0x104)
set_mempolicy(0x3, 0x0, 0x7)
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, 0x0)

3.640211041s ago: executing program 4 (id=3865):
r0 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

3.578108555s ago: executing program 4 (id=3867):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r5}, 0x10)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) (async)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async)
r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r7, 0xc02c564a, &(0x7f00000001c0)={0x0, 0x4f424752, 0x0, @discrete={0xfffffffc}})
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000080000000200000004"], 0x50) (async)
close(0x3) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
close(0xffffffffffffffff) (async)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) (async)
r10 = syz_open_procfs(0x0, &(0x7f00000004c0)='map_files\x00')
getdents64(r10, &(0x7f0000000080)=""/95, 0x5f)

3.259441263s ago: executing program 5 (id=3869):
socket(0x10, 0x803, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sysinfo(&(0x7f0000000000)=""/196)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000100)=""/207, 0x0, 0xcf, 0x1, 0x3, 0x10000}, 0x28)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000380)='sched_switch\x00', r6}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)}, 0x10)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15) (async)
ioctl$TCSETS(r4, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x1, 0x400000, 0x12, "3eccd8fd0000000000000010000000040100"})
bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x400}, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x1f, 0x13, &(0x7f0000000ac0)=ANY=[@ANYRES16=r5, @ANYRESHEX, @ANYRESHEX=r6, @ANYRES8=r3, @ANYRESDEC, @ANYRESOCT, @ANYRES16=r0, @ANYBLOB="8938be5f42714f5612baa36ee646cc03db6df7dffdd2", @ANYRESDEC], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async)
r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x8000, 0x0)
getdents64(r7, &(0x7f0000001f00)=""/4093, 0xffd) (async)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x104, 0x8, 0x808, 0x0, 0xffffffffffffffff, 0x6}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)

3.035973407s ago: executing program 4 (id=3870):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5})
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x7, 0x0, 0x4, 0x3)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

2.791434149s ago: executing program 5 (id=3871):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
socket$nl_route(0x10, 0x3, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0x6, 0x0, 0x0)
setresuid(0x0, 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'wg0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x5}, {0xfff1, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x40}, 0x1, 0xffffff7f}, 0x10)

2.759940488s ago: executing program 1 (id=3872):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x2, 0x400000000000003, 0x20, 0x0, 0x13, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0x0, 0x100000000000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @rand_addr=0x64010100}}, @sadb_lifetime={0x4, 0x4, 0x300, 0xfffffffffffffffe}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @broadcast}}, @sadb_x_sec_ctx={0x1, 0x18, 0x5, 0x5f}]}, 0x98}}, 0x0)

2.679790084s ago: executing program 0 (id=3873):
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000400000109022400010000000009040000010300020009210000000122070009058103"], 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000180)={0x79, 0x0, 0xdf7})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000280), 0x200, 0x0)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, r4, 0x300000b, 0x11, r2, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x7, 0x3, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x80000004000080, 0xfffffffffffffffd, 0x8, 0x0, 0x4, 0x0, 0x8001], 0x1, 0x3c4210})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r6)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r6, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000005028000001294", 0x2e}], 0x1}, 0x0)

2.095511493s ago: executing program 6 (id=3874):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000002e00090027bd700000001000040003000c0018000bac0f000aac0f"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0)

2.094809545s ago: executing program 1 (id=3875):
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x10000002}, 0x18)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0)
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$PPPIOCSMRU1(r7, 0x40047454, &(0x7f0000000300)=0x5)
setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = socket(0x1, 0x2, 0x0)
r9 = socket(0x10, 0x3, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}, {0x9, 0x7}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x4080)
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x28, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r10, {0xfff3, 0x9}, {0x0, 0x9}, {0xffff, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0xfe, 0x9}}]}, 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x40408c4)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e20, 0x1000040, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3c}, 0x1c)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8)
sendmmsg$inet6(r5, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0)

1.910539923s ago: executing program 5 (id=3876):
syz_clone3(&(0x7f0000000200)={0x4000, &(0x7f0000000000)=<r0=>0xffffffffffffffff, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000080), {0x14}, &(0x7f00000000c0)=""/4, 0x4, &(0x7f0000000100)=""/159, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x7}, 0x58)
r2 = syz_open_procfs(r1, &(0x7f0000000280)='net/sockstat\x00')
r3 = syz_clone(0x10000800, &(0x7f00000002c0)="e455699e60670e2d7ebeda331d2af949d5a926918c091b1b9905dce91661dca789ae3e47f686224af762f31e842992d46f92bdcf156891be8bf073aea0b69c63ea3ec7b25e8dc8024e0385c7de17352e9219607176da39d0f732e01f149e9d2d81f91cbb1b29c1053cd023ef853372bac721cda90a139f7589ad07b9dc06c4587bdd5055da9448", 0x87, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)="59ba4f7aaab921d8ff8d126a5fee2d013a55314ac01f363546ac06c2684a928d241c9cef1b9cf61a9981c669c8b007fad12d9445a99f4516041016adbb336440b42ecb2d0dce4cea8a3eda828a76388b992c8b9ef90f6fbd6dc2f5d0f19b42fe06a17ae45d4bc6f31188e48cdc0855c72083394462a51045e1e9a688cf41e07fc92f9815755738c91f4333")
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x69, 0x69, 0x5, [@datasec={0x8, 0x2, 0x0, 0xf, 0x2, [{0x1, 0x3, 0x2a8a}, {0x4, 0x0, 0x1}], "53e9"}, @datasec={0xe, 0x2, 0x0, 0xf, 0x3, [{0x1, 0x3c6, 0xffffffff}, {0x4, 0x1}], 'Ng='}, @volatile={0x10, 0x0, 0x0, 0x9, 0x5}, @int={0x5, 0x0, 0x0, 0x1, 0x0, 0x28, 0x0, 0x11, 0x5}]}, {0x0, [0x30, 0x4f, 0x30]}}, &(0x7f0000000580)=""/146, 0x89, 0x92, 0x1}, 0x28)
mmap$snddsp_control(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x6, 0x20010, r2, 0x83000000)
waitid$P_PIDFD(0x3, r0, &(0x7f0000000680), 0x80000000, &(0x7f0000000700))
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000007c0), 0x200400, 0x0)
ioctl$BTRFS_IOC_DEV_INFO(r5, 0xd000941e, &(0x7f0000000800)={0x0, "7781d40995ce7f7dd0b3df7d766db1c2"})
r6 = creat(&(0x7f0000001800)='./file0\x00', 0xc3)
r7 = openat$audio1(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0)
ioctl$SNDCTL_DSP_GETTRIGGER(r7, 0x80045010, &(0x7f0000001880))
ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f00000018c0)={'veth0_vlan\x00', 0x4})
ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000001900)={"907a8f7a64d0cfbad64463a178ba2a109b3b43a7e9f8ffac313471c87ead87d5", r6})
ptrace$setsig(0x4203, r3, 0xa08, &(0x7f0000001940)={0x29, 0xfa, 0x800})
prctl$PR_GET_TSC(0x19, &(0x7f00000019c0))
r8 = epoll_create1(0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001a00)={<r9=>0x0, @in6={{0xa, 0x4e21, 0x5, @empty, 0x4}}, 0x401, 0xcd, 0x3, 0x1, 0x54, 0x4278, 0x7f}, &(0x7f0000001ac0)=0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001b00)={r9, @in={{0x2, 0x4e22, @local}}, 0x9, 0x8000, 0x40, 0x8, 0x50, 0x1, 0x80}, 0x9c)
ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000001bc0)={0x3ff, 0x1, 0x2, 0x0, 0xb})
r10 = add_key$keyring(&(0x7f0000001c80), &(0x7f0000001cc0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000001c00)='cifs.spnego\x00', &(0x7f0000001c40)={'syz', 0x3}, 0x0, 0x0, r10)
setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000001d00), 0x4)
sched_setscheduler(r3, 0x3, &(0x7f0000001d40)=0x3)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001dc0), r2)
sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000001ec0)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e00)={0x4c, r11, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x7e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "3606ad26eb"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0xc040)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000001f00)={0x8, [0x3, 0x40, 0xcf, 0x3b0, 0x7, 0x100, 0x5, 0x1]}, 0x14)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002000)={'macvlan1\x00', <r12=>0x0})
r13 = openat$vsock(0xffffffffffffff9c, &(0x7f0000002080), 0x200, 0x0)
r14 = bpf$MAP_CREATE(0x0, &(0x7f00000020c0)=@base={0x0, 0x40, 0x1000, 0xfffffff7, 0x40, r6, 0x6f, '\x00', 0x0, r6, 0x2, 0x4, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000002200)={0x15, 0xd, &(0x7f0000001f40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x46}, @call={0x85, 0x0, 0x0, 0x1f}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @generic={0x1, 0x6, 0xf, 0x26}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x6}]}, &(0x7f0000001fc0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40e00, 0x4f, '\x00', r12, @fallback=0x21, r4, 0x8, &(0x7f0000002040)={0x1, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r2, 0x6, &(0x7f0000002140)=[r2, r8, r6, r13, 0xffffffffffffffff, r14], &(0x7f0000002180)=[{0x4, 0x5, 0x4, 0x7}, {0x5, 0x1, 0x10, 0xb}, {0x3, 0x4, 0xa, 0x3}, {0x2, 0x4, 0x0, 0x8}, {0x0, 0x3, 0x1, 0xa}, {0x5, 0x1, 0x8, 0x1}]}, 0x94)

1.626057072s ago: executing program 4 (id=3877):
mkdir(0x0, 0x0)
r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00)
syz_usb_disconnect(r0)
r1 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1)
close_range(r1, 0xffffffffffffffff, 0x0)
syz_usb_connect$uac1(0x6, 0x9f, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x3, 0x1, 0x5, 0x20, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x100, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xa, 0x0, 0xe, "571bca5628b316"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x5, 0x7, 0x6a, "0dfa273e84dfbd"}, @as_header={0x7, 0x24, 0x1, 0x3, 0x8, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x81, 0x7, 0x0, {0x7, 0x25, 0x1, 0x2, 0x0, 0x2a4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x7, 0x0, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x2, 0xab, 0x4, {0x7, 0x25, 0x1, 0x81, 0x9, 0x6}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x310, 0x7, 0xeb, 0x4, 0x70, 0x7f}, 0x51, &(0x7f0000000400)={0x5, 0xf, 0x51, 0x5, [@ssp_cap={0x1c, 0x10, 0xa, 0x48, 0x4, 0x7fffe01, 0xf000, 0x5, [0x0, 0x0, 0xff00e7, 0x6f]}, @ss_container_id={0x14, 0x10, 0x4, 0x10, "105e5554b01589d77fa06f462bb27191"}, @wireless={0xb, 0x10, 0x1, 0xa, 0x1, 0x2, 0xd, 0xfff8, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x5, 0x6, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0x9, 0x7, 0x4}]}, 0x2, [{0xc6, &(0x7f0000000480)=@string={0xc6, 0x3, "7b62ee308624caeb0841e0e7e30ebab6d869b0387fff0b886a3f4cdff5484eaa48aa3ee3a7d9710940886bf0503f64a7d838e86d114b1baa1627e4fe0c11454c197ee6f33d3e00638d17e9cd18b811a21f7e33e8ded6e761bfdae97263c2b6feb3facd4cdbb4cd23953b77664e8c5e41324da3d62dc20ef7d543ce0c9c96a8f10ab12ae4691b03b3b357fbe4ab16f65575782074974c2f8f1318360fb09b76d38404563ec87c08e8347ae255f36a176ac920daa2fcf1094c27c0465a4b04accca6cec2a0"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xc09}}]})
mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(0x0)
socket$igmp(0x2, 0x3, 0x2)
linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x2e, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20042095}, 0x24040004)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r4)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c)
listen(r5, 0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
accept(r4, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r8=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYRES8=r8, @ANYRES64, @ANYBLOB="8000260b0a00020001"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040010)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x26000411}, 0x800)

1.543098034s ago: executing program 5 (id=3878):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x2, 0x4, 0x6, 0xb}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="18ffffff9c000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc)

1.542372283s ago: executing program 6 (id=3879):
mkdir(0x0, 0x0)
mkdir(&(0x7f0000000200)='./file0\x00', 0x28e08a7aa33ba155)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r0, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1})
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
r2 = getpid()
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000080)=0xfff, 0x4)
setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000000)=0xffffff7e, 0x4)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou'])
write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x7}}, 0x18)

1.45408299s ago: executing program 5 (id=3880):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000003c0)=[{0x6, 0xc1, 0x6, 0x406}]}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c)

247.744265ms ago: executing program 6 (id=3881):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
syz_open_dev$sndpcmp(&(0x7f0000000100), 0x8, 0x2000) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0xffffffffffffbffc)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r3=>0xffffffffffffffff}) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x3)
splice(r4, 0x0, r3, 0x0, 0x406f413, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r5 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000000300)=""/169, 0xa9) (async)
read$msr(r5, &(0x7f0000019680)=""/102384, 0x18ff0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
prlimit64(0x0, 0xe, 0x0, 0x0) (async)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x2)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x3) (async)
ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x2ddfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x208, 0x4, 0x6, 0x6}, 0x3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x2000a805)
bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) (async)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000912acb866ba8809abe84750000000000007912c800000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r8, 0x0, &(0x7f0000000500)=""/120}, 0x20) (async)
sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000040a0101000000000000005e2d2bc574"], 0x14}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000014)

86.951129ms ago: executing program 6 (id=3882):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101402, 0x0)
io_uring_register$IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x15, &(0x7f0000000880), 0x0)
shmat(0x0, &(0x7f00005e6000/0x1000)=nil, 0x4000)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'xfrm0\x00', 0x400})
shmctl$IPC_RMID(0x0, 0x0)
r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)
r2 = socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r6 = accept$alg(r2, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f00000009c0)={'#! ', './file0', [{0x20, '\xf6\x1b\x9f\xe3\x97m\x1d\x96\x1f\xa1\x14nHkTu,\xca\x8c'}, {0x20, '/selinux/avc/cache_threshold\x00'}], 0xa, "4320e0fd6b8559f2a3b8d027aa2a8db72666550764efc41c0100000000000080e9b745c386a37b72fea5b2c6e4e0c7b7f9e7af282a0d603d2afb8943c8"}, 0x7a)
recvmmsg(r6, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001a80)=""/58, 0x3a}], 0x2, &(0x7f0000001e40)=""/41, 0x29}, 0x9}, {{0x0, 0x0, &(0x7f0000003140)=[{0x0}], 0x1}, 0xb4}], 0x2, 0x20cb, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'ipvlan1\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x10)
sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x800, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x10, 0xfff1}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xf, 0xc}}]}}]}, 0x3c}, 0x1, 0x86dd}, 0x24044094)

0s ago: executing program 5 (id=3883):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d903"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0xf5ffffffffffffff, 0x4000850}, 0x40)

kernel console output (not intermixed with test programs):

 T5926] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  851.413646][ T5946] usb 6-1: config 255 interface 144 altsetting 32 has a duplicate endpoint with address 0xF, skipping
[  851.437334][ T5946] usb 6-1: config 255 interface 144 altsetting 32 endpoint 0x1 has invalid maxpacket 1023, setting to 64
[  851.465903][ T5926] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  851.484398][ T5926] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  851.492718][ T5946] usb 6-1: config 255 interface 144 altsetting 32 has a duplicate endpoint with address 0x9, skipping
[  851.504103][ T5926] usb 7-1: Product: syz
[  851.520223][T17874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  851.521263][ T5926] usb 7-1: Manufacturer: syz
[  851.528885][T17874] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  851.534579][ T5946] usb 6-1: config 255 interface 144 altsetting 32 bulk endpoint 0x5 has invalid maxpacket 64
[  851.544742][T17874] netlink: 'syz.1.3349': attribute type 1 has an invalid length.
[  851.553785][ T5946] usb 6-1: config 255 interface 144 altsetting 32 has 9 endpoint descriptors, different from the interface descriptor's value: 8
[  851.574040][ T5946] usb 6-1: config 255 interface 184 altsetting 9 has a duplicate endpoint with address 0x3, skipping
[  851.587576][ T5926] cdc_wdm 7-1:1.0: skipping garbage
[  851.592455][T17874] bond2: entered promiscuous mode
[  851.596511][ T5926] cdc_wdm 7-1:1.0: skipping garbage
[  851.598823][T17874] 8021q: adding VLAN 0 to HW filter on device bond2
[  851.612419][ T5926] cdc_wdm 7-1:1.0: cdc-wdm1: USB WDM device
[  851.618313][ T5926] cdc_wdm 7-1:1.0: Unknown control protocol
[  851.624812][ T5946] usb 6-1: config 255 interface 184 altsetting 9 has a duplicate endpoint with address 0x1, skipping
[  851.640098][ T5946] usb 6-1: config 255 interface 184 altsetting 9 has a duplicate endpoint with address 0x9, skipping
[  851.651269][ T5946] usb 6-1: config 255 interface 184 altsetting 9 has a duplicate endpoint with address 0x3, skipping
[  851.690158][ T5946] usb 6-1: config 255 interface 184 altsetting 9 has a duplicate endpoint with address 0x7, skipping
[  851.701064][   T30] audit: type=1400 audit(1766305539.161:1462): avc:  denied  { append } for  pid=17895 comm="syz.0.3356" name="video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  851.727509][T17898] 8021q: adding VLAN 0 to HW filter on device bond2
[  851.749987][T17898] bond2: (slave vcan2): The slave device specified does not support setting the MAC address
[  851.760207][T17898] bond2: (slave vcan2): Setting fail_over_mac to active for active-backup mode
[  851.803590][ T5946] usb 6-1: config 255 interface 184 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  851.836597][T17898] bond2: (slave vcan2): making interface the new active one
[  851.844151][T17898] vcan2: entered promiscuous mode
[  851.867118][T17898] bond2: (slave vcan2): Enslaving as an active interface with an up link
[  852.025533][T17886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  852.035402][T17886] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  852.043324][ T5946] usb 6-1: config 255 interface 184 altsetting 9 has a duplicate endpoint with address 0x7, skipping
[  852.082528][T17886] netlink: 'syz.6.3353': attribute type 1 has an invalid length.
[  852.083430][ T5946] usb 6-1: config 255 interface 184 altsetting 9 has a duplicate endpoint with address 0x6, skipping
[  852.103868][ T5946] usb 6-1: config 255 interface 184 altsetting 9 has a duplicate endpoint with address 0x3, skipping
[  852.104074][T17906] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  852.104074][T17906]    program syz.4.3358 not setting count and/or reply_len properly
[  852.114763][ T5946] usb 6-1: config 255 interface 184 altsetting 9 has an endpoint descriptor with address 0x1E, changing to 0xE
[  852.114788][ T5946] usb 6-1: config 255 interface 184 altsetting 9 endpoint 0xE has an invalid bInterval 194, changing to 11
[  852.114810][ T5946] usb 6-1: config 255 interface 184 altsetting 9 endpoint 0xE has invalid maxpacket 41693, setting to 1024
[  852.114832][ T5946] usb 6-1: config 255 interface 184 altsetting 9 has a duplicate endpoint with address 0x6, skipping
[  852.114851][ T5946] usb 6-1: config 255 interface 184 altsetting 9 has a duplicate endpoint with address 0x9, skipping
[  852.114869][ T5946] usb 6-1: config 255 interface 184 altsetting 9 has 14 endpoint descriptors, different from the interface descriptor's value: 16
[  852.114893][ T5946] usb 6-1: too many endpoints for config 255 interface 247 altsetting 117: 245, using maximum allowed: 30
[  852.114931][ T5946] usb 6-1: config 255 interface 247 altsetting 117 has an invalid descriptor for endpoint zero, skipping
[  852.114948][ T5946] usb 6-1: config 255 interface 247 altsetting 117 has a duplicate endpoint with address 0x1, skipping
[  852.114966][ T5946] usb 6-1: config 255 interface 247 altsetting 117 has 3 endpoint descriptors, different from the interface descriptor's value: 245
[  852.114987][ T5946] usb 6-1: config 255 interface 144 has no altsetting 0
[  852.115003][ T5946] usb 6-1: config 255 interface 184 has no altsetting 0
[  852.115018][ T5946] usb 6-1: config 255 interface 247 has no altsetting 0
[  852.116693][ T5946] usb 6-1: Dual-Role OTG device on HNP port
[  852.170156][T17886] bond3: entered promiscuous mode
[  852.177697][ T5946] usb 6-1: New USB device found, idVendor=3011, idProduct=b012, bcdDevice=3e.ff
[  852.257309][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  852.264984][ T5946] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  852.307807][T17886] 8021q: adding VLAN 0 to HW filter on device bond3
[  852.319161][ T5946] usb 6-1: Product: syz
[  852.354414][ T5813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  852.387009][ T5946] usb 6-1: Manufacturer: syz
[  852.397744][ T5946] usb 6-1: SerialNumber: syz
[  852.497143][T17908] 8021q: adding VLAN 0 to HW filter on device bond3
[  852.507501][T17908] bond3: (slave vcan3): The slave device specified does not support setting the MAC address
[  852.517699][T17908] bond3: (slave vcan3): Setting fail_over_mac to active for active-backup mode
[  852.567055][T17908] bond3: (slave vcan3): making interface the new active one
[  852.574451][T17908] vcan3: entered promiscuous mode
[  852.594319][T17908] bond3: (slave vcan3): Enslaving as an active interface with an up link
[  852.672233][T17880] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  852.732649][   T30] audit: type=1400 audit(1766305540.201:1463): avc:  denied  { connect } for  pid=17915 comm="syz.4.3361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  852.920958][T17880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  852.962253][T17880] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  852.979701][ T5946] dvb-usb: found a 'Prof 1100 USB ' in cold state, will try to load a firmware
[  852.993439][ T5946] usb 6-1: Direct firmware load for dvb-usb-p1100.fw failed with error -2
[  853.003490][ T5946] usb 6-1: Falling back to sysfs fallback for: dvb-usb-p1100.fw
[  853.337833][ T5813] usb 2-1: USB disconnect, device number 86
[  853.373582][T15535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  853.381906][ T5876] usb 5-1: new high-speed USB device number 98 using dummy_hcd
[  853.545686][   T30] audit: type=1400 audit(1766305541.021:1464): avc:  denied  { search } for  pid=17927 comm="syz.1.3364" name="/" dev="configfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  853.572918][ T5876] usb 5-1: Using ep0 maxpacket: 32
[  853.594252][ T5876] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  853.604600][   T30] audit: type=1400 audit(1766305541.021:1465): avc:  denied  { setattr } for  pid=17927 comm="syz.1.3364" name="/" dev="configfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  853.643267][ T5876] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  853.652469][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  853.661045][ T5876] usb 5-1: Product: syz
[  853.661063][ T5876] usb 5-1: Manufacturer: syz
[  853.670207][ T5876] usb 5-1: SerialNumber: syz
[  853.672129][ T5876] usb 5-1: config 0 descriptor??
[  853.680342][T17924] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  853.697357][T17937] overlayfs: missing 'lowerdir'
[  853.943309][ T5876] usb 7-1: USB disconnect, device number 24
[  854.804128][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  855.370891][T17168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  855.400632][ T5876] usb 5-1: USB disconnect, device number 98
[  856.034911][T15535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  856.339705][ T5932] usb 2-1: new high-speed USB device number 87 using dummy_hcd
[  856.397985][T17980] netlink: 'syz.6.3380': attribute type 33 has an invalid length.
[  856.407387][T17980] netlink: 152 bytes leftover after parsing attributes in process `syz.6.3380'.
[  856.439697][T17978] netlink: 'syz.5.3377': attribute type 30 has an invalid length.
[  856.491707][ T5932] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  856.500836][ T5932] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  856.514365][ T5932] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  856.524292][ T5932] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  856.560986][ T5932] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  856.570381][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  856.574297][T17987] openvswitch: netlink: Invalid VLAN frame
[  856.578377][ T5932] usb 2-1: Product: syz
[  856.578393][ T5932] usb 2-1: Manufacturer: syz
[  856.597201][ T5932] cdc_wdm 2-1:1.0: skipping garbage
[  856.602467][ T5932] cdc_wdm 2-1:1.0: skipping garbage
[  856.608855][ T5932] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  856.614810][ T5932] cdc_wdm 2-1:1.0: Unknown control protocol
[  856.644764][T17988] fuse: Bad value for 'fd'
[  856.933614][T17965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  856.951045][T17965] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  857.006974][T17965] netlink: 'syz.1.3374': attribute type 1 has an invalid length.
[  857.102343][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  857.181647][T17965] bond3: entered promiscuous mode
[  857.193515][T17996] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3385'.
[  857.212731][T17965] 8021q: adding VLAN 0 to HW filter on device bond3
[  857.523013][T18001] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3384'.
[  857.765400][T18009] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3382'.
[  857.851486][T18011] netlink: 'syz.4.3388': attribute type 10 has an invalid length.
[  858.169942][T15535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  858.307117][T18019] netlink: 'syz.4.3390': attribute type 27 has an invalid length.
[  858.409815][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  858.763000][T18025] fuse: Bad value for 'fd'
[  858.828505][T18025] netlink: 'syz.0.3393': attribute type 4 has an invalid length.
[  858.836405][T18025] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3393'.
[  858.852186][T18025] .`: renamed from bond0 (while UP)
[  858.928841][   T30] audit: type=1400 audit(1766305546.281:1466): avc:  denied  { create } for  pid=18022 comm="syz.0.3393" name="#57" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  859.017914][   T30] audit: type=1400 audit(1766305546.291:1467): avc:  denied  { link } for  pid=18022 comm="syz.0.3393" name="#57" dev="tmpfs" ino=998 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  859.043283][   T30] audit: type=1400 audit(1766305546.291:1468): avc:  denied  { rename } for  pid=18022 comm="syz.0.3393" name="#58" dev="tmpfs" ino=998 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  859.085572][ T5897] usb 2-1: USB disconnect, device number 87
[  859.151596][T18027] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  859.307113][   T30] audit: type=1400 audit(1766305546.781:1469): avc:  denied  { setattr } for  pid=18030 comm="syz.1.3396" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  859.400408][T18031] netlink: 'syz.1.3396': attribute type 12 has an invalid length.
[  859.468705][T18034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  859.486461][T18031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  859.505326][T18031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  859.519610][T18034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  859.527716][T18031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  859.538257][T18034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  859.547409][T18038] overlayfs: missing 'lowerdir'
[  859.559765][T18034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  859.569897][T18031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  859.589942][T18041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3400'.
[  859.645345][T15535] hid-generic 0000:0004:0009.004A: unknown main item tag 0x0
[  859.668206][T15535] hid-generic 0000:0004:0009.004A: unknown main item tag 0x0
[  859.818518][T15535] hid-generic 0000:0004:0009.004A: unknown main item tag 0x0
[  859.839326][T15535] hid-generic 0000:0004:0009.004A: hidraw0: <UNKNOWN> HID v0.04 Device [syz1] on syz1
[  860.079713][T15535] usb 5-1: new high-speed USB device number 99 using dummy_hcd
[  860.119593][ T5876] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  860.287987][T15535] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  860.296946][ T5876] usb 1-1: Using ep0 maxpacket: 16
[  860.302165][T15535] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  860.312969][T15535] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  860.322308][T15535] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  860.336404][ T5876] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  860.346691][ T5876] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C
[  860.358440][ T5876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0
[  860.368681][ T5876] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  860.384668][ T5876] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f
[  860.393978][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  860.402031][ T5876] usb 1-1: Product: syz
[  860.406308][ T5876] usb 1-1: Manufacturer: syz
[  860.411027][ T5876] usb 1-1: SerialNumber: syz
[  860.418176][ T5876] usb 1-1: config 0 descriptor??
[  860.427808][ T5876] xbox_remote_probe: Unexpected endpoint_in
[  860.460065][T15535] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  860.469318][T15535] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  860.477893][T15535] usb 5-1: Product: syz
[  860.482205][T15535] usb 5-1: Manufacturer: syz
[  860.490756][T15535] cdc_wdm 5-1:1.0: skipping garbage
[  860.496070][T15535] cdc_wdm 5-1:1.0: skipping garbage
[  860.503237][T15535] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  860.576280][T15535] cdc_wdm 5-1:1.0: Unknown control protocol
[  860.649495][T18056] IPv6: NLM_F_CREATE should be specified when creating new route
[  860.998733][T18048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  861.012733][T18050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  861.021869][T18048] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  861.030061][T18050] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  861.046489][T18050] netlink: 'syz.4.3403': attribute type 1 has an invalid length.
[  861.095898][T18050] bond3: entered promiscuous mode
[  861.108395][T18050] 8021q: adding VLAN 0 to HW filter on device bond3
[  861.120484][T15535] usb 1-1: USB disconnect, device number 58
[  861.156630][T18068] 8021q: adding VLAN 0 to HW filter on device bond3
[  861.171173][T18068] bond3: (slave vcan2): The slave device specified does not support setting the MAC address
[  861.181815][T18068] bond3: (slave vcan2): Setting fail_over_mac to active for active-backup mode
[  861.193686][T18068] bond3: (slave vcan2): making interface the new active one
[  861.203281][T18068] vcan2: entered promiscuous mode
[  861.220853][T18068] bond3: (slave vcan2): Enslaving as an active interface with an up link
[  861.624887][T18085] overlayfs: missing 'lowerdir'
[  862.837114][T15535] usb 5-1: USB disconnect, device number 99
[  862.890236][   T30] audit: type=1400 audit(1766305550.371:1470): avc:  denied  { execute } for  pid=18101 comm="syz.5.3420" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  863.161642][T18103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3411'.
[  863.679187][   T30] audit: type=1400 audit(1766305550.421:1471): avc:  denied  { create } for  pid=18101 comm="syz.5.3420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  863.740789][   T30] audit: type=1400 audit(1766305550.691:1472): avc:  denied  { ioctl } for  pid=18101 comm="syz.5.3420" path="socket:[62445]" dev="sockfs" ino=62445 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  863.915568][T18112] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3423'.
[  864.055602][T15535] usb 5-1: new high-speed USB device number 100 using dummy_hcd
[  864.093191][T18120] netlink: 2 bytes leftover after parsing attributes in process `syz.5.3424'.
[  864.207449][T18123] overlayfs: missing 'lowerdir'
[  864.248877][T15535] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  864.272912][T15535] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  864.295660][T15535] usb 5-1: Product: syz
[  864.307422][T15535] usb 5-1: Manufacturer: syz
[  864.320496][T15535] usb 5-1: SerialNumber: syz
[  864.337932][T15535] usb 5-1: config 0 descriptor??
[  864.356686][T15535] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  864.403955][T15535] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  864.445428][T15535] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  864.481784][T15535] usb 5-1: media controller created
[  864.515805][T15535] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  864.584909][T18100] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3419'.
[  864.642686][T15535] DVB: Unable to find symbol mt352_attach()
[  864.717657][T15535] DVB: Unable to find symbol nxt6000_attach()
[  864.730433][   T30] audit: type=1400 audit(1766305552.211:1473): avc:  denied  { name_connect } for  pid=18133 comm="syz.1.3428" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  864.753466][T18134] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem
[  864.760315][T15535] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  864.847675][   T30] audit: type=1400 audit(1766305552.231:1474): avc:  denied  { listen } for  pid=18133 comm="syz.1.3428" lport=49010 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  864.870977][   T30] audit: type=1400 audit(1766305552.231:1475): avc:  denied  { accept } for  pid=18133 comm="syz.1.3428" lport=49010 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  864.904660][T15535] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input43
[  864.917168][   T30] audit: type=1400 audit(1766305552.231:1476): avc:  denied  { setopt } for  pid=18133 comm="syz.1.3428" lport=49010 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  864.941564][T15535] dvb-usb: schedule remote query interval to 1000 msecs.
[  864.954929][T15535] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  864.965621][T15535] dvb-usb: bulk message failed: -22 (7/0)
[  864.971477][T15535] dvb-usb: bulk message failed: -22 (7/0)
[  864.979832][T15535] usb 5-1: USB disconnect, device number 100
[  865.040551][T15535] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  865.219694][ T5876] usb 2-1: new high-speed USB device number 88 using dummy_hcd
[  865.650764][   T30] audit: type=1400 audit(1766305553.121:1477): avc:  denied  { map } for  pid=18149 comm="syz.5.3434" path="socket:[62540]" dev="sockfs" ino=62540 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  865.828254][   T30] audit: type=1400 audit(1766305553.121:1478): avc:  denied  { read accept } for  pid=18149 comm="syz.5.3434" path="socket:[62540]" dev="sockfs" ino=62540 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  865.871008][ T5876] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  865.883195][T18153] netlink: 35 bytes leftover after parsing attributes in process `syz.5.3434'.
[  865.892317][ T5876] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  865.902907][ T5876] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  866.027787][T18158] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3435'.
[  866.483164][ T5876] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  866.788177][T18160] netlink: 'syz.5.3434': attribute type 4 has an invalid length.
[  866.811256][   T30] audit: type=1400 audit(1766305554.261:1479): avc:  denied  { write } for  pid=18149 comm="syz.5.3434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  866.841494][ T5876] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  866.878571][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  866.933930][ T5876] usb 2-1: Product: syz
[  866.938097][ T5876] usb 2-1: Manufacturer: syz
[  866.970011][T18167] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3437'.
[  867.017124][ T5876] cdc_wdm 2-1:1.0: skipping garbage
[  867.087796][ T5876] cdc_wdm 2-1:1.0: skipping garbage
[  867.106644][ T5876] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  867.140091][T18169] mac80211_hwsim hwsim32 syzkaller0: entered promiscuous mode
[  867.166550][T18169] mac80211_hwsim hwsim32 syzkaller0: entered allmulticast mode
[  867.178050][ T5876] cdc_wdm 2-1:1.0: Unknown control protocol
[  867.218801][T18169] tipc: Started in network mode
[  867.224622][T18169] tipc: Node identity 080211000001, cluster identity 4711
[  867.244182][T18169] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[  867.264941][T18138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  867.281820][T18138] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  867.312675][T18138] netlink: 'syz.1.3430': attribute type 1 has an invalid length.
[  867.383664][T18138] bond4: entered promiscuous mode
[  867.389848][T18138] 8021q: adding VLAN 0 to HW filter on device bond4
[  867.434205][T18174] 8021q: adding VLAN 0 to HW filter on device bond4
[  867.445705][T18174] bond4: (slave vcan3): The slave device specified does not support setting the MAC address
[  867.456417][T18174] bond4: (slave vcan3): Setting fail_over_mac to active for active-backup mode
[  867.483851][T18174] bond4: (slave vcan3): making interface the new active one
[  867.491817][T18174] vcan3: entered promiscuous mode
[  867.517749][T18174] bond4: (slave vcan3): Enslaving as an active interface with an up link
[  867.579626][T15535] usb 5-1: new high-speed USB device number 101 using dummy_hcd
[  867.781188][T15535] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  867.794550][T15535] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  867.825134][T15535] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  867.859617][T15535] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  867.880319][T15535] usb 5-1: Product: syz
[  867.885731][T15535] usb 5-1: Manufacturer: syz
[  867.892236][T15535] usb 5-1: SerialNumber: syz
[  867.901654][T18183] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3442'.
[  867.910914][T15535] usb 5-1: config 0 descriptor??
[  868.006967][T18187] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3442'.
[  868.026299][T18183] loop2: detected capacity change from 0 to 7
[  868.034615][T18183] Dev loop2: unable to read RDB block 7
[  868.040383][T18183]  loop2: AHDI p1 p2 p3
[  868.045602][T18183] loop2: partition table partially beyond EOD, truncated
[  868.359725][T15535] tipc: Node number set to 134418688
[  868.472705][T18183] loop2: p1 start 1601398130 is beyond EOD, truncated
[  868.483245][T18183] loop2: p2 start 1702059890 is beyond EOD, truncated
[  868.498477][   T24] usb 5-1: USB disconnect, device number 101
[  868.609531][T15535] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  868.761141][T15535] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  868.773748][T15535] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  868.785342][T15535] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  868.796605][T15535] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  868.807624][T15535] usb 1-1: Manufacturer: syz
[  868.815704][T15535] usb 1-1: config 0 descriptor??
[  868.822012][   T30] audit: type=1400 audit(1766305556.301:1480): avc:  denied  { write } for  pid=18192 comm="syz.6.3446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  868.843005][T18193] netlink: 111 bytes leftover after parsing attributes in process `syz.6.3446'.
[  868.855109][   T30] audit: type=1400 audit(1766305556.331:1481): avc:  denied  { create } for  pid=18192 comm="syz.6.3446" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key_socket permissive=1
[  868.875698][   T30] audit: type=1400 audit(1766305556.331:1482): avc:  denied  { create } for  pid=18192 comm="syz.6.3446" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1
[  868.932624][   T24] usb 2-1: USB disconnect, device number 88
[  869.141428][T18189] net_ratelimit: 940 callbacks suppressed
[  869.141453][T18189] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  869.166845][T18189] netlink: 'syz.0.3445': attribute type 10 has an invalid length.
[  869.167951][T18189] wlan1: mtu less than device minimum
[  869.167965][T18189] .`: (slave wlan1): Error -22 calling dev_set_mtu
[  869.249156][T15535] usbhid 1-1:0.0: can't add hid device: -71
[  869.249564][T15535] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  869.253349][T15535] usb 1-1: USB disconnect, device number 59
[  869.333108][T18205] netlink: 'syz.4.3450': attribute type 11 has an invalid length.
[  869.669695][T18222] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3452'.
[  870.170940][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  870.274124][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  871.584791][T18238] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3459'.
[  872.529540][T15535] usb 5-1: new high-speed USB device number 102 using dummy_hcd
[  872.877670][T15535] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  872.888498][T15535] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  872.910449][T15535] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  872.923794][T15535] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  872.949681][T15535] usb 5-1: Product: syz
[  872.963327][T15535] usb 5-1: Manufacturer: syz
[  872.977889][T15535] usb 5-1: SerialNumber: syz
[  872.998280][T15535] usb 5-1: config 0 descriptor??
[  873.344758][T15535] usb 5-1: USB disconnect, device number 102
[  873.398768][T18261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  873.731534][T18261] CIFS mount error: No usable UNC path provided in device string!
[  873.731534][T18261] 
[  873.741793][T18261] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  875.009669][ T5876] usb 2-1: new high-speed USB device number 89 using dummy_hcd
[  875.164687][T18284] netlink: 'syz.0.3476': attribute type 10 has an invalid length.
[  875.181275][ T5876] usb 2-1: unable to get BOS descriptor or descriptor too short
[  875.208365][ T5876] usb 2-1: config 5 interface 0 has no altsetting 0
[  875.225556][ T5876] usb 2-1: New USB device found, idVendor=13d3, idProduct=3402, bcdDevice=a4.60
[  875.243351][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  875.259915][ T5876] usb 2-1: Product: syz
[  875.264105][ T5876] usb 2-1: Manufacturer: syz
[  875.268687][ T5876] usb 2-1: SerialNumber: syz
[  875.415708][T18297] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3478'.
[  875.415708][T18299] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3478'.
[  875.494705][   T24] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[  875.536585][T18299] .` (unregistering): Released all slaves
[  875.650086][   T24] usb 7-1: Using ep0 maxpacket: 32
[  875.682785][ T5876] usb 2-1: USB disconnect, device number 89
[  875.691138][   T24] usb 7-1: config index 0 descriptor too short (expected 12799, got 27)
[  875.703992][   T24] usb 7-1: config 52 has too many interfaces: 56, using maximum allowed: 32
[  875.718483][   T24] usb 7-1: config 52 has an invalid descriptor of length 52, skipping remainder of the config
[  875.731467][   T24] usb 7-1: config 52 has 0 interfaces, different from the descriptor's value: 56
[  875.746897][   T24] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[  875.757428][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  875.772618][   T24] usb 7-1: Product: syz
[  875.779405][   T24] usb 7-1: Manufacturer: syz
[  875.788248][   T24] usb 7-1: SerialNumber: syz
[  876.015198][T18282] netlink: 116 bytes leftover after parsing attributes in process `syz.6.3474'.
[  876.079191][   T24] usb 7-1: USB disconnect, device number 25
[  876.307374][T18311] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3483'.
[  876.332214][T18311] team_slave_0: entered promiscuous mode
[  876.337894][T18311] team_slave_1: entered promiscuous mode
[  876.345864][T18311] macsec1: entered promiscuous mode
[  876.351199][T18311] team0: entered promiscuous mode
[  876.356489][T18311] macsec1: entered allmulticast mode
[  876.362361][T18311] team0: entered allmulticast mode
[  876.367469][T18311] team_slave_0: entered allmulticast mode
[  876.374559][T18311] team_slave_1: entered allmulticast mode
[  876.447507][T18311] team0: left allmulticast mode
[  876.452924][T18311] team_slave_0: left allmulticast mode
[  876.458428][T18311] team_slave_1: left allmulticast mode
[  876.464162][T18311] team0: left promiscuous mode
[  876.469392][T18311] team_slave_0: left promiscuous mode
[  876.474834][T18311] team_slave_1: left promiscuous mode
[  876.493875][   T30] kauditd_printk_skb: 5 callbacks suppressed
[  876.493888][   T30] audit: type=1400 audit(1766305563.971:1488): avc:  denied  { connect } for  pid=18312 comm="syz.0.3484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  876.535011][T18315] netlink: 'syz.0.3484': attribute type 12 has an invalid length.
[  876.549907][T18315] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3484'.
[  876.721554][T18319] 9p: Bad value for 'rfdno'
[  876.775669][ T5932] usb 1-1: new full-speed USB device number 60 using dummy_hcd
[  877.035961][T18325] ubi: mtd0 is already attached to ubi31
[  877.243270][   T30] audit: type=1400 audit(1766305564.721:1489): avc:  denied  { getopt } for  pid=18317 comm="syz.1.3485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  877.315044][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  877.338790][ T5932] usb 1-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00
[  877.348104][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  877.406496][ T5932] usb 1-1: config 0 descriptor??
[  878.316366][ T5932] usbhid 1-1:0.0: can't add hid device: -22
[  878.329010][ T5932] usbhid 1-1:0.0: probe with driver usbhid failed with error -22
[  878.619533][T18345] nbd4: detected capacity change from 0 to 63
[  878.626811][T18348] block nbd4: NBD_DISCONNECT
[  878.633845][T18348] block nbd4: Disconnected due to user request.
[  878.641704][T18348] block nbd4: shutting down sockets
[  879.200123][T15535] usb 2-1: new full-speed USB device number 90 using dummy_hcd
[  879.406835][T18361] netlink: 2 bytes leftover after parsing attributes in process `syz.6.3496'.
[  879.442921][T15535] usb 2-1: config 0 has an invalid interface number: 128 but max is 0
[  879.451270][T15535] usb 2-1: config 0 has no interface number 0
[  879.461975][T15535] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  879.471155][T15535] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  879.479523][T15535] usb 2-1: Product: syz
[  879.483746][T15535] usb 2-1: Manufacturer: syz
[  879.488393][T15535] usb 2-1: SerialNumber: syz
[  879.556276][T15535] usb 2-1: config 0 descriptor??
[  879.983294][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  880.018759][ T5876] usb 1-1: USB disconnect, device number 60
[  880.199350][T15535] usb 2-1: Firmware: major: 52, minor: 105, hardware type: HULUSB (4)
[  880.483697][T15535] usb 2-1: failed to fetch extended address, random address set
[  880.512784][T15535] usb 2-1: USB disconnect, device number 90
[  880.587914][T18379] fuse: Bad value for 'fd'
[  881.759744][T18393] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3506'.
[  882.727864][   T30] audit: type=1400 audit(1766305571.198:1490): avc:  denied  { append } for  pid=18406 comm="syz.4.3511" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  883.208604][   T30] audit: type=1400 audit(1766305571.588:1491): avc:  denied  { read } for  pid=18402 comm="syz.1.3510" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  883.545650][   T30] audit: type=1400 audit(1766305571.588:1492): avc:  denied  { open } for  pid=18402 comm="syz.1.3510" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  883.597394][   T30] audit: type=1400 audit(1766305571.608:1493): avc:  denied  { ioctl } for  pid=18402 comm="syz.1.3510" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  883.829611][T15535] usb 2-1: new high-speed USB device number 91 using dummy_hcd
[  884.000826][T15535] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  884.022620][T15535] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  884.041312][T15535] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  884.059523][T15535] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  884.077906][T15535] usb 2-1: Product: syz
[  884.082464][T15535] usb 2-1: Manufacturer: syz
[  884.087052][T15535] usb 2-1: SerialNumber: syz
[  884.098540][T15535] usb 2-1: config 0 descriptor??
[  884.277006][T18426] fuse: Bad value for 'fd'
[  884.656886][T15535] usb 2-1: USB disconnect, device number 91
[  884.691550][T18419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3516'.
[  884.713037][T18419] netlink: 'syz.0.3516': attribute type 30 has an invalid length.
[  884.740336][ T6716] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  884.751211][ T6716] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  884.761336][ T6716] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  884.771779][ T6716] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  885.272777][T18443] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3521'.
[  885.303392][T18443] macsec1: entered promiscuous mode
[  885.311413][T18443] team0: entered promiscuous mode
[  885.327572][T18443] macsec1: entered allmulticast mode
[  885.333951][T18443] team0: entered allmulticast mode
[  885.352249][T18443] team0: left allmulticast mode
[  885.357759][T18443] team0: left promiscuous mode
[  886.201502][T18455] fuse: Unknown parameter '0x000000000000000b'
[  886.411178][T18462] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3529'.
[  886.669388][T18472] fuse: Bad value for 'fd'
[  887.067506][T18473] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  887.071520][T18473] bond0: (slave lo): Enslaving as a backup interface with an up link
[  887.076941][T18473] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  887.804835][   T48] usb 7-1: new high-speed USB device number 26 using dummy_hcd
[  888.387790][T18486] netlink: 2 bytes leftover after parsing attributes in process `syz.5.3536'.
[  888.408567][T18488] netlink: 'syz.4.3537': attribute type 33 has an invalid length.
[  888.417472][T18488] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3537'.
[  888.422643][T18490] xt_socket: unknown flags 0x4
[  888.474929][T18492] PKCS8: Unsupported PKCS#8 version
[  888.508261][   T48] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  888.520277][   T48] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  888.531631][   T48] usb 7-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  888.541047][   T48] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  888.549023][   T48] usb 7-1: Product: syz
[  888.553217][   T48] usb 7-1: Manufacturer: syz
[  888.557806][   T48] usb 7-1: SerialNumber: syz
[  888.576146][   T48] usb 7-1: config 0 descriptor??
[  888.795099][T18500] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3541'.
[  889.326490][ T5932] usb 7-1: USB disconnect, device number 26
[  889.373479][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  889.386908][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  890.357593][T18512] fuse: Bad value for 'fd'
[  890.848213][T18518] FAULT_INJECTION: forcing a failure.
[  890.848213][T18518] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  890.870298][T18518] CPU: 1 UID: 0 PID: 18518 Comm: syz.6.3547 Not tainted syzkaller #0 PREEMPT(full) 
[  890.870319][T18518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  890.870329][T18518] Call Trace:
[  890.870335][T18518]  <TASK>
[  890.870342][T18518]  dump_stack_lvl+0x16c/0x1f0
[  890.870367][T18518]  should_fail_ex+0x512/0x640
[  890.870397][T18518]  _copy_from_user+0x2e/0xd0
[  890.870422][T18518]  copy_msghdr_from_user+0x98/0x160
[  890.870441][T18518]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  890.870471][T18518]  ___sys_sendmsg+0xfe/0x1d0
[  890.870489][T18518]  ? __pfx____sys_sendmsg+0x10/0x10
[  890.870543][T18518]  __sys_sendmsg+0x16d/0x220
[  890.870561][T18518]  ? __pfx___sys_sendmsg+0x10/0x10
[  890.870595][T18518]  do_syscall_64+0xcd/0xf80
[  890.870618][T18518]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  890.870635][T18518] RIP: 0033:0x7fc6ef38f749
[  890.870648][T18518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  890.870664][T18518] RSP: 002b:00007fc6f01c0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  890.870679][T18518] RAX: ffffffffffffffda RBX: 00007fc6ef5e5fa0 RCX: 00007fc6ef38f749
[  890.870690][T18518] RDX: 0000000000000800 RSI: 0000200000000000 RDI: 0000000000000006
[  890.870700][T18518] RBP: 00007fc6f01c0090 R08: 0000000000000000 R09: 0000000000000000
[  890.870710][T18518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  890.870719][T18518] R13: 00007fc6ef5e6038 R14: 00007fc6ef5e5fa0 R15: 00007ffefc7bec18
[  890.870743][T18518]  </TASK>
[  891.100315][T18492] syz.1.3539 (18492): drop_caches: 2
[  891.110563][   T30] audit: type=1400 audit(1766305580.587:1494): avc:  denied  { listen } for  pid=18523 comm="syz.6.3548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  891.120259][T18524] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3548'.
[  891.189539][T15535] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  891.521197][T15535] usb 1-1: Using ep0 maxpacket: 32
[  891.605396][T15535] usb 1-1: config 0 has an invalid interface number: 2 but max is 0
[  891.634470][T15535] usb 1-1: config 0 has no interface number 0
[  891.641771][T15535] usb 1-1: config 0 interface 2 has no altsetting 0
[  891.670952][T15535] usb 1-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f
[  891.684718][T15535] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  891.699415][T15535] usb 1-1: Product: syz
[  891.705181][T15535] usb 1-1: Manufacturer: syz
[  891.714233][T15535] usb 1-1: SerialNumber: syz
[  891.722823][T15535] usb 1-1: config 0 descriptor??
[  891.823852][   T48] usb 7-1: new full-speed USB device number 27 using dummy_hcd
[  891.940943][T15535] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  891.969549][   T48] usb 7-1: device descriptor read/64, error -71
[  891.998313][T15535] usb 1-1: USB disconnect, device number 61
[  892.095465][ T5876] usb 2-1: new high-speed USB device number 92 using dummy_hcd
[  892.229527][   T48] usb 7-1: new full-speed USB device number 28 using dummy_hcd
[  892.261315][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  892.281800][ T5876] usb 2-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00
[  892.296331][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  892.313516][ T5876] usb 2-1: config 0 descriptor??
[  892.369593][   T48] usb 7-1: device descriptor read/64, error -71
[  892.491170][   T48] usb usb7-port1: attempt power cycle
[  892.869730][ T5876] holtek_mouse 0003:04D9:A072.004B: item fetching failed at offset 2/5
[  892.884250][ T5876] holtek_mouse 0003:04D9:A072.004B: hid parse failed: -22
[  892.896154][ T5876] holtek_mouse 0003:04D9:A072.004B: probe with driver holtek_mouse failed with error -22
[  892.929533][   T48] usb 7-1: new full-speed USB device number 29 using dummy_hcd
[  892.963971][   T48] usb 7-1: device descriptor read/8, error -71
[  892.999554][T15535] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[  893.079166][   T30] audit: type=1400 audit(1766305582.547:1495): avc:  denied  { read } for  pid=18538 comm="syz.1.3553" name="usbmon5" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  893.219762][   T30] audit: type=1400 audit(1766305582.577:1496): avc:  denied  { open } for  pid=18538 comm="syz.1.3553" path="/dev/usbmon5" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  893.846664][T15535] usb 1-1: Using ep0 maxpacket: 32
[  893.853750][   T48] usb 7-1: new full-speed USB device number 30 using dummy_hcd
[  893.903886][T15535] usb 1-1: config 0 has an invalid interface number: 188 but max is 0
[  893.912878][T15535] usb 1-1: config 0 has no interface number 0
[  893.918961][T15535] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  893.933484][T15535] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  893.942987][   T48] usb 7-1: device descriptor read/8, error -71
[  893.950802][T15535] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  893.959530][T15535] usb 1-1: Product: syz
[  893.964109][T15535] usb 1-1: Manufacturer: syz
[  893.969299][T15535] usb 1-1: SerialNumber: syz
[  893.977675][T15535] usb 1-1: config 0 descriptor??
[  893.985801][T18542] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  894.060898][   T48] usb usb7-port1: unable to enumerate USB device
[  894.204953][T18541] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  894.413785][T15535] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  894.430440][T15535] asix 1-1:0.188: probe with driver asix failed with error -61
[  894.439075][T18499] Set syz1 is full, maxelem 65536 reached
[  894.512490][T18549] fuse: Bad value for 'fd'
[  894.955493][ T5932] usb 2-1: USB disconnect, device number 92
[  894.986016][T18553] openvswitch: netlink: Invalid VLAN frame
[  895.005222][   T30] audit: type=1400 audit(1766305584.477:1497): avc:  denied  { create } for  pid=18555 comm="syz.5.3558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  895.258672][T18570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3556'.
[  895.300376][T18568] 8021q: adding VLAN 0 to HW filter on device bond4
[  895.323052][T18573] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3562'.
[  895.330859][T18568] bond0: (slave bond4): making interface the new active one
[  895.339341][T18568] bond4: entered promiscuous mode
[  895.346593][T18568] bond0: (slave bond4): Enslaving as an active interface with an up link
[  895.356899][ T5932] usb 2-1: new high-speed USB device number 93 using dummy_hcd
[  895.513458][ T5932] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  895.524345][ T5932] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  895.973993][ T5932] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  895.983291][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  895.991806][ T5932] usb 2-1: Product: syz
[  895.996110][ T5932] usb 2-1: Manufacturer: syz
[  896.000925][ T5932] usb 2-1: SerialNumber: syz
[  896.010846][ T5932] usb 2-1: config 0 descriptor??
[  896.023538][   T24] usb 1-1: USB disconnect, device number 62
[  896.348745][   T24] usb 2-1: USB disconnect, device number 93
[  896.672678][T18586] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3567'.
[  897.149571][   T24] usb 1-1: new full-speed USB device number 63 using dummy_hcd
[  897.171321][T18602] fuse: Bad value for 'fd'
[  897.191203][   T48] usb 7-1: new high-speed USB device number 31 using dummy_hcd
[  897.579805][   T24] usb 1-1: device descriptor read/64, error -71
[  897.639583][T15535] usb 2-1: new high-speed USB device number 94 using dummy_hcd
[  897.660778][   T48] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  897.670593][   T48] usb 7-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00
[  897.679669][   T48] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  897.688857][   T48] usb 7-1: config 0 descriptor??
[  897.809527][T15535] usb 2-1: Using ep0 maxpacket: 8
[  897.816290][T15535] usb 2-1: unable to get BOS descriptor or descriptor too short
[  897.825345][T15535] usb 2-1: config 2 has an invalid interface number: 70 but max is 0
[  897.833678][   T24] usb 1-1: new full-speed USB device number 64 using dummy_hcd
[  897.842687][T15535] usb 2-1: config 2 has no interface number 0
[  897.858046][T15535] usb 2-1: config 2 interface 70 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64
[  897.875447][T15535] usb 2-1: config 2 interface 70 altsetting 0 endpoint 0x9 has invalid maxpacket 512, setting to 64
[  897.890669][T15535] usb 2-1: New USB device found, idVendor=0403, idProduct=fb99, bcdDevice= 1.a7
[  897.909141][T15535] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  897.920869][T15535] usb 2-1: Product: syz
[  897.925176][T15535] usb 2-1: Manufacturer: syz
[  897.932178][T15535] usb 2-1: SerialNumber: syz
[  897.989589][   T24] usb 1-1: device descriptor read/64, error -71
[  898.099803][   T24] usb usb1-port1: attempt power cycle
[  898.112806][   T48] holtek_mouse 0003:04D9:A072.004C: item fetching failed at offset 2/5
[  898.122766][   T48] holtek_mouse 0003:04D9:A072.004C: hid parse failed: -22
[  898.129976][   T48] holtek_mouse 0003:04D9:A072.004C: probe with driver holtek_mouse failed with error -22
[  898.142637][T15535] ftdi_sio 2-1:2.70: FTDI USB Serial Device converter detected
[  898.150690][T15535] usb 2-1: Detected SIO
[  898.155460][T15535] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  898.165587][T15535] usb 2-1: USB disconnect, device number 94
[  898.173678][T15535] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  898.183744][T15535] ftdi_sio 2-1:2.70: device disconnected
[  898.315672][   T48] usb 7-1: USB disconnect, device number 31
[  898.369566][ T5932] usb 5-1: new high-speed USB device number 103 using dummy_hcd
[  898.449501][   T24] usb 1-1: new full-speed USB device number 65 using dummy_hcd
[  898.469873][   T24] usb 1-1: device descriptor read/8, error -71
[  898.525895][ T5932] usb 5-1: unable to get BOS descriptor or descriptor too short
[  898.534194][ T5932] usb 5-1: unable to read config index 0 descriptor/start: -71
[  898.541848][ T5932] usb 5-1: can't read configurations, error -71
[  898.662984][T18610] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  898.719560][   T24] usb 1-1: new full-speed USB device number 66 using dummy_hcd
[  898.751210][   T24] usb 1-1: device descriptor read/8, error -71
[  898.870423][   T24] usb usb1-port1: unable to enumerate USB device
[  898.969890][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  899.689619][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  899.999671][   T30] audit: type=1400 audit(1766305589.247:1498): avc:  denied  { write } for  pid=18614 comm="syz.6.3580" path="socket:[64533]" dev="sockfs" ino=64533 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  900.277726][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  900.285907][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  900.303778][   T30] audit: type=1400 audit(1766305589.777:1499): avc:  denied  { create } for  pid=18591 comm="syz.0.3570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  900.344179][   T30] audit: type=1400 audit(1766305589.777:1500): avc:  denied  { bind } for  pid=18591 comm="syz.0.3570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  900.364769][   T30] audit: type=1400 audit(1766305589.777:1501): avc:  denied  { write } for  pid=18591 comm="syz.0.3570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  900.644751][T18628] netlink: 'syz.4.3582': attribute type 4 has an invalid length.
[  900.729590][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  901.303392][T18638] fuse: Bad value for 'fd'
[  903.151794][T18664] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3595'.
[  903.269514][ T5932] usb 2-1: new high-speed USB device number 95 using dummy_hcd
[  903.412031][   T30] audit: type=1400 audit(1766305592.877:1502): avc:  denied  { append } for  pid=18659 comm="syz.4.3595" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  903.438262][ T5932] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  903.455402][ T5932] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  903.477174][ T5932] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  903.497336][ T5932] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  903.518929][ T5932] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  903.528930][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  903.537187][ T5932] usb 2-1: Product: syz
[  903.541492][ T5932] usb 2-1: Manufacturer: syz
[  903.549968][ T5932] cdc_wdm 2-1:1.0: skipping garbage
[  903.555258][ T5932] cdc_wdm 2-1:1.0: skipping garbage
[  903.633288][ T5932] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  903.633299][ T5932] cdc_wdm 2-1:1.0: Unknown control protocol
[  904.099819][T15535] usb 7-1: new high-speed USB device number 32 using dummy_hcd
[  904.184294][T18658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  904.199721][T18658] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  904.205554][T18658] netlink: 'syz.1.3594': attribute type 1 has an invalid length.
[  904.420090][T15535] usb 7-1: Using ep0 maxpacket: 32
[  904.422796][T15535] usb 7-1: config index 0 descriptor too short (expected 12799, got 27)
[  904.422820][T15535] usb 7-1: config 52 has too many interfaces: 56, using maximum allowed: 32
[  904.422838][T15535] usb 7-1: config 52 has an invalid descriptor of length 52, skipping remainder of the config
[  904.422855][T15535] usb 7-1: config 52 has 0 interfaces, different from the descriptor's value: 56
[  904.430689][T15535] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[  904.430754][T15535] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  904.430863][T15535] usb 7-1: Product: syz
[  904.430962][T15535] usb 7-1: Manufacturer: syz
[  904.431060][T15535] usb 7-1: SerialNumber: syz
[  904.922623][T18658] bond5: entered promiscuous mode
[  904.924266][T18658] 8021q: adding VLAN 0 to HW filter on device bond5
[  905.212353][T18677] 8021q: adding VLAN 0 to HW filter on device bond5
[  905.212549][T18677] bond5: (slave vcan4): The slave device specified does not support setting the MAC address
[  905.212561][T18677] bond5: (slave vcan4): Setting fail_over_mac to active for active-backup mode
[  905.214126][T18677] bond5: (slave vcan4): making interface the new active one
[  905.214137][T18677] vcan4: entered promiscuous mode
[  905.214802][T18677] bond5: (slave vcan4): Enslaving as an active interface with an up link
[  905.370135][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  905.370262][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  905.439801][T18670] netlink: 116 bytes leftover after parsing attributes in process `syz.6.3597'.
[  905.473374][T15535] usb 7-1: USB disconnect, device number 32
[  906.518287][ T5897] usb 2-1: USB disconnect, device number 95
[  906.621372][T18698] netlink: 'syz.0.3604': attribute type 11 has an invalid length.
[  906.939515][T15535] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[  907.079625][T15535] usb 1-1: device descriptor read/64, error -71
[  907.259496][   T48] usb 2-1: new high-speed USB device number 96 using dummy_hcd
[  907.279521][T16666] usb 7-1: new high-speed USB device number 33 using dummy_hcd
[  907.331245][T15535] usb 1-1: new high-speed USB device number 68 using dummy_hcd
[  907.356086][T18722] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3615'.
[  907.386422][   T30] audit: type=1400 audit(1766305596.857:1503): avc:  denied  { connect } for  pid=18724 comm="syz.5.3616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  907.440454][   T48] usb 2-1: Using ep0 maxpacket: 32
[  907.446725][   T48] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  907.458077][T14319] Bluetooth: hci2: command 0x0406 tx timeout
[  907.465983][   T48] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  907.475636][   T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  907.483785][T15535] usb 1-1: device descriptor read/64, error -71
[  907.490127][T16666] usb 7-1: Using ep0 maxpacket: 32
[  907.495301][   T48] usb 2-1: Product: syz
[  907.499528][   T48] usb 2-1: Manufacturer: syz
[  907.504130][   T48] usb 2-1: SerialNumber: syz
[  907.510854][T16666] usb 7-1: config index 0 descriptor too short (expected 12799, got 27)
[  907.519185][T16666] usb 7-1: config 52 has too many interfaces: 56, using maximum allowed: 32
[  907.529077][   T48] usb 2-1: config 0 descriptor??
[  907.551426][   T48] quatech2 2-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected
[  907.563479][T16666] usb 7-1: config 52 has an invalid descriptor of length 52, skipping remainder of the config
[  907.586264][T16666] usb 7-1: config 52 has 0 interfaces, different from the descriptor's value: 56
[  907.610009][T16666] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[  907.619291][T16666] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  907.628581][T15535] usb usb1-port1: attempt power cycle
[  907.639106][T16666] usb 7-1: Product: syz
[  907.643399][T16666] usb 7-1: Manufacturer: syz
[  907.648250][T16666] usb 7-1: SerialNumber: syz
[  907.659606][ T5876] usb 5-1: new high-speed USB device number 105 using dummy_hcd
[  907.819533][ T5876] usb 5-1: device descriptor read/64, error -71
[  907.969547][T15535] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[  908.001289][T15535] usb 1-1: device descriptor read/8, error -71
[  908.069371][ T5876] usb 5-1: new high-speed USB device number 106 using dummy_hcd
[  908.101456][T18710] netlink: 116 bytes leftover after parsing attributes in process `syz.6.3609'.
[  908.250028][ T5876] usb 5-1: device descriptor read/64, error -71
[  908.257361][T15535] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[  908.334789][T15535] usb 1-1: device descriptor read/8, error -71
[  908.401920][ T5876] usb usb5-port1: attempt power cycle
[  908.456688][T16666] usb 7-1: USB disconnect, device number 33
[  908.492264][T15535] usb usb1-port1: unable to enumerate USB device
[  908.589393][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  909.000013][ T5876] usb 5-1: new high-speed USB device number 107 using dummy_hcd
[  909.072922][ T5876] usb 5-1: device descriptor read/8, error -71
[  909.330011][ T5876] usb 5-1: new high-speed USB device number 108 using dummy_hcd
[  909.382260][ T5876] usb 5-1: device descriptor read/8, error -71
[  909.501456][ T5876] usb usb5-port1: unable to enumerate USB device
[  909.617776][T18735] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3618'.
[  909.713554][   T30] audit: type=1400 audit(1766305599.177:1504): avc:  denied  { setopt } for  pid=18734 comm="syz.6.3618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  909.864626][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  910.031511][T18738] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3619'.
[  910.040879][ T7141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  910.049150][ T7141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  910.057243][ T7141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  910.065373][ T7141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  910.093609][   T48] usb 2-1: qt2_attach - failed to power on unit: -71
[  910.116249][   T48] quatech2 2-1:0.0: probe with driver quatech2 failed with error -71
[  910.273214][   T48] usb 2-1: USB disconnect, device number 96
[  910.477424][T18750] syzkaller0: entered promiscuous mode
[  910.483338][T18750] syzkaller0: entered allmulticast mode
[  911.309270][T18759] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[  911.318727][T18749] tipc: Resetting bearer <eth:syzkaller0>
[  911.345844][T18749] tipc: Disabling bearer <eth:syzkaller0>
[  911.490188][ T5876] usb 2-1: new high-speed USB device number 97 using dummy_hcd
[  912.171456][T18772] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3628'.
[  912.549516][ T5876] usb 2-1: Using ep0 maxpacket: 32
[  912.556024][ T5876] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[  912.579944][ T5876] usb 2-1: config 0 has no interface number 0
[  912.586662][ T5876] usb 2-1: config 0 interface 184 has no altsetting 0
[  912.640862][ T5876] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  912.650440][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  912.658529][ T5876] usb 2-1: Product: syz
[  912.663748][ T5876] usb 2-1: Manufacturer: syz
[  912.668373][ T5876] usb 2-1: SerialNumber: syz
[  912.681942][ T5876] usb 2-1: config 0 descriptor??
[  912.714179][ T5876] smsc75xx v1.0.0
[  912.765985][   T30] audit: type=1400 audit(2000000003.050:1505): avc:  denied  { read } for  pid=18778 comm="syz.4.3631" dev="sockfs" ino=64841 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  912.906738][T18783] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3631'.
[  912.961628][   T48] usb 7-1: new high-speed USB device number 34 using dummy_hcd
[  913.147016][ T5876] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[  913.160935][   T48] usb 7-1: Using ep0 maxpacket: 16
[  913.169321][ T5876] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61
[  913.192975][   T48] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  913.217440][ T5876] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  913.243636][   T48] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  913.307495][ T5876] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61
[  913.316297][   T48] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[  913.341168][   T48] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  913.398103][   T48] usb 7-1: config 0 descriptor??
[  913.609603][ T5897] usb 5-1: new high-speed USB device number 109 using dummy_hcd
[  913.807349][ T5897] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  913.820078][ T5897] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  914.135910][ T5897] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  914.191196][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  914.200967][   T48] usbhid 7-1:0.0: can't add hid device: -71
[  914.207268][ T5897] usb 5-1: Product: syz
[  914.211896][   T48] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  914.212149][ T5897] usb 5-1: Manufacturer: syz
[  914.227700][ T5897] usb 5-1: SerialNumber: syz
[  914.228697][T18804] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3637'.
[  914.240493][ T5897] usb 5-1: config 0 descriptor??
[  914.243716][   T48] usb 7-1: USB disconnect, device number 34
[  914.538825][ T5876] usb 5-1: USB disconnect, device number 109
[  914.824126][T18812] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3638'.
[  914.838337][T18812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  914.924881][ T5897] usb 2-1: USB disconnect, device number 97
[  915.064038][T18819] hub 1-0:1.0: USB hub found
[  915.069527][T18819] hub 1-0:1.0: 1 port detected
[  915.942940][ T5988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  915.951111][ T5988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  915.959203][ T5988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  915.967331][ T5988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  915.982248][ T6720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  915.990745][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  915.998802][ T6720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  916.006864][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  916.014927][ T6720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  916.021693][ T5946] dvb-usb: did not find the firmware file 'dvb-usb-p1100.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  916.023022][ T6720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  916.056927][ T5946] dvb-usb: found a 'Prof 1100 USB ' in cold state, will try to load a firmware
[  916.090913][ T5946] usb 6-1: Direct firmware load for dvb-usb-p1100.fw failed with error -2
[  916.099420][ T5946] usb 6-1: Falling back to sysfs fallback for: dvb-usb-p1100.fw
[  916.333345][   T30] audit: type=1400 audit(2000000006.620:1506): avc:  denied  { ioctl } for  pid=18836 comm="syz.1.3648" path="socket:[66022]" dev="sockfs" ino=66022 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  916.425021][ T5926] usb 1-1: new high-speed USB device number 71 using dummy_hcd
[  916.432745][ T5897] usb 7-1: new high-speed USB device number 35 using dummy_hcd
[  916.621070][ T5897] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[  916.635363][ T5926] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  916.788592][ T5926] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  916.841633][ T5897] usb 7-1: config 0 interface 0 has no altsetting 0
[  916.853728][ T5897] usb 7-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00
[  916.864166][ T5926] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  916.873177][ T5897] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  916.881245][ T5926] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  916.894603][ T5897] usb 7-1: config 0 descriptor??
[  916.901567][ T5926] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  916.911262][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  916.945064][ T5926] usb 1-1: Product: syz
[  916.953430][ T5926] usb 1-1: Manufacturer: syz
[  916.976477][ T5926] cdc_wdm 1-1:1.0: skipping garbage
[  916.982750][ T5926] cdc_wdm 1-1:1.0: skipping garbage
[  916.997758][ T5926] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  917.021818][ T5926] cdc_wdm 1-1:1.0: Unknown control protocol
[  917.186025][T18828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  917.194609][T18828] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  917.290546][T18828] netlink: 'syz.0.3645': attribute type 1 has an invalid length.
[  917.483072][ T5897] aquacomputer_d5next 0003:0C70:F0B6.004D: item fetching failed at offset 5/7
[  917.492359][ T5897] aquacomputer_d5next 0003:0C70:F0B6.004D: probe with driver aquacomputer_d5next failed with error -22
[  917.533935][T18828] bond5: entered promiscuous mode
[  917.539130][T18828] 8021q: adding VLAN 0 to HW filter on device bond5
[  917.776400][T18853] 8021q: adding VLAN 0 to HW filter on device bond5
[  917.786586][T18853] bond5: (slave vcan5): The slave device specified does not support setting the MAC address
[  917.796886][T18853] bond5: (slave vcan5): Setting fail_over_mac to active for active-backup mode
[  917.847046][T18853] bond5: (slave vcan5): making interface the new active one
[  917.853553][ T5876] usb 7-1: USB disconnect, device number 35
[  917.857444][T18853] vcan5: entered promiscuous mode
[  917.877922][T18853] bond5: (slave vcan5): Enslaving as an active interface with an up link
[  917.996706][   T30] audit: type=1400 audit(2000000008.280:1507): avc:  denied  { bind } for  pid=18862 comm="syz.4.3654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  918.019127][   T30] audit: type=1400 audit(2000000008.310:1508): avc:  denied  { name_bind } for  pid=18862 comm="syz.4.3654" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  918.040914][   T30] audit: type=1400 audit(2000000008.310:1509): avc:  denied  { node_bind } for  pid=18862 comm="syz.4.3654" saddr=::ffff:0.0.0.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  918.979077][ T5897] usb 5-1: new high-speed USB device number 110 using dummy_hcd
[  919.161107][ T5897] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  919.185108][ T5924] usb 1-1: USB disconnect, device number 71
[  919.197880][ T5897] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  919.232240][ T5897] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  919.241486][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  919.250021][ T5897] usb 5-1: Product: syz
[  919.254741][ T5897] usb 5-1: Manufacturer: syz
[  919.260117][ T5897] usb 5-1: SerialNumber: syz
[  919.267178][ T5897] usb 5-1: config 0 descriptor??
[  919.566179][ T5876] usb 5-1: USB disconnect, device number 110
[  919.740082][   T30] audit: type=1400 audit(2000000010.010:1510): avc:  denied  { append } for  pid=18897 comm="syz.0.3664" name="sg0" dev="devtmpfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  920.374992][T18920] tmpfs: Unknown parameter 'grpquosa_inoEidÍOÿde_hardlimit'
[  920.385780][ T5876] usb 2-1: new high-speed USB device number 98 using dummy_hcd
[  920.749540][   T30] audit: type=1400 audit(2000000011.000:1511): avc:  denied  { ioctl } for  pid=18928 comm="syz.4.3672" path="socket:[65251]" dev="sockfs" ino=65251 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  920.940580][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  920.950660][ T5876] usb 2-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00
[  920.959875][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  920.969831][ T5876] usb 2-1: config 0 descriptor??
[  921.359354][ T5876] usbhid 2-1:0.0: can't add hid device: -71
[  921.359407][ T5876] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  921.363206][ T5876] usb 2-1: USB disconnect, device number 98
[  921.370622][ T5974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  921.370687][ T5974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  921.370709][ T5974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  921.370732][ T5974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  921.371040][ T3480] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  921.371064][ T3480] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  921.371085][ T3480] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  921.371106][ T3480] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  921.659551][ T5876] usb 2-1: new high-speed USB device number 99 using dummy_hcd
[  921.831851][T16666] usb 7-1: new high-speed USB device number 36 using dummy_hcd
[  921.881717][   T30] audit: type=1400 audit(2000000012.160:1512): avc:  denied  { connect } for  pid=18938 comm="syz.5.3675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  922.133593][ T5876] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  922.133608][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  922.133619][ T5876] usb 2-1: Product: syz
[  922.133627][ T5876] usb 2-1: Manufacturer: syz
[  922.133635][ T5876] usb 2-1: SerialNumber: syz
[  922.255564][T16666] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  922.255587][T16666] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  922.255603][T16666] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[  922.255638][T16666] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  922.257241][T16666] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  922.257263][T16666] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  922.257280][T16666] usb 7-1: Product: syz
[  922.257294][T16666] usb 7-1: Manufacturer: syz
[  922.261613][T16666] cdc_wdm 7-1:1.0: skipping garbage
[  922.261629][T16666] cdc_wdm 7-1:1.0: skipping garbage
[  922.263040][T16666] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[  922.263056][T16666] cdc_wdm 7-1:1.0: Unknown control protocol
[  922.369663][T15535] usb 5-1: new high-speed USB device number 111 using dummy_hcd
[  922.468244][T18941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  922.479271][T18941] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  922.515610][T18941] netlink: 'syz.6.3676': attribute type 1 has an invalid length.
[  922.546483][T15535] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  922.568482][T15535] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  922.589386][T18941] bond4: entered promiscuous mode
[  922.598293][T15535] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  922.601386][T18941] 8021q: adding VLAN 0 to HW filter on device bond4
[  922.614378][T15535] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  922.628788][T15535] usb 5-1: Product: syz
[  922.635098][T15535] usb 5-1: Manufacturer: syz
[  922.639805][T15535] usb 5-1: SerialNumber: syz
[  922.665433][T15535] usb 5-1: config 0 descriptor??
[  922.986196][T15535] usb 5-1: USB disconnect, device number 111
[  923.144876][T18964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3683'.
[  923.151565][ T5876] rtl8150 2-1:1.0: couldn't reset the device
[  923.164671][ T5876] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5
[  923.259136][ T5876] usb 2-1: USB disconnect, device number 99
[  923.930925][T18974] netlink: 'syz.4.3687': attribute type 33 has an invalid length.
[  923.939171][T18974] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3687'.
[  924.021493][   T30] audit: type=1400 audit(2000000014.310:1513): avc:  denied  { unmount } for  pid=11251 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  924.096118][   T30] audit: type=1400 audit(2000000014.380:1514): avc:  denied  { bind } for  pid=18977 comm="syz.5.3688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  924.250466][   T30] audit: type=1400 audit(2000000014.410:1515): avc:  denied  { setopt } for  pid=18977 comm="syz.5.3688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  924.879560][ T5897] usb 7-1: USB disconnect, device number 36
[  925.942815][T19006] netlink: 'syz.4.3698': attribute type 10 has an invalid length.
[  926.516203][ T5988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  926.524364][ T5988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  926.532501][ T5988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  926.540624][ T5988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  926.546051][T19010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3699'.
[  926.579846][T19010] bridge_slave_1: left allmulticast mode
[  926.585684][T19010] bridge_slave_1: left promiscuous mode
[  926.594880][T19010] bridge0: port 2(bridge_slave_1) entered disabled state
[  926.621752][T19010] bridge_slave_0: left allmulticast mode
[  926.629320][T19010] bridge_slave_0: left promiscuous mode
[  926.695599][T19010] bridge0: port 1(bridge_slave_0) entered disabled state
[  926.860434][ T5926] usb 7-1: new high-speed USB device number 37 using dummy_hcd
[  927.117422][ T5926] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  927.130378][ T5988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  927.138472][ T5988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  927.146577][ T5988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  927.154652][ T5988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  927.163197][ T5926] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  927.312119][ T5926] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[  927.486926][ T5926] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  927.509085][ T5926] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  927.524469][ T5926] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  927.538905][ T5926] usb 7-1: Product: syz
[  927.543699][ T5926] usb 7-1: Manufacturer: syz
[  927.563512][ T5926] cdc_wdm 7-1:1.0: skipping garbage
[  927.572262][ T5926] cdc_wdm 7-1:1.0: skipping garbage
[  927.634525][ T5926] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[  927.656677][ T5926] cdc_wdm 7-1:1.0: Unknown control protocol
[  927.773048][T19013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  927.782036][T19013] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  927.846982][T19013] netlink: 'syz.6.3701': attribute type 1 has an invalid length.
[  928.137015][   T30] audit: type=1400 audit(2000000019.359:1516): avc:  denied  { write } for  pid=19031 comm="syz.0.3705" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  928.793017][T19013] bond5: entered promiscuous mode
[  928.808561][T19013] 8021q: adding VLAN 0 to HW filter on device bond5
[  928.912035][T19045] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3707'.
[  928.953261][ T5876] IPVS: starting estimator thread 0...
[  929.319712][T19049] IPVS: using max 39 ests per chain, 93600 per kthread
[  930.022243][ T5813] usb 7-1: USB disconnect, device number 37
[  930.289033][T19073] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3718'.
[  930.401707][T19075] [U] 
[  930.404740][T19075] [U] 
[  930.407426][T19075] [U] 
[  930.410115][T19075] [U] 
[  930.420252][ T5897] usb 5-1: new high-speed USB device number 112 using dummy_hcd
[  930.509667][   T30] audit: type=1400 audit(2000000022.760:1517): avc:  granted  { setsecparam } for  pid=19066 comm="syz.0.3715" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[  930.718573][ T5897] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  930.812381][T19075] [U] 
[  930.815080][T19075] [U] 
[  930.817765][T19075] [U] 
[  930.820448][T19075] [U] 
[  930.832999][T19075] [U] 
[  930.835701][T19075] [U] 
[  930.838093][ T5897] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  930.838385][T19075] [U] 
[  930.851082][T19075] [U] 
[  930.856602][ T5897] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  930.865651][ T5897] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  930.883005][T19075] [U] 
[  930.885702][T19075] [U] 
[  930.888386][T19075] [U] 
[  930.891077][T19075] [U] 
[  930.902377][ T5897] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  930.917084][T19075] [U] 
[  930.919773][T19075] [U] 
[  930.922444][T19075] [U] 
[  930.925109][T19075] [U] 
[  930.937539][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  930.959401][T19075] [U] 
[  930.962105][T19075] [U] 
[  930.964791][T19075] [U] 
[  930.967474][T19075] [U] 
[  930.977527][ T5897] usb 5-1: Product: syz
[  930.990324][ T5897] usb 5-1: Manufacturer: syz
[  931.003396][T19075] [U] 
[  931.006088][T19075] [U] 
[  931.008758][T19075] [U] 
[  931.011427][T19075] [U] 
[  931.015713][ T5897] cdc_wdm 5-1:1.0: skipping garbage
[  931.038784][T19075] [U] 
[  931.041484][T19075] [U] 
[  931.044167][T19075] [U] 
[  931.046851][T19075] [U] 
[  931.059485][ T5897] cdc_wdm 5-1:1.0: skipping garbage
[  931.120647][ T5897] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  931.139570][T19075] [U] 
[  931.142269][T19075] [U] 
[  931.144955][T19075] [U] 
[  931.147639][T19075] [U] 
[  931.156236][ T5897] cdc_wdm 5-1:1.0: Unknown control protocol
[  931.192437][T19075] [U] 
[  931.195136][T19075] [U] 
[  931.197813][T19075] [U] 
[  931.200487][T19075] [U] 
[  931.270371][T19075] [U] 
[  931.273069][T19075] [U] 
[  931.273188][T19069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  931.275745][T19075] [U] 
[  931.275771][T19075] [U] 
[  931.297705][T19069] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  931.335713][T19069] netlink: 'syz.4.3716': attribute type 1 has an invalid length.
[  931.359322][T19096] netlink: 'syz.1.3723': attribute type 33 has an invalid length.
[  931.374941][T19069] bond5: entered promiscuous mode
[  931.379528][T19096] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3723'.
[  931.401162][T19069] 8021q: adding VLAN 0 to HW filter on device bond5
[  931.493208][   T30] audit: type=1400 audit(2000000023.780:1518): avc:  denied  { create } for  pid=19103 comm="syz.1.3726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[  931.519611][ T5813] usb 1-1: new high-speed USB device number 72 using dummy_hcd
[  931.627166][ T5988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  931.635371][ T5988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  931.643579][ T5988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  931.651752][ T5988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  931.667493][   T30] audit: type=1400 audit(2000000023.810:1519): avc:  denied  { sys_admin } for  pid=19103 comm="syz.1.3726" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[  932.099722][T16666] usb 7-1: new high-speed USB device number 38 using dummy_hcd
[  932.122551][ T5813] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  932.132067][ T5813] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  932.223334][ T5813] usb 1-1: Product: syz
[  932.227770][ T5813] usb 1-1: Manufacturer: syz
[  932.232450][ T5813] usb 1-1: SerialNumber: syz
[  932.244730][ T5813] usb 1-1: config 0 descriptor??
[  932.257693][ T5813] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  932.280349][ T5813] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  932.572517][T18652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  932.580682][T18652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  932.588762][T18652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  932.596868][T18652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  932.670491][T16666] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  932.679362][T16666] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  932.689797][ T5813] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  932.701397][T19092] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3721'.
[  932.710375][T16666] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[  932.719339][ T5813] usb 1-1: media controller created
[  932.733203][T16666] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  932.749072][ T5813] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  932.765374][T16666] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  932.799534][T16666] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  932.818908][T16666] usb 7-1: Product: syz
[  932.823563][T16666] usb 7-1: Manufacturer: syz
[  932.834157][T16666] cdc_wdm 7-1:1.0: skipping garbage
[  932.839409][T16666] cdc_wdm 7-1:1.0: skipping garbage
[  932.845836][T16666] cdc_wdm 7-1:1.0: cdc-wdm1: USB WDM device
[  932.851895][T16666] cdc_wdm 7-1:1.0: Unknown control protocol
[  932.868935][ T5813] DVB: Unable to find symbol mt352_attach()
[  932.909258][ T5813] DVB: Unable to find symbol nxt6000_attach()
[  932.915460][ T5813] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  932.928556][ T5813] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input44
[  932.943410][ T5813] dvb-usb: schedule remote query interval to 1000 msecs.
[  932.950489][ T5813] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  933.002236][ T5813] dvb-usb: bulk message failed: -22 (7/0)
[  933.007957][ T5813] dvb-usb: bulk message failed: -22 (7/0)
[  933.015727][ T5813] usb 1-1: USB disconnect, device number 72
[  933.028664][T19121] tipc: Started in network mode
[  933.039432][T19100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  933.052919][T19121] tipc: Node identity ac14140f, cluster identity 4711
[  933.065437][ T5813] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  933.130101][T19100] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  933.138646][T19121] tipc: New replicast peer: 255.255.255.255
[  933.171002][T19121] tipc: Enabled bearer <udp:syz2>, priority 10
[  933.188505][T19100] netlink: 'syz.6.3724': attribute type 1 has an invalid length.
[  933.203063][T19122] netlink: 'syz.1.3731': attribute type 4 has an invalid length.
[  933.701313][ T5926] usb 5-1: USB disconnect, device number 112
[  933.775312][T19100] bond6: entered promiscuous mode
[  933.785380][T19100] 8021q: adding VLAN 0 to HW filter on device bond6
[  934.299875][ T5897] tipc: Node number set to 2886997007
[  934.722987][   T30] audit: type=1400 audit(2000000027.010:1520): avc:  denied  { ioctl } for  pid=19143 comm="syz.0.3735" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  934.785574][   T30] audit: type=1400 audit(2000000027.010:1521): avc:  denied  { set_context_mgr } for  pid=19143 comm="syz.0.3735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  934.819590][ T5897] usb 2-1: new high-speed USB device number 100 using dummy_hcd
[  934.881110][T19146] tmpfs: Unknown parameter 'nr_b
'
[  934.981710][T19078] [U] 
[  935.049657][ T5897] usb 2-1: Using ep0 maxpacket: 32
[  935.059887][ T5897] usb 2-1: config 2 has an invalid interface number: 194 but max is 0
[  935.068332][ T5897] usb 2-1: config 2 descriptor has 1 excess byte, ignoring
[  935.082650][ T5897] usb 2-1: config 2 has no interface number 0
[  935.098408][ T5897] usb 2-1: config 2 interface 194 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  935.111605][ T5897] usb 2-1: New USB device found, idVendor=0499, idProduct=0002, bcdDevice= 0.00
[  935.216583][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  935.669408][ T5813] usb 7-1: USB disconnect, device number 38
[  936.926102][ T5897] usb 2-1: string descriptor 0 read error: -71
[  936.947124][ T5897] usb 2-1: USB disconnect, device number 100
[  937.572133][ T5924] usb 7-1: new full-speed USB device number 39 using dummy_hcd
[  937.596157][ T6716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  937.604266][ T6716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  937.612376][ T6716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  937.620467][ T6716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  937.629017][   T30] audit: type=1400 audit(2000000029.540:1522): avc:  granted  { setsecparam } for  pid=19170 comm="syz.4.3742" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[  937.667932][T19173] 8021q: adding VLAN 0 to HW filter on device bond6
[  937.699250][T19173] bond0: (slave bond6): Enslaving as an active interface with an up link
[  937.722439][T19178] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3743'.
[  937.769898][ T6716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  937.778027][ T6716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  937.786158][ T6716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  937.794260][ T6716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  937.803861][ T5924] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  937.832647][ T5924] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  937.862824][ T5924] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  937.888019][ T5924] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  938.243625][ T5924] usb 7-1: GET_CAPABILITIES returned 0
[  938.249926][ T5924] usbtmc 7-1:16.0: can't read capabilities
[  938.354013][T19178] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  938.373578][T19178] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  938.465569][ T5876] usb 7-1: USB disconnect, device number 39
[  938.536444][T19178] bond0 (unregistering): (slave bond6): Releasing backup interface
[  938.588216][T19178] bond0 (unregistering): Released all slaves
[  938.609718][T15535] usb 1-1: new high-speed USB device number 73 using dummy_hcd
[  938.791112][T15535] usb 1-1: Using ep0 maxpacket: 8
[  938.804638][T15535] usb 1-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00
[  938.832460][T15535] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  938.850571][T15535] usb 1-1: config 0 descriptor??
[  939.089506][T16666] usb 7-1: new high-speed USB device number 40 using dummy_hcd
[  939.262226][T16666] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  939.273932][T16666] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  939.283328][T15535] uclogic 0003:145F:0212.004E: interface is invalid, ignoring
[  939.293825][T16666] usb 7-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  939.303612][T16666] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  939.311624][T16666] usb 7-1: Product: syz
[  939.315791][T16666] usb 7-1: Manufacturer: syz
[  939.320456][T16666] usb 7-1: SerialNumber: syz
[  939.326418][T16666] usb 7-1: config 0 descriptor??
[  939.621498][ T5924] usb 1-1: USB disconnect, device number 73
[  939.659171][ T5932] usb 7-1: USB disconnect, device number 40
[  940.610560][T19218] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3754'.
[  941.131251][T19224] fuse: Bad value for 'fd'
[  942.271072][T19245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3759'.
[  942.299779][T19247] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0
[  943.131185][ T7142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  943.139332][ T7142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  943.147455][ T7142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  943.155557][ T7142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  943.255120][ T5982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  943.263261][ T5982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  943.271366][ T5982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  943.279463][ T5982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  943.356388][T19260] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3765'.
[  943.391119][T19260] macsec1: entered promiscuous mode
[  943.402537][T19260] team0: entered promiscuous mode
[  943.415726][T19260] macsec1: entered allmulticast mode
[  943.427471][T19260] team0: entered allmulticast mode
[  943.441554][T19260] team0: left allmulticast mode
[  943.453899][T19260] team0: left promiscuous mode
[  943.689576][ T5932] usb 2-1: new high-speed USB device number 101 using dummy_hcd
[  943.794470][T19278] fuse: Bad value for 'fd'
[  943.889544][ T5876] usb 1-1: new high-speed USB device number 74 using dummy_hcd
[  944.079992][ T5876] usb 1-1: Using ep0 maxpacket: 8
[  944.095359][ T5876] usb 1-1: config 0 has an invalid interface number: 189 but max is 0
[  944.120949][ T5876] usb 1-1: config 0 has no interface number 0
[  944.129200][ T5876] usb 1-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=62.1b
[  944.138766][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  944.146848][ T5876] usb 1-1: Product: syz
[  944.151175][ T5876] usb 1-1: Manufacturer: syz
[  944.155801][ T5876] usb 1-1: SerialNumber: syz
[  944.162584][ T5876] usb 1-1: config 0 descriptor??
[  944.174231][ T5876] usb 1-1: invalid MIDI EP
[  944.179004][ T5876] usb 1-1: snd-bcd2000: error during probing
[  944.186950][ T5876] snd-bcd2000 1-1:0.189: probe with driver snd-bcd2000 failed with error -22
[  944.197171][ T5932] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  944.207433][ T5932] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  944.225227][ T5932] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  944.234685][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  944.243180][ T5932] usb 2-1: Product: syz
[  944.247380][ T5932] usb 2-1: Manufacturer: syz
[  944.252104][ T5932] usb 2-1: SerialNumber: syz
[  944.258538][ T5932] usb 2-1: config 0 descriptor??
[  944.585761][ T5932] usb 2-1: USB disconnect, device number 101
[  944.715857][   T30] audit: type=1400 audit(2000000038.002:1523): avc:  denied  { setopt } for  pid=19272 comm="syz.0.3769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  945.271295][   T30] audit: type=1400 audit(2000000038.002:1524): avc:  denied  { bind } for  pid=19272 comm="syz.0.3769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  945.298060][   T30] audit: type=1400 audit(2000000038.002:1525): avc:  denied  { listen } for  pid=19272 comm="syz.0.3769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  945.318281][   T30] audit: type=1400 audit(2000000038.022:1526): avc:  denied  { write } for  pid=19272 comm="syz.0.3769" path="socket:[67051]" dev="sockfs" ino=67051 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  945.342022][   T30] audit: type=1400 audit(2000000038.152:1527): avc:  denied  { append } for  pid=19272 comm="syz.0.3769" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  946.519531][T19324] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3787'.
[  946.908904][T16666] usb 1-1: USB disconnect, device number 74
[  947.071442][   T30] audit: type=1400 audit(2000000040.362:1528): avc:  denied  { read } for  pid=19314 comm="syz.1.3785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  947.165651][T19336] fuse: Bad value for 'fd'
[  947.170845][ T5924] usb 7-1: new high-speed USB device number 41 using dummy_hcd
[  947.279656][ T5932] usb 5-1: new high-speed USB device number 113 using dummy_hcd
[  947.657159][ T5924] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  947.665932][ T5932] usb 5-1: Using ep0 maxpacket: 32
[  947.672325][ T5924] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  947.684206][ T5932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  947.696243][ T5924] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[  947.706312][ T5932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  947.742828][ T5924] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  947.766230][ T5932] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  947.791890][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  947.820240][ T5924] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  947.901252][ T5924] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  947.913096][ T5924] usb 7-1: Product: syz
[  947.923296][ T5924] usb 7-1: Manufacturer: syz
[  947.950265][ T5932] usb 5-1: config 0 descriptor??
[  948.219620][ T5924] cdc_wdm 7-1:1.0: skipping garbage
[  948.225219][ T5924] cdc_wdm 7-1:1.0: skipping garbage
[  948.260981][ T5924] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[  948.330567][ T5924] cdc_wdm 7-1:1.0: Unknown control protocol
[  948.441846][T19328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  948.657572][ T5932] ft260 0003:0403:6030.004F: unknown main item tag 0x7
[  948.676718][ T5988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  948.684922][ T5988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  948.693060][ T5988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  948.701181][ T5988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  948.709761][T19328] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  948.745177][T19328] netlink: 'syz.6.3788': attribute type 1 has an invalid length.
[  948.790155][ T5932] ft260 0003:0403:6030.004F: failed to retrieve chip version
[  948.798145][ T5932] ft260 0003:0403:6030.004F: probe with driver ft260 failed with error -32
[  948.810360][T19358] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3788'.
[  948.827777][T19328] bond7: entered promiscuous mode
[  948.845716][T19328] 8021q: adding VLAN 0 to HW filter on device bond7
[  948.891617][ T7155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  948.899838][ T7155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  948.908055][ T7155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  948.916316][ T7155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  949.674082][ T5932] usb 5-1: USB disconnect, device number 113
[  950.323445][T19381] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3800'.
[  950.511177][T16666] usb 7-1: USB disconnect, device number 41
[  950.629771][T15535] usb 1-1: new high-speed USB device number 75 using dummy_hcd
[  950.791035][T15535] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  950.801984][T15535] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  950.813972][T15535] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  950.825069][   T30] audit: type=1400 audit(2000000045.110:1529): avc:  denied  { ioctl } for  pid=19395 comm="syz.1.3807" path="socket:[68273]" dev="sockfs" ino=68273 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  950.851009][T15535] usb 1-1: config 0 descriptor??
[  950.939513][T16666] usb 7-1: new high-speed USB device number 42 using dummy_hcd
[  951.111126][T16666] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  951.121014][T16666] usb 7-1: config 0 interface 0 has no altsetting 0
[  951.130900][T16666] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  951.140048][T16666] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  951.148286][T16666] usb 7-1: Product: syz
[  951.152836][T16666] usb 7-1: Manufacturer: syz
[  951.157559][T16666] usb 7-1: SerialNumber: syz
[  951.174242][T16666] usb 7-1: config 0 descriptor??
[  951.186141][T16666] usb 7-1: selecting invalid altsetting 0
[  951.265005][T15535] keytouch 0003:0926:3333.0050: fixing up Keytouch IEC report descriptor
[  951.276849][T15535] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0050/input/input45
[  951.366171][T15535] keytouch 0003:0926:3333.0050: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0
[  951.406153][ T5924] usb 7-1: USB disconnect, device number 42
[  952.641083][T16666] usb 1-1: USB disconnect, device number 75
[  952.829192][   T30] audit: type=1400 audit(2000000046.180:1530): avc:  denied  { read } for  pid=19400 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  953.243046][T19420] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19420 comm=syz.1.3813
[  953.262631][T19420] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3813'.
[  953.278195][   T30] audit: type=1400 audit(2000000047.550:1531): avc:  denied  { getopt } for  pid=19418 comm="syz.4.3814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  953.320779][ T5932] usb 7-1: new high-speed USB device number 43 using dummy_hcd
[  953.542069][   T30] audit: type=1400 audit(2000000047.830:1532): avc:  denied  { recv } for  pid=19416 comm="syz.1.3813" saddr=10.128.0.169 src=47050 daddr=10.128.1.204 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  953.569564][ T5932] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  953.653877][ T5932] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  953.779230][ T5932] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[  953.888488][ T5932] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  954.021701][ T6716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  954.029840][ T6716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  954.037925][ T6716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  954.046035][ T6716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  954.134710][ T5932] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  954.219255][ T5932] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  954.319675][ T5932] usb 7-1: Product: syz
[  954.323835][ T5932] usb 7-1: Manufacturer: syz
[  954.373645][   T30] audit: type=1400 audit(2000000048.660:1533): avc:  denied  { mounton } for  pid=19427 comm="syz.5.3817" path="/proc/1446/cgroup" dev="proc" ino=70083 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[  954.432529][ T5932] cdc_wdm 7-1:1.0: skipping garbage
[  954.437736][ T5932] cdc_wdm 7-1:1.0: skipping garbage
[  954.592181][ T5932] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[  954.598383][ T5932] cdc_wdm 7-1:1.0: Unknown control protocol
[  954.619409][T19415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  954.639696][T19415] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  954.651497][ T7138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  954.659609][ T7138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  954.667662][ T7138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  954.675739][ T7138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  954.726854][T19432] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20004
[  954.767311][T19415] netlink: 'syz.6.3812': attribute type 1 has an invalid length.
[  954.851232][T19415] bond8: entered promiscuous mode
[  954.862369][T19447] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3820'.
[  954.881763][T19415] 8021q: adding VLAN 0 to HW filter on device bond8
[  954.947579][T19445] 8021q: adding VLAN 0 to HW filter on device bond8
[  954.955507][T19445] bond8: (slave vcan7): The slave device specified does not support setting the MAC address
[  954.965877][T19445] bond8: (slave vcan7): Setting fail_over_mac to active for active-backup mode
[  954.977076][ T5932] usb 2-1: new full-speed USB device number 102 using dummy_hcd
[  955.033717][T19445] bond8: (slave vcan7): making interface the new active one
[  955.041362][T19445] vcan7: entered promiscuous mode
[  955.057952][T19445] bond8: (slave vcan7): Enslaving as an active interface with an up link
[  955.238364][ T5932] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  955.253703][ T5932] usb 2-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  955.272426][ T5932] usb 2-1: config 0 interface 0 has no altsetting 0
[  955.289190][ T5932] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00
[  955.302474][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
Stopping sshd: [  955.372782][ T5932] usb 2-1: config 0 descriptor??
stopped /usr/sbin/sshd (pid 5575)
OK
[  955.828916][ T5932] zydacron 0003:13EC:0006.0051: unknown main item tag 0x0
[  955.836662][ T5932] zydacron 0003:13EC:0006.0051: unknown main item tag 0x0
Stopping crond: [  955.855059][ T5932] zydacron 0003:13EC:0006.0051: item fetching failed at offset 2/3
[  955.874191][ T5932] zydacron 0003:13EC:0006.0051: parse failed
[  955.889617][ T5932] zydacron 0003:13EC:0006.0051: probe with driver zydacron failed with error -22
stopped /usr/sbin/crond (pid 5555)
OK
[  956.256109][   T30] audit: type=1400 audit(2000000050.540:1534): avc:  denied  { unmount } for  pid=14318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  956.285282][T19441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  956.294014][T19441] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  956.305645][T16666] usb 2-1: USB disconnect, device number 102
Stopping dhcpcd...
[  956.498886][ T5932] usb 7-1: USB disconnect, device number 43
stopped /sbin/dhcpcd (pid 5480)
[  957.586243][   T30] audit: type=1400 audit(2000000051.870:1535): avc:  denied  { search } for  pid=19485 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
Stopping network: [  958.159719][   T30] audit: type=1400 audit(2000000052.440:1536): avc:  granted  { setsecparam } for  pid=19501 comm="syz.5.3832" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[  958.784076][   T30] audit: type=1400 audit(2000000053.070:1537): avc:  denied  { read write } for  pid=19514 comm="ip" path="/dev/console" dev="rootfs" ino=1063 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1
[  958.889841][ T5924] usb 7-1: new full-speed USB device number 44 using dummy_hcd
[  958.986407][   T30] audit: type=1400 audit(2000000053.260:1538): avc:  denied  { getopt } for  pid=19486 comm="syz.4.3829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  959.006819][T19520] bridge0: port 2(bridge_slave_1) entered disabled state
[  959.014341][T19520] bridge0: port 1(bridge_slave_0) entered disabled state
[  959.188219][ T5924] usb 7-1: device descriptor read/64, error -71
[  959.420889][T15535] usb 1-1: new high-speed USB device number 76 using dummy_hcd
[  959.573055][T19532] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  959.581661][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  959.619883][T15535] usb 1-1: config 0 has an invalid descriptor of length 161, skipping remainder of the config
[  959.651966][T15535] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  959.703502][T15535] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  959.767378][ T5924] usb 7-1: new full-speed USB device number 45 using dummy_hcd
[  959.775292][ T6716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  959.783376][ T6716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  959.791463][ T6716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  959.799541][ T6716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  959.808352][ T7138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  959.816429][ T7138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  959.824493][ T7138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  959.832559][ T7138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
OK
[  960.039593][ T5924] usb 7-1: device descriptor read/64, error -71
[  960.079788][T15535] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  960.128975][T19540] fuse: Bad value for 'fd'
[  960.149759][ T5924] usb usb7-port1: attempt power cycle
[  960.151325][T15535] usb 1-1: config 0 descriptor??
Stopping iptables: [  960.372844][   T30] audit: type=1400 audit(2000000054.660:1539): avc:  denied  { read write } for  pid=19542 comm="iptables" path="/dev/console" dev="rootfs" ino=1063 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1
[  960.423414][T19522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  960.439937][T19522] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  960.489903][ T5924] usb 7-1: new full-speed USB device number 46 using dummy_hcd
OK
[  960.534529][ T5924] usb 7-1: device descriptor read/8, error -71
[  960.606137][   T30] audit: type=1400 audit(2000000054.720:1540): avc:  denied  { search } for  pid=19542 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  960.662528][T15535] ath6kl: Failed to submit usb control message: -71
[  960.669111][T15535] ath6kl: unable to send the bmi data to the device: -71
[  960.703738][   T30] audit: type=1400 audit(2000000054.740:1541): avc:  denied  { search } for  pid=19542 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  960.750237][T15535] ath6kl: Unable to send get target info: -71
[  960.808200][T15535] ath6kl: Failed to init ath6kl core: -71
[  960.822631][T15535] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71
[  960.834991][   T30] audit: type=1400 audit(2000000054.740:1542): avc:  denied  { add_name } for  pid=19542 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
Stopping system message bus: [  960.883260][T15535] usb 1-1: USB disconnect, device number 76
[  960.896347][   T30] audit: type=1400 audit(2000000054.740:1543): avc:  denied  { create } for  pid=19542 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  960.979514][ T5924] usb 7-1: new full-speed USB device number 47 using dummy_hcd
[  961.024809][T19551] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3838'.
[  961.199911][ T5924] usb 7-1: device not accepting address 47, error -71
[  961.706464][ T5924] usb usb7-port1: unable to enumerate USB device
done
[  962.589551][ T5897] usb 5-1: new high-speed USB device number 114 using dummy_hcd
[  962.750964][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  962.785105][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  962.798755][ T5897] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  962.816397][ T5897] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  962.832156][ T5897] usb 5-1: Manufacturer: syz
[  962.845338][ T5897] usb 5-1: config 0 descriptor??
killall: udevd: no process killed
[  963.135098][T19564] bridge_slave_0: left allmulticast mode
[  963.153169][T19564] bridge_slave_0: left promiscuous mode
[  963.169034][T19564] bridge0: port 1(bridge_slave_0) entered disabled state
Stopping klogd: [  963.332794][T19564] bridge_slave_1: left allmulticast mode
[  963.338673][T19564] bridge_slave_1: left promiscuous mode
[  963.370996][   T30] kauditd_printk_skb: 5 callbacks suppressed
[  963.371008][   T30] audit: type=1400 audit(2000000057.660:1549): avc:  denied  { listen } for  pid=19588 comm="syz.0.3851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  963.379671][T19564] bridge0: port 2(bridge_slave_1) entered disabled state
[  963.441521][T19564] bond0: (slave bond_slave_0): Releasing backup interface
[  963.472759][T19564] bond0: (slave bond_slave_1): Releasing backup interface
[  963.511301][T19599] /dev/nullb0: Can't open blockdev
OK
[  963.576060][T19564] team0: Port device team_slave_0 removed
Stopping acpid: [  963.621261][T19564] team0: Port device team_slave_1 removed
[  963.630718][T19564] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  963.652436][T19564] batman_adv: batadv0: Removing interface: batadv_slave_0
[  963.685811][   T30] audit: type=1400 audit(2000000057.970:1550): avc:  denied  { remove_name } for  pid=5171 comm="acpid" name="acpid.pid" dev="tmpfs" ino=7 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  963.713238][T19564] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  963.723591][T19564] batman_adv: batadv0: Removing interface: batadv_slave_1
[  963.731662][   T30] audit: type=1400 audit(2000000057.970:1551): avc:  denied  { unlink } for  pid=5171 comm="acpid" name="acpid.pid" dev="tmpfs" ino=7 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  963.781280][ T5897] usbhid 5-1:0.0: can't add hid device: -71
[  963.807438][ T5897] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  963.827649][ T5897] usb 5-1: USB disconnect, device number 114
[  963.913638][   T30] audit: type=1400 audit(2000000058.200:1552): avc:  denied  { setattr } for  pid=19611 comm="syz.6.3857" name="cec6" dev="devtmpfs" ino=987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  964.599605][T15535] usb 1-1: new high-speed USB device number 77 using dummy_hcd
[  964.607287][T16666] usb 7-1: new high-speed USB device number 48 using dummy_hcd
[  964.769764][T15535] usb 1-1: Using ep0 maxpacket: 32
[  964.776920][T15535] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
OK
[  965.122977][T15535] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  965.137263][T15535] usb 1-1: config 0 descriptor??
[  965.151306][T19639] net_ratelimit: 1 callbacks suppressed
[  965.151318][T19639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  965.175514][T16666] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  965.186825][T16666] usb 7-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00
[  965.195957][T16666] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
Stopping syslogd: [  965.208311][T16666] usb 7-1: config 0 descriptor??
stopped /sbin/syslogd (pid 5168)
OK
[  965.362749][T15535] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  965.386332][T15535] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  965.439282][T15535] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  965.448219][T15535] usb 1-1: media controller created
[  965.463587][T15535] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  965.530745][ T6716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  965.538876][ T6716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  965.546950][ T6716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  965.555030][ T6716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  965.563100][T17953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  965.571578][T17953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  965.579690][T17953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  965.587787][T17953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  965.776565][T15535] az6027: usb out operation failed. (-71)
[  965.782916][T15535] stb0899_attach: Driver disabled by Kconfig
[  965.788911][T15535] az6027: no front-end attached
[  965.788911][T15535] 
[  965.810591][T16666] holtek_mouse 0003:04D9:A072.0052: item fetching failed at offset 2/5
[  965.819335][T15535] az6027: usb out operation failed. (-71)
[  965.825873][T15535] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  965.852576][T16666] holtek_mouse 0003:04D9:A072.0052: hid parse failed: -22
[  965.872725][T15535] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input46
[  965.887805][T16666] holtek_mouse 0003:04D9:A072.0052: probe with driver holtek_mouse failed with error -22
[  965.915269][T19657] xt_socket: unknown flags 0x4
[  965.917897][T15535] dvb-usb: schedule remote query interval to 400 msecs.
[  965.927097][T15535] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  965.951414][T15535] usb 1-1: USB disconnect, device number 77
umount: can't remount debugfs read-only
[  966.033927][T15535] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  966.049778][T16666] usb 7-1: USB disconnect, device number 48
[  967.349760][ T5924] usb 1-1: new high-speed USB device number 78 using dummy_hcd
[  967.480885][   T30] audit: type=1400 audit(2000000061.770:1553): avc:  denied  { map } for  pid=19682 comm="syz.5.3876" path="/proc/1492/net/sockstat" dev="proc" ino=4026534029 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  967.548088][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  967.590104][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  967.602668][   T30] audit: type=1400 audit(2000000061.770:1554): avc:  denied  { execute } for  pid=19682 comm="syz.5.3876" path="/proc/1492/net/sockstat" dev="proc" ino=4026534029 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  967.628655][ T5924] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  967.652296][ T5924] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  967.667348][ T5924] usb 1-1: Manufacturer: syz
[  967.731781][ T5924] usb 1-1: config 0 descriptor??
[  967.995507][T19694] fuse: Bad value for 'fd'
[  968.039760][T17168] usb 5-1: new high-speed USB device number 115 using dummy_hcd
[  969.111051][T19674] bond0: (slave lo): Releasing backup interface
[  969.121131][T19701] netlink: 'syz.0.3873': attribute type 10 has an invalid length.
[  969.140241][T19674] bond0: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  969.193445][T17168] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  969.214466][T19674] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  969.236761][T17168] usb 5-1: config 0 interface 0 has no altsetting 0
umount: sysfs busy - remounted read-only
umount: devtmpfs busy - remounted read-only
[  969.251813][T17168] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
umount: can't remount /dev/root read-only
[  969.279606][T17168] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  969.287797][T17168] usb 5-1: Product: syz
[  969.294459][T17168] usb 5-1: Manufacturer: syz
[  969.299075][T17168] usb 5-1: SerialNumber: syz
The system is going down NOW!
[  969.349474][   T30] audit: type=1400 audit(2000000063.610:1555): avc:  denied  { write } for  pid=5799 comm="syz-executor" path="pipe:[5150]" dev="pipefs" ino=5150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
Sent SIGTERM to all processes
Connection to 10.128.1.204 closed by remote host.
[  969.484051][T17168] usb 5-1: config 0 descriptor??
[  969.490200][   T30] audit: type=1400 audit(2000000063.710:1556): avc:  denied  { read write } for  pid=15402 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  969.532593][   T30] audit: type=1400 audit(2000000063.710:1557): avc:  denied  { open } for  pid=15402 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  969.538941][T17168] usb 5-1: can't set config #0, error -71
[  969.617972][T17168] usb 5-1: USB disconnect, device number 115
[  969.669480][   T30] audit: type=1400 audit(2000000063.710:1558): avc:  denied  { ioctl } for  pid=15402 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  970.265204][T16606] syz_tun (unregistering): left allmulticast mode
[  970.404116][ T6716] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  970.414995][ T6716] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  970.461727][ T5924] usbhid 1-1:0.0: can't add hid device: -71
[  970.467695][ T5924] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  970.541462][ T6716] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  970.575476][ T6716] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  970.586003][ T5924] usb 1-1: USB disconnect, device number 78
[  970.636138][ T6716] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  970.645976][ T6716] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  970.714164][ T6716] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  970.724254][ T6716] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  970.802245][ T6716] tipc: Resetting bearer <eth:gre0>
Sent SIGKILL to all processes
Requesting system poweroff
[  970.869988][ T6716] team0: Port device ip6tnl1 removed
[  970.918429][ T6716] tipc: Disabling bearer <eth:gre0>
[  971.185712][ T6716] bond1 (unregistering): Released all slaves
[  971.260018][ T6716] bond0 (unregistering): (slave bond4): Releasing backup interface
[  971.267902][ T6716] bond4 (unregistering): left promiscuous mode
[  971.275438][ T6716] bond0 (unregistering): Released all slaves
[  971.290103][ T7143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  971.298180][T17953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  971.306248][ T7143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  971.314320][T17953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  971.322381][ T7143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  971.330450][T17953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  971.338502][ T7143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  971.346566][T17953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  971.414122][ T6716] bond2 (unregistering): (slave vcan1): Releasing backup interface
[  971.422250][ T6716] vcan1: left promiscuous mode
[  971.428107][ T6716] bond2 (unregistering): Released all slaves
[  971.438053][ T6716] bond3 (unregistering): Released all slaves
[  971.514903][ T6716] bond4 (unregistering): Released all slaves
[  971.603060][ T6716] tipc: Left network mode
[  971.631152][ T6716] IPVS: stopping backup sync thread 12515 ...
[  971.852363][T19705] smc: removing smcd device lo
[  971.852774][ T5946] dvb-usb: did not find the firmware file 'dvb-usb-p1100.fw' (status -2). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  971.875760][ T5946] dvb-usb: found a 'Prof 1100 USB ' in cold state, will try to load a firmware
[  971.885233][ T5946] usb 6-1: Direct firmware load for dvb-usb-p1100.fw failed with error -2
[  971.893787][ T5946] usb 6-1: Falling back to sysfs fallback for: dvb-usb-p1100.fw
[  971.903849][ T5946] ------------[ cut here ]------------
[  971.909286][ T5946] WARNING: drivers/base/firmware_loader/fallback.c:148 at firmware_fallback_sysfs+0x6d3/0xc40, CPU#0: kworker/0:7/5946
[  971.921740][ T5946] Modules linked in:
[  971.925726][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: kworker/0:7 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  971.937507][ T5946] Tainted: [L]=SOFTLOCKUP
[  971.941943][ T5946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  971.952074][ T5946] Workqueue: usb_hub_wq hub_event
[  971.957103][ T5946] RIP: 0010:firmware_fallback_sysfs+0x6d3/0xc40
[  971.963359][ T5946] Code: ae fb e9 da f9 ff ff e8 2b 22 d1 fb e8 d6 6e 95 fb 31 ff 89 c3 89 c6 e8 bb 1c d1 fb 85 db 0f 84 17 fb ff ff e8 0e 22 d1 fb 90 <0f> 0b 90 48 c7 c6 40 8c 22 8c 4c 89 e2 4c 89 f7 e8 d8 04 f9 ff e9
[  971.982967][ T5946] RSP: 0018:ffffc9000470ec60 EFLAGS: 00010246
[  971.989018][ T5946] RAX: 0000000000100000 RBX: 00000000fffffff5 RCX: ffffc9001974b000
[  971.996974][ T5946] RDX: 0000000000100000 RSI: ffffffff85edc482 RDI: 0000000000000005
[  972.004934][ T5946] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000
[  972.013243][ T5946] R10: 00000000fffffff5 R11: 0000000000002ba1 R12: ffffffff8c7bdca0
[  972.021231][ T5946] R13: ffff888074d6f6c0 R14: ffff8880809140b0 R15: 0000000000001770
[  972.029177][ T5946] FS:  0000000000000000(0000) GS:ffff8881248f5000(0000) knlGS:0000000000000000
[  972.038113][ T5946] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  972.044781][ T5946] CR2: 00007fdc5c1f84c0 CR3: 000000000e184000 CR4: 00000000003526f0
[  972.052839][ T5946] DR0: 0000000000000001 DR1: fffffffffffffff7 DR2: 0000000000000000
[  972.060816][ T5946] DR3: 000000000000000a DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  972.068759][ T5946] Call Trace:
[  972.072030][ T5946]  <TASK>
[  972.074947][ T5946]  _request_firmware+0x101c/0x14e0
[  972.080075][ T5946]  ? __pfx__request_firmware+0x10/0x10
[  972.085513][ T5946]  ? find_held_lock+0x2b/0x80
[  972.090288][ T5946]  request_firmware+0x35/0x50
[  972.094962][ T5946]  dvb_usb_download_firmware+0x9c/0x270
[  972.100504][ T5946]  ? __pfx_dvb_usb_download_firmware+0x10/0x10
[  972.106632][ T5946]  ? rcu_is_watching+0x12/0xc0
[  972.111410][ T5946]  dvb_usb_device_init+0xa0e/0x2070
[  972.116591][ T5946]  ? find_held_lock+0x2b/0x80
[  972.121274][ T5946]  ? __pfx_dvb_usb_device_init+0x10/0x10
[  972.126883][ T5946]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  972.132673][ T5946]  ? lockdep_hardirqs_on+0x7c/0x110
[  972.137845][ T5946]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  972.143658][ T5946]  ? __pm_runtime_set_status+0x13c/0xa80
[  972.149380][ T5946]  dw2102_probe+0xf4/0x240
[  972.153888][ T5946]  usb_probe_interface+0x303/0xa80
[  972.158993][ T5946]  ? __pfx_usb_probe_interface+0x10/0x10
[  972.164617][ T5946]  really_probe+0x241/0xb20
[  972.169102][ T5946]  __driver_probe_device+0x1de/0x470
[  972.174473][ T5946]  driver_probe_device+0x4c/0x1b0
[  972.179506][ T5946]  __device_attach_driver+0x1df/0x350
[  972.184860][ T5946]  ? __pfx___device_attach_driver+0x10/0x10
[  972.190740][ T5946]  bus_for_each_drv+0x159/0x1e0
[  972.195569][ T5946]  ? __pfx_bus_for_each_drv+0x10/0x10
[  972.200938][ T5946]  ? lockdep_hardirqs_on+0x7c/0x110
[  972.206111][ T5946]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  972.211903][ T5946]  __device_attach+0x1e4/0x4e0
[  972.216658][ T5946]  ? __pfx___device_attach+0x10/0x10
[  972.221937][ T5946]  ? do_raw_spin_unlock+0x172/0x230
[  972.227114][ T5946]  device_initial_probe+0xaa/0xc0
[  972.232124][ T5946]  bus_probe_device+0x64/0x150
[  972.236865][ T5946]  device_add+0x116e/0x1980
[  972.241362][ T5946]  ? __pfx_device_add+0x10/0x10
[  972.246379][ T5946]  ? usb_create_ep_devs+0x1f7/0x2b0
[  972.251693][ T5946]  ? create_intf_ep_devs.isra.0+0x195/0x200
[  972.257589][ T5946]  usb_set_configuration+0x1187/0x1e50
[  972.263061][ T5946]  ? __pfx_usb_generic_driver_probe+0x10/0x10
[  972.269101][ T5946]  usb_generic_driver_probe+0xb1/0x110
[  972.274553][ T5946]  usb_probe_device+0xef/0x400
[  972.279295][ T5946]  ? __pfx_usb_probe_device+0x10/0x10
[  972.284664][ T5946]  really_probe+0x241/0xb20
[  972.289146][ T5946]  __driver_probe_device+0x1de/0x470
[  972.294423][ T5946]  ? usb_driver_applicable+0x1c7/0x220
[  972.299870][ T5946]  driver_probe_device+0x4c/0x1b0
[  972.304872][ T5946]  __device_attach_driver+0x1df/0x350
[  972.310244][ T5946]  ? __pfx___device_attach_driver+0x10/0x10
[  972.316113][ T5946]  bus_for_each_drv+0x159/0x1e0
[  972.320959][ T5946]  ? __pfx_bus_for_each_drv+0x10/0x10
[  972.326305][ T5946]  ? lockdep_hardirqs_on+0x7c/0x110
[  972.331518][ T5946]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  972.337312][ T5946]  __device_attach+0x1e4/0x4e0
[  972.342074][ T5946]  ? __pfx___device_attach+0x10/0x10
[  972.347340][ T5946]  ? do_raw_spin_unlock+0x172/0x230
[  972.352627][ T5946]  device_initial_probe+0xaa/0xc0
[  972.357624][ T5946]  bus_probe_device+0x64/0x150
[  972.362480][ T5946]  device_add+0x116e/0x1980
[  972.366976][ T5946]  ? __pfx_device_add+0x10/0x10
[  972.371812][ T5946]  ? usb_new_device+0xb6c/0x1a90
[  972.376742][ T5946]  usb_new_device+0xd07/0x1a90
[  972.381520][ T5946]  ? __pfx_usb_new_device+0x10/0x10
[  972.386696][ T5946]  ? mark_held_locks+0x49/0x80
[  972.391448][ T5946]  hub_event+0x313a/0x52f0
[  972.395854][ T5946]  ? __pfx_hub_event+0x10/0x10
[  972.400611][ T5946]  ? debug_objects_fill_pool+0xc0/0x660
[  972.406130][ T5946]  ? finish_task_switch.isra.0+0x202/0xbd0
[  972.411939][ T5946]  ? rcu_is_watching+0x12/0xc0
[  972.416675][ T5946]  process_one_work+0x9ba/0x1b20
[  972.421612][ T5946]  ? __pfx_process_one_work+0x10/0x10
[  972.426963][ T5946]  ? assign_work+0x1a0/0x250
[  972.431538][ T5946]  worker_thread+0x6c8/0xf10
[  972.436105][ T5946]  ? __kthread_parkme+0x19e/0x250
[  972.441120][ T5946]  ? __pfx_worker_thread+0x10/0x10
[  972.446206][ T5946]  kthread+0x3c5/0x780
[  972.450280][ T5946]  ? __pfx_kthread+0x10/0x10
[  972.454961][ T5946]  ? rcu_is_watching+0x12/0xc0
[  972.459799][ T5946]  ? __pfx_kthread+0x10/0x10
[  972.464388][ T5946]  ret_from_fork+0x983/0xb10
[  972.468951][ T5946]  ? __pfx_ret_from_fork+0x10/0x10
[  972.474049][ T5946]  ? __switch_to+0x7af/0x10d0
[  972.478700][ T5946]  ? __pfx_kthread+0x10/0x10
[  972.483281][ T5946]  ret_from_fork_asm+0x1a/0x30
[  972.488028][ T5946]  </TASK>
[  972.491049][ T5946] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  972.498305][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: kworker/0:7 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  972.509224][ T5946] Tainted: [L]=SOFTLOCKUP
[  972.513524][ T5946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  972.523553][ T5946] Workqueue: usb_hub_wq hub_event
[  972.528556][ T5946] Call Trace:
[  972.531823][ T5946]  <TASK>
[  972.534741][ T5946]  dump_stack_lvl+0x3d/0x1f0
[  972.539308][ T5946]  vpanic+0x640/0x6f0
[  972.543263][ T5946]  ? firmware_fallback_sysfs+0x6d3/0xc40
[  972.548868][ T5946]  panic+0xca/0xd0
[  972.552560][ T5946]  ? __pfx_panic+0x10/0x10
[  972.556954][ T5946]  check_panic_on_warn+0xab/0xb0
[  972.561869][ T5946]  __warn+0x108/0x3c0
[  972.565825][ T5946]  __report_bug+0x2a0/0x520
[  972.570301][ T5946]  ? firmware_fallback_sysfs+0x6d3/0xc40
[  972.575919][ T5946]  ? __pfx___report_bug+0x10/0x10
[  972.580929][ T5946]  ? do_raw_spin_lock+0x12c/0x2b0
[  972.585928][ T5946]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  972.591275][ T5946]  ? __up_read+0x2d1/0x700
[  972.595667][ T5946]  ? firmware_fallback_sysfs+0x6d3/0xc40
[  972.601274][ T5946]  report_bug+0xb2/0x220
[  972.605491][ T5946]  ? firmware_fallback_sysfs+0x6d3/0xc40
[  972.611097][ T5946]  handle_bug+0x127/0x260
[  972.615403][ T5946]  exc_invalid_op+0x17/0x50
[  972.619882][ T5946]  asm_exc_invalid_op+0x1a/0x20
[  972.624702][ T5946] RIP: 0010:firmware_fallback_sysfs+0x6d3/0xc40
[  972.630916][ T5946] Code: ae fb e9 da f9 ff ff e8 2b 22 d1 fb e8 d6 6e 95 fb 31 ff 89 c3 89 c6 e8 bb 1c d1 fb 85 db 0f 84 17 fb ff ff e8 0e 22 d1 fb 90 <0f> 0b 90 48 c7 c6 40 8c 22 8c 4c 89 e2 4c 89 f7 e8 d8 04 f9 ff e9
[  972.650492][ T5946] RSP: 0018:ffffc9000470ec60 EFLAGS: 00010246
[  972.656542][ T5946] RAX: 0000000000100000 RBX: 00000000fffffff5 RCX: ffffc9001974b000
[  972.664498][ T5946] RDX: 0000000000100000 RSI: ffffffff85edc482 RDI: 0000000000000005
[  972.672443][ T5946] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000
[  972.680390][ T5946] R10: 00000000fffffff5 R11: 0000000000002ba1 R12: ffffffff8c7bdca0
[  972.688334][ T5946] R13: ffff888074d6f6c0 R14: ffff8880809140b0 R15: 0000000000001770
[  972.696282][ T5946]  ? firmware_fallback_sysfs+0x6d2/0xc40
[  972.701897][ T5946]  _request_firmware+0x101c/0x14e0
[  972.706990][ T5946]  ? __pfx__request_firmware+0x10/0x10
[  972.712425][ T5946]  ? find_held_lock+0x2b/0x80
[  972.717083][ T5946]  request_firmware+0x35/0x50
[  972.721736][ T5946]  dvb_usb_download_firmware+0x9c/0x270
[  972.727256][ T5946]  ? __pfx_dvb_usb_download_firmware+0x10/0x10
[  972.733384][ T5946]  ? rcu_is_watching+0x12/0xc0
[  972.738160][ T5946]  dvb_usb_device_init+0xa0e/0x2070
[  972.743344][ T5946]  ? find_held_lock+0x2b/0x80
[  972.748017][ T5946]  ? __pfx_dvb_usb_device_init+0x10/0x10
[  972.753621][ T5946]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  972.759412][ T5946]  ? lockdep_hardirqs_on+0x7c/0x110
[  972.764595][ T5946]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  972.770379][ T5946]  ? __pm_runtime_set_status+0x13c/0xa80
[  972.775986][ T5946]  dw2102_probe+0xf4/0x240
[  972.780388][ T5946]  usb_probe_interface+0x303/0xa80
[  972.785491][ T5946]  ? __pfx_usb_probe_interface+0x10/0x10
[  972.791110][ T5946]  really_probe+0x241/0xb20
[  972.795592][ T5946]  __driver_probe_device+0x1de/0x470
[  972.800866][ T5946]  driver_probe_device+0x4c/0x1b0
[  972.805868][ T5946]  __device_attach_driver+0x1df/0x350
[  972.811228][ T5946]  ? __pfx___device_attach_driver+0x10/0x10
[  972.817095][ T5946]  bus_for_each_drv+0x159/0x1e0
[  972.821932][ T5946]  ? __pfx_bus_for_each_drv+0x10/0x10
[  972.827280][ T5946]  ? lockdep_hardirqs_on+0x7c/0x110
[  972.832451][ T5946]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  972.838229][ T5946]  __device_attach+0x1e4/0x4e0
[  972.842979][ T5946]  ? __pfx___device_attach+0x10/0x10
[  972.848243][ T5946]  ? do_raw_spin_unlock+0x172/0x230
[  972.853417][ T5946]  device_initial_probe+0xaa/0xc0
[  972.858413][ T5946]  bus_probe_device+0x64/0x150
[  972.863155][ T5946]  device_add+0x116e/0x1980
[  972.867633][ T5946]  ? __pfx_device_add+0x10/0x10
[  972.872453][ T5946]  ? usb_create_ep_devs+0x1f7/0x2b0
[  972.877621][ T5946]  ? create_intf_ep_devs.isra.0+0x195/0x200
[  972.883490][ T5946]  usb_set_configuration+0x1187/0x1e50
[  972.888934][ T5946]  ? __pfx_usb_generic_driver_probe+0x10/0x10
[  972.894975][ T5946]  usb_generic_driver_probe+0xb1/0x110
[  972.900410][ T5946]  usb_probe_device+0xef/0x400
[  972.905149][ T5946]  ? __pfx_usb_probe_device+0x10/0x10
[  972.910496][ T5946]  really_probe+0x241/0xb20
[  972.914975][ T5946]  __driver_probe_device+0x1de/0x470
[  972.920233][ T5946]  ? usb_driver_applicable+0x1c7/0x220
[  972.925677][ T5946]  driver_probe_device+0x4c/0x1b0
[  972.930677][ T5946]  __device_attach_driver+0x1df/0x350
[  972.936027][ T5946]  ? __pfx___device_attach_driver+0x10/0x10
[  972.941893][ T5946]  bus_for_each_drv+0x159/0x1e0
[  972.946728][ T5946]  ? __pfx_bus_for_each_drv+0x10/0x10
[  972.952074][ T5946]  ? lockdep_hardirqs_on+0x7c/0x110
[  972.957244][ T5946]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  972.963032][ T5946]  __device_attach+0x1e4/0x4e0
[  972.967792][ T5946]  ? __pfx___device_attach+0x10/0x10
[  972.973070][ T5946]  ? do_raw_spin_unlock+0x172/0x230
[  972.978245][ T5946]  device_initial_probe+0xaa/0xc0
[  972.983252][ T5946]  bus_probe_device+0x64/0x150
[  972.987991][ T5946]  device_add+0x116e/0x1980
[  972.992468][ T5946]  ? __pfx_device_add+0x10/0x10
[  972.997295][ T5946]  ? usb_new_device+0xb6c/0x1a90
[  973.002225][ T5946]  usb_new_device+0xd07/0x1a90
[  973.006967][ T5946]  ? __pfx_usb_new_device+0x10/0x10
[  973.012153][ T5946]  ? mark_held_locks+0x49/0x80
[  973.016890][ T5946]  hub_event+0x313a/0x52f0
[  973.021294][ T5946]  ? __pfx_hub_event+0x10/0x10
[  973.026045][ T5946]  ? debug_objects_fill_pool+0xc0/0x660
[  973.031563][ T5946]  ? finish_task_switch.isra.0+0x202/0xbd0
[  973.037362][ T5946]  ? rcu_is_watching+0x12/0xc0
[  973.042115][ T5946]  process_one_work+0x9ba/0x1b20
[  973.047034][ T5946]  ? __pfx_process_one_work+0x10/0x10
[  973.052395][ T5946]  ? assign_work+0x1a0/0x250
[  973.056983][ T5946]  worker_thread+0x6c8/0xf10
[  973.061570][ T5946]  ? __kthread_parkme+0x19e/0x250
[  973.066569][ T5946]  ? __pfx_worker_thread+0x10/0x10
[  973.071657][ T5946]  kthread+0x3c5/0x780
[  973.075698][ T5946]  ? __pfx_kthread+0x10/0x10
[  973.080262][ T5946]  ? rcu_is_watching+0x12/0xc0
[  973.084997][ T5946]  ? __pfx_kthread+0x10/0x10
[  973.089558][ T5946]  ret_from_fork+0x983/0xb10
[  973.094133][ T5946]  ? __pfx_ret_from_fork+0x10/0x10
[  973.099218][ T5946]  ? __switch_to+0x7af/0x10d0
[  973.103883][ T5946]  ? __pfx_kthread+0x10/0x10
[  973.108450][ T5946]  ret_from_fork_asm+0x1a/0x30
[  973.113196][ T5946]  </TASK>
[  973.116462][ T5946] Kernel Offset: disabled
[  973.120772][ T5946] Rebooting in 86400 seconds..