last executing test programs:

5m41.764126649s ago: executing program 2 (id=225):
r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000080)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000c80)={0x84, &(0x7f0000000400)={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_usb_connect(0x2, 0x36, &(0x7f0000000680)=ANY=[], 0x0)
syz_usb_connect$printer(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="fb01"], 0x0)
syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f00000000c0)=ANY=[])
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x2c, r3, 0x1001, 0x70bd28, 0x0, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xf}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x9}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x27b}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000300)={0x0, 0xfffffeb3, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000e08000340000000040900010073797a30000000020900020073797a320000000014000000110001"], 0x94}}, 0x0)
close(r6)
syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f00000003c0)={0x20, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)={0x20, 0x23, 0x94, {0x94, 0x0, "295ac566f2c4f4dc0810e3d083d01ea70426a6fc1a292fe1fdcf9efde33d7e1b82ccce71228c9645bd1abc13a02d364f18d9f93406180a97b6c9ca7da0f717efa6f4c04d8431b6b802879003aae1aa8877e3e71ea0a92f7c32d0c5e13b6e7ca6210ef5e69664c42e1fe3f875dcdbd86e9443cdd2606ecf914012f10e5a6aa673ba5548fbc96363db6ded566e0cd59317cfa8"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2809}}}, &(0x7f0000000600)={0x34, &(0x7f0000000200)={0x0, 0xc, 0x47, "0c828bb94b74f6de4e49d8a01d9bb612b6fed23172898d59279bc0331f16b479ccc397015d9d40977c847640478a01a46a5efe927e35cf5a3dc6df126d8b4f1663764a51702b74"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xf7}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000380)={0xc0, 0xa1, 0x4, 0x6}, &(0x7f00000004c0)={0x40, 0xa0, 0x4, 0x9d06}, &(0x7f0000000500)={0xc0, 0xa2, 0x2f, "b7436b926af00ecd71d7b502fa0e7c04e56e797a4345a56fb958e76753c8ba76de757748cc0611591293a1f5188849"}})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000440)={0x40, 0xa, 0x57, "f03efcb215e60d82bd90f154fe87d553d139d6a7d9f74ba7870761d626ea46361cfdf081a56576b585ad2c202afdf78fb84191588869ace2e82265d07208ac32f4b9f3053876fe5ee6720341746721fabe570cfcd1a81d"}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0xc0, 0xa2, 0x2f, "598f8ca1ede3820ace6211dd0c6f571238c11683ea0b2b23d61ffb1c124764284418acd6d09cc978baf03f66f339b5"}})

5m37.799683892s ago: executing program 2 (id=236):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_open_dev$vbi(0x0, 0x0, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f00000002c0)=0x2, 0xb, 0x2, &(0x7f0000000300)={0x77359400}, &(0x7f00000004c0)=0x1, 0x2)
r2 = socket$igmp(0x2, 0x3, 0x2)
r3 = syz_io_uring_setup(0x111, &(0x7f00000000c0)={0x0, 0x24ad, 0x10000, 0x1, 0x1de}, &(0x7f00000029c0)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000001040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r3, 0x1733, 0x6323, 0x20, 0x0, 0x0)
setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000180)={0x0, 0x4, 0x0, 0x40, @vifc_lcl_ifindex, @multicast2}, 0x10)
setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000000)=0x9, 0x4)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(0x0, r7)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c00), r7)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r7, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x14, r8, 0x1, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4e000}, 0x40000)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
ioperm(0x0, 0x25a, 0x7)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000240001002abd7000fedbdf25440000004c000e804800518038003a802c0061800400548008000800050000000800e700", @ANYRES32=0x0, @ANYBLOB='\b\x00O\x00', @ANYRES32, @ANYBLOB="0c000d00ff03000000000000080035007f0000010800de00", @ANYRES32=0x0, @ANYBLOB="b3938376"], 0x60}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

5m36.195671896s ago: executing program 2 (id=242):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
gettid()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
getsockopt$inet_buf(r0, 0x118, 0x4, 0x0, 0x0)

5m35.190296614s ago: executing program 2 (id=248):
socket$nl_xfrm(0x10, 0x3, 0x6)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x40, 0xa3)
symlinkat(&(0x7f0000000240)='./file1\x00', r0, &(0x7f0000000100)='./file1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x488480, 0x0)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x3, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
sched_setattr(0x0, 0x0, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x0)
gettid()
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={&(0x7f0000000180)="39040548ecc6ad4f9eeedc5acb5df779be5e621ecedd", &(0x7f0000000440)="cc84dd8bb221bb9c0f7fc796e14c264f0427689e66d511ee26a0931797c4eda36fe6b32ab7397b74a9587fb0dc20e640bbe1fbe1bfa59026214666431062b425b921ead9d6a5d8eb96e8e125e250f39e6754f08b9ee148b307ed9e92a24ea6e012b1229fcbf2f86e72712f391b8213167da9536627615652de7b46a1e9315c4e21a48738f53cabd52d18cf4608961875c61c511037e0483bbee493fbd3d6a1974edc43de4f608010fa3e953a2d80a706e8a6be13eb7614125d80e5ec285aa0ba7223aacf5d86f5b8c7196145359c0e45599028cabf6f7ab37be14552fc22f90fc87454bc09"}}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x605})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$packet(0xffffffffffffffff, &(0x7f0000000fc0)="48b1000006890086dd4803000000040000000000000000000000a246ed896b2d18bd6357671c5866581854301c46ce204737d244119ef4dcd566a86d930bf352f5", 0x41, 0x24000880, 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt(r1, 0x28, 0x0, 0x0, &(0x7f00000001c0))
socket$inet6(0xa, 0x2, 0x0)

5m34.974302411s ago: executing program 2 (id=249):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x8180, 0x0)
ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) (async)
dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) (async)
r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904000000cafb1a000d0fa43773a360adad1841bc02987950465760de77dea28e885e36731ee9a4df8e5775caa6cbff6a05cbdc1314b66f0332d2da4b536a23cb6cc92b125c9fb1564b140d348566641a5c0e4b792a48c1abba1b5accec66d4200bfbda5056a6f5a6e08f5cf92b01df7086d3e93355817d118417850fa1ac5877b769ebe2b94244da5da27de8a43e64a3"], 0x0)
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000001780)={0x44, &(0x7f0000001600)={0x0, 0x15, 0x1, "c3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async)
ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0)
ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async)
r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
recvmsg(r7, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0)
sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
r8 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924"], 0x0)
syz_usb_control_io(r8, &(0x7f0000000140)={0x2c, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00030400000004c807800f4cc1577734030130"], 0x0, 0x0, 0x0}, 0x0) (async)
syz_usb_control_io$uac1(r8, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41f}}}, 0x0)
syz_usb_control_io(r8, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000740)={0x20, 0x3, 0x2, "b23b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r8, 0x0, &(0x7f0000000540)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x84, 0x2, "06ac"}, 0x0})

5m34.736605848s ago: executing program 2 (id=251):
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc1105511, &(0x7f0000000040)={0x7, 0x3, 0x40, 0x10000, 'syz1\x00', 0x4000041})
r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x8000, 0x129802)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0xc1105511, &(0x7f0000000080))
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)

5m34.349945768s ago: executing program 32 (id=251):
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc1105511, &(0x7f0000000040)={0x7, 0x3, 0x40, 0x10000, 'syz1\x00', 0x4000041})
r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x8000, 0x129802)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0xc1105511, &(0x7f0000000080))
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)

11.026319654s ago: executing program 1 (id=1409):
r0 = socket(0x200000000000011, 0x2, 0xd)
bind$packet(r0, 0x0, 0x0)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00'})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000340)={'wpan0\x00', <r4=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x50, r2, 0x852dd6c070cd7e4d, 0x70bd2a, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}]}, 0x50}, 0x4, 0x700000000000000}, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000011c0)=@newtaction={0x90, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0xe4}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x3)
ioctl$FIONREAD(r6, 0x541b, 0xfffffffffffffffe)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000005a0c00078005001500000000000500010006000000050005000a00000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574000000"], 0x5c}}, 0x0)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='gfs2\x00', 0x10, &(0x7f0000000100)='barrier')
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc714, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xc, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0xa, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0)

10.515120836s ago: executing program 3 (id=1412):
keyctl$dh_compute(0x17, 0x0, 0x0, 0xffffffffffffff65, 0x0) (async)
keyctl$dh_compute(0x17, 0x0, 0x0, 0xffffffffffffff65, 0x0)
socket(0x6, 0x3, 0x1) (async)
r0 = socket(0x6, 0x3, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x1fffffffffffffed, &(0x7f0000000040)=ANY=[@ANYRES64=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94)
mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan1\x00', <r2=>0x0})
gettid() (async)
r3 = gettid()
r4 = socket(0x10, 0x803, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x403, 0x70bd2f, 0x25dfdbfe, {0x0, 0x0, 0x74, r2, 0x18c05, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4802}, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x403, 0x70bd2f, 0x25dfdbfe, {0x0, 0x0, 0x74, r2, 0x18c05, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4802}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0)
syz_usb_control_io(r5, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x0, 0x14, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r5, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) (async)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) (async)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0)
ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x9) (async)
ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x9)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, r0)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000300)={0x0, @dev, @local}, &(0x7f0000000340)=0xc)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000480)={'gre0\x00', &(0x7f0000000380)={'gre0\x00', 0x0, 0x7, 0x7, 0x0, 0x317, {{0x30, 0x4, 0x3, 0x5, 0xc0, 0x66, 0x0, 0x8, 0x4, 0x0, @empty, @multicast1, {[@cipso={0x86, 0x14, 0x3, [{0x6, 0xe, "d14c095cfa9bbde56915b8e8"}]}, @ssrr={0x89, 0x7, 0xba, [@local]}, @rr={0x7, 0x1b, 0xcb, [@loopback, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @broadcast, @multicast1]}, @ssrr={0x89, 0x17, 0x21, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @lsrr={0x83, 0x13, 0x54, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @rand_addr=0x64010101, @empty]}, @end, @cipso={0x86, 0x4a, 0x1, [{0x5, 0x4, "a419"}, {0x7, 0xa, "39cdab15986e06e7"}, {0x6, 0x4, "6ff4"}, {0x0, 0x7, "d6e213014b"}, {0x0, 0xd, "cc132aa4143f6cef7a191b"}, {0x0, 0x11, "acbabc80460fe3d5abfeba44664b65"}, {0x6, 0xd, "c3daa2b0f2b43143330e1e"}]}]}}}}})
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'})
socket(0x10, 0x80002, 0x0)

9.773763006s ago: executing program 3 (id=1416):
io_setup(0x3ff, &(0x7f0000000500)=<r0=>0x0) (async)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x15)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, <r4=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000002d40)={0x48, 0x7, r4, 0x0, 0x10000, 0x0, 0x8, 0x28d662, 0x33ebda}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r4, 0x0, 0x10000, 0x0, 0x8, 0x0, 0x382fbf})
io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
r5 = socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000)
sendto$inet6(r5, &(0x7f00000000c0)="02f8", 0x2, 0x51, &(0x7f0000000080)={0xa, 0x4e20, 0x1, @loopback, 0x9}, 0x1c) (async)
r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0x14c, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0xfff7, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x3b, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010102, 0x0, 0x6c}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, {0x800000000000, 0x4, 0x40000000}, {}, 0x70bd25, 0x0, 0x2, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x14c}}, 0x4810) (async)
socket$key(0xf, 0x3, 0x2)
syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000080046000028000000000011907800000000000000000704"], 0x0)
ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000100)={0x9, <r9=>0xffffffffffffffff})
ioctl$KVM_HAS_DEVICE_ATTR(r9, 0x4018aee3, &(0x7f0000000180)=@attr_other={0x0, 0x6, 0x6, &(0x7f0000000140)=0xbb7})
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0)

8.924205582s ago: executing program 3 (id=1421):
syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a72b7a104c05e102c8e201020301090224fa1f0009050402100000fa00090582024000000000"], 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02})
r1 = io_uring_setup(0x76df, &(0x7f0000000100)={0x0, 0x7058, 0x8, 0x3, 0x233})
r2 = socket$rds(0x15, 0x5, 0x0)
io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r1, 0x1e, &(0x7f0000000280)={r2}, 0x1)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x18)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r4=>r3, {0x0, 0xffffffffffffffff}}, './file0\x00'})
io_uring_enter(r4, 0x4e4, 0x107d, 0x4, &(0x7f0000000080)={[0x4]}, 0x8)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, &(0x7f00000000c0)={'ipvlan0\x00', {0x2, 0x4e24, @rand_addr=0x64010102}})
syz_init_net_socket$ax25(0x3, 0x2, 0xce)
r6 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x936, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=<r7=>0x0, &(0x7f00000001c0)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r6, 0x47ba, 0x0, 0x0, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})

8.662129116s ago: executing program 1 (id=1422):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="58000000100001002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="802100000000000014000300776c616e300000000000000000000000080004000e0400001c0016801800018014000b00070000ce"], 0x58}}, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket(0x15, 0x5, 0x0)
getsockopt(r4, 0x200000000114, 0x2710, &(0x7f0000000600)=""/102389, &(0x7f0000000000)=0x18ff5)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000001040102000000c97df3fc56ffffffffffffffff000800034000018a22"], 0x24}}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000000104d59f088ab94e8bcad5809b4b0500000000000000000003001f8c"], 0x14}, 0x1, 0x0, 0x0, 0x9af33139c2c4eaae}, 0x20004030)
r6 = io_uring_setup(0x3c93, &(0x7f0000000900)={0x0, 0x1246, 0x80, 0x1, 0xc1})
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0)
flistxattr(r4, &(0x7f0000019600)=""/4096, 0x1000)
r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
writev(r7, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2)
close_range(r6, 0xffffffffffffffff, 0x0)
unshare(0x62040200)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f000001a600)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a9000000000000000000000000000000000000000000000000000000000000000180000000000000000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff00000000000000000000000000000000000300"/180], 0xfc}}, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_emit_ethernet(0x205, &(0x7f000001a800)={@broadcast, @empty, @void, {@ipv6={0x86dd, @tipc_packet={0x8, 0x6, "819a70", 0x1cf, 0x6, 0xff, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, {[@hopopts={0xff, 0x1, '\x00', [@ra={0x5, 0x2, 0x1d58}, @ra={0x5, 0x2, 0x9}, @pad1]}, @dstopts={0x88, 0xf, '\x00', [@calipso={0x7, 0x30, {0x0, 0xa, 0x80, 0x0, [0x7fff, 0x7, 0xb1, 0x9, 0x8]}}, @calipso={0x7, 0x38, {0x0, 0xc, 0xff, 0x9, [0x0, 0x1, 0xd, 0x2, 0x3389, 0x8]}}, @pad1, @pad1, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn]}, @fragment={0x6, 0x0, 0x7, 0x0, 0x0, 0x16, 0x66}, @routing={0x29, 0x2, 0x1, 0x8, 0x0, [@dev={0xfe, 0x80, '\x00', 0xd}]}, @routing={0x0, 0x10, 0x0, 0x82, 0x0, [@mcast1, @dev={0xfe, 0x80, '\x00', 0x41}, @local, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, @dev={0xfe, 0x80, '\x00', 0x2c}, @private2={0xfc, 0x2, '\x00', 0x1}]}, @routing={0x2c, 0xa, 0x2725d1dc489863d, 0x3, 0x0, [@mcast2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x1b}, @rand_addr=' \x01\x00']}], @payload_mcast={{{{{{0x2f, 0x0, 0x0, 0x0, 0x1, 0xb, 0x2, 0x2, 0xd, 0x0, 0x3, 0x5, 0x3, 0x1, 0x6, 0x5, 0x0, 0x4e20, 0x4e22}, 0x0, 0x2}, 0x7fffffff}, 0x2}}, [0x0, 0x0, 0x0]}}}}}}, 0x0)
sendmsg$nl_xfrm(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=ANY=[@ANYBLOB="a0000000210001000000000004000000ff010000000000000000000000000001ac1e000100000000000000000000000000000000000000000a000000000000c0", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="000050001100ff020000000000010a010100000000000000000000000000fc010000000000000000000000000001000000000000000000000000000000003c000000fdffffff0a000a00"/88], 0xa0}, 0x1, 0x0, 0x0, 0x4090}, 0x0)

8.034681768s ago: executing program 3 (id=1424):
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$pptp(0x18, 0x1, 0x2) (async)
r1 = socket$inet6(0xa, 0x80002, 0x88)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) (async, rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) (async, rerun: 64)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid() (async, rerun: 32)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, 0x0, &(0x7f0000000200)=0x1e) (async, rerun: 32)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (rerun: 32)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) (async, rerun: 64)
timer_create(0x2, &(0x7f0000000180)={0x0, 0x14, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000040)=<r6=>0x0) (rerun: 64)
timer_settime(r6, 0x1, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) (async)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mlock2(&(0x7f00001bc000/0x3000)=nil, 0x3000, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000002180)=ANY=[@ANYBLOB="9feb0100180000000000"], 0x0, 0x2d}, 0x28) (async, rerun: 64)
close(r0) (async, rerun: 64)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000001004000014001a80100002800c000180080016000600000008001b00"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)

7.682979076s ago: executing program 3 (id=1426):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB="070000000000000000000500000018000380"], 0x44}}, 0x0)
r5 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0)
sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r7 = openat$cgroup_devices(r6, &(0x7f00000003c0)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r7, 0x0, 0x8)
write$cgroup_devices(r7, 0x0, 0xa)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000001100)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58)
r9 = accept(r8, 0x0, 0x0)
r10 = accept4(r9, 0x0, 0x0, 0x80800)
write(r10, &(0x7f0000000040)="cb", 0xfffffdef)

7.647186923s ago: executing program 0 (id=1427):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r2, 0xab00, r3)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0)
r7 = accept4(r6, 0x0, 0x0, 0x800)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00'})
sendmmsg$alg(r7, &(0x7f0000000040), 0x0, 0x40800)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
dup3(r2, 0xffffffffffffffff, 0x80000)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="88cc4e73f66b20cc4f06ac11dcd70185ca7c97a971cb486378dda8a1ca1fcdd77e89b122c5e3f95fa09500b5243cd5e8f15d73130000000000", @ANYRES16=r1, @ANYBLOB="01002bbd700006000000020000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
r9 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
r10 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0x83, 0x0, &(0x7f0000000080))
syz_io_uring_setup(0x507b, &(0x7f0000000380)={0x0, 0x2000000, 0x40, 0x5, 0x3}, &(0x7f0000000300), &(0x7f0000000140))
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0)
write$UHID_CREATE2(r11, &(0x7f00000001c0)=ANY=[@ANYBLOB='6'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r11, 0x0)

6.717692875s ago: executing program 3 (id=1429):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x70cb0}], 0xc}, 0x1f00)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x2c}, [@ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1010000}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xb682, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x2, 0xa00, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0)
sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a0102000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c08000140000000020800014000000030080002"], 0x122}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)) (async)
recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x70cb0}], 0xc}, 0x1f00) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x2c}, [@ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1010000}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xb682, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
pselect6(0x40, &(0x7f00000001c0)={0x2, 0xa00, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) (async)
sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a0102000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c08000140000000020800014000000030080002"], 0x122}}, 0x0) (async)

6.165567065s ago: executing program 5 (id=1431):
syslog(0x2, &(0x7f0000001740), 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x1a0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c0002"], 0x24}}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x20000000}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x8, 0x800000, 0x0, 0xb49, 0x9, 0x8, 0x7c97, 0x400}, 0x0)
move_pages(0x0, 0x0, 0x0, &(0x7f0000000740)=[0x0, 0x40, 0x7, 0x5], &(0x7f0000000780), 0x2)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = socket(0x10, 0x80003, 0x0)
write(r6, &(0x7f0000000000), 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000080)={'sit0\x00'})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000140)={'syztnl2\x00', r2, 0x2f00, 0x0, 0x0, 0x2000006, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast, @multicast1}}}})
ioctl$TCSETS(r5, 0x40045431, &(0x7f00000001c0)={0x0, 0x3ffc, 0x0, 0x1, 0x35, "ffff000000000d00"})
syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, 0x0)
io_setup(0x7, &(0x7f0000000000))
syz_open_dev$ttys(0xc, 0x2, 0x0)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x317001, 0x0)
r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$BLKZEROOUT(r8, 0x127f, &(0x7f0000000240)={0x0, 0x1000000})
pwritev2(r7, &(0x7f0000000680)=[{&(0x7f0000000200)="05", 0x6a000}], 0x1, 0x6000000, 0x0, 0x0)

5.614298824s ago: executing program 0 (id=1432):
syz_usb_connect$uac1(0x1, 0xfffffffffffffd63, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/dev_mcast\x00')
add_key(&(0x7f0000000600)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
pread64(r0, &(0x7f0000019180)=""/102355, 0x18fd3, 0xc2a)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, <r4=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, 0x0, r4)
setreuid(r4, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000340)='./file1\x00', 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000200)='./file1\x00', &(0x7f0000000280)='system.posix_acl_default\x00', 0x0, 0x1c, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000880)=ANY=[@ANYBLOB="0180c2000000bbbbbbbbbbed3713953cc3eacbdacf9989ce49bb86dd6001044800203afffe80000000000000000000000000000000000000aa8800907800000000fe80000000001e000610"], 0x0)
keyctl$setperm(0x5, 0x0, 0x15110231)
r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x9, 0x4000)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0xf, 0x1}, 0x7, 0x40, &(0x7f0000000440)="da1986e22519dfe741faf8492419d45be8a2f6004be7b19eb6aa5f3139f9c751", 0x20, 0x4, 0xc, 0x0, 0x1, 0x9, &(0x7f0000000540)="021ab749e2e2565c938ec8a5ef2d3aaa42c034db179fb2f842b7ebe545aae5b5d83f5f8526e44c37a71aa552108ec3ffe1f6f1e8f3acc09cdc836a29419b28d8cb5efb8e67a4488be106a73230ff39c15ef3e3c3f460b398c71b96b6e49a4994b29c450a8cb48b1bc821a16a0a2cfbdec89a2482c70edf3d8edd1f575ad5b52457348807edc4d333e1079b25b1f2df8f3c487fe9c03220c23615ced8651b11f2aeb85f9cfcc9ab5a81c0f99041640896268e4f589b76"})
ioctl$USBDEVFS_REAPURB(r6, 0x4008550c, &(0x7f0000000380))
syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYRES32], 0x0)
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424", @ANYBLOB, @ANYRES32=r3], 0x0)
r7 = syz_usb_connect(0x3, 0xf5, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a41aef86f240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050cd4bd8823e5561fa526d12402"], 0x0)
keyctl$read(0xb, 0x0, 0x0, 0x0)
syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYRES64=r7], 0x0)
getpid()

5.274176993s ago: executing program 4 (id=1433):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
syz_io_uring_setup(0x54e, &(0x7f0000000040)={0x0, 0x31da, 0x1000, 0x0, 0x1d2}, &(0x7f0000000100), &(0x7f0000000140))
arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2)

5.148367531s ago: executing program 4 (id=1434):
r0 = socket(0x2b, 0x5, 0x1)
setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000440)={'broute\x00', 0x0, 0x0, 0x0, [0x3, 0xaea, 0x0, 0x2, 0x7929, 0x4], 0xa, &(0x7f00000003c0)=[{}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x118)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2)
connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r3 = dup(0xffffffffffffffff)
ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000000c0)={0x0, 0xc000})
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000000)={0x8000000})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000190c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000191c0)={&(0x7f0000019080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000019180)={&(0x7f0000019100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00bd7077f7cf5944a9d69500050004000000000005000400bc0000000500020007000000018008000100"/52, @ANYRES32=0x0, @ANYBLOB="08000300020000000500020001000000"], 0x50}}, 0x814)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
r7 = socket$inet6(0xa, 0x80002, 0x0)
ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x7)
connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
r8 = socket(0x28, 0x5, 0x0)
r9 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r9, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r9, 0x4)
connect$vsock_stream(r8, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)

5.09663471s ago: executing program 1 (id=1435):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000280)}, 0x20)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000eb00000000d935c3e0d63b61dbe600000000000000"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r1, <r3=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f0000000380)}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0x19, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$UHID_INPUT(r5, &(0x7f0000000240)={0x8, {"7f9654d636ab18b7938a2804505c72e9994ca22404fc203334cc21ed3d6a776fd12d13f9602b2980f983c31a5d1e431db778099ce3af3fb20e1ee1f4fdb77cbb36154982a93c19825d6fd273ab1eb5bcd47adad50de8a6791486e482e29ecc94284921f33b941cfc1000c9781d9a828c5ec7a2c77b4e624a5aa0e9e39782bad733eda81ba47e1c6116e4170e6587dd6210a57abe91f1f80c4e31139d8b73fe35ac1f99ea82dd6aa9c9aa67de88ae3e141020e1a876bbc449d2d843aa7e6d90b948b7e28770e6ac71010c63f17e90fd20806a9f8d9f418ee3af74aac64b04a27c4f5e3626ca2da546c79d24acadd11e8d272a22fc54078fd5e64475993668980a9f95aff964ded28f79c862e674356af492b8377a759d8ccf1accb9a18ef7ad16f438dde69cd020d71552b0810688c882a26a22b23f4b35471b08b379193db1cd7934a4049ff1b00d9795cda6e73951641d5e2365c24facd5afd09ed1d096d758b4fef66fe1aa22395d67b7e1db623d4a60a7dc93893d6c4a91df79535a855868c5dc0033d5c428cd25b85c5deb6e81068553bc84cead4d1eba8aa57e2b354a6899e44acbd3834491219b3e231cd55d82f161774a689efe197cc193ac0124c67738a0a1d5f16a6768c2c2ba7386c8c95ca08c55117f344f5a2bca0d09e79ea3fc49491f2c7adc513c2779c1bf62b1a8643d23e9e8b2ae41d4a59f1b82b82e092b36eb851b8456da871b4057aec325a9d4cccafde61f2abc85e3cabeabb856f6ffbfe23d69219ec8fae6beb54abe7870dbae823d49806a967a1c7f252999804f106745f20490bb3347b59321dc69765567abcbd89de04d89622170005df5871ed0fb72345a11da074060d7d4ee2e437f71a45723fb6b02de56067e54f54c52d10f7874a13cbfb3bd65ce54f9d6719ea210e0cf79e4e2157736ec07ac5915682ab81bced665c1e72fab8d8cfe509de0f21fe374b957b379fd5918061e21c2e96985cc1354b2de859b0f1a463ab04683b1253eda671c2353b5c208aca652f5419ffc4949a7fa909b95653f42d97390c400b4a1c308b11e73e9a06d3b164d3361e75584d70e6bc61d570a7e0c7da330f643194c1893fcd6489fac605eead61b53dff18caf526ecccc9bbd9146bc3c3bb67677695e6fddaab081786e9084014e60f5c03ae5a9087726b05e17402cd2fbb80d773b8a41470b1f901a8c2b2d57450181f4fc5bc53c7cb3dc032b84567492607cb08832eca9f79da9210d197863e5db5a74a9823dc0cc8bd9f3a9b6ff5a7d15d4747a9b26e088f4fad96d81cd1214226b1c4585d418d593220fcbb9ad949266cc48163e3498b46ebcdf7b2b5ecfe67539a61ed9e39b02d5b35ac0d0e7fa830034ca2da8a7ddf04bcf2cee939994369feb77023e0e3de04b21db7a640a92c17748245005cd75a7deba4ff0e4c104a9db2d9a98ec8edb3562050a3bac5f322290e3d8b6fb21770ac436d4cb12b97fc8f76d7bb9eeed85663eb0626f1ad1719ee4b07f7de2c1d1a31c27c6879f4fa3dbdfb2bfc0898beabafbeca9f13050e6b2f6c432e423cd5cb6b8fa56fe32c3e50104e44462c0a5c69de6a7ac5ae3d9f07ceed64dbffa42e4663838bfcde92f0fcb895f3b93c59b0e48c09890dfc36436db56b708f6e7cbbd2a6305f573cee099dbcd263cb96d9fb69cbc3cb06d8f5e3789698a17e71d22b4665ff5447fcc17a31bb136c8bb4b984573bcaf1cb650198c1266e6ddfd42d44f9de02cb9d915c5334c550fac3fcee56790aeb09d81e7690a32d8b0cc477b23f15257820de227be1ffaec2f63f3266b8f5dd78947dcee355fe59bfb100e5244425532bb1d115acd211b8c16b0ec0aae00fca5d4511a05c3ff027a1cac56210a10d81c01b90e156cc7b33de0fac825dc516d398166096013e068db935483c93ba95da39b5ae4087d84479a4c4809f28f93790dc279637bd6f3dc441d315cf6bd7b0e3d92070a45baf4445ce063fd12690eb002f5ca068a256bc54100c99a02a346beca39072163c4b297d117f1ed9fef42e3dbc11d36a0a0db52e84461c6fbb4aad62cd6c8dc9ae6a3390a5e8773ac599e67436220c8d541a9039762bffaa7f490e31dddbc362fb4ff686cda905f3b02a1db76d4d570d970434921ca8a4765af6d5c8b881e1f4ffa7e2d9ef5f5511b94f88474674ec790bb5186c73446a227bf1ffd19b605733abd1bd41e421aeaf2ed4617088c7ceef85451225056435993e89e4bccd2c2e4b39af99feef11fea645eeb5cf9f77b1e19a72d3efb613100969b84302789714bca65bcbc96762b4012a5700c62aed706433b9f142b7302442b6a9958b0e28e8b1cfa9eeb4ac0d71f497b23babf9f0221dcb658d9f4db5d45bee30d2ad7c97d6a562e014a7701c15325ec5d42ab732b37714a77a95c03fb15bbfba6fade32bf50f985a1df362ca7216cc152907dd931acb58a63920f581e82b590c0d6a0033009f8e50c3263d3f58596b63d507cadbc809a6690561f74d0772bf92d04e06c47a350724b106f5e83f7e71c4b2a983bf5ad7d8684e7b8b5dc1273d0fa5879b8e61bde33d602bc8ff0913b6d32dcac366d568dc7cf82bbfc405cbe418a2644c26592b32ca1a632fc95123efb784cfb6953a94ebeccd24fba389a0e56b043df07d9a2dd38a1196e5e55576b25f85cb96f6560802a4a58b7a6857e8454faa2c880bf32d464562b2bdc5f0df22b663f2c01fc944f1cfd1908f617f8295a5440bb79ae178ea46a95baeea48322105146ac3ed2de7d3796ddddcc848a8ecf4a00dd055733b4f59211f5a40deea44e74b3bc57953b26ed61e6fd67889edfe8d0902385e37666aacec072735630ecc441c3cc6b09bb2f63aa4e332c6df728dc74078a83ce20454dfd616d116270666ddc09c5fea2e8442bc43455d0257fac92f3780061178f9420bf8e463f29896c12383dbb9a81bc5c87376e647c8a9786cb514fb9696d9c0a8d303c5c4b5b7c5f601c01fa19323e02f675c371bc44fbc1ac5704d41a89a2a4ccec6ac8440c532f07da25aa2dce6a5d2ebe694eb4017d178b221213bfe2a01d9cfe689bd190776bca6c032f446eb8862587a7826e35f3f691763212eee6af2e49bbeb0a27e07c5714b74e373798c7bebce265f7ebef3a1ea64078cf1e8a9d433af32c53090c972ffedbadafb50b9a6e540abd84f8e938583ea725954be3b236c5d8aca7d486d21902a2902f25a7c02dbe83c39bd0b81513f9ef198c49d560e930ae224ff47f92e4851e1f7ab5bb406abcf6596569261e6b0c67bb3b854e9c6de60bfb60fcf29241ff237151310ecd19f8b2cfe764c1df1a2de9d840eca47aa169ba9a415901204ec31ccdfd76e908029ae34fb12dc286758c64fd6d42bc82b14e07e421f4b42b180cd6ef40cac8062928b4a420a4577f24295f54de9048ac9d34307bf93e463cea4967cf4880166f68ed1eb965db2e4fb9f5f0b1c695d621e427ccb9a3188073ee6fde729c6698346efa1c0ba643c1efd20858965511da750060d551c44c435a5f1603fae7357e0bc78e92aad3d88790ec2aa1a42d6fe7e0ffc57f3599e406db63be7dd32692df32ce33dee0a2becdb02d6e435e09de3d356497543db23f53da25643f9c585e275297800d8beed47f0e622f86fc25d2e87036fdceebfe7257cb6de0c02412d1c0758acfcd0862e99ad17a118f46f635a87477e8b825423d94ada35bf0b5444aa7d3de4bb7eec7ae5129fcc2cba651cc972f5500fc5161149d29f452962afb102a01ae76825cb4477460be0b85d75058595c27e9b7fae3492ec3925c671bee5f4ca534d5a294f783d6cc073c992139b61d21fd98297b04c0578dafd5f7ebcaf8d4d9185aea3d76e813421f4573b38c25093c015a65e44fb297f0f6ac2d02c4237b37a3bfca2406c5c95ae5812816bacad59ba7c6f72d7c644ff25b592ed1e89b276e05866c01a4ced7fc6dd9f190c20d420d7c8a1fe908833a24c5e5bd7a95a2a6fbf147fc4b29a179718166dd0fbae2fc6b8c8aac6194fa6baf0d3edc36b2316c56c441ba53e3e7aaaf0a1405566ff584f73a637b74dde9bcb4d41da2be6c9df5d533fbac54f5fb52a8a793757cfe19aa90048c6d07e3474136ae1be2455b0d0d02eb4b5961ba883209355c0dd2af4aad98e7b971e358a7d9b55fe17cd6095f257355d9b99e5ea52848f17b35a80792d9ed0fef6fe3eef9a324902409969823be20bbe0e8dba9c747cd1a14d3642d877b86271f3f0c322a142c4ff635b37d542c3265b5fe8589a732bb1a55010b930dd0196cd43ac3634c01b4a44c517197d03a3d89c67f5c09aab409e84c0af466bfbd0c96d240101a2542c66b4b4b8ef65b41b0079995c52cc9720d2c1d7c128c6f17a65cc798c1986cfbd8888460c54438edc4f91f3580391c8b57d9aee209a59a116c1c44775437e9c30e6d87e82ce84e28532b19441e32ab9aea22177bac9daad25a6c88395e9348d6780de630cddb266c411011175bdb6255a36535180818447d43ffba3758d311539fe9f6811fa470bf3767b4c2d4cdf37854c7ee28730bb1d39d5c0dfffcdbf353cca3e13079f3ae66b839c7dd36914022a0e75bca5b622f521420b73249ef47f03c1fb03ecf7557882afcaa7cf454a68ad237d4ce860bd6b1531c1cafe2cfb76bc4188271ef6bdfb304ee0e6932463a1909f03d6e8a27b5f137d6b342841d613863dfdf37d5ec3a98d667810fb6f82d67620bdefed8b3ff98420a6c7ee577c3ba68b95a20403608a7ba6526ec9e8662c6e15ab09b1a9019d4958af04cb2e4890ee6b1077fcaa5cc0817f388461b230fe631e75f18ab392a5ca5de4a024ca16dd05fcfdf92114e43a5c4a169d462ff0dba57deeaf5eaafd892f8ccbd72ac56471162e1416bca39859b4184ba0d1b3f7ec05db4ef4cf0142867fa9be328a0be8aa74c716aad9411008607980861f4f72e9bfa60195e2f939d3f6a44a6cec07dd376d1bccaa126686f313d5f7918ecd1215026982c82ed1922ef70e36e8ed59b2d5ceab3b4aad7e53049062dd5ba0e87f7005c3f4d2b788245cdc2f35ef2572bea5ea92dfad406ade6d5ad18be8eeb4c652e5277b200fedea1c0c0f5a68d42e00d59b75941917b2cdf31fdf809f2078ca97fd5beba65b34e0621138ea0e94feb87166b2dac2232ebca575e5c0a4d565d9992f733bbfbe68a63d99ee93398604065d5517c33ed0e067bdb643e73102f16137afd7d4bf21e8065ea028c392a6dcefbe642dc3fb03a239d9c8b17023eacc8e19fea11c34a10644af1b786fc0f4504038c2ee59c1b353f3d7b9313df025b4b5874ca63ec164a3fe35bf390d266f53dcda6a8e190e63a56ffdf4f7c5c02aa22d376db06d4d2b96be5b331f897d1ecfd25c13a1c194c265dd95a5724a6435bc8138224d9db28b689b9cea5132cd19601dbc4a43e70c71e27e8fd0689d09484974e8a4605f8553735fffaf5654a087e323ca14e02b681b9bbe592bd6b719ae2e86bdf918b27c79d52dd334d1aa7ebc1bff76e97572faad092010a1022f7d33089049107a89c364ae7dd022d119e8f6ab795fd71d76a90e8202339401ff9e9918ea8c8e12f7b0ba10d9ebde5d1bc5988f2d07b34579d8c282628204f2978d8b0cf95dc41f3775a4053f833267c64b42336d7c850f2918ef0dd6d62e43fcc173254eb34748efd4754609ce25ade162ba3c91bb844aaf6fd648ee5a8fc5c64346603f8258592d67b9613e8f7ac0def0958f13436581d729e0b3e062738eb06b2116abe837529690a614fc5d3f53b4d4602e57060", 0x1000}}, 0xf47)
ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000200)={0xfffffffc, 0x40000, 0x2, {0xd, @win={{0x1, 0x5, 0x2, 0x1}, 0x8, 0x7, 0x0, 0x1, 0x0, 0x1}}, 0xfffffffd})
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000200)={0x1, [<r7=>0x0]}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000240)={r7, @in6={{0xa, 0x4e24, 0x7bc7, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa}}}, &(0x7f0000000000)=0x84)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0)
ioctl$sock_ifreq(r5, 0x8924, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_hwaddr})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100))

4.886507682s ago: executing program 1 (id=1436):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat(0xffffffffffffff9c, 0x0, 0x4a300, 0xcd)
r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000180))
ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xf8f, 0x0, 0x0, 0x0, 0x0, 0x2})

4.163843124s ago: executing program 0 (id=1437):
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00')
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6(0xa, 0x3, 0xff)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f00000000c0)={0x18, 0x0, 0x1, 0x0, &(0x7f0000000040)=[{0x7}]})
recvmmsg(r5, &(0x7f00000000c0), 0x3ffffffffffffce, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi3\x00', 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f0000000180)={'c6xdigio\x00', [0x4f27, 0x4, 0x100003, 0x2, 0x5, 0xcc9, 0x1, 0x7, 0x5, 0x0, 0xefb, 0x1000, 0x6, 0x1, 0x6, 0x101, 0x1000, 0x1a449, 0x81, 0x40000007, 0x99, 0xcaa7, 0x0, 0x7b71, 0x8, 0xe69, 0x3c, 0x8, 0x5, 0x0, 0xfffffff8]})
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000004040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000004140)={0x0, 0x0, &(0x7f0000004100)={&(0x7f0000000380)=ANY=[@ANYRES8=r4, @ANYRES16=r8, @ANYBLOB="010029bd7000ffdbdf25010000000000000007410000004c0018fffffffe62726f6164636173742d6c696e6b000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000401358256e305327a82aa09bec5723fe9353cc3e78efbeb994277b53effc1ab87a32cc4883860e"], 0x68}, 0x1, 0x0, 0x0, 0xc0000}, 0x40080)
quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0xee01, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000010000104000000000000000044130000", @ANYRES32=0x0, @ANYBLOB="9402040000000000280012800b00010067656e657665000018000280140007002001"], 0x5c}, 0x1, 0x0, 0x0, 0x4090}, 0x22000010)

4.034498544s ago: executing program 1 (id=1438):
r0 = socket(0x2, 0x2, 0xffff0004)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x1020008, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
chdir(&(0x7f00000000c0)='./bus\x00')
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0)
r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff)
splice(r1, 0x0, r3, 0x0, 0x2000, 0x8)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000500)={{'\x00', 0x2}, {0x6}, 0x81, 0x0, 0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)="397385f9cc08e6584f0c8a9dac42af1adc3f7a8cb5fef009ae0ff6a2800ca8bcf613bb27c9628e60190d345b3048162fee54ae6181e84dde49a784ac5a569e3a44586ae96ec978315b0f2424446a7cc3724ab69b05f867edc28610d62f6bc394995b2f3edcae23155cae5527b0220127b6123c1b21e6444722573d3f895ad43c870609cfd70e63a29bc5c9900b297a1f87302f8b4de77f42566f43906434f2b7550f62a0a46aeaa34d011d33c3fc6799faa692934dbe8a8b98b793ea117dbd", 0xbf, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x10e})
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
r6 = creat(&(0x7f0000000580)='./bus\x00', 0x0)
r7 = fanotify_init(0xf00, 0x1)
fanotify_mark(r7, 0x105, 0x4000996f, r6, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:11 1', 0x1e)
r8 = timerfd_create(0x7, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prlimit64(0x0, 0x1, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ec0)=ANY=[@ANYRES8=r5, @ANYBLOB, @ANYBLOB="516bfb02957ffe1d3d466c7cd739c81014990df77aee43af0c62c34cfb62e75d101f960d46af2267cce4ef8433bbdeab6e06855cf192f0aebadbb7962ed25588ea1b7768d7a656793611daaf779437a6f4ce93bde3d8fdf6ee6eb5be782c641817f8eaa7fab9250edc0b49ac0a7e573f411e41b36e3271cd750d0a3dad0a3a2e303902a783ba341145f15b12455c83eeb9a3571bca0b778427d5f5ff7a3ae0cdbafdb9aa48b84e2370fe93afdfefff1c642762cdf73b122ecb8646669daf250ccee75a6bf36cc59d5e8915322e9175a469b871baf586623bb9379b6ca1a185b23bc48e4aff374ca0a8d4f3804b2ac74f183f5eb6e8565a52d6a94dd1340a8ee968aaa71870588dfe519e02af0782708145d8cfc14907914b68a91f0d5f7c8bde40b87b78771dbb6772636e619a5e036056634947f2c6ca1c5e686c5a6fefc85f3fa989680819892c34d6c829f69729e4f76e84c40cc65778d73363db0e0b9d82a1fa60aac6f45cfafd0cd806bc48efe004f5d98fb77dc01acd6c93ea941a9c10404d04e30d2f400f192693570b74fdf5de4ec229614e7d9bf5d20932dc32584aa116d4c8d7cf647b188a72ddfd3bb4a707d32a959bbecf7a296b3027e6a8162d3f53243720a0a816c8badd7463a721cb83e8b2bb5415ef5290191aabb9d3798f3c262b327513f2da78bb22f3ca356f9f5923f35242e3a8059ced9c0becb4e2369f66fe779a7b5654e2b2867094f74a9c6c1db44e11b89f7ddeaa256b621885d53cc4a26842f36563e1f0250745aef0a0f819d738812db3ff5e1501992bd421c31940fa629a4ee4efab610bfc926ad03dba510974751a0f84738a035c5abd167a4ff2711a430be395bf44af3b15d61bb11caff1db9909a3685dc159d469a3a5ffff9b031f3fdae58dffbcf0c6a672c50a16c5aaf576fddefbebd0bcc22960fde71155b799cfb8c7b3adcf8281c614d84d1835d4b7a1d5c653eace48ea096154cb9ff27b254ec1ccac8573173aa63de7584b81069369916e1d23d2f78b7f9dd55204858f367688273443ec2c5f073dc232329341f53eec971aaf6eba9c2eab022a9d13cd3c0a91071904309d7cfbebd1475d0233f6b3aca922db28192320b9031983c788a8bbd655fe06f4dd53fdd8bcee8dae7e97efa52e1e9b7c5cc7a8cb612b658764d670cdce5bd452954dc3f324390278f7e3b9f4a0ba98f9323f07215438e8616a7acc02196023763a0adfca3e5c531fb4ba21d5564c3fde520fb7a1b45c6a972769f8547116cbcc22f3336c04fc6248e3f5e50af743f56c165fb66fd104b4a02eb20eff2a12d1b4fab35a5345f4569619c36027319ee610ab908d64977a4779df9aacfdd0c45fc3d40533f84159c0788233a20fdc9918195eac55434d28a54f6514c2aaa18744b72a03007c93b4a0c7aef184f3241c064c1f099160876449065c19c5a368b0a5224bb8d8e2520afec8a969fada0b3084345784241118109b823954965cc272dcb89d7cca428486013683ddbdaa28e617209f96277667f814b9e0f3aae280a7dabe7027fc186bbb4f58d9a7ba18d36a49715e8102a629c4a001f0915f0f49826d1f6ac63752bdc1559db07b326c80f80a48e19c2264a07a20f587f7ae8739373c64e697bea842ad7642d0a896ab54d02ccd654dc8542f1e3d5dab7d43c9f9a2a50168a9ca86ac8c56be14a3cd1d849e9dd411557070ce94e7c7b05dce44bdf0e3964bc066a816b329395578a450662e85b9983da9d8f840f4c497c10d879cdb5509e0041e1a4e64ee5044db12a0a58d5800795363fd63a40957607ea94ba6d1ec89cde61d69ada0991dbefdef8bf6527eee0c54192caef1fd79edf82ac78691a39b6ffec20c696392a115a2e60579e645d4441c1aa094890c916cf966e5de6cd3437fa7d4eaa99a8c56ae1fe042fd2f16955a9fd2ff4308ce1c94e439c131d79ae6ee596dd3ed87c6d4f7a43e093124ab86428b7f3b6b4088dd456b52886a86ece89cde75df532e299f8d779cdca6d5b4992b8f631fd3a734db18417664062822c21b2840ed8e329634416472e384919cd74170ca1ebf95eec038e1a6e77ea814d7def11faecc21b49b82d2332490fccf35a603621b05804a50a24dcd156732faa7adcbaaadd45b88d7b97dcb04cb91486c689673f01f02041c0253db3cb3764252b4d3a7a8f1ba3b231bc1a6daea8de1971a5b4ab4e3f51a79b76bfabf4f561552f33f4d5a866f6a7fac900707609eaa0247c44110340fb3f7b6d84c878cbd9e6fd74498ad553550bb82f1ec8a01e5b9f24d10075b4ef2a1e86f73c248f2a251614d3382240a42d178868fbe45f2b60bf26b126b85e3880aff288e00017b0edd48030dce04c26d770cbb03167b6f82a68c7ec455dcd768e70a92385a1d84809324c028a8ceda22000d82d35949cf509a80441dce6ab12e3387c6a074bc66f1b0079e78c287df14329f3c6b4d26df89f0f6740156c029ed173b9230596c5ccc61b5cd64aba4c87cc21bf939f921e694ff5ff5761fd9cb11b83455fc46c4a77092b116331d207d75c118c0d07160da504a53a82544753dd981eb81e90563cbce242d58810360670c2e6ff25cbc60edd50fad909c18459b7a330140ba18a3e2b6a88a0666df8f74225ff8d2c879f115e5be18c33b41fc525e8db1392c3d935bed6e87d86a7ab5fce70f60e55effb89b71905eb66660301507bcbf70b15744d696527af12d1ed5e9752a20a20e937ae7c0e321641dae628dcefee30521e8f4e742c5263353aefe7764be9529737b574c9a15edc39228ebd7a93f94f1bc958b206a3688dab1f0bbf177022b2b05a9a5e01277f3921eb42ec868f2770b8ff4b7adcc718cd4e9e0a9ee528ca5b32f0d004110668d4530847f4cfd57db5c6f9d004a08561a883663ad0b6246f998c8e0cb564448d321e051dcb56c36faf967b7ef08ef282945c7d41196f17404beb40e965f9b03ca31ba9c09e1b25dd1bcbf722492e77dbd783a4aeda12452ec7f0bbfe4352b2311217a57fe92793e624bad042c68583873ec6ae333b68d82a872e00727213d8588e2221e5daa1660c7ccdf1e4f0fb1c4849e04c1e69f8087684f78b8b7e38198993f333d52e59d6ce0f8ee9520388630bb65fdcb0398dd8a81d5f2abe9d9a03413373baffcf0184c2e09ebbb6ef99efc622145b6322ea822c524b00188422c5da29b4637d344fb772ab92b0625b4bd5a7b016022769b3f74ad7a210b63395458f0502ac6b811d55c1ede0d4c9280d43526b5edff5fa24c0adaafb6b96d50e4899a3757a015dc3fe90d9a0c8446bc074be64ce46830f1e80b7365468d9779f8e59c2b9b88fdfeae2d063418206a63c151d12fdc5f6585a4cd570ab6e058b892477233981416ff5958a8e9c6d06754c8dc39443f9ad4745391ff33bd0ddf7db3abe09830df210c377903927843d3f5456bdd09e682856ad985522388400b241f5f5421b64a5d61d281c723681b9b6e8b0c9f001ec3b27545953fa871e0ab05f69ef3f6a7f91e62258ec3ad128607d748270c7db1f0abe40079318c09a457df8afcb3c88176cc3aea6892767bf5d81e94a64ecfb91c20496e1c19384da5eee598dfbf98b0c3af4599237ace6315f2a6ff7a8b43ff283d1cd06b86915964992d95c2f9b8ded9d609e1e1fc964442d9d7876d644c2712928cde6a141243b2645834fade0400123099e36017035afe3b63ea85b9860b4476508b54e0364118627bc94e9602b45cab62dd7f2ac7a8b62a610eaccfa996461f784553f170ca9126ab9d9bfe1a951c5041ab4e8b66ebad15cea5ddf1a86c427612813b38b8a00ea36ef9109c98a6ef6337c8aa421295acd2f3a1dcd88f6ba3eb81b4bf01d3e24c51c6929c2e19571d552bb4a8e1ecad9e49033d698a5ddadbaface4ce01a3b539a7455cd00a2f9b0f9ac244c84511ab58b308a30e9bb88a67154cc153b80b2f33d959b62ee6820d0c02bdb64e1408ce6ddd74165345bc63b45c8dcf1af86d7a4cef93da12b2c6f2fb195669fe74714dc85e3729f8e33f6f10077f2ba706ac97cc8405342908ab83fb578e0309244019696722b3affc3f2777ad6f0d91db380ebd378fbbdad6e44cc4564badaa33ee82d39837b1ef03840114fef86db72fe18015060feaa9e4264aab235f6153eefef4104e2df784e8e282c60e394d1eb3d2f482260eb341088c306a41243f877050d90b7164bfcb4079f70b7507051fb4f8f2ed65643b140f70a382a245da5ca9c7a44aa119a3cce16eb32c92a9bdb3db9efa8c1bfcaf1d02bb3cfbe8e725e86079e7882fedb039daf0b1217a734797ebce52b67dd267f8305102e7c9e8ce89762026caa26466562e0545c0824753f5f786e87a72d413094aecb68216821c93c80af3812437bbe78f64b69ee01ad09b8b7e16a5a7e834ddc165b53b4bf1e7be1e81a170eb18ac83f9c2c7a345c5aa1d4272e6074eff017348ac03d6bc4693885f3e4e0163370a471dd50c8ae126b6333c8c531b002ef9aaa7e15dd81ddfd9694e732359ec8d7c4ff60c39dd3801ca766531b059698228d688e8f4b260f29964220ed02fe610946dc714d1a6bbcc7920beb2683b863ab255cdf4d5a36d528730e65daf1d4e74110abda6b7c3fae898cccc7358caf53eb4a1e6768a046e3df74819c74c0f5bc0d9a0c56efdb20e69235ea001888af629fd4dd180df1559431e", @ANYRESDEC=r8, @ANYRES32=0x0, @ANYBLOB="140003006d6163766c616e31000000000000000008000a00", @ANYRES32=r9, @ANYBLOB="e8001a8048000a8014000700ff02000000000000000000000000000114000700fe8000000000000000000000000000aa050008000000000014000700fe8000000000000000000000000000bb9c00028010010180bafc0000000000000400070040ff0700100002800c000180080000000000000018000a80140007000000000000000000000000000000000144000a80050008000000000014000700fc020000000000000000000000000000140007000000000000000000000000000000000100000700fe80000000000000000000000000000005000800000000000400070004000700100002800c0001"], 0x15c}}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)

3.870424148s ago: executing program 5 (id=1439):
openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x40400, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket$kcm(0x2, 0xa, 0x2)
syz_emit_vhci(0x0, 0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b07, &(0x7f0000000540)={'wlan1\x00'})
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000001c0)='mqueue\x00', 0x2247c80, &(0x7f00000007c0)='usrquota')
chdir(&(0x7f0000000100)='./file1\x00')
r3 = open(&(0x7f0000000080)='./bus\x00', 0x4001410c2, 0x766c618eb221465a)
quotactl_fd$Q_SETINFO(r3, 0xffffffff80000600, 0x0, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$BLKTRACESETUP(r3, 0xc0401273, &(0x7f0000000140)={'\x00', 0x237, 0x7fc, 0xbc5, 0x9, 0x7})
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x58, '\x00', 0x0, 0x2}, 0x94)
openat$binder_debug(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
socket(0x10, 0x3, 0x0)
r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0)
ioctl$COMEDI_POLL(r4, 0x640f)
ioctl$COMEDI_POLL(r4, 0x640f)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0xee, 0xff, 0x4, 0x6, 0xfffffffe, 0xffff53e9, 0x9, 0xf, 0x1002, 0x1, 0x6, 0x5, 0x6, 0x4, 0xffff, 0x6, 0x4, 0x3, 0xfffffffd, 0x65a, 0x3fc, 0x10000, 0x800, 0x400e2dc, 0x9, 0x4e, 0x14, 0x3, 0x5, 0x1, 0x2]})
landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
r5 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0)
landlock_restrict_self(r5, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)

2.779911191s ago: executing program 0 (id=1440):
r0 = syz_usb_connect$hid(0x5, 0x56, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc26e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f00000002c0)=@chain)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0xc0100)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdb"], 0x46}}, 0x4004)
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
read$msr(r1, &(0x7f0000004340)=""/102376, 0x18fe8)
syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
getpid()
syz_open_dev$sndctrl(0x0, 0xfffffffffffffffe, 0x16ef03)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x0, 0x2, 0x234)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x214, 0xd, 0x100, 0x1000}, 0x4, 0x0, 0x5, 0x0, 0x1, 0x1e, 0x0, 0x1d, 0x5, 0x400, {0xfffffffc, 0x5, 0x0, 0x1, 0x5, 0x4}}}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xe, 0x7}, {0x0, 0xfff1}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, 0x0, &(0x7f00000003c0)}, 0x20)
r7 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2, 0x7800, 0x80, 0x6, 0xdc68}})
syz_open_dev$vim2m(&(0x7f0000000340), 0x2, 0x2)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r8, 0x29, 0x8, 0x81, 0x7f, 0x0, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x40, 0x6, 0x41}})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="004f0500000047056cc594d500"/24], 0x0}, 0x0)
pipe(&(0x7f0000000000))

2.26527787s ago: executing program 5 (id=1441):
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
syz_open_dev$vbi(0x0, 0x0, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f00000002c0)=0x2, 0xb, 0x2, &(0x7f0000000300)={0x77359400}, &(0x7f00000004c0)=0x1, 0x2)
r2 = socket$igmp(0x2, 0x3, 0x2)
r3 = syz_io_uring_setup(0x111, &(0x7f00000000c0)={0x0, 0x24ad, 0x10000, 0x1, 0x1de}, &(0x7f00000029c0)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000001040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r3, 0x1733, 0x6323, 0x20, 0x0, 0x0)
setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000180)={0x0, 0x4, 0x0, 0x40, @vifc_lcl_ifindex, @multicast2}, 0x10)
setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000000)=0x9, 0x4)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(0x0, r7)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c00), r7)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r7, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x14, r8, 0x1, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4e000}, 0x40000)
r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
ioperm(0x0, 0x25a, 0x7)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000240001002abd7000fedbdf25440000004c000e804800518038003a802c0061800400548008000800050000000800e700", @ANYRES32=0x0, @ANYBLOB='\b\x00O\x00', @ANYRES32, @ANYBLOB="0c000d00ff03000000000000080035007f0000010800de00", @ANYRES32=0x0, @ANYBLOB="b3938376"], 0x60}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

1.913698352s ago: executing program 4 (id=1442):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x18000, 0x0)
ioctl$SNDCTL_SEQ_PANIC(r1, 0x5111)
pwrite64(r0, &(0x7f0000000080)="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", 0x1000, 0x8)
ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000001080), &(0x7f00000010c0)=0x4)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001100)={{0x1, 0x1, 0x18, <r3=>r1, {0x1}}, './file0\x00'})
r4 = syz_genetlink_get_family_id$fou(&(0x7f0000001180), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r3, &(0x7f0000001280)={&(0x7f0000001140), 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x64, r4, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr=' \x01\x00'}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040800)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001300), r3)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001340)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000001480)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={&(0x7f0000001380)={0x8c, r5, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xf965, 0x67}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]]}, 0x8c}, 0x1, 0x0, 0x0, 0x24000040}, 0x0)
writev(r2, &(0x7f0000002680)=[{&(0x7f00000014c0)="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", 0x1000}, {&(0x7f00000024c0)="3404a0e0f4936f89a7890a3fdf2ac5097cf782c4b278207ba75bf35aa2d5b2e18f2155b01c63e0938daa8caa2d7ecbd8700f3186b31224bca1", 0x39}, {&(0x7f0000002500)="0b8e20dc527d2f551252642c30ca9be069fed188d64250b8ca4ec12d540b2a2b415a1f057da6b609cdc65d116df2fb42aa8f8261c5a6a2903892dc9f08ee14be3142b1e8cdd0d407c1e27546915a17ffe01e1812f67601c7bc5e7b89736948ef257bfccacd03816aba87fde1f95c891dc89b927586148743d5dc61df382cde6ec00e966593cfc6b3639ead07f2ecfb094c478ef891c3b815462732600a5de01d5c348b90d6d11af3c215df8dc8d4d63c44b5b5e143176fc5dd4c533f2b6f07f480ef54138a123c32c840d85e318251e6c0245897105bf7ab", 0xd8}, {&(0x7f0000002600)="9a14d6a9dcbf42fcffde163046c3ca3cd37f77a2e9ce64b0cb368ea42bb32137a639fe3dc91f8526c852b28ea97b27ce456f52c51046cd9a4216553459079defcd35", 0x42}], 0x4)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
fcntl$getownex(r2, 0x10, &(0x7f00000026c0)={0x0, <r9=>0x0})
prlimit64(r9, 0x8, &(0x7f0000002700)={0x40004000, 0x10001}, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000002740))
sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000002900)={&(0x7f0000002780)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f00000028c0)={&(0x7f00000027c0)="108187895c11af7090480c7c6c8634181adfed96549acab01071628ae6843a2beea9b3caa9c67377618000dec012ebb442a4412f636a31ce13d8bbb050c25199c215b44aa6416287f52dd077035367a412d1c94a3fce6c3e6b6b1f85288566fa5d4ee78ca01533cb63e35afd972029e128043b146b2caa72d6a3e7234f288e235e2b6c70d87c7e2ae78fd9f0e75a1b2db1947aed6e03ff52267323476832f086abcad256b1efb712e0978d94b1c107cf46b73628ec76269756406321b017ceac524858868398ee2245776942bc541656cc8e6b9520eabb6d42e5d93d499bdf48bbb2cdc16f425194e14cd53386b30f63", 0xf0}, 0x1, 0x0, 0x0, 0x10000000}, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000002940)={0x8, {{0xa, 0x4e22, 0x400, @empty, 0x2}}, {{0xa, 0x4e24, 0xd, @rand_addr=' \x01\x00', 0x10001}}}, 0x108)
sendmsg$NL80211_CMD_DEL_INTERFACE(r8, &(0x7f0000002b40)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002ac0)={0x20, r5, 0x2, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x52}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20}, 0x44004)
ioctl(r2, 0x2, &(0x7f0000002b80)="67a437bc467b98e8fd9a968a4de895327e4db90958182b3e62afa32e103b6d001c2264ad16acc3828f1c51bf6c")
setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000002d00)={@can, {&(0x7f0000002bc0)=""/232, 0xe8}, &(0x7f0000002cc0), 0x48}, 0xa0)
inotify_init1(0x80000)
accept$netrom(r3, 0x0, &(0x7f0000002dc0))
syz_open_dev$usbfs(&(0x7f0000002e00), 0x7f, 0x42000)
ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f0000002e40))
sendmsg$TIPC_CMD_SET_LINK_TOL(r7, &(0x7f0000002f40)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002f00)={&(0x7f0000002ec0)={0x38, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x1c, 0x18, {0x3, @bearer=@l2={'ib', 0x3a, 'veth0_to_bridge\x00'}}}}, ["", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x440d4)
socket$inet6(0xa, 0x1, 0x4)

1.781972577s ago: executing program 4 (id=1443):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x114, 0x1f, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0x14, 0x3, 0x0, 0x0, @ipv6=@private1}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@dev}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b504681000000000000009ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc358"]}]}, 0x114}], 0x1}, 0x0)
sendmmsg$sock(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000640)="199811d8fcf7c43922e243c6537dca63dae7bcf2bdf77a72db9ecc859807f1fc063053a8bde50fbd3ce1ec7501fdb82dcb7177b5cbf61c8455285bacfa5e58c5e7e17c42ebe6b475c775823754e7b1847b0e80ee1d427fe9bcda3a5783be6b480c554d7d2e21bb86b445911732b7f8f897b4445e1425", 0x76}], 0x1}}], 0x1, 0x20008001)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x114, 0x1f, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0x14, 0x3, 0x0, 0x0, @ipv6=@private1}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@dev}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b504681000000000000009ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc358"]}]}, 0x114}], 0x1}, 0x0) (async)
sendmmsg$sock(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000640)="199811d8fcf7c43922e243c6537dca63dae7bcf2bdf77a72db9ecc859807f1fc063053a8bde50fbd3ce1ec7501fdb82dcb7177b5cbf61c8455285bacfa5e58c5e7e17c42ebe6b475c775823754e7b1847b0e80ee1d427fe9bcda3a5783be6b480c554d7d2e21bb86b445911732b7f8f897b4445e1425", 0x76}], 0x1}}], 0x1, 0x20008001) (async)

1.654900417s ago: executing program 4 (id=1444):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a00010000000080fbdbdf250a8080fd00000000000000b00000000000000000"], 0x24}}, 0x20000050) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xb}}, './file0\x00'})
r2 = socket(0x2, 0x80805, 0x0)
openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8400, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32)
socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) (async, rerun: 64)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) (async, rerun: 64)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)}, &(0x7f0000000180)=0x10) (async)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000001080)=0x8)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000180)={r7, @in={{0x2, 0x4e20, @empty}}, 0xd9d, 0x1}, &(0x7f0000000040)=0x90)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="54000000100001040000000000000000000000004d19c2419e5fd3659a638295e8e009a87c111320c27e37bf6bc4e1599a6bded8bfb96ae8774354c681d721e8561edc4ec3d54ad4d3a001cda2e02694fb62958f76bfc27d354f102916448c6dc8f2d037398e4547e473d528f49f8c840231645de19d40fe5ac98ff9629d5e71382d6c4bb1ed7479622fd8b24d7c0b3b516bb5e00d9cd8be917844966a8bf3ffbf0e9e", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028004001200060018000900000005001700010000000500160002000000"], 0x54}}, 0x0) (async)
r8 = dup(0xffffffffffffffff)
write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=<r9=>0x0, &(0x7f0000000140)=<r10=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r8, 0x0, 0x0, 0x0, 0x80000})
write$P9_RSYMLINK(r8, &(0x7f0000000100)={0x14, 0x11, 0x1, {0x4, 0x4, 0x2}}, 0x14)

1.619548973s ago: executing program 0 (id=1445):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]})
readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000004, 0x50, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 32)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async, rerun: 64)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async, rerun: 64)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2a00)
ioctl$SG_GET_VERSION_NUM(r2, 0x2284, 0x0)
r3 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0)
ppoll(&(0x7f0000000000)=[{r3, 0x2120}], 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f000082f000/0x1000)=nil, 0x1000, 0x1000003, 0x10, r1, 0x240fb000) (async, rerun: 64)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) (async, rerun: 64)
socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000027c00000400fc800c0001800600060080"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc050)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r5, 0x0, 0x12, &(0x7f0000000300)=0x1, 0x4) (async, rerun: 64)
sendto$inet(r5, &(0x7f0000000000)="f461c5bbd75c35", 0x7, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) (async, rerun: 64)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000200)={0x1}) (async)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async)
recvmmsg(r5, &(0x7f000000e280), 0x58a, 0x42, 0x0) (async)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x800, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00'})

1.482161189s ago: executing program 1 (id=1446):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da00090589"], 0x0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000ec0)={0x34, &(0x7f0000000c40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000ec0)={0x34, &(0x7f0000000c40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r2=>0x0})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x11, 0x0, 0x0, 0x0, 0x40, 0x483, 0x3261, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x10, 0xa, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x1, 0x2, 0x8, {0x9, 0x21, 0x1, 0x9, 0x1, {0x22, 0x4df}}, {{{0x9, 0x5, 0x81, 0x3, 0xdd30491cbabb9450, 0x79, 0x34, 0x7}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0x5, 0x6, 0xc0, 0xff, 0xd}, 0x24, &(0x7f00000002c0)={0x5, 0xf, 0x24, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0x3, 0x2, 0x4}, @ssp_cap={0x18, 0x10, 0xa, 0x8, 0x3, 0xd, 0xf, 0x8000, [0x3f00, 0xf, 0x3f00]}]}, 0x2, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x180a}}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
shutdown(r4, 0x0)
syz_io_uring_setup(0xb05, &(0x7f0000000480)={0x0, 0xa795, 0x0, 0x0, 0x2f5}, &(0x7f00000002c0), &(0x7f0000000080)) (async)
r5 = syz_io_uring_setup(0xb05, &(0x7f0000000480)={0x0, 0xa795, 0x0, 0x0, 0x2f5}, &(0x7f00000002c0)=<r6=>0x0, &(0x7f0000000080)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0})
io_uring_enter(r5, 0x47be, 0x1, 0x0, 0x0, 0x0) (async)
io_uring_enter(r5, 0x47be, 0x1, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r8}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r8}, 0x10)
timer_create(0x0, 0x0, &(0x7f0000000000)) (async)
timer_create(0x0, 0x0, &(0x7f0000000000))
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='hrtimer_start\x00', r9}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='hrtimer_start\x00', r9}, 0x18)
timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=ANY=[@ANYBLOB="740000001000030500"/20, @ANYRES32=0x0, @ANYRES64=r2, @ANYRES32=r2], 0x74}}, 0x0)

1.16415526s ago: executing program 5 (id=1447):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00') (async)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x14107e, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0x20)

1.068935654s ago: executing program 5 (id=1448):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat(0xffffffffffffff9c, 0x0, 0x4a300, 0xcd)
r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000180))
ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xf8f, 0x0, 0x0, 0x0, 0x0, 0x2})

166.220639ms ago: executing program 4 (id=1449):
syz_open_dev$MSR(0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x134, 0x30, 0x1, 0x0, 0x2, {}, [{0x120, 0x1, [@m_tunnel_key={0x11c, 0x1, 0x0, 0x0, {{0x3c}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xbabd, 0x81, 0x5, 0x1, 0xffd}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, {0xbd, 0x6, "e575bc16407bfabe3c31ea93c1601bf0980b36d3e201fa27daf93f832b3e00cbaca8d9d3157ff95df088f1fa838f394946feea705c13742050af579a7c3c6d2966146e99ce212dd679f02be6ef638c06dd06d101a0439257de5a751a095b49411d838d230de1b3b6636490656c2dd05d5dd184166c35f064b377d3c28f2a3d19c89e79368295001ac6c1129d84631d30e08f7326f638a64365cdb094d71410f2f1433813d7e2ae8835509ed6a9c6b94694dad8cb8ce1249abd"}, {0xc}, {0xc}}}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x4040800}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000340)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x13, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c)
r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0)
r4 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000009, 0x4082172, 0xffffffffffffffff, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_ep_write(r4, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000")
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'rti802\x00', [0x4f27, 0x0, 0x4, 0x4, 0x5, 0x5, 0x4, 0x7, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x3, 0x1, 0x8, 0x101, 0x0, 0x7f, 0x3, 0x40000003, 0x89, 0xcaa3, 0x0, 0x20001e5b, 0x3, 0xe66, 0x3, 0xa, 0x4086, 0x0, 0xfffffff8]})
r5 = accept(r0, 0x0, &(0x7f0000000180))
r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r0)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0)
write$cgroup_int(r7, &(0x7f0000000040)=0x900, 0x12)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r7, 0xc008551c, &(0x7f00000001c0)=ANY=[])
sendmsg$GTP_CMD_ECHOREQ(r5, &(0x7f0000000540)={&(0x7f00000001c0), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, r6, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r7}, @GTPA_FAMILY={0x5, 0xd, 0x28}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_MS_ADDR6={0x14, 0xc, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x1)

131.281621ms ago: executing program 5 (id=1450):
r0 = syz_io_uring_setup(0x3bcd, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x17a}, &(0x7f00000000c0), &(0x7f00000001c0))
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r2)
sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x28, r3, 0x201, 0x70bd26, 0xfffffffe, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x28}, 0x8, 0x3000000000002}, 0x844)
io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, 0x0, 0x1)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r5, &(0x7f0000001040)=[{{&(0x7f0000000280)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}], 0x1, 0x48000)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r6=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f00000000c0)={r6, 0x160}, 0x8)
r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r7)

0s ago: executing program 0 (id=1451):
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x101202, 0x0)
creat(&(0x7f00000002c0)='./file0\x00', 0x1)
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x24}}, 0x0)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
execve(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000240)={[&(0x7f00000000c0)='=\x8d5\x10\xe4\x00\bj\xfb', &(0x7f0000000080)='=\x8d5\x10\xe4\x00\bj\xfb']})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00'})
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
r4 = openat(0xffffffffffffffff, &(0x7f00000003c0)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20)
preadv(r4, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="4000000066001fff0000000000000000"], 0x40}}, 0x4004)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001b40)={0x2020}, 0x2020)
ioctl$BTRFS_IOC_ADD_DEV(r3, 0xff08, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001800ffffffff7bfbfcdbdf250a148000ff01fd07"], 0x1c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000))
sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@getroute={0x14, 0x1a, 0x800, 0x70bd29, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x80)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

kernel console output (not intermixed with test programs):

denied  { create } for  pid=9439 comm="syz.1.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[  265.998296][   T30] audit: type=1400 audit(1756811070.175:887): avc:  denied  { sys_admin } for  pid=9439 comm="syz.1.796" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[  266.120480][ T9442] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  266.369652][ T9459] overlay: Unknown parameter 'dont_appraise'
[  266.487903][ T9455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  267.264702][ T9421] tipc: Resetting bearer <eth:syzkaller0>
[  267.312363][ T9421] tipc: Disabling bearer <eth:syzkaller0>
[  267.428262][ T9476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  267.439788][ T9476] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  267.790329][   T30] kauditd_printk_skb: 26 callbacks suppressed
[  267.790775][   T30] audit: type=1326 audit(1756811072.115:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9479 comm="syz.3.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b8f8ebe9 code=0x7ffc0000
[  267.827693][   T30] audit: type=1326 audit(1756811072.115:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9479 comm="syz.3.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f17b8f8ebe9 code=0x7ffc0000
[  267.852266][   T30] audit: type=1326 audit(1756811072.115:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9479 comm="syz.3.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b8f8ebe9 code=0x7ffc0000
[  267.900410][   T30] audit: type=1326 audit(1756811072.145:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9479 comm="syz.3.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f17b8f8ebe9 code=0x7ffc0000
[  268.025567][   T30] audit: type=1326 audit(1756811072.145:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9479 comm="syz.3.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b8f8ebe9 code=0x7ffc0000
[  268.150602][   T30] audit: type=1326 audit(1756811072.155:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9479 comm="syz.3.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f17b8f8ebe9 code=0x7ffc0000
[  268.220022][   T30] audit: type=1326 audit(1756811072.205:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9479 comm="syz.3.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b8f8ebe9 code=0x7ffc0000
[  268.281053][   T30] audit: type=1326 audit(1756811072.205:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9479 comm="syz.3.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b8f8ebe9 code=0x7ffc0000
[  268.306872][ T9489] netlink: 12 bytes leftover after parsing attributes in process `syz.0.809'.
[  268.546125][   T30] audit: type=1326 audit(1756811072.215:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9479 comm="syz.3.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f17b8f8ebe9 code=0x7ffc0000
[  268.589052][   T30] audit: type=1326 audit(1756811072.225:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9479 comm="syz.3.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b8f8ebe9 code=0x7ffc0000
[  269.060669][ T9502] block nbd5: Attempted send on invalid socket
[  269.068057][ T9502] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  270.162679][ T9519] QAT: Invalid ioctl 1075883590
[  270.181022][ T9519] QAT: Invalid ioctl 1075883590
[  270.188838][ T9519] QAT: Invalid ioctl 1075883590
[  270.858533][ T9519] QAT: Invalid ioctl 1075883590
[  270.874488][ T9519] QAT: Invalid ioctl 1075883590
[  270.885235][ T9519] QAT: Invalid ioctl 1075883590
[  270.892734][ T9519] QAT: Invalid ioctl 1075883590
[  270.914459][ T9519] QAT: Invalid ioctl 1075883590
[  270.931837][ T9519] QAT: Invalid ioctl 1075883590
[  270.946818][ T9519] QAT: Invalid ioctl 1075883590
[  271.168326][ T9539] netlink: 400 bytes leftover after parsing attributes in process `syz.1.819'.
[  271.554545][ T9531] lo speed is unknown, defaulting to 1000
[  272.927505][ T9567] block nbd4: NBD_DISCONNECT
[  273.285787][ T9580] pimreg: left allmulticast mode
[  273.351604][   T30] kauditd_printk_skb: 3 callbacks suppressed
[  273.351633][   T30] audit: type=1400 audit(1756811077.672:927): avc:  denied  { bind } for  pid=9573 comm="syz.3.826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  274.385991][   T44] usb 6-1: new full-speed USB device number 19 using dummy_hcd
[  274.602006][   T44] usb 6-1: config 0 has an invalid interface number: 110 but max is 0
[  274.991441][   T44] usb 6-1: config 0 has no interface number 0
[  275.007537][   T44] usb 6-1: config 0 interface 110 has no altsetting 0
[  275.025688][   T44] usb 6-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55
[  275.035218][   T44] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.045084][   T44] usb 6-1: Product: syz
[  275.052607][   T44] usb 6-1: Manufacturer: syz
[  275.061351][   T44] usb 6-1: SerialNumber: syz
[  275.091339][   T44] usb 6-1: config 0 descriptor??
[  275.264424][ T9605] netlink: 28 bytes leftover after parsing attributes in process `syz.0.833'.
[  275.339636][   T30] audit: type=1400 audit(1756811079.662:928): avc:  denied  { view } for  pid=9585 comm="syz.5.829" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  275.360319][   T44] cdc_subset 6-1:0.110: probe with driver cdc_subset failed with error -22
[  275.560988][   T44] usb 6-1: USB disconnect, device number 19
[  276.084586][   T30] audit: type=1400 audit(1756811080.392:929): avc:  denied  { mount } for  pid=9615 comm="syz.3.835" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  276.840956][   T30] audit: type=1400 audit(1756811081.162:930): avc:  denied  { connect } for  pid=9629 comm="syz.3.839" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  277.701315][ T9642] netlink: 36 bytes leftover after parsing attributes in process `syz.5.841'.
[  278.216353][   T30] audit: type=1400 audit(1756811082.512:931): avc:  denied  { read } for  pid=9652 comm="syz.0.845" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  278.284597][   T30] audit: type=1400 audit(1756811082.512:932): avc:  denied  { open } for  pid=9652 comm="syz.0.845" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  278.489839][   T30] audit: type=1400 audit(1756811082.542:933): avc:  denied  { getopt } for  pid=9650 comm="syz.1.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  278.512059][   T30] audit: type=1400 audit(1756811082.732:934): avc:  denied  { accept } for  pid=9652 comm="syz.0.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  278.644478][   T30] audit: type=1400 audit(1756811082.942:935): avc:  denied  { wake_alarm } for  pid=9661 comm="syz.4.847" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  278.856758][ T9668] ceph: No mds server is up or the cluster is laggy
[  278.865826][  T975] libceph: connect (1)[c::]:6789 error -101
[  278.873704][  T975] libceph: mon0 (1)[c::]:6789 connect error
[  279.798559][   T44] IPVS: starting estimator thread 0...
[  279.888036][ T9682] IPVS: using max 74 ests per chain, 177600 per kthread
[  279.918757][   T30] audit: type=1400 audit(1756811084.242:936): avc:  denied  { read } for  pid=9685 comm="syz.4.852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  279.942858][ T9686] netlink: 12 bytes leftover after parsing attributes in process `syz.4.852'.
[  280.037537][ T9686] netlink: 12 bytes leftover after parsing attributes in process `syz.4.852'.
[  280.066852][    T9] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  280.095008][ T9686] netlink: 12 bytes leftover after parsing attributes in process `syz.4.852'.
[  280.112260][ T9699] batman_adv: batadv0: Removing interface: batadv_slave_0
[  280.195105][ T9686] netlink: 12 bytes leftover after parsing attributes in process `syz.4.852'.
[  280.227684][    T9] usb 6-1: Using ep0 maxpacket: 32
[  280.316604][    T9] usb 6-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  280.338922][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  280.358937][    T9] usb 6-1: Product: syz
[  280.375696][    T9] usb 6-1: Manufacturer: syz
[  280.402655][    T9] usb 6-1: SerialNumber: syz
[  280.433402][    T9] usb 6-1: config 0 descriptor??
[  280.486439][ T9686] netlink: 12 bytes leftover after parsing attributes in process `syz.4.852'.
[  280.550452][ T9686] netlink: 12 bytes leftover after parsing attributes in process `syz.4.852'.
[  280.693721][  T975] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  280.907902][  T975] usb 2-1: Using ep0 maxpacket: 32
[  280.955823][  T975] usb 2-1: config 0 has an invalid interface number: 132 but max is 0
[  280.983216][ T9718] random: crng reseeded on system resumption
[  280.990162][  T975] usb 2-1: config 0 has no interface number 0
[  280.990202][   T30] audit: type=1400 audit(1756811085.302:937): avc:  denied  { append } for  pid=9707 comm="syz.0.855" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  281.055783][  T975] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  281.093402][ T9713] can1: slcan on ttyS3.
[  281.125390][ T7760] Bluetooth: hci5: Frame reassembly failed (-84)
[  281.162523][  T975] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  281.194011][  T975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  281.223477][  T975] usb 2-1: Product: syz
[  281.234136][  T975] usb 2-1: Manufacturer: syz
[  281.249402][  T975] usb 2-1: SerialNumber: syz
[  281.275819][  T975] usb 2-1: config 0 descriptor??
[  281.300024][  T975] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  281.309919][  T975] em28xx 2-1:0.132: Video interface 132 found:
[  281.516789][ T9707] can1 (unregistered): slcan off ttyS3.
[  281.558983][  T975] em28xx 2-1:0.132: unknown em28xx chip ID (0)
[  281.640962][  T975] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  281.665146][  T975] em28xx 2-1:0.132: board has no eeprom
[  281.745956][  T975] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  281.788504][  T975] em28xx 2-1:0.132: analog set to bulk mode.
[  281.814789][ T5928] em28xx 2-1:0.132: Registering V4L2 extension
[  281.839430][  T975] usb 2-1: USB disconnect, device number 32
[  281.852742][  T975] em28xx 2-1:0.132: Disconnecting em28xx
[  281.938656][ T5928] em28xx 2-1:0.132: Config register raw data: 0xffffffed
[  281.965624][ T5928] em28xx 2-1:0.132: AC97 chip type couldn't be determined
[  282.027495][ T5928] em28xx 2-1:0.132: No AC97 audio processor
[  282.098311][ T9741] lo speed is unknown, defaulting to 1000
[  282.318266][ T5928] usb 2-1: Decoder not found
[  282.406441][ T5928] em28xx 2-1:0.132: failed to create media graph
[  282.561477][ T9750] sctp: [Deprecated]: syz.1.861 (pid 9750) Use of int in maxseg socket option.
[  282.561477][ T9750] Use struct sctp_assoc_value instead
[  282.824282][ T5928] em28xx 2-1:0.132: V4L2 device video103 deregistered
[  282.946417][ T5928] em28xx 2-1:0.132: Remote control support is not available for this card.
[  283.178660][ T5172] Bluetooth: hci5: command 0xfc11 tx timeout
[  283.189577][ T5857] Bluetooth: hci5: Entering manufacturer mode failed (-110)
[  283.224297][    T9] peak_usb 6-1:0.0 can0: unable to request usb[type=0 value=0] err=-71
[  283.236246][    T9] peak_usb 6-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71)
[  283.311875][  T975] em28xx 2-1:0.132: Closing input extension
[  283.417229][    T9] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -71
[  283.456011][  T975] em28xx 2-1:0.132: Freeing device
[  283.508018][    T9] usb 6-1: USB disconnect, device number 20
[  284.186372][    T9] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  284.366505][    T9] usb 2-1: Using ep0 maxpacket: 16
[  284.381524][    T9] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  284.400929][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  284.486587][    T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  284.525597][    T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  284.536593][ T1776] usb 6-1: new full-speed USB device number 21 using dummy_hcd
[  284.544704][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  284.559122][ T9800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  284.576448][    T9] usb 2-1: Product: syz
[  284.590866][    T9] usb 2-1: Manufacturer: syz
[  284.596451][ T9800] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  284.605639][    T9] usb 2-1: SerialNumber: syz
[  284.723173][ T1776] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  284.736674][ T1776] usb 6-1: config 0 has no interface number 0
[  284.742902][ T1776] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  285.021173][ T1776] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.033520][ T1776] usb 6-1: config 0 descriptor??
[  285.050688][    T9] usb 2-1: 0:2 : does not exist
[  285.076761][ T1776] usb 6-1: selecting invalid altsetting 1
[  285.087604][ T1776] dvb_ttusb_budget: ttusb_init_controller: error
[  285.094775][ T1776] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  285.352427][ T9813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  285.394189][ T9813] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  285.402385][ T1776] DVB: Unable to find symbol cx22700_attach()
[  285.635697][ T9817] IPv6: NLM_F_CREATE should be specified when creating new route
[  285.772890][ T1776] DVB: Unable to find symbol tda10046_attach()
[  285.782414][ T1776] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  285.827629][ T1776] usb 6-1: USB disconnect, device number 21
[  285.891911][ T9822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.875'.
[  285.931986][ T9822] fuse: Bad value for 'fd'
[  285.980025][   T30] audit: type=1400 audit(1756811090.292:938): avc:  denied  { mount } for  pid=9776 comm="syz.1.867" name="/" dev="9p" ino=7016996765293437283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  285.983659][  T975] usb 2-1: USB disconnect, device number 33
[  286.003429][    C0] vkms_vblank_simulate: vblank timer overrun
[  286.516291][  T975] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  286.580224][   T30] audit: type=1400 audit(1756811090.902:939): avc:  denied  { unmount } for  pid=5845 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  286.600394][    C0] vkms_vblank_simulate: vblank timer overrun
[  286.660580][ T5172] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  286.700627][  T975] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  286.722255][  T975] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  286.743711][  T975] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  286.753902][  T975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  286.769191][ T9831] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  286.789220][  T975] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  286.981291][ T9848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.884'.
[  287.001123][ T9848] vlan2: entered allmulticast mode
[  287.093543][   T30] audit: type=1400 audit(1756811091.402:940): avc:  denied  { append } for  pid=9845 comm="syz.4.885" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[  287.099737][ T9847] misc userio: Invalid payload size
[  287.116629][    C0] vkms_vblank_simulate: vblank timer overrun
[  287.656819][   T30] audit: type=1400 audit(1756811091.972:941): avc:  denied  { map } for  pid=9855 comm="syz.4.887" path="socket:[24048]" dev="sockfs" ino=24048 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  288.024391][   T30] audit: type=1400 audit(1756811092.342:942): avc:  denied  { write } for  pid=9858 comm="syz.3.889" path="socket:[24655]" dev="sockfs" ino=24655 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  288.457461][   T30] audit: type=1400 audit(1756811092.782:943): avc:  denied  { ioctl } for  pid=9872 comm="syz.0.891" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x70ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  288.518387][ T9873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  288.566422][ T9873] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  288.739894][ T5857] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  288.919985][ T9881] delete_channel: no stack
[  288.951079][ T9888] pimreg: entered allmulticast mode
[  288.967523][ T9888] pimreg: left allmulticast mode
[  289.054043][ T9893] netlink: 24 bytes leftover after parsing attributes in process `syz.0.896'.
[  289.161016][ T9903] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9903 comm=syz.0.896
[  289.228515][ T9898] veth0_to_team: entered promiscuous mode
[  289.256988][ T5928] usb 6-1: USB disconnect, device number 22
[  289.543430][ T9915] netlink: 'syz.1.898': attribute type 10 has an invalid length.
[  289.561031][ T9915] bond0: (slave team0): Releasing backup interface
[  289.577462][ T9915] batman_adv: batadv0: Adding interface: team0
[  289.590964][ T9915] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  289.617195][ T9915] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  289.638598][ T9915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.898'.
[  289.851481][ T9922] debugfs: '!' already exists in 'ieee80211'
[  289.871555][   T30] audit: type=1400 audit(1756811094.192:944): avc:  denied  { ioctl } for  pid=9923 comm="syz.5.902" path="/dev/ptyqf" dev="devtmpfs" ino=134 ioctlcmd=0x4b3b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  290.831405][ T9940] qnx6: unable to read the first superblock
[  290.886549][ T9939] netlink: 'syz.1.904': attribute type 21 has an invalid length.
[  290.894403][ T9939] netlink: 128 bytes leftover after parsing attributes in process `syz.1.904'.
[  290.903465][ T9939] netlink: 'syz.1.904': attribute type 4 has an invalid length.
[  290.913965][ T9939] netlink: 3 bytes leftover after parsing attributes in process `syz.1.904'.
[  290.935960][ T9940] lo speed is unknown, defaulting to 1000
[  290.941716][ T9940] lo speed is unknown, defaulting to 1000
[  290.957094][ T9940] lo speed is unknown, defaulting to 1000
[  290.995996][ T9942] futex_wake_op: syz.4.905 tries to shift op by 144; fix this program
[  291.130813][ T9940] infiniband siz0: RDMA CMA: cma_listen_on_dev, error -98
[  291.364446][   T30] audit: type=1400 audit(1756811095.662:945): avc:  denied  { remount } for  pid=9948 comm="syz.3.907" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  291.415295][ T9940] lo speed is unknown, defaulting to 1000
[  291.438423][ T9940] lo speed is unknown, defaulting to 1000
[  291.465834][ T5928] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  291.474143][ T9940] lo speed is unknown, defaulting to 1000
[  291.510208][ T9940] lo speed is unknown, defaulting to 1000
[  291.534211][   T30] audit: type=1400 audit(1756811095.842:946): avc:  denied  { sqpoll } for  pid=9950 comm="syz.3.908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  291.564995][ T9940] lo speed is unknown, defaulting to 1000
[  291.695760][ T5928] usb 6-1: Using ep0 maxpacket: 16
[  291.708240][ T5928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  291.729366][ T5928] usb 6-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00
[  291.743863][ T5928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  291.785373][ T5928] usb 6-1: config 0 descriptor??
[  291.943679][   T30] audit: type=1400 audit(1756811096.262:947): avc:  denied  { mount } for  pid=9954 comm="syz.3.909" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  291.967107][ T9956] overlayfs: missing 'workdir'
[  292.240882][   T30] audit: type=1400 audit(1756811096.562:948): avc:  denied  { getopt } for  pid=9964 comm="syz.0.912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  292.306811][ T5928] usbhid 6-1:0.0: can't add hid device: -71
[  292.328481][ T5928] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  292.347471][ T9968] syz_tun: left allmulticast mode
[  292.391900][ T5928] usb 6-1: USB disconnect, device number 23
[  292.566880][ T9965] syz.0.912 (9965): drop_caches: 2
[  292.664260][ T9977] netlink: 96 bytes leftover after parsing attributes in process `syz.3.915'.
[  293.185888][  T975] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  293.309310][ T9993] ip6erspan0: entered promiscuous mode
[  293.356349][  T975] usb 6-1: Using ep0 maxpacket: 8
[  293.369857][  T975] usb 6-1: New USB device found, idVendor=10d2, idProduct=2865, bcdDevice=a4.c9
[  293.385498][  T975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  293.407518][  T975] usb 6-1: config 0 descriptor??
[  293.417146][  T975] usblcd 6-1:0.0: USBLCD model not supported.
[  293.456550][ T1776] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  293.700246][T10001] netlink: 20 bytes leftover after parsing attributes in process `syz.4.922'.
[  293.729457][T10001] geneve3: entered allmulticast mode
[  294.725050][ T1776] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  294.746507][ T1776] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  294.758834][   T30] audit: type=1400 audit(1756811099.082:949): avc:  denied  { read append } for  pid=9990 comm="syz.0.920" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  294.786378][ T9991] bridge0: Device is already in use.
[  294.830256][ T1776] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  294.908814][T10006] comedi: No check for data length of config insn id 2007 is implemented
[  294.918045][T10006] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c
[  294.928075][T10006] comedi: Assuming n=15 is correct
[  294.972068][ T1776] usb 2-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00
[  294.985280][   T30] audit: type=1400 audit(1756811099.082:950): avc:  denied  { open } for  pid=9990 comm="syz.0.920" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  295.076502][ T1776] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  295.216854][   T30] audit: type=1400 audit(1756811099.112:951): avc:  denied  { create } for  pid=9990 comm="syz.0.920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  298.882849][ T1776] usb 2-1: config 0 descriptor??
[  301.766607][   T10] usb 6-1: USB disconnect, device number 24
[  301.830904][T10024] netlink: 'syz.1.929': attribute type 3 has an invalid length.
[  301.956306][T10024] netlink: 'syz.1.929': attribute type 3 has an invalid length.
[  302.467226][ T1776] usb 2-1: can't set config #0, error -71
[  302.474840][ T1776] usb 2-1: USB disconnect, device number 34
[  302.483339][T10024] netlink: 'syz.1.929': attribute type 3 has an invalid length.
[  302.793991][T10037] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  302.807226][T10024] netlink: 'syz.1.929': attribute type 3 has an invalid length.
[  302.880859][T10024] netlink: 'syz.1.929': attribute type 3 has an invalid length.
[  302.916735][T10024] netlink: 'syz.1.929': attribute type 3 has an invalid length.
[  302.969665][T10024] netlink: 'syz.1.929': attribute type 3 has an invalid length.
[  302.979756][T10024] netlink: 'syz.1.929': attribute type 3 has an invalid length.
[  302.988607][T10024] netlink: 'syz.1.929': attribute type 3 has an invalid length.
[  303.091472][T10024] netlink: 'syz.1.929': attribute type 3 has an invalid length.
[  303.132059][T10046] pimreg: entered allmulticast mode
[  303.139387][T10049] pimreg: left allmulticast mode
[  303.796392][ T1574] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  303.936138][ T1574] usb 2-1: device descriptor read/64, error -71
[  304.165139][   T30] audit: type=1400 audit(1756811108.472:952): avc:  denied  { setopt } for  pid=10063 comm="syz.0.938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  304.202978][ T1574] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  304.656132][ T1574] usb 2-1: device descriptor read/64, error -71
[  304.680985][   T30] audit: type=1400 audit(1756811109.002:953): avc:  denied  { bind } for  pid=10067 comm="syz.3.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  304.706375][   T30] audit: type=1400 audit(1756811109.002:954): avc:  denied  { node_bind } for  pid=10067 comm="syz.3.939" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  304.798905][ T1574] usb usb2-port1: attempt power cycle
[  305.536460][ T1574] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  305.557635][ T1574] usb 2-1: device descriptor read/8, error -71
[  305.757045][ T5928] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  305.794983][   T30] audit: type=1400 audit(1756811110.112:955): avc:  denied  { getopt } for  pid=10083 comm="syz.0.943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  305.806372][ T1574] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  305.846921][ T1574] usb 2-1: device descriptor read/8, error -71
[  305.966571][ T1574] usb usb2-port1: unable to enumerate USB device
[  307.341386][T10096] validate_nla: 38 callbacks suppressed
[  307.341402][T10096] netlink: 'syz.0.946': attribute type 21 has an invalid length.
[  308.520890][   T30] audit: type=1400 audit(1756811112.842:956): avc:  denied  { ioctl } for  pid=10125 comm="syz.5.952" path="socket:[25208]" dev="sockfs" ino=25208 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  308.608704][   T30] audit: type=1400 audit(1756811112.932:957): avc:  denied  { accept } for  pid=10125 comm="syz.5.952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  309.037726][T10134] random: crng reseeded on system resumption
[  309.061777][   T30] audit: type=1400 audit(1756811113.362:958): avc:  denied  { write } for  pid=10131 comm="syz.5.955" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  309.061829][   T30] audit: type=1400 audit(1756811113.362:959): avc:  denied  { ioctl } for  pid=10131 comm="syz.5.955" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  309.381863][   T30] audit: type=1400 audit(1756811113.702:960): avc:  denied  { read } for  pid=10139 comm="syz.3.954" path="socket:[24516]" dev="sockfs" ino=24516 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  309.773976][   T30] audit: type=1400 audit(1756811113.782:961): avc:  denied  { accept } for  pid=10139 comm="syz.3.954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  312.053361][T10177] futex_wake_op: syz.1.964 tries to shift op by -1; fix this program
[  312.225072][   T30] audit: type=1400 audit(1756811116.542:962): avc:  denied  { read } for  pid=10184 comm="syz.4.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  312.248533][T10186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  312.261477][T10186] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  312.635334][T10195] lo speed is unknown, defaulting to 1000
[  312.660106][T10195] lo speed is unknown, defaulting to 1000
[  313.528476][T10196] netlink: 24 bytes leftover after parsing attributes in process `syz.1.968'.
[  313.867745][   T30] audit: type=1400 audit(1756811118.162:963): avc:  denied  { setopt } for  pid=10207 comm="syz.5.971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  313.923212][   T30] audit: type=1400 audit(1756811118.182:964): avc:  denied  { ioctl } for  pid=10207 comm="syz.5.971" path="socket:[25330]" dev="sockfs" ino=25330 ioctlcmd=0x89f8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  313.960011][T10213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  313.971445][T10213] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  313.987525][   T30] audit: type=1400 audit(1756811118.282:965): avc:  denied  { create } for  pid=10212 comm="syz.0.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  314.707077][T10224] netlink: 2048 bytes leftover after parsing attributes in process `syz.3.974'.
[  314.791986][T10224] netlink: 4 bytes leftover after parsing attributes in process `syz.3.974'.
[  315.667178][   T30] audit: type=1400 audit(1756811119.992:966): avc:  denied  { write } for  pid=10249 comm="syz.5.982" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  315.859585][   T30] audit: type=1400 audit(1756811120.182:967): avc:  denied  { write } for  pid=10231 comm="syz.0.977" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  315.996548][T10254] netlink: 12 bytes leftover after parsing attributes in process `syz.1.984'.
[  316.025793][  T975] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  316.031070][T10257] fuseblk: Unknown parameter 'r ¿™6ΓçÜ
[  316.031070][T10257] “Mootmode'
[  316.063229][   T30] audit: type=1400 audit(1756811120.212:968): avc:  denied  { open } for  pid=10231 comm="syz.0.977" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  316.209740][T10260] netlink: 56 bytes leftover after parsing attributes in process `syz.4.985'.
[  316.215912][  T975] usb 6-1: Using ep0 maxpacket: 8
[  316.348615][  T975] usb 6-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  316.503821][   T30] audit: type=1400 audit(1756811120.552:969): avc:  denied  { setopt } for  pid=10259 comm="syz.4.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  316.726673][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  316.733679][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  316.790386][  T975] usb 6-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  316.829888][  T975] usb 6-1: Product: syz
[  316.862924][  T975] usb 6-1: Manufacturer: syz
[  316.878430][  T975] usb 6-1: SerialNumber: syz
[  316.896646][  T975] usb 6-1: config 0 descriptor??
[  316.963709][   T30] audit: type=1400 audit(1756811121.272:970): avc:  denied  { read } for  pid=10273 comm="syz.1.988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  317.066855][  T975] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  317.341350][T10288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  317.376876][T10288] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  317.406811][ T1776] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  317.592495][ T1776] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  317.618341][ T1776] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  317.670336][ T1776] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  317.681657][ T1776] usb 2-1: config 0 descriptor??
[  317.693501][  T975] input: gspca_zc3xx as /devices/platform/dummy_hcd.5/usb6/6-1/input/input17
[  317.726177][T10250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  317.764895][ T1776] pwc: Askey VC010 type 2 USB webcam detected.
[  317.785802][T10250] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  317.879346][  T975] usb 6-1: USB disconnect, device number 26
[  317.981934][ T1776] pwc: recv_control_msg error -71 req 02 val 2b00
[  318.000885][ T1776] pwc: recv_control_msg error -71 req 02 val 2700
[  318.030379][ T1776] pwc: recv_control_msg error -71 req 02 val 2c00
[  318.076926][ T1776] pwc: recv_control_msg error -71 req 04 val 1000
[  318.086446][T10306] netlink: 24 bytes leftover after parsing attributes in process `syz.1.993'.
[  318.096339][ T1776] pwc: recv_control_msg error -71 req 04 val 1300
[  318.108076][   T30] audit: type=1400 audit(1756811122.432:971): avc:  denied  { mount } for  pid=10305 comm="syz.1.993" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  318.135234][ T1776] pwc: recv_control_msg error -71 req 04 val 1400
[  318.152517][ T1776] pwc: recv_control_msg error -71 req 02 val 2000
[  318.160389][ T1776] pwc: recv_control_msg error -71 req 02 val 2100
[  318.168278][ T1776] pwc: recv_control_msg error -71 req 04 val 1500
[  318.178773][   T10] libceph: connect (1)[c::]:6789 error -101
[  318.185189][   T10] libceph: mon0 (1)[c::]:6789 connect error
[  318.192152][ T1776] pwc: recv_control_msg error -71 req 02 val 2500
[  318.404847][ T1776] pwc: recv_control_msg error -71 req 02 val 2400
[  318.448317][   T10] libceph: connect (1)[c::]:6789 error -101
[  318.457900][   T10] libceph: mon0 (1)[c::]:6789 connect error
[  318.488928][ T1776] pwc: recv_control_msg error -71 req 02 val 2600
[  318.509897][ T1776] pwc: recv_control_msg error -71 req 02 val 2900
[  318.542422][ T1776] pwc: recv_control_msg error -71 req 02 val 2800
[  318.560482][ T1776] pwc: recv_control_msg error -71 req 04 val 1100
[  318.593448][ T1776] pwc: recv_control_msg error -71 req 04 val 1200
[  318.619001][ T1776] pwc: Registered as video103.
[  318.641967][ T1776] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input18
[  318.709017][ T1776] usb 2-1: USB disconnect, device number 39
[  318.893957][T10306] ceph: No mds server is up or the cluster is laggy
[  318.922493][T10319] netlink: 36 bytes leftover after parsing attributes in process `syz.0.995'.
[  319.006148][   T30] audit: type=1400 audit(1756811123.322:972): avc:  denied  { ioctl } for  pid=10318 comm="syz.0.995" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  319.143019][   T30] audit: type=1400 audit(1756811123.362:973): avc:  denied  { unmount } for  pid=5845 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  320.497294][T10361] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1005'.
[  321.071021][   T30] audit: type=1400 audit(1756811125.392:974): avc:  denied  { create } for  pid=10372 comm="syz.1.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  321.162406][   T30] audit: type=1400 audit(1756811125.422:975): avc:  denied  { bind } for  pid=10372 comm="syz.1.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  321.188056][   T30] audit: type=1400 audit(1756811125.422:976): avc:  denied  { setopt } for  pid=10372 comm="syz.1.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  321.835443][T10396] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1013'.
[  321.905280][   T30] audit: type=1400 audit(1756811126.222:977): avc:  denied  { map } for  pid=10389 comm="syz.5.1014" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  321.933696][   T30] audit: type=1400 audit(1756811126.222:978): avc:  denied  { execute } for  pid=10389 comm="syz.5.1014" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  321.990429][   T30] audit: type=1800 audit(1756811126.282:979): pid=10399 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1014" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0
[  322.181960][T10403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  322.222258][T10403] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  322.561628][T10411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  322.573368][T10409] pimreg: entered allmulticast mode
[  322.580340][T10411] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  322.609982][T10409] pimreg: left allmulticast mode
[  322.695863][  T975] usb 2-1: new low-speed USB device number 40 using dummy_hcd
[  322.860061][  T975] usb 2-1: unable to get BOS descriptor or descriptor too short
[  322.868751][  T975] usb 2-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[  322.881311][  T975] usb 2-1: config 1 interface 0 has no altsetting 0
[  322.892534][  T975] usb 2-1: string descriptor 0 read error: -22
[  322.903686][  T975] usb 2-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40
[  322.907220][T10414] pimreg: entered allmulticast mode
[  322.913898][  T975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  322.935570][T10407] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22
[  322.963031][  T975] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input19
[  322.994291][T10418] pimreg: left allmulticast mode
[  323.150833][ T5206] bcm5974 2-1:1.0: could not read from device
[  323.804184][   T30] audit: type=1326 audit(1756811128.122:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10419 comm="syz.0.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1baa78ebe9 code=0x7ffc0000
[  323.827587][    C0] vkms_vblank_simulate: vblank timer overrun
[  323.904439][   T30] audit: type=1326 audit(1756811128.122:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10419 comm="syz.0.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7f1baa78ebe9 code=0x7ffc0000
[  323.927919][    C0] vkms_vblank_simulate: vblank timer overrun
[  323.945330][   T30] audit: type=1326 audit(1756811128.122:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10419 comm="syz.0.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1baa78ebe9 code=0x7ffc0000
[  324.679537][   T30] audit: type=1326 audit(1756811128.122:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10419 comm="syz.0.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f1baa78ebe9 code=0x7ffc0000
[  325.528602][ T1574] usb 2-1: USB disconnect, device number 40
[  325.537425][ T5206] bcm5974 2-1:1.0: could not read from device
[  326.109829][ T5206] bcm5974 2-1:1.0: could not read from device
[  326.435360][   T30] kauditd_printk_skb: 6 callbacks suppressed
[  326.435377][   T30] audit: type=1400 audit(1756811130.732:990): avc:  denied  { read } for  pid=10456 comm="syz.5.1029" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  326.623938][   T30] audit: type=1400 audit(1756811130.732:991): avc:  denied  { open } for  pid=10456 comm="syz.5.1029" path="/128/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  326.700365][T10450] lo speed is unknown, defaulting to 1000
[  326.818250][T10462] pimreg: entered allmulticast mode
[  326.846535][T10463] pimreg: left allmulticast mode
[  327.348995][T10450] lo speed is unknown, defaulting to 1000
[  328.083788][T10486] gtp0: entered promiscuous mode
[  328.572968][T10495] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1039'.
[  328.938440][T10511] netlink: 'syz.5.1041': attribute type 10 has an invalid length.
[  328.951821][T10511] batman_adv: batadv0: Adding interface: team0
[  328.970361][   T30] audit: type=1400 audit(1756811133.282:992): avc:  denied  { ioctl } for  pid=10507 comm="syz.1.1043" path="socket:[26804]" dev="sockfs" ino=26804 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  329.027625][T10511] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  329.052765][    C1] vkms_vblank_simulate: vblank timer overrun
[  329.063770][   T30] audit: type=1400 audit(1756811133.332:993): avc:  denied  { append } for  pid=10513 comm="syz.0.1044" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  329.086824][    C1] vkms_vblank_simulate: vblank timer overrun
[  329.093517][T10511] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  329.121038][T10511] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1041'.
[  329.134860][T10517] team_slave_0: entered promiscuous mode
[  329.140699][T10517] team_slave_1: entered promiscuous mode
[  329.152406][T10517] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  329.174749][T10517] team0: Device macvtap1 is already an upper device of the team interface
[  329.229246][T10517] team_slave_0: left promiscuous mode
[  329.234687][T10517] team_slave_1: left promiscuous mode
[  329.243731][T10521] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1045'.
[  329.418735][T10526] pimreg: entered allmulticast mode
[  329.431841][T10526] pimreg: left allmulticast mode
[  329.710669][T10530] unknown channel width for channel at 909000KHz?
[  329.744506][   T30] audit: type=1400 audit(1756811134.062:994): avc:  denied  { read } for  pid=10532 comm="syz.1.1049" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  329.768800][    C1] vkms_vblank_simulate: vblank timer overrun
[  329.883684][   T30] audit: type=1400 audit(1756811134.062:995): avc:  denied  { open } for  pid=10532 comm="syz.1.1049" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  329.908437][    C1] vkms_vblank_simulate: vblank timer overrun
[  329.980345][   T30] audit: type=1400 audit(1756811134.102:996): avc:  denied  { ioctl } for  pid=10532 comm="syz.1.1049" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  330.006486][    C1] vkms_vblank_simulate: vblank timer overrun
[  330.130108][   T30] audit: type=1400 audit(1756811134.312:997): avc:  denied  { ioctl } for  pid=10537 comm="syz.4.1050" path="socket:[26310]" dev="sockfs" ino=26310 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  330.417075][   T30] audit: type=1400 audit(1756811134.732:998): avc:  denied  { write } for  pid=10545 comm="syz.1.1052" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  330.476279][   T30] audit: type=1400 audit(1756811134.732:999): avc:  denied  { open } for  pid=10545 comm="syz.1.1052" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  330.655890][  T975] usb 2-1: new full-speed USB device number 41 using dummy_hcd
[  330.824607][ T1574] libceph: connect (1)[c::]:6789 error -101
[  330.831023][ T1574] libceph: mon0 (1)[c::]:6789 connect error
[  330.858569][  T975] usb 2-1: unable to get BOS descriptor or descriptor too short
[  330.938271][  T975] usb 2-1: not running at top speed; connect to a high speed hub
[  330.974217][  T975] usb 2-1: config 4 has an invalid interface number: 160 but max is 0
[  330.993067][  T975] usb 2-1: config 4 has no interface number 0
[  331.018637][  T975] usb 2-1: config 4 interface 160 has no altsetting 0
[  331.062336][  T975] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=d8.68
[  331.090079][  T975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  331.097697][ T1574] libceph: connect (1)[c::]:6789 error -101
[  331.105321][ T1574] libceph: mon0 (1)[c::]:6789 connect error
[  331.112173][  T975] usb 2-1: Product: syz
[  331.119609][  T975] usb 2-1: Manufacturer: syz
[  331.133810][  T975] usb 2-1: SerialNumber: syz
[  331.285589][T10554] ceph: No mds server is up or the cluster is laggy
[  331.378946][T10567] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1057'.
[  331.401163][  T975] usb_ehset_test 2-1:4.160: probe with driver usb_ehset_test failed with error -32
[  331.479694][  T975] usb 2-1: USB disconnect, device number 41
[  331.604796][T10571] veth0_to_team: entered promiscuous mode
[  331.649683][T10571] veth0_to_team: entered allmulticast mode
[  331.693574][   T30] audit: type=1400 audit(1756811136.012:1000): avc:  denied  { map } for  pid=10572 comm="syz.4.1059" path="/dev/video4" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  331.738221][T10571] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1058'.
[  331.747217][T10571] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1058'.
[  331.851589][   T30] audit: type=1400 audit(1756811136.172:1001): avc:  denied  { create } for  pid=10580 comm="syz.5.1061" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1
[  332.509872][T10595] pimreg: entered allmulticast mode
[  332.575024][T10601] pimreg: left allmulticast mode
[  334.777972][T10648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  334.790632][T10648] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  334.803881][   T30] audit: type=1400 audit(1756811139.122:1002): avc:  denied  { read } for  pid=10651 comm="syz.5.1078" path="socket:[26503]" dev="sockfs" ino=26503 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  334.816302][T10648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  334.879281][T10653] netlink: 'syz.5.1078': attribute type 2 has an invalid length.
[  334.929681][   T30] audit: type=1400 audit(1756811139.172:1003): avc:  denied  { name_bind } for  pid=10637 comm="syz.3.1075" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  335.061450][   T30] audit: type=1400 audit(1756811139.232:1004): avc:  denied  { write } for  pid=10637 comm="syz.3.1075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  335.085028][T10648] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  335.322338][ T5857] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  335.336857][   T44] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  335.505189][   T44] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  335.514523][   T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  335.618668][   T44] usb 2-1: Product: syz
[  335.623196][   T44] usb 2-1: Manufacturer: syz
[  335.627849][   T44] usb 2-1: SerialNumber: syz
[  336.761258][   T30] audit: type=1400 audit(1756811141.082:1005): avc:  denied  { mount } for  pid=10687 comm="syz.4.1089" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  336.785354][T10689] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  336.867797][T10655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  336.876544][T10655] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  336.891417][T10655] dvmrp1: entered allmulticast mode
[  337.189668][ T1574] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  337.210460][   T44] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[  337.242752][   T44] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  337.263167][   T44] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  337.292886][   T44] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71
[  337.378939][   T44] usb 2-1: USB disconnect, device number 42
[  337.386437][ T1574] usb 6-1: Using ep0 maxpacket: 16
[  337.393143][ T1574] usb 6-1: config 0 has an invalid interface number: 251 but max is 0
[  337.401992][ T1574] usb 6-1: config 0 has no interface number 0
[  337.637876][ T1574] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  337.688079][ T1574] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  337.702088][ T1574] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  337.711516][ T1574] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  337.719854][ T1574] usb 6-1: Product: syz
[  337.724282][ T1574] usb 6-1: Manufacturer: syz
[  337.730042][ T1574] usb 6-1: SerialNumber: syz
[  337.812454][ T1574] usb 6-1: config 0 descriptor??
[  337.818706][T10683] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22
[  337.838328][T10683] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22
[  338.073286][T10683] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22
[  338.112019][T10683] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22
[  338.356023][T10712] FAULT_INJECTION: forcing a failure.
[  338.356023][T10712] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  338.369727][T10712] CPU: 1 UID: 0 PID: 10712 Comm: syz.0.1094 Not tainted syzkaller #0 PREEMPT(full) 
[  338.369753][T10712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  338.369763][T10712] Call Trace:
[  338.369769][T10712]  <TASK>
[  338.369776][T10712]  dump_stack_lvl+0x16c/0x1f0
[  338.369801][T10712]  should_fail_ex+0x512/0x640
[  338.369825][T10712]  _copy_to_user+0x32/0xd0
[  338.369850][T10712]  simple_read_from_buffer+0xcb/0x170
[  338.369872][T10712]  proc_fail_nth_read+0x197/0x240
[  338.369894][T10712]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  338.369916][T10712]  ? rw_verify_area+0xcf/0x6c0
[  338.369942][T10712]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  338.369962][T10712]  vfs_read+0x1e1/0xcf0
[  338.369983][T10712]  ? __pfx___mutex_lock+0x10/0x10
[  338.370003][T10712]  ? __pfx_vfs_read+0x10/0x10
[  338.370028][T10712]  ? __fget_files+0x20e/0x3c0
[  338.370056][T10712]  ksys_read+0x12a/0x250
[  338.370073][T10712]  ? __pfx_ksys_read+0x10/0x10
[  338.370099][T10712]  do_syscall_64+0xcd/0x4c0
[  338.370120][T10712]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  338.370138][T10712] RIP: 0033:0x7f1baa78d5fc
[  338.370152][T10712] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  338.370170][T10712] RSP: 002b:00007f1bab5ab030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  338.370187][T10712] RAX: ffffffffffffffda RBX: 00007f1baa9c6180 RCX: 00007f1baa78d5fc
[  338.370199][T10712] RDX: 000000000000000f RSI: 00007f1bab5ab0a0 RDI: 0000000000000006
[  338.370209][T10712] RBP: 00007f1bab5ab090 R08: 0000000000000000 R09: 0000000000000000
[  338.370219][T10712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  338.370229][T10712] R13: 00007f1baa9c6218 R14: 00007f1baa9c6180 R15: 00007fff94277f48
[  338.370254][T10712]  </TASK>
[  338.602925][   T10] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  338.674407][T10716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  338.692174][ T1574] asix 6-1:0.251 (unnamed net_device) (uninitialized): Invalid PHY address 0xf4
[  338.758842][T10716] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  338.777932][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  338.790080][   T10] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  338.820452][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  338.831345][   T10] usb 2-1: config 0 descriptor??
[  338.892875][   T44] usb 6-1: USB disconnect, device number 27
[  339.041762][   T10] usbhid 2-1:0.0: can't add hid device: -71
[  339.048343][   T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  339.058604][   T10] usb 2-1: USB disconnect, device number 43
[  339.485884][   T44] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  339.647066][   T44] usb 2-1: Using ep0 maxpacket: 16
[  339.653452][   T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  339.664450][   T44] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00
[  339.673508][   T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  339.683080][   T44] usb 2-1: config 0 descriptor??
[  340.092088][T10706] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1092'.
[  340.304517][   T44] usbhid 2-1:0.0: can't add hid device: -71
[  340.312935][   T44] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  340.322630][   T44] usb 2-1: USB disconnect, device number 44
[  378.135904][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  378.139779][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  378.151444][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  382.966230][   T30] audit: type=1400 audit(1756811187.272:1006): avc:  denied  { ioctl } for  pid=10733 comm="syz.0.1099" path="socket:[26611]" dev="sockfs" ino=26611 ioctlcmd=0x943d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  382.970359][T10739] pim6reg9: entered allmulticast mode
[  383.162124][   T30] audit: type=1400 audit(1756811187.482:1007): avc:  denied  { watch } for  pid=10740 comm="syz.1.1100" path="/209" dev="tmpfs" ino=1108 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  383.640995][T10755] loop2: detected capacity change from 0 to 7
[  383.742291][T10755] Dev loop2: unable to read RDB block 7
[  383.775620][T10755]  loop2: unable to read partition table
[  383.812459][T10755] loop2: partition table beyond EOD, truncated
[  384.151143][T10755] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  384.420853][   T30] audit: type=1400 audit(1756811188.742:1008): avc:  denied  { mounton } for  pid=10760 comm="syz.4.1105" path="/204/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[  385.171239][   T30] audit: type=1400 audit(1756811189.492:1009): avc:  denied  { unmount } for  pid=5863 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  385.609329][T10787] netlink: 'syz.5.1111': attribute type 10 has an invalid length.
[  385.628703][T10787] team0: Port device dummy0 added
[  385.886127][   T30] audit: type=1400 audit(1756811190.202:1010): avc:  denied  { mount } for  pid=10788 comm="syz.3.1112" name="/" dev="configfs" ino=1096 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  386.116332][   T10] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  386.255369][   T30] audit: type=1400 audit(1756811190.572:1011): avc:  denied  { ioctl } for  pid=10799 comm="syz.1.1116" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  386.295203][T10801] autofs: Unknown parameter 'no9á ‘ýPƒ¹G!8°‰™�…EŸ8-ö¤ ™�ŠÇÅ–èEeÕ¬(�	IrÝ\•žu}ibˆŒ�ÞêT0;´Œmy´[Gc¯î#Ï>QkÏübYü&“àÌ#“w„@/VV¼Lë~1ƒ2§÷lÿh<yÞ¯ðÕMÈv÷«^7 !JÐ>–O„h'®ÈûrK1‚\kU{!�e½úó¬Üš7»ßß
[  386.295203][T10801] ÄUúeâ[¦ÓÎ%#s'
[  386.333785][   T30] audit: type=1400 audit(1756811190.652:1012): avc:  denied  { read append } for  pid=10799 comm="syz.1.1116" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  386.358606][   T10] usb 6-1: Using ep0 maxpacket: 8
[  386.367302][   T10] usb 6-1: config 0 has an invalid interface number: 186 but max is 0
[  386.377978][   T10] usb 6-1: config 0 has no interface number 0
[  386.420160][   T10] usb 6-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  386.434960][   T30] audit: type=1400 audit(1756811190.692:1013): avc:  denied  { open } for  pid=10799 comm="syz.1.1116" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  386.450961][T10804] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  386.459962][   T10] usb 6-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A
[  386.478806][   T10] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  386.491834][   T10] usb 6-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  386.513992][   T30] audit: type=1400 audit(1756811190.832:1014): avc:  denied  { ioctl } for  pid=10799 comm="syz.1.1116" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  386.583024][   T10] usb 6-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[  386.592642][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  386.631579][   T10] usb 6-1: Product: syz
[  386.639301][   T10] usb 6-1: Manufacturer: syz
[  386.644128][   T10] usb 6-1: SerialNumber: syz
[  386.670671][   T10] usb 6-1: config 0 descriptor??
[  386.842516][   T30] audit: type=1400 audit(1756811191.162:1015): avc:  denied  { connect } for  pid=10806 comm="syz.1.1117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  386.885517][T10791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  386.905114][T10791] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  386.971337][   T10] iowarrior 6-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0
[  386.993420][   T10] usb 6-1: USB disconnect, device number 28
[  387.617413][T10819] wireguard0: entered promiscuous mode
[  387.632366][T10819] wireguard0: entered allmulticast mode
[  387.844499][T10833] sp0: Synchronizing with TNC
[  387.905494][T10830] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1123'.
[  387.916373][T10830] openvswitch: netlink: Missing key (keys=40, expected=100)
[  388.316905][   T44] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  388.334679][T10836] netlink: 'syz.4.1124': attribute type 13 has an invalid length.
[  388.346618][T10836] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1124'.
[  388.359070][T10836] erspan0: refused to change device tx_queue_len
[  388.368400][T10836] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  388.514292][   T44] usb 6-1: Using ep0 maxpacket: 32
[  388.533694][   T44] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  388.559677][   T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  388.593038][   T44] usb 6-1: config 0 descriptor??
[  388.615594][   T44] gspca_main: nw80x-2.14.0 probing 055f:d001
[  388.858541][ T5172] Bluetooth: hci4: command 0x0405 tx timeout
[  390.045786][  T975] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  390.195747][  T975] usb 2-1: Using ep0 maxpacket: 16
[  390.203693][  T975] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  390.216312][  T975] usb 2-1: config 0 interface 0 has no altsetting 0
[  390.223077][  T975] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  390.232709][  T975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  390.243708][  T975] usb 2-1: config 0 descriptor??
[  391.146770][  T975] nzxt-smart2 0003:1E71:2009.000B: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0
[  391.477137][T10874] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  391.488371][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  391.488478][   T30] audit: type=1400 audit(1756811195.812:1017): avc:  denied  { setattr } for  pid=10873 comm="syz.0.1135" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  391.544532][   T10] usb 2-1: USB disconnect, device number 45
[  391.584660][T10876] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1136'.
[  391.614059][   T44] usb 6-1: USB disconnect, device number 29
[  392.179293][T10876] sd 0:0:1:0: device reset
[  392.199574][T10876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  392.226647][T10876] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  392.242468][T10876] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1136'.
[  392.251516][   T30] audit: type=1400 audit(1756811196.562:1018): avc:  denied  { watch_reads } for  pid=10875 comm="syz.0.1136" path="/216" dev="tmpfs" ino=1159 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  392.501840][   T30] audit: type=1400 audit(1756811196.822:1019): avc:  denied  { read } for  pid=10891 comm="syz.4.1141" path="socket:[27938]" dev="sockfs" ino=27938 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  392.843830][T10897] block nbd0: Attempted send on invalid socket
[  392.850105][T10897] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  393.715887][T10924] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  393.727460][T10924] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  394.315446][T10928] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=10928 comm=syz.1.1149
[  394.332695][T10928] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  394.399419][   T30] audit: type=1400 audit(1756811198.712:1020): avc:  denied  { unmount } for  pid=7021 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  394.432903][T10928] syz.1.1149 (10928): drop_caches: 2
[  394.438991][T10928] syz.1.1149 (10928): drop_caches: 2
[  394.532205][T10933] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1151'.
[  394.544143][T10933] overlayfs: failed to resolve './bus/file0': -2
[  395.771399][   T10] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  395.856436][ T5172] Bluetooth: hci4: unexpected event for opcode 0x042d
[  395.930995][   T10] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  395.962274][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  396.052888][   T10] usb 6-1: Product: syz
[  396.061613][   T10] usb 6-1: Manufacturer: syz
[  396.085890][   T10] usb 6-1: SerialNumber: syz
[  396.118042][   T10] usb 6-1: config 0 descriptor??
[  396.150419][   T10] i2c-tiny-usb 6-1:0.0: version 6d.cc found at bus 006 address 030
[  396.771557][T10973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1159'.
[  396.774203][   T30] audit: type=1400 audit(1756811201.092:1021): avc:  denied  { write } for  pid=10964 comm="syz.3.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  396.922589][   T10]  (null): failure setting delay to 10us
[  396.940485][   T10] i2c-tiny-usb 6-1:0.0: probe with driver i2c-tiny-usb failed with error -5
[  396.991256][   T10] usb 6-1: USB disconnect, device number 30
[  397.520582][T11002] ip6erspan0: entered promiscuous mode
[  398.489179][T11022] netlink: 'syz.4.1172': attribute type 5 has an invalid length.
[  398.497461][T11022] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1172'.
[  398.640070][T11022] : entered promiscuous mode
[  400.495582][T11035] sit1: entered allmulticast mode
[  400.620937][T11041] overlayfs: failed to clone upperpath
[  400.643628][T11041] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  400.825248][   T30] audit: type=1400 audit(1756811205.142:1022): avc:  denied  { bind } for  pid=11045 comm="syz.5.1178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  401.074780][   T10] kernel write not supported for file /610/attr/exec (pid: 10 comm: kworker/0:1)
[  401.356402][   T10] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  402.022475][   T30] audit: type=1400 audit(1756811206.342:1023): avc:  denied  { read } for  pid=11060 comm="syz.1.1182" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  402.046729][   T30] audit: type=1400 audit(1756811206.352:1024): avc:  denied  { open } for  pid=11060 comm="syz.1.1182" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  402.055317][T11061] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  402.071819][   T30] audit: type=1400 audit(1756811206.352:1025): avc:  denied  { ioctl } for  pid=11060 comm="syz.1.1182" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  402.095823][   T10] usb 6-1: Using ep0 maxpacket: 8
[  402.171811][T11061] tipc: Started in network mode
[  402.207692][T11061] tipc: Node identity 7a77185cedd2, cluster identity 4711
[  402.215056][T11061] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  402.223484][   T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7
[  402.242750][   T10] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  402.252562][   T10] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  402.261249][   T10] usb 6-1: Product: syz
[  402.265519][   T10] usb 6-1: Manufacturer: syz
[  402.266703][T11060] tipc: Resetting bearer <eth:syzkaller0>
[  402.270904][   T10] usb 6-1: SerialNumber: syz
[  402.301341][T11060] tipc: Disabling bearer <eth:syzkaller0>
[  402.305355][   T30] audit: type=1400 audit(1756811206.622:1026): avc:  denied  { create } for  pid=11066 comm="syz.0.1184" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1
[  402.606533][   T10] usb 6-1: palm_os_3_probe - error -110 getting connection information
[  402.625101][   T10] visor 6-1:1.0: probe with driver visor failed with error -110
[  402.717713][   T30] audit: type=1400 audit(1756811207.032:1027): avc:  denied  { associate } for  pid=11086 comm="syz.0.1189" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  402.938794][   T30] audit: type=1400 audit(1756811207.122:1028): avc:  denied  { name_connect } for  pid=11081 comm="syz.4.1188" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1
[  403.134124][T11094] use of bytesused == 0 is deprecated and will be removed in the future,
[  403.268597][T11094] use the actual size instead.
[  404.091323][ T1574] usb 6-1: USB disconnect, device number 31
[  405.020814][T11122] tmpfs: Bad value for 'mpol'
[  405.222291][T11112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  405.231159][T11112] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  405.308893][   T44] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  405.455742][   T44] usb 2-1: device descriptor read/64, error -71
[  405.705899][   T44] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  405.846542][   T44] usb 2-1: device descriptor read/64, error -71
[  405.977451][   T44] usb usb2-port1: attempt power cycle
[  405.995958][ T5928] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  406.038138][T11135] netlink: 'syz.0.1200': attribute type 1 has an invalid length.
[  406.056531][T11135] netlink: 'syz.0.1200': attribute type 4 has an invalid length.
[  406.064457][T11135] netlink: 15334 bytes leftover after parsing attributes in process `syz.0.1200'.
[  406.187148][ T5928] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  406.304506][ T5928] usb 6-1: config 220 has 1 interface, different from the descriptor's value: 3
[  406.316195][ T5928] usb 6-1: config 220 interface 0 has no altsetting 0
[  406.327544][ T5928] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  406.340918][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  406.791915][   T44] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  406.801360][ T5928] usb 6-1: Product: syz
[  406.808694][ T5928] usb 6-1: Manufacturer: syz
[  406.814358][ T5928] usb 6-1: SerialNumber: syz
[  406.827596][   T44] usb 2-1: device descriptor read/8, error -71
[  406.979463][   T30] audit: type=1400 audit(1756811211.304:1029): avc:  denied  { setopt } for  pid=11140 comm="syz.4.1202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  406.999050][    C0] vkms_vblank_simulate: vblank timer overrun
[  407.034095][T11130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  407.110809][   T44] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  407.112464][T11130] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  407.168825][   T44] usb 2-1: device descriptor read/8, error -71
[  407.194234][ T5928] usb 6-1: Found UVC 7.01 device syz (8086:0b07)
[  407.205146][ T5928] usb 6-1: No valid video chain found.
[  407.213383][ T5928] usb 6-1: USB disconnect, device number 32
[  407.330687][   T44] usb usb2-port1: unable to enumerate USB device
[  407.815571][   T30] audit: type=1400 audit(1756811212.134:1030): avc:  denied  { ioctl } for  pid=11149 comm="syz.3.1205" path="socket:[28933]" dev="sockfs" ino=28933 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  407.981461][T11164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  407.997725][T11164] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  408.403892][ T5172] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  408.445722][   T44] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  408.607280][   T44] usb 2-1: device descriptor read/64, error -71
[  408.936453][   T44] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  409.457425][   T44] usb 2-1: device descriptor read/64, error -71
[  409.566224][   T44] usb usb2-port1: attempt power cycle
[  409.959431][   T44] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  409.986246][   T44] usb 2-1: device descriptor read/8, error -71
[  410.019670][T11203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  410.035281][T11203] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  410.191121][   T30] audit: type=1400 audit(1756811214.514:1031): avc:  denied  { ioctl } for  pid=11201 comm="syz.4.1220" path="socket:[28451]" dev="sockfs" ino=28451 ioctlcmd=0x9423 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  410.192026][T11214] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1222'.
[  410.251756][   T44] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  410.622175][   T44] usb 2-1: device descriptor read/8, error -71
[  410.747970][   T44] usb usb2-port1: unable to enumerate USB device
[  410.768689][   T30] audit: type=1400 audit(1756811215.094:1032): avc:  denied  { nlmsg_read } for  pid=11221 comm="syz.0.1224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  411.298072][   T30] audit: type=1326 audit(1756811215.624:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11227 comm="syz.4.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ef38ebe9 code=0x7ffc0000
[  411.446629][T11237] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  411.950002][   T30] audit: type=1326 audit(1756811215.624:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11227 comm="syz.4.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ef38ebe9 code=0x7ffc0000
[  411.975574][   T30] audit: type=1326 audit(1756811215.624:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11227 comm="syz.4.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f15ef38d550 code=0x7ffc0000
[  412.076749][   T30] audit: type=1326 audit(1756811215.624:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11227 comm="syz.4.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f15ef38e7eb code=0x7ffc0000
[  412.316367][   T30] audit: type=1326 audit(1756811215.624:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11227 comm="syz.4.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f15ef38e7eb code=0x7ffc0000
[  412.356202][   T30] audit: type=1326 audit(1756811215.624:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11227 comm="syz.4.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f15ef38e7eb code=0x7ffc0000
[  412.474828][   T30] audit: type=1326 audit(1756811215.624:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11227 comm="syz.4.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f15ef38e7eb code=0x7ffc0000
[  412.836178][   T10] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  412.986114][   T10] usb 6-1: Using ep0 maxpacket: 32
[  413.089621][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  413.111068][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  413.137723][   T10] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[  413.160870][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  413.188823][   T10] usb 6-1: config 0 descriptor??
[  413.607197][   T10] koneplus 0003:1E7D:2D51.000C: unknown main item tag 0x0
[  413.616700][   T10] koneplus 0003:1E7D:2D51.000C: unknown main item tag 0x0
[  413.623813][   T10] koneplus 0003:1E7D:2D51.000C: unknown main item tag 0x0
[  413.656902][   T10] koneplus 0003:1E7D:2D51.000C: unknown main item tag 0x0
[  413.674474][   T10] koneplus 0003:1E7D:2D51.000C: unknown main item tag 0x0
[  413.692950][   T10] koneplus 0003:1E7D:2D51.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.5-1/input0
[  414.033146][   T44] usb 6-1: USB disconnect, device number 33
[  414.281691][   T30] kauditd_printk_skb: 3 callbacks suppressed
[  414.281706][   T30] audit: type=1400 audit(1756811218.604:1043): avc:  denied  { name_bind } for  pid=11261 comm="syz.4.1234" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  414.582682][T11268] lo speed is unknown, defaulting to 1000
[  414.591750][T11268] lo speed is unknown, defaulting to 1000
[  414.953510][T11276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  414.969024][T11276] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  415.135816][ T5928] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  415.299600][ T5928] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  415.308968][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  415.317253][ T5928] usb 6-1: Product: syz
[  415.321758][ T5928] usb 6-1: Manufacturer: syz
[  415.327011][ T5928] usb 6-1: SerialNumber: syz
[  415.362461][T11281] pimreg: entered allmulticast mode
[  415.402453][T11281] pimreg: left allmulticast mode
[  415.408691][T11281] dvmrp1: left allmulticast mode
[  415.574408][T11284] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1239'.
[  415.584016][T11284] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1239'.
[  416.006486][T11287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  416.017166][T11287] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  416.706062][   T44] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  416.865816][   T44] usb 2-1: Using ep0 maxpacket: 32
[  416.872128][   T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  416.884868][   T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  416.894715][   T44] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  416.903807][   T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  416.915273][   T44] usb 2-1: config 0 descriptor??
[  416.921197][ T5928] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  416.934736][   T44] hub 2-1:0.0: USB hub found
[  416.940449][ T5928] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE
[  417.155463][T11289] syzkaller0: entered promiscuous mode
[  417.161494][T11289] syzkaller0: entered allmulticast mode
[  417.171546][   T44] hub 2-1:0.0: 1 port detected
[  417.582515][   T44] hub 2-1:0.0: activate --> -90
[  417.613236][T11292] can0: slcan on ptm0.
[  417.770500][ T5928] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO
[  417.795556][   T30] audit: type=1400 audit(1756811222.114:1044): avc:  denied  { watch } for  pid=11291 comm="syz.4.1241" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=144 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  417.798941][ T5928] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  417.870898][ T5928] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  417.891416][ T5928] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71
[  417.931150][ T5928] usb 6-1: USB disconnect, device number 34
[  418.109833][T11316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1243'.
[  418.524565][   T30] audit: type=1400 audit(1756811222.844:1045): avc:  denied  { connect } for  pid=11320 comm="syz.5.1244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  418.683665][T11324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  418.696609][T11324] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  419.114163][   T44] hub 2-1:0.0: hub_ext_port_status failed (err = -32)
[  419.126866][   T44] hub 2-1:0.0: hub_ext_port_status failed (err = -32)
[  419.138121][   T44] usb 2-1-port1: connect-debounce failed
[  419.256322][T11326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  419.281436][T11326] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  419.666995][T11291] can0 (unregistered): slcan off ptm0.
[  419.706048][   T44] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  419.746437][   T10] usb 2-1: USB disconnect, device number 54
[  419.754496][T11337] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2
[  419.791096][   T30] audit: type=1400 audit(1756811224.114:1046): avc:  denied  { append } for  pid=11338 comm="syz.4.1250" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  419.866438][T11337] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0
[  419.886880][   T44] usb 6-1: device descriptor read/64, error -71
[  419.899138][   T30] audit: type=1400 audit(1756811224.194:1047): avc:  denied  { firmware_load } for  pid=11336 comm="syz.1.1249" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  419.922547][T11346] netlink: 'syz.3.1248': attribute type 2 has an invalid length.
[  419.930345][T11346] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1248'.
[  420.127856][   T44] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[  420.167778][   T30] audit: type=1400 audit(1756811224.474:1048): avc:  denied  { mounton } for  pid=11350 comm="syz.4.1251" path="/proc/831/cgroup" dev="proc" ino=29390 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[  420.334597][T11363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  420.343250][   T44] usb 6-1: device descriptor read/64, error -71
[  420.354055][T11365] bridge: RTM_NEWNEIGH with invalid ether address
[  420.382440][T11363] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  420.436513][T11365] bridge: RTM_NEWNEIGH with invalid ether address
[  420.466695][T11365] bridge: RTM_NEWNEIGH with invalid ether address
[  420.476414][   T44] usb usb6-port1: attempt power cycle
[  420.484060][T11365] bridge: RTM_NEWNEIGH with invalid ether address
[  420.496803][T11365] bridge: RTM_NEWNEIGH with invalid ether address
[  420.508832][T11365] bridge: RTM_NEWNEIGH with invalid ether address
[  420.551474][T11365] bridge: RTM_NEWNEIGH with invalid ether address
[  420.583649][T11365] bridge: RTM_NEWNEIGH with invalid ether address
[  420.592463][T11365] bridge: RTM_NEWNEIGH with invalid ether address
[  420.604665][T11365] bridge: RTM_NEWNEIGH with invalid ether address
[  420.616844][T11365] bridge: RTM_NEWNEIGH with invalid ether address
[  420.624921][T11365] bridge: RTM_NEWNEIGH with invalid ether address
[  420.635611][T11365] bridge: RTM_NEWNEIGH with invalid ether address
[  420.644684][T11365] bridge: RTM_NEWNEIGH with invalid ether address
[  420.676912][T11365] bridge: RTM_NEWNEIGH with invalid ether address
[  420.684573][T11365] bridge: RTM_NEWNEIGH with invalid ether address
[  420.696152][T11365] bridge: RTM_NEWNEIGH with invalid ether address
[  420.704082][T11365] bridge: RTM_NEWNEIGH with invalid ether address
[  420.715412][T11365] bridge: RTM_NEWNEIGH with invalid ether address
[  420.724295][T11365] bridge: RTM_NEWNEIGH with invalid ether address
[  420.737527][T11365] bridge: RTM_NEWNEIGH with invalid ether address
[  420.745372][T11365] bridge: RTM_NEWNEIGH with invalid ether address
[  420.757872][T11365] bridge: RTM_NEWNEIGH with invalid ether address
[  420.769583][T11365] bridge: RTM_NEWNEIGH with invalid ether address
[  420.779657][T11365] bridge: RTM_NEWNEIGH with invalid ether address
[  420.792724][T11365] bridge: RTM_NEWNEIGH with invalid ether address
[  420.802276][T11365] bridge: RTM_NEWNEIGH with invalid ether address
[  420.813684][T11365] bridge: RTM_NEWNEIGH with invalid ether address
[  420.822324][T11365] bridge: RTM_NEWNEIGH with invalid ether address
[  420.834374][T11365] bridge: RTM_NEWNEIGH with invalid ether address
[  420.841053][   T44] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[  420.854330][T11365] bridge: RTM_NEWNEIGH with invalid ether address
[  420.863242][T11365] bridge: RTM_NEWNEIGH with invalid ether address
[  420.874708][   T44] usb 6-1: device descriptor read/8, error -71
[  420.882331][T11365] bridge: RTM_NEWNEIGH with invalid ether address
[  420.900436][T11365] bridge: RTM_NEWNEIGH with invalid ether address
[  420.924131][T11365] bridge: RTM_NEWNEIGH with invalid ether address
[  420.934882][T11365] bridge: RTM_NEWNEIGH with invalid ether address
[  420.945058][T11365] bridge: RTM_NEWNEIGH with invalid ether address
[  420.956701][T11365] bridge: RTM_NEWNEIGH with invalid ether address
[  420.964432][T11365] bridge: RTM_NEWNEIGH with invalid ether address
[  420.977482][T11365] bridge: RTM_NEWNEIGH with invalid ether address
[  420.990369][T11365] bridge: RTM_NEWNEIGH with invalid ether address
[  420.999968][T11365] bridge: RTM_NEWNEIGH with invalid ether address
[  421.010969][T11365] bridge: RTM_NEWNEIGH with invalid ether address
[  421.022427][T11365] bridge: RTM_NEWNEIGH with invalid ether address
[  421.033297][T11365] bridge: RTM_NEWNEIGH with invalid ether address
[  421.041905][T11365] bridge: RTM_NEWNEIGH with invalid ether address
[  421.053363][T11365] bridge: RTM_NEWNEIGH with invalid ether address
[  421.062844][T11365] bridge: RTM_NEWNEIGH with invalid ether address
[  421.073605][T11365] bridge: RTM_NEWNEIGH with invalid ether address
[  421.083758][T11365] bridge: RTM_NEWNEIGH with invalid ether address
[  421.185211][   T44] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[  421.186505][T11365] bridge: RTM_NEWNEIGH with invalid ether address
[  421.199964][T11365] bridge: RTM_NEWNEIGH with invalid ether address
[  421.208179][T11365] bridge: RTM_NEWNEIGH with invalid ether address
[  421.226202][   T44] usb 6-1: device descriptor read/8, error -71
[  421.336116][   T44] usb usb6-port1: unable to enumerate USB device
[  421.749993][   T30] audit: type=1400 audit(1756811226.074:1049): avc:  denied  { bind } for  pid=11391 comm="syz.3.1259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  422.570084][ T7754] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  422.584869][T11419] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  422.835517][T11424] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  422.886957][   T30] audit: type=1400 audit(1756811227.214:1050): avc:  denied  { nlmsg_write } for  pid=11422 comm="syz.5.1264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  423.756176][T11439] can0: slcan on ttyS3.
[  424.149755][   T30] audit: type=1400 audit(1756811228.474:1051): avc:  denied  { set_context_mgr } for  pid=11444 comm="syz.0.1269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  424.184926][T11446] binder: BINDER_SET_CONTEXT_MGR already set
[  424.195699][T11446] binder: 11444:11446 ioctl 4018620d 200000004a80 returned -16
[  424.238615][T11446] nfs4: Unknown parameter 'fd'
[  424.244311][T11446] 9pnet_fd: p9_fd_create_tcp (11446): problem connecting socket to 127.0.0.1
[  424.746938][T11433] can0 (unregistered): slcan off ttyS3.
[  424.896201][   T30] audit: type=1400 audit(1756811229.224:1052): avc:  denied  { append } for  pid=11457 comm="syz.0.1270" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  425.029907][T11458] netlink: 'syz.0.1270': attribute type 12 has an invalid length.
[  425.373223][T11470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  425.388213][T11470] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  426.032952][   T30] audit: type=1400 audit(1756811230.264:1053): avc:  denied  { listen } for  pid=11479 comm="syz.1.1275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  426.285768][   T44] usb 2-1: new low-speed USB device number 55 using dummy_hcd
[  426.615814][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  426.675783][   T44] usb 2-1: config 65 has an invalid interface number: 95 but max is 0
[  426.693371][T11506] lo speed is unknown, defaulting to 1000
[  426.694130][   T44] usb 2-1: config 65 has no interface number 0
[  426.722764][T11504] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11504 comm=syz.0.1279
[  426.759941][   T44] usb 2-1: string descriptor 0 read error: -22
[  426.777302][T11506] lo speed is unknown, defaulting to 1000
[  426.796503][   T44] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=6f.b6
[  426.839436][   T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  426.923866][   T44] usbtest 2-1:65.95: Linux gadget zero
[  426.955693][   T44] usbtest 2-1:65.95: low-speed {control in/out} tests (+alt)
[  427.285080][T11521] ip6erspan0: entered promiscuous mode
[  428.096925][T11543] overlayfs: failed to clone upperpath
[  428.508365][   T30] audit: type=1326 audit(1756811232.824:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11553 comm="syz.5.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6525d8ebe9 code=0x7ffc0000
[  428.541031][ T5928] usb 2-1: USB disconnect, device number 55
[  428.545564][   T30] audit: type=1326 audit(1756811232.824:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11553 comm="syz.5.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7f6525d8ebe9 code=0x7ffc0000
[  428.602627][   T30] audit: type=1326 audit(1756811232.824:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11553 comm="syz.5.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6525d8ebe9 code=0x7ffc0000
[  428.629848][   T30] audit: type=1326 audit(1756811232.824:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11553 comm="syz.5.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6525d8ebe9 code=0x7ffc0000
[  428.710119][   T30] audit: type=1326 audit(1756811232.824:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11553 comm="syz.5.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f6525d8ebe9 code=0x7ffc0000
[  428.736266][   T30] audit: type=1326 audit(1756811232.824:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11553 comm="syz.5.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6525d8ec23 code=0x7ffc0000
[  428.841206][   T30] audit: type=1326 audit(1756811232.824:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11553 comm="syz.5.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6525d8ec23 code=0x7ffc0000
[  428.878395][   T30] audit: type=1326 audit(1756811232.824:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11553 comm="syz.5.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6525d8ebe9 code=0x7ffc0000
[  429.324665][T11577] lo speed is unknown, defaulting to 1000
[  429.344549][T11577] lo speed is unknown, defaulting to 1000
[  429.792090][T11581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  429.801395][T11581] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  429.967013][T11572] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  430.035733][   T30] kauditd_printk_skb: 17 callbacks suppressed
[  430.035750][   T30] audit: type=1400 audit(1756811234.334:1079): avc:  denied  { ioctl } for  pid=11582 comm="syz.5.1296" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  430.066909][    C1] vkms_vblank_simulate: vblank timer overrun
[  430.571169][T11597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1297'.
[  431.538166][T11601] pimreg: entered allmulticast mode
[  431.584272][T11607] pimreg: left allmulticast mode
[  432.089332][T11619] debugfs: '!' already exists in 'ieee80211'
[  432.114261][   T30] audit: type=1326 audit(1756811236.404:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11616 comm="syz.1.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8158ebe9 code=0x7ffc0000
[  432.242635][   T30] audit: type=1326 audit(1756811236.404:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11616 comm="syz.1.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8158ebe9 code=0x7ffc0000
[  432.282105][   T30] audit: type=1326 audit(1756811236.404:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11616 comm="syz.1.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7efd8158ebe9 code=0x7ffc0000
[  432.316607][   T30] audit: type=1326 audit(1756811236.404:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11616 comm="syz.1.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8158ebe9 code=0x7ffc0000
[  432.340640][   T30] audit: type=1326 audit(1756811236.404:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11616 comm="syz.1.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efd8158ebe9 code=0x7ffc0000
[  432.364044][    C1] vkms_vblank_simulate: vblank timer overrun
[  432.646628][T11622] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1306'.
[  432.656031][   T30] audit: type=1326 audit(1756811236.404:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11616 comm="syz.1.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8158ebe9 code=0x7ffc0000
[  432.681873][T11622] team0: No ports can be present during mode change
[  432.688940][   T30] audit: type=1326 audit(1756811236.404:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11616 comm="syz.1.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7efd8158ebe9 code=0x7ffc0000
[  432.713170][   T30] audit: type=1400 audit(1756811236.524:1087): avc:  denied  { map } for  pid=11616 comm="syz.1.1305" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  432.745300][   T30] audit: type=1400 audit(1756811236.524:1088): avc:  denied  { execute } for  pid=11616 comm="syz.1.1305" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  433.086988][ T1574] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[  433.234054][T11630] netlink: 'syz.5.1308': attribute type 2 has an invalid length.
[  433.242560][ T1574] usb 2-1: Using ep0 maxpacket: 8
[  433.257260][ T1574] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  433.267425][ T1574] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  433.275425][ T1574] usb 2-1: Product: syz
[  433.280546][ T1574] usb 2-1: Manufacturer: syz
[  433.285143][ T1574] usb 2-1: SerialNumber: syz
[  433.297243][ T1574] usb 2-1: config 0 descriptor??
[  433.311435][ T1574] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  433.341109][T11633] netlink: 'syz.5.1309': attribute type 14 has an invalid length.
[  433.596842][   T44] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[  433.736495][ T5172] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  433.750450][   T44] usb 6-1: config 0 has an invalid interface number: 255 but max is 0
[  433.759544][   T44] usb 6-1: config 0 has no interface number 0
[  433.765996][   T44] usb 6-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  433.777851][   T44] usb 6-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  433.791554][   T44] usb 6-1: config 0 interface 255 has no altsetting 0
[  433.798850][   T44] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  433.808845][   T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  433.822648][   T44] usb 6-1: config 0 descriptor??
[  433.831116][   T44] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  434.032254][T11638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  434.044656][T11638] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  434.058457][T11638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  434.073516][T11638] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  434.516816][T11643] gtp1: entered promiscuous mode
[  434.549212][T11643] lo speed is unknown, defaulting to 1000
[  434.556414][T11643] lo speed is unknown, defaulting to 1000
[  435.061988][   T44] usb 6-1: USB disconnect, device number 39
[  435.095802][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  435.870361][T11643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1312'.
[  435.881315][    T9] IPVS: starting estimator thread 0...
[  435.976537][T11660] IPVS: using max 44 ests per chain, 105600 per kthread
[  436.257607][T11668] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=11668 comm=syz.0.1318
[  436.345721][   T44] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[  436.475662][ T5857] Bluetooth: hci5: command 0x1003 tx timeout
[  436.481891][ T5172] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  436.499721][ T1574] usb 2-1: USB disconnect, device number 56
[  436.607416][   T44] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  436.617821][   T30] kauditd_printk_skb: 34 callbacks suppressed
[  436.617836][   T30] audit: type=1804 audit(1756811240.924:1123): pid=11671 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1319" name="/newroot/244/file0" dev="tmpfs" ino=1299 res=1 errno=0
[  436.649940][   T44] usb 6-1: config 220 has 1 interface, different from the descriptor's value: 3
[  436.667369][   T44] usb 6-1: config 220 interface 0 has no altsetting 0
[  436.681156][   T44] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  436.699587][   T44] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  436.708063][   T44] usb 6-1: Product: syz
[  436.712277][   T44] usb 6-1: Manufacturer: syz
[  436.718112][   T44] usb 6-1: SerialNumber: syz
[  436.787471][T11673] PKCS7: Unknown OID: [5] (bad)
[  436.792729][T11673] PKCS7: Only support pkcs7_signedData type
[  436.973087][   T44] usb 6-1: Found UVC 7.01 device syz (8086:0b07)
[  437.026686][   T44] usb 6-1: No valid video chain found.
[  437.063954][   T44] usb 6-1: USB disconnect, device number 40
[  437.262868][ T7751] IPVS: stop unused estimator thread 0...
[  437.569796][T11680] sctp: [Deprecated]: syz.3.1320 (pid 11680) Use of struct sctp_assoc_value in delayed_ack socket option.
[  437.569796][T11680] Use struct sctp_sack_info instead
[  437.800427][T11685] pimreg: entered allmulticast mode
[  437.911282][T11685] pimreg: left allmulticast mode
[  437.938360][T11687] x_tables: ip6_tables: cluster.0 match: invalid size 16 (kernel) != (user) 104
[  439.281595][T11710] netlink: 'syz.0.1327': attribute type 1 has an invalid length.
[  439.289772][T11710] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1327'.
[  439.329869][T11710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1327'.
[  439.358857][T11714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  439.395427][T11714] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  439.589465][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  439.598543][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  439.695067][T11720] block nbd5: Attempted send on invalid socket
[  439.702333][T11720] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  439.711902][T11720] FAT-fs (nbd5): unable to read boot sector
[  439.754301][T11721] netlink: 'syz.4.1330': attribute type 1 has an invalid length.
[  439.793208][T11721] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1330'.
[  440.025838][T11258] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[  440.250596][T11258] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  440.261697][T11258] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 3
[  440.288639][T11258] usb 2-1: config 220 interface 0 has no altsetting 0
[  440.335640][T11258] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  440.347759][T11258] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  440.367333][T11258] usb 2-1: Product: syz
[  440.371552][T11258] usb 2-1: Manufacturer: syz
[  440.383967][T11258] usb 2-1: SerialNumber: syz
[  440.608995][T11733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  440.621434][T11733] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  440.670111][   T30] audit: type=1326 audit(1756811244.994:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11734 comm="syz.5.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6525d8ebe9 code=0x7ffc0000
[  440.693824][T11735] futex_wake_op: syz.5.1336 tries to shift op by 32; fix this program
[  440.814039][   T30] audit: type=1326 audit(1756811244.994:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11734 comm="syz.5.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6525d8ebe9 code=0x7ffc0000
[  440.837532][    C0] vkms_vblank_simulate: vblank timer overrun
[  440.847327][   T30] audit: type=1326 audit(1756811244.994:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11734 comm="syz.5.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6525d8ebe9 code=0x7ffc0000
[  440.870778][    C0] vkms_vblank_simulate: vblank timer overrun
[  440.878985][   T30] audit: type=1326 audit(1756811245.124:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11734 comm="syz.5.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6525d8ebe9 code=0x7ffc0000
[  440.902487][    C0] vkms_vblank_simulate: vblank timer overrun
[  440.938607][   T30] audit: type=1326 audit(1756811245.124:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11734 comm="syz.5.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6525d8ebe9 code=0x7ffc0000
[  441.153690][   T30] audit: type=1400 audit(1756811245.474:1129): avc:  denied  { setattr } for  pid=11737 comm="syz.4.1337" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  441.239524][T11258] usb 2-1: Found UVC 7.01 device syz (8086:0b07)
[  441.275061][T11258] usb 2-1: No valid video chain found.
[  441.383851][T11258] usb 2-1: USB disconnect, device number 57
[  441.408376][   T30] audit: type=1400 audit(1756811245.734:1130): avc:  denied  { execute } for  pid=11741 comm="syz.0.1339" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1
[  442.037880][   T30] audit: type=1326 audit(1756811246.364:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11766 comm="syz.4.1345" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f15ef38ebe9 code=0x0
[  442.131118][T11770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1346'.
[  442.637904][T11774] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  442.766745][   T30] audit: type=1400 audit(1756811247.094:1132): avc:  denied  { ioctl } for  pid=11778 comm="syz.5.1349" path="socket:[31445]" dev="sockfs" ino=31445 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  442.791527][    C0] vkms_vblank_simulate: vblank timer overrun
[  442.881992][T11784] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1350'.
[  443.385069][   T30] audit: type=1400 audit(1756811247.574:1133): avc:  denied  { getopt } for  pid=11785 comm="syz.4.1351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  443.404541][    C0] vkms_vblank_simulate: vblank timer overrun
[  443.628826][T11258] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[  443.716363][   T30] audit: type=1400 audit(1756811247.984:1134): avc:  denied  { map } for  pid=11790 comm="syz.3.1353" path="socket:[31543]" dev="sockfs" ino=31543 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  443.739661][    C0] vkms_vblank_simulate: vblank timer overrun
[  443.773376][   T30] audit: type=1400 audit(1756811248.074:1135): avc:  denied  { read } for  pid=11794 comm="syz.4.1354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  443.830264][T11258] usb 6-1: config 0 has an invalid interface number: 255 but max is 0
[  443.884578][T11258] usb 6-1: config 0 has no interface number 0
[  443.899628][T11258] usb 6-1: config 0 interface 255 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  444.011314][T11258] usb 6-1: config 0 interface 255 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  444.023363][T11258] usb 6-1: New USB device found, idVendor=10cf, idProduct=8065, bcdDevice=91.79
[  444.057337][T11258] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  444.073633][  T975] libceph: connect (1)[c::]:6789 error -101
[  444.082535][  T975] libceph: mon0 (1)[c::]:6789 connect error
[  444.088712][T11800] ceph: No mds server is up or the cluster is laggy
[  444.169384][T11258] usb 6-1: Product: syz
[  444.178586][T11258] usb 6-1: Manufacturer: syz
[  444.183173][T11258] usb 6-1: SerialNumber: syz
[  444.299829][T11258] usb 6-1: config 0 descriptor??
[  444.350491][T11258] vmk80xx 6-1:0.255: driver 'vmk80xx' failed to auto-configure device.
[  444.370222][T11258] vmk80xx 6-1:0.255: probe with driver vmk80xx failed with error -22
[  444.758998][T11789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  444.794468][T11789] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  444.809383][T11807] wireguard0: entered promiscuous mode
[  444.820918][T11807] wireguard0: entered allmulticast mode
[  444.877707][   T44] usb 6-1: USB disconnect, device number 41
[  445.504969][T11832] block nbd5: Attempted send on invalid socket
[  445.512044][T11832] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  445.758236][ T5857] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  446.021822][T11854] raw_sendmsg: syz.3.1370 forgot to set AF_INET. Fix it!
[  446.669895][T11868] netlink: 'syz.0.1374': attribute type 1 has an invalid length.
[  446.717710][T11868] bond2: entered promiscuous mode
[  446.726259][T11868] 8021q: adding VLAN 0 to HW filter on device bond2
[  446.738732][T11868] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11868 comm=syz.0.1374
[  446.909379][T11877] overlayfs: failed lookup in lower (newroot/273, name='bus', err=-40): overlapping layers
[  447.115746][   T30] audit: type=1400 audit(1756811251.424:1136): avc:  denied  { ioctl } for  pid=11869 comm="syz.3.1375" path="socket:[31741]" dev="sockfs" ino=31741 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  447.665203][T11897] pimreg: entered allmulticast mode
[  447.684433][T11899] pimreg: left allmulticast mode
[  448.427378][   T10] libceph: connect (1)[c::]:6789 error -101
[  448.440017][   T10] libceph: mon0 (1)[c::]:6789 connect error
[  448.454263][T11911] ceph: No mds server is up or the cluster is laggy
[  449.841294][T11940] netlink: 'syz.1.1392': attribute type 2 has an invalid length.
[  449.877859][T11940] netlink: 'syz.1.1392': attribute type 1 has an invalid length.
[  449.913243][T11940] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1392'.
[  450.233288][ T5857] Bluetooth: hci1: command 0x0c1a tx timeout
[  450.296393][T11258] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[  450.448302][T11258] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[  450.496992][T11258] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  450.546408][T11258] usb 2-1: config 0 descriptor??
[  450.575533][T11258] gspca_main: spca508-2.14.0 probing 8086:0110
[  450.788961][T11944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  450.801906][T11944] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  450.857017][T11258] gspca_spca508: reg_read err -32
[  450.957874][   T10] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[  451.067015][T11258] gspca_spca508: reg_read err -71
[  451.074495][T11258] gspca_spca508: reg_read err -71
[  451.080576][T11258] gspca_spca508: reg_read err -71
[  451.086100][T11258] gspca_spca508: reg write: error -71
[  451.091558][T11258] spca508 2-1:0.0: probe with driver spca508 failed with error -71
[  451.132723][   T10] usb 6-1: Using ep0 maxpacket: 8
[  451.141787][T11258] usb 2-1: USB disconnect, device number 58
[  451.166779][   T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  451.192507][   T10] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89
[  451.307480][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  451.541001][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024
[  451.922194][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  451.952828][   T10] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  452.000556][   T10] usb 6-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[  452.017004][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  452.045466][   T10] usb 6-1: Product: syz
[  452.059815][   T10] usb 6-1: Manufacturer: syz
[  452.065847][   T30] audit: type=1400 audit(1756811256.384:1137): avc:  denied  { bind } for  pid=11969 comm="syz.3.1401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  452.100873][   T10] usb 6-1: SerialNumber: syz
[  452.108992][   T10] usb 6-1: config 0 descriptor??
[  452.121345][T11950] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22
[  452.129775][T11967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  452.153350][T11967] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  452.177589][T11967] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1400'.
[  452.274851][   T30] audit: type=1326 audit(1756811256.514:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11973 comm="syz.3.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b8f8ebe9 code=0x50000
[  452.365901][   T30] audit: type=1326 audit(1756811256.514:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11973 comm="syz.3.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b8f8ebe9 code=0x50000
[  452.390402][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  452.805795][   T30] audit: type=1326 audit(1756811256.514:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11973 comm="syz.3.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b8f8ebe9 code=0x50000
[  453.036301][   T30] audit: type=1326 audit(1756811256.514:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11973 comm="syz.3.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b8f8ebe9 code=0x50000
[  453.068858][   T30] audit: type=1326 audit(1756811256.514:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11973 comm="syz.3.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b8f8ebe9 code=0x50000
[  453.127551][T11986] netlink: 'syz.4.1405': attribute type 1 has an invalid length.
[  453.147311][T11986] bond1: entered promiscuous mode
[  453.162672][T11986] 8021q: adding VLAN 0 to HW filter on device bond1
[  453.172288][   T30] audit: type=1326 audit(1756811256.514:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11973 comm="syz.3.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b8f8ebe9 code=0x50000
[  453.209042][   T30] audit: type=1326 audit(1756811256.514:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11973 comm="syz.3.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b8f8ebe9 code=0x50000
[  453.232253][    C1] vkms_vblank_simulate: vblank timer overrun
[  453.263612][   T30] audit: type=1326 audit(1756811256.514:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11973 comm="syz.3.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b8f8ebe9 code=0x50000
[  453.288125][   T30] audit: type=1326 audit(1756811256.514:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11973 comm="syz.3.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b8f8ebe9 code=0x50000
[  453.312626][   T30] audit: type=1326 audit(1756811256.514:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11973 comm="syz.3.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b8f8ebe9 code=0x50000
[  453.790850][   T10] rc_core: IR keymap rc-snapstream-firefly not found
[  453.798789][   T10] Registered IR keymap rc-empty
[  453.808333][   T10] rc rc0: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  453.865709][T12008] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1411'.
[  453.874991][T12008] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1411'.
[  453.942988][   T10] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input20
[  453.960713][T12000] /dev/nullb0: Can't open blockdev
[  453.980354][   T10] input: syz syz mouse as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input21
[  454.030499][   T10] usb 6-1: USB disconnect, device number 42
[  454.037586][    C0] ati_remote 6-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19
[  454.227074][ T1776] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[  454.413061][ T1776] usb 2-1: Using ep0 maxpacket: 16
[  454.601259][ T1776] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  454.617985][ T1776] usb 2-1: New USB device found, idVendor=046d, idProduct=c714, bcdDevice= 0.00
[  454.632479][ T1776] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  454.670732][ T1776] usb 2-1: config 0 descriptor??
[  454.812413][T12025] lo speed is unknown, defaulting to 1000
[  454.824947][T12025] lo speed is unknown, defaulting to 1000
[  454.907226][ T1776] usbhid 2-1:0.0: can't add hid device: -71
[  454.921409][ T1776] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  454.963353][ T1776] usb 2-1: USB disconnect, device number 59
[  455.855961][T12053] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  455.912686][T12053] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  456.206130][T12059] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1422'.
[  456.534499][ T1776] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[  456.648367][T12066] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  456.674524][T12066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  456.686641][ T1776] usb 2-1: too many configurations: 9, using maximum allowed: 8
[  456.690633][T12066] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  456.704473][T12068] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  456.704598][ T1776] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  456.713287][ T1776] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  456.738674][ T1776] usb 2-1: config 0 interface 0 has no altsetting 0
[  456.970660][ T1776] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  456.981470][ T1776] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  457.506948][ T1776] usb 2-1: config 0 interface 0 has no altsetting 0
[  457.519225][ T1776] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  457.529307][ T1776] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  457.541370][ T1776] usb 2-1: config 0 interface 0 has no altsetting 0
[  457.551406][ T1776] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  457.654871][ T1776] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  457.667865][ T1776] usb 2-1: config 0 interface 0 has no altsetting 0
[  457.772413][ T1776] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  457.783360][ T1776] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  457.797934][ T1776] usb 2-1: config 0 interface 0 has no altsetting 0
[  457.872590][ T1776] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  457.884889][ T1776] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  457.904023][ T1776] usb 2-1: config 0 interface 0 has no altsetting 0
[  457.914874][ T1776] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  457.939765][ T1776] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  457.954376][T12082] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1429'.
[  458.055030][ T1776] usb 2-1: config 0 interface 0 has no altsetting 0
[  458.062472][T12072] block nbd0: shutting down sockets
[  458.154566][ T1776] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  458.178672][ T1776] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  458.236269][ T1776] usb 2-1: config 0 interface 0 has no altsetting 0
[  458.261483][ T1776] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  458.286765][ T1776] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  458.326891][ T1776] usb 2-1: Product: syz
[  458.334675][ T1776] usb 2-1: Manufacturer: syz
[  458.340308][ T1776] usb 2-1: SerialNumber: syz
[  458.348604][ T1776] usb 2-1: config 0 descriptor??
[  458.369148][ T1776] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0
[  458.667491][ T1776] usb 2-1: USB disconnect, device number 60
[  458.674838][ T1776] yurex 2-1:0.0: USB YUREX #0 now disconnected
[  458.731207][T12059] lo speed is unknown, defaulting to 1000
[  458.740345][T12059] lo speed is unknown, defaulting to 1000
[  458.894155][T12096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  458.930440][T12096] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  458.962550][T12096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  458.974162][T12096] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  459.204547][   T30] kauditd_printk_skb: 14 callbacks suppressed
[  459.204563][   T30] audit: type=1326 audit(1756811263.524:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12098 comm="syz.4.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ef38ebe9 code=0x7ffc0000
[  459.330729][   T30] audit: type=1326 audit(1756811263.564:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12098 comm="syz.4.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f15ef38ebe9 code=0x7ffc0000
[  459.356857][   T30] audit: type=1326 audit(1756811263.564:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12098 comm="syz.4.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f15ef38ec23 code=0x7ffc0000
[  459.387134][   T30] audit: type=1326 audit(1756811263.564:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12098 comm="syz.4.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f15ef38ec23 code=0x7ffc0000
[  459.416990][   T30] audit: type=1326 audit(1756811263.574:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12098 comm="syz.4.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ef38ebe9 code=0x7ffc0000
[  459.448358][   T30] audit: type=1326 audit(1756811263.574:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12098 comm="syz.4.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ef38ebe9 code=0x7ffc0000
[  459.616957][   T30] audit: type=1326 audit(1756811263.574:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12098 comm="syz.4.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f15ef38ebe9 code=0x7ffc0000
[  460.182073][   T30] audit: type=1326 audit(1756811263.574:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12098 comm="syz.4.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ef38ebe9 code=0x7ffc0000
[  460.206896][   T30] audit: type=1326 audit(1756811263.574:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12098 comm="syz.4.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ef38ebe9 code=0x7ffc0000
[  460.715011][T12120] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1437'.
[  460.741303][T12120] geneve2: entered allmulticast mode
[  461.707260][T12123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  461.729438][T12119] comedi comedi0: c6xdigio: I/O port conflict (0xee,3)
[  461.745081][T12123] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  462.318849][T12130] pimreg: entered allmulticast mode
[  462.332481][T12128] pimreg: left allmulticast mode
[  462.699484][T12136] netlink: 'syz.4.1443': attribute type 3 has an invalid length.
[  462.710719][T12136] netlink: 'syz.4.1443': attribute type 1 has an invalid length.
[  462.719552][T12136] netlink: 216 bytes leftover after parsing attributes in process `syz.4.1443'.
[  462.729855][T12136] NCSI netlink: No device for ifindex 33022
[  463.296355][T12152] overlayfs: conflicting lowerdir path
[  463.504597][T11258] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[  464.026491][T11258] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  464.061260][T11258] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  464.092135][T11258] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  464.131136][T11258] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  464.153846][T11258] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  464.182051][T11258] usb 2-1: config 0 descriptor??
[  464.218830][T11258] hdpvr 2-1:0.0: Could not find bulk-in endpoint
[  464.304577][T11258] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12
[  464.368922][T12160] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1449'.
[  464.384054][T12160] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1449'.
[  464.404390][T12160] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1449'.
[  464.418780][T12150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  464.434040][T12150] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  464.477701][T12160] ==================================================================
[  464.485789][T12160] BUG: KASAN: slab-use-after-free in sysfs_remove_file_ns+0x63/0x70
[  464.493779][T12160] Read of size 8 at addr ffff88802cb32c30 by task syz.4.1449/12160
[  464.501669][T12160] 
[  464.503994][T12160] CPU: 0 UID: 0 PID: 12160 Comm: syz.4.1449 Not tainted syzkaller #0 PREEMPT(full) 
[  464.504019][T12160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  464.504033][T12160] Call Trace:
[  464.504039][T12160]  <TASK>
[  464.504047][T12160]  dump_stack_lvl+0x116/0x1f0
[  464.504072][T12160]  print_report+0xcd/0x630
[  464.504094][T12160]  ? __virt_addr_valid+0x81/0x610
[  464.504117][T12160]  ? __phys_addr+0xe8/0x180
[  464.504142][T12160]  ? sysfs_remove_file_ns+0x63/0x70
[  464.504163][T12160]  kasan_report+0xe0/0x110
[  464.504183][T12160]  ? sysfs_remove_file_ns+0x63/0x70
[  464.504205][T12160]  sysfs_remove_file_ns+0x63/0x70
[  464.504226][T12160]  driver_remove_file+0x4a/0x60
[  464.504248][T12160]  bus_remove_driver+0x224/0x2c0
[  464.504265][T12160]  driver_unregister+0x76/0xb0
[  464.504284][T12160]  comedi_device_detach_locked+0x12f/0xa50
[  464.504306][T12160]  do_devconfig_ioctl+0x555/0x710
[  464.504329][T12160]  ? __mutex_lock+0x1c5/0x1060
[  464.504350][T12160]  ? __pfx_do_devconfig_ioctl+0x10/0x10
[  464.504379][T12160]  ? find_held_lock+0x2b/0x80
[  464.504403][T12160]  comedi_unlocked_ioctl+0x165d/0x2f00
[  464.504433][T12160]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  464.504464][T12160]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  464.504485][T12160]  ? do_vfs_ioctl+0x128/0x14f0
[  464.504511][T12160]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  464.504538][T12160]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  464.504570][T12160]  ? hook_file_ioctl_common+0x145/0x410
[  464.504592][T12160]  ? selinux_file_ioctl+0x180/0x270
[  464.504623][T12160]  ? selinux_file_ioctl+0xb4/0x270
[  464.504651][T12160]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  464.504682][T12160]  __x64_sys_ioctl+0x18b/0x210
[  464.504710][T12160]  do_syscall_64+0xcd/0x4c0
[  464.504733][T12160]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  464.504752][T12160] RIP: 0033:0x7f15ef38ebe9
[  464.504766][T12160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  464.504784][T12160] RSP: 002b:00007f15f02eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  464.504802][T12160] RAX: ffffffffffffffda RBX: 00007f15ef5c5fa0 RCX: 00007f15ef38ebe9
[  464.504814][T12160] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000006
[  464.504825][T12160] RBP: 00007f15ef411e19 R08: 0000000000000000 R09: 0000000000000000
[  464.504835][T12160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  464.504846][T12160] R13: 00007f15ef5c6038 R14: 00007f15ef5c5fa0 R15: 00007ffd4f8d4808
[  464.504862][T12160]  </TASK>
[  464.504869][T12160] 
[  464.756302][T12160] Allocated by task 12120:
[  464.760693][T12160]  kasan_save_stack+0x33/0x60
[  464.765351][T12160]  kasan_save_track+0x14/0x30
[  464.770007][T12160]  __kasan_kmalloc+0xaa/0xb0
[  464.774574][T12160]  bus_add_driver+0x92/0x690
[  464.779226][T12160]  driver_register+0x15c/0x4b0
[  464.783969][T12160]  c6xdigio_attach+0xa3/0x4b0
[  464.788630][T12160]  comedi_device_attach+0x3b3/0x900
[  464.793807][T12160]  do_devconfig_ioctl+0x1b1/0x710
[  464.798814][T12160]  comedi_unlocked_ioctl+0x165d/0x2f00
[  464.804258][T12160]  __x64_sys_ioctl+0x18b/0x210
[  464.809004][T12160]  do_syscall_64+0xcd/0x4c0
[  464.813487][T12160]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  464.819357][T12160] 
[  464.821655][T12160] Freed by task 12119:
[  464.825692][T12160]  kasan_save_stack+0x33/0x60
[  464.830346][T12160]  kasan_save_track+0x14/0x30
[  464.834998][T12160]  kasan_save_free_info+0x3b/0x60
[  464.840006][T12160]  __kasan_slab_free+0x60/0x70
[  464.844747][T12160]  kfree+0x2b4/0x4d0
[  464.848627][T12160]  kobject_put+0x1e7/0x5a0
[  464.853024][T12160]  bus_remove_driver+0x16e/0x2c0
[  464.857937][T12160]  driver_unregister+0x76/0xb0
[  464.862680][T12160]  comedi_device_detach_locked+0x12f/0xa50
[  464.868465][T12160]  comedi_device_detach+0x67/0xb0
[  464.873467][T12160]  comedi_device_attach+0x43d/0x900
[  464.878645][T12160]  do_devconfig_ioctl+0x1b1/0x710
[  464.883650][T12160]  comedi_unlocked_ioctl+0x165d/0x2f00
[  464.889095][T12160]  __x64_sys_ioctl+0x18b/0x210
[  464.893842][T12160]  do_syscall_64+0xcd/0x4c0
[  464.898326][T12160]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  464.904221][T12160] 
[  464.906538][T12160] The buggy address belongs to the object at ffff88802cb32c00
[  464.906538][T12160]  which belongs to the cache kmalloc-256 of size 256
[  464.920570][T12160] The buggy address is located 48 bytes inside of
[  464.920570][T12160]  freed 256-byte region [ffff88802cb32c00, ffff88802cb32d00)
[  464.934261][T12160] 
[  464.936563][T12160] The buggy address belongs to the physical page:
[  464.942946][T12160] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802cb32000 pfn:0x2cb32
[  464.952985][T12160] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  464.961460][T12160] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff)
[  464.969940][T12160] page_type: f5(slab)
[  464.973900][T12160] raw: 00fff00000000240 ffff88801b841b40 ffffea0000b9a710 ffffea0001e7d990
[  464.982466][T12160] raw: ffff88802cb32000 000000000010000f 00000000f5000000 0000000000000000
[  464.991029][T12160] head: 00fff00000000240 ffff88801b841b40 ffffea0000b9a710 ffffea0001e7d990
[  464.999689][T12160] head: ffff88802cb32000 000000000010000f 00000000f5000000 0000000000000000
[  465.008340][T12160] head: 00fff00000000001 ffffea0000b2cc81 00000000ffffffff 00000000ffffffff
[  465.016988][T12160] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[  465.025632][T12160] page dumped because: kasan: bad access detected
[  465.032020][T12160] page_owner tracks the page as allocated
[  465.037707][T12160] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5844, tgid 5844 (syz-executor), ts 63648327865, free_ts 63479366124
[  465.059043][T12160]  post_alloc_hook+0x1c0/0x230
[  465.063796][T12160]  get_page_from_freelist+0x132b/0x38e0
[  465.069330][T12160]  __alloc_frozen_pages_noprof+0x261/0x23f0
[  465.075200][T12160]  alloc_pages_mpol+0x1fb/0x550
[  465.080029][T12160]  new_slab+0x247/0x330
[  465.084169][T12160]  ___slab_alloc+0xcf2/0x1740
[  465.088829][T12160]  __slab_alloc.constprop.0+0x56/0xb0
[  465.094184][T12160]  __kmalloc_cache_noprof+0xfb/0x3e0
[  465.099454][T12160]  ____ip_mc_inc_group+0x403/0x10f0
[  465.104632][T12160]  ip_mc_up+0x154/0x3b0
[  465.108768][T12160]  inetdev_event+0xafb/0x18a0
[  465.113426][T12160]  notifier_call_chain+0xbc/0x410
[  465.118449][T12160]  call_netdevice_notifiers_info+0xbe/0x140
[  465.124327][T12160]  __dev_notify_flags+0x12c/0x2e0
[  465.129329][T12160]  netif_change_flags+0x108/0x160
[  465.134333][T12160]  do_setlink.constprop.0+0xb53/0x4380
[  465.139770][T12160] page last free pid 5845 tgid 5845 stack trace:
[  465.146070][T12160]  __free_frozen_pages+0x7d5/0x10f0
[  465.151266][T12160]  qlist_free_all+0x4d/0x120
[  465.155833][T12160]  kasan_quarantine_reduce+0x195/0x1e0
[  465.161283][T12160]  __kasan_slab_alloc+0x69/0x90
[  465.166124][T12160]  kmem_cache_alloc_node_noprof+0x1d5/0x3b0
[  465.171994][T12160]  __alloc_skb+0x2b2/0x380
[  465.176389][T12160]  inet_netconf_notify_devconf+0x8b/0x1f0
[  465.182091][T12160]  inetdev_event+0x1602/0x18a0
[  465.186835][T12160]  notifier_call_chain+0xbc/0x410
[  465.191843][T12160]  call_netdevice_notifiers_info+0xbe/0x140
[  465.197717][T12160]  netif_change_name+0x557/0x920
[  465.202631][T12160]  do_setlink.constprop.0+0x3362/0x4380
[  465.208155][T12160]  rtnl_newlink+0x1446/0x2000
[  465.212810][T12160]  rtnetlink_rcv_msg+0x95e/0xe90
[  465.217731][T12160]  netlink_rcv_skb+0x155/0x420
[  465.222485][T12160]  netlink_unicast+0x5aa/0x870
[  465.227232][T12160] 
[  465.229531][T12160] Memory state around the buggy address:
[  465.235135][T12160]  ffff88802cb32b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  465.243171][T12160]  ffff88802cb32b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  465.251208][T12160] >ffff88802cb32c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  465.259256][T12160]                                      ^
[  465.264867][T12160]  ffff88802cb32c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  465.272909][T12160]  ffff88802cb32d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  465.280945][T12160] ==================================================================
[  465.304999][T12160] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  465.312230][T12160] CPU: 0 UID: 0 PID: 12160 Comm: syz.4.1449 Not tainted syzkaller #0 PREEMPT(full) 
[  465.321624][T12160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  465.331683][T12160] Call Trace:
[  465.334964][T12160]  <TASK>
[  465.337892][T12160]  dump_stack_lvl+0x3d/0x1f0
[  465.342489][T12160]  vpanic+0x6e8/0x7a0
[  465.346478][T12160]  ? __pfx_vpanic+0x10/0x10
[  465.350986][T12160]  ? __pfx_vprintk_emit+0x10/0x10
[  465.356028][T12160]  ? sysfs_remove_file_ns+0x63/0x70
[  465.361234][T12160]  panic+0xca/0xd0
[  465.364968][T12160]  ? __pfx_panic+0x10/0x10
[  465.369392][T12160]  ? sysfs_remove_file_ns+0x63/0x70
[  465.374593][T12160]  ? preempt_schedule_common+0x44/0xc0
[  465.380051][T12160]  ? preempt_schedule_thunk+0x16/0x30
[  465.385436][T12160]  check_panic_on_warn+0xab/0xb0
[  465.390380][T12160]  end_report+0x107/0x170
[  465.394720][T12160]  kasan_report+0xee/0x110
[  465.399146][T12160]  ? sysfs_remove_file_ns+0x63/0x70
[  465.404357][T12160]  sysfs_remove_file_ns+0x63/0x70
[  465.409391][T12160]  driver_remove_file+0x4a/0x60
[  465.414245][T12160]  bus_remove_driver+0x224/0x2c0
[  465.419184][T12160]  driver_unregister+0x76/0xb0
[  465.423958][T12160]  comedi_device_detach_locked+0x12f/0xa50
[  465.429776][T12160]  do_devconfig_ioctl+0x555/0x710
[  465.434823][T12160]  ? __mutex_lock+0x1c5/0x1060
[  465.439598][T12160]  ? __pfx_do_devconfig_ioctl+0x10/0x10
[  465.445165][T12160]  ? find_held_lock+0x2b/0x80
[  465.449858][T12160]  comedi_unlocked_ioctl+0x165d/0x2f00
[  465.455337][T12160]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  465.461164][T12160]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  465.467062][T12160]  ? do_vfs_ioctl+0x128/0x14f0
[  465.471831][T12160]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  465.476851][T12160]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  465.483690][T12160]  ? hook_file_ioctl_common+0x145/0x410
[  465.489226][T12160]  ? selinux_file_ioctl+0x180/0x270
[  465.494424][T12160]  ? selinux_file_ioctl+0xb4/0x270
[  465.499530][T12160]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  465.505350][T12160]  __x64_sys_ioctl+0x18b/0x210
[  465.510111][T12160]  do_syscall_64+0xcd/0x4c0
[  465.514603][T12160]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  465.520481][T12160] RIP: 0033:0x7f15ef38ebe9
[  465.524875][T12160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  465.544461][T12160] RSP: 002b:00007f15f02eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  465.552868][T12160] RAX: ffffffffffffffda RBX: 00007f15ef5c5fa0 RCX: 00007f15ef38ebe9
[  465.560820][T12160] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000006
[  465.568770][T12160] RBP: 00007f15ef411e19 R08: 0000000000000000 R09: 0000000000000000
[  465.576720][T12160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  465.584669][T12160] R13: 00007f15ef5c6038 R14: 00007f15ef5c5fa0 R15: 00007ffd4f8d4808
[  465.592630][T12160]  </TASK>
[  465.595855][T12160] Kernel Offset: disabled
[  465.600150][T12160] Rebooting in 86400 seconds..