last executing test programs:

2m12.099462095s ago: executing program 3 (id=438):
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000640)='asymmetric\x00', &(0x7f00000003c0)=@chain)
keyctl$link(0x8, r0, r0)
madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9)

2m11.182568382s ago: executing program 3 (id=441):
creat(&(0x7f0000000000)='./file0\x00', 0x29) (async)
syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904"], 0x0)

2m9.206501043s ago: executing program 3 (id=448):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
ioctl$TIOCSBRK(r1, 0x5427)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10)
r3 = socket$inet(0x2, 0x2, 0x1)
setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, 0x0, 0x0)
r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3e616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r5, 0x0, 0x44, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c0000000000000c548dc7914cb11ad63bf3707164aac031971c4be105eb953f86fbc6b204e076aa7a493e796123bbbd8e3b7e62d8fd097cf21d6d431a069ebc0aefd5fce80cc99fb38c771fa46e2c32a95fe99", 0x0, 0x86, 0x0, 0xffffffffffffff80, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x15)
syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x1000)=nil)
syz_usb_control_io(r4, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)=ANY=[@ANYBLOB="00000800000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv6_getaddrlabel={0x38, 0x1a, 0x1, 0x70bd2c, 0x25dfdbfc, {0x2, 0x0, 0x20}, [@IFAL_ADDRESS={0x14, 0x1, @private2}, @IFAL_LABEL={0x8, 0x2, 0x7}]}, 0x38}}, 0x0)
syz_usb_control_io$printer(r4, &(0x7f0000000180)={0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="3203710000007122a9b1f0cc53a1ede3fcce3b6fce23c24cbdfb0cc9ad801779ef67f7b42bfb4d9ddc21eb9d95800363618d8177cd858fb814515ecdba2bcdde4ee76115d271ce2e4ec08f52cb18388f02f4b0ae6b706c6fc8ba8a56f331cb1c60ccbdd960e6487ed312bf0000000001000000eb39d864"], &(0x7f00000001c0)=ANY=[@ANYBLOB="81f900e62c76ef2aefa1f90dc9043b1ac2c892bdfcbc2972c50ee4b95337c18dc38692d2ac7b0600"/52]}, &(0x7f0000000380)={0x34, &(0x7f0000000440)={0x20, 0xe, 0xa6, "9f996317a4a59d32668b88e11e3d3bf10b26552393eee77b0a344a1a8c03da32a0ac95d7b51c1cb7ec9a2318aa347d95ec12f3ea4afb7d56a82b70e4b0dbafaede078deeb7f8e1662a0be1dd327470936715f8bf11e9d81657c7d248875a265100a528b8412ebfd89b3027e7c6e662bfcd91b92736a5b0863664ab4387610ba004a75a9b8988ea47caf9ef6591dcacbbd920e056da8195b5b8e2895cc571cf713e4f9a2204d8"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x42}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000600)={0x20, 0x0, 0xb4, {0xb2, "f5e72015fc7e5ab5c99169d1fb3e1b0fd82ca4899e169590eb0392b7bde552950216ca634c7aec837a324ba69c27806f648d4200b4af35628711248833003f11656af1c7a59ffd455551b0447bf16092b4b387efa5e2bb2ac045d8f3c5d8ca882d4ed1318a7cf17f29a62cd98a1f1c794a587e3bf3055ebb511b0274258e94fd324cc6e1e6eaf1d6f645780e6f704ad609caf134127f608b5253673926fe3eec580bb92694ddcda716243e370778b9a2f365"}}, &(0x7f00000002c0)={0x20, 0x1, 0x1, 0x67}, &(0x7f0000000300)={0x20, 0x0, 0x1, 0xd2}})

2m5.586849275s ago: executing program 3 (id=453):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e43000000018000180140002006e657464657673696d30000000000000080004000600000008000500000000000800030006"], 0x44}}, 0x0)

2m5.066551099s ago: executing program 3 (id=456):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$kcm(0x29, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
r1 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0x0, 0x0)
r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0)
ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000600)=0x14)
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='affs\x00', 0x208000, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x4}}, [@NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x2}}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x50}}, 0x4048010)
r3 = userfaultfd(0x801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380})
openat$sysfs(0xffffffffffffff9c, 0x0, 0xa0042, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, 0x0, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)

2m4.544918197s ago: executing program 3 (id=457):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xcb, 0x6f, 0xcf, 0x20, 0x13d8, 0x20, 0xf731, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x24, 0xe4, 0xd5}}]}}]}}, 0x0) (async, rerun: 32)
syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x14, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x4}}}}}}}, 0x0) (async, rerun: 32)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff})
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) (async)
syz_usb_connect$uac1(0x5, 0xe2, &(0x7f0000000300)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd0, 0x3, 0x1, 0x6, 0x0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x8}, [@input_terminal={0xc, 0x24, 0x2, 0x4, 0x202, 0x4, 0x9c, 0x4, 0x10, 0x3}, @extension_unit={0x8, 0x24, 0x8, 0x4, 0x9, 0xfc, '_'}, @mixer_unit={0x5, 0x24, 0x4, 0x1, 0x7}, @processing_unit={0x8, 0x24, 0x7, 0x6, 0x4, 0x1, '('}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x306, 0x1, 0x5, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x2, 0x3, 0x5, {0x7, 0x25, 0x1, 0x2, 0x40, 0x7a0}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x7, 0x4, 0x1, 0x47, "0fa64636"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xffff, 0xa, 0x53, "29ffdf28447756"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x0, 0xf, 0x6, "a9"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xd6, 0x4, 0x6, 0xd}, @as_header={0x7, 0x24, 0x1, 0x7f, 0x20}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x7, 0x3d, 0x8, "d92a19063c0f21ac07"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xf, 0x9, 0x1, {0x7, 0x25, 0x1, 0x80, 0xa6, 0x3}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x8, 0x6, 0xe, 0x10, 0xe}, 0x42, &(0x7f0000000400)={0x5, 0xf, 0x42, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "5cd85c3b328d79d2d959a04dece7ea99"}, @ss_container_id={0x14, 0x10, 0x4, 0x33, "6483f826886add1c2f883980f4f0ce68"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x0, 0x7, 0x8}, @wireless={0xb, 0x10, 0x1, 0x4, 0x4, 0x8, 0x4, 0x7, 0x2}]}, 0x4, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x3009}}, {0xbc, &(0x7f0000000480)=@string={0xbc, 0x3, "fa6c474501e0bd1bd2246a9a23b9dc19a4fa1f4d9b266f8f49621f63555a1d0a7568743ac211add2a9058ab5a65ae5be78ad0ce6b6e2d5e3743b0e240ce8fb293ced3009504938bdfdf6024203c9ec8f60d3de9eb50e42fab93137d1bf2e4cbfd4037dd744872ebdf581117f9b0ac3a420b98722392ce5cfc08a80baac682263786e005ed7976db26ac25945f988a46cee62d94100275643c719988d01e1c891bd87579130071c63e38043440813144a6d8b3d42b0bed54575a1"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x448}}, {0xda, &(0x7f0000000580)=@string={0xda, 0x3, "e4e783722a68b097a377c77a6a3c2ca69e84cea52c1dbe4ae13811a5701e218a58189b304d80acd1fcf881504dfe7cf80034bfbab37591df96c474bdf3fa819a7a2b0502664afaaac2b8a9e10f7dcd55a727f41e6bb2b4a4bd06b6abdd176b702fe002c4fe629e808eb17a3375479d7f3967d5770f9572750dcb949095041e2cf178776e1d5212d3edee091d718927b697030550fd361fe079c6bcc916a1209f86e7d20dd02ed81e20b050aaccd8b2992e8c26e643e91dcae82629d87c33ccd8fa74cf5f957408f7dbd2fc8d92753d6df84474108eea50aa"}}]}) (async, rerun: 64)
write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRES16], 0x15) (rerun: 64)

1m49.383709241s ago: executing program 32 (id=457):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xcb, 0x6f, 0xcf, 0x20, 0x13d8, 0x20, 0xf731, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x24, 0xe4, 0xd5}}]}}]}}, 0x0) (async, rerun: 32)
syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x14, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x4}}}}}}}, 0x0) (async, rerun: 32)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff})
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) (async)
syz_usb_connect$uac1(0x5, 0xe2, &(0x7f0000000300)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd0, 0x3, 0x1, 0x6, 0x0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x8}, [@input_terminal={0xc, 0x24, 0x2, 0x4, 0x202, 0x4, 0x9c, 0x4, 0x10, 0x3}, @extension_unit={0x8, 0x24, 0x8, 0x4, 0x9, 0xfc, '_'}, @mixer_unit={0x5, 0x24, 0x4, 0x1, 0x7}, @processing_unit={0x8, 0x24, 0x7, 0x6, 0x4, 0x1, '('}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x306, 0x1, 0x5, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x2, 0x3, 0x5, {0x7, 0x25, 0x1, 0x2, 0x40, 0x7a0}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x7, 0x4, 0x1, 0x47, "0fa64636"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xffff, 0xa, 0x53, "29ffdf28447756"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x0, 0xf, 0x6, "a9"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xd6, 0x4, 0x6, 0xd}, @as_header={0x7, 0x24, 0x1, 0x7f, 0x20}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x7, 0x3d, 0x8, "d92a19063c0f21ac07"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xf, 0x9, 0x1, {0x7, 0x25, 0x1, 0x80, 0xa6, 0x3}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x8, 0x6, 0xe, 0x10, 0xe}, 0x42, &(0x7f0000000400)={0x5, 0xf, 0x42, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "5cd85c3b328d79d2d959a04dece7ea99"}, @ss_container_id={0x14, 0x10, 0x4, 0x33, "6483f826886add1c2f883980f4f0ce68"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x0, 0x7, 0x8}, @wireless={0xb, 0x10, 0x1, 0x4, 0x4, 0x8, 0x4, 0x7, 0x2}]}, 0x4, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x3009}}, {0xbc, &(0x7f0000000480)=@string={0xbc, 0x3, "fa6c474501e0bd1bd2246a9a23b9dc19a4fa1f4d9b266f8f49621f63555a1d0a7568743ac211add2a9058ab5a65ae5be78ad0ce6b6e2d5e3743b0e240ce8fb293ced3009504938bdfdf6024203c9ec8f60d3de9eb50e42fab93137d1bf2e4cbfd4037dd744872ebdf581117f9b0ac3a420b98722392ce5cfc08a80baac682263786e005ed7976db26ac25945f988a46cee62d94100275643c719988d01e1c891bd87579130071c63e38043440813144a6d8b3d42b0bed54575a1"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x448}}, {0xda, &(0x7f0000000580)=@string={0xda, 0x3, "e4e783722a68b097a377c77a6a3c2ca69e84cea52c1dbe4ae13811a5701e218a58189b304d80acd1fcf881504dfe7cf80034bfbab37591df96c474bdf3fa819a7a2b0502664afaaac2b8a9e10f7dcd55a727f41e6bb2b4a4bd06b6abdd176b702fe002c4fe629e808eb17a3375479d7f3967d5770f9572750dcb949095041e2cf178776e1d5212d3edee091d718927b697030550fd361fe079c6bcc916a1209f86e7d20dd02ed81e20b050aaccd8b2992e8c26e643e91dcae82629d87c33ccd8fa74cf5f957408f7dbd2fc8d92753d6df84474108eea50aa"}}]}) (async, rerun: 64)
write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRES16], 0x15) (rerun: 64)

13.032665303s ago: executing program 0 (id=827):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_MAP(r7, 0x3b85, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f00000001c0)={0x28, 0x4, r8, 0x0, &(0x7f000060c000/0x3000)=nil, 0x3000, 0x1})
ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000080)={0x28, 0x2, r8, 0x0, &(0x7f00005c8000/0x2000)=nil, 0x2000, 0x5})
ioctl$IOMMU_IOAS_COPY(r7, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r8, r8, 0x2, 0xfffffffffffffffa, 0x3fff})
writev(r6, &(0x7f0000000080)=[{0x0}], 0x1)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vti={{0x8}, {0x24, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_FWMARK={0x8, 0x6, 0x1}, @IFLA_VTI_OKEY={0x8, 0x3, 0xfffffffc}, @IFLA_VTI_IKEY={0x8}], @IFLA_VTI_LOCAL={0x8, 0x4, @loopback}]}}}]}, 0x50}}, 0x4044004)

11.911940631s ago: executing program 0 (id=830):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80000)
write$P9_RRENAME(r2, &(0x7f0000000240)={0x7, 0x15, 0x2}, 0x7) (async)
openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x3ec0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) (async)
r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180)=0x7) (async)
ioctl$TCSETA(r3, 0x8924, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffd, 0xc}) (async)
r4 = syz_open_dev$sg(&(0x7f0000000280), 0x1, 0x24000)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) (async)
ioctl$SG_BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x5940, 0x0, 0x80000001, 0x63, 0xe, r5})
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x18d800, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async)
r9 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_buf(r9, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r8, 0x4080aebf, &(0x7f0000003680)={{0x2, 0x0, 0x80, {0x4000, 0x6000}}, "cb31455c9ea4288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9fae702d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97dc2fa08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b9f802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963cd14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb193213f4bccab1c34c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f0d9ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d579531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a785d820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37dfd149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f2729cd9aa56d9a9a24b7ab96ae021b193d8874d43ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab21842da1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e5f0b1cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336343f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "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"}) (async)
syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000340)=[@textreal={0x8, &(0x7f0000000140)="baa100ed8345035a0f017708f2a5660f628d00483e66660f6171c864650f060f080f79a24c89f2ad", 0x28}], 0x1, 0x48, 0x0, 0x0)

11.094787252s ago: executing program 5 (id=834):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000005a6a70023000000090507", @ANYRES32], 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000080)=0xd75a, 0x4)
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="0005010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000020a2690100001800000000000002f307000000000000007f000001000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000)

10.752801496s ago: executing program 1 (id=835):
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000002c0)={0x0, 0x0, 0x80000})
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x10001, 0xfffffe0000000005, 0xfa11, 0xffffffff}, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0)
unshare(0x8000000)
r4 = semget$private(0x0, 0x4000, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341)
ioctl$USBDEVFS_CONNECTINFO(r5, 0x40085511, 0xffffffffffffffff)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000fcb000), 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80000, 0x0, <r6=>0xffffffffffffffff})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x41)
copy_file_range(r8, 0x0, r8, &(0x7f0000000080)=0xfffffffffffffff9, 0x1, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03080000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a09030000000000000000070000000900020073797a31000000000900010073797a300000000018000380140000800800034000000002050006405200000014000000110001"], 0xc8}}, 0x0)
bind$xdp(0xffffffffffffffff, &(0x7f0000000140)={0x2c, 0x2, 0x0, 0x39, r6}, 0x10)
semctl$SEM_INFO(r4, 0x0, 0x13, &(0x7f00000001c0)=""/68)
ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xc})
semctl$SETALL(0x0, 0x0, 0x14, 0x0)
ioctl$TCSETS(r0, 0x5402, 0x0)

9.209975357s ago: executing program 5 (id=839):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0)
r2 = getpid()
futex(&(0x7f000000cffc)=0x1, 0x0, 0x1, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x2, 0x5, 0x1, 0x0, &(0x7f0000000000), 0x2000000)
sched_setscheduler(r2, 0x0, &(0x7f0000000000)=0x8001)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000002c00), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$cec(0x0, 0x0, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r5, 0x0, 0x0)
sendmmsg$unix(r5, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001}}], 0x2, 0x0)
openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000d40), 0x8200, 0x0)
readv(r6, &(0x7f0000001ec0)=[{&(0x7f0000000d80)=""/225, 0xe1}], 0x1)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
r8 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'lo\x00', <r9=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', r9, 0x0, 0x10, 0x1, 0x4, 0xc2, @dev={0xfe, 0x80, '\x00', 0x25}, @mcast2, 0x8000, 0x0, 0x2, 0x6}})
socket$nl_rdma(0x10, 0x3, 0x14)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x40, 0xfd, 0x2, 0x100}, {0x6, 0x6, 0x6, 0x3}]}, 0x10)

9.120819237s ago: executing program 1 (id=840):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="f8ffffff00000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c00000015000100fdffffff0000000002100000", @ANYRES32, @ANYBLOB="140003007665746830000000000000001791cb46"], 0x2c}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
syz_clone3(&(0x7f0000000980)={0x162844200, 0x0, 0x0, 0x0, {0x6}, 0xfffffffffffffffe, 0x0, 0x0, 0x0}, 0x58)
socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$kcm(0x10, 0x400000002, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file0/file0\x00', r0}, 0x18)
ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000040)=@ethtool_cmd={0xa, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x87, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80000045, [0x10000002, 0x89ff]}})
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r5=>r4, {0xdd5c}}, './file0\x00'})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x18, r7, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, r7, 0x4, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x3c}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x13}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x1)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2f, &(0x7f00000005c0)={0x7, {{0xa, 0x4e23, 0x2, @mcast2, 0x8000081}}, {{0xa, 0x4620, 0xfffffff8, @loopback, 0x8000}}}, 0x108)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1401ad2d17000000dbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_WOWLAN(r8, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0103000000000000000005000000080001005d00000008000300", @ANYRES8=r9], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)

9.016274847s ago: executing program 2 (id=841):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x42782, 0x0)
ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000180))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x7c}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)

8.378321416s ago: executing program 1 (id=842):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f00000008c0)=ANY=[@ANYBLOB="400a070000000721d666348f"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0x7c}}, 0x0)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x84, 0x10, &(0x7f0000000240)=r4, 0x8)
syz_usb_control_io$hid(r0, &(0x7f0000000640)={0x24, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0003"], 0x0, 0x0}, 0x0)

8.268232118s ago: executing program 5 (id=843):
socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$SNDCTL_SEQ_NRSYNTHS(r4, 0x8004510a, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000f4c884d99e61aef4fc1ffa0c9bb098d6b8c19da3c9ad5a079ebb921bc32480e429506eaffa44d359d0bfdfe43249c3599333ddb6ad7536d5c048a1fc4386cf96e45b88c7c21a4b2d8ef99a9561840081283f86232e42e93300eba345bd40c0d6e1a1e10a2afed20f260f200a6d2a4f9d734363ad5dc47790a584344f910201d850d6c534d9a2887c0a7d9a5e775c3f4e"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0x80000000}, {0x60, 0x8}, {}, {0x2}, {0x6, 0x0, 0x0, 0x10000000}]})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f0000000180)=""/92, 0x5c}, {&(0x7f00000004c0)=""/37, 0x25}, {0x0}], 0x4)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRESOCT=r8], 0x2c}}, 0x0)

6.603559082s ago: executing program 0 (id=846):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000f9ffffff00000000fdffffff850000001700000085000000a000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x232}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e02742d123e8680d85ff0082762f", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x8480)
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
bind$packet(r1, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, 0x14)
getsockname$packet(r1, 0x0, &(0x7f0000000200))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00'})
r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000000000010ac05470200000000000109022400010000500009040002010300010009210000000122f80409058103"], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)
syz_init_net_socket$ax25(0x3, 0x5, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c400", @ANYBLOB="20000100", @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x801)
sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8)
gettid()
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0)
syz_io_uring_setup(0x620c, &(0x7f0000000400)={0x0, 0x7079, 0x9, 0x10, 0xc2}, &(0x7f00000007c0)=<r5=>0x0, &(0x7f0000000200))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
r7 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0)
ioctl$VIDIOC_S_SELECTION(r7, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x8000, 0x1000, 0x4, 0x6}})
ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000002c0)={0x2, @sdr={0x3147504d, 0x1}})

6.43483481s ago: executing program 4 (id=847):
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x4a7, 0x9, {<r0=>0x0}, {0xee00}, 0x5d, 0x8000000000000001})
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000006c0)=@o_path={0x0}, 0x18)
prlimit64(r0, 0x4, &(0x7f0000000040)={0x5, 0xf3a}, &(0x7f0000000080))
syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x141, 0x6a, 0x47, 0x22, 0x20, 0xbc3, 0x1, 0x5205, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc0, 0x7, 0x0, 0x54, 0x41, 0x6f}}]}}]}}, 0x0)

6.290503159s ago: executing program 5 (id=848):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000001000000000000080000095"], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r0}, 0x18)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f0000006180)={0x2020, 0x0, 0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
syz_fuse_handle_req(r1, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x6000)
setresgid(r3, r4, 0xee00)
r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x33, 0x0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0)
r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
epoll_create1(0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c643c, &(0x7f0000000300)={0x0, 0x0, r8})
preadv(r8, &(0x7f0000003300)=[{0x0}], 0x1, 0x0, 0x7fff)
r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r9)
ptrace$setregs(0x1a, r9, 0xc, &(0x7f0000000000))
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f0000000280)={{0x3, 0x5, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0xfffdfffffffffffd, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc19, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40, 0x0, 0xffffffffffffff15, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd451, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0xe411, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffff8001, 0x0, 0x10000, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5bfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1000000000001, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff]})

6.228442365s ago: executing program 2 (id=849):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0xb}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80003, 0x0)
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000000140)={0x1, 'veth0_vlan\x00'}, 0x18)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@gettaction={0x58, 0x32, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x41b, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x401}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x200000000000011, 0x1, 0x7fffd)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0))

4.932005977s ago: executing program 4 (id=850):
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000002c0)={0x0, 0x0, 0x80000})
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x10001, 0xfffffe0000000005, 0xfa11, 0xffffffff}, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0)
unshare(0x8000000)
r4 = semget$private(0x0, 0x4000, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341)
ioctl$USBDEVFS_CONNECTINFO(r5, 0x40085511, 0xffffffffffffffff)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000fcb000), 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80000, 0x0, <r6=>0xffffffffffffffff})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x41)
copy_file_range(r8, 0x0, r8, &(0x7f0000000080)=0xfffffffffffffff9, 0x1, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03080000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a09030000000000000000070000000900020073797a31000000000900010073797a300000000018000380140000800800034000000002050006405200000014000000110001"], 0xc8}}, 0x0)
bind$xdp(0xffffffffffffffff, &(0x7f0000000140)={0x2c, 0x2, 0x0, 0x39, r6}, 0x10)
semctl$SEM_INFO(r4, 0x0, 0x13, &(0x7f00000001c0)=""/68)
ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xc})
semctl$SETALL(0x0, 0x0, 0x14, 0x0)
ioctl$TCSETS(r0, 0x5402, 0x0)

4.902313229s ago: executing program 1 (id=851):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, 0x0, 0x0)
socket(0x18, 0x2, 0x1)
r2 = socket$packet(0x11, 0x2, 0x300)
sendmsg$key(0xffffffffffffffff, 0x0, 0x2000c804)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="340000003e0007012bbd700000000000010100080400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="080002800400338008000900", @ANYRES32=r3], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x60842, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000040)="824cee00baf80c66b806b9938566efbafc0ced0fc7b20f960f20980f22a566b9800000c00f326635008000000f3065ded9f080497f007af5d9c6", 0x3a}], 0x1, 0x14, 0x0, 0x0)
syz_usb_connect(0x5, 0x0, 0x0, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000f80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7, 0x0, 0xffffffffffffffff}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r8 = getpid()
sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

4.864858604s ago: executing program 2 (id=852):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = dup(r0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000079672843c90000001d0a0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x210, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x7}, 0xfffffffffffffc79}, 0x2a)
pipe(&(0x7f0000005880)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
setresuid(0x0, 0xee01, 0x0)
fsetxattr$security_selinux(r2, &(0x7f00000000c0), 0x0, 0x0, 0x0)
prlimit64(0x0, 0x16, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000440)=[<r4=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000040)=[r4], 0x1})
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
read$FUSE(r1, &(0x7f00000001c0)={0x2020}, 0x2020)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000002200)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="d2ff03066003008cb89e08d988a8", 0x0, 0xd5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$BLKDISCARDZEROES(r1, 0x127c, &(0x7f00000000c0))

3.59613836s ago: executing program 0 (id=853):
r0 = getpid()
getpriority(0x2, r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x88}}, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x180001, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000)

3.594943021s ago: executing program 2 (id=854):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000004c0)={&(0x7f0000000000), 0xc, &(0x7f0000000480)={&(0x7f0000000080)={0x3d0, r1, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}]}, @TIPC_NLA_NODE={0x208, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xec, 0x3, "506293bd8217db373df70cadef515c18d8ee0a3ceb476f951cb6c229e84862f8a5d98e2cf435b20d672bc3bfff182240cd88b093af3b6bffad39a567ffccec7b68402c0333234b6146a142b6bd319a4c3613f53eecc705b4d3bab53915b3106e9493ae7deeb3d85dd5d7c1a1278cffd6c5402476d01f01ee906c830b7198324b7d0222356370e9ddf26d9d3625638817d4677546e6d4ec1509bb1c35941a4aa759966f1cc4a8b798bd83dd051b6bd0f5252a9c7c028dfaee8b13644f7cb93aea87ddd1f8f7f1b6b9ed9d83cab306876f5ab781236e21928702172dad923acdb252ab34330fc4fc20"}, @TIPC_NLA_NODE_ID={0x2e, 0x3, "65bdea1a5ab49a2c2e7153826feec14c286644ea753a830863f0533a35025e905dbd3e4fd32299fc4dde"}, @TIPC_NLA_NODE_ID={0x11, 0x3, "9b542168703712005641816562"}, @TIPC_NLA_NODE_ID={0xca, 0x3, "047869a4fbd4e4037a2d02765a0c98d5fb9a7356f52c2e2d668e0a4abb74bc285a01fa61c0595eecf957ce264e5e1feef461eae1b330f04ff98f91757f081e782e198cfd068b6010171a4e4c4205fbb52befc4303ca8694c7c673fe51b0c0d7336cf8c038477ba4b3ac2c5ad3b8feabbeacb94207699bc0e665859d6b856c330486edeebb0674c9abaec602f30876a4eb9526ca6ee9a9bb0b425cfa26578c572ab0d1eaffbb735095fb9256af1f171c25d6b784d530303796be56d3ba560ac4b3c46b92e4f5c"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x70, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x401}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "1492f49303f2b2cab93d2df28f351ca3c41fbb1883123df89755f9a7471f8267"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_LINK={0x12c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5abd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb8f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5c1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5a36}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6749}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x600000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x338}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf9848f5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x63c09e39}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}]}, 0x3d0}, 0x1, 0x0, 0x0, 0x10}, 0x4000020)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x90, r2, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x65}}}}, [@acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}], @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x200}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000886}, 0x20000114)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r4, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x632}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000040}, 0x10)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000e00)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0xac94465dec8653e7}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000840)={0x578, r2, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x70}}}}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x400}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x3, 0x9}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x330, 0x84, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x5}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x27}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x3}]}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x9, 0x1, @random="a45bec3f0f"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x11, 0x1, @random="50908fa23dae8cf48a7f7b604e"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x800}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1b, 0x1, @random="ec7e8bc4bd786342b9a3776c167588c1098f7e6ac97acc"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, {0x70, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x80000001}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x8001}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x9}, @NL80211_BAND_LC={0x8, 0x5, 0x1e2}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x331}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x65c24269}]}, {0x80, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x7}, @NL80211_BAND_LC={0x8, 0x5, 0xc5}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xa}, @NL80211_BAND_6GHZ={0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xc035}, @NL80211_BAND_LC={0x8, 0x5, 0x100}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x2}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1c, 0x1, @random="91335f6f02b5780fe69ca5fa3a22e6968dbf0dec4502d392"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="56fe8d0222e2"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x8000}]}, {0x60, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x2}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x6}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x4}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x7ff}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xbb}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x4e}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x101}, @NL80211_BAND_5GHZ={0x8}, @NL80211_BAND_LC={0x8, 0x5, 0x6}]}]}, {0xc4, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xfff}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x2}, @NL80211_BAND_LC={0x8, 0x5, 0x3}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x9}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x9a74}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xa5f}, @NL80211_BAND_6GHZ={0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x7}, @NL80211_BAND_LC={0x8, 0x5, 0x7}, @NL80211_BAND_LC={0x8, 0x5, 0x2}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x401}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x7}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x6}, @NL80211_BAND_LC={0x8, 0x5, 0x5}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x3}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x23f}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0xaea}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="d17b4fcbb4cd"}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x10, 0x1, @random="a15b6853aca8b058d63942c0"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x1}, @NL80211_BAND_LC={0x8, 0x5, 0x3}, @NL80211_BAND_LC={0x8, 0x5, 0x2}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x3}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xe}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x3238}, @NL80211_BAND_60GHZ={0x8}]}]}]}, @NL80211_ATTR_SCAN_SSIDS={0x2c, 0x2d, 0x0, 0x1, [{0x14, 0x0, @random="42441d3092feb34e1d2510dd86e8617d"}, {0xa, 0x0, @default_ibss_ssid}, {0x6, 0x0, @random="d4c6"}]}, @NL80211_ATTR_IE={0x1c8, 0x2a, [@tim={0x5, 0xc5, {0x3, 0xbe, 0x2, "660e1c2f2adaa066735b19738049c5c6bb4f2da04a5d8afa966c3eb13b80ddb2ebe73064e5ce63d083abc7a6261c56e661da255bb1c7344f23f945d1f6fd180dde82bd68a8042011034452145f8ab45e8170f7b10e8355660589b9202feddfbc2954a184d2c5cedb1d7b21b35a19d6ec9872a9841f452ccb2598492e66d9f182f7c9e38dc747c6d9e4e1cafd0f5acecd4e4c781bba9c2fbb49d19f66ee1f0c3e51698366624242bac1831ef348061b6ce7256a12f0885f722254477c515e3c6ade5d"}}, @ssid={0x0, 0x6, @random="17c59b4e14b5"}, @dsss={0x3, 0x1, 0xb0}, @channel_switch={0x25, 0x3, {0x0, 0x38}}, @tim={0x5, 0x3e, {0x7, 0xad, 0x7, "e2cbbd3914afe376ad70f0df94f13b605f3632b2457468952c41c4ad5d842d742fd36b0a4f5adb1952ddcc4e31f009de2b2e54246c276b3e2778b1"}}, @rann={0x7e, 0x15, {{0x0, 0x9}, 0x2, 0x6, @device_b, 0x4, 0x80, 0x5}}, @measure_req={0x26, 0x83, {0x9, 0x27, 0x4, "458f5a8c3351de229c1d2ea85845f79ba2ef56b61633f908418a59a75cab978ade9f20c22723096516e28414d15dbb6f9ef2ae6530be1d6e1bdf1c32d9ba5729dfb042a31a7087819a1b1826bf0a25d76833be9185765036a75280f4b58d262431012c00cd8ba8f42402b712a4211d14f24fe24690b3ce90679fb272ef0ce1d8"}}, @gcr_ga={0xbd, 0x6, @broadcast}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0x0, 0x1, 0x7}}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x1}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x578}, 0x1, 0x0, 0x0, 0x8001}, 0x8040)
sendmsg$NL80211_CMD_DISASSOCIATE(r3, &(0x7f0000000f00)={&(0x7f0000000e40), 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x18, r2, 0x65ae18a10a5fe806, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x8010)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r3)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000001080)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x64, r5, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x50)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000010c0)={{0x1, 0x1, 0x18, <r6=>0xffffffffffffffff, {<r7=>0x0, 0xffffffffffffffff}}, './file0\x00'})
setuid(r7)
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000001580)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001540)={&(0x7f0000001140)={0x3d4, r1, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x64, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf56}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "bf20df4187f8b1013cb15b38997bcc5cd49d7bed5dabf3a683cb609099d0f0a696"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x254, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "e6c8cfbe5bcec442cc5c4e35471496ee2083b987a199a7"}}, @TIPC_NLA_NODE_ID={0xc8, 0x3, "e430fde5868c8d69dea02d479f7ca2f6dd8649b3a2431d595d37050e0822a00c7c630383185d494a0bd4d1a294c5b9a1df53e533d2951b720dd36da7d635584a241739c28e4fd4952c21118f7f162e42f2b3a8970b2b2e141c24ce97d0823094eee12852f6a1eb4c0545f33ea29cf1ff90471fe0da065616c6f8e72655ce006946dfc27cfe73750520179da9e41ab7d69daeec5fb8e1292814ea46c991112e8180f7bbbb9d2599a6a5b8b2b9324f6637a8ce4f02e926d602a764a71dcb473a03d4cedd61"}, @TIPC_NLA_NODE_ID={0xb8, 0x3, "c2e5d2fa6c0ddbbbc7dc59c2c49bfba40c18267d3d3c6300b5eb29ef04c0742e8560df64c6e61f1b2b2210741f3c9ae72ba1dea2b89313663005da92879e2648832055968dfbedab5858966476c3d6de5f95703bf287f306375d602517ff99a37e5855e4a32d02eddb9c9a20ab1ad74a0afba5daad4fc3742ea9967277b06692678bf74b3742b757d036e7577b02d268dfb57d3415d51760c137de6395884b49b3b2eda24ea11c4e393ee72155af5eb78459c294"}, @TIPC_NLA_NODE_ID={0x35, 0x3, "a3c46df2f18e849a9d4b87fbf5f759c3202de086978ed3d0c4115c42fe48e04aecd20befe835c988518ac22fbe3153f354"}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "dd430dba732edf9cba167c98b7fbefd5ef500859d9e0a97439da6adf"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8000}]}, @TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x39}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}]}, 0x3d4}, 0x1, 0x0, 0x0, 0x4044090}, 0x1)
ptrace$poke(0x5, 0x0, &(0x7f00000015c0), 0xa3)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000001780)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001740)={&(0x7f0000001640)={0xec, r1, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}]}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x436}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x200}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7d8a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}]}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001800)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_UPDATE_FT_IES(r6, &(0x7f0000001900)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x4010000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x44, r2, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0xe011}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x6}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x4}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x497}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x1800}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x811)
syz_genetlink_get_family_id$tipc(&(0x7f0000001940), r0)
ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000001980))
syz_open_dev$MSR(&(0x7f00000019c0), 0x7f, 0x0)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000001a40), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_PORTS(r6, &(0x7f0000001b00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x1c, r9, 0x200, 0x70bd26, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xd1}, 0x8040)
sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f0000001dc0)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001d80)={&(0x7f0000001b80)={0x1d0, r1, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xbc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x815c}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x90, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x88}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8ea8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xcc0}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x4815}, 0x802)
write(r6, &(0x7f0000001e00)="513f18bee2b01b7962738746983072e51f78d00ab86c910966865be99dd44bebb38b301e1b6fa9614f157b4a8962b5f97394824f5a61e3f8cb5f7537eb41baaad602274e5dbf8913727965ec852a3db71108b603d25bafbbe08e0725aec8afc08c0bb31a49498101b959851355ea6cabc0565f35bd84a0965bf63bf265c1172eac6cc73d6f49991038aa9d86e8576aa60147a4c02562af728950f4b80d69138416212afc143c432e57193527a2adec7c0b1e5e6aa7587fd2f054398685042b2dff9719e11be0d67b484d3e7b48cccb666a879ddb27f45b", 0xd7)
r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001f40), r0)
sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000002000)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r10, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x40044)
sendmsg$AUDIT_TRIM(r6, &(0x7f0000002100)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x10, 0x3f6, 0x100, 0x70bd2b, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)
openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000002140), 0x0, 0x0)

3.31573526s ago: executing program 4 (id=855):
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000030c0)=[{0x0}, {&(0x7f0000000940)=""/214, 0xd6}], 0x2}, 0xfffffff9}], 0x1, 0x2, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendto$inet6(r0, &(0x7f0000000040)="e164ac8300"/17, 0x11, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
r1 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2711, @local}, 0x10)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/softlockup_count', 0x0, 0x0) (async)
r2 = memfd_create(&(0x7f0000000a40)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\x15a\x97F\\\xc1h\x11\x96)+\xb1\x1d/\x88\xa2|V\xa2N\x8d\xc0~*c\xa2\x10\xcb\xae,\xdb\x00\xdf\xd5\xdfv\xdem\x99\xabykm\xf1=\x02o\xd5\x13\'\x0f\x1f\xdc\x12\x92\xbf\xb5A\xba=\xf3\x8dN\xf7\xbe\xe1\x0e\x90:\xdb7 \xe5\x97\xae6f\b\xbc\xf8H\xbc\"Z\x06\"\xf6\x0e\xa7\xea.\xa2\x1a\xc30\x95V\x9blwc\x81\xb7W\xd2\x1cU\xdd\xe7\x1f2\xad\x9a\aW\xd9b0\xc3\xa2\'\x9f<q\x99\x81\xe2\x9d\x12\xbe\xa6B\x1d\xa0\x91\xc0M\xc8\xc2\xc4\x17\xedT\'jj^\xfe\xe6\xfbZ%\x12\xf6 bCFt\xed\xaf#\az\xf9\xd2M\xf7\xe3\xb4)\xc7\x02\x7fg\xd0r\xa9;\x00|\xcd\xad\x12\x97a\"\x91\x9a1\x81\xb2fX^\x83\x1963\xb05\x8c\xaaqd\x00}\xde#-\xf3\x99I_\xe3^#\xfe\x1d~\b\xff\xbc\xd0\xd4D\xa3M\xf3\xfev\x99\x14%\xaa\v\xb85MZ(\xd97(\x86z\xc2cX\x8a\"\xdf\xe6._U\x80#To\r\xa7\xd4*\xa2\xc3\xcbD\x91\xd8Y\x19\xf2\xaf\xbc(\x9e\xd0u\x9fr\x1c]@\xc9!\xd5K\t\xac$\xb6\x89\xdb\xceb\x871vr\xdd\xcc6\x97\x99\x02BD\xeee\xeak\x04\x139', 0x1)
copy_file_range(r2, 0x0, r2, &(0x7f0000000040)=0xfffffffffffffffd, 0x0, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) (async, rerun: 32)
rt_sigsuspend(&(0x7f0000000180)={[0x7]}, 0x8) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r5=>0x0})
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000c80)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="7f1ad71c5e1e2ffd65015711202c22a1", 0x10}], 0x1, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000850}], 0x1, 0x8084) (async)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}, 0x1, 0x0, 0x0, 0x4094}, 0x0) (async)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0xf0, 0x30, 0xffff, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_gact={0x6c, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x8000, 0x20000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x0, 0x20000000}}]}, {0x1b, 0x6, "f40eaf4f01a1d581ab65612f855edf813fb67768553308"}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000100), 0x14) (async)
listen(r1, 0x0) (async)
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101100, 0x0)
ioctl$TCSBRKP(r7, 0x5425, 0x3) (async, rerun: 64)
ioctl$TCSBRKP(r7, 0x5425, 0x80000000) (rerun: 64)
r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) (async)
r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r10, &(0x7f0000000400)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1, 0x10}}, 0x12) (async, rerun: 32)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x800, &(0x7f00000007c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfd\ao=', @ANYRESHEX=r8, @ANYBLOB=',\x00']) (async, rerun: 32)
accept4$unix(r1, 0x0, 0x0, 0x0) (async)
recvmmsg(r0, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0)

3.234256892s ago: executing program 2 (id=856):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="022080070c0000021200010047b6c1d7d81a2a190f1f7f7deb8cdc568ab82ece2ddd4c85fd6fc27f096d2aa4a33dcae243309c4bcc0710b573c65ae318209703d0c8ea6419dff32c24c80c8c7d1658c2ce383ddc389e5539689a6a00ea6e7fec2e90c92751d63051bbadb8e6b34c8b"], 0x1c}}, 0x2000c840)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
r3 = io_uring_setup(0x785a, &(0x7f0000000580)={0x0, 0xddf4, 0x400, 0xfffffdfe, 0x183})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
timer_create(0x0, 0x0, 0x0)
close_range(r3, r3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r4, &(0x7f0000001e40)=[{{&(0x7f0000000340)=@nfc_llcp, 0x80, &(0x7f0000000100)=[{&(0x7f0000000600)=""/139, 0x8b}], 0x1}, 0x80000000}, {{&(0x7f00000006c0)=@phonet, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000740)=""/214, 0xd6}, {&(0x7f0000000840)=""/70, 0x46}, {&(0x7f00000001c0)=""/40, 0x28}, {&(0x7f0000000240)}, {&(0x7f00000008c0)=""/231, 0xe7}, {&(0x7f00000009c0)=""/210, 0xd2}, {&(0x7f0000000ac0)=""/4096, 0x1000}], 0x7}, 0x2}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001b40)=""/219, 0xdb}, {&(0x7f0000001c40)=""/227, 0xe3}], 0x2, &(0x7f0000001d40)=""/242, 0xf2}, 0x734}], 0x3, 0x2, 0x0)
r6 = socket(0x28, 0x5, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000240), 0x0)
r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000580)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)

3.184488429s ago: executing program 4 (id=857):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x401)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x802, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
gettid()
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f00000000c0)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000000000)={0xa0000001})
r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/power/wakeup_count', 0x141800, 0x10)
read$char_usb(r9, &(0x7f0000000100)=""/177, 0x39)
close_range(r6, r8, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0)
sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000004000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e", 0x78}], 0x1}, 0x8000)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/custom1\x00', 0x1000, 0x0)

2.414414174s ago: executing program 5 (id=858):
gettid()
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940))
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109022400010000000009040000025c291d0009050900000000060009050ae5"], 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, 0x0, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x9, @mcast2, 0x2}}}, 0x30)
openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x40000000100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x9)
r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8)
socket$netlink(0x10, 0x3, 0x0)
socket$inet6_icmp(0xa, 0x2, 0x3a)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4)
fcntl$setpipe(r4, 0x407, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10)
sendto$inet(r5, &(0x7f0000000240)="71c9699d4a447c446642158b791d4719092186bb73c39ed2cd1389f9a42a6de42e0165943d33592c90a9bc214b226bb7729e83bc5004890ce8a6dccc9d5b57b3eaca71", 0x43, 0x0, 0x0, 0x0)
splice(r5, 0x0, r4, 0x0, 0xfea8, 0xa)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3)
cachestat(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0)
r6 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4)
setsockopt$ax25_int(r6, 0x101, 0x6, &(0x7f0000000040)=0x2, 0x4)

2.399840736s ago: executing program 0 (id=859):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) (async)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid() (async)
r2 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) (async, rerun: 64)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) (async, rerun: 64)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) (async, rerun: 64)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) (rerun: 64)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) (async)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xf91f2950a4e8f8ca)
r5 = fsopen(&(0x7f0000000040)='afs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0)
r6 = fsopen(&(0x7f0000000040)='afs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) (async, rerun: 64)
syz_open_dev$hidraw(0x0, 0x0, 0x81) (rerun: 64)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) (async)
r7 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
r8 = fsmount(r7, 0x0, 0x18)
getsockname$packet(r8, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14)

2.162068154s ago: executing program 4 (id=860):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_MAP(r7, 0x3b85, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f00000001c0)={0x28, 0x4, r8, 0x0, &(0x7f000060c000/0x3000)=nil, 0x3000, 0x1})
ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000080)={0x28, 0x2, r8, 0x0, &(0x7f00005c8000/0x2000)=nil, 0x2000, 0x5})
ioctl$IOMMU_IOAS_COPY(r7, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r8, r8, 0x2, 0xfffffffffffffffa, 0x3fff})
writev(r6, &(0x7f0000000080)=[{0x0}], 0x1)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={<r9=>0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000280)={r9, 0x3ff}, 0x8)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vti={{0x8}, {0x24, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_FWMARK={0x8, 0x6, 0x1}, @IFLA_VTI_OKEY={0x8, 0x3, 0xfffffffc}, @IFLA_VTI_IKEY={0x8}], @IFLA_VTI_LOCAL={0x8, 0x4, @loopback}]}}}]}, 0x50}}, 0x4044004)

1.57993113s ago: executing program 1 (id=861):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x14, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000d00)='rpm_return_int\x00', r0, 0x0, 0x7}, 0x18)
syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)

1.509350919s ago: executing program 2 (id=862):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x80}, [@IFAL_LABEL={0x8, 0x2, 0x7}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040865}, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io(r4, &(0x7f00000002c0)={0x2c, &(0x7f0000000580)=ANY=[@ANYBLOB='@\n\a'], 0x0, 0x0, 0x0, 0x0}, 0x0)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x2, 0x0)
r5 = getpgrp(0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x2, r5, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000002e00090a000000000000000904000000080018000aac0f00"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000003c0)=0x7e)

1.44239721s ago: executing program 1 (id=863):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x4e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x500)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x501400, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1d)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r6, 0x0)
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x1000000000000000, 0x7, 0x109e93, 0xffffffffffffffff, 0x400000, 0xd, 0x0, 0x2, 0xfffffffffffffffd, 0x48d6, 0x200000010000, 0x6, 0x6, 0x20000001], 0xd5d5c004, 0x8340})
ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f00000001c0)=@x86={0x9, 0x0, 0xb, 0x0, 0x5, 0x8, 0xe, 0x4, 0x9, 0x3c, 0x2, 0x2, 0x0, 0x6, 0x9, 0xd, 0x4, 0xc2, 0x98, '\x00', 0xbc, 0x901c835})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
ioctl$int_in(r3, 0x5421, &(0x7f0000000140)=0x1)
writev(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)
close(r3)
socket$nl_generic(0x10, 0x3, 0x10)
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0xc0ed0000, 0x0)

84.110392ms ago: executing program 5 (id=864):
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/profiling', 0x22042, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0xbfd1, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0)
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80000)
timer_create(0x7, 0x0, &(0x7f0000000040)=<r5=>0x0)
timer_settime(r5, 0x0, &(0x7f0000000100)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000140))
vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$sock_int(r6, 0x1, 0x12, 0x0, &(0x7f0000000240))
fcntl$setpipe(r4, 0x407, 0x2000000)
close(0x3)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000e, 0x204031, 0xffffffffffffffff, 0xd0c6f000)

75.006792ms ago: executing program 0 (id=865):
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000002c0)={0x0, 0x0, 0x80000, 0x0, <r4=>0xffffffffffffffff})
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x10001, 0xfffffe0000000005, 0xfa11, 0xffffffff}, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0)
unshare(0x8000000)
r5 = semget$private(0x0, 0x4000, 0x0)
r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341)
ioctl$USBDEVFS_CONNECTINFO(r6, 0x40085511, 0xffffffffffffffff)
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000300)={&(0x7f0000000240)=[0x0, 0x0], 0x2, 0x0, <r7=>0x0})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, r7], 0x5, 0x80000, 0x0, <r8=>0xffffffffffffffff})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
r10 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x41)
copy_file_range(r10, 0x0, r10, &(0x7f0000000080)=0xfffffffffffffff9, 0x1, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03080000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a09030000000000000000070000000900020073797a31000000000900010073797a300000000018000380140000800800034000000002050006405200000014000000110001"], 0xc8}}, 0x0)
bind$xdp(0xffffffffffffffff, &(0x7f0000000140)={0x2c, 0x2, 0x0, 0x39, r8}, 0x10)
semctl$SEM_INFO(r5, 0x0, 0x13, &(0x7f00000001c0)=""/68)
ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xc})
semctl$SETALL(0x0, 0x0, 0x14, 0x0)
ioctl$TCSETS(r0, 0x5402, 0x0)

0s ago: executing program 4 (id=866):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000080000000000000000095"], &(0x7f0000000100)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x6f, 0x48014)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x100000001, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x102001, 0x0)
r4 = ioctl$TIOCGPTPEER(r3, 0x5441, 0xb3d)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x1b)
r5 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x2}, 0x10}, 0x94)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x4e24, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xd)
ioctl$TCFLSH(r6, 0x5411, 0xffefff1f00000000)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r7 = fsopen(&(0x7f00000018c0)='binfmt_misc\x00', 0x1)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x6, 0x0, 0x0, 0x0)
close(r5)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
r9 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_INITMSG(r9, 0x84, 0x2, &(0x7f0000000000)={0x1, 0x40, 0xee6a, 0x6}, 0x8)
connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e)

kernel console output (not intermixed with test programs):

ead failed, block=256, location=256
[  206.762094][ T8044] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[  206.801707][   T48] usb 4-1: device descriptor read/64, error -32
[  206.816294][ T8044] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[  206.891946][ T8044] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[  206.922091][   T48] usb usb4-port1: attempt power cycle
[  206.944851][ T8044] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1)
[  207.325158][ T7662] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  207.475681][   T48] usb 4-1: new full-speed USB device number 21 using dummy_hcd
[  207.519958][   T48] usb 4-1: device descriptor read/8, error -32
[  207.551824][ T7662] usb 3-1: Using ep0 maxpacket: 16
[  207.563366][ T7662] usb 3-1: unable to get BOS descriptor or descriptor too short
[  207.573835][ T7662] usb 3-1: config 255 has an invalid interface number: 7 but max is 0
[  207.582358][ T7662] usb 3-1: config 255 has no interface number 0
[  207.588837][ T7662] usb 3-1: config 255 interface 7 altsetting 78 bulk endpoint 0x3 has invalid maxpacket 1024
[  207.642003][   T48] raw-gadget.1 gadget.3: failed to queue suspend event
[  207.650495][   T48] raw-gadget.1 gadget.3: failed to queue reset event
[  207.929368][ T7662] usb 3-1: config 255 interface 7 has no altsetting 0
[  207.958406][ T7662] usb 3-1: New USB device found, idVendor=06e0, idProduct=0319, bcdDevice=1f.59
[  207.983781][   T48] raw-gadget.1 gadget.3: failed to queue resume event
[  207.992923][ T7662] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.013214][ T7662] usb 3-1: Product: syz
[  208.028925][ T7662] usb 3-1: Manufacturer: syz
[  208.039852][ T7662] usb 3-1: SerialNumber: syz
[  208.062286][   T48] usb 4-1: new full-speed USB device number 22 using dummy_hcd
[  208.081883][ T8064] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  208.112219][    C1] raw-gadget.1 gadget.3: ignoring, device is not running
[  208.119445][   T48] usb 4-1: device descriptor read/8, error -32
[  208.250292][   T30] audit: type=1400 audit(1766556426.678:503): avc:  denied  { append } for  pid=8083 comm="syz.4.477" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  208.273973][ T8088] random: crng reseeded on system resumption
[  208.275870][   T48] raw-gadget.1 gadget.3: failed to queue suspend event
[  208.292126][   T48] usb usb4-port1: unable to enumerate USB device
[  208.304514][ T7662] ti_usb_3410_5052 3-1:255.7: TI USB 3410 1 port adapter converter detected
[  208.318292][ T7662] ti_usb_3410_5052 3-1:255.7: missing endpoints
[  208.337361][ T7662] usb 3-1: USB disconnect, device number 19
[  208.417241][   T30] audit: type=1400 audit(1766556426.848:504): avc:  denied  { ioctl } for  pid=8091 comm="syz.0.481" path="socket:[19235]" dev="sockfs" ino=19235 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  208.441705][ T8094] warning: `syz.0.481' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  208.531703][ T5927] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  208.682988][ T5927] usb 2-1: Using ep0 maxpacket: 32
[  209.131992][ T5927] usb 2-1: config index 0 descriptor too short (expected 9, got 0)
[  209.140087][ T5927] usb 2-1: can't read configurations, error -22
[  209.237812][ T8109] dlm: no locking on control device
[  209.245067][   T30] audit: type=1400 audit(1766556427.688:505): avc:  denied  { setopt } for  pid=8108 comm="syz.2.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  209.292419][ T5927] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  209.452058][ T5927] usb 2-1: Using ep0 maxpacket: 32
[  209.460254][ T5927] usb 2-1: config index 0 descriptor too short (expected 9, got 0)
[  209.487710][ T5927] usb 2-1: can't read configurations, error -22
[  209.500891][ T5927] usb usb2-port1: attempt power cycle
[  210.248350][ T5897] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  210.311746][ T5927] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  210.342377][ T5927] usb 2-1: Using ep0 maxpacket: 32
[  210.350948][ T5927] usb 2-1: config index 0 descriptor too short (expected 9, got 0)
[  210.360735][ T5927] usb 2-1: can't read configurations, error -22
[  210.421975][ T5897] usb 1-1: Using ep0 maxpacket: 16
[  210.428486][ T5897] usb 1-1: config 3 has an invalid interface number: 155 but max is 0
[  210.436748][ T5897] usb 1-1: config 3 has an invalid interface association descriptor of length 3, skipping
[  210.447212][ T5897] usb 1-1: config 3 has an invalid descriptor of length 102, skipping remainder of the config
[  210.457860][ T5897] usb 1-1: config 3 has no interface number 0
[  210.464161][ T5897] usb 1-1: config 3 interface 155 has no altsetting 0
[  210.526363][ T5927] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  210.536069][ T5897] usb 1-1: New USB device found, idVendor=05a9, idProduct=264a, bcdDevice=e5.4c
[  210.545566][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.553764][ T5897] usb 1-1: Product: syz
[  210.558221][ T5927] usb 2-1: Using ep0 maxpacket: 32
[  210.565870][ T5897] usb 1-1: Manufacturer: syz
[  210.570593][ T5897] usb 1-1: SerialNumber: syz
[  210.576772][ T5927] usb 2-1: config index 0 descriptor too short (expected 9, got 0)
[  210.590657][ T5927] usb 2-1: can't read configurations, error -22
[  210.597816][ T5927] usb usb2-port1: unable to enumerate USB device
[  210.611817][   T48] usb 3-1: new full-speed USB device number 20 using dummy_hcd
[  210.710599][   T30] audit: type=1400 audit(1766556429.138:506): avc:  denied  { read } for  pid=8133 comm="syz.4.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  210.783172][   T48] usb 3-1: config 0 has no interfaces?
[  210.790512][   T48] usb 3-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=94.47
[  210.797359][ T5897] uvcvideo 1-1:3.155: probe with driver uvcvideo failed with error -22
[  210.799826][   T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.820341][   T48] usb 3-1: Product: syz
[  210.824602][   T48] usb 3-1: Manufacturer: syz
[  210.829336][   T48] usb 3-1: SerialNumber: syz
[  210.838053][ T5897] usb 1-1: USB disconnect, device number 22
[  210.848380][   T48] usb 3-1: config 0 descriptor??
[  211.064369][ T8129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  211.073698][ T8129] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  211.084014][ T5897] usb 3-1: USB disconnect, device number 20
[  211.706426][ T8145] random: crng reseeded on system resumption
[  214.848261][ T5897] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  215.013205][ T5897] usb 2-1: device descriptor read/all, error -71
[  215.147884][   T30] audit: type=1400 audit(1766556433.578:507): avc:  denied  { map } for  pid=8154 comm="syz.2.498" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  215.172063][   T30] audit: type=1400 audit(1766556433.578:508): avc:  denied  { execute } for  pid=8154 comm="syz.2.498" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  215.271672][    T9] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  215.411020][ T5822] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  215.420702][ T5822] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  215.428571][ T5822] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  215.437423][ T5822] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  215.445296][ T5822] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  215.453942][    T9] usb 1-1: Using ep0 maxpacket: 32
[  215.462752][    T9] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  215.498524][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.525978][    T9] usb 1-1: config 0 descriptor??
[  216.247385][ T8169] infiniband syz2: set down
[  216.270136][ T8169] infiniband syz2: added ipvlan0
[  216.613610][   T30] audit: type=1400 audit(1766556434.688:509): avc:  denied  { create } for  pid=8163 comm="syz.4.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  216.633209][    T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  216.653146][    T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  216.665348][    T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  218.283276][ T8169] RDS/IB: syz2: added
[  218.287796][ T8169] smc: adding ib device syz2 with port count 1
[  218.294130][ T8169] smc:    ib device syz2 port 1 has no pnetid
[  218.308960][ T5822] Bluetooth: hci5: command tx timeout
[  218.312974][    T9] usb 1-1: media controller created
[  218.976417][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  219.118899][    T9] az6027: usb out operation failed. (-71)
[  219.163489][    T9] az6027: usb out operation failed. (-71)
[  219.169256][    T9] stb0899_attach: Driver disabled by Kconfig
[  219.631129][    T9] az6027: no front-end attached
[  219.631129][    T9] 
[  219.653744][    T9] az6027: usb out operation failed. (-71)
[  219.659516][    T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  219.705368][    T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input21
[  219.722105][ T8192] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  219.767686][    T9] dvb-usb: schedule remote query interval to 400 msecs.
[  219.778477][ T8166] chnl_net:caif_netlink_parms(): no params data found
[  219.785817][    T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  219.820238][    T9] usb 1-1: USB disconnect, device number 23
[  219.984457][    T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  220.083544][ T8166] bridge0: port 1(bridge_slave_0) entered blocking state
[  220.093367][ T8166] bridge0: port 1(bridge_slave_0) entered disabled state
[  220.102681][ T8166] bridge_slave_0: entered allmulticast mode
[  220.151819][ T8166] bridge_slave_0: entered promiscuous mode
[  220.270794][ T8166] bridge0: port 2(bridge_slave_1) entered blocking state
[  220.322462][ T8166] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.331659][ T5822] Bluetooth: hci5: command tx timeout
[  220.441430][ T8166] bridge_slave_1: entered allmulticast mode
[  220.467696][ T8166] bridge_slave_1: entered promiscuous mode
[  220.560153][ T8166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  220.584717][ T8166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  220.717733][ T8166] team0: Port device team_slave_0 added
[  221.154340][ T8166] team0: Port device team_slave_1 added
[  221.212662][ T8166] batman_adv: batadv0: Adding interface: batadv_slave_0
[  221.231756][ T8166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  221.231786][ T8166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  221.237248][ T8166] batman_adv: batadv0: Adding interface: batadv_slave_1
[  221.237260][ T8166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  221.237276][ T8166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  221.490146][ T8230] netlink: 'syz.4.513': attribute type 4 has an invalid length.
[  221.503753][ T8166] hsr_slave_0: entered promiscuous mode
[  221.509909][ T8166] hsr_slave_1: entered promiscuous mode
[  221.521281][ T8166] debugfs: 'hsr0' already exists in 'hsr'
[  222.411671][ T5822] Bluetooth: hci5: command tx timeout
[  222.412248][ T8166] Cannot create hsr debugfs directory
[  222.554597][   T48] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  222.708442][ T8166] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  222.725947][   T48] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  222.733227][ T8166] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  222.754228][ T8166] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  222.774233][ T8166] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  222.793739][   T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.806989][   T48] usb 3-1: Product: syz
[  222.813217][   T48] usb 3-1: Manufacturer: syz
[  222.818156][   T48] usb 3-1: SerialNumber: syz
[  222.862162][   T48] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  222.908266][ T6175] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  222.955598][ T8166] 8021q: adding VLAN 0 to HW filter on device bond0
[  223.010389][ T8166] 8021q: adding VLAN 0 to HW filter on device team0
[  223.038802][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[  223.045970][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[  223.065788][ T7370] bridge0: port 2(bridge_slave_1) entered blocking state
[  223.072923][ T7370] bridge0: port 2(bridge_slave_1) entered forwarding state
[  223.365304][ T8166] 8021q: adding VLAN 0 to HW filter on device batadv0
[  223.454026][ T5897] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  223.621791][ T5897] usb 1-1: Using ep0 maxpacket: 8
[  223.636771][ T8258] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=8258 comm=syz.4.517
[  223.670607][ T5897] usb 1-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[  223.691707][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.720112][ T5897] usb 1-1: Product: syz
[  223.731277][ T5897] usb 1-1: Manufacturer: syz
[  223.742779][ T5897] usb 1-1: SerialNumber: syz
[  223.761829][ T5897] usb 1-1: config 0 descriptor??
[  223.787133][ T5897] gspca_main: sonixj-2.14.0 probing 0c45:613e
[  223.886790][ T8166] veth0_vlan: entered promiscuous mode
[  223.900709][ T8166] veth1_vlan: entered promiscuous mode
[  223.950150][ T8166] veth0_macvtap: entered promiscuous mode
[  223.961151][ T8166] veth1_macvtap: entered promiscuous mode
[  223.967430][    T9] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  224.004975][ T8166] batman_adv: batadv0: Interface activated: batadv_slave_0
[  224.027700][ T8166] batman_adv: batadv0: Interface activated: batadv_slave_1
[  224.046278][   T60] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  224.066155][   T60] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  224.111739][    T9] usb 5-1: device descriptor read/64, error -71
[  224.182606][ T6175] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[  224.189637][ T6175] ath9k_htc: Failed to initialize the device
[  224.199438][   T48] usb 3-1: USB disconnect, device number 21
[  224.205527][   T60] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  224.205570][   T60] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  224.256216][   T48] usb 3-1: ath9k_htc: USB layer deinitialized
[  224.320344][ T6922] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  224.341361][ T6922] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  224.352555][    T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  224.377010][ T1313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  224.386680][ T1313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  224.492110][    T9] usb 5-1: device descriptor read/64, error -71
[  224.501742][ T5822] Bluetooth: hci5: command tx timeout
[  224.601990][    T9] usb usb5-port1: attempt power cycle
[  224.614140][ T8265] netlink: 7064 bytes leftover after parsing attributes in process `syz.5.500'.
[  224.698005][ T8267] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=8267 comm=syz.1.518
[  224.992058][    T9] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  225.012793][    T9] usb 5-1: device descriptor read/8, error -71
[  225.181021][   T48] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  225.251665][    T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  225.272291][    T9] usb 5-1: device descriptor read/8, error -71
[  225.340554][   T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  225.391925][   T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  225.393009][    T9] usb usb5-port1: unable to enumerate USB device
[  225.402349][   T48] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  225.429953][   T48] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  225.441777][ T6176] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  225.451936][   T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.463936][   T48] usb 2-1: config 0 descriptor??
[  225.604612][ T6176] usb 3-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b
[  225.614497][ T6176] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.623237][ T6176] usb 3-1: Product: syz
[  225.627486][ T6176] usb 3-1: Manufacturer: syz
[  225.633079][ T5897] gspca_sonixj: reg_r err -71
[  225.643933][ T6176] usb 3-1: SerialNumber: syz
[  225.645920][ T5897] sonixj 1-1:0.0: probe with driver sonixj failed with error -71
[  225.663937][ T5897] usb 1-1: USB disconnect, device number 24
[  225.811681][ T6175] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  225.870461][ T6176] gspca_main: pac207-2.14.0 probing 093a:2476
[  225.951751][ T6175] usb 6-1: device descriptor read/64, error -71
[  225.983524][ T6176] gspca_pac207: Failed to read a register (index 0x0000, error -110)
[  225.993384][ T6176] uvcvideo 3-1:13.0: Found UVC 0.00 device syz (093a:2476)
[  226.000646][ T6176] uvcvideo 3-1:13.0: No valid video chain found.
[  226.052594][   T48] usbhid 2-1:0.0: can't add hid device: -71
[  226.059003][   T48] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  226.069896][   T48] usb 2-1: USB disconnect, device number 32
[  226.201875][ T6175] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  226.421693][ T6175] usb 6-1: device descriptor read/64, error -71
[  226.542631][ T6175] usb usb6-port1: attempt power cycle
[  227.716380][ T6175] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  227.774864][ T6175] usb 6-1: device descriptor read/8, error -71
[  227.925608][   T30] audit: type=1400 audit(1766556446.348:510): avc:  denied  { connect } for  pid=8297 comm="syz.0.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  227.982236][   T30] audit: type=1400 audit(1766556446.408:511): avc:  denied  { write } for  pid=8297 comm="syz.0.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  228.024279][ T6175] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  228.024407][   T89] usb 3-1: USB disconnect, device number 22
[  228.212071][ T6175] usb 6-1: device descriptor read/8, error -71
[  228.339844][ T6175] usb usb6-port1: unable to enumerate USB device
[  228.701726][   T89] usb 3-1: new full-speed USB device number 23 using dummy_hcd
[  228.903112][   T89] usb 3-1: not running at top speed; connect to a high speed hub
[  228.943314][   T89] usb 3-1: config 95 has an invalid interface number: 1 but max is 0
[  228.966012][   T89] usb 3-1: config 95 has no interface number 0
[  228.977534][   T89] usb 3-1: config 95 interface 1 has no altsetting 0
[  228.998487][   T89] usb 3-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f
[  229.018901][   T89] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.071644][   T89] usb 3-1: Product: syz
[  229.075851][   T89] usb 3-1: Manufacturer: syz
[  229.090664][   T89] usb 3-1: SerialNumber: syz
[  229.250040][ T8317] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  229.261660][ T8317] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512
[  229.271872][ T8317] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  229.279540][ T8317] UDF-fs: Scanning with blocksize 512 failed
[  229.296717][ T8317] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  229.310511][ T8317] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512
[  229.326462][ T8317] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  229.334449][ T8317] UDF-fs: Scanning with blocksize 1024 failed
[  229.348393][ T8317] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  229.358845][ T8317] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512
[  229.368554][ T8317] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  229.376377][ T8317] UDF-fs: Scanning with blocksize 2048 failed
[  229.388494][ T8317] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  229.398989][ T8317] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512
[  229.408876][ T8317] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  229.417276][ T8317] UDF-fs: Scanning with blocksize 4096 failed
[  229.423503][ T8317] UDF-fs: warning (device loop5): udf_fill_super: No partition found (1)
[  229.599791][   T30] audit: type=1400 audit(1766556448.028:512): avc:  denied  { ioctl } for  pid=8318 comm="syz.1.533" path="socket:[19797]" dev="sockfs" ino=19797 ioctlcmd=0x7211 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  229.968224][   T30] audit: type=1400 audit(1766556448.398:513): avc:  denied  { listen } for  pid=8334 comm="syz.5.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  229.968518][ T8335] netlink: 24 bytes leftover after parsing attributes in process `syz.5.538'.
[  230.011986][ T7662] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  230.181919][ T7662] usb 5-1: Using ep0 maxpacket: 8
[  230.257839][ T6176] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  232.925066][ T6176] usb 1-1: device descriptor read/64, error -71
[  232.986141][ T7662] usb 5-1: unable to read config index 0 descriptor/all
[  233.008196][ T7662] usb 5-1: can't read configurations, error -71
[  233.103604][   T89] usb 3-1: USB disconnect, device number 23
[  233.261082][   T30] audit: type=1400 audit(1766556451.688:514): avc:  denied  { bind } for  pid=8350 comm="syz.0.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  233.338021][   T30] audit: type=1400 audit(1766556451.718:515): avc:  denied  { write } for  pid=8348 comm="syz.4.542" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  233.365627][   T30] audit: type=1400 audit(1766556451.718:516): avc:  denied  { open } for  pid=8348 comm="syz.4.542" path="/19/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  233.417605][   T30] audit: type=1400 audit(1766556451.718:517): avc:  denied  { ioctl } for  pid=8348 comm="syz.4.542" path="/19/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  233.448888][ T8356] netlink: 20 bytes leftover after parsing attributes in process `syz.1.544'.
[  234.022391][   T89] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  234.101732][ T6176] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  234.173030][   T89] usb 2-1: Using ep0 maxpacket: 8
[  234.184483][   T89] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  234.196273][   T89] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  234.206867][   T89] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  234.224923][   T89] usb 2-1: config 0 descriptor??
[  234.233675][   T89] iowarrior 2-1:0.0: no interrupt-in endpoint found
[  234.251864][ T6176] usb 1-1: Using ep0 maxpacket: 32
[  234.258585][ T6176] usb 1-1: config index 0 descriptor too short (expected 6683, got 27)
[  234.267461][ T6176] usb 1-1: config 0 has an invalid interface number: 85 but max is 0
[  234.275938][ T6176] usb 1-1: config 0 has no interface number 0
[  234.283406][ T6176] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  234.294534][ T6176] usb 1-1: config 0 interface 85 has no altsetting 0
[  234.303354][ T6176] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  234.312498][ T6176] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.320869][ T6176] usb 1-1: Product: syz
[  234.326044][ T6176] usb 1-1: Manufacturer: syz
[  234.330870][ T6176] usb 1-1: SerialNumber: syz
[  234.374386][ T6176] usb 1-1: config 0 descriptor??
[  234.420198][ T8377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  234.438214][ T8377] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  234.447403][   T30] audit: type=1400 audit(1766556452.878:518): avc:  denied  { append } for  pid=8364 comm="syz.1.548" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  234.471956][ T7662] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  234.483944][ T8365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.548'.
[  234.497377][ T6175] usb 2-1: USB disconnect, device number 33
[  234.641719][ T7662] usb 6-1: Using ep0 maxpacket: 8
[  234.650335][ T7662] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[  234.659650][ T7662] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.667753][   T24] usb 5-1: new full-speed USB device number 31 using dummy_hcd
[  234.675369][ T7662] usb 6-1: Product: syz
[  234.679517][ T7662] usb 6-1: Manufacturer: syz
[  234.684893][ T7662] usb 6-1: SerialNumber: syz
[  234.692764][ T7662] usb 6-1: config 0 descriptor??
[  234.699878][ T7662] gspca_main: sonixj-2.14.0 probing 0c45:613e
[  234.843276][   T24] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  234.853922][   T24] usb 5-1: config 8 has 0 interfaces, different from the descriptor's value: 1
[  234.862946][   T24] usb 5-1: New USB device found, idVendor=046d, idProduct=08b8, bcdDevice=fb.bc
[  234.872129][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  234.999354][ T6176] appletouch 1-1:0.85: Geyser mode initialized.
[  235.007097][ T6176] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input22
[  235.144045][   T30] audit: type=1400 audit(1766556453.578:519): avc:  denied  { ioctl } for  pid=8376 comm="syz.4.553" path="/dev/input/mouse0" dev="devtmpfs" ino=923 ioctlcmd=0x2101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  235.197844][   T30] audit: type=1400 audit(1766556453.628:520): avc:  denied  { write } for  pid=8382 comm="syz.1.554" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  235.222686][   T30] audit: type=1400 audit(1766556453.638:521): avc:  denied  { ioctl } for  pid=8382 comm="syz.1.554" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  235.261053][ T8363] netlink: 24 bytes leftover after parsing attributes in process `syz.0.547'.
[  235.262291][ T8386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.554'.
[  235.283987][ T6176] usb 1-1: USB disconnect, device number 26
[  235.368917][ T6176] appletouch 1-1:0.85: input: appletouch disconnected
[  235.631858][   T89] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  235.691735][ T6175] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  235.782899][   T89] usb 3-1: config index 0 descriptor too short (expected 45, got 36)
[  235.791169][   T89] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  235.803130][   T89] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  235.814286][   T89] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  235.826170][   T89] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  235.840544][   T89] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  235.850031][   T89] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.866828][ T6175] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  235.867618][   T89] usb 3-1: config 0 descriptor??
[  235.877165][ T6175] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  235.889765][ T8389] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  235.893439][ T6175] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  235.914988][ T6175] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  235.925128][ T6175] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  235.934800][ T6175] usb 2-1: Product: syz
[  235.939060][ T6175] usb 2-1: Manufacturer: syz
[  235.945193][ T6175] usb 2-1: SerialNumber: syz
[  236.289902][ T6175] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 34 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  236.372047][ T7662] gspca_sonixj: i2c_w8 err -71
[  236.383572][   T89] plantronics 0003:047F:FFFF.000F: reserved main item tag 0xd
[  236.413586][ T7662] sonixj 6-1:0.0: probe with driver sonixj failed with error -71
[  236.433757][ T7662] usb 6-1: USB disconnect, device number 6
[  236.468205][   T89] plantronics 0003:047F:FFFF.000F: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  237.618213][   T30] audit: type=1400 audit(1766556455.488:522): avc:  denied  { map } for  pid=8399 comm="syz.0.560" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  237.652743][ T8403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  237.661829][ T8403] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  237.774734][   T30] audit: type=1400 audit(1766556456.208:523): avc:  denied  { read } for  pid=8390 comm="syz.1.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  237.821944][   T24] usb 5-1: string descriptor 0 read error: -71
[  237.870314][ T6006] usb 3-1: USB disconnect, device number 24
[  237.871506][   T24] usb 5-1: USB disconnect, device number 31
[  237.890510][ T8410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  237.922376][ T8410] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  238.081084][ T8413] netlink: 'syz.4.563': attribute type 1 has an invalid length.
[  238.146284][ T8415] overlay: Unknown parameter '/'
[  238.154813][ T8413] 8021q: adding VLAN 0 to HW filter on device bond1
[  238.191411][ T8417] bond1: (slave geneve2): making interface the new active one
[  238.221359][ T8417] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  238.246354][ T8413] netlink: 4 bytes leftover after parsing attributes in process `syz.4.563'.
[  238.353842][ T8420] usb usb1: usbfs: process 8420 (syz.4.565) did not claim interface 0 before use
[  238.367393][ T7662] IPVS: starting estimator thread 0...
[  238.541705][   T30] kauditd_printk_skb: 3 callbacks suppressed
[  238.541726][   T30] audit: type=1400 audit(1766556456.958:527): avc:  denied  { listen } for  pid=8422 comm="syz.5.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  238.567778][ T8421] IPVS: using max 42 ests per chain, 100800 per kthread
[  238.575391][ T5822] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201'
[  238.585367][ T5822] CPU: 0 UID: 0 PID: 5822 Comm: kworker/u9:3 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  238.585402][ T5822] Tainted: [L]=SOFTLOCKUP
[  238.585409][ T5822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  238.585424][ T5822] Workqueue: hci5 hci_rx_work
[  238.585454][ T5822] Call Trace:
[  238.585462][ T5822]  <TASK>
[  238.585477][ T5822]  dump_stack_lvl+0x16c/0x1f0
[  238.585510][ T5822]  sysfs_warn_dup+0x7f/0xa0
[  238.585538][ T5822]  sysfs_create_dir_ns+0x24b/0x2b0
[  238.585560][ T5822]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  238.585583][ T5822]  ? find_held_lock+0x2b/0x80
[  238.585621][ T5822]  ? do_raw_spin_unlock+0x172/0x230
[  238.585650][ T5822]  kobject_add_internal+0x2c4/0x9d0
[  238.585683][ T5822]  kobject_add+0x16e/0x240
[  238.585711][ T5822]  ? __pfx_kobject_add+0x10/0x10
[  238.585740][ T5822]  ? kobject_put+0xaf/0x6f0
[  238.585764][ T5822]  ? _raw_spin_unlock+0x28/0x50
[  238.585794][ T5822]  device_add+0x288/0x1980
[  238.585818][ T5822]  ? __pfx_dev_set_name+0x10/0x10
[  238.585843][ T5822]  ? __pfx_device_add+0x10/0x10
[  238.585867][ T5822]  ? mgmt_send_event_skb+0x2fb/0x460
[  238.585896][ T5822]  hci_conn_add_sysfs+0x1a8/0x260
[  238.585923][ T5822]  le_conn_complete_evt+0x11ed/0x1fa0
[  238.585953][ T5822]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  238.585982][ T5822]  hci_le_conn_complete_evt+0x23c/0x3a0
[  238.586010][ T5822]  hci_le_meta_evt+0x357/0x610
[  238.586033][ T5822]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  238.586062][ T5822]  hci_event_packet+0x685/0x1210
[  238.586084][ T5822]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  238.586107][ T5822]  ? __pfx_hci_event_packet+0x10/0x10
[  238.586131][ T5822]  ? kcov_remote_start+0x399/0x680
[  238.586153][ T5822]  ? lockdep_hardirqs_on+0x7c/0x110
[  238.586184][ T5822]  hci_rx_work+0x2c9/0x1020
[  238.586209][ T5822]  process_one_work+0x9ba/0x1b20
[  238.586248][ T5822]  ? __pfx_process_one_work+0x10/0x10
[  238.586280][ T5822]  ? assign_work+0x1a0/0x250
[  238.586307][ T5822]  worker_thread+0x6c8/0xf10
[  238.586344][ T5822]  ? __kthread_parkme+0x19e/0x250
[  238.586364][ T5822]  ? __pfx_worker_thread+0x10/0x10
[  238.586388][ T5822]  kthread+0x3c5/0x780
[  238.586412][ T5822]  ? __pfx_kthread+0x10/0x10
[  238.586450][ T5822]  ? rcu_is_watching+0x12/0xc0
[  238.586471][ T5822]  ? __pfx_kthread+0x10/0x10
[  238.586501][ T5822]  ret_from_fork+0x983/0xb10
[  238.586527][ T5822]  ? __pfx_ret_from_fork+0x10/0x10
[  238.586551][ T5822]  ? rcu_is_watching+0x12/0xc0
[  238.586571][ T5822]  ? __switch_to+0x7af/0x10d0
[  238.586598][ T5822]  ? __pfx_kthread+0x10/0x10
[  238.586621][ T5822]  ret_from_fork_asm+0x1a/0x30
[  238.586665][ T5822]  </TASK>
[  238.586756][ T5822] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  238.631845][ T8419] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  238.637292][ T5822] Bluetooth: hci5: failed to register connection device
[  239.386221][ T6131] usb 2-1: USB disconnect, device number 34
[  239.437577][ T8432] CUSE: info not properly terminated
[  239.463147][ T6131] usblp0: removed
[  239.582294][   T30] audit: type=1400 audit(1766556457.958:528): avc:  denied  { connect } for  pid=8425 comm="syz.2.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  239.741685][    T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  239.795076][ T8443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.562'.
[  239.846297][   T30] audit: type=1400 audit(1766556458.228:529): avc:  denied  { shutdown } for  pid=8435 comm="syz.0.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  239.866593][   T30] audit: type=1400 audit(1766556458.228:530): avc:  denied  { getopt } for  pid=8435 comm="syz.0.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  239.903500][    T9] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  239.959896][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.011691][ T8344] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  240.128034][ T6131] usb 2-1: new full-speed USB device number 35 using dummy_hcd
[  240.149542][    T9] usb 6-1: config 0 descriptor??
[  240.164726][    T9] cp210x 6-1:0.0: cp210x converter detected
[  240.281734][ T8344] usb 5-1: Using ep0 maxpacket: 8
[  240.288757][ T6131] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  240.288790][ T8344] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  240.309755][ T6131] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  240.341736][ T7662] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  240.362339][ T6131] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  240.362560][    T9] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -121
[  240.371417][ T6131] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.453871][ T6131] usb 2-1: config 0 descriptor??
[  240.470330][ T8344] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x4B, changing to 0xB
[  240.473070][ T6131] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  240.494085][ T6131] dvb-usb: bulk message failed: -22 (3/0)
[  240.504149][ T8344] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7
[  240.525261][ T7662] usb 1-1: config index 0 descriptor too short (expected 28277, got 36)
[  240.533898][ T7662] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  240.543869][    T9] cp210x 6-1:0.0: querying part number failed
[  240.546382][ T6131] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  240.553153][ T8344] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  240.562055][ T7662] usb 1-1: config 0 has no interfaces?
[  240.582479][    T9] usb 6-1: cp210x converter now attached to ttyUSB0
[  240.585090][ T8434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  240.603466][ T6131] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  240.612073][ T7662] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  240.621705][ T6131] usb 2-1: media controller created
[  240.627397][ T8434] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  240.636761][ T6131] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  240.646877][ T7662] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.668274][ T8344] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  240.688016][ T7662] usb 1-1: config 0 descriptor??
[  240.693059][ T8344] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.694668][ T6131] dvb-usb: bulk message failed: -22 (6/0)
[  240.740922][ T8344] usb 5-1: Product: syz
[  240.751924][ T6131] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  240.756578][ T8344] usb 5-1: Manufacturer: syz
[  240.781364][ T8344] usb 5-1: SerialNumber: syz
[  240.781879][ T6131] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input24
[  240.807240][ T8344] usb 5-1: config 0 descriptor??
[  240.833152][ T6131] dvb-usb: schedule remote query interval to 150 msecs.
[  240.848694][ T6131] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  240.894633][ T6131] usb 2-1: USB disconnect, device number 35
[  240.954321][ T6131] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  241.681704][ T5927] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  241.811708][ T5927] usb 3-1: device descriptor read/64, error -71
[  242.071807][ T5927] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  242.201815][ T5927] usb 3-1: device descriptor read/64, error -71
[  242.392947][ T5927] usb usb3-port1: attempt power cycle
[  242.782568][ T7662] usb 5-1: USB disconnect, device number 32
[  242.900507][ T8344] usb 1-1: USB disconnect, device number 27
[  243.081988][ T5927] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  243.112468][ T5927] usb 3-1: device descriptor read/8, error -71
[  243.253670][ T7662] usb 6-1: USB disconnect, device number 7
[  243.270532][ T7662] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  243.289572][ T7662] cp210x 6-1:0.0: device disconnected
[  243.361679][ T5927] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  243.382507][ T5927] usb 3-1: device descriptor read/8, error -71
[  243.462070][ T8344] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  243.503574][ T5927] usb usb3-port1: unable to enumerate USB device
[  243.621720][ T8344] usb 2-1: Using ep0 maxpacket: 16
[  243.629679][ T8344] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  243.642946][ T8344] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  243.653135][ T8344] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  243.666412][ T8344] usb 2-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  243.684273][ T8344] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  243.694192][ T8344] usb 2-1: config 0 descriptor??
[  244.275943][ T8483] netlink: 'syz.4.579': attribute type 1 has an invalid length.
[  244.288305][   T30] audit: type=1400 audit(1766556462.718:531): avc:  denied  { write } for  pid=8476 comm="syz.1.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  244.371780][   T89] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  245.199114][   T89] usb 6-1: device descriptor read/64, error -71
[  245.244454][ T8502] rdma_op ffff8880309829f0 conn xmit_rdma 0000000000000000
[  245.531684][ T7662] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  245.541937][   T89] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  245.686313][   T89] usb 6-1: device descriptor read/64, error -71
[  245.703592][ T7662] usb 3-1: Using ep0 maxpacket: 8
[  245.740111][ T7662] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  245.783913][ T7662] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  245.826389][ T7662] usb 3-1: Product: syz
[  245.826498][   T89] usb usb6-port1: attempt power cycle
[  245.831943][ T7662] usb 3-1: Manufacturer: syz
[  245.868519][ T7662] usb 3-1: SerialNumber: syz
[  245.988258][ T7662] usb 3-1: config 0 descriptor??
[  246.183165][ T8513] batadv_slave_0: entered promiscuous mode
[  246.191241][ T8513] batman_adv: batadv0: Adding interface: macsec1
[  246.198280][ T8513] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  246.207489][ T7662] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  246.224456][ T8513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  246.244193][ T8513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  246.256390][ T8513] batman_adv: batadv0: Interface activated: macsec1
[  246.334650][   T89] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  246.373381][   T89] usb 6-1: device descriptor read/8, error -71
[  246.479320][ T8344] usbhid 2-1:0.0: can't add hid device: -71
[  246.525718][ T8344] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  246.541327][ T8344] usb 2-1: USB disconnect, device number 36
[  246.609604][   T30] audit: type=1400 audit(1766556465.038:532): avc:  denied  { ioctl } for  pid=8523 comm="syz.0.590" path="socket:[20447]" dev="sockfs" ino=20447 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  246.641726][   T89] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  246.683730][   T89] usb 6-1: device descriptor read/8, error -71
[  246.935881][   T89] usb usb6-port1: unable to enumerate USB device
[  247.224814][ T7662] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  247.374135][ T7662] usb 3-1: USB disconnect, device number 29
[  247.457142][   T30] audit: type=1400 audit(1766556465.878:533): avc:  denied  { setopt } for  pid=8539 comm="syz.1.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  247.557447][   T30] audit: type=1400 audit(1766556465.988:534): avc:  denied  { ioctl } for  pid=8539 comm="syz.1.595" path="/dev/ptyq6" dev="devtmpfs" ino=125 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  247.740899][ T8550] dummy0: entered allmulticast mode
[  247.751674][   T89] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  247.760607][ T8550] dummy0: left allmulticast mode
[  247.891654][   T89] usb 6-1: device descriptor read/64, error -71
[  248.245645][    T9] usb 1-1: new full-speed USB device number 28 using dummy_hcd
[  248.395353][   T89] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  248.403975][    T9] usb 1-1: device descriptor read/64, error -71
[  248.811683][    T9] usb 1-1: new full-speed USB device number 29 using dummy_hcd
[  248.819301][   T89] usb 6-1: device descriptor read/64, error -71
[  248.931811][   T89] usb usb6-port1: attempt power cycle
[  248.961656][    T9] usb 1-1: device descriptor read/64, error -71
[  249.071898][ T5927] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  249.081914][    T9] usb usb1-port1: attempt power cycle
[  249.241765][ T5927] usb 3-1: Using ep0 maxpacket: 16
[  249.248702][ T5927] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  249.261607][   T30] audit: type=1400 audit(1766556467.688:535): avc:  denied  { create } for  pid=8563 comm="syz.1.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  249.287940][ T5927] usb 3-1: config 1 has no interface number 1
[  249.298088][   T89] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  249.311621][ T5927] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  249.324147][ T5927] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  249.337524][ T5927] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  249.342693][   T30] audit: type=1400 audit(1766556467.768:536): avc:  denied  { write } for  pid=8563 comm="syz.1.601" path="socket:[22608]" dev="sockfs" ino=22608 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  249.352843][ T5927] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  249.394017][   T89] usb 6-1: device descriptor read/8, error -71
[  249.425593][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  249.441603][ T5927] usb 3-1: Product: syz
[  249.445902][ T5927] usb 3-1: Manufacturer: syz
[  249.450491][ T5927] usb 3-1: SerialNumber: syz
[  249.455520][    T9] usb 1-1: new full-speed USB device number 30 using dummy_hcd
[  249.502000][    T9] usb 1-1: device descriptor read/8, error -71
[  249.663472][   T89] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  249.801000][    T9] usb 1-1: new full-speed USB device number 31 using dummy_hcd
[  249.835494][    T9] usb 1-1: device descriptor read/8, error -71
[  249.959300][   T89] usb 6-1: device descriptor read/8, error -71
[  249.969852][    T9] usb usb1-port1: unable to enumerate USB device
[  250.065481][ T5927] usb 3-1: 2:1 : format type 0 is detected, processed as PCM
[  250.093547][   T89] usb usb6-port1: unable to enumerate USB device
[  250.225161][ T8570] syzkaller1: entered promiscuous mode
[  250.230704][ T8570] syzkaller1: entered allmulticast mode
[  250.325857][   T30] audit: type=1400 audit(1766556468.758:537): avc:  denied  { ioctl } for  pid=8571 comm="syz.4.604" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x6109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  250.405790][   T30] audit: type=1400 audit(1766556468.838:538): avc:  denied  { getopt } for  pid=8571 comm="syz.4.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  250.405987][ T8573] netlink: 244 bytes leftover after parsing attributes in process `syz.4.604'.
[  250.469606][   T30] audit: type=1400 audit(1766556468.898:539): avc:  denied  { map } for  pid=8571 comm="syz.4.604" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  250.507906][ T6175] usb 1-1: new full-speed USB device number 32 using dummy_hcd
[  250.745886][ T6175] usb 1-1: device descriptor read/64, error -71
[  250.835772][ T8582] bond0: (slave ip6gretap1): making interface the new active one
[  250.844414][ T8582] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link
[  250.859654][ T8582] 8021q: adding VLAN 0 to HW filter on device bond0
[  250.868868][ T5927] usb 3-1: 2:1: cannot get freq at ep 0x82
[  250.909827][ T5927] usb 3-1: USB disconnect, device number 30
[  250.950971][ T8155] udevd[8155]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  251.041216][ T8587] netlink: 'syz.0.608': attribute type 1 has an invalid length.
[  251.077366][ T8587] 8021q: adding VLAN 0 to HW filter on device bond2
[  251.094743][ T8586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.608'.
[  251.148845][ T8586] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  251.178725][ T8586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.608'.
[  251.272954][ T8587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.608'.
[  251.501954][   T30] audit: type=1400 audit(1766556469.938:540): avc:  denied  { create } for  pid=8599 comm="syz.2.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  252.996778][ T8621] could not open pipe file descriptor
[  253.161700][ T6175] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  253.251836][   T89] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  253.325525][ T6175] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  253.359221][ T6175] usb 5-1: config 0 interface 0 has no altsetting 0
[  253.383732][ T6175] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  253.409788][ T6175] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  253.440730][ T6175] usb 5-1: Product: syz
[  253.440913][   T89] usb 3-1: Using ep0 maxpacket: 32
[  253.445324][ T6175] usb 5-1: Manufacturer: syz
[  253.475179][ T6175] usb 5-1: SerialNumber: syz
[  253.500407][   T89] usb 3-1: config 4 has an invalid interface number: 1 but max is 0
[  253.660987][ T6175] usb 5-1: config 0 descriptor??
[  253.765995][ T6175] usb 5-1: selecting invalid altsetting 0
[  253.782106][   T89] usb 3-1: config 4 has no interface number 0
[  253.791064][   T89] usb 3-1: New USB device found, idVendor=249c, idProduct=9006, bcdDevice=a4.ed
[  253.821683][   T89] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.857756][   T89] usb 3-1: can't set first interface for hiFace device.
[  253.903113][   T89] snd-usb-hiface 3-1:4.1: probe with driver snd-usb-hiface failed with error -5
[  253.972428][ T6175] usb 5-1: USB disconnect, device number 33
[  255.051339][   T30] audit: type=1400 audit(1766556473.478:541): avc:  denied  { setopt } for  pid=8638 comm="syz.1.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  255.137726][ T8650] kvm: pic: non byte read
[  255.482290][ T8650] kvm: pic: non byte read
[  255.536418][   T24] usb 3-1: USB disconnect, device number 31
[  255.571955][ T6175] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  256.140595][ T6175] usb 5-1: Using ep0 maxpacket: 32
[  256.285791][ T6175] usb 5-1: config 4 has an invalid interface number: 1 but max is 0
[  256.322069][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  256.353766][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  256.363288][   T30] audit: type=1400 audit(1766556474.258:542): avc:  denied  { bind } for  pid=8667 comm="syz.1.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  256.385024][ T6175] usb 5-1: config 4 has no interface number 0
[  256.391171][ T6175] usb 5-1: New USB device found, idVendor=249c, idProduct=9006, bcdDevice=a4.ed
[  256.402205][ T6175] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  256.592435][ T6175] usb 5-1: can't set first interface for hiFace device.
[  256.607398][ T6175] snd-usb-hiface 5-1:4.1: probe with driver snd-usb-hiface failed with error -5
[  256.988845][ T6175] usb 5-1: USB disconnect, device number 34
[  257.144843][   T30] audit: type=1400 audit(1766556475.498:543): avc:  denied  { create } for  pid=8681 comm="syz.2.630" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  257.178424][   T30] audit: type=1400 audit(1766556475.498:544): avc:  denied  { read write } for  pid=8681 comm="syz.2.630" name="file0" dev="tmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  257.231689][   T30] audit: type=1400 audit(1766556475.508:545): avc:  denied  { open } for  pid=8681 comm="syz.2.630" path="/135/file0" dev="tmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  257.373657][   T30] audit: type=1400 audit(1766556475.808:546): avc:  denied  { setopt } for  pid=8683 comm="syz.1.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  257.393598][ T8694] loop8: detected capacity change from 0 to 7
[  257.402642][ T8694]  loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2
[  257.411159][ T8694] loop8: partition table partially beyond EOD, truncated
[  257.441937][ T8694] loop8: p1 size 3651402975 extends beyond EOD, truncated
[  257.464020][ T8694] loop8: p2 start 956478 is beyond EOD, truncated
[  257.532835][   T24] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  257.681719][   T24] usb 6-1: Using ep0 maxpacket: 16
[  257.689105][   T24] usb 6-1: config 0 has an invalid interface number: 8 but max is 0
[  257.803272][   T24] usb 6-1: config 0 has no interface number 0
[  257.829265][   T24] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7
[  258.271515][   T24] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0
[  258.296388][   T24] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  258.338558][   T24] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  258.363632][   T24] usb 6-1: Product: syz
[  258.386276][   T24] usb 6-1: SerialNumber: syz
[  258.403042][   T24] usb 6-1: config 0 descriptor??
[  258.415858][   T24] cm109 6-1:0.8: invalid payload size 0, expected 4
[  258.427306][   T24] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input25
[  258.517124][   T30] audit: type=1400 audit(1766556476.948:547): avc:  denied  { create } for  pid=8703 comm="syz.2.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  258.875132][ T8707] ptrace attach of "./syz-executor exec"[8710] was attempted by "./syz-executor exec"[8707]
[  259.591957][ T8702] usb usb5: usbfs: process 8702 (syz.0.635) did not claim interface 0 before use
[  259.794632][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[  259.900273][ T8715] gtp0: entered promiscuous mode
[  259.905310][   T30] audit: type=1400 audit(1766556478.328:548): avc:  denied  { ioctl } for  pid=8713 comm="syz.1.638" path="socket:[22377]" dev="sockfs" ino=22377 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  260.016344][ T8722] overlayfs: upper fs does not support tmpfile.
[  260.042912][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[  260.051310][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[  260.058548][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[  260.065683][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[  260.073445][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[  260.080391][    C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  260.089712][   T24] usb 6-1: USB disconnect, device number 16
[  260.103583][   T24] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  260.156527][ T8729] netlink: 12 bytes leftover after parsing attributes in process `syz.4.641'.
[  260.229406][ T8729] random: crng reseeded on system resumption
[  260.423536][    T9] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  260.751673][    T9] usb 2-1: Using ep0 maxpacket: 8
[  260.759868][    T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  260.774346][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.810334][    T9] pvrusb2: Hardware description: Terratec Grabster AV400
[  260.846068][ T8734] ubi31: attaching mtd0
[  260.852004][ T8734] ubi31: scanning is finished
[  260.856695][ T8734] ubi31: empty MTD device detected
[  260.864938][    T9] pvrusb2: **********
[  260.874976][    T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  260.980935][    T9] pvrusb2: Important functionality might not be entirely working.
[  260.989293][    T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  261.151174][ T8734] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  261.159409][ T8734] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  261.166791][ T8734] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  261.173844][ T8734] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  261.181291][ T8734] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  261.188134][ T8734] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  261.196182][ T8734] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3257539707
[  261.206234][ T8734] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  261.312986][    T9] pvrusb2: **********
[  261.341136][ T2342] pvrusb2: Invalid write control endpoint
[  261.358423][ T8741] ubi31: background thread "ubi_bgt31d" started, PID 8741
[  261.558609][ T8722] pvrusb2: Invalid write control endpoint
[  261.597012][ T2342] pvrusb2: Invalid write control endpoint
[  261.603432][ T2342] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  261.615193][    T9] usb 2-1: USB disconnect, device number 37
[  261.668465][ T2342] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  261.706486][ T2342] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  261.751839][ T2342] pvrusb2: Device being rendered inoperable
[  261.788026][ T2342] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  261.811839][ T2342] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  261.831212][ T8749] input: syz1 as /devices/virtual/input/input26
[  261.885904][ T2342] pvrusb2: Attached sub-driver cx25840
[  261.900261][ T8750] 9pnet_fd: p9_fd_create_tcp (8750): problem connecting socket to 127.0.0.1
[  261.952998][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  261.992549][ T8750] 9pnet_fd: p9_fd_create_tcp (8750): problem connecting socket to 127.0.0.1
[  262.003370][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  262.024730][ T8750] 9pnet_fd: p9_fd_create_tcp (8750): problem connecting socket to 127.0.0.1
[  262.035270][ T8750] 9pnet_fd: p9_fd_create_tcp (8750): problem connecting socket to 127.0.0.1
[  262.044808][ T8750] 9pnet_fd: p9_fd_create_tcp (8750): problem connecting socket to 127.0.0.1
[  262.055044][ T8750] 9pnet_fd: p9_fd_create_tcp (8750): problem connecting socket to 127.0.0.1
[  262.128547][ T8750] 9pnet_fd: p9_fd_create_tcp (8750): problem connecting socket to 127.0.0.1
[  262.173845][ T8750] 9pnet_fd: p9_fd_create_tcp (8750): problem connecting socket to 127.0.0.1
[  262.183635][ T8750] 9pnet_fd: p9_fd_create_tcp (8750): problem connecting socket to 127.0.0.1
[  262.212679][ T8750] 9pnet_fd: p9_fd_create_tcp (8750): problem connecting socket to 127.0.0.1
[  262.267654][ T8757] input: syz0 as /devices/virtual/input/input27
[  262.284293][ T8750] 9pnet_fd: p9_fd_create_tcp (8750): problem connecting socket to 127.0.0.1
[  262.294854][ T8750] 9pnet_fd: p9_fd_create_tcp (8750): problem connecting socket to 127.0.0.1
[  262.305846][ T8758] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  262.390523][ T8750] 9pnet_fd: p9_fd_create_tcp (8750): problem connecting socket to 127.0.0.1
[  262.501896][   T24] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  262.634522][ T8766] fuse: Bad value for 'group_id'
[  262.651266][ T8750] 9pnet_fd: p9_fd_create_tcp (8750): problem connecting socket to 127.0.0.1
[  262.681322][   T24] usb 5-1: Using ep0 maxpacket: 32
[  262.688358][ T8766] fuse: Bad value for 'group_id'
[  262.694980][ T8750] 9pnet_fd: p9_fd_create_tcp (8750): problem connecting socket to 127.0.0.1
[  262.704508][   T24] usb 5-1: unable to get BOS descriptor or descriptor too short
[  262.713316][   T24] usb 5-1: config 128 has an invalid interface number: 127 but max is 3
[  262.723541][ T8750] 9pnet_fd: p9_fd_create_tcp (8750): problem connecting socket to 127.0.0.1
[  262.733048][   T24] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  262.753109][   T24] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4
[  262.765606][ T8750] 9pnet_fd: p9_fd_create_tcp (8750): problem connecting socket to 127.0.0.1
[  262.775405][   T24] usb 5-1: config 128 has no interface number 0
[  262.786147][   T24] usb 5-1: config 128 interface 127 altsetting 14 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  262.821886][ T8750] 9pnet_fd: p9_fd_create_tcp (8750): problem connecting socket to 127.0.0.1
[  262.840534][   T24] usb 5-1: config 128 interface 127 has no altsetting 0
[  262.857306][ T8750] 9pnet_fd: p9_fd_create_tcp (8750): problem connecting socket to 127.0.0.1
[  262.859930][ T8769] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  262.868789][   T24] usb 5-1: language id specifier not provided by device, defaulting to English
[  262.893562][   T24] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  262.913209][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=255
[  262.928360][ T8750] 9pnet_fd: p9_fd_create_tcp (8750): problem connecting socket to 127.0.0.1
[  262.937318][   T24] usb 5-1: Product: syz
[  262.942202][   T24] usb 5-1: Manufacturer: syz
[  262.954305][   T24] usb 5-1: SerialNumber: syz
[  262.984735][ T8755] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  263.069110][ T8775] netlink: 'syz.0.655': attribute type 9 has an invalid length.
[  263.189405][   T30] audit: type=1400 audit(1766556481.618:549): avc:  denied  { name_bind } for  pid=8777 comm="syz.1.656" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  263.241778][ T8775] netlink: 'syz.0.655': attribute type 11 has an invalid length.
[  263.249528][ T8775] netlink: 'syz.0.655': attribute type 12 has an invalid length.
[  263.299965][ T8775] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.655'.
[  263.330653][ T8775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.655'.
[  263.449655][ T8785] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  263.513384][ T8789] netlink: 'syz.5.660': attribute type 11 has an invalid length.
[  263.528745][   T30] audit: type=1400 audit(1766556481.918:550): avc:  denied  { map } for  pid=8784 comm="syz.2.658" path="socket:[23676]" dev="sockfs" ino=23676 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  263.558562][ T8785] tipc: Disabling bearer <eth:syzkaller0>
[  264.304107][   T24] usb 5-1: USB disconnect, device number 35
[  264.654105][   T30] audit: type=1400 audit(1766556483.088:551): avc:  denied  { create } for  pid=8792 comm="syz.0.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  264.805312][ T8798] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  264.820821][ T8798] syzkaller0: entered promiscuous mode
[  264.826637][ T8798] syzkaller0: entered allmulticast mode
[  264.856066][   T30] audit: type=1400 audit(1766556483.288:552): avc:  denied  { connect } for  pid=8799 comm="syz.5.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  265.331865][ T8792] tipc: Resetting bearer <eth:syzkaller0>
[  265.423272][ T8792] tipc: Disabling bearer <eth:syzkaller0>
[  265.470673][ T6175] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  265.691668][   T24] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  265.720887][ T6175] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  265.749636][ T6175] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  265.792287][ T6175] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  265.837361][ T6175] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  265.887808][ T6175] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  265.905445][   T24] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  265.924825][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  265.941929][ T6175] usb 3-1: config 0 descriptor??
[  266.007412][   T24] usb 6-1: Product: syz
[  266.018444][   T24] usb 6-1: Manufacturer: syz
[  266.023613][   T24] usb 6-1: SerialNumber: syz
[  266.049063][   T24] usb 6-1: config 0 descriptor??
[  266.081637][   T24] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  266.649217][ T6175] usbhid 3-1:0.0: can't add hid device: -71
[  266.676402][ T6175] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  266.713437][ T6175] usb 3-1: USB disconnect, device number 32
[  267.356892][ T6175] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  267.411869][ T8344] usb 2-1: new full-speed USB device number 38 using dummy_hcd
[  267.552759][ T6175] usb 5-1: device descriptor read/64, error -71
[  267.559783][   T30] audit: type=1400 audit(1766556485.988:553): avc:  denied  { read } for  pid=8843 comm="syz.0.676" path="socket:[23786]" dev="sockfs" ino=23786 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  267.585537][ T8344] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  267.598239][ T8344] usb 2-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  267.613028][ T8344] usb 2-1: config 0 interface 0 has no altsetting 0
[  267.622334][ T8344] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  267.631459][ T8344] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  267.639804][ T8344] usb 2-1: Product: syz
[  267.644216][ T8344] usb 2-1: Manufacturer: syz
[  267.648803][ T8344] usb 2-1: SerialNumber: syz
[  267.655572][ T8344] usb 2-1: config 0 descriptor??
[  267.661920][ T8846] netlink: 348 bytes leftover after parsing attributes in process `syz.0.676'.
[  267.674430][ T8815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  267.687510][ T8815] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  267.709582][ T8344] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22
[  267.852864][ T8150] udevd[8150]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  267.993071][ T6175] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  268.061876][   T24] gspca_sunplus: reg_w_riv err -110
[  268.067428][   T24] sunplus 6-1:0.0: probe with driver sunplus failed with error -110
[  268.142510][ T6175] usb 5-1: device descriptor read/64, error -71
[  268.265440][ T6175] usb usb5-port1: attempt power cycle
[  268.535762][   T30] audit: type=1400 audit(1766556486.968:554): avc:  denied  { getopt } for  pid=8852 comm="syz.2.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  268.622028][ T6175] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  268.635716][ T8854] netlink: 9 bytes leftover after parsing attributes in process `syz.2.678'.
[  268.644643][ T8854] netlink: 9 bytes leftover after parsing attributes in process `syz.2.678'.
[  268.683710][ T6175] usb 5-1: device descriptor read/8, error -71
[  268.921736][ T6175] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  268.942493][ T6175] usb 5-1: device descriptor read/8, error -71
[  268.956692][ T8344] usb 6-1: USB disconnect, device number 17
[  269.053033][ T6175] usb usb5-port1: unable to enumerate USB device
[  269.964393][   T30] audit: type=1400 audit(1766556488.398:555): avc:  denied  { accept } for  pid=8862 comm="syz.5.680" lport=55139 faddr=fc02:: fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  270.252058][ T8344] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  270.387973][ T7662] usb 2-1: USB disconnect, device number 38
[  270.424205][ T8344] usb 6-1: device descriptor read/64, error -71
[  270.517876][ T8870] openvswitch: netlink: Missing key (keys=40, expected=80)
[  270.537820][ T8872] netlink: 60 bytes leftover after parsing attributes in process `syz.0.683'.
[  270.554605][   T30] audit: type=1400 audit(1766556488.988:556): avc:  denied  { map } for  pid=8869 comm="syz.1.682" path="socket:[23818]" dev="sockfs" ino=23818 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  270.672608][ T8344] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  271.096378][ T8344] usb 6-1: device descriptor read/64, error -71
[  271.286865][   T30] audit: type=1400 audit(1766556489.718:557): avc:  denied  { write } for  pid=8881 comm="syz.4.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  271.352057][ T8344] usb usb6-port1: attempt power cycle
[  271.561935][ T7662] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  272.241962][ T8344] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  272.246133][ T7662] usb 5-1: config 0 has an invalid interface number: 166 but max is 0
[  272.270994][ T7662] usb 5-1: config 0 has no interface number 0
[  272.272196][ T8344] usb 6-1: device descriptor read/8, error -71
[  272.295656][ T7662] usb 5-1: New USB device found, idVendor=05ac, idProduct=021b, bcdDevice=ac.d7
[  272.313694][ T7662] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  272.329172][ T7662] usb 5-1: Product: syz
[  272.337917][ T7662] usb 5-1: Manufacturer: syz
[  272.348982][ T7662] usb 5-1: SerialNumber: syz
[  272.361156][ T7662] usb 5-1: config 0 descriptor??
[  272.373381][ T7662] appletouch 5-1:0.166: Could not find int-in endpoint
[  272.387206][ T7662] appletouch 5-1:0.166: probe with driver appletouch failed with error -5
[  272.424861][ T7662] usbhid 5-1:0.166: couldn't find an input interrupt endpoint
[  272.541710][ T8344] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  272.562620][ T8344] usb 6-1: device descriptor read/8, error -71
[  272.578132][   T89] usb 5-1: USB disconnect, device number 40
[  272.672168][ T8344] usb usb6-port1: unable to enumerate USB device
[  272.821629][ T7662] usb 3-1: new full-speed USB device number 33 using dummy_hcd
[  272.993754][ T7662] usb 3-1: not running at top speed; connect to a high speed hub
[  273.003492][ T7662] usb 3-1: config 1 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 1024, setting to 64
[  273.014751][ T8909] 9pnet: p9_errstr2errno: server reported unknown error ÿÿÿ
[  273.025438][ T7662] usb 3-1: config 1 interface 0 has no altsetting 0
[  273.036266][ T7662] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  273.045870][ T7662] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  273.053989][ T7662] usb 3-1: Product: syz
[  273.058855][ T7662] usb 3-1: Manufacturer: syz
[  273.064029][ T7662] usb 3-1: SerialNumber: syz
[  273.077064][ T8907] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  273.166676][ T8917] tmpfs: Bad value for 'mpol'
[  273.194010][ T8917] netlink: 760 bytes leftover after parsing attributes in process `syz.4.696'.
[  273.208089][ T8917] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  273.217830][ T8917] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  273.537149][   T30] audit: type=1400 audit(1766556491.818:558): avc:  denied  { read } for  pid=8918 comm="syz.5.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  273.776130][ T7662] usb 3-1: bad CDC descriptors
[  273.796611][ T7662] usb 3-1: USB disconnect, device number 33
[  273.891436][ T8939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  273.900581][ T8939] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  274.081807][   T89] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  274.121691][ T8344] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  274.234287][   T89] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[  274.243470][   T89] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.251442][   T89] usb 5-1: Product: syz
[  274.256566][   T89] usb 5-1: Manufacturer: syz
[  274.261297][   T89] usb 5-1: SerialNumber: syz
[  274.270545][   T89] hub 5-1:24.0: bad descriptor, ignoring hub
[  274.276599][ T8344] usb 1-1: Using ep0 maxpacket: 8
[  274.281732][   T89] hub 5-1:24.0: probe with driver hub failed with error -5
[  274.294201][ T8344] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  274.305575][ T8344] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  274.314800][ T8344] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  274.325814][ T8344] usb 1-1: config 0 descriptor??
[  274.524146][   T89] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state.
[  274.536278][   T89] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  274.645005][   T30] audit: type=1400 audit(1766556492.988:559): avc:  denied  { read } for  pid=8941 comm="syz.2.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  274.664947][   T89] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo)
[  274.664997][   T89] usb 5-1: media controller created
[  274.673414][   T89] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  274.692219][ T8344] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  274.857626][   T89] DVB: Unable to find symbol dib7000p_attach()
[  274.863865][   T89] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo'
[  274.951652][   T89] rc_core: IR keymap rc-dib0700-rc5 not found
[  274.959288][   T89] Registered IR keymap rc-empty
[  274.972690][   T89] dvb-usb: could not initialize remote control.
[  274.991535][   T89] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected.
[  275.004312][   T30] audit: type=1400 audit(1766556493.438:560): avc:  denied  { create } for  pid=8941 comm="syz.2.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1
[  275.280059][   T89] usb 5-1: USB disconnect, device number 41
[  275.373009][   T89] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected.
[  275.373199][ T6175] usb 1-1: USB disconnect, device number 34
[  275.576921][ T8960] vti0: entered promiscuous mode
[  276.298040][ T8966] fuse: Bad value for 'user_id'
[  276.303300][ T8966] fuse: Bad value for 'user_id'
[  276.309710][ T8966] overlayfs: overlapping lowerdir path
[  276.546996][ T8973] netlink: 68 bytes leftover after parsing attributes in process `syz.2.710'.
[  279.666468][ T7662] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  279.833452][ T7662] usb 3-1: config index 0 descriptor too short (expected 45, got 36)
[  279.844019][ T7662] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  279.927575][ T7662] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  279.985271][ T7662] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  280.045348][ T9029] binder: 9028:9029 ioctl c0306201 0 returned -14
[  280.051874][ T7662] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  280.131709][ T7662] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  280.149806][ T7662] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  280.171444][ T7662] usb 3-1: config 0 descriptor??
[  280.195361][ T9014] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  280.402119][ T6176] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  280.591825][ T6176] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  280.626341][ T6176] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  280.695462][ T7662] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  280.719383][ T6176] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  280.904418][ T7662] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  280.925880][ T6176] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  280.941727][ T7662] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  280.973062][ T7662] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  280.980620][ T6176] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  280.999275][ T7662] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  281.014459][ T7662] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  281.022813][ T6176] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  281.055912][ T7662] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  281.070124][ T6176] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  281.085320][ T7662] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  281.095316][ T6176] usb 5-1: Product: syz
[  281.099618][ T6176] usb 5-1: Manufacturer: syz
[  281.105258][ T7662] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  281.116523][ T7662] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  281.128095][ T6176] cdc_wdm 5-1:1.0: skipping garbage
[  281.142147][ T6176] cdc_wdm 5-1:1.0: skipping garbage
[  281.178990][ T7662] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  281.195454][ T6176] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device
[  281.202315][ T6176] cdc_wdm 5-1:1.0: Unknown control protocol
[  281.213100][ T7662] usb 3-1: USB disconnect, device number 34
[  281.316433][ T9047] fido_id[9047]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  281.336672][   T89] usb 5-1: USB disconnect, device number 42
[  282.081213][   T30] audit: type=1400 audit(1766556500.508:561): avc:  denied  { link } for  pid=9062 comm="syz.2.732" name="#e" dev="tmpfs" ino=835 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  282.121515][   T30] audit: type=1400 audit(1766556500.548:562): avc:  denied  { rename } for  pid=9062 comm="syz.2.732" name="#f" dev="tmpfs" ino=835 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  282.217937][ T9070] libceph: resolve '400' (ret=-3): failed
[  282.637108][ T9084] ptrace attach of "./syz-executor exec"[5812] was attempted by "./syz-executor exec"[9084]
[  282.773214][ T7662] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  283.309503][   T30] audit: type=1400 audit(1766556501.738:563): avc:  denied  { mounton } for  pid=9086 comm="syz.5.739" path="/46/file0" dev="tmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  283.397963][   T30] audit: type=1400 audit(1766556501.738:565): avc:  denied  { mount } for  pid=9086 comm="syz.5.739" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  283.443643][ T7662] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  283.455020][ T7662] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  283.465187][ T7662] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  283.475254][ T7662] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  283.481928][   T30] audit: type=1400 audit(1766556501.738:564): avc:  denied  { remount } for  pid=9086 comm="syz.5.739" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  283.505752][ T7662] usb 1-1: config 0 descriptor??
[  283.516122][   T30] audit: type=1400 audit(1766556501.768:566): avc:  denied  { read } for  pid=9086 comm="syz.5.739" name="system" dev="devtmpfs" ino=700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  283.539179][   T30] audit: type=1400 audit(1766556501.768:567): avc:  denied  { open } for  pid=9086 comm="syz.5.739" path="/dev/dma_heap/system" dev="devtmpfs" ino=700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  283.590988][   T30] audit: type=1400 audit(1766556501.768:568): avc:  denied  { read write } for  pid=9086 comm="syz.5.739" name="mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  283.741764][   T30] audit: type=1400 audit(1766556501.768:569): avc:  denied  { open } for  pid=9086 comm="syz.5.739" path="/dev/input/mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  283.792043][   T30] audit: type=1400 audit(1766556501.768:570): avc:  denied  { read } for  pid=9086 comm="syz.5.739" dev="nsfs" ino=4026533101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  285.821903][ T9090] netlink: 64 bytes leftover after parsing attributes in process `syz.1.730'.
[  286.010876][ T7662] usbhid 1-1:0.0: can't add hid device: -71
[  286.043975][ T7662] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  286.074666][ T7662] usb 1-1: USB disconnect, device number 35
[  286.191990][ T6175] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  286.441888][ T6175] usb 3-1: Using ep0 maxpacket: 16
[  286.506932][ T6175] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  286.672470][ T6175] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00
[  286.678721][ T9140] ubi: mtd0 is already attached to ubi31
[  286.730749][ T6175] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  286.767102][ T6175] usb 3-1: config 0 descriptor??
[  286.991663][ T8344] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  287.227500][ T6175] creative-sb0540 0003:041E:3100.0011: hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.2-1/input0
[  287.760771][ T9127] netlink: 16 bytes leftover after parsing attributes in process `syz.2.745'.
[  287.782646][ T9127] netlink: 16 bytes leftover after parsing attributes in process `syz.2.745'.
[  287.823939][ T9127] bridge2: the hash_elasticity option has been deprecated and is always 16
[  287.885354][   T30] kauditd_printk_skb: 54 callbacks suppressed
[  287.885370][   T30] audit: type=1400 audit(1766556506.318:625): avc:  denied  { create } for  pid=9154 comm="syz.1.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  287.923132][   T30] audit: type=1400 audit(1766556506.318:626): avc:  denied  { ioctl } for  pid=9154 comm="syz.1.753" path="socket:[24977]" dev="sockfs" ino=24977 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  288.069218][   T30] audit: type=1400 audit(1766556506.498:627): avc:  denied  { read } for  pid=9152 comm="syz.4.752" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  288.261185][ T9155] bridge0: port 2(bridge_slave_1) entered disabled state
[  288.268676][ T9155] bridge0: port 1(bridge_slave_0) entered disabled state
[  288.285039][   T30] audit: type=1400 audit(1766556506.718:628): avc:  denied  { execute } for  pid=9160 comm="syz.5.754" path="/50/cpu.stat" dev="tmpfs" ino=282 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  288.483351][ T9155] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  288.521353][ T9155] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  288.707969][   T60] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  288.780987][ T7828] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  288.789406][   T30] audit: type=1400 audit(1766556507.158:629): avc:  denied  { read write } for  pid=9168 comm="syz.4.756" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  288.890338][ T3837] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  288.906593][ T3837] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  288.906626][   T30] audit: type=1400 audit(1766556507.158:630): avc:  denied  { open } for  pid=9168 comm="syz.4.756" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  288.925425][ T3837] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  288.988833][    T9] usb 3-1: USB disconnect, device number 35
[  289.193458][ T7828] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  289.210115][ T7828] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  289.223496][ T7828] usb 6-1: config 0 interface 0 has no altsetting 0
[  289.230136][ T7828] usb 6-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00
[  289.333959][   T30] audit: type=1400 audit(1766556507.748:631): avc:  denied  { mount } for  pid=9173 comm="syz.1.757" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  289.751086][ T7828] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  289.804260][ T7828] usb 6-1: config 0 descriptor??
[  289.955989][   T30] audit: type=1400 audit(1766556508.388:632): avc:  denied  { unmount } for  pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  290.264366][ T7828] sony 0003:054C:0268.0012: hiddev0,hidraw0: USB HID v80.05 Device [HID 054c:0268] on usb-dummy_hcd.5-1/input0
[  290.338142][ T7828] sony 0003:054C:0268.0012: failed to claim input
[  290.428204][ T7828] usb 6-1: USB disconnect, device number 22
[  290.461958][   T30] audit: type=1400 audit(1766556508.888:633): avc:  denied  { name_bind } for  pid=9192 comm="syz.0.760" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  290.473071][ T9195] 9p: Bad value for 'wfdno'
[  290.570735][   T30] audit: type=1400 audit(1766556508.898:634): avc:  denied  { create } for  pid=9192 comm="syz.0.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  290.608178][ T9194] fido_id[9194]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  290.774273][ T9204] netlink: zone id is out of range
[  290.779897][ T9204] netlink: zone id is out of range
[  290.785484][ T9204] netlink: zone id is out of range
[  290.791590][ T9204] netlink: zone id is out of range
[  290.796758][ T9204] netlink: zone id is out of range
[  290.802720][ T9204] netlink: zone id is out of range
[  290.807952][ T9204] netlink: zone id is out of range
[  290.814836][ T9204] netlink: zone id is out of range
[  290.820064][ T9204] netlink: zone id is out of range
[  290.845476][ T9204] netlink: zone id is out of range
[  292.471687][ T7662] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  292.741971][ T7662] usb 1-1: Using ep0 maxpacket: 8
[  292.748655][ T7662] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7
[  292.761622][ T7662] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  292.793721][ T7662] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  292.815521][   T89] hid_parser_main: 5 callbacks suppressed
[  292.815539][   T89] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  292.856116][ T7662] usb 1-1: Product: syz
[  292.889537][   T89] hid-generic 0000:0000:0000.0013: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  292.890754][ T7662] usb 1-1: Manufacturer: syz
[  293.031365][ T7662] usb 1-1: SerialNumber: syz
[  293.398937][ T7662] usb 1-1: palm_os_3_probe - error -110 getting connection information
[  293.411856][   T30] kauditd_printk_skb: 17 callbacks suppressed
[  293.420422][   T30] audit: type=1400 audit(1766556511.818:652): avc:  denied  { create } for  pid=9229 comm="syz.4.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  293.440429][ T7662] visor 1-1:1.0: probe with driver visor failed with error -110
[  293.824313][   T30] audit: type=1400 audit(1766556512.258:653): avc:  denied  { read } for  pid=9237 comm="syz.5.770" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  294.453510][   T30] audit: type=1400 audit(1766556512.258:654): avc:  denied  { open } for  pid=9237 comm="syz.5.770" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  294.480919][   T30] audit: type=1400 audit(1766556512.488:655): avc:  denied  { create } for  pid=9237 comm="syz.5.770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  294.596189][   T30] audit: type=1400 audit(1766556512.918:656): avc:  denied  { unmount } for  pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  294.689716][   T30] audit: type=1400 audit(1766556512.958:657): avc:  denied  { write } for  pid=9227 comm="syz.2.768" name="hidraw0" dev="devtmpfs" ino=3419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  294.721745][ T9247] FAULT_INJECTION: forcing a failure.
[  294.721745][ T9247] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  294.739373][ T9247] CPU: 0 UID: 0 PID: 9247 Comm: syz.1.772 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  294.739404][ T9247] Tainted: [L]=SOFTLOCKUP
[  294.739411][ T9247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  294.739422][ T9247] Call Trace:
[  294.739429][ T9247]  <TASK>
[  294.739436][ T9247]  dump_stack_lvl+0x16c/0x1f0
[  294.739478][ T9247]  should_fail_ex+0x512/0x640
[  294.739513][ T9247]  _copy_from_user+0x2e/0xd0
[  294.739541][ T9247]  snd_pcm_oss_write2+0x1c2/0x410
[  294.739570][ T9247]  ? __pfx_snd_pcm_oss_write2+0x10/0x10
[  294.739593][ T9247]  ? snd_pcm_kernel_ioctl+0x267/0x2e0
[  294.739620][ T9247]  snd_pcm_oss_write+0x710/0xa10
[  294.739648][ T9247]  ? security_file_permission+0x71/0x210
[  294.739680][ T9247]  ? __pfx_snd_pcm_oss_write+0x10/0x10
[  294.739705][ T9247]  vfs_write+0x2a0/0x11d0
[  294.739737][ T9247]  ? __pfx_vfs_write+0x10/0x10
[  294.739758][ T9247]  ? find_held_lock+0x2b/0x80
[  294.739787][ T9247]  ? __fget_files+0x204/0x3c0
[  294.739817][ T9247]  ? __fget_files+0x20e/0x3c0
[  294.739849][ T9247]  ksys_write+0x12a/0x250
[  294.739876][ T9247]  ? __pfx_ksys_write+0x10/0x10
[  294.739906][ T9247]  do_syscall_64+0xcd/0xf80
[  294.739931][ T9247]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.739950][ T9247] RIP: 0033:0x7fb1ee18f749
[  294.739966][ T9247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  294.739983][ T9247] RSP: 002b:00007fb1eef46038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  294.740001][ T9247] RAX: ffffffffffffffda RBX: 00007fb1ee3e5fa0 RCX: 00007fb1ee18f749
[  294.740013][ T9247] RDX: 000000000000fc36 RSI: 0000200000000500 RDI: 0000000000000004
[  294.740024][ T9247] RBP: 00007fb1eef46090 R08: 0000000000000000 R09: 0000000000000000
[  294.740035][ T9247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  294.740045][ T9247] R13: 00007fb1ee3e6038 R14: 00007fb1ee3e5fa0 R15: 00007fff2d1dbcc8
[  294.740070][ T9247]  </TASK>
[  294.937286][   T30] audit: type=1400 audit(1766556513.058:658): avc:  denied  { create } for  pid=9246 comm="syz.1.772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  294.970938][   T30] audit: type=1400 audit(1766556513.398:659): avc:  denied  { read append } for  pid=9227 comm="syz.2.768" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  294.994491][   T30] audit: type=1400 audit(1766556513.438:660): avc:  denied  { open } for  pid=9227 comm="syz.2.768" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  295.144335][ T7662] usb 5-1: new full-speed USB device number 43 using dummy_hcd
[  295.286089][   T30] audit: type=1400 audit(1766556513.708:661): avc:  denied  { ioctl } for  pid=9227 comm="syz.2.768" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  295.360968][   T89] usb 1-1: USB disconnect, device number 37
[  295.560127][ T7662] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[  295.571244][ T7662] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  295.582323][ T7662] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  295.595701][ T7662] usb 5-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00
[  295.612123][ T7662] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  295.634586][ T7662] usb 5-1: config 0 descriptor??
[  295.640309][ T9254] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  296.131665][   T89] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  296.301664][   T89] usb 3-1: Using ep0 maxpacket: 32
[  296.308702][   T89] usb 3-1: config 0 has an invalid interface number: 191 but max is 0
[  296.321636][   T89] usb 3-1: config 0 has no interface number 0
[  296.333382][ T8344] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  296.341662][   T89] usb 3-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24
[  296.366269][ T7662] petalynx 0003:18B1:0037.0014: unknown main item tag 0x0
[  296.368312][   T89] usb 3-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1
[  296.401778][   T89] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  296.402185][ T7662] petalynx 0003:18B1:0037.0014: unknown main item tag 0x0
[  296.409913][   T89] usb 3-1: Product: syz
[  296.431463][   T89] usb 3-1: Manufacturer: syz
[  296.434522][ T7662] petalynx 0003:18B1:0037.0014: item fetching failed at offset 2/5
[  296.446341][   T89] usb 3-1: SerialNumber: syz
[  296.446984][ T7662] petalynx 0003:18B1:0037.0014: parse failed
[  296.460092][ T7662] petalynx 0003:18B1:0037.0014: probe with driver petalynx failed with error -22
[  296.480044][   T89] usb 3-1: config 0 descriptor??
[  296.500337][ T9228] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  296.507599][ T8344] usb 2-1: Using ep0 maxpacket: 32
[  296.525874][ T8344] usb 2-1: unable to get BOS descriptor or descriptor too short
[  296.620609][ T9273] nvme_fabrics: unknown parameter or missing value '”–¢Cê' in ctrl creation request
[  296.643363][ T9245] netlink: 256 bytes leftover after parsing attributes in process `syz.4.771'.
[  296.666733][ T8344] usb 2-1: config 255 has no interfaces?
[  296.698284][ T9245] unsupported nlmsg_type 40
[  296.719290][ T8344] usb 2-1: New USB device found, idVendor=07ca, idProduct=a110, bcdDevice=1c.97
[  296.757353][ T8344] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  296.777689][ T9228] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  296.821239][ T8344] usb 2-1: Product: syz
[  296.839789][ T8344] usb 2-1: Manufacturer: syz
[  296.861949][ T8344] usb 2-1: SerialNumber: syz
[  297.104250][   T89] asix 3-1:0.191 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  297.198119][   T89] asix 3-1:0.191: probe with driver asix failed with error -71
[  297.224383][ T8344] usb 2-1: USB disconnect, device number 39
[  297.385223][   T89] usb 3-1: USB disconnect, device number 36
[  298.287625][   T89] usb 5-1: USB disconnect, device number 43
[  299.347022][   T30] kauditd_printk_skb: 22 callbacks suppressed
[  299.347041][   T30] audit: type=1400 audit(1766556517.478:684): avc:  denied  { block_suspend } for  pid=9291 comm="syz.1.782" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  299.465268][   T30] audit: type=1400 audit(1766556517.858:685): avc:  denied  { ioctl } for  pid=9297 comm="syz.5.784" path="socket:[25911]" dev="sockfs" ino=25911 ioctlcmd=0x48d3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  299.647427][   T30] audit: type=1400 audit(1766556517.928:686): avc:  denied  { create } for  pid=9289 comm="syz.4.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  299.747092][   T30] audit: type=1400 audit(1766556518.038:687): avc:  denied  { ioctl } for  pid=9289 comm="syz.4.783" path="socket:[25914]" dev="sockfs" ino=25914 ioctlcmd=0x7213 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  299.777066][ T9304] FAULT_INJECTION: forcing a failure.
[  299.777066][ T9304] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  299.820155][ T9308] Invalid ELF header magic: != ELF
[  299.844322][ T9304] CPU: 1 UID: 0 PID: 9304 Comm: syz.2.785 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  299.844353][ T9304] Tainted: [L]=SOFTLOCKUP
[  299.844360][ T9304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  299.844371][ T9304] Call Trace:
[  299.844377][ T9304]  <TASK>
[  299.844384][ T9304]  dump_stack_lvl+0x16c/0x1f0
[  299.844413][ T9304]  should_fail_ex+0x512/0x640
[  299.844444][ T9304]  _copy_from_user+0x2e/0xd0
[  299.844471][ T9304]  snd_pcm_oss_write2+0x1c2/0x410
[  299.844499][ T9304]  ? __pfx_snd_pcm_oss_write2+0x10/0x10
[  299.844522][ T9304]  ? snd_pcm_kernel_ioctl+0x267/0x2e0
[  299.844544][ T9304]  snd_pcm_oss_write+0x710/0xa10
[  299.844571][ T9304]  ? security_file_permission+0x71/0x210
[  299.844600][ T9304]  ? __pfx_snd_pcm_oss_write+0x10/0x10
[  299.844623][ T9304]  vfs_write+0x2a0/0x11d0
[  299.844654][ T9304]  ? __pfx_vfs_write+0x10/0x10
[  299.844674][ T9304]  ? find_held_lock+0x2b/0x80
[  299.844702][ T9304]  ? __fget_files+0x204/0x3c0
[  299.844732][ T9304]  ? __fget_files+0x20e/0x3c0
[  299.844764][ T9304]  ksys_write+0x12a/0x250
[  299.844786][ T9304]  ? __pfx_ksys_write+0x10/0x10
[  299.844815][ T9304]  do_syscall_64+0xcd/0xf80
[  299.844840][ T9304]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  299.844867][ T9304] RIP: 0033:0x7fced4d8f749
[  299.844882][ T9304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  299.844900][ T9304] RSP: 002b:00007fced5c41038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  299.844928][ T9304] RAX: ffffffffffffffda RBX: 00007fced4fe5fa0 RCX: 00007fced4d8f749
[  299.844940][ T9304] RDX: 000000000000fc36 RSI: 0000200000000500 RDI: 0000000000000004
[  299.844950][ T9304] RBP: 00007fced5c41090 R08: 0000000000000000 R09: 0000000000000000
[  299.844960][ T9304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  299.844970][ T9304] R13: 00007fced4fe6038 R14: 00007fced4fe5fa0 R15: 00007ffe62ccba48
[  299.844995][ T9304]  </TASK>
[  300.047041][   T30] audit: type=1400 audit(1766556518.228:688): avc:  denied  { module_load } for  pid=9297 comm="syz.5.784" path="/57/bus" dev="tmpfs" ino=320 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1
[  300.772120][    T9] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  301.181697][ T7662] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  301.206738][    T9] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  301.215502][    T9] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  301.242887][    T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  301.261931][    T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  301.273509][    T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  301.323845][    T9] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  301.333780][    T9] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  301.344238][    T9] usb 6-1: Product: syz
[  301.361608][ T7662] usb 5-1: Using ep0 maxpacket: 16
[  301.379283][    T9] usb 6-1: Manufacturer: syz
[  301.390802][ T7662] usb 5-1: unable to get BOS descriptor or descriptor too short
[  301.407669][    T9] cdc_wdm 6-1:1.0: skipping garbage
[  301.418075][ T7662] usb 5-1: unable to read config index 0 descriptor/start: -71
[  301.419727][    T9] cdc_wdm 6-1:1.0: skipping garbage
[  301.447692][ T7662] usb 5-1: can't read configurations, error -71
[  301.489002][    T9] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  301.496770][    T9] cdc_wdm 6-1:1.0: Unknown control protocol
[  301.589179][ T9334] netlink: 16 bytes leftover after parsing attributes in process `syz.2.790'.
[  302.171839][   T30] audit: type=1400 audit(1766556520.538:689): avc:  denied  { write } for  pid=9335 comm="syz.2.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  302.326183][   T30] audit: type=1400 audit(1766556520.538:690): avc:  denied  { connect } for  pid=9335 comm="syz.2.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  302.347337][    T9] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  302.514973][   T30] audit: type=1400 audit(1766556520.538:691): avc:  denied  { name_connect } for  pid=9335 comm="syz.2.791" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  302.537537][    T9] usb 2-1: Using ep0 maxpacket: 16
[  302.569943][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  302.623110][ T9346] block device autoloading is deprecated and will be removed.
[  302.684377][    T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  302.701083][   T30] audit: type=1400 audit(1766556520.548:692): avc:  denied  { remount } for  pid=9335 comm="syz.2.791" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  302.736833][    T9] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  302.747364][ T9346] program syz.4.794 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  302.835548][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  302.881639][   T30] audit: type=1400 audit(1766556520.658:693): avc:  denied  { read write } for  pid=9335 comm="syz.2.791" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  302.979574][ T8344] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  303.032775][    T9] usb 2-1: config 0 descriptor??
[  303.167376][ T8344] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  303.208722][ T8344] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  303.251628][ T8344] usb 1-1: Product: syz
[  303.289484][ T8344] usb 1-1: Manufacturer: syz
[  303.375760][ T9349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.795'.
[  303.501666][ T8344] usb 1-1: SerialNumber: syz
[  303.822559][ T8344] usb 1-1: Firmware version (0.0) predates our first public release.
[  303.892439][ T8344] usb 1-1: Please update to version 0.2 or newer
[  303.934775][    T9] usbhid 2-1:0.0: can't add hid device: -71
[  303.940798][    T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  303.963038][    T9] usb 2-1: USB disconnect, device number 40
[  303.976201][ T7662] usb 6-1: USB disconnect, device number 23
[  304.057054][ T8344] usb 1-1: USB disconnect, device number 38
[  305.213068][   T30] kauditd_printk_skb: 17 callbacks suppressed
[  305.213110][   T30] audit: type=1400 audit(1766556523.218:711): avc:  denied  { connect } for  pid=9367 comm="syz.1.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  305.481900][ T7662] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  305.521243][ T9378] netlink: 'syz.2.802': attribute type 10 has an invalid length.
[  305.536325][ T9378] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  305.571319][   T30] audit: type=1400 audit(1766556523.758:712): avc:  denied  { shutdown } for  pid=9371 comm="syz.0.801" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  305.571997][ T9378] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  305.664727][   T30] audit: type=1400 audit(1766556523.838:713): avc:  denied  { getopt } for  pid=9371 comm="syz.0.801" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  305.710232][   T30] audit: type=1400 audit(1766556523.938:714): avc:  denied  { ioctl } for  pid=9377 comm="syz.2.802" path="socket:[26054]" dev="sockfs" ino=26054 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  305.721645][ T7662] usb 2-1: Using ep0 maxpacket: 16
[  305.872976][ T7662] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  305.886177][ T7662] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  305.900492][ T7662] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  305.912555][ T7662] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  305.925238][ T7662] usb 2-1: config 0 descriptor??
[  306.099533][ T9389] comedi comedi0: Minor 3 could not be opened
[  306.291669][    T9] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  306.420549][   T30] audit: type=1400 audit(1766556524.848:715): avc:  denied  { getopt } for  pid=9377 comm="syz.2.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  306.461636][    T9] usb 5-1: Using ep0 maxpacket: 8
[  306.469676][    T9] usb 5-1: config 1 has an invalid descriptor of length 148, skipping remainder of the config
[  306.485312][    T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  306.507645][    T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  306.517752][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  306.531654][    T9] usb 5-1: Product: syz
[  306.540617][    T9] usb 5-1: Manufacturer: syz
[  306.550356][    T9] usb 5-1: SerialNumber: syz
[  306.552487][ T6175] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  306.751922][ T6175] usb 6-1: Using ep0 maxpacket: 8
[  306.777143][   T30] audit: type=1400 audit(1766556525.208:716): avc:  denied  { create } for  pid=9385 comm="syz.4.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  306.777622][ T6175] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  306.818968][   T30] audit: type=1400 audit(1766556525.238:717): avc:  denied  { ioctl } for  pid=9385 comm="syz.4.805" path="socket:[26131]" dev="sockfs" ino=26131 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  306.843924][ T6175] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  306.853125][ T6175] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  306.888225][    T9] usb 5-1: 0:2 : does not exist
[  306.904064][ T6175] usb 6-1: config 0 descriptor??
[  306.938224][    T9] usb 5-1: USB disconnect, device number 46
[  307.053872][ T9397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.807'.
[  307.077396][ T6894] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  307.086541][ T9397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.807'.
[  307.095982][ T6894] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  307.105912][ T6894] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  307.125114][ T6894] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  307.132668][ T9392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  307.155818][ T9392] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  307.232538][ T6175] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  307.247387][   T30] audit: type=1400 audit(1766556525.678:718): avc:  denied  { create } for  pid=9398 comm="syz.2.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  307.597976][ T6175] usb 6-1: USB disconnect, device number 24
[  307.601132][   T30] audit: type=1400 audit(1766556525.678:719): avc:  denied  { read } for  pid=9398 comm="syz.2.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  307.911663][   T30] audit: type=1400 audit(1766556525.988:720): avc:  denied  { connect } for  pid=9391 comm="syz.5.806" laddr=172.20.20.170 lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  307.934702][ T7662] usbhid 2-1:0.0: can't add hid device: -71
[  307.994162][ T7662] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  308.786533][ T7662] usb 2-1: USB disconnect, device number 41
[  310.425994][ T9443] netlink: 16 bytes leftover after parsing attributes in process `syz.5.818'.
[  310.437135][ T9443] netlink: 16 bytes leftover after parsing attributes in process `syz.5.818'.
[  310.542469][ T9444] fuse: Unknown parameter '000000000000000000060xffffffffffffffffÿÿ'
[  310.585331][   T30] kauditd_printk_skb: 5 callbacks suppressed
[  310.585348][   T30] audit: type=1400 audit(1766556528.988:726): avc:  denied  { name_connect } for  pid=9440 comm="syz.0.820" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  310.804927][   T30] audit: type=1400 audit(1766556529.238:727): avc:  denied  { create } for  pid=9449 comm="syz.5.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  311.255064][ T9462] fuse: Unknown parameter 'fd˜t6³`”&ÈOÌÄä‘ë{'
[  311.255657][ T9461] fuse: Unknown parameter 'fd˜t6³`”&ÈOÌÄä‘ë{'
[  311.692056][   T30] audit: type=1400 audit(1766556530.118:728): avc:  denied  { listen } for  pid=9474 comm="syz.2.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  311.965709][   T30] audit: type=1400 audit(1766556530.148:729): avc:  denied  { setopt } for  pid=9474 comm="syz.2.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  312.363988][ T9482] vti0: entered promiscuous mode
[  312.724589][   T30] audit: type=1400 audit(1766556530.458:730): avc:  denied  { create } for  pid=9474 comm="syz.2.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  312.771646][   T30] audit: type=1400 audit(1766556530.458:731): avc:  denied  { setopt } for  pid=9474 comm="syz.2.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  312.836642][   T30] audit: type=1400 audit(1766556531.268:732): avc:  denied  { watch watch_reads } for  pid=9492 comm="syz.4.832" path="/80" dev="tmpfs" ino=445 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  312.935085][ T9497] can0: slcan on ttyS3.
[  312.982377][ T9501] netlink: 'syz.5.833': attribute type 2 has an invalid length.
[  312.993603][ T9501] net_ratelimit: 12 callbacks suppressed
[  312.993625][ T9501] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  313.081105][   T30] audit: type=1400 audit(1766556531.508:733): avc:  denied  { search } for  pid=5484 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  313.118902][ T9501] netlink: 'syz.5.833': attribute type 2 has an invalid length.
[  313.126999][ T9501] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  313.311653][   T30] audit: type=1400 audit(1766556531.538:734): avc:  denied  { search } for  pid=5484 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  313.434824][   T30] audit: type=1400 audit(1766556531.538:735): avc:  denied  { search } for  pid=5484 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  313.913148][ T9487] can0 (unregistered): slcan off ttyS3.
[  314.054754][    T9] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  314.252172][    T9] usb 6-1: Using ep0 maxpacket: 32
[  314.261860][    T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  314.305957][    T9] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  314.395997][    T9] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  314.479993][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  314.494524][    T9] usb 6-1: Product: syz
[  314.509204][    T9] usb 6-1: Manufacturer: syz
[  314.514167][    T9] usb 6-1: SerialNumber: syz
[  314.520123][    T9] usb 6-1: config 0 descriptor??
[  314.621898][ T5898] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  314.750788][ T5822] Bluetooth: hci2: command 0x0406 tx timeout
[  314.824974][    T9] usb 6-1: USB disconnect, device number 25
[  314.827844][ T9528] autofs: Unknown parameter 'Þ“
'
[  314.836553][ T5898] usb 5-1: Using ep0 maxpacket: 8
[  314.873891][ T5898] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  314.883491][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  314.893603][ T5898] usb 5-1: Product: syz
[  314.898918][ T5898] usb 5-1: Manufacturer: syz
[  314.911582][ T5898] usb 5-1: SerialNumber: syz
[  314.931998][ T5898] usb 5-1: config 0 descriptor??
[  315.148766][ T5898] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  315.341449][ T9545] netlink: 28 bytes leftover after parsing attributes in process `syz.2.838'.
[  315.370760][ T9545] netlink: 28 bytes leftover after parsing attributes in process `syz.2.838'.
[  315.392441][ T9545] netlink: 28 bytes leftover after parsing attributes in process `syz.2.838'.
[  315.433370][ T9545] netlink: 28 bytes leftover after parsing attributes in process `syz.2.838'.
[  315.822051][   T30] kauditd_printk_skb: 13 callbacks suppressed
[  315.841687][   T30] audit: type=1400 audit(1766556534.248:749): avc:  denied  { bind } for  pid=9549 comm="syz.5.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  315.902380][ T5898] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  315.992634][   T30] audit: type=1400 audit(1766556534.248:750): avc:  denied  { write } for  pid=9549 comm="syz.5.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  316.018549][ T5898] usb 5-1: USB disconnect, device number 47
[  316.041372][   T30] audit: type=1400 audit(1766556534.338:751): avc:  denied  { setopt } for  pid=9549 comm="syz.5.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  316.877436][    T9] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  316.913167][   T30] audit: type=1400 audit(1766556535.348:752): avc:  denied  { bind } for  pid=9572 comm="syz.4.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  316.976527][   T30] audit: type=1400 audit(1766556535.388:753): avc:  denied  { setopt } for  pid=9572 comm="syz.4.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  317.051719][    T9] usb 2-1: Using ep0 maxpacket: 32
[  317.059500][    T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  317.067868][    T9] usb 2-1: config 0 has no interface number 0
[  317.162609][   T30] audit: type=1400 audit(1766556535.388:754): avc:  denied  { compute_member } for  pid=9572 comm="syz.4.844" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  317.356969][   T30] audit: type=1400 audit(1766556535.468:755): avc:  denied  { ioctl } for  pid=9572 comm="syz.4.844" path="socket:[26756]" dev="sockfs" ino=26756 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  317.710411][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  317.891391][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  317.896730][    T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  317.943762][   T30] audit: type=1400 audit(1766556535.908:756): avc:  denied  { setopt } for  pid=9581 comm="syz.4.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  317.965292][   T30] audit: type=1400 audit(1766556535.918:757): avc:  denied  { bind } for  pid=9581 comm="syz.4.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  317.987582][   T30] audit: type=1400 audit(1766556535.918:758): avc:  denied  { node_bind } for  pid=9581 comm="syz.4.845" saddr=fec0:ffff::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[  318.011759][    T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  318.054784][    T9] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  318.077191][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  318.098074][    T9] usb 2-1: config 0 descriptor??
[  318.462763][ T5898] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  318.611667][ T5898] usb 5-1: Using ep0 maxpacket: 32
[  318.618349][ T5898] usb 5-1: config 0 has an invalid interface number: 192 but max is 0
[  318.628803][ T5898] usb 5-1: config 0 has no interface number 0
[  318.640658][ T5898] usb 5-1: config 0 interface 192 has no altsetting 0
[  318.663148][ T5898] usb 5-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=52.05
[  318.671712][ T8344] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  318.679874][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  318.699191][ T5898] usb 5-1: Product: syz
[  318.710008][ T5898] usb 5-1: Manufacturer: syz
[  318.721384][ T5898] usb 5-1: SerialNumber: syz
[  318.738842][ T9568] sctp: [Deprecated]: syz.1.842 (pid 9568) Use of struct sctp_assoc_value in delayed_ack socket option.
[  318.738842][ T9568] Use struct sctp_sack_info instead
[  318.759749][ T5898] usb 5-1: config 0 descriptor??
[  318.768149][ T5898] ipw 5-1:0.192: IPWireless converter converter detected
[  318.776918][    T9] uclogic 0003:28BD:0094.0015: pen parameters not found
[  318.789610][    T9] uclogic 0003:28BD:0094.0015: interface is invalid, ignoring
[  318.851737][ T8344] usb 1-1: Using ep0 maxpacket: 16
[  318.861305][ T8344] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  318.883768][ T8344] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  318.903806][ T8344] usb 1-1: config 0 interface 0 has no altsetting 0
[  318.918098][ T8344] usb 1-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00
[  318.937417][ T8344] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  318.959345][ T8344] usb 1-1: config 0 descriptor??
[  318.992321][ T5898] usb 5-1: USB disconnect, device number 48
[  319.017836][ T6175] usb 2-1: USB disconnect, device number 42
[  319.035321][ T5898] ipw 5-1:0.192: device disconnected
[  319.787988][ T8344] usbhid 1-1:0.0: can't add hid device: -71
[  319.794665][ T8344] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  319.815654][ T8344] usb 1-1: USB disconnect, device number 39
[  322.685625][ T5898] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  322.853439][ T5898] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  322.866578][ T5898] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7
[  322.892711][ T5898] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  322.904067][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  322.924015][ T5898] usb 6-1: Product: syz
[  322.942797][ T5898] usb 6-1: Manufacturer: syz
[  322.955916][ T5898] usb 6-1: SerialNumber: syz
[  322.973391][ T5898] usb 6-1: config 0 descriptor??
[  323.189874][   T30] kauditd_printk_skb: 35 callbacks suppressed
[  323.189890][   T30] audit: type=1400 audit(1766556541.618:794): avc:  denied  { bind } for  pid=9631 comm="syz.5.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  323.401607][    T9] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  323.570814][ T5898] usb 6-1: USB disconnect, device number 26
[  323.597819][ T8395] udevd[8395]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  323.841622][    T9] usb 3-1: Using ep0 maxpacket: 32
[  323.849092][    T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  323.859966][    T9] usb 3-1: config 0 has no interface number 0
[  323.871856][    T9] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  323.889551][    T9] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  324.506597][    T9] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  324.531121][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  324.548092][    T9] usb 3-1: config 0 descriptor??
[  324.709781][ T9657] 
[  324.712117][ T9657] ======================================================
[  324.719136][ T9657] WARNING: possible circular locking dependency detected
[  324.726142][ T9657] syzkaller #0 Tainted: G             L     
[  324.732094][ T9657] ------------------------------------------------------
[  324.739086][ T9657] syz.5.864/9657 is trying to acquire lock:
[  324.744963][ T9657] ffff8880356d5088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570
[  324.754270][ T9657] 
[  324.754270][ T9657] but task is already holding lock:
[  324.761614][ T9657] ffff888058313468 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80
[  324.769877][ T9657] 
[  324.769877][ T9657] which lock already depends on the new lock.
[  324.769877][ T9657] 
[  324.780259][ T9657] 
[  324.780259][ T9657] the existing dependency chain (in reverse order) is:
[  324.789251][ T9657] 
[  324.789251][ T9657] -> #2 (&pipe->mutex){+.+.}-{4:4}:
[  324.796614][ T9657]        __mutex_lock+0x1aa/0x1ca0
[  324.801773][ T9657]        anon_pipe_write+0x15d/0x1bd0
[  324.807140][ T9657]        __kernel_write_iter+0x720/0xb10
[  324.812761][ T9657]        __kernel_write+0xf5/0x140
[  324.817861][ T9657]        autofs_notify_daemon+0x4db/0xd60
[  324.823564][ T9657]        autofs_wait+0x10f3/0x1ac0
[  324.828654][ T9657]        autofs_mount_wait+0x132/0x3c0
[  324.834089][ T9657]        autofs_d_automount+0x4b2/0x960
[  324.839621][ T9657]        __traverse_mounts+0x1b9/0x830
[  324.845070][ T9657]        step_into_slowpath+0x772/0xf50
[  324.850598][ T9657]        path_lookupat+0x627/0xc40
[  324.855690][ T9657]        filename_lookup+0x224/0x5f0
[  324.860959][ T9657]        kern_path+0x35/0x50
[  324.865529][ T9657]        lookup_bdev+0xd8/0x280
[  324.870363][ T9657]        resume_store+0x1d6/0x490
[  324.875376][ T9657]        kobj_attr_store+0x58/0x80
[  324.880476][ T9657]        sysfs_kf_write+0xf2/0x150
[  324.885570][ T9657]        kernfs_fop_write_iter+0x3af/0x570
[  324.891368][ T9657]        vfs_write+0x7d3/0x11d0
[  324.896207][ T9657]        ksys_write+0x12a/0x250
[  324.901038][ T9657]        do_syscall_64+0xcd/0xf80
[  324.906047][ T9657]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  324.912443][ T9657] 
[  324.912443][ T9657] -> #1 (&sbi->pipe_mutex){+.+.}-{4:4}:
[  324.920153][ T9657]        __mutex_lock+0x1aa/0x1ca0
[  324.925250][ T9657]        autofs_notify_daemon+0x4a6/0xd60
[  324.930954][ T9657]        autofs_wait+0x10f3/0x1ac0
[  324.936049][ T9657]        autofs_mount_wait+0x132/0x3c0
[  324.941488][ T9657]        autofs_d_automount+0x4b2/0x960
[  324.947015][ T9657]        __traverse_mounts+0x1b9/0x830
[  324.952462][ T9657]        step_into_slowpath+0x772/0xf50
[  324.957989][ T9657]        path_lookupat+0x627/0xc40
[  324.963079][ T9657]        filename_lookup+0x224/0x5f0
[  324.968346][ T9657]        kern_path+0x35/0x50
[  324.972927][ T9657]        lookup_bdev+0xd8/0x280
[  324.977762][ T9657]        resume_store+0x1d6/0x490
[  324.982772][ T9657]        kobj_attr_store+0x58/0x80
[  324.987867][ T9657]        sysfs_kf_write+0xf2/0x150
[  324.992959][ T9657]        kernfs_fop_write_iter+0x3af/0x570
[  324.998750][ T9657]        vfs_write+0x7d3/0x11d0
[  325.003580][ T9657]        ksys_write+0x12a/0x250
[  325.008409][ T9657]        do_syscall_64+0xcd/0xf80
[  325.013414][ T9657]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  325.019806][ T9657] 
[  325.019806][ T9657] -> #0 (&of->mutex){+.+.}-{4:4}:
[  325.027001][ T9657]        __lock_acquire+0x1669/0x2890
[  325.032352][ T9657]        lock_acquire+0x179/0x330
[  325.037355][ T9657]        __mutex_lock+0x1aa/0x1ca0
[  325.042450][ T9657]        kernfs_fop_write_iter+0x28f/0x570
[  325.048241][ T9657]        iter_file_splice_write+0xa24/0x12b0
[  325.054205][ T9657]        do_splice+0x1478/0x1fc0
[  325.059128][ T9657]        __do_splice+0x32a/0x360
[  325.064048][ T9657]        __x64_sys_splice+0x187/0x250
[  325.069402][ T9657]        do_syscall_64+0xcd/0xf80
[  325.074406][ T9657]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  325.080797][ T9657] 
[  325.080797][ T9657] other info that might help us debug this:
[  325.080797][ T9657] 
[  325.090996][ T9657] Chain exists of:
[  325.090996][ T9657]   &of->mutex --> &sbi->pipe_mutex --> &pipe->mutex
[  325.090996][ T9657] 
[  325.103401][ T9657]  Possible unsafe locking scenario:
[  325.103401][ T9657] 
[  325.110822][ T9657]        CPU0                    CPU1
[  325.116166][ T9657]        ----                    ----
[  325.121505][ T9657]   lock(&pipe->mutex);
[  325.125637][ T9657]                                lock(&sbi->pipe_mutex);
[  325.132636][ T9657]                                lock(&pipe->mutex);
[  325.139292][ T9657]   lock(&of->mutex);
[  325.143256][ T9657] 
[  325.143256][ T9657]  *** DEADLOCK ***
[  325.143256][ T9657] 
[  325.151374][ T9657] 2 locks held by syz.5.864/9657:
[  325.156389][ T9657]  #0: ffff888035524420 (sb_writers#8){.+.+}-{0:0}, at: __do_splice+0x32a/0x360
[  325.165428][ T9657]  #1: ffff888058313468 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80
[  325.174109][ T9657] 
[  325.174109][ T9657] stack backtrace:
[  325.179978][ T9657] CPU: 0 UID: 0 PID: 9657 Comm: syz.5.864 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  325.180000][ T9657] Tainted: [L]=SOFTLOCKUP
[  325.180005][ T9657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  325.180015][ T9657] Call Trace:
[  325.180021][ T9657]  <TASK>
[  325.180027][ T9657]  dump_stack_lvl+0x116/0x1f0
[  325.180048][ T9657]  print_circular_bug+0x275/0x340
[  325.180066][ T9657]  check_noncircular+0x146/0x160
[  325.180085][ T9657]  __lock_acquire+0x1669/0x2890
[  325.180103][ T9657]  ? __do_splice+0x32a/0x360
[  325.180124][ T9657]  ? do_syscall_64+0xcd/0xf80
[  325.180144][ T9657]  lock_acquire+0x179/0x330
[  325.180160][ T9657]  ? kernfs_fop_write_iter+0x28f/0x570
[  325.180193][ T9657]  ? __pfx___might_resched+0x10/0x10
[  325.180211][ T9657]  __mutex_lock+0x1aa/0x1ca0
[  325.180230][ T9657]  ? kernfs_fop_write_iter+0x28f/0x570
[  325.180253][ T9657]  ? kernfs_fop_write_iter+0x28f/0x570
[  325.180275][ T9657]  ? __asan_memcpy+0x3c/0x60
[  325.180292][ T9657]  ? _copy_from_iter+0x161/0x16c0
[  325.180315][ T9657]  ? __pfx___mutex_lock+0x10/0x10
[  325.180336][ T9657]  ? __pfx__copy_from_iter+0x10/0x10
[  325.180358][ T9657]  ? trace_kmalloc+0x2b/0xb0
[  325.180378][ T9657]  ? __kmalloc_noprof+0x35d/0x910
[  325.180401][ T9657]  ? kernfs_fop_write_iter+0x237/0x570
[  325.180425][ T9657]  ? kernfs_fop_write_iter+0x28f/0x570
[  325.180447][ T9657]  kernfs_fop_write_iter+0x28f/0x570
[  325.180471][ T9657]  iter_file_splice_write+0xa24/0x12b0
[  325.180498][ T9657]  ? irqentry_exit+0x1dd/0x8c0
[  325.180517][ T9657]  ? __pfx_iter_file_splice_write+0x10/0x10
[  325.180547][ T9657]  ? __pfx_iter_file_splice_write+0x10/0x10
[  325.180570][ T9657]  do_splice+0x1478/0x1fc0
[  325.180592][ T9657]  ? __lock_acquire+0x436/0x2890
[  325.180611][ T9657]  ? __pfx_do_splice+0x10/0x10
[  325.180632][ T9657]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  325.180653][ T9657]  ? find_held_lock+0x2b/0x80
[  325.180677][ T9657]  __do_splice+0x32a/0x360
[  325.180700][ T9657]  ? __pfx___do_splice+0x10/0x10
[  325.180724][ T9657]  __x64_sys_splice+0x187/0x250
[  325.180748][ T9657]  do_syscall_64+0xcd/0xf80
[  325.180767][ T9657]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  325.180782][ T9657] RIP: 0033:0x7f1fafd8f749
[  325.180796][ T9657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  325.180812][ T9657] RSP: 002b:00007f1fb0c04038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113
[  325.180826][ T9657] RAX: ffffffffffffffda RBX: 00007f1faffe6090 RCX: 00007f1fafd8f749
[  325.180836][ T9657] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003
[  325.180844][ T9657] RBP: 00007f1fafe13f91 R08: 000000000000bfd1 R09: 0000000000000000
[  325.180854][ T9657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  325.180862][ T9657] R13: 00007f1faffe6128 R14: 00007f1faffe6090 R15: 00007ffdbf7b5c38
[  325.180877][ T9657]  </TASK>
[  325.507931][   T30] audit: type=1400 audit(1766556543.938:795): avc:  denied  { map } for  pid=9655 comm="syz.5.864" path="socket:[27663]" dev="sockfs" ino=27663 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  325.534460][   T30] audit: type=1400 audit(1766556543.938:796): avc:  denied  { read write } for  pid=9655 comm="syz.5.864" path="socket:[27663]" dev="sockfs" ino=27663 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  325.619263][   T30] audit: type=1326 audit(1766556544.048:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9659 comm="syz.4.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747bb8f749 code=0x7ffc0000
[  325.644002][   T30] audit: type=1326 audit(1766556544.048:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9659 comm="syz.4.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f747bb8f749 code=0x7ffc0000
[  325.668685][   T30] audit: type=1326 audit(1766556544.048:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9659 comm="syz.4.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747bb8f749 code=0x7ffc0000
[  325.701499][   T30] audit: type=1326 audit(1766556544.048:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9659 comm="syz.4.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f747bb8f749 code=0x7ffc0000
[  325.725440][   T30] audit: type=1400 audit(1766556544.048:801): avc:  denied  { mount } for  pid=9659 comm="syz.4.866" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[  325.769062][   T30] audit: type=1326 audit(1766556544.048:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9659 comm="syz.4.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747bb8f749 code=0x7ffc0000
[  325.792903][   T30] audit: type=1326 audit(1766556544.078:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9659 comm="syz.4.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747bb8f749 code=0x7ffc0000
[  325.950128][ T9666] ieee80211 phy20: Selected rate control algorithm 'minstrel_ht'
[  326.997890][    T9] uclogic 0003:28BD:0094.0016: failed retrieving string descriptor #100: -71
[  327.012601][    T9] uclogic 0003:28BD:0094.0016: failed retrieving pen parameters: -71
[  327.020711][    T9] uclogic 0003:28BD:0094.0016: pen probing failed: -71
[  327.027805][    T9] uclogic 0003:28BD:0094.0016: failed probing parameters: -71
[  327.035402][    T9] uclogic 0003:28BD:0094.0016: probe with driver uclogic failed with error -71
[  327.048237][    T9] usb 3-1: USB disconnect, device number 37