last executing test programs:

21.222432988s ago: executing program 4 (id=2863):
socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f00000000c0))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f00000093c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x66017, 0x3, 0x0, 0x0, 0x9835}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aa6a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, 0x0)
syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48)
r5 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
r6 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)={r5, r4})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x6e, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x18}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)
close(r6)

19.485527198s ago: executing program 4 (id=2868):
r0 = mq_open(&(0x7f0000000080)='\'-\x00', 0x42, 0x0, 0x0)
mq_notify(r0, &(0x7f0000000040)={0x0, 0xfffffffc, 0x1})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400"], 0x7c}}, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x6)
r3 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', <r4=>0x0})
r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0)
write$selinux_attr(r5, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0x5}}}]}, 0x38}}, 0x20000000)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x10001, {0x0, 0x0, 0x0, r4, {0x0, 0xe}, {0x1, 0xffff}, {0xd, 0x3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x68}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8041}, 0xc800)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="7c02000021000100000000000100000000000000000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b46b6e0000000000cc011100e0000001000000000000000000000000ac1414aa000000000000000000000000ac1414aa000000000000000000000000ffffffff0000000000000000000000003c040000053500000a00020000000000000000000000000000000000ac"], 0x27c}}, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r8, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @pic={0x4, 0x8, 0x7, 0xe, 0x7f, 0x2f, 0x6, 0xfa, 0x0, 0x61, 0x5, 0xc, 0x2, 0xe1, 0x6e, 0xa}})

18.346393105s ago: executing program 4 (id=2877):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0000000000050414e378a0"], 0x48)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="2100000000000000000000000000100000040000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000004"], 0x48)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x21d4, 0x3c, 0x100, 0x70bd2d, 0x25dfdbff, {0x1b}, [@generic="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", @generic, @generic="cf8661890a", @generic, @nested={0x11b5, 0x60, 0x0, 0x1, [@typed={0xa7, 0x13d, 0x0, 0x0, @binary="6bd0dab020f95376eb720d5cd21f53c6b5b0c084d5d98a4f62fc1867b2e77b001bc514e58a5ec616b4de11a33298ef82d8e1696e383c3d5e69f793c2baa9a272fd25455b907cf7b8b7cdcc6e1afcf62049f663dee1585a29a7f43d794b2d948e411e27b3dfc528fc3624a35a5ef68d65082a5f4c3ffd459995915c0c3d821ad10664a92cd8406225a939b44c193fdc75a3b6edfb90dccda58b982f2f0efc33eaa5d694"}, @typed={0xc, 0x143, 0x0, 0x0, @u64}, @generic="468e2bbe66c26962166d902e93f795b477e5144c1f6d43b219cf8486c3f1f6de3b28a7d11ec3697674066b816ac80ce34f30f4d0f86a73351098fa57d2c9f82502b1ef9a33cade450c65223fefd317cf088722ee4fab6e70de9ac09500e423f326b12382cd40587c73949c12ac23d65ea2b8722799d60448699174382f0c278b467c53f990b6ac20c99f45a783912c311d0900b6e8734202ba89dec7ee188e7caf9f54d7823521a2fb651a98812b90ee1186a25c1baf1edfac2b5cdfd4a09e9c78a20d859d630c2f5fba311b0b34ae39d4767a373798bef0033138c2e3", @nested={0x4, 0x85}, @typed={0x14, 0xa0, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @typed={0x1004, 0x2, 0x0, 0x0, @binary="4e2af0a6e36aa8ee445ea615501ccc1251e16109b2d5d3aee461c77aeba8d50181dfcc408525f9f681e865b789d1e0231a3305feb19cfbfb5b706d9520a620247c736afab3e95d24ef98a7e12ad30ab53ecd2e08fc36e7ab3f93c8683a52fe5bdfd6d876cdf297eef830ffd33a78ae6882f54d6faa92b2180425964f87bd55aced3f7326d9242c685c66d273cb315512425d157f3a7639f8c5c40853a0afbe5fcf65784ead6c87c22363fc0effca3afc74619b03660a8843baf77b86b47c959a9242d58c86bd222f95a83e724110bee644d0356824e66606d2456b9c199a129ef768e276e8785d7df44e6cfbe9f090b09d487244b4b7a2b99f249fbb9a6012c6d66883611fa8f58078cda978bb285239dcac217d0cec95073b835becaee5ae281e8e637bdbb83a7cdabda22a9f95e28a4d9a1ea8b528dbe7f112c5325d15691052292f38e857728f574f5879ea0562901d5462c7c0db9ef7a8befd77995813ba93855b5ac763f9510d55005897ce49940f56bcecc3ec5fdba012008459fd69a447bd1ef541c9561c8e792c02d1f186628f3c7067f6d28ea09e6dfecdca9efa4d37440e041a6d40183ed22a2a939083d62fd8ec9b3cfd17f53201fdbca4ffae5ef09b13bf86334ae0bf2e8b179861a06bf835fb48b320932778fe39b3aa711ce5718b4d8861b49d12279be5b1449c2b3ecf1472e22dd1eb9f7fafd74bc3d8091f2c4ce8c71c36edc45b9a89b9541b8ca3b4e8ee25be3a58146025f8055790c8f0d6544e2f03aa50a1369a3e8d07b91a5d61f204deb31251f86ddeeedbed83c410009b2f8c540ce91e2e52837f51e57286661fba950f411c6072a70e4aa78086b0bb0dfb463169cae2564fd34d94666a649bf58f0e309b11ddb3d5d0ec016ccfca73dc964112bde3e1c405c989553a2183d84cbbcf913cc4b18cfc0e4ca8f21503d5f937235053f77d38464e29a1d454391b654d0b3b011980ac063b657d92eb62ac074fba8ed4eb102632d53834526831533d0bbd51384c4e06567d12d5ed0d8eab6c5bd56ce089f08d4a7105e4ff835f42860a88ff9bad63d72fee856003fcfba34862204fb4930f027bbed616fdd47e80c74f4ed1a57aa7bbd7203d36e9b61fe6897475e2e06aedbc9f98391615760dc10bbc721569b022e6a2375828195811c64369ed57118f4647dad9d7cc7d33625972e0e344f7c68842ce0e1edf64ab49eee980da3e05c2952d1c20ca72f9ba635cdd8b0833c7710666b13b8232428e89f2ff716ac76a17ec9a55ff7082e4f71d6592854c6aeda5d5f48938269fbf4a74ad0784a42604cb1c01e576f9520a83325738c1f8ffef4ba03c35bde881b48fe7be77c0156e345226d5ad5fd233c626fbb968f412a7edaf8c2326b62f369df7afee71324c86a754dbc832584f045b509cca1cd451a7fb80285d8b183ca4de4dbaa4518b24f63fb3eb35025a8215e3d92bd390e49e1d67a9c610003862d6c55bc4199387d5821c8539d647efb99fd655ae55e1d227967607e2ebf65243aa33fae8980f931d27b37cd7becc547bf454582826382696be43b00ff61e259cafd59d60ae4139fc1a32bb2123cb88633a6c075f31dd0f3e14961923ba2621775b3bea90b7ab0c8fb28369a8a0a53e433b4c9ff07cf7de247d196384ca8831edf347f4f7b9941fda58530bd4287808890c1145b193679d94e543653ec4102f1d7ad9bb3e40537ef361cad2a1ef0f83524eec182adc4e85f0b0801105fba69a613f03919ad850aa06d08acf7491ecb00c695721cffbaa40c4884a59e1d8d67e0141195e2596023f24a59f79b96eabb4b911f8186820f15dc6260fbf5ff17067d71401468532234a72730978cff9e6396db53ff6af022451d80ece6b8c905459c4a7ac64011bb1b63e081f66942c5dfc37432e923d6ea29793b8d4165407ad51b57ef04ffc718958764a5252b38bb4f53c9a84541d27fe8f0ba195da77f94409be4df08bede9a652f11f7f84d6c2535f388dd148ab9c731e22f862a6504ad7fd675d945e6534e5e535350d5faa5ea360fd6b27a94e6a997863d11edc4ea23696e8edb75b349a1341db99a8d9935ae4dba217353c171bcc5bb2bad2d039532b91b695dc760b2a4eb94d5bc76cac5bfb161c463620f62c5d9d14f4755fc3feca134fcbb4ccced7804e67c953665ac64fd0d10bc44cb65e57fa3f14f13fb5ef2c93366da0dfd7e0e007ccfa7935950c51429b9d3bfc00ee2736f16023959bf6af156f0badeee5203570d78063aa33bee8a35d20f7492f1def035e3a8847c4204499a01690e8368ffac78dd26cbf4b56612f6799581b238c552876ddf41962b4c417cc02f6486db1afd4112727cfb0bee9fda994a29fe1cfbccde86826616fcd15960a6b87b9e0bb309145d5753a651c9f53f1bbb5bc849e5b7ba378e61c55c9844010d30887588fa49593958d40ff1a2a99d055f5178d11a9525672b3cb94b97c5b36dd01c6f3c2285b0d36247b71de916fcd0335cdf20308723666bf4c36358de80a643b2ed98b4b37f6670049873c0753206011655f36741434aa2e922b6bf66d4baac6038d09dd4a5c0ae6922ec4727ee12386cbbc2565d0b74c0c7f313ba6b3829e2fd6d550982e067c2f972788a6bc7ec72c7dea8f61f9f922d945820a3de9e5777f1de0315d14a8feb342b56fd4fdaa982ef90828edc0ee9c92cbb1bcbe394468dfde4e46d7c79b7f56c41249ed31cd0bf9a54a920388e3e092b35f0418ada456f9a4ba9286fad608cfbb8ecdc94cd939fdc5288352c34a1aecc941126e54d1e20ab12d0df7d1c6f6ca9aa80abfc1da952825af571faf372870053a4323e8e6c1e0e30133639b71d5f68a8ee719b4e80726ad6267e04b5470dd74c548dbf9cc61619b01d7e83da843c569abda968a53310e89987203af0915434eecbed2f041d7bc45ff73784faedc83c1ed0f46988480e6de1f59658f052fdb1fe55a562814be9991f50adfb22c7fb9b9db2c52c3f9b8be250232edac227bdcf396f19cf5873393fb546addc8c34c89340bd1da0ef5a9c3357b382c9d28993d6931e1030b6b4a7805d9e92fb9bb67d228d803ff59d68065e0cc757cc928be14f1bac25e5d3c7bfadec67f03da08478ac57147a876ce9c9f29c1aa95e5355e4f93dbd2666a6369213455224ae096b7da3820a341d5ed2afe2e3e82366dafbb0f2d4f6c228cc4d0dd96d75e2c31d65ef720c32341cc7d8960c1b2bd014c0498376657a47d241f70c1066992f92621c9aa4291659ccdb4811ee6395c538cb58f601b33301aa75e5bb966183c089745975543681657a34537ef4956a9c6cfc262a8177b696b7c768646d9a147b572c529aa4cfd77c9242c498c8b95fd7d1518ebccefee68155c2734e698b04e69e41423c5642f9e45bc569998f332c87f1273f1dfb49f013e26b8bcad513f588288a70f2c6c2ea460e52ef116352b3fbae706c7e703647eb681f706563a3064a3834558553c79617edd2468f8e46e2779fcfde28c0dcfaf318ded4db9805a1ebe3ee3e9a10503afd0110291632a5d42e2397d28828bf4dedc863ecd084c75154ad1ed058021763c9def97bd762828dae70f1169125725dcd1e622772d1b5439b8d754d353c53420f1565d1d36e989bb5644400d93ec54ffb96eb0be334bf4312e1a82802a0925f3f1f43c868169be38ec3fc0b59c90868cff3e65261af17cb94537a4b9ec37ff941e54839c34a94181920ae2a29e7095d97095858de58d637e3b2659de5577ca84f3698e36be7f0ab4fd73f95771b122028e879312de9766aa182eeff7b3ccc4e69ac3a69e9accaaa4e888b7832e11c684cd74a3c8830b400af2e667bf80c230b642b03ab62b596d1e11c6ff214bec2d15560610b7644d4e4bef3c49871797dfaabd2737b18234b887bce7d82052d2e706bb3c5c7b963d138dfc9da050515b8ff437b306a3add4c2f2df738f02f73be4d599d96b919c3ca82cb5ef579c2e849fcd529f82c2a0eec6e91eed36a3662e989a8a54c07f528b0bd49cecfb1a45b38f95d5a798aeed71ce2a9fddd592ad7976487fb5c51a1d59c8ea69c39eb8d560b3c8597dc7c6e8cdae7e0649cfdc2043db7cb83ec445a39d3c3aa8b4d38de42fd531a72417a4731feab60bf1b5baf988a7e42c51c5479cd7bc134c430a4e9bdac87aa6d4be835c34412c79db90970e2f362f62104aed783b146016adb161cf2c8890a8f9be2f531909be1f0bd133af6f2a46126ae5214edca8d60225e9c4867b8a72d1ad9fa8aa9716ce5e632e283bb7991ed075e3e402c18d3b0f63f6048d807747ebe92e72b0c27cce7403658854b5da45752fb95ddede39667524cbe53e709c62b2be4264760a632228b3d2e3a9fe33d05b3fec3b43fb0d842701d6d7a969de69ac8de624a9afceee0d19157ea63a926c1c1374a0fa628719fb8ce356b324b5133816733b424533affa7b2cb00ffb3c84ae7cf4f5e23c0667555a1c22a15464cdd3155bfb2e2d59927fe8c1677a392f8e9f57e34bf0685019d08e72dfc41f7c99d968d846b15a0fa8520cf8a6df2167c8b90cfad874d9ee86641e947dce0ec35483e6ad7e96b9bda66af95050d26506f9262e86a3bdb69745e479e926aa7af41dafa1a0a3a05991a64afb7d5b76a87e19f965c07d4011412efc4d5ae2f5ff9d34e177137eb1ad6675c3c7e62515540444bc8fb2b17ef1cc6eb4dbc3e64a846b1cf6b0e5e5b74bfd4b2c744616d16b86f369c376a7b1c556535e723ae97b88a9f0f892f16f6ffb82c96cff2228aa907099a508087c61bd3ccb8cae6966d9362eca1f22b62275bd54668c8a8eda9198f94feda3a80f77eb72e99e51175b35aec88e24303e95e3a82624548bfe825039efef219495ad873a01f57e7a03061a09cf04353705d0bdbf92eff6a6201f583a68fb4e9e82f59f7945786bf0c4ce0792eac04681d2e3a52357f4cf33fab5c1aa8a7c92482b501cd2f4655b3e873580a796ad1d3dd3fac2a86da2369934e3af525e206f74e83d7a5c6cdde9544a18353e2325edb7e91cb2813ebb0a8de469112b2fff442c658cbac50e7d237529b6529ee4ad3e7bbf05cb88afec79850f735575ca7e86dbd134c15f2200711638cc925bde58a0086b203ec893b4b78d9b76a115a67a65db77f431fd36912d6303b0a921d85b83d37bb93fdd8bb1cef237bd1bb37ca4f9d9809500af23c98b576fcc4b2efbac0d30071e1adb0d9a9c7134c159687f24ce106b8290f12d4d262b62a7ec2fa29b7d07b83e5d55290f0f93f8aa41ad76eb18aad8003344d88e7bdafdd4440e4ea012c2dac53bd3283ff398a1d4c94317983c3a76b420ab8aac4eeb569c0926775e91ee435a7d7664734e1ca5016eb03636040189c36313c13e31a979f8032beb388848ba9a988905bee9e1fb2a3a9c07dc31e8905ef5a008a2da9e0bb377d580b2e6f2abfb45786c787673c5fb1b58970adcc51f7dbc62cd936563acbaed49937a1f277f718e52056cfcee72af751174d7be6086ac3280f69001117090753e4988f1795a28a19772fa5914891904ad6695eb3585f9ab0b4c408d91d8824286d07254dfbe37e0fefa503ed16e4138d121646f83d7b9e3702f6c0dd65bb04a035978b7c080db7d12bb994d49540c375cc848a486841afc9920b5be79f9d2e06f77950ececd4ebd87ab65180ab48e6c3e5e3b43bbd152b0adbcc7910bf3d78392d23cc87bd05a5d46d0df384c6ea7d6f91599f2279cca947e6be3ed5223c00b3db46b6e0ad14682f502b8e451c8d2326b273ad60a3e5a13dd02"}, @nested={0x4, 0x41}]}]}, 0x21d4}, 0x1, 0x0, 0x0, 0x40}, 0x4c040)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001739e6108d90f2c006b060102030109021b000107d445000904"], 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef50d"], 0xf8)

15.239759044s ago: executing program 4 (id=2885):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
syz_open_dev$vim2m(&(0x7f0000000080), 0x9, 0x2)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f00000000c0)=0xfff, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002dc0)=0x14)
sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)

15.126826512s ago: executing program 4 (id=2886):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000007980)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0000000c1021800400a6802793922d957e6e177e7bad76fa4c7c7ed5161beab5cd0b814bc6b1a5226e59d88f28eae5a0dd1edbea5445db78e1e437d8dac76810c7b264519dcedbbfc80df7a99fd238b6b9cce4194c72786fa6a4b9af08a23b979ec442b4b69272fb1b19e07036fa8e611b52f2ef53ffd36139b9a1f2d5c7160a1158cf1bb9b70f0c393b23b38c9a2797736689476da9c7ffe50328870e6433f3c0c34c9748dbaeafa8bf832f632738cff796643e159ced3e801c1bb28566bf0dfe5329c1e055a87322d7801a470d6725eb0d7ae87128d0ecebe9453816c2d28df7101eab19204a160ed881ecc37f41c23d5ca792bae6b2f0ecd5383e6177c30b15d190a3194233825b2e1bc44a63b382d11954a2659faf5f7ed5e0a7708340683aef57c009a0e6a991ec6a330410fe8f4f75cab0aeb1f3ca0d92ea1f9bf54f63ff5447b9a19c6a1c04131a197ec1342ba4f8474d4b59f8f0e649c2beaecb101782a1293a73bd5ee2a4db2c2403c91e5912be51c4f07be1f236c50b7ed0632b552a12ab305ac3f0ab3df8d4eb94431b6afffb8ab1e9399c1d532721e20edfe26ad0d386489a734f2df1bebb4940bf39a332a803962482be58d89b4c5872ba89a01f9a740632da585399ab8d6a3c55a60a49cb26d76dfaaf7f843b1de74346f0c5889792c59b7d0fbaf70819dde2e83ebc721fb80cbb952e5e5207556cda37233013e6f59a5e2fb9b5c7682aa39459f646aa1a5af2f1b90a151bfc62f8ffdc405e7c454b893e0936af3762305aa94ba809a2fd12122dd731f86d6382b9595f2ca4e02e0a21898c557556ebb9fc1d2d5184a888586ea4b28f9f91e6a4c6ea05cdf4319846014b936b2013c5715651db608e869a1fa4e8e9b8aa5e22b04340ed7fec65940a1776959d504c0f543468b503097405fc0075363cd18f75d0afb3fc54e31d644c277fc5f8652a4bd1c1b546969b36b5edd3ba12e2f6d2aa6dc3eb7c56d868755dba29967dd972b90b8353011ca4f31289c705063c920d3b9e6232535fb76319e6df8f7d07e8bba8eea9826ade642b11dfff6e627cf5bd208f284115dbfe7fbfb601e86a45d71dd636b89313071ac677240b374c6d3ad1e31baf0a5467f599d4db3b48992c2ded9c16a90567012c6bf72dbcb10ef521997c9b471d7bd9a01ac0a92b3277ed3fd0ecb915cd3ae2ae0088c0c4073b7d414b8f291a74e1396756382c72b0d734eacdacaaef299d879f0e863aaca0fbf2e9f6f46ce2da91449b7dde5b2944ce934997c955b5533e7cce613044b8c96960aae3372ff029b718035ebcbe9e9cdf5241e4a98e4f70e828f9db64b2978078b6dfafed09808cc55e183c5ff0609119f486d1ffcf708c0ad66896b9394d350b88b49e7e37dbe67f5746b69f42e38af5b1798ae22632a64ebd5fb3eecad0182b9a5b10dc8afd8964d4ae37b25a7972be906db37869d0e77bb90ea78256da83a6c21d736a2ea9731cb327b43a7e57e68fa006e65f4d5805b05eb1c1bfab4935f719b1690a8359eff62d8ac3febcc839c1c8ed29b2597e2f5b384bbfd3cd65c160d64046265a2b7e5cca354ff6221ff3c1f044aa7532be746a27e381b02b1d2bbbed50e62fa4aacb6afc04e4590f79b5d7aa294b264f152d829be69990f0880075c600ad1a82ae157fe35dfc6b51cd451edeb6969c334c1e7b3cc18cb62a63502c7ee328897079543edc59912266fe2bec98caa420445a5ced54e5b35c03d84a49c453a982420f5e0bf63bfca1d1b0e3d25bd4c3f3b2a091ea89cc4cb39fb819c7c740ee5a91da2ffa31dbc4ff154a961190c5a6e29d40431f000a642485148b55b46317213b554c3d532284053d7f70017f35d77eed82ab8fc0a6393e02835d2221ae4284c280ac6567c2caa79f3ac63de0d45a57b306c4cd5a599ca3fe2b2bb5b6860db9db9b930b5ab70b75d4b5cf0638f4167ddeed3e857790ac7402596c61fbc227c6243c12dc60c0b85deb73b758e9daecfdd9aa11cd9667fb1116c188abf843a6e76d6c910722b5a742bb2200eeb597effd60bc4937e9e4e5bd305909c3602945c0b7a72d57e292f9b829db3b84174c90d3789917dbdeeae0cccf07f91ed58ebe11021eeca088d1c30f8648a7de925b1cff37964edada586c415a9b19437d3e0bf2e3db58aaede7890a513c976c08acea7da902c257f30d3f779796c24cf040b3b0622a06a2383c6a5485162e80dc8562e792c85f22a6eadcbe52728af9b61eb30e5ad40102d676457c228c790e9bab9068b768ce6ac41ab09578b8666198f1b1e5543d6b987c920bf61c70e9bc236afe7689c2174d19023a6150585c9224ab5e4526520af1ad2ccb2acbe8e90c68e222751f29ec718e218063a7216ad00a52e46f57c9a03e575a66b7da4f82519821f600659dc7c953e28974a87c83d72ffcbe4929df19136c39db08dd241bfa070a9e787e2c12553b634325d5549728d4fe7c357d440413e0c244f04585dea44821b40d2730a187872161b49787be6ede3f769fad4d163237d7c4be0e9fb9f8fa13db3f3f0156946b7a9eb36da169165031365af7fd419eb18430a575c3825a179560f70bbf185a87eb996e2dd060f2d38507a5f7f0d3565ea38bae6e3645e6cd791165afecbf8acf222ae5343c54414f8a052242e6620045891ac6df0fc9f7263fd44f25985c6ba3e1b7910ba7c69d1f3b8c3accd6006b709e0777e0c05adbc8fb294cc7d1e1ca98e66bcdae280a0bbaaa66e4f5cb8e543458c91f9e6e5f4ba464aa98761b97fa98f3fd64e2060539d7a5dbd19cf9a822815e575e2a7782bbcb45799c37676590a419aedd62498516bd2fd1c3b491087216f3c12e988dad8102c0fc55df8f119b7bdbd45ab1cd30d6e7ee08227ab837c43d2e641dd698757306cd3dd65bf78400161d95f41718631a2140d392e76d5938266532c78fa8268163e004aff40ed91f89915100ac6ee158e8d5a66315f85fa02b4bfb1fb6d5aef24eef843f3b46cbaeafcae4e549887ac225d96cf5400796ad72582d7b22cca85dee3a08af24053d550d8400b15ca15bba37daef37792b3a94a70e353ca83927a22382221e022cf8a6554d5c5aea6bb910fa7b0a8421c9d4b841de638d5a2837a6b64b131d4cc435536ee5ed41d804cff73c5549ffd5e1b4138ca3ea1ad5ccc228a3d61c6594b346c225bcbfa7b6860aa7662a8b9fef415912bd704479c64b55edf8dfa4f0eda103969496576850035db7d4e630531f7fce68f6e192afaa341ec9f8deee6dbf41828aa6c7a30c9a596fa56fc41767b6740bf139f225721833136a25c0b852bef9c2949c698a081c27d1fa7fdf1581f3f921b9e2ce8296858b1229799de3cd93b680e6c28dff92a674438d32c48e328c517803857388f385038074d60019acf7979b0227100c9b1d8be3f88e2495ffac66a4efda3d2a7574dffc724f98d1fbf69285c280417c630d082cfb282a27190fd6835749e1fbca912f51878a0ce1b970e153a3da6bc497c9af698731bc6d5504afc47bdd89abcd50a1fbf63610a56e97314c58f44335f5c19b6ae2643010e93b941eb7602c339f681162d2a290765271d10cf2f8293df3a2d05610975fc39abc7bf538ef5db6f5d7af4e011b7e7ea66fb67a665cf44575b6b06df56ed3b08a66686403e8fe25cd841d153beae9614ece1b05af0be7d087bc9e4ad099f6846de4c76cd8875d982395c9a8d3bb7c34f51104959d94b7283364b661fa1882c05d86cb7bbd1527abd52b1ce8495a709bea2911518f201b68a00be81da2b4aa92001950cfc2675ad79c44430c46d992d3890e86862d802b3dd7e45637e548f6fbe7f35532b10d7b603238bbfb7aebad6a625fda8432212ec745530bf27661f60122c0078ec5fc07e7e663720c58c1396b925b4105d200de3a086eac5c33d126471f9ad2c6f4662a80dd2fe93e8d64864e1315343a7404bc871d0b22215d4eac15981b45894ed05bb6981bda770d5baa7c105ef2cf641ddd9f8ffaa6a78a57647e548824ca070a470e1a4279d911cc8b39443ead2a89bfa8a6dc548ec47b6576885090282dc3204f6196d2128b42b03ee7710ee85e006fdfc6e926f2807cbaeccf5475df6d8b7e2766d367827f59d907ef809f08562184b834452f9bc1580d72d7515e35028b81458e81d31e5342636dfd51fadce46b2cf262f3c3153e8c25ee14c783304068fc02c2c362f780b1822cc38f9e733cf53f0d0e07a77b482e3f7adff6b4d8dd0aa6aa214d48d380c9767ba3f9b95c09b6d608a30472476b9b7c563918f8ff31df0f2b54afe86a1fabcba2213db120954735e28d8de65be567b88ba05de9988c84560087184d5caaac692f6586796fe964ba95f380478561a8c9c80080c0236dadedc9aaf030f59ddd9bfcd31685d47cbe4b3f3cd0b6ac5b3d41dd7475d85d648ab6f3470eedb661660bdcc9fa219d1a25ec5e430466292222a274d8a3ed04204d5d26d49d9874f49bfb39933f0aef45ca7fc49d1c83d578ee2d899256e8040c3f1faa86b86244d6ac416ec1a66c63e40e7351cd4a1f1defed39e7dae21966b56cc9c415f8bd6ce8fa085ae425cb18cdd51f2536267ac4f19833438a495b1931511ceae33a248fc4a39fdb6409070568fe250f4b2d3666753473097bbc49891e7110aea4e7477e8d442d50e0479f7e2db10b4d0238061f4f68a1c78a1593e4d1a2c39615c649e2d6d01422ed00386ecbadb21e45da243fd20ca26b51268d0835e66ca17b57f353dd22e1355b5bc2c5f56e8b28d1199c8c296f03e21b6de84cc9e2e9cc1d6bbaf439bfc390f08aaa13d269473e1153310f14af132175e440aaebeb81a3f65fdedd367ecd1f843796bd683d2afdb5ce443fff4c00798d1b63d4f750118edee0965ce6447a67cdd003138ecce7c586db4726c03b23cabe51ce9926055ed5e8a05caa609f2c2058e8ca7767254b8fae3ceb3de9a3e6d8ae590539a44bfc86f89ea8f91ecba022c42a52b13ab60a502f12d5e6e8d215762cc23e0a91e944b4901e4c8aa9d9a1715b75992ef44a6372a268fc850bb33342176377dfe729b4ce11653086d0d29465562988cfd910b0d29ebc419210164bf319a2d815787258d46b8daea408498746640b8297be0bee0fa5ed9e5eee5a791b4e545af3a40599dfd8b984bc38f4112520cc8d7d94fec5775903c79f5bf24b64eeda2336972869cf565eafdbbb7ddf79a7ee542a0ea58075243de43f860047cda0445b046a5606d5ede6c4e21d9a49d38f13efe093428f4e5e948cf1992722eedca62d689d44bf2fd47492a88dcc18ecc4e0efe8bf1263a1d94ec97fcd021305c446edeac4c54c202c47b1e0d9e4dc7917b9494b04230f9aa37b7321e84c543279ac2e5ef05a6091099157ac932a41d61d99262318053b11feb03c3b77e2c07c5374db4f9abe0f796b5fd5e57f130e1768e37c44b4064eebf48b29221f04161fafb242ba21f6fb930cc34c0636aff1affd21a840139e81a301a2f423d87c530203ad94a008ceba93f6ec6c2ca31cab5962eed388a5b0539b18ded9d424dabb9c3ab3b05f205795da3da3e59d706f1439642648eee44a47aea97a9d82e75ee930a034f789107b47fbcc1791c2626836a229630a5172f57ed8ee8a73ee51217d6541785fb8c37d0eacba1889c6b15db7127886b900d2e582d0820584a658a1ed8dd0048adbd441b65900b72c00fd9b22983c5b035527efc202ef7087b02cd95e69947b8d409b16b2ee7a39d8596662b322027dc0bc2ad81fe76c50b817e7b6f40028ec334d2877da23b15b5b9cdba30319641deb04006280c10650800800d0007f000001c0054d800400e980a5013d8004000500bdb5752d3666afa14acc12c6ed2c7ad2d96a76419a3873a598535753e490cb2fc78b945929c11ad1fa8f7a1bb09e7a25df5c1d162d837ef0911b4a3fd48be36f464c7d45e74889c995fabf7e92e541b6e21daec262f650b602189dd34e2abba7f235627b754f0d3349e3acd1073f75d354a2b078680d03b267b8a8a990ec4d56c505a6f58185f992029b9861b8f2e1b6eb3d14005a00fc000000000000000000000000000000a3c185c6bd658129d852bfecc2c99ed725b516f57176308fe95f74da2b960a82ad466435107fe2b57de9cc79673ae4cd7549c2db367499918f18625c0ee205859ad6792096f2c0735c825509de1ca336aa86998900639aaf327946c387467fd683370b9034ee657c88c35587923a2af9d6bdc69388057a7582d6f5409218efded6f03b5eeddbdf8854ad53deb054fe5fbe209c440ee9f34512410f205f3180fa43e0dc11ea599484194b51870c91cd6d396a4652b9dd545d2a5095c1cb20a8cd3487751f8be4e6ab18fe1522c9d649528f4dd4e2b446df57287a3b8fe5a5eb293dedc808005f00", @ANYRES32=0x0, @ANYBLOB="04000b800800850000000000000000dd00ea800400bc80040097806f49621803f7599dca42c62ca8ca7db650a4444029b8bc449c7d1d0646b8ab574e677ce8595c2a4dcb33316f68dd7f1de086135caac047cb4fc1d102efb84eacc17ca46234e93d1beec7eb54ab1835d670483c0eb3e5f764818d26ab7343be2b1f73c6255cb9e86011579379f5b6ea8a5dde230cb6f23d2d40e8292f360b476f03a555a4a80e09b150b10129565ddf342796c1249248ca9ec48809666474ff211817404e526f7a0441c02ff4c465c46d40ec4f0893a3fc6d55feb97f76c135691179abc5bd553ace92da8ea5a61b2c0c280000000600ba005c0000000800bb00", @ANYRES32=0x0, @ANYBLOB="0a0010002c7b5d2b5e0000004d010180040002800c0096000900000000000000d6f88a8c39a9a73f29ec680c72669510f68d2444e96726e7672f2539798d7e984b7fb0a7447510c7de9b09b0f9dd95a54009b8e6b51b35b01c2b607124e7de86a66625b674047070ae0d8e7f7b94da43092496cd07d7433c534f349dfbba1fc69f08caa194051b2156434af05c77051b2edbc42858207084f22323e40984fb38fbd9b53e7d765deb007104164522640459426f852019e71f72145596527ad00800e500", @ANYRES32=0x0, @ANYBLOB="92b2a52e9b5149377f2f8c167de2cb18af946619122acc69568170fd110b0ff90d871b6d986415b69d8671e4f7d18a64a0decac3214cd7fb24b68731bad749391802af9577e7dfb880d99a81a3f168d640138f68c2f45f9084595da2d520135b0854030a44d5df730e911b9d873169ae94d8f0b62fdd22dc8ba8696389128de4e4e20b0089006e732f70696400000400a580000000c101c88008000900", @ANYRES32=0x0, @ANYBLOB="130042002f6465762f6472692f6361726423000004005d8004001580f626a7a693f6479ac60c1263f3bf3621423d7c52497c2d149f621d021969df40419d3a3e37b8e5d3ce39672622c0d9527656176a9bdb3d983f13d28984d3e0849825559b8224a4782e14d7abcca3e69d9eb3a3477ac07b0c99bb007786103f2ffbe84a11e081a7ebc0961da23f1aa02595f40eb309cbb2c866402e02102dbb57522fe9cc6cd5d3d844f8bfd7adf21d790ae856366acf36098c12d277d30c8bf5d00ee70a350e84a8ad2c77c7df9a98683ed60d1cc92e42220593e6488e2c9995e198df06002200800a00008f93ca4689443bf8946d27ecc5186568e106bef065e8701721a8342acac3618842aa14ab6eda8233eb82f0f1b59bb6929b4ed268a2b3371851ef7bfa961755a184c65c9c96ded030a931fb967a5e968db0ef44374dda3f6be8a3ae6efb6297e0852f9430eaeffc142c4e7ae04ad768793b4fa56038d03bed88c8014a3e7098975ab2c747087d88564631edbdcdbc11c8f8decc3b4be1d036a4cebdea77f53afeeade73018ee36bb39cbb629d32d73b22aa04520231f7f356ace5db466aecb849fbf7383e295ab4f6d1e2bceb2a010000000c00750001000000000000805fc2bddacdbab15a7e64014865aaa6b93f12c5c3838a70d12934977f35f6b3bb632ddb3d3cc1603c1fb33c571fa6cc6ea44d3c22cbb595fe8aece96b76801ddb8384f68457af560bd556917246abe263469d31cef6f4b788f468b081b8e5b8fcc1a5ed9cbc51283cb4d92f31e13f24371b947c252e998154b6da97e5f7b3004569c2dd985f6dac2dc4afe8b452a44b75aded7d845c21832b641083072a718188508fc830e65e00ea07f45bfef946e300a2b9e018d5f3608b18b4727bdb289feea8c85f5207b008c1077a04673675a365df0375b9b90800ee000d00000004000b8008007e00020000000000000800aa00", @ANYRES32=0x0, @ANYBLOB="7da4816b6435f7e3d103b580e2e02155317bf7231f71a7fbd0c3d484509280d95597199dc835e672c90cfc5faaa7ee356b466b869eff8150e22d174b4d63320c961f2955cd3525cc368aa09c70ea5e54cdb4c89e0d68bbc973af3f14c85083f129a8", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0800b000", @ANYRES32=0x0, @ANYBLOB="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"], 0x200c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
pipe2(0x0, 0x0)
fsopen(&(0x7f0000000000)='cifs\x00', 0x0)
r1 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
syz_open_dev$midi(&(0x7f0000000040), 0x3, 0x88c02)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
syz_usb_disconnect(r1)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]})
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000004980)=[{&(0x7f00000034c0)="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", 0x8d8}], 0x1}}], 0x1, 0x9200000000000004)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000bff000/0x400000)=nil)
read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x10d2, 0x0, &(0x7f00000000c0), 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a01020000000000000000020001000000000000000180070001007274000044000280080001400000000000000000000000140800024000000003080002400000000208000240000000000800024000000002080001400000000b08000140000000010900010073797a300000000009001163d14d7a3200000000140000001100010000000000000000000000000a"], 0xa8}, 0x1, 0x0, 0x0, 0x4090}, 0x0)

7.778592048s ago: executing program 1 (id=2920):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x88}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8}, @NFTA_TARGET_INFO={0x6, 0x3, "02b5"}, @NFTA_TARGET_NAME={0xc, 0x1, 'NFQUEUE\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0)
r2 = socket$rxrpc(0x21, 0x2, 0xa)
r3 = epoll_create(0x752)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100))
setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000002c0), 0x4)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendto$llc(0xffffffffffffffff, &(0x7f0000000900)="3b4c4834d8f77025257d71882f5e4ea9f03274e96d8b1813247883b94df78108134d93477494b2d5a4761e4b2bb7edc4dbe142376b57c103b70486a1f936e1cdc5f5de235fc023d369b5602a93b025038a4b0fd391625f74f436ecb2c29d03c90aec87aea31983ad9fc8b1fd25b127801ecbd969c6165536ee7c4c515838c3bb879e08c45bfb7c24b2c0e0a371d3391b619e8b14c3870f66c764c24eb71084cf18b4eee3", 0xa4, 0x20040040, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000580), 0x1000, r4}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r4, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0xf, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7b62, 0x0, 0x0, 0x0, 0x7d1}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x4}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @alu={0x4, 0x1, 0x5, 0x3, 0x9, 0x2}, @exit]}, &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x6, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000480)=[{0x5, 0x3, 0x3, 0xe}, {0x0, 0x5, 0x6, 0x5}, {0x3, 0x5, 0x8, 0x4}], 0x10, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)

7.73400036s ago: executing program 1 (id=2921):
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x81, 0x10}, 0xc)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0x8, 0xfa04, 0xc0, 0x6c02, 0x1c0, 0x194, 0x194, 0x1c0, 0x194, 0x3, 0x0, {[{{@ip={@private=0xa010102, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'veth1_to_team\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x0, 0x32}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x38, 0x30, 0x5, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, 0x1, 0x10, [0x1b, 0x2f, 0x22, 0x40, 0x1d, 0x18, 0xb, 0x2e, 0x29, 0x2a, 0x12, 0x2, 0x1a, 0x32, 0x39, 0x3f], 0x0, 0x8e, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1], 0x4c}, 0x1, 0x0, 0x0, 0x4008040}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18)
r2 = socket(0x10, 0x4, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r4=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000090000000000000000c3a0f8ff41", @ANYRES32=0x0], 0x0, 0x3, 0x96, &(0x7f00000015c0)=""/150}, 0x94)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="019402000000000000000800000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

7.464738473s ago: executing program 1 (id=2925):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@redirect_dir_nofollow}]})

7.263042044s ago: executing program 1 (id=2927):
socket$inet6_udp(0xa, 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x89}, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$dsp(0xffffffffffffff9c, 0x0, 0x442, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000700)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x64, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast1}}}}}}, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x9, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x8008010}, 0x1)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc)
r2 = dup(r1)
rt_sigprocmask(0x1, 0x0, &(0x7f0000000280), 0x0)
unshare(0x8040380)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0880, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'pim6reg\x00', 0x52d35ce30131f272})
ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0)
write$cgroup_subtree(r2, &(0x7f00000005c0)=ANY=[], 0x32600)
write$P9_RRENAME(r2, &(0x7f0000000040)={0x7, 0x15, 0x1}, 0xffe0)
ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, 0x0, 0x0, 0x4004)
r4 = memfd_create(&(0x7f0000000800)='\xff\x00l\x1e\xa0</\x00\x8eO4._\x14zC\x8a\xe8\xe0u\xe0\xff\xf1\xb2\xfd\xf6nz\x05-]\xc2Vk\xaeky\xd3\x83\xe2\xc7\xd3\xe6M^\x98ox\x14\t\xe9Q1\x1dK\x9a\x045\xd37\xb22\xfdD(\xd2\xdd \xa0\xff\x0f\x00\x00\x00\x00\x00\x00v\n\xd8?]k\x14N\x18\xf4\xc2j\xed6g\xfd\xd2\xd4\xe3\x1f\xa6 \xa0\x8d\xb5\x9aE<2`]<\x8cR\xd69\x0fO\xbf\xc3\xbd\xb0\x96\x90\x91k\x86\x1a\x10\xd2\xf5\x8b\xfc\x83P\xf4\xd0[\x12\xf5+\x1aS\x02/Yx\xf2jJb\x97\x9c/\x1f5i\xc6\x861\x9a\xff\xc3\xe7\xbfU\xd5\xac\xccB=\x8f\xfd\x84\xeepQ\x93nn\x0f\xc6\xa9?\xad\x8b~\xd66hv\xd3$\x13s\xa0\xbfi\xfaFS\xa9=Xe\xf8tI\x15\x882\x8b\x8e-X\xb8\xf2\x9du\x15S^\xec\xce\xfa\x87$S\x9f\xe7Ed\n\x84\\ u\xd2\x16\xc1\xa5\xa0\xaa\xe8.i\xc8\x0e\vt\xe2\xf1lA\x93\xdd\xce\x8f$\x06v\xbe\xe7\x95nN\xc5\xaa\x1ev\xc6P\x9c\\G&y\x8bYA\xc3}\xd9\x86[\xb2\xf3\x0f\x90%\xcb\x81\xe8\xea\xbcs\x95\xe9\x8eXH\x19m\xdfOY\xf1E9-\xc8\xe7\x13^+(\x034\x82\xafiOO\x14\x8f^\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00#\xb9F,e\xfa\xd7\xa2\xeb\xb1\xc9\xbe#\x92\xf3\x19\xe6\x83(\xfe\xf8i\xb9\xc1\xa0w\xea\xbf\xe5\x8d\xe9\x14\x130\xc3\xa5|/_\t\x98\xc3\xa7\x95!\xdf*\a\xd7\xfcv|\xb3Zc\xcf~\xf6\xe2\xa86Q\x9a$\x80\x85\x8b\t\xbf\xe6(\x12\xe0\xe1e\x81x]a\x145\xa7\xd2\n\x11h\xb9\xf5g\xc4%&\xbaRy\x8f\x85Q\xb9W\xe5\x06\xe2\xb3ryk}\x86\xc6\x04\x03i\x10\xa8\xc4\xcd`\xb8\xcfT))\xb7\x15\b%\xc8uC(C\x01\x1by\xbf \x10\xe8k\xea\x80\xd0P|\x11\xe5\xb9\x1d^\x92j\xb0\xa7\x1d', 0x7)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa, 0x4d091, r4, 0x4000000)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x15, 0x3, 'lblcr\x00', 0x19, 0x4, 0x8}, 0x2c)

5.831971891s ago: executing program 0 (id=2929):
pipe(&(0x7f0000019480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000000c0)="dc", 0x1}], 0x1, 0x3)
close(r1)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4)
connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r2, &(0x7f0000006000)=[{{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000780)="92", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000280)="15344faaaeb3f9e438f03ed7a4", 0xd}, {&(0x7f00000003c0)="27af", 0x2}, {&(0x7f0000000400)="6686", 0x2}, {&(0x7f0000001f00)="84f1a3def40f7ca364635233d32e44fb7adb1a314bd75e5e14fad538bb6bc2e979fcbb7f54df7388ed3875e8eac257c97cf59d61e900f1643e48e75eb50fec4444387434f9c38ad835907705ea8cf4a11cb4aed0bbd393c7814765e29064c94e6d53a115cb67da087b5e2000b1cf3278efccc6d0b68df577f7bd69de5e8cb5a682", 0x81}, {&(0x7f0000000440)="a208", 0x2}, {&(0x7f0000000540)="8ff6", 0x2}, {&(0x7f00000005c0)='e', 0x1}, {&(0x7f0000000680)='?\f', 0x2}, {&(0x7f00000007c0)='^I', 0x2}], 0x9}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000a00)='+', 0x1}, {&(0x7f0000000940)="fac9", 0x2}, {&(0x7f0000000b00)="b8e9", 0x2}, {&(0x7f0000000b80)='v', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000d40)='S', 0x1}, {&(0x7f0000000d80)='m', 0x1}], 0x2}}], 0x4, 0x4008440)
splice(r0, 0x0, r1, 0x0, 0x10500, 0x0)

5.594022842s ago: executing program 0 (id=2931):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x2, 0xff, 0x1, 0x0, 0x7}, 0x1c)
syz_usb_connect$cdc_ncm(0x0, 0x76, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r4 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r6 = getpid()
sched_setscheduler(r6, 0x6, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0x66}, @generic={0x66, 0x8}, @initr0, @exit, @call={0x85, 0x0, 0x0, 0xa9}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)
syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2)

4.457896847s ago: executing program 2 (id=2936):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@redirect_dir_nofollow}]})

4.44460924s ago: executing program 1 (id=2937):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4d8, 0xc002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff}}}}}]}}]}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r4, 0xffffffff)
setsockopt$inet6_tcp_int(r4, 0x6, 0x3, &(0x7f0000000000), 0x4)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
close(0x3)
openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0)
r6 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=<r7=>0x0, &(0x7f0000000480)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4007, @fd_index=0x3, 0x6, &(0x7f0000000380)=""/217, 0xd9, 0x2, 0x1})
io_uring_enter(r6, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, 0x0}], 0x1, 0x15, &(0x7f00000000c0)=[@cr4={0x1, 0x100070}], 0x1)
syz_kvm_setup_cpu$x86(r10, r11, &(0x7f0000fdf000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0xfffffffffffffcc1)
ioctl$KVM_RUN(r11, 0xae80, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="0c000b00000000e0", @ANYBLOB="84000000180001002cbd7000ffdbdf251d0107000c000b00040000a00300008015000100030000a006000000bac45f9ce14233bd00000000080009"], 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x880)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0)

4.351833883s ago: executing program 2 (id=2938):
socket$nl_netfilter(0x10, 0x3, 0xc)
futex(&(0x7f000000cffc), 0x5, 0x401, 0x0, &(0x7f0000048000), 0x21000000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
socket$rxrpc(0x21, 0x2, 0x2)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x3})
mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0xffffffffffffffff)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={<r4=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000180)={r4, 0x3ff}, &(0x7f00000001c0)=0x8)
ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'})
r5 = socket$inet6(0xa, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r6 = socket(0x10, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x89b0, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000040)=@ethtool_cmd={0x1}})
setsockopt$inet_int(r5, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4)
r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r8 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r8, 0xc0045516, &(0x7f00000000c0)=0x81)
poll(&(0x7f0000000000)=[{r8, 0xe1}], 0x1, 0x80)
ioctl$FBIO_WAITFORVSYNC(r7, 0x40044620, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @mcast2}, @in={0x2, 0x0, @private=0xc0586300}, @in6={0xa, 0x0, 0x0, @private0}, @in={0x2, 0x4e30, @broadcast}], 0x58)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

4.178129208s ago: executing program 3 (id=2939):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
syz_open_dev$vim2m(&(0x7f0000000080), 0x9, 0x2)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0x14, 0x0, 0x0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002dc0)=0x14)
sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)

4.130948198s ago: executing program 3 (id=2940):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1d, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x7c, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
socket$alg(0x26, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0)
signalfd(r0, &(0x7f0000000340)={[0xb]}, 0x8)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1}, 0x50)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
pipe2(&(0x7f0000000140)={<r2=>0xffffffffffffffff}, 0x80)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
lseek(r3, 0x851, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000540012800c0001006d6163766c616e0044000280060002000100000008000100010000000800030003000000080007000500000008000100100000000600020001000000100005800a000400aaaaaaaaaa2e000008000500", @ANYRES32, @ANYBLOB], 0x84}}, 0x20008040)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r6, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r6], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000002340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002300)={&(0x7f0000002280)={0x70, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0xbf}]}, 0x70}, 0x1, 0x0, 0x0, 0x804}, 0x40080)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8)
r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r9, 0xc0045006, &(0x7f0000000080)=0x7f)
ioctl$SNDCTL_DSP_SPEED(r9, 0xc0045002, &(0x7f00000000c0)=0x6)
close_range(r9, r8, 0x2)
read$dsp(r9, &(0x7f00000011c0)=""/4117, 0x200021d5)

3.267081771s ago: executing program 2 (id=2941):
io_setup(0x4, &(0x7f0000000600)=<r0=>0x0)
r1 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x101002)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008e88052086800095d8b621020301090212000100000000090401000015cc1c00"], 0x0)
r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
openat$kvm(0xffffffffffffff9c, 0x0, 0x80b00, 0x0)
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r4 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, 0x0, 0x0)
setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, 0x0, 0x0)
setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f00000000c0)=0x7, 0x4)
ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000380)={&(0x7f00000002c0)=[{0x1e, 0x3000, 0x0, 0x0}], 0x1})
io_submit(r0, 0xe7, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000000)="ff07000000000000", 0x400000}])

2.817042728s ago: executing program 3 (id=2942):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x1, 0xfffffffc, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r4)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r3, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4)

2.578678541s ago: executing program 3 (id=2943):
socket$can_raw(0x1d, 0x3, 0x1)
socket$tipc(0x1e, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500004000002020207b1af8ff00001e00bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800800000000000850a602200000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2.46301955s ago: executing program 0 (id=2944):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f00000003c0)={0x0, 0x1, &(0x7f0000000180)=[r1], 0x0, 0x0, 0x0, 0x0, 0x2000}) (fail_nth: 7)

2.003277035s ago: executing program 0 (id=2945):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
r1 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x0, 0x0, 'syz1\x00', 0x0})
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10)
r3 = syz_open_procfs(0xffffffffffffffff, 0x0)
fchdir(r3)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, 0x0, 0x0}, 0x20)
r4 = syz_open_dev$radio(0x0, 0x3, 0x2)
writev(r4, &(0x7f000000a100), 0x0)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0x1) (fail_nth: 2)
syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r6}, &(0x7f0000000180)=<r7=>0x0, &(0x7f00000001c0)=<r8=>0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r5, 0x0, 0x0, 0x0, {}, 0x1})
pipe(&(0x7f0000000080))
pipe(&(0x7f0000000500))

1.890243839s ago: executing program 3 (id=2946):
r0 = socket$inet6(0xa, 0x2, 0x0) (async)
socket$inet_udplite(0x2, 0x2, 0x88) (async)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x50483}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x17}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x0) (async)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000002000/0x3000)=nil, 0x3000}, 0x1})
connect$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x0, @local}, 0x10) (async)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e22, 0x81, @private1}]}, 0x0) (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x13) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x840) (async)
r3 = io_uring_setup(0x4fea, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x2, 0x3ca})
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async)
io_uring_setup(0x57eb, &(0x7f0000000140)={0x0, 0x7e64, 0x1}) (async)
r4 = io_uring_setup(0x32e2, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x2, 0x20002f7}) (async)
socket$inet6(0xa, 0x2, 0x0)
io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async)
r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4b4, 0x7b1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x0, 0x0, 0xc1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x11da, 0x28, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x9, 0xa, 0x11}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0) (async)
syz_usb_control_io(r5, &(0x7f00000003c0)={0x2c, &(0x7f0000000200)={0x0, 0x6, 0x7, {0xfffffffffffffe21, 0x23, "274c3a9fac"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)

1.378909625s ago: executing program 0 (id=2947):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@redirect_dir_nofollow}]})

1.247757549s ago: executing program 0 (id=2948):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f0016000800000000000000200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a6683f5aeb4edbb57a5025ccca9e00360db398262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3c93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x4000050)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file0\x00', 0x0, 0x18}, 0x18)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='team_slave_1\x00', 0x10)
connect$phonet_pipe(r0, &(0x7f0000000400)={0x23, 0x0, 0x7f, 0x4}, 0x10)
getsockopt(r0, 0x5, 0x7, &(0x7f0000000440)=""/4096, &(0x7f0000000200)=0x1000)
syz_usb_connect(0x0, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x141, 0x15, 0x46, 0xa3, 0x20, 0x12d1, 0xb18c, 0xaeff, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x95, 0x7, 0x2, 0xff, 0x4, 0x7b, 0x0, [], [{{0x9, 0x5, 0x9, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0)

1.210486194s ago: executing program 2 (id=2949):
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x81, 0x10}, 0xc)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0x8, 0xfa04, 0xc0, 0x6c02, 0x1c0, 0x194, 0x194, 0x1c0, 0x194, 0x3, 0x0, {[{{@ip={@private=0xa010102, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'veth1_to_team\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x0, 0x32}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x38, 0x30, 0x5, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, 0x1, 0x10, [0x1b, 0x2f, 0x22, 0x40, 0x1d, 0x18, 0xb, 0x2e, 0x29, 0x2a, 0x12, 0x2, 0x1a, 0x32, 0x39, 0x3f], 0x0, 0x8e, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1], 0x4c}, 0x1, 0x0, 0x0, 0x4008040}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18)
r2 = socket(0x10, 0x4, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r4=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000090000000000000000c3a0f8ff41", @ANYRES64], 0x0, 0x3, 0x96, &(0x7f00000015c0)=""/150}, 0x94)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="019402000000000000000800000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

1.191620714s ago: executing program 1 (id=2950):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, 0x0)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20)
connect$l2tp6(r2, &(0x7f0000000180)={0xa, 0x0, 0x1, @local, 0x7, 0x4}, 0x20)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r3, &(0x7f0000000180)={0xa, 0x0, 0x404000, @loopback, 0x7cfd1f0f}, 0x20)
creat(&(0x7f0000000280)='./file0\x00', 0x87)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), r4)
sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000200)={0x0, 0x11, &(0x7f0000000040)={&(0x7f0000000180)={0x38, r5, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x0)

1.138785943s ago: executing program 3 (id=2951):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=@getlink={0x28, 0x12, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x3080, 0x808}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}}, 0x0)
r2 = getpid()
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000008e40)={&(0x7f0000008d00)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2404c000}, 0x8081)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r6 = dup3(r5, r0, 0x0)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r6)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008cc0)={0x50, 0x0, &(0x7f0000000c40)=[@register_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f00000002c0)={@flat=@handle={0x73682a85, 0x0, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/10, 0xa, 0x1, 0x34}, @fda={0x66646185, 0x6, 0x0, 0x37}}, &(0x7f0000000340)={0x0, 0x18, 0x40}}, 0x40}], 0x2, 0x0, &(0x7f0000000840)='B-'})
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0)
recvmmsg(r6, &(0x7f0000008ac0)=[{{0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)=""/159, 0x9f}, 0x9}, {{&(0x7f0000000680)=@nl=@proc, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000001c40)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000000700)=@alg, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000780)=""/119, 0x77}, {0x0}, {&(0x7f0000000800)=""/63, 0x3f}, {&(0x7f0000000840)}, {&(0x7f0000000880)=""/186, 0xba}, {&(0x7f0000000940)=""/13, 0xd}, {&(0x7f0000000980)=""/153, 0x99}], 0x7}, 0xd68}, {{&(0x7f0000000ac0)=@nfc_llcp, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000003c40)=""/78, 0x4e}, {&(0x7f0000000b80)=""/56, 0x38}], 0x2, &(0x7f0000004ac0)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000003d00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f00000042c0)=[{&(0x7f0000003d80)=""/118, 0x76}, {&(0x7f0000003e00)=""/170, 0xaa}, {&(0x7f0000003ec0)=""/196, 0xc4}, {&(0x7f0000003fc0)=""/204, 0xcc}, {0x0}, {&(0x7f0000004180)=""/128, 0x80}, {&(0x7f0000004200)=""/22, 0x16}, {&(0x7f0000004240)=""/65, 0x41}], 0x8}, 0x10001}, {{0x0, 0x0, &(0x7f00000044c0)}, 0xe43}, {{&(0x7f00000043c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000004a00)=[{&(0x7f0000004580)=""/156, 0x9c}, {&(0x7f0000004640)=""/240, 0xf0}, {&(0x7f0000004800)=""/85, 0x55}, {&(0x7f00000047c0)=""/48, 0x30}, {&(0x7f0000006ac0)=""/4096, 0x1000}, {&(0x7f0000007ac0)=""/4096, 0x1000}, {&(0x7f0000008e80)=""/241, 0xf1}, {&(0x7f0000004900)=""/186, 0xba}], 0x8}, 0x8}], 0x7, 0x2, &(0x7f0000008c80)={0x77359400})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r8, 0x0, 0x0)
syz_usb_control_io$hid(r8, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00220f000000944ac19d935aa8257f90b3af"], 0x0}, 0x0)
syz_usb_control_io$hid(r8, 0x0, &(0x7f0000000680)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="2001bd00"], 0x0})
r9 = syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x0)
ioctl$HIDIOCGCOLLECTIONINDEX(r9, 0x40184810, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000580)="b3"})

918.518635ms ago: executing program 2 (id=2952):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a3000000000050004000000000005"], 0x60}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

820.807379ms ago: executing program 2 (id=2953):
socket$inet_tcp(0x2, 0x1, 0x0)
socket$igmp(0x2, 0x3, 0x2)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x79af, 0x8, 0x0, 0x272}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c)
sendto$inet6(r4, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @private2}, 0x1c)
shutdown(r4, 0x1)
syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x8, 0x4, @fd_index=0x9, 0xfdc6, &(0x7f0000000380)=""/110, 0x6e, 0x2})
getsockopt$sock_int(r0, 0x1, 0x26, &(0x7f0000000140), &(0x7f0000000240)=0x4)
syz_open_dev$radio(&(0x7f00000021c0), 0x1, 0x2)
epoll_create(0x6)
socket$kcm(0x11, 0x3, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

0s ago: executing program 4 (id=2903):
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x25, 0xc, @val=@kprobe_multi=@addrs={0x0, 0x1, 0x0, &(0x7f0000000000)=[0x5], 0x1}}, 0x30)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000640012800b00010067656e657665000054000280050004000100000005000900000000000500090000000000050008000000000008000200e00000010800020064010102050009000100000005000a00000000000500040009000000050008000000000008000500", @ANYRES32=0x0, @ANYBLOB="080003"], 0x94}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a03000000000000000f000a00000708000240000000020900010073797a310000000038000000030a010100000000000000000a0000070900010073797a3100000000090003"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc00)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x58, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}], {0x14}}, 0xd0}}, 0x0)

kernel console output (not intermixed with test programs):

 after parsing attributes in process `syz.1.2419'.
[  409.980483][ T5874] usb 3-1: USB disconnect, device number 38
[  409.996328][ T5867] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  410.005816][T14143] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2422'.
[  410.160277][ T5867] usb 1-1: Using ep0 maxpacket: 8
[  410.167744][ T5867] usb 1-1: unable to get BOS descriptor or descriptor too short
[  410.177620][ T5867] usb 1-1: config 7 has an invalid interface number: 58 but max is 0
[  410.185909][ T5867] usb 1-1: config 7 has an invalid descriptor of length 130, skipping remainder of the config
[  410.215325][ T5867] usb 1-1: config 7 has no interface number 0
[  410.230102][ T5867] usb 1-1: too many endpoints for config 7 interface 58 altsetting 64: 169, using maximum allowed: 30
[  410.258829][ T5867] usb 1-1: config 7 interface 58 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 169
[  410.291664][ T5867] usb 1-1: config 7 interface 58 has no altsetting 0
[  410.622586][ T5867] usb 1-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=48.0f
[  410.637540][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  410.645976][ T5867] usb 1-1: Product: syz
[  410.650390][ T5867] usb 1-1: Manufacturer: syz
[  410.655028][ T5867] usb 1-1: SerialNumber: syz
[  410.686911][T14156] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  410.748384][T14156] syzkaller0: entered promiscuous mode
[  410.761596][T14156] syzkaller0: entered allmulticast mode
[  410.771859][T14156] tipc: Resetting bearer <eth:syzkaller0>
[  410.816955][T14154] tipc: Resetting bearer <eth:syzkaller0>
[  410.830310][    T9] usb 3-1: Service connection timeout for: 256
[  410.839771][    T9] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services
[  410.887713][    T9] ath9k_htc: Failed to initialize the device
[  410.926752][ T5867] usb 1-1: USB disconnect, device number 36
[  410.933003][ T5874] usb 3-1: ath9k_htc: USB layer deinitialized
[  411.010616][ T5860] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  411.171662][ T5860] usb 5-1: config index 0 descriptor too short (expected 23569, got 27)
[  411.180626][ T5860] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  411.201569][ T5860] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  411.214883][ T5860] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  411.238887][ T5860] usb 5-1: Manufacturer: syz
[  411.256997][ T5860] usb 5-1: config 0 descriptor??
[  411.410308][ T5860] rc_core: IR keymap rc-hauppauge not found
[  411.416286][ T5860] Registered IR keymap rc-empty
[  411.434058][ T5860] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  411.484360][ T5860] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input18
[  411.570485][T14180] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2430'.
[  411.722917][    C0] igorplugusb 5-1:0.0: receive overflow invalid: 200
[  411.932056][ T5860] usb 5-1: USB disconnect, device number 44
[  412.317228][T14154] tipc: Disabling bearer <eth:syzkaller0>
[  412.336738][ T5874] tipc: Node number set to 732415956
[  412.900235][   T49] syzkaller0: tun_net_xmit 76
[  412.908957][   T49] syzkaller0: tun_net_xmit 48
[  412.923095][   T10] syzkaller0: tun_net_xmit 76
[  415.176944][T14223] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  415.352325][T14243] netlink: 'syz.2.2447': attribute type 2 has an invalid length.
[  415.650480][T14252] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  415.657752][T14252] IPv6: NLM_F_CREATE should be set when creating new route
[  415.666754][T14254] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2448'.
[  415.690580][ T5874] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  415.869044][ T5874] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  416.132229][ T5874] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  416.158135][ T5874] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  416.167680][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  416.189544][T14243] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  416.201808][ T5874] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  416.249663][T14270] netlink: 'syz.3.2454': attribute type 2 has an invalid length.
[  416.334716][T14272] netlink: 'syz.0.2455': attribute type 2 has an invalid length.
[  416.411499][ T5874] usb 3-1: USB disconnect, device number 39
[  416.497932][T14276] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  416.527824][T14276] syzkaller0: entered promiscuous mode
[  416.533442][T14276] syzkaller0: entered allmulticast mode
[  416.539333][T14276] tipc: Resetting bearer <eth:syzkaller0>
[  416.545257][ T5948] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  416.548792][T14278] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  416.564239][T14275] tipc: Resetting bearer <eth:syzkaller0>
[  416.590609][ T5860] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  416.848783][ T5948] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  416.860269][ T5948] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  416.875205][ T5948] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  416.885068][ T5948] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  416.955863][T14270] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  416.966258][ T5860] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  416.971455][ T5948] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  416.977643][ T5860] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  417.019726][ T5860] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  417.029061][ T5860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  417.045030][T14272] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  417.229227][ T5860] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  417.436449][ T5948] usb 4-1: USB disconnect, device number 37
[  417.494000][ T5860] usb 1-1: USB disconnect, device number 37
[  418.111328][T14295] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2461'.
[  418.629649][T14275] tipc: Disabling bearer <eth:syzkaller0>
[  418.637501][    T9] tipc: Node number set to 3544722703
[  418.889112][T14310] netlink: 'syz.2.2467': attribute type 2 has an invalid length.
[  419.210401][ T5874] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  419.222630][T14316] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  419.269086][T14316] syzkaller0: entered promiscuous mode
[  419.291925][T14316] syzkaller0: entered allmulticast mode
[  419.313096][T14316] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  419.341167][T14316] tipc: Resetting bearer <eth:syzkaller0>
[  419.359576][T14315] tipc: Resetting bearer <eth:syzkaller0>
[  419.421590][ T5874] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  419.443489][T14315] tipc: Disabling bearer <eth:syzkaller0>
[  419.458766][ T5874] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  419.487151][ T5874] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  419.525122][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  419.579773][T14310] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  419.598157][ T5874] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  419.806715][T14329] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2471'.
[  419.894104][T14332] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  419.937444][ T5874] usb 3-1: USB disconnect, device number 40
[  420.088062][T14343] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  420.463862][T14343] syzkaller0: entered promiscuous mode
[  420.469362][T14343] syzkaller0: entered allmulticast mode
[  420.554721][T14355] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  420.561990][T14355] IPv6: NLM_F_CREATE should be set when creating new route
[  421.462419][T14350] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  421.488289][T14356] syzkaller0: entered promiscuous mode
[  421.493793][T14356] syzkaller0: entered allmulticast mode
[  421.499769][T14356] tipc: Resetting bearer <eth:syzkaller0>
[  421.516084][T14349] tipc: Resetting bearer <eth:syzkaller0>
[  422.416707][T14349] tipc: Disabling bearer <eth:syzkaller0>
[  422.441818][T14378] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  422.448925][T14380] syzkaller0: entered promiscuous mode
[  422.455423][T14380] syzkaller0: entered allmulticast mode
[  422.466473][T14383] syzkaller0: entered promiscuous mode
[  422.472423][T14383] syzkaller0: entered allmulticast mode
[  422.487466][T14389] tipc: Resetting bearer <eth:syzkaller0>
[  422.499998][T14373] tipc: Resetting bearer <eth:syzkaller0>
[  422.550946][T14373] tipc: Disabling bearer <eth:syzkaller0>
[  424.240374][T14435] netlink: 'syz.4.2496': attribute type 2 has an invalid length.
[  424.492020][ T5948] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  424.681337][ T5948] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  424.708323][ T5948] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  424.721186][ T5948] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  424.731103][ T5948] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  424.743115][T14435] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  424.762582][ T5948] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  424.931599][T14461] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  424.981390][T14461] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  425.015749][T14461] tipc: Resetting bearer <eth:syzkaller0>
[  425.032565][ T5948] usb 5-1: USB disconnect, device number 45
[  425.108928][T14460] tipc: Disabling bearer <eth:syzkaller0>
[  425.876964][ T3529] syzkaller0: tun_net_xmit 76
[  425.882365][ T3529] syzkaller0: tun_net_xmit 48
[  425.902404][ T5948] syzkaller0: tun_net_xmit 76
[  427.620302][ T5948] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  427.800702][ T5948] usb 4-1: config index 0 descriptor too short (expected 23569, got 27)
[  427.817593][ T5948] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  427.837676][ T5948] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  427.846841][ T5948] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  427.854915][ T5948] usb 4-1: Manufacturer: syz
[  427.863696][ T5948] usb 4-1: config 0 descriptor??
[  427.921581][ T5948] rc_core: IR keymap rc-hauppauge not found
[  427.927525][ T5948] Registered IR keymap rc-empty
[  427.945263][ T5948] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  427.957873][ T5948] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input19
[  428.279336][    C1] igorplugusb 4-1:0.0: receive overflow invalid: 200
[  428.492653][    T9] usb 4-1: USB disconnect, device number 38
[  428.586174][T14509] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  428.760153][T14534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2524'.
[  428.929226][T14538] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  429.455823][ T5948] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  429.484386][T14538] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  429.513150][T14538] tipc: Resetting bearer <eth:syzkaller0>
[  429.547306][T14537] tipc: Disabling bearer <eth:syzkaller0>
[  429.621661][ T5948] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  429.720461][ T5948] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  429.740243][ T5948] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  429.753373][ T5948] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  429.763044][ T5948] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  429.774901][ T5948] usb 2-1: config 0 descriptor??
[  430.283413][ T5948] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  430.822327][T14576] binder: 14529:14576 ioctl c0306201 200000000180 returned -14
[  430.986940][T14579] netlink: 'syz.0.2541': attribute type 2 has an invalid length.
[  431.006089][T14581] netlink: 'syz.4.2539': attribute type 2 has an invalid length.
[  431.024507][ T5874] usb 2-1: USB disconnect, device number 34
[  431.270375][ T5948] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  431.300421][ T5867] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  431.438203][ T5948] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  431.450089][ T5948] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  431.464084][ T5948] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  431.475697][ T5948] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  431.492376][ T5867] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  431.522476][T14579] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  431.539718][ T5867] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  431.549888][ T5867] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  431.566425][ T5948] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  431.590972][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  431.634103][T14581] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  431.682495][T14590] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  431.683758][ T5867] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  431.703211][T14592] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  431.727717][T14592] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  431.851056][ T5867] usb 1-1: USB disconnect, device number 38
[  431.859004][T14590] syzkaller0: entered promiscuous mode
[  431.865568][T14590] syzkaller0: entered allmulticast mode
[  431.873819][ T5948] usb 5-1: USB disconnect, device number 46
[  431.874221][T14590] tipc: Resetting bearer <eth:syzkaller0>
[  431.895900][T14592] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  431.908383][T14592] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  431.939639][T14588] tipc: Resetting bearer <eth:syzkaller0>
[  431.990317][    T9] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  432.637654][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  432.651658][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  432.662967][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  432.676415][    T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  432.689411][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  432.699994][    T9] usb 3-1: config 0 descriptor??
[  433.136751][    T9] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  433.236494][T14601] binder: 14600:14601 ioctl 4018620d 0 returned -22
[  433.621730][    T9] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  433.633110][ T5867] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  433.671961][T14588] tipc: Disabling bearer <eth:syzkaller0>
[  433.680613][T14592] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  433.690502][T14592] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  433.707250][T14606] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  433.751744][T14609] syzkaller0: entered promiscuous mode
[  433.757224][T14609] syzkaller0: entered allmulticast mode
[  433.770059][T14608] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  433.783630][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  433.794993][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  433.809278][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  433.815185][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  433.822893][    T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  433.834457][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  433.860927][T14592] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  433.873080][T14592] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  433.882983][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  433.883577][ T5867] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  433.902032][    T9] usb 1-1: config 0 descriptor??
[  433.931225][ T5867] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  433.960340][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  433.978100][ T5867] usb 2-1: config 0 descriptor??
[  434.333625][    T9] plantronics 0003:047F:FFFF.0012: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  434.611421][ T5867] plantronics 0003:047F:FFFF.0013: hiddev2,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  434.990473][ T5948] usb 3-1: reset high-speed USB device number 41 using dummy_hcd
[  435.057038][T14629] binder: 14607:14629 ioctl c0306201 200000000180 returned -14
[  435.084624][T14608] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  435.101162][T14606] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  435.160880][T14608] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  435.178744][T14606] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  435.195566][ T2206] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  435.206775][ T2206] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  435.217402][T14608] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  435.236482][T14606] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  435.265238][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  435.273602][   T12] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  435.307129][   T49] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  435.320390][   T49] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  435.337958][ T3529] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  435.354938][ T3529] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  435.418825][ T3529] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  435.435124][ T3529] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  435.474032][T14631] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  435.505799][T14637] syzkaller0: entered promiscuous mode
[  435.513868][T14637] syzkaller0: entered allmulticast mode
[  435.525303][ T3529] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  435.534604][ T3529] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  435.588184][T14631] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  435.604696][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  435.632823][T14630] tipc: Resetting bearer <eth:syzkaller0>
[  435.647469][T14630] tipc: Disabling bearer <eth:syzkaller0>
[  435.655602][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  435.690894][ T2206] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  435.727008][ T3553] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  436.031472][   T10] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  436.101720][T14658] netlink: 'syz.3.2557': attribute type 2 has an invalid length.
[  436.195492][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  436.211240][ T5867] usb 3-1: USB disconnect, device number 41
[  436.227879][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  436.239399][   T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  436.321000][   T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  436.331616][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  436.366350][   T10] usb 5-1: config 0 descriptor??
[  436.380359][ T5923] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  436.446921][ T5867] usb 1-1: USB disconnect, device number 39
[  436.532224][ T5923] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  436.566737][ T5923] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  436.581576][ T5923] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  436.599447][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  436.658661][T14658] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[  436.692730][ T5923] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  437.088853][   T10] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  437.140494][ T5923] usb 4-1: USB disconnect, device number 39
[  437.159835][ T5948] usb 2-1: USB disconnect, device number 35
[  437.314327][ T5824] udevd[5824]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  437.676567][T14688] binder: 14645:14688 ioctl c0306201 200000000180 returned -14
[  437.692233][T14687] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  437.703779][T14682] netlink: 'syz.1.2561': attribute type 2 has an invalid length.
[  438.030510][ T5948] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  438.102014][T14687] syzkaller0: entered promiscuous mode
[  438.136533][T14687] syzkaller0: entered allmulticast mode
[  438.180836][T14687] tipc: Resetting bearer <eth:syzkaller0>
[  438.232129][ T5948] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  438.274562][ T5948] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  438.287990][ T5948] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  438.299462][T14705] syzkaller0: entered promiscuous mode
[  438.306998][ T5948] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  438.315469][T14705] syzkaller0: entered allmulticast mode
[  438.339086][T14694] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  438.352516][T14683] tipc: Resetting bearer <eth:syzkaller0>
[  438.354774][ T5948] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  438.766683][ T5948] usb 2-1: USB disconnect, device number 36
[  439.532718][   T10] usb 5-1: USB disconnect, device number 47
[  439.553627][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  439.559938][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  439.568352][ T1294] lec:lec_start_xmit: lec0:No lecd attached
[  440.252158][T14683] tipc: Disabling bearer <eth:syzkaller0>
[  441.657027][T14763] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  442.041209][T14780] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  442.049785][T14780] syzkaller0: entered promiscuous mode
[  442.055496][T14780] syzkaller0: entered allmulticast mode
[  442.079908][T14780] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  442.092263][ T5867] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  442.107752][T14780] tipc: Resetting bearer <eth:syzkaller0>
[  442.120372][   T24] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  442.135389][T14779] tipc: Resetting bearer <eth:syzkaller0>
[  442.140538][    T9] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  442.171012][T14779] tipc: Disabling bearer <eth:syzkaller0>
[  442.272530][ T5867] usb 5-1: config index 0 descriptor too short (expected 23569, got 27)
[  442.286321][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  442.296626][T14784] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  442.300837][    T9] usb 4-1: Using ep0 maxpacket: 32
[  442.306906][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  442.320476][    T9] usb 4-1: config 0 has an invalid interface number: 98 but max is 0
[  442.328589][    T9] usb 4-1: config 0 has no interface number 0
[  442.330163][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  442.347856][ T5867] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  442.349320][    T9] usb 4-1: too many endpoints for config 0 interface 98 altsetting 136: 54, using maximum allowed: 30
[  442.380678][ T5867] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  442.384585][    T9] usb 4-1: config 0 interface 98 altsetting 136 has 0 endpoint descriptors, different from the interface descriptor's value: 54
[  442.388689][ T5867] usb 5-1: Manufacturer: syz
[  442.401946][   T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  442.401996][   T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  442.409360][    T9] usb 4-1: config 0 interface 98 has no altsetting 0
[  442.422323][ T5867] usb 5-1: config 0 descriptor??
[  442.439847][    T9] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01
[  442.451307][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  442.454171][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  442.467775][    T9] usb 4-1: config 0 descriptor??
[  442.479491][   T24] usb 2-1: config 0 descriptor??
[  442.526771][T14788] syzkaller0: entered promiscuous mode
[  442.532306][T14788] syzkaller0: entered allmulticast mode
[  442.540293][ T5867] rc_core: IR keymap rc-hauppauge not found
[  442.546343][ T5867] Registered IR keymap rc-empty
[  442.555743][ T5867] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  442.568335][ T5867] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input20
[  442.610301][ T5860] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  442.695580][    T9] usb 4-1: string descriptor 0 read error: -71
[  442.719094][    T9] usb 4-1: USB disconnect, device number 40
[  442.769638][ T5860] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  442.779112][ T5860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  442.787860][ T5860] usb 1-1: Product: syz
[  442.792291][ T5860] usb 1-1: Manufacturer: syz
[  442.796891][ T5860] usb 1-1: SerialNumber: syz
[  442.821374][ T5860] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  442.836510][   T10] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  442.914572][   T24] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  443.142470][ T5948] usb 5-1: USB disconnect, device number 48
[  443.289056][   T24] usb 1-1: USB disconnect, device number 40
[  443.526047][T14795] binder: 14770:14795 ioctl c0306201 200000000180 returned -14
[  443.630296][ T5948] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  443.730124][ T5874] usb 2-1: USB disconnect, device number 37
[  443.765140][T14801] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2589'.
[  443.793149][ T5948] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  443.818111][ T5948] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  443.836812][ T5948] usb 4-1: Product: syz
[  443.850459][ T5948] usb 4-1: Manufacturer: syz
[  443.860296][ T5948] usb 4-1: SerialNumber: syz
[  443.861885][T14805] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2591'.
[  443.882342][ T5948] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  444.073110][ T5867] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  444.114971][   T10] usb 1-1: Service connection timeout for: 256
[  444.130228][   T10] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services
[  444.137409][T14818] netlink: 'syz.0.2595': attribute type 2 has an invalid length.
[  444.215193][   T10] ath9k_htc: Failed to initialize the device
[  444.227867][   T24] usb 1-1: ath9k_htc: USB layer deinitialized
[  444.870512][   T24] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  444.952904][ T5860] usb 4-1: USB disconnect, device number 41
[  445.031851][   T24] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  445.057969][   T24] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  445.087954][T14830] syzkaller0: entered promiscuous mode
[  445.100491][T14830] syzkaller0: entered allmulticast mode
[  445.108403][   T24] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  445.137701][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  445.172434][T14818] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  445.185297][   T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  445.390224][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms
[  445.398269][    C1] lec:lec_tx_timeout: lec0
[  445.459970][   T24] usb 1-1: USB disconnect, device number 41
[  445.470300][ T5867] usb 4-1: Service connection timeout for: 256
[  445.476654][ T5867] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services
[  445.490966][ T5867] ath9k_htc: Failed to initialize the device
[  445.527794][ T5860] usb 4-1: ath9k_htc: USB layer deinitialized
[  446.854853][T14865] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2605'.
[  447.071996][T14880] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  447.381353][T14880] syzkaller0: entered promiscuous mode
[  447.526943][T14880] syzkaller0: entered allmulticast mode
[  447.641219][T14879] tipc: Resetting bearer <eth:syzkaller0>
[  447.661918][T14879] tipc: Disabling bearer <eth:syzkaller0>
[  448.009580][T14888] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  448.046965][T14888] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  448.222058][T14888] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  448.255540][T14888] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  448.381516][   T24] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  448.420076][T14888] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  448.434575][T14888] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  448.489643][ T7903] lec:lec_start_xmit: lec0:No lecd attached
[  448.634183][ T5867] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  448.654427][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  448.684120][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  448.685471][T14888] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  448.703976][   T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  448.717261][T14888] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  448.733023][   T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  448.742422][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  448.755766][   T24] usb 3-1: config 0 descriptor??
[  448.851981][ T5867] usb 1-1: config index 0 descriptor too short (expected 23569, got 27)
[  448.860656][ T5867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  448.872337][T14910] syzkaller0: entered promiscuous mode
[  448.877810][T14910] syzkaller0: entered allmulticast mode
[  448.885971][ T5867] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  448.895246][ T5867] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  448.950502][ T5867] usb 1-1: Manufacturer: syz
[  448.977770][ T5867] usb 1-1: config 0 descriptor??
[  449.436809][   T24] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  449.460494][ T5867] rc_core: IR keymap rc-hauppauge not found
[  449.467232][ T5867] Registered IR keymap rc-empty
[  449.485755][ T5867] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  449.566201][ T5867] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input21
[  449.653683][    C1] igorplugusb 1-1:0.0: receive overflow invalid: 200
[  449.885375][   T24] usb 1-1: USB disconnect, device number 42
[  450.065551][T14943] binder: 14886:14943 ioctl c0306201 200000000180 returned -14
[  450.457891][T14945] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  450.522774][T14926] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2621'.
[  450.546204][   T60] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  450.559065][   T60] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  450.585111][   T60] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  450.599628][   T60] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  450.628837][   T60] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  450.649678][   T60] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  450.685393][   T60] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  450.701613][   T60] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  450.804796][ T5867] usb 3-1: USB disconnect, device number 42
[  451.403145][T14959] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2629'.
[  451.528791][T14966] binder: BINDER_SET_CONTEXT_MGR already set
[  451.535553][T14966] binder: 14965:14966 ioctl 4018620d 200000004a80 returned -16
[  451.867111][T14978] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  451.874945][ T5867] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  451.959229][T14980] netlink: 'syz.4.2635': attribute type 2 has an invalid length.
[  452.041990][T14982] syzkaller0: entered promiscuous mode
[  452.047496][T14982] syzkaller0: entered allmulticast mode
[  452.061720][ T5867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  452.073311][ T5867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  452.088481][ T5867] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  452.101827][ T5867] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  452.111104][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  452.122627][ T5867] usb 4-1: config 0 descriptor??
[  452.130334][   T24] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  452.260317][    T9] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  452.312287][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  452.326342][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  452.340282][   T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  452.353562][   T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  452.362820][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  452.372633][   T24] usb 2-1: config 0 descriptor??
[  452.411881][    T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  452.430806][    T9] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  452.450459][    T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  452.462044][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  452.482308][T14980] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  452.493770][    T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  452.510086][T14984] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2637'.
[  452.575791][ T5867] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  452.734302][ T5860] usb 5-1: USB disconnect, device number 49
[  452.824552][   T24] plantronics 0003:047F:FFFF.0018: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  453.389404][T14992] binder: 14975:14992 ioctl c0306201 200000000180 returned -14
[  453.405346][ T5860] usb 4-1: USB disconnect, device number 42
[  453.500221][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  453.508255][    C1] lec:lec_tx_timeout: lec0
[  453.703384][T14998] netlink: 'syz.0.2641': attribute type 2 has an invalid length.
[  453.951047][    T9] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  454.078602][T15003] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  454.086581][T15003] syzkaller0: entered promiscuous mode
[  454.092157][T15003] syzkaller0: entered allmulticast mode
[  454.136725][    T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  454.273979][    T9] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  454.306547][    T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  454.316512][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  454.486582][T14998] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  454.496694][T15003] tipc: Resetting bearer <eth:syzkaller0>
[  454.505623][    T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  454.513644][T15002] tipc: Resetting bearer <eth:syzkaller0>
[  454.542225][T15002] tipc: Disabling bearer <eth:syzkaller0>
[  454.743306][ T5867] usb 1-1: USB disconnect, device number 43
[  454.883578][T14660] usb 2-1: USB disconnect, device number 38
[  454.932323][T15012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2647'.
[  455.048339][T15014] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  455.736888][T15025] netlink: 'syz.3.2650': attribute type 2 has an invalid length.
[  456.150280][   T10] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  456.308292][   T10] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  456.329078][   T10] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  456.361698][   T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  456.390306][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  456.421396][T15025] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  456.431773][   T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  456.655958][   T10] usb 4-1: USB disconnect, device number 43
[  456.664422][T15039] netlink: 'syz.0.2654': attribute type 2 has an invalid length.
[  456.910379][    T9] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  457.469149][    T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  457.482559][    T9] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  457.526215][    T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  457.543418][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  457.556108][T15039] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  457.572570][    T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  457.741903][T15053] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  457.755048][T15052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2658'.
[  457.772892][    T9] usb 1-1: USB disconnect, device number 44
[  458.689704][   T49] syzkaller0: tun_net_xmit 76
[  458.700698][   T49] syzkaller0: tun_net_xmit 48
[  458.710456][    T9] syzkaller0: tun_net_xmit 76
[  458.763609][T14660] syzkaller0: tun_net_xmit 76
[  458.975202][T14660] syzkaller0: tun_net_xmit 76
[  461.084769][T15109] netlink: 'syz.4.2670': attribute type 2 has an invalid length.
[  461.401234][T14660] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  461.556398][T14660] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  461.567480][T14660] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  461.577497][T14660] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  461.586632][T14660] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  461.598113][T15110] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  461.608493][T14660] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  461.642895][T15072] syzkaller0: entered promiscuous mode
[  461.648392][T15072] syzkaller0: entered allmulticast mode
[  461.836344][ T5860] usb 5-1: USB disconnect, device number 50
[  462.050279][ T5846] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  462.222843][ T5846] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  462.236500][ T5846] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  462.249354][ T5846] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  462.264792][ T5846] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  462.274906][ T5846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  462.302564][ T5846] usb 3-1: config 0 descriptor??
[  462.803349][ T5846] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  463.077094][T15124] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  463.111519][T15124] syzkaller0: entered promiscuous mode
[  463.117162][T15124] syzkaller0: entered allmulticast mode
[  463.124173][T15124] tipc: Resetting bearer <eth:syzkaller0>
[  463.140724][T15123] tipc: Resetting bearer <eth:syzkaller0>
[  463.412690][T15117] binder: 15116:15117 ioctl c0306201 200000000180 returned -14
[  463.619116][   T24] usb 3-1: USB disconnect, device number 43
[  463.705572][T15137] netlink: 'syz.4.2675': attribute type 2 has an invalid length.
[  464.068251][ T5948] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  464.242223][ T5948] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  464.257719][ T5948] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  464.273478][ T5948] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  464.310877][ T5948] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  464.350758][T15138] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  464.361925][ T5948] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  464.564264][ T5948] usb 5-1: USB disconnect, device number 51
[  464.652846][T15145] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  465.337422][T15123] tipc: Disabling bearer <eth:syzkaller0>
[  465.452232][T15150] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  465.459244][T15150] syzkaller0: entered promiscuous mode
[  465.464760][T15150] syzkaller0: entered allmulticast mode
[  465.492415][T15149] tipc: Resetting bearer <eth:syzkaller0>
[  465.503982][T15149] tipc: Disabling bearer <eth:syzkaller0>
[  465.936107][T15159] netlink: 'syz.3.2682': attribute type 2 has an invalid length.
[  466.271905][   T24] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  466.441592][   T24] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  466.453266][   T24] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  466.464712][   T24] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  466.474556][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  466.492018][T15166] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  466.506074][   T24] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  466.726553][    T9] usb 4-1: USB disconnect, device number 44
[  467.280763][T15172] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  467.320872][T15175] syzkaller0: entered promiscuous mode
[  467.326463][T15175] syzkaller0: entered allmulticast mode
[  467.375039][T15186] tipc: Resetting bearer <eth:syzkaller0>
[  467.413636][T15165] tipc: Resetting bearer <eth:syzkaller0>
[  467.489216][T15165] tipc: Disabling bearer <eth:syzkaller0>
[  467.969946][T15207] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  467.993890][T15207] syzkaller0: entered promiscuous mode
[  467.999478][T15207] syzkaller0: entered allmulticast mode
[  468.006790][T15207] tipc: Resetting bearer <eth:syzkaller0>
[  468.022340][T15206] tipc: Resetting bearer <eth:syzkaller0>
[  468.331003][   T30] audit: type=1400 audit(1764601523.045:696): avc:  denied  { create } for  pid=15218 comm="syz.4.2695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1
[  468.590524][ T5867] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  468.885321][ T5867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  468.896683][ T5867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  468.908412][ T5867] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  468.923293][ T5867] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  468.933827][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  468.946348][ T5867] usb 1-1: config 0 descriptor??
[  468.991546][   T24] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  469.172111][   T24] usb 5-1: config 0 has an invalid interface number: 207 but max is 0
[  469.180619][   T24] usb 5-1: config 0 has no interface number 0
[  469.191832][   T24] usb 5-1: New USB device found, idVendor=1b3d, idProduct=0128, bcdDevice=fc.4f
[  469.201307][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  469.209323][   T24] usb 5-1: Product: syz
[  469.213560][   T24] usb 5-1: Manufacturer: syz
[  469.218172][   T24] usb 5-1: SerialNumber: syz
[  469.227294][   T24] usb 5-1: config 0 descriptor??
[  469.234290][   T24] hub 5-1:0.207: bad descriptor, ignoring hub
[  469.240502][   T24] hub 5-1:0.207: probe with driver hub failed with error -5
[  469.251991][   T24] ftdi_sio 5-1:0.207: FTDI USB Serial Device converter detected
[  469.265249][   T24] ftdi_sio ttyUSB0: unknown device type: 0xfc4f
[  469.391464][ T5867] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  469.582065][ T5867] usb 5-1: USB disconnect, device number 52
[  469.597920][ T5867] ftdi_sio 5-1:0.207: device disconnected
[  469.700012][T15206] tipc: Disabling bearer <eth:syzkaller0>
[  469.716219][T15226] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  469.738499][T15215] syzkaller0: entered promiscuous mode
[  469.744617][T15215] syzkaller0: entered allmulticast mode
[  469.782082][T15230] tipc: Resetting bearer <eth:syzkaller0>
[  469.836892][T15236] netlink: 'syz.2.2696': attribute type 2 has an invalid length.
[  470.141693][   T10] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  470.206451][ T5860] usb 1-1: USB disconnect, device number 45
[  470.292229][   T10] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  470.303523][   T10] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  470.313688][   T10] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  470.322944][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  470.335224][T15239] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  470.348265][   T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  470.360346][   T24] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  470.571164][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  470.582848][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  470.595367][   T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  470.609776][ T5948] usb 3-1: USB disconnect, device number 44
[  470.616680][   T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  470.627293][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  470.643670][   T24] usb 5-1: config 0 descriptor??
[  471.079071][T15230] tipc: Disabling bearer <eth:syzkaller0>
[  471.195046][   T24] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  471.341004][T15253] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2702'.
[  471.360348][   T30] audit: type=1400 audit(1764601526.055:697): avc:  denied  { setopt } for  pid=15251 comm="syz.2.2700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  471.842239][T15242] binder: 15240:15242 ioctl c0306201 200000000180 returned -14
[  471.880274][   T10] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  471.941847][T15270] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  472.035887][T15270] syzkaller0: entered promiscuous mode
[  472.042837][T15270] syzkaller0: entered allmulticast mode
[  472.050826][   T24] usb 5-1: USB disconnect, device number 53
[  472.074109][T15275] binder: BINDER_SET_CONTEXT_MGR already set
[  472.085072][T15275] binder: 15271:15275 ioctl 4018620d 200000004a80 returned -16
[  472.109618][T15270] tipc: Resetting bearer <eth:syzkaller0>
[  472.212730][T15274] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  472.704723][T15274] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  472.745922][T15269] tipc: Resetting bearer <eth:syzkaller0>
[  472.823779][ T5860] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  473.015533][ T5860] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  473.050302][ T5860] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  473.100734][ T5860] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  473.290888][ T5860] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  473.301550][ T5860] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  473.386257][ T5860] usb 3-1: config 0 descriptor??
[  473.489822][T15289] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2710'.
[  473.820995][ T5860] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  474.298207][T15269] tipc: Disabling bearer <eth:syzkaller0>
[  474.321212][T15302] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  474.383343][T15303] syzkaller0: entered promiscuous mode
[  474.388910][T15303] syzkaller0: entered allmulticast mode
[  474.402876][T15274] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  474.417941][T15274] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  474.431141][T15318] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2714'.
[  474.449221][T15316] team_slave_0: entered promiscuous mode
[  474.455011][T15316] team_slave_1: entered promiscuous mode
[  474.471612][T15316] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  474.481432][T15307] tipc: Resetting bearer <eth:syzkaller0>
[  474.489155][   T30] audit: type=1400 audit(1764601529.195:698): avc:  denied  { connect } for  pid=15315 comm="syz.3.2715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  474.512804][   T30] audit: type=1400 audit(1764601529.195:699): avc:  denied  { read write } for  pid=15315 comm="syz.3.2715" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  474.553791][   T30] audit: type=1400 audit(1764601529.195:700): avc:  denied  { open } for  pid=15315 comm="syz.3.2715" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  474.607373][   T30] audit: type=1400 audit(1764601529.195:701): avc:  denied  { map } for  pid=15315 comm="syz.3.2715" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  474.673764][   T30] audit: type=1400 audit(1764601529.195:702): avc:  denied  { execute } for  pid=15315 comm="syz.3.2715" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  474.720466][   T30] audit: type=1400 audit(1764601529.305:703): avc:  denied  { unlink } for  pid=15320 comm="syz.0.2716" name="#1" dev="tmpfs" ino=2750 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  474.743874][   T30] audit: type=1400 audit(1764601529.315:704): avc:  denied  { mount } for  pid=15320 comm="syz.0.2716" name="/" dev="overlay" ino=2745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  474.766709][   T30] audit: type=1400 audit(1764601529.415:705): avc:  denied  { connect } for  pid=15315 comm="syz.3.2715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  474.794289][   T30] audit: type=1400 audit(1764601529.415:706): avc:  denied  { getopt } for  pid=15315 comm="syz.3.2715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  475.272683][ T5860] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  475.460343][ T5860] usb 1-1: device descriptor read/64, error -71
[  475.632028][T14660] usb 3-1: reset high-speed USB device number 45 using dummy_hcd
[  475.732876][ T5860] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  475.922104][ T5860] usb 1-1: device descriptor read/64, error -71
[  476.025216][T15307] tipc: Disabling bearer <eth:syzkaller0>
[  476.031828][ T5860] usb usb1-port1: attempt power cycle
[  476.047753][T15274] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  476.058135][T15274] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  476.372139][ T5860] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  476.407005][ T5860] usb 1-1: device descriptor read/8, error -71
[  476.650772][ T5860] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  476.680971][ T5860] usb 1-1: device descriptor read/8, error -71
[  476.796090][ T5860] usb usb1-port1: unable to enumerate USB device
[  477.076148][T15340] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  477.088514][T15274] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  477.098540][T15274] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  477.184974][   T30] audit: type=1400 audit(1764601531.895:707): avc:  denied  { ioctl } for  pid=15355 comm="syz.1.2724" path="socket:[43887]" dev="sockfs" ino=43887 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  477.248637][T15359] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  477.265841][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  477.283291][   T12] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  477.297173][T15365] netlink: 'syz.1.2724': attribute type 10 has an invalid length.
[  477.357016][T15359] syzkaller0: entered promiscuous mode
[  477.370545][T15359] syzkaller0: entered allmulticast mode
[  477.377037][T15359] tipc: Resetting bearer <eth:syzkaller0>
[  477.388667][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  477.397741][   T12] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  477.406386][T15357] tipc: Resetting bearer <eth:syzkaller0>
[  478.138508][T15375] netlink: 'syz.4.2728': attribute type 2 has an invalid length.
[  478.377205][T15357] tipc: Disabling bearer <eth:syzkaller0>
[  478.401067][   T49] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  478.409188][   T49] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  478.439043][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  478.450588][T14725] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  478.465125][   T13] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  478.622008][T14725] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  478.635540][T14725] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  478.645921][T14725] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  478.655481][T14725] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  478.671427][T15376] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  478.690110][T14725] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  478.960792][   T24] usb 5-1: USB disconnect, device number 54
[  479.155515][T15392] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2731'.
[  479.334492][   T10] usb 3-1: USB disconnect, device number 45
[  479.541459][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  479.541472][   T30] audit: type=1400 audit(1764601534.245:710): avc:  denied  { write } for  pid=15381 comm="syz.3.2731" name="001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  480.591496][T15401] syzkaller0: entered promiscuous mode
[  480.597009][T15401] syzkaller0: entered allmulticast mode
[  480.615238][T15413] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2736'.
[  480.645720][T15415] FAULT_INJECTION: forcing a failure.
[  480.645720][T15415] name failslab, interval 1, probability 0, space 0, times 0
[  480.658919][T15415] CPU: 1 UID: 0 PID: 15415 Comm: syz.3.2737 Not tainted syzkaller #0 PREEMPT(full) 
[  480.658942][T15415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  480.658952][T15415] Call Trace:
[  480.658957][T15415]  <TASK>
[  480.658963][T15415]  dump_stack_lvl+0x16c/0x1f0
[  480.658985][T15415]  should_fail_ex+0x512/0x640
[  480.659005][T15415]  ? __kmalloc_cache_noprof+0x5f/0x780
[  480.659034][T15415]  should_failslab+0xc2/0x120
[  480.659054][T15415]  __kmalloc_cache_noprof+0x72/0x780
[  480.659078][T15415]  ? nfnl_err_add+0x4e/0x350
[  480.659100][T15415]  ? nfnl_err_add+0x4e/0x350
[  480.659116][T15415]  nfnl_err_add+0x4e/0x350
[  480.659135][T15415]  nfnetlink_rcv_batch+0xb5f/0x2350
[  480.659167][T15415]  ? __pfx_nfnetlink_rcv_batch+0x10/0x10
[  480.659202][T15415]  ? avc_has_perm_noaudit+0x149/0x3b0
[  480.659253][T15415]  ? __nla_parse+0x40/0x60
[  480.659280][T15415]  nfnetlink_rcv+0x3c1/0x430
[  480.659297][T15415]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  480.659323][T15415]  netlink_unicast+0x5aa/0x870
[  480.659352][T15415]  ? __pfx_netlink_unicast+0x10/0x10
[  480.659386][T15415]  netlink_sendmsg+0x8c8/0xdd0
[  480.659414][T15415]  ? __pfx_netlink_sendmsg+0x10/0x10
[  480.659447][T15415]  ____sys_sendmsg+0xa98/0xc70
[  480.659465][T15415]  ? copy_msghdr_from_user+0x10a/0x160
[  480.659487][T15415]  ? __pfx_____sys_sendmsg+0x10/0x10
[  480.659513][T15415]  ___sys_sendmsg+0x134/0x1d0
[  480.659535][T15415]  ? __pfx____sys_sendmsg+0x10/0x10
[  480.659554][T15415]  ? __lock_acquire+0x622/0x1c90
[  480.659597][T15415]  __sys_sendmsg+0x16d/0x220
[  480.659619][T15415]  ? __pfx___sys_sendmsg+0x10/0x10
[  480.659656][T15415]  do_syscall_64+0xcd/0xfa0
[  480.659675][T15415]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  480.659691][T15415] RIP: 0033:0x7fd96e98f749
[  480.659704][T15415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  480.659718][T15415] RSP: 002b:00007fd96f7df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  480.659735][T15415] RAX: ffffffffffffffda RBX: 00007fd96ebe5fa0 RCX: 00007fd96e98f749
[  480.659745][T15415] RDX: 0000000004000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  480.659755][T15415] RBP: 00007fd96f7df090 R08: 0000000000000000 R09: 0000000000000000
[  480.659765][T15415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  480.659774][T15415] R13: 00007fd96ebe6038 R14: 00007fd96ebe5fa0 R15: 00007ffeefda0858
[  480.659798][T15415]  </TASK>
[  480.898761][    C1] vkms_vblank_simulate: vblank timer overrun
[  482.453976][T15438] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  482.493019][T15438] syzkaller0: entered promiscuous mode
[  482.499715][T15438] syzkaller0: entered allmulticast mode
[  482.521500][T15438] tipc: Resetting bearer <eth:syzkaller0>
[  482.626599][T15437] tipc: Resetting bearer <eth:syzkaller0>
[  482.701678][T15450] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2747'.
[  482.896428][T15461] FAULT_INJECTION: forcing a failure.
[  482.896428][T15461] name failslab, interval 1, probability 0, space 0, times 0
[  483.140568][T15461] CPU: 0 UID: 0 PID: 15461 Comm: syz.2.2750 Not tainted syzkaller #0 PREEMPT(full) 
[  483.140595][T15461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  483.140606][T15461] Call Trace:
[  483.140612][T15461]  <TASK>
[  483.140618][T15461]  dump_stack_lvl+0x16c/0x1f0
[  483.140641][T15461]  should_fail_ex+0x512/0x640
[  483.140660][T15461]  ? fs_reclaim_acquire+0xae/0x150
[  483.140682][T15461]  should_failslab+0xc2/0x120
[  483.140703][T15461]  __kmalloc_noprof+0xdd/0x880
[  483.140728][T15461]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  483.140754][T15461]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  483.140773][T15461]  tomoyo_realpath_from_path+0xc2/0x6e0
[  483.140796][T15461]  ? tomoyo_profile+0x47/0x60
[  483.140819][T15461]  tomoyo_path_number_perm+0x245/0x580
[  483.140835][T15461]  ? tomoyo_path_number_perm+0x237/0x580
[  483.140855][T15461]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  483.140873][T15461]  ? find_held_lock+0x2b/0x80
[  483.140917][T15461]  ? find_held_lock+0x2b/0x80
[  483.140937][T15461]  ? hook_file_ioctl_common+0x145/0x410
[  483.140966][T15461]  ? __fget_files+0x20e/0x3c0
[  483.140988][T15461]  security_file_ioctl+0x9b/0x240
[  483.141010][T15461]  __x64_sys_ioctl+0xb7/0x210
[  483.141036][T15461]  do_syscall_64+0xcd/0xfa0
[  483.141055][T15461]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  483.141073][T15461] RIP: 0033:0x7f35af78f749
[  483.141087][T15461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  483.141103][T15461] RSP: 002b:00007f35b0590038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  483.141120][T15461] RAX: ffffffffffffffda RBX: 00007f35af9e5fa0 RCX: 00007f35af78f749
[  483.141131][T15461] RDX: 0000000000000000 RSI: 0000000000005427 RDI: 0000000000000003
[  483.141141][T15461] RBP: 00007f35b0590090 R08: 0000000000000000 R09: 0000000000000000
[  483.141152][T15461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  483.141161][T15461] R13: 00007f35af9e6038 R14: 00007f35af9e5fa0 R15: 00007ffdc0b2a308
[  483.141186][T15461]  </TASK>
[  483.141193][T15461] ERROR: Out of memory at tomoyo_realpath_from_path.
[  484.690012][T15437] tipc: Disabling bearer <eth:syzkaller0>
[  485.797848][T15501] syzkaller0: entered promiscuous mode
[  485.813627][T15501] syzkaller0: entered allmulticast mode
[  486.362267][   T30] audit: type=1400 audit(1764601541.055:711): avc:  denied  { mount } for  pid=15502 comm="syz.1.2762" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  486.763604][T15513] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2764'.
[  487.321809][T15515] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2765'.
[  487.649095][   T30] audit: type=1400 audit(1764601542.355:712): avc:  denied  { ioctl } for  pid=15514 comm="syz.2.2765" path="socket:[45313]" dev="sockfs" ino=45313 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  487.766316][T15518] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2766'.
[  487.775601][T15518] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  487.855330][T15520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2766'.
[  487.880859][T15520] netlink: 'syz.4.2766': attribute type 14 has an invalid length.
[  487.986791][T15520] vxlan0: entered promiscuous mode
[  487.996252][ T3529] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  488.010431][ T3529] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  488.045702][ T3529] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  488.090274][ T3529] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  488.126198][T15532] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  488.271012][T15532] syzkaller0: entered promiscuous mode
[  488.273824][T15535] netlink: 'syz.4.2770': attribute type 1 has an invalid length.
[  488.276550][T15532] syzkaller0: entered allmulticast mode
[  488.291998][T15532] tipc: Resetting bearer <eth:syzkaller0>
[  488.300344][T15535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2770'.
[  488.348495][   T30] audit: type=1400 audit(1764601543.055:713): avc:  denied  { unmount } for  pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  488.368565][T15531] tipc: Resetting bearer <eth:syzkaller0>
[  489.688668][   T24] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  489.853814][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  489.864973][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  489.876927][   T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  489.953191][   T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  489.963280][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  490.294161][   T24] usb 2-1: config 0 descriptor??
[  490.314289][   T30] audit: type=1400 audit(1764601545.025:714): avc:  denied  { connect } for  pid=15550 comm="syz.3.2775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  490.736276][   T24] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  491.150046][T15531] tipc: Disabling bearer <eth:syzkaller0>
[  491.159984][T15541] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  491.177698][T15555] �����2: renamed from veth0_vlan (while UP)
[  491.185389][T15557] warning: `syz.3.2775' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  491.311885][T15541] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  491.423329][T15540] binder: 15539:15540 ioctl c0306201 200000000180 returned -14
[  491.450526][   T30] audit: type=1400 audit(1764601546.155:715): avc:  denied  { append } for  pid=15564 comm="syz.2.2778" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  492.059475][   T30] audit: type=1400 audit(1764601546.745:716): avc:  denied  { ioctl } for  pid=15566 comm="syz.4.2779" path="socket:[45008]" dev="sockfs" ino=45008 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  492.088496][T15581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2778'.
[  492.385453][T15541] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  492.418927][   T30] audit: type=1400 audit(1764601547.125:717): avc:  denied  { open } for  pid=15584 comm="syz.4.2780" path="/dev/ptyqc" dev="devtmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  492.460323][ T5948] usb 2-1: reset high-speed USB device number 39 using dummy_hcd
[  492.463589][   T30] audit: type=1400 audit(1764601547.155:718): avc:  denied  { ioctl } for  pid=15584 comm="syz.4.2780" path="/dev/ptyqc" dev="devtmpfs" ino=131 ioctlcmd=0x542b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  492.498107][T15586] FAULT_INJECTION: forcing a failure.
[  492.498107][T15586] name failslab, interval 1, probability 0, space 0, times 0
[  492.527365][T15586] CPU: 0 UID: 0 PID: 15586 Comm: syz.4.2780 Not tainted syzkaller #0 PREEMPT(full) 
[  492.527389][T15586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  492.527399][T15586] Call Trace:
[  492.527405][T15586]  <TASK>
[  492.527412][T15586]  dump_stack_lvl+0x16c/0x1f0
[  492.527434][T15586]  should_fail_ex+0x512/0x640
[  492.527456][T15586]  ? fs_reclaim_acquire+0xae/0x150
[  492.527479][T15586]  should_failslab+0xc2/0x120
[  492.527498][T15586]  __kmalloc_noprof+0xdd/0x880
[  492.527522][T15586]  ? tomoyo_encode2+0x100/0x3e0
[  492.527548][T15586]  ? tomoyo_encode2+0x100/0x3e0
[  492.527567][T15586]  tomoyo_encode2+0x100/0x3e0
[  492.527596][T15586]  tomoyo_encode+0x29/0x50
[  492.527616][T15586]  tomoyo_realpath_from_path+0x18f/0x6e0
[  492.527645][T15586]  tomoyo_path_number_perm+0x245/0x580
[  492.527662][T15586]  ? tomoyo_path_number_perm+0x237/0x580
[  492.527682][T15586]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  492.527702][T15586]  ? find_held_lock+0x2b/0x80
[  492.527745][T15586]  ? find_held_lock+0x2b/0x80
[  492.527764][T15586]  ? hook_file_ioctl_common+0x145/0x410
[  492.527791][T15586]  ? __fget_files+0x20e/0x3c0
[  492.527813][T15586]  security_file_ioctl+0x9b/0x240
[  492.527835][T15586]  __x64_sys_ioctl+0xb7/0x210
[  492.527862][T15586]  do_syscall_64+0xcd/0xfa0
[  492.527879][T15586]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  492.527896][T15586] RIP: 0033:0x7f096c58f749
[  492.527909][T15586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  492.527925][T15586] RSP: 002b:00007f096d394038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  492.527942][T15586] RAX: ffffffffffffffda RBX: 00007f096c7e6090 RCX: 00007f096c58f749
[  492.527952][T15586] RDX: 0000000000000000 RSI: 000000000000541b RDI: 0000000000000005
[  492.527962][T15586] RBP: 00007f096d394090 R08: 0000000000000000 R09: 0000000000000000
[  492.527972][T15586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  492.527982][T15586] R13: 00007f096c7e6128 R14: 00007f096c7e6090 R15: 00007fff6af4d9e8
[  492.528007][T15586]  </TASK>
[  492.528023][T15586] ERROR: Out of memory at tomoyo_realpath_from_path.
[  492.533598][T15588] netlink: 'syz.2.2781': attribute type 1 has an invalid length.
[  492.756232][T15588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2781'.
[  492.769905][T15541] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  492.909498][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  492.924302][T15596] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2784'.
[  492.926533][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  492.938665][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  493.079312][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  493.100405][   T42] usb 4-1: new full-speed USB device number 46 using dummy_hcd
[  493.240805][   T42] usb 4-1: device descriptor read/64, error -71
[  493.378404][T15603] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2786'.
[  493.407537][T15607] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2787'.
[  493.417098][T15606] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  493.447653][T15606] syzkaller0: entered promiscuous mode
[  493.453198][T15606] syzkaller0: entered allmulticast mode
[  493.469463][T15606] tipc: Resetting bearer <eth:syzkaller0>
[  493.490591][   T42] usb 4-1: new full-speed USB device number 47 using dummy_hcd
[  493.517995][T15605] tipc: Resetting bearer <eth:syzkaller0>
[  493.650743][   T42] usb 4-1: device descriptor read/64, error -71
[  493.815107][   T42] usb usb4-port1: attempt power cycle
[  493.937232][   T30] audit: type=1400 audit(1764601548.645:719): avc:  denied  { accept } for  pid=15609 comm="syz.4.2789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_socket permissive=1
[  493.988511][   T24] usb 2-1: USB disconnect, device number 39
[  494.190883][   T42] usb 4-1: new full-speed USB device number 48 using dummy_hcd
[  494.271989][   T42] usb 4-1: device descriptor read/8, error -71
[  494.355145][T15622] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  494.530346][   T42] usb 4-1: new full-speed USB device number 49 using dummy_hcd
[  494.553963][   T42] usb 4-1: device descriptor read/8, error -71
[  494.672031][   T42] usb usb4-port1: unable to enumerate USB device
[  495.068435][T15605] tipc: Disabling bearer <eth:syzkaller0>
[  495.172301][   T30] audit: type=1400 audit(1764601549.875:720): avc:  denied  { create } for  pid=15625 comm="syz.2.2794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  495.244737][   T30] audit: type=1400 audit(1764601549.885:721): avc:  denied  { ioctl } for  pid=15625 comm="syz.2.2794" path="socket:[45663]" dev="sockfs" ino=45663 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  495.274386][   T30] audit: type=1400 audit(1764601549.885:722): avc:  denied  { read write } for  pid=15625 comm="syz.2.2794" dev="sockfs" ino=45663 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  495.747837][   T30] audit: type=1400 audit(1764601550.455:723): avc:  denied  { load_policy } for  pid=15639 comm="syz.4.2799" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  495.770378][T15641] SELinux:  policydb string @ does not match my string SE Linux
[  495.770382][   T42] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  495.790604][T15641] SELinux: failed to load policy
[  495.968418][   T42] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  495.992296][   T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  496.030703][T15635] syz.0.2795 (15635) used greatest stack depth: 17720 bytes left
[  496.038786][   T42] usb 2-1: Product: syz
[  496.048661][   T42] usb 2-1: Manufacturer: syz
[  496.058858][   T42] usb 2-1: SerialNumber: syz
[  496.074877][T15645] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2800'.
[  496.084266][T15121] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  496.102520][   T42] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  496.127349][   T24] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  496.260367][T15121] usb 5-1: Using ep0 maxpacket: 8
[  496.299706][T15121] usb 5-1: no configurations
[  496.308028][T15121] usb 5-1: can't read configurations, error -22
[  496.321565][T15649] netlink: 'syz.2.2804': attribute type 2 has an invalid length.
[  496.520533][T15121] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  496.660724][T14660] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  496.683290][T15121] usb 5-1: Using ep0 maxpacket: 8
[  496.693703][   T10] usb 2-1: USB disconnect, device number 40
[  496.699599][T15121] usb 5-1: no configurations
[  496.705126][T15121] usb 5-1: can't read configurations, error -22
[  496.713392][T15121] usb usb5-port1: attempt power cycle
[  496.789082][T15656] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  496.810283][ T5860] usb 1-1: new full-speed USB device number 50 using dummy_hcd
[  496.823537][T14660] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  496.834726][T14660] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  496.847414][T14660] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  496.856858][T14660] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  496.867996][T15649] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  496.883635][T14660] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  496.972432][ T5860] usb 1-1: not running at top speed; connect to a high speed hub
[  496.992111][ T5860] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64
[  497.005465][ T5860] usb 1-1: config 1 interface 0 has no altsetting 0
[  497.015020][ T5860] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  497.025051][ T5860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  497.033306][ T5860] usb 1-1: Product: syz
[  497.037588][ T5860] usb 1-1: Manufacturer: 쭸㌭븻쳥璱糫氰쮄뾜풽෮ꆦ쌃䉌耀丁뱨銈菬쉝ꠒꌮஞ졊ﰣ䴂૙䒓ᔲ뒸༔줱輂涒ժﴰ遱Ⳛ㧖㱩㇫ⰾ谳쨳ꔡⅷ欙䍕䏋垷헠哟쥍
[  497.058652][ T5860] usb 1-1: SerialNumber: syz
[  497.069596][T15654] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[  497.070324][T15121] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  497.108074][ T5867] usb 3-1: USB disconnect, device number 46
[  497.114668][T15121] usb 5-1: Using ep0 maxpacket: 8
[  497.120520][T15121] usb 5-1: no configurations
[  497.125125][T15121] usb 5-1: can't read configurations, error -22
[  497.260493][T15121] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  497.341802][T15121] usb 5-1: Using ep0 maxpacket: 8
[  497.356776][T15121] usb 5-1: no configurations
[  497.592900][   T24] usb 2-1: Service connection timeout for: 256
[  497.650097][   T24] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services
[  497.671157][T15121] usb 5-1: can't read configurations, error -22
[  497.672451][T15666] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2808'.
[  497.689772][ T5860] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 50 if 0 alt 1 proto 1 vid 0x04B8 pid 0x0202
[  497.710702][   T24] ath9k_htc: Failed to initialize the device
[  497.717213][ T5860] usb 1-1: USB disconnect, device number 50
[  497.719407][T15121] usb usb5-port1: unable to enumerate USB device
[  497.723429][   T10] usb 2-1: ath9k_htc: USB layer deinitialized
[  497.763689][ T5860] usblp0: removed
[  497.850680][   T30] audit: type=1400 audit(1764601552.565:724): avc:  denied  { read } for  pid=15670 comm="syz.1.2809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  498.720321][   T24] usb 1-1: new full-speed USB device number 51 using dummy_hcd
[  498.941793][   T24] usb 1-1: config 4 has an invalid interface number: 88 but max is 0
[  498.951048][   T24] usb 1-1: config 4 has no interface number 0
[  498.957715][   T24] usb 1-1: config 4 interface 88 altsetting 119 has a duplicate endpoint with address 0xB, skipping
[  499.093197][   T24] usb 1-1: config 4 interface 88 altsetting 119 has an endpoint descriptor with address 0xD5, changing to 0x85
[  499.120810][   T24] usb 1-1: config 4 interface 88 altsetting 119 endpoint 0x85 has invalid maxpacket 11067, setting to 64
[  499.132526][   T24] usb 1-1: config 4 interface 88 altsetting 119 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  499.147462][   T24] usb 1-1: config 4 interface 88 has no altsetting 0
[  499.185055][   T24] usb 1-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=af.e7
[  499.208977][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  499.219348][   T24] usb 1-1: Product: syz
[  499.225222][   T24] usb 1-1: Manufacturer: syz
[  499.411114][   T24] usb 1-1: SerialNumber: syz
[  499.432824][T15682] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  499.548825][T15703] pimreg: entered allmulticast mode
[  499.572938][T15704] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2819'.
[  499.794282][T15711] overlayfs: failed to resolve './file1': -2
[  499.836822][T15715] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  501.106606][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  501.113252][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  501.124070][ T1294] lec:lec_start_xmit: lec0:No lecd attached
[  501.468004][T15735] process 'syz.2.2828' launched '/dev/fd/10' with NULL argv: empty string added
[  501.491273][   T30] audit: type=1400 audit(1764601556.185:725): avc:  denied  { execute_no_trans } for  pid=15734 comm="syz.2.2828" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1154 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  501.536772][   T10] usb 1-1: USB disconnect, device number 51
[  501.842425][   T30] audit: type=1400 audit(1764601556.555:726): avc:  denied  { unmount } for  pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  502.101961][T15747] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2832'.
[  502.559810][    T9] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0
[  502.571316][   T30] audit: type=1400 audit(1764601557.265:727): avc:  denied  { read write } for  pid=15752 comm="syz.4.2836" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  502.741530][T15760] FAULT_INJECTION: forcing a failure.
[  502.741530][T15760] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  502.754976][T15760] CPU: 0 UID: 0 PID: 15760 Comm: syz.3.2834 Not tainted syzkaller #0 PREEMPT(full) 
[  502.754998][T15760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  502.755008][T15760] Call Trace:
[  502.755014][T15760]  <TASK>
[  502.755021][T15760]  dump_stack_lvl+0x16c/0x1f0
[  502.755042][T15760]  should_fail_ex+0x512/0x640
[  502.755067][T15760]  _copy_to_user+0x32/0xd0
[  502.755092][T15760]  simple_read_from_buffer+0xcb/0x170
[  502.755120][T15760]  proc_fail_nth_read+0x197/0x240
[  502.755141][T15760]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  502.755164][T15760]  ? rw_verify_area+0xcf/0x6c0
[  502.755188][T15760]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  502.755208][T15760]  vfs_read+0x1e4/0xcf0
[  502.755225][T15760]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  502.755258][T15760]  ? __pfx___mutex_lock+0x10/0x10
[  502.755273][T15760]  ? __pfx_vfs_read+0x10/0x10
[  502.755290][T15760]  ? __rcu_read_unlock+0x2bc/0x550
[  502.755309][T15760]  ? __fget_files+0x20e/0x3c0
[  502.755334][T15760]  ksys_read+0x12a/0x250
[  502.755349][T15760]  ? __pfx_ksys_read+0x10/0x10
[  502.755372][T15760]  do_syscall_64+0xcd/0xfa0
[  502.755390][T15760]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  502.755407][T15760] RIP: 0033:0x7fd96e98e15c
[  502.755421][T15760] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  502.755438][T15760] RSP: 002b:00007fd96f7be030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  502.755454][T15760] RAX: ffffffffffffffda RBX: 00007fd96ebe6090 RCX: 00007fd96e98e15c
[  502.755465][T15760] RDX: 000000000000000f RSI: 00007fd96f7be0a0 RDI: 0000000000000007
[  502.755475][T15760] RBP: 00007fd96f7be090 R08: 0000000000000000 R09: 0000000000000000
[  502.755484][T15760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  502.755493][T15760] R13: 00007fd96ebe6128 R14: 00007fd96ebe6090 R15: 00007ffeefda0858
[  502.755519][T15760]  </TASK>
[  503.078076][    T9] hid-generic 0000:0000:0000.001E: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  503.424530][   T30] audit: type=1400 audit(1764601557.265:728): avc:  denied  { open } for  pid=15752 comm="syz.4.2836" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  503.502322][   T30] audit: type=1400 audit(1764601557.785:729): avc:  denied  { write } for  pid=15752 comm="syz.4.2836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  503.517028][T15766] fido_id[15766]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  503.524195][   T30] audit: type=1400 audit(1764601558.115:730): avc:  denied  { name_bind } for  pid=15754 comm="syz.1.2833" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  503.558484][T15771] netlink: 'syz.3.2837': attribute type 2 has an invalid length.
[  503.589970][   T30] audit: type=1400 audit(1764601558.295:731): avc:  denied  { ioctl } for  pid=15769 comm="syz.0.2838" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  503.617492][   T30] audit: type=1400 audit(1764601558.325:732): avc:  denied  { connect } for  pid=15769 comm="syz.0.2838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  503.723904][   T30] audit: type=1400 audit(1764601558.325:733): avc:  denied  { read } for  pid=15769 comm="syz.0.2838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  503.725671][T15774] netlink: 'syz.0.2839': attribute type 2 has an invalid length.
[  503.791852][T15781] netlink: 'syz.1.2840': attribute type 2 has an invalid length.
[  503.810282][   T24] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  503.994347][   T24] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  504.124802][T15121] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  504.133140][   T42] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  504.133176][ T5948] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  504.296890][   T24] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  504.339004][   T24] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  504.348679][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  504.350459][ T5948] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  504.369712][T15121] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  504.377851][T15121] usb 5-1: config 0 has no interface number 0
[  504.385727][ T5948] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  504.396618][ T5948] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  504.406145][ T5948] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  504.406481][T15771] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  504.421373][T15121] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  504.432972][   T24] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  504.441414][T15121] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  504.449452][T15121] usb 5-1: Product: syz
[  504.449816][T15778] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  504.455924][T15121] usb 5-1: Manufacturer: syz
[  504.469460][T15121] usb 5-1: SerialNumber: syz
[  504.482083][   T42] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  504.497152][   T42] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  504.507393][   T42] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  504.518873][   T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  504.527903][T15121] usb 5-1: config 0 descriptor??
[  504.536943][ T5948] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  504.574346][T15781] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[  504.602807][   T42] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  504.648721][   T10] usb 4-1: USB disconnect, device number 50
[  504.700636][ T5948] usb 1-1: USB disconnect, device number 52
[  504.751410][T15121] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  504.773453][T15121] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  504.802719][T15121] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  504.825787][T15121] usb 5-1: media controller created
[  504.826346][    T9] usb 2-1: USB disconnect, device number 41
[  504.848267][ T5185] udevd[5185]: worker [15789] terminated by signal 33 (Unknown signal 33)
[  504.858414][   T30] audit: type=1400 audit(1764601559.565:734): avc:  denied  { append } for  pid=15786 comm="syz.2.2843" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  504.865293][T15121] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  504.889657][ T5185] udevd[5185]: worker [15789] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/dmmidi3'
[  505.215580][ T5185] udevd[5185]: worker [15788] terminated by signal 33 (Unknown signal 33)
[  505.224705][ T5185] udevd[5185]: worker [15788] failed while handling '/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card5/controlC5'
[  505.306158][T15121] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[  505.576507][T15660] udevd[15660]: failed to send result of seq 24469 to main daemon: Connection refused
[  505.653569][T15121] usb 5-1: USB disconnect, device number 59
[  505.657587][T15583] udevd[15583]: failed to send result of seq 24422 to main daemon: Transport endpoint is not connected
[  506.224744][T15805] overlayfs: failed to resolve './file1': -2
[  506.350213][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5230 ms
[  506.358237][    C1] lec:lec_tx_timeout: lec0
[  506.555736][   T30] audit: type=1400 audit(1764601561.125:735): avc:  denied  { append } for  pid=15799 comm="syz.0.2846" name="sg0" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  506.653735][   T30] audit: type=1400 audit(1764601561.125:736): avc:  denied  { ioctl } for  pid=15799 comm="syz.0.2846" path="/dev/sg0" dev="devtmpfs" ino=756 ioctlcmd=0x2270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  506.868853][T15818] syzkaller0: entered promiscuous mode
[  506.874424][T15818] syzkaller0: entered allmulticast mode
[  507.000271][ T5948] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  508.161693][ T5948] usb 5-1: Using ep0 maxpacket: 32
[  508.330596][ T5948] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  508.373511][ T5948] usb 5-1: config 0 has no interface number 0
[  508.388427][ T5948] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  508.400325][ T5948] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  508.412459][ T5948] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  508.423966][ T5948] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  508.447408][ T5948] usb 5-1: config 0 descriptor??
[  508.702355][T15841] syzkaller0: entered promiscuous mode
[  508.707958][T15841] syzkaller0: entered allmulticast mode
[  508.810255][ T5867] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  508.910454][   T42] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  509.415452][ T5867] usb 2-1: device descriptor read/64, error -71
[  510.163394][ T5867] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  510.360328][ T5867] usb 2-1: device descriptor read/64, error -71
[  510.370668][   T42] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  510.381748][   T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  510.393929][   T42] usb 4-1: Product: syz
[  510.398648][   T42] usb 4-1: Manufacturer: syz
[  510.430243][   T42] usb 4-1: SerialNumber: syz
[  510.446186][   T42] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  510.471584][ T5867] usb usb2-port1: attempt power cycle
[  510.480362][   T24] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  510.832427][ T5948] usbhid 5-1:0.1: can't add hid device: -71
[  510.867954][ T5948] usbhid 5-1:0.1: probe with driver usbhid failed with error -71
[  510.927212][ T5948] usb 5-1: USB disconnect, device number 60
[  511.100509][ T5867] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  511.950343][   T24] usb 4-1: Service connection timeout for: 256
[  511.956662][   T24] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services
[  512.009942][   T30] audit: type=1400 audit(1764601566.105:737): avc:  denied  { ioctl } for  pid=15857 comm="syz.4.2863" path="socket:[47210]" dev="sockfs" ino=47210 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  512.047917][ T7903] lec:lec_start_xmit: lec0:No lecd attached
[  512.116770][   T24] ath9k_htc: Failed to initialize the device
[  512.130255][ T5867] usb 2-1: device descriptor read/8, error -71
[  512.158123][ T5860] usb 4-1: USB disconnect, device number 51
[  512.558639][T15868] binder: 15859:15868 ioctl 8912 200000000100 returned -22
[  512.687844][ T5860] usb 4-1: ath9k_htc: USB layer deinitialized
[  512.742279][T15874] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2866'.
[  512.870280][   T30] audit: type=1400 audit(1764601567.575:738): avc:  denied  { create } for  pid=15877 comm="syz.4.2868" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1
[  513.085106][T15891] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2868'.
[  513.401921][ T5867] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  513.500301][ T5867] usb 2-1: Using ep0 maxpacket: 16
[  513.537572][ T5867] usb 2-1: config 0 has an invalid interface number: 105 but max is 0
[  513.545884][ T5867] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  513.556097][ T5867] usb 2-1: config 0 has no interface number 0
[  513.564124][ T5867] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  513.573375][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  513.581626][ T5867] usb 2-1: Product: syz
[  513.585831][ T5867] usb 2-1: Manufacturer: syz
[  513.600440][ T5867] usb 2-1: SerialNumber: syz
[  513.694782][ T5867] usb 2-1: config 0 descriptor??
[  513.727142][T15896] overlayfs: failed to resolve './file0': -2
[  513.733548][T15887] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2868'.
[  513.905750][   T30] audit: type=1400 audit(1764601568.615:739): avc:  denied  { mount } for  pid=15899 comm="syz.3.2878" name="/" dev="ramfs" ino=47328 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  513.954467][ T5867] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046d:08f3)
[  514.083314][T15908] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2878'.
[  514.095549][ T5867] uvcvideo 2-1:0.105: No valid video chain found.
[  514.699538][   T24] usb 5-1: new full-speed USB device number 61 using dummy_hcd
[  515.041436][T15911] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2879'.
[  516.735637][ T5867] usb 2-1: USB disconnect, device number 45
[  516.767107][   T24] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  516.781408][   T24] usb 5-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b
[  516.810211][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  516.818530][   T24] usb 5-1: Product: syz
[  516.822882][   T24] usb 5-1: Manufacturer: syz
[  516.827497][   T24] usb 5-1: SerialNumber: syz
[  516.913401][T15916] netlink: 'syz.3.2882': attribute type 2 has an invalid length.
[  516.960802][   T24] as10x_usb: device has been detected
[  516.967114][   T24] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe)
[  516.987285][   T24] usb 5-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)...
[  517.013152][   T24] as10x_usb: error during firmware upload part1
[  517.027888][   T24] Registered device Elgato EyeTV DTT Deluxe
[  517.034274][   T24] usb 5-1: USB disconnect, device number 61
[  517.095863][   T24] Unregistered device Elgato EyeTV DTT Deluxe
[  517.106939][   T24] as10x_usb: device has been disconnected
[  517.142697][T15929] netlink: 'syz.4.2886': attribute type 2 has an invalid length.
[  517.231216][ T5860] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  517.266086][T15932] overlayfs: failed to resolve './file0': -2
[  517.386796][ T5860] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  517.400182][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5350 ms
[  517.408201][    C1] lec:lec_tx_timeout: lec0
[  517.408213][ T5860] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  517.423583][ T5860] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  517.443314][ T5860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  517.466340][T15916] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  517.477452][ T5860] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  517.552116][   T24] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[  517.684642][ T5860] usb 4-1: USB disconnect, device number 52
[  517.721514][   T24] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  517.770249][   T24] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  517.780247][   T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  517.789446][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  517.808575][T15930] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  517.833775][   T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  518.262647][   T24] usb 5-1: USB disconnect, device number 62
[  519.946827][T15965] overlayfs: failed to resolve './file0': -2
[  520.035349][T15972] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15972 comm=syz.1.2899
[  520.096075][T15976] netlink: 'syz.2.2902': attribute type 2 has an invalid length.
[  520.140363][   T10] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  520.306429][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  520.329382][   T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00
[  520.342335][   T24] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  520.345853][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  520.375286][   T10] usb 1-1: config 0 descriptor??
[  520.512771][   T24] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  520.578536][   T24] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  520.590376][   T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  520.599590][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  520.611644][T15976] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  520.621266][   T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  520.763135][ T5827] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  520.774504][ T5827] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  520.784266][ T5827] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  520.793020][ T5827] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  520.801778][ T5827] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  520.818396][   T30] audit: type=1400 audit(1764601575.525:740): avc:  denied  { mounton } for  pid=15981 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  520.864691][ T5860] usb 3-1: USB disconnect, device number 47
[  520.959518][   T10] logitech-hidpp-device 0003:046D:C086.001F: item fetching failed at offset 0/3
[  521.014668][   T10] logitech-hidpp-device 0003:046D:C086.001F: hidpp_probe:parse failed
[  521.031525][   T10] logitech-hidpp-device 0003:046D:C086.001F: probe with driver logitech-hidpp-device failed with error -22
[  521.175928][   T24] usb 1-1: USB disconnect, device number 53
[  521.633200][T15981] chnl_net:caif_netlink_parms(): no params data found
[  522.830332][ T5136] Bluetooth: hci4: command tx timeout
[  523.120243][   T24] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  523.273520][   T24] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  523.284714][   T24] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  523.294702][   T24] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  523.314009][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  523.333027][T16034] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  523.346369][   T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  523.567822][   T24] usb 1-1: USB disconnect, device number 54
[  524.212972][T16048] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  524.555151][T16059] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2921'.
[  524.585439][T15981] bridge0: port 1(bridge_slave_0) entered blocking state
[  524.592648][T15981] bridge0: port 1(bridge_slave_0) entered disabled state
[  524.600004][T15981] bridge_slave_0: entered allmulticast mode
[  524.607665][T15981] bridge_slave_0: entered promiscuous mode
[  524.626521][T15981] bridge0: port 2(bridge_slave_1) entered blocking state
[  524.633749][T15981] bridge0: port 2(bridge_slave_1) entered disabled state
[  524.643263][T15981] bridge_slave_1: entered allmulticast mode
[  524.663004][T15981] bridge_slave_1: entered promiscuous mode
[  524.783943][T15981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  524.804176][T16069] overlayfs: failed to resolve './file0': -2
[  524.813015][T16065] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2923'.
[  524.823034][T15981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  524.927039][ T5136] Bluetooth: hci4: command tx timeout
[  524.980871][T15981] team0: Port device team_slave_0 added
[  524.988982][T15981] team0: Port device team_slave_1 added
[  526.458334][T16079] syzkaller0: entered promiscuous mode
[  526.463993][T16079] syzkaller0: entered allmulticast mode
[  526.472462][T15981] batman_adv: batadv0: Adding interface: batadv_slave_0
[  526.479412][T15981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  526.544008][T15981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  526.626378][T15981] batman_adv: batadv0: Adding interface: batadv_slave_1
[  526.637389][T15981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  526.637469][   T42] IPVS: starting estimator thread 0...
[  526.663520][    C1] vkms_vblank_simulate: vblank timer overrun
[  526.676796][T15981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  526.810788][T16093] FAULT_INJECTION: forcing a failure.
[  526.810788][T16093] name failslab, interval 1, probability 0, space 0, times 0
[  526.825930][T16093] CPU: 0 UID: 0 PID: 16093 Comm: syz.2.2932 Not tainted syzkaller #0 PREEMPT(full) 
[  526.825957][T16093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  526.825968][T16093] Call Trace:
[  526.825974][T16093]  <TASK>
[  526.825981][T16093]  dump_stack_lvl+0x16c/0x1f0
[  526.826008][T16093]  should_fail_ex+0x512/0x640
[  526.826029][T16093]  ? __kmalloc_cache_noprof+0x5f/0x780
[  526.826060][T16093]  should_failslab+0xc2/0x120
[  526.826081][T16093]  __kmalloc_cache_noprof+0x72/0x780
[  526.826106][T16093]  ? vkms_plane_duplicate_state+0x45/0x130
[  526.826132][T16093]  ? vkms_plane_duplicate_state+0x45/0x130
[  526.826151][T16093]  vkms_plane_duplicate_state+0x45/0x130
[  526.826172][T16093]  drm_atomic_get_plane_state+0x20e/0x590
[  526.826194][T16093]  drm_atomic_set_property+0xa29/0x34d0
[  526.826221][T16093]  ? __pfx_drm_atomic_set_property+0x10/0x10
[  526.826241][T16093]  ? __might_fault+0xe3/0x190
[  526.826266][T16093]  ? __might_fault+0xe3/0x190
[  526.826289][T16093]  ? __might_fault+0x13b/0x190
[  526.826325][T16093]  drm_mode_atomic_ioctl+0x66f/0x2600
[  526.826356][T16093]  ? avc_has_extended_perms+0x47c/0x1090
[  526.826385][T16093]  ? __pfx_drm_mode_atomic_ioctl+0x10/0x10
[  526.826407][T16093]  ? __lock_acquire+0xb8a/0x1c90
[  526.826440][T16093]  ? drm_is_current_master+0x2c/0x40
[  526.826463][T16093]  ? do_raw_spin_unlock+0x172/0x230
[  526.826486][T16093]  drm_ioctl_kernel+0x1f4/0x3e0
[  526.826503][T16093]  ? __pfx_drm_mode_atomic_ioctl+0x10/0x10
[  526.826524][T16093]  ? __pfx_drm_ioctl_kernel+0x10/0x10
[  526.826549][T16093]  drm_ioctl+0x5c9/0xc30
[  526.826569][T16093]  ? __pfx_drm_mode_atomic_ioctl+0x10/0x10
[  526.826592][T16093]  ? __pfx_drm_ioctl+0x10/0x10
[  526.826620][T16093]  ? selinux_file_ioctl+0x180/0x270
[  526.826638][T16093]  ? selinux_file_ioctl+0xb4/0x270
[  526.826659][T16093]  ? __pfx_drm_ioctl+0x10/0x10
[  526.826677][T16093]  __x64_sys_ioctl+0x18e/0x210
[  526.826704][T16093]  do_syscall_64+0xcd/0xfa0
[  526.826723][T16093]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  526.826741][T16093] RIP: 0033:0x7f35af78f749
[  526.826755][T16093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  526.826772][T16093] RSP: 002b:00007f35b0590038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  526.826789][T16093] RAX: ffffffffffffffda RBX: 00007f35af9e5fa0 RCX: 00007f35af78f749
[  526.826800][T16093] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 000000000000000f
[  526.826811][T16093] RBP: 00007f35b0590090 R08: 0000000000000000 R09: 0000000000000000
[  526.826821][T16093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  526.826831][T16093] R13: 00007f35af9e6038 R14: 00007f35af9e5fa0 R15: 00007ffdc0b2a308
[  526.826856][T16093]  </TASK>
[  527.097973][ T5136] Bluetooth: hci4: command tx timeout
[  527.103164][   T30] audit: type=1400 audit(1764601581.515:741): avc:  denied  { write } for  pid=16092 comm="syz.2.2932" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  527.126702][    C1] vkms_vblank_simulate: vblank timer overrun
[  527.153351][T16090] IPVS: using max 50 ests per chain, 120000 per kthread
[  527.674999][T15981] hsr_slave_0: entered promiscuous mode
[  527.687595][T15981] hsr_slave_1: entered promiscuous mode
[  527.701147][T15981] debugfs: 'hsr0' already exists in 'hsr'
[  527.714622][T15981] Cannot create hsr debugfs directory
[  527.795163][T16106] overlayfs: failed to resolve './file1': -2
[  527.850954][T16110] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2935'.
[  527.910001][T15981] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  527.921397][   T30] audit: type=1400 audit(1764601582.615:742): avc:  denied  { connect } for  pid=16113 comm="syz.2.2938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  527.940858][    C1] vkms_vblank_simulate: vblank timer overrun
[  527.949160][T15981] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  527.974624][   T30] audit: type=1400 audit(1764601582.685:743): avc:  denied  { ioctl } for  pid=16113 comm="syz.2.2938" path="socket:[47735]" dev="sockfs" ino=47735 ioctlcmd=0x8990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  527.981083][T16116] bond0: (slave rose0): Enslaving as an active interface with an up link
[  528.027683][T15981] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  528.037601][T15981] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  528.070481][   T42] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  528.082245][   T30] audit: type=1400 audit(1764601582.795:744): avc:  denied  { write } for  pid=16113 comm="syz.2.2938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  528.105398][T15981] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  528.116495][T15981] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  528.176645][T15981] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  528.189806][T15981] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  528.208780][T16121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2940'.
[  528.221501][T16121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2940'.
[  528.242327][   T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  528.260269][   T42] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00
[  528.287291][   T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  528.311731][   T42] usb 2-1: config 0 descriptor??
[  528.376159][T15981] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  528.391812][T15981] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  528.413029][T15981] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  528.427596][T15981] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  528.579108][T15981] 8021q: adding VLAN 0 to HW filter on device bond0
[  528.685010][T15981] 8021q: adding VLAN 0 to HW filter on device team0
[  528.693518][   T42] usbhid 2-1:0.0: can't add hid device: -71
[  528.773573][   T42] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  528.793711][ T3576] bridge0: port 1(bridge_slave_0) entered blocking state
[  528.800812][ T3576] bridge0: port 1(bridge_slave_0) entered forwarding state
[  528.812425][   T42] usb 2-1: USB disconnect, device number 46
[  528.893377][ T3529] bridge0: port 2(bridge_slave_1) entered blocking state
[  528.900477][ T3529] bridge0: port 2(bridge_slave_1) entered forwarding state
[  528.958237][T15981] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  529.160660][ T5136] Bluetooth: hci4: command tx timeout
[  529.270284][ T5860] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  529.418243][T16141] syzkaller0: entered promiscuous mode
[  529.431290][T16141] syzkaller0: entered allmulticast mode
[  529.440845][T16141] 0: reclassify loop, rule prio 0, protocol 800
[  529.470515][ T5860] usb 3-1: Using ep0 maxpacket: 32
[  529.477327][ T5860] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  529.486356][ T5860] usb 3-1: config 0 has no interface number 0
[  529.494928][ T5860] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  529.504156][ T5860] usb 3-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3
[  529.513297][ T5860] usb 3-1: Product: syz
[  529.521714][ T5860] usb 3-1: Manufacturer: syz
[  529.529084][ T5860] usb 3-1: SerialNumber: syz
[  529.537506][T15981] 8021q: adding VLAN 0 to HW filter on device batadv0
[  529.549281][ T5860] usb 3-1: config 0 descriptor??
[  529.566724][ T5860] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  529.596290][ T5860] usb 3-1: selecting invalid altsetting 1
[  529.624977][ T5860] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  529.724585][T16147] FAULT_INJECTION: forcing a failure.
[  529.724585][T16147] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  529.751648][ T5860] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  530.061079][ T5860] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  530.069371][ T5860] usb 3-1: media controller created
[  530.075280][T16147] CPU: 1 UID: 0 PID: 16147 Comm: syz.0.2944 Not tainted syzkaller #0 PREEMPT(full) 
[  530.075302][T16147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  530.075312][T16147] Call Trace:
[  530.075318][T16147]  <TASK>
[  530.075324][T16147]  dump_stack_lvl+0x16c/0x1f0
[  530.075345][T16147]  should_fail_ex+0x512/0x640
[  530.075371][T16147]  _copy_to_user+0x32/0xd0
[  530.075396][T16147]  drm_ioctl+0x5eb/0xc30
[  530.075417][T16147]  ? __pfx_drm_mode_atomic_ioctl+0x10/0x10
[  530.075441][T16147]  ? __pfx_drm_ioctl+0x10/0x10
[  530.075467][T16147]  ? selinux_file_ioctl+0x180/0x270
[  530.075487][T16147]  ? selinux_file_ioctl+0xb4/0x270
[  530.075506][T16147]  ? __pfx_drm_ioctl+0x10/0x10
[  530.075523][T16147]  __x64_sys_ioctl+0x18e/0x210
[  530.075551][T16147]  do_syscall_64+0xcd/0xfa0
[  530.075569][T16147]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  530.075587][T16147] RIP: 0033:0x7f211b58f749
[  530.075601][T16147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  530.075617][T16147] RSP: 002b:00007f211c3db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  530.075633][T16147] RAX: ffffffffffffffda RBX: 00007f211b7e5fa0 RCX: 00007f211b58f749
[  530.075644][T16147] RDX: 00002000000003c0 RSI: 00000000c03864bc RDI: 0000000000000003
[  530.075654][T16147] RBP: 00007f211c3db090 R08: 0000000000000000 R09: 0000000000000000
[  530.075665][T16147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  530.075674][T16147] R13: 00007f211b7e6038 R14: 00007f211b7e5fa0 R15: 00007ffc5fe52cb8
[  530.075698][T16147]  </TASK>
[  530.103828][ T5860] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  530.264848][T15981] veth0_vlan: entered promiscuous mode
[  530.406797][T16155] FAULT_INJECTION: forcing a failure.
[  530.406797][T16155] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  530.420298][T16155] CPU: 0 UID: 0 PID: 16155 Comm: syz.0.2945 Not tainted syzkaller #0 PREEMPT(full) 
[  530.420323][T16155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  530.420333][T16155] Call Trace:
[  530.420339][T16155]  <TASK>
[  530.420346][T16155]  dump_stack_lvl+0x16c/0x1f0
[  530.420367][T16155]  should_fail_ex+0x512/0x640
[  530.420391][T16155]  _copy_to_user+0x32/0xd0
[  530.420415][T16155]  simple_read_from_buffer+0xcb/0x170
[  530.420444][T16155]  proc_fail_nth_read+0x197/0x240
[  530.420466][T16155]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  530.420487][T16155]  ? vfs_read+0x16b/0xcf0
[  530.420503][T16155]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  530.420523][T16155]  vfs_read+0x1e4/0xcf0
[  530.420542][T16155]  ? __pfx___mutex_lock+0x10/0x10
[  530.420560][T16155]  ? __pfx_vfs_read+0x10/0x10
[  530.420583][T16155]  ? __fget_files+0x20e/0x3c0
[  530.420606][T16155]  ksys_read+0x12a/0x250
[  530.420622][T16155]  ? __pfx_ksys_read+0x10/0x10
[  530.420645][T16155]  do_syscall_64+0xcd/0xfa0
[  530.420663][T16155]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  530.420681][T16155] RIP: 0033:0x7f211b58e15c
[  530.420695][T16155] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  530.420711][T16155] RSP: 002b:00007f211c3ba030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  530.420727][T16155] RAX: ffffffffffffffda RBX: 00007f211b7e6090 RCX: 00007f211b58e15c
[  530.420738][T16155] RDX: 000000000000000f RSI: 00007f211c3ba0a0 RDI: 0000000000000009
[  530.420748][T16155] RBP: 00007f211c3ba090 R08: 0000000000000000 R09: 0000000000000000
[  530.420757][T16155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  530.420767][T16155] R13: 00007f211b7e6128 R14: 00007f211b7e6090 R15: 00007ffc5fe52cb8
[  530.420791][T16155]  </TASK>
[  530.779876][T15981] veth1_vlan: entered promiscuous mode
[  530.858438][ T5860] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  530.865721][ T5860] zl10353_read_register: readreg error (reg=127, ret==-71)
[  530.874253][ T5860] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  530.889782][T16161] overlayfs: failed to resolve './file1': -2
[  530.904589][ T5860] usb 3-1: USB disconnect, device number 48
[  530.919987][T15981] veth0_macvtap: entered promiscuous mode
[  530.930010][T15981] veth1_macvtap: entered promiscuous mode
[  530.955052][T15981] batman_adv: batadv0: Interface activated: batadv_slave_0
[  531.017664][T15981] batman_adv: batadv0: Interface activated: batadv_slave_1
[  531.045006][T16165] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2949'.
[  531.047246][ T3529] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  531.064687][ T3529] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  531.114069][T16169] netlink: 'syz.0.2948': attribute type 21 has an invalid length.
[  531.125141][T16169] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2948'.
[  531.167504][   T30] audit: type=1400 audit(1764601585.875:745): avc:  denied  { getopt } for  pid=16168 comm="syz.0.2948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  531.213165][ T3529] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  531.223370][ T3529] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  531.252767][T16177] binder: BINDER_SET_CONTEXT_MGR already set
[  531.259019][T16177] binder: 16170:16177 ioctl 4018620d 200000004a80 returned -16
[  531.267086][T16169] netlink: 'syz.0.2948': attribute type 6 has an invalid length.
[  531.277671][T16169] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2948'.
[  531.294205][T16174] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  531.307495][T16174] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  531.319669][T16179] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2952'.
[  531.387541][T16174] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  531.409024][T16174] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  531.430271][   T42] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  531.478680][ T3529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  531.490316][ T3529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  531.498953][T16174] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  531.511526][ T5860] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  531.587404][T16174] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  531.610735][   T42] usb 1-1: Using ep0 maxpacket: 32
[  531.617439][   T42] usb 1-1: config 0 has an invalid interface number: 149 but max is 0
[  531.629475][   T42] usb 1-1: config 0 has no interface number 0
[  531.654741][T16183] syzkaller0: entered promiscuous mode
[  531.660687][   T42] usb 1-1: config 0 interface 149 has no altsetting 0
[  531.673400][T16183] syzkaller0: entered allmulticast mode
[  531.741571][   T42] usb 1-1: New USB device found, idVendor=12d1, idProduct=b18c, bcdDevice=ae.ff
[  531.741756][ T5860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  531.750783][   T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  531.770581][   T42] usb 1-1: Product: syz
[  531.774803][   T42] usb 1-1: Manufacturer: syz
[  531.779500][   T42] usb 1-1: SerialNumber: syz
[  531.799964][   T42] usb 1-1: config 0 descriptor??
[  531.813027][   T42] option 1-1:0.149: GSM modem (1-port) converter detected
[  531.823054][   T42] usb 1-1: GSM modem (1-port) converter now attached to ttyUSB0
[  531.832768][T16174] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  531.850297][ T5860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  531.850658][T16174] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  531.860019][ T5860] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  531.860061][ T5860] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  531.860081][ T5860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  532.018335][   T42] usb 1-1: USB disconnect, device number 55
[  532.038349][   T42] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0
[  532.047904][   T42] option 1-1:0.149: device disconnected
[  532.074425][ T5860] usb 4-1: config 0 descriptor??
[  532.080481][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  532.088276][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  532.119795][   T30] audit: type=1400 audit(1764601586.825:746): avc:  denied  { mounton } for  pid=15981 comm="syz-executor" path="/root/syzkaller.QM3oUc/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  532.147711][    C1] vkms_vblank_simulate: vblank timer overrun
[  532.185079][ T3576] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  532.198046][ T3576] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  532.226800][   T30] audit: type=1400 audit(1764601586.875:747): avc:  denied  { mount } for  pid=15981 comm="syz-executor" name="/" dev="gadgetfs" ino=6925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  532.253305][ T3576] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  532.262074][ T3576] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  532.270536][ T3576] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  532.278998][ T3576] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  532.316353][ T3576] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  532.341113][ T3576] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  532.349624][T16187] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2903'.
[  532.360042][   T13] ==================================================================
[  532.368126][   T13] BUG: KASAN: use-after-free in __linkwatch_run_queue+0x7d5/0x8a0
[  532.375919][   T13] Read of size 8 at addr ffff88804c4c0b88 by task kworker/u8:1/13
[  532.383714][   T13] 
[  532.386020][   T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) 
[  532.386033][   T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  532.386041][   T13] Workqueue: events_unbound linkwatch_event
[  532.386055][   T13] Call Trace:
[  532.386059][   T13]  <TASK>
[  532.386064][   T13]  dump_stack_lvl+0x116/0x1f0
[  532.386079][   T13]  print_report+0xcd/0x630
[  532.386091][   T13]  ? __virt_addr_valid+0x81/0x610
[  532.386105][   T13]  ? __phys_addr+0xe8/0x180
[  532.386119][   T13]  ? __linkwatch_run_queue+0x7d5/0x8a0
[  532.386129][   T13]  kasan_report+0xe0/0x110
[  532.386140][   T13]  ? __linkwatch_run_queue+0x7d5/0x8a0
[  532.386152][   T13]  __linkwatch_run_queue+0x7d5/0x8a0
[  532.386163][   T13]  ? __pfx___linkwatch_run_queue+0x10/0x10
[  532.386176][   T13]  linkwatch_event+0x8f/0xc0
[  532.386185][   T13]  ? __pfx_linkwatch_event+0x10/0x10
[  532.386196][   T13]  ? rcu_is_watching+0x12/0xc0
[  532.386209][   T13]  process_one_work+0x9cf/0x1b70
[  532.386223][   T13]  ? __pfx_process_one_work+0x10/0x10
[  532.386235][   T13]  ? assign_work+0x1a0/0x250
[  532.386245][   T13]  worker_thread+0x6c8/0xf10
[  532.386258][   T13]  ? __pfx_worker_thread+0x10/0x10
[  532.386269][   T13]  kthread+0x3c5/0x780
[  532.386278][   T13]  ? __pfx_kthread+0x10/0x10
[  532.386288][   T13]  ? rcu_is_watching+0x12/0xc0
[  532.386301][   T13]  ? __pfx_kthread+0x10/0x10
[  532.386310][   T13]  ret_from_fork+0x675/0x7d0
[  532.386319][   T13]  ? __pfx_kthread+0x10/0x10
[  532.386329][   T13]  ret_from_fork_asm+0x1a/0x30
[  532.386346][   T13]  </TASK>
[  532.386350][   T13] 
[  532.538251][   T13] The buggy address belongs to the physical page:
[  532.544638][   T13] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804c4c6000 pfn:0x4c4c0
[  532.554675][   T13] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  532.561767][   T13] raw: 00fff00000000000 ffffea000147fc08 ffff8880b85405c0 0000000000000000
[  532.570324][   T13] raw: ffff88804c4c6000 0000000000000000 00000000ffffffff 0000000000000000
[  532.578878][   T13] page dumped because: kasan: bad access detected
[  532.585262][   T13] page_owner tracks the page as freed
[  532.590600][   T13] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x446dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP), pid 16183, tgid 16180 (syz.2.2953), ts 531627849768, free_ts 532359899144
[  532.612280][   T13]  post_alloc_hook+0x1af/0x220
[  532.617028][   T13]  get_page_from_freelist+0x10a3/0x3a30
[  532.622553][   T13]  __alloc_frozen_pages_noprof+0x25f/0x2470
[  532.628426][   T13]  alloc_pages_mpol+0x1fb/0x550
[  532.633256][   T13]  ___kmalloc_large_node+0xed/0x160
[  532.638429][   T13]  __kmalloc_large_node_noprof+0x1c/0x70
[  532.644038][   T13]  __kvmalloc_node_noprof.cold+0xf/0x66
[  532.649567][   T13]  alloc_netdev_mqs+0xd7/0x1550
[  532.654399][   T13]  __tun_chr_ioctl+0x193e/0x4880
[  532.659315][   T13]  __x64_sys_ioctl+0x18e/0x210
[  532.664060][   T13]  do_syscall_64+0xcd/0xfa0
[  532.668539][   T13]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  532.674407][   T13] page last free pid 16180 tgid 16180 stack trace:
[  532.680883][   T13]  __free_frozen_pages+0x7df/0x1160
[  532.686060][   T13]  device_release+0xa4/0x240
[  532.690630][   T13]  kobject_put+0x1e7/0x5a0
[  532.695022][   T13]  netdev_run_todo+0x7e9/0x1320
[  532.699856][   T13]  tun_chr_close+0xea/0x230
[  532.704341][   T13]  __fput+0x402/0xb70
[  532.708300][   T13]  task_work_run+0x150/0x240
[  532.712873][   T13]  exit_to_user_mode_loop+0xec/0x130
[  532.718135][   T13]  do_syscall_64+0x426/0xfa0
[  532.722697][   T13]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  532.728568][   T13] 
[  532.730870][   T13] Memory state around the buggy address:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  532.736471][   T13]  ffff88804c4c0a80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  532.744506][   T13]  ffff88804c4c0b00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  532.752542][   T13] >ffff88804c4c0b80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  532.760574][   T13]                       ^
[  532.764876][   T13]  ffff88804c4c0c00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  532.772911][   T13]  ffff88804c4c0c80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  532.780943][   T13] ==================================================================
[  532.792806][   T13] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  532.800017][   T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) 
[  532.809296][   T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  532.819342][   T13] Workqueue: events_unbound linkwatch_event
[  532.825213][   T13] Call Trace:
[  532.828461][   T13]  <TASK>
[  532.831371][   T13]  dump_stack_lvl+0x3d/0x1f0
[  532.835939][   T13]  vpanic+0x640/0x6f0
[  532.839894][   T13]  panic+0xca/0xd0
[  532.843589][   T13]  ? __pfx_panic+0x10/0x10
[  532.847989][   T13]  ? __linkwatch_run_queue+0x7d5/0x8a0
[  532.853443][   T13]  ? preempt_schedule_common+0x44/0xc0
[  532.858901][   T13]  ? preempt_schedule_thunk+0x16/0x30
[  532.864252][   T13]  ? check_panic_on_warn+0x1f/0xb0
[  532.869346][   T13]  check_panic_on_warn+0xab/0xb0
[  532.874252][   T13]  end_report+0x107/0x170
[  532.878552][   T13]  kasan_report+0xee/0x110
[  532.882937][   T13]  ? __linkwatch_run_queue+0x7d5/0x8a0
[  532.888375][   T13]  __linkwatch_run_queue+0x7d5/0x8a0
[  532.893643][   T13]  ? __pfx___linkwatch_run_queue+0x10/0x10
[  532.899418][   T13]  linkwatch_event+0x8f/0xc0
[  532.903976][   T13]  ? __pfx_linkwatch_event+0x10/0x10
[  532.909245][   T13]  ? rcu_is_watching+0x12/0xc0
[  532.913982][   T13]  process_one_work+0x9cf/0x1b70
[  532.918889][   T13]  ? __pfx_process_one_work+0x10/0x10
[  532.924237][   T13]  ? assign_work+0x1a0/0x250
[  532.928794][   T13]  worker_thread+0x6c8/0xf10
[  532.933355][   T13]  ? __pfx_worker_thread+0x10/0x10
[  532.938435][   T13]  kthread+0x3c5/0x780
[  532.942470][   T13]  ? __pfx_kthread+0x10/0x10
[  532.947026][   T13]  ? rcu_is_watching+0x12/0xc0
[  532.951760][   T13]  ? __pfx_kthread+0x10/0x10
[  532.956319][   T13]  ret_from_fork+0x675/0x7d0
[  532.960876][   T13]  ? __pfx_kthread+0x10/0x10
[  532.965440][   T13]  ret_from_fork_asm+0x1a/0x30
[  532.970182][   T13]  </TASK>
[  532.973451][   T13] Kernel Offset: disabled
[  532.977750][   T13] Rebooting in 86400 seconds..