last executing test programs:

13.086672654s ago: executing program 4 (id=1966):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x40, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3e}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001300}}], 0x62, 0x0)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000380)={0x3, 0x1, 0x1, "eee98fa70652f35ed734fc70157d0a4f1891e200", 0x30314442})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x17, 0x0, @ioapic={0x0, 0xb5, 0x3, 0xeffffdff, 0x0, [{0x0, 0x80}, {0x19, 0x5, 0x0, '\x00', 0x10}, {0xfc, 0x4}, {0xfe, 0x90, 0x3, '\x00', 0x2}, {0x8, 0x0, 0x5, '\x00', 0x9}, {0x0, 0x60}, {0x0, 0x85, 0xbe}, {0x0, 0x6}, {0x0, 0xff, 0x0, '\x00', 0xff}, {0x8, 0x4, 0xfe, '\x00', 0x42}, {0x0, 0x2}, {0x0, 0x50}, {0x2, 0x0, 0x4, '\x00', 0x3}, {0x1, 0x4e}, {0x2, 0x2, 0x4, '\x00', 0xfe}, {0x0, 0x5}, {0x1, 0x0, 0x4, '\x00', 0x4}, {0x0, 0x0, 0x0, '\x00', 0xdd}, {0x1, 0x3, 0x7, '\x00', 0x3}, {0x80, 0x0, 0xe, '\x00', 0x5}, {0x5, 0xe5}, {0x0, 0x40, 0x0, '\x00', 0x70}, {0x1, 0x0, 0xfe, '\x00', 0xe}, {0x10, 0x83, 0xe}]}})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="05000d"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800)

11.369572369s ago: executing program 2 (id=1971):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f0000002540)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x10)
r3 = socket(0x2b, 0x80801, 0x1)
connect$inet(r3, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x2}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000280)={0x0, 0x224e, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000)
shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x5000)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1b00000000000000df0000000000ffff00000000", @ANYRES32=0x0, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
socket$l2tp(0x2, 0x2, 0x73)
getpgrp(0xffffffffffffffff)

9.096003714s ago: executing program 2 (id=1972):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r1, 0x400455c8, 0x0)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCBRDELBR(r3, 0x89a2, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000000200)={@remote, @local, @val={@val={0x88a8, 0x2, 0x1, 0x4}, {0x8100, 0x0, 0x1, 0x1}}, {@canfd={0xd, {{0x3, 0x0, 0x0, 0x1}, 0x21, 0x1, 0x0, 0x0, "ea6ffbc7620f0956ef7b98948ed8f7a854278eed06d84f20bb5105d0ead0e756247485acad71c1deadfd3f9b71658b13306f328523de43915bb963d6f863a37c"}}}}, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0, 0xa2)
r4 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x89101)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r5, 0x0, r4, 0x0, 0x301)
close(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0)
ftruncate(r6, 0x2007ffb)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0)
sendfile(r7, r6, 0x0, 0x7ffff000)
open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f)
bind$qrtr(r2, &(0x7f0000000180)={0x2a, 0x1, 0xfffffffe}, 0xc)

8.861114277s ago: executing program 4 (id=1973):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10)
r5 = socket$netlink(0x10, 0x3, 0xa)
r6 = dup(r5)
r7 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c)
sendfile(r6, r7, 0x0, 0x80001d00c0d1)
creat(&(0x7f0000000240)='./file1\x00', 0x100)
read$FUSE(r0, &(0x7f0000004b80)={0x2020}, 0x2020)

7.449375629s ago: executing program 4 (id=1976):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0)={0xd8b9}) (async)
r3 = syz_open_dev$sndctrl(&(0x7f0000000380), 0x1ff, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r4=>0x0}) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) (async)
r6 = getpid()
sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) (async)
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x3a) (async)
sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) (async)
sched_setaffinity(r6, 0x3f, &(0x7f0000000240)=0x2)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYRES32=r3], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x40000000}, 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='ext4_ext_rm_leaf\x00', r9}, 0x18) (async)
syz_genetlink_get_family_id$wireguard(0x0, r5)
sendmsg$WG_CMD_SET_DEVICE(r5, 0x0, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) (async)
r10 = socket$inet(0x2, 0x1, 0x0) (async)
syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000004700))
setsockopt$inet_mreqn(r10, 0x0, 0x24, &(0x7f0000000000)={@private=0xa010100, @empty}, 0xc) (async)
setsockopt$inet_mreqn(r10, 0x0, 0x20, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, r4}, 0xc)

6.603422336s ago: executing program 4 (id=1977):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
pipe2$9p(&(0x7f0000001900), 0x0)
socket(0x10, 0x3, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000002c0)={0x0, 0x11, 0x2f, {0x2f, 0x23, "ff7dbd0b342790b332d8c143e8b52873d5c7f9fcd26fce9651dc18e8c5389e527f8c6b82705d1d35606f2230b0"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="3504000040000511d25a35400c0002000200002037153e371d040180c70b1028bc3f3ac1b406ffffffffffffff7f560000e7ff00000000", 0x37}, {&(0x7f0000000a40)="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"/1022, 0x3fe}], 0x2}, 0x10049014)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8)
r4 = gettid()
r5 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x2, @multicast, 'ip6gretap0\x00'}}, 0x1e)
r6 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0xb8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x88, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x2c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xff}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xa02f}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x80}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}]}]}]}}]}, 0xb8}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r9 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xccb, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xa, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x1, 0x7f}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r9, 0x0, 0x0)
syz_usb_control_io(r9, &(0x7f0000000740)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="4002030000008cfc51c8fec40e0b62cc030100"], 0x0, 0x0, 0x0, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r4}, &(0x7f0000000080))
read$FUSE(r3, &(0x7f00000008c0)={0x2020}, 0xfffffef0)
timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000)

6.474504476s ago: executing program 3 (id=1978):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='pmap_register\x00', r1, 0x0, 0x3}, 0x18)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom1\x00', 0x0, 0x0)
gettid()
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="6a0e64", 0x3)
getresuid(&(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700))
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000580)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x2000003e, [0x9, 0x2, 0x6, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x200006, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xffffdb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x7, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x4, 0xba55, 0x8da8, 0x2, 0x1fd, 0x3959, 0x8, 0xe, 0x3, 0x2, 0xde, 0x8, 0x9, 0x1, 0x1, 0x80000001, 0x4, 0x200, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x1], [0x6, 0x1e, 0x0, 0x8000, 0xaf5, 0x400003, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x4, 0x72c, 0xc32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x8, 0x5, 0x0, 0x981, 0x4, 0x100, 0x401, 0x2, 0xfffffffe, 0x0, 0x1000001, 0x10, 0x1, 0x0, 0x5, 0x4, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x2388dc53, 0xfffffff9, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x8, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x89, 0x3], [0x401, 0xc584, 0xffff, 0xcd3, 0x7, 0x20, 0x7, 0x1004, 0x7, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x7, 0xffffffff, 0x1000, 0x2, 0x10, 0xfffffffd, 0xfffffff9, 0xe55, 0x10, 0x80000401, 0x4, 0x4, 0x5, 0x9, 0x2, 0x5, 0x80, 0xb, 0x28e3, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x1008001, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x6, 0x7, 0x4, 0xea, 0x2, 0x5, 0x6, 0xd9, 0x0, 0x8, 0x401, 0x40005], [0x108e, 0x100, 0x3, 0x3, 0x88, 0x2, 0x6, 0x3, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x4, 0x1000, 0x7f, 0x25, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x1004, 0xe47, 0x3, 0x3, 0x4, 0x103, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x2, 0xfffffff8, 0x3, 0x9, 0x200, 0x7, 0x4ee1, 0x7f, 0x7, 0xe, 0x4, 0xe, 0x2000b, 0x133, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r3, 0x5501)
getgroups(0x2, &(0x7f0000000740)=[0x0, 0x0])
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_int(r4, &(0x7f00000000c0)='cpu.idle\x00', 0x2, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001b40), 0x18001, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001b80))
lstat(&(0x7f0000001bc0)='./file0\x00', &(0x7f0000001c00))
fstat(0xffffffffffffffff, &(0x7f0000000340))
openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000002180), 0x1, 0x0)
socket(0x1d, 0x2, 0x6)
socket$inet(0x2, 0x1, 0x100)
socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=@newtaction={0x9b4, 0x30, 0x1, 0x0, 0x0, {}, [{0x9a0, 0x1, [@m_police={0x99c, 0x12, 0x0, 0x0, {{0xb}, {0x8e4, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0xea12}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffff7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}], [@TCA_POLICE_RATE64={0xc, 0x8, 0xf}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffff9}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x5, 0x4, 0x0, 0x3, {0x0, 0x0, 0x0, 0x7fff, 0x154, 0x40}, {0x7, 0x0, 0xfff7, 0x4, 0x7, 0x1}, 0x7, 0x7f4, 0x9}}, @TCA_POLICE_RATE={0x404, 0x2, [0x982c, 0xb2b, 0x11, 0x1, 0x80000000, 0x0, 0x3, 0x2, 0x9, 0x6, 0x5, 0x5, 0xd3f0, 0x7, 0x1, 0x7f, 0xae17, 0xfd, 0x402, 0x8, 0x0, 0x7, 0x5, 0x0, 0x2, 0x9, 0x8000, 0xffff1b2a, 0x7, 0x1, 0x4, 0xfe61, 0x5, 0x7ad, 0x9, 0x8, 0x0, 0x1, 0x8, 0x0, 0xf4, 0x80000001, 0x432, 0x1000, 0x4ad, 0x8, 0x6, 0x0, 0x8, 0x80, 0x2, 0x8, 0xadf, 0x4, 0x54c9, 0x800, 0x0, 0xffff, 0x37e6, 0x8, 0x3, 0x942, 0xbc5, 0x4, 0x101, 0x476, 0x991, 0x1, 0x7, 0x7, 0x10001, 0x7f, 0x3, 0x10000, 0x7186, 0xfff, 0x8, 0x2, 0x2, 0x6, 0x3cc, 0x4, 0x8, 0x40, 0x6, 0x9, 0x4, 0x1, 0x6, 0xc, 0x1ff, 0x4, 0xffffffc0, 0x9, 0x10000, 0x4, 0x101, 0x698, 0x8, 0xa, 0x1, 0x27d8, 0x3, 0xfffffe01, 0xf, 0x8, 0x1, 0x7, 0x7fffffff, 0xbc85, 0x2, 0x81, 0x7, 0x401, 0x2, 0x6, 0x7, 0xd21, 0x10000000, 0x0, 0x200, 0x3, 0x81, 0x3, 0x0, 0x4, 0x4, 0x4, 0x1, 0x9e, 0x4, 0xffffffff, 0x8, 0x81cf, 0x7, 0x9, 0x7, 0x3, 0x1, 0x3, 0x9, 0xe, 0xfffffe00, 0x1ff, 0x7, 0x7, 0xfffffff7, 0x4, 0x8, 0x4, 0x9, 0xe, 0x400, 0x10000, 0x5, 0x2, 0x3f5f, 0x1, 0x0, 0x4, 0x3, 0x20000, 0x1fb, 0x4, 0x5, 0x5, 0xc457, 0x1000, 0x401, 0x2, 0x7, 0x80000000, 0x7, 0xffffffff, 0x9, 0x3, 0x7fff, 0x7fa3b858, 0xd, 0x100, 0x7, 0xf2c, 0xc, 0x8, 0x9, 0x8, 0x6, 0x34485e4a, 0x8001, 0x8, 0x4, 0x4, 0xff, 0x3, 0x7fffffff, 0x1, 0xe, 0x1, 0x86, 0x7fff, 0x52b5da41, 0x800, 0x9, 0xf, 0xd, 0x5, 0x6, 0x6, 0xffffffff, 0x7, 0x3, 0x5, 0x4, 0x0, 0xffff1525, 0x6, 0x8001, 0xafe9, 0x0, 0x3, 0x5, 0x5, 0x5, 0xfff, 0x7a1f1ebd, 0x5, 0x7, 0x2, 0x81, 0xffff, 0x8, 0x7, 0x4, 0x8, 0x5, 0x7, 0x800, 0xb, 0x15, 0xfffffff5, 0x8a27, 0x6, 0x3, 0x5, 0xa5, 0x5, 0x7, 0x8001, 0x10000, 0x154, 0xff, 0xf, 0xfffffffb, 0x63, 0x9, 0x40]}, @TCA_POLICE_PEAKRATE64={0xc}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x20000, 0x1, 0x800, 0x8, 0x5, 0x7, 0x40, 0x4, 0x9, 0x8, 0x0, 0x7ff, 0x8, 0xfff, 0x9, 0xffffff47, 0x5, 0x10, 0xc, 0x3, 0x0, 0x6184, 0xc8db, 0x1, 0xfffe, 0x7, 0x5, 0x1, 0x2, 0xfffffff9, 0x7, 0x3be5d486, 0x4, 0x6a9, 0x1000, 0x6, 0xe36, 0xfffffff7, 0x2, 0x7, 0x6, 0x4cc9, 0x5, 0x40, 0x8, 0x9, 0xe238, 0xf55, 0x2, 0x800, 0x0, 0x9, 0x7b3, 0x2, 0x4, 0x7, 0xff, 0x7f, 0x2, 0x7fffffff, 0x5, 0xffff, 0x2, 0x0, 0x79c, 0x6, 0x5, 0x5, 0xd5, 0x2, 0x2, 0x8, 0xffffffff, 0x722, 0x0, 0xffffff81, 0xd, 0x1, 0x80, 0x8, 0xffffffff, 0xb635, 0xc7, 0x800, 0x1, 0x9, 0x3, 0x9, 0x200, 0xdc000000, 0x7f, 0x1, 0x80000000, 0xe, 0x2, 0x6, 0x9d56, 0x4684, 0x8, 0x9, 0x2, 0x7, 0x7, 0x4, 0xfe, 0xff, 0x0, 0x8, 0x3, 0x7, 0x0, 0x5, 0x6, 0xfffffffe, 0x73b48a3b, 0x7, 0x1, 0x800, 0x1, 0x5, 0x9, 0x7, 0x0, 0x9, 0x5, 0x2, 0x0, 0x800, 0x6, 0xd05, 0x6, 0x0, 0xff, 0x8, 0xffffffff, 0x7ff, 0x200, 0x7, 0xfffffff8, 0x5, 0x200, 0xc334, 0x10000, 0xf61, 0x5, 0x74a, 0x3, 0xe6b, 0x9, 0x8, 0xaaee, 0x7, 0x3, 0x4, 0x8, 0x2, 0x3ff, 0x705, 0x1000, 0x401, 0x6, 0x0, 0xc, 0x0, 0x7fffffff, 0x698, 0x6, 0x9, 0xfffffff8, 0x9, 0x3, 0x2, 0x5, 0x0, 0x1, 0x4, 0x742, 0xdfb7, 0x6, 0xc, 0x7, 0x8000, 0x0, 0x5, 0x9, 0x3, 0x5, 0x3, 0x1, 0x6, 0x6, 0x4242c6fc, 0x8, 0x5, 0x800, 0x101, 0x1, 0xfffffff8, 0x6830, 0x2, 0x4, 0x7d6d, 0x200, 0x5, 0x7, 0x49, 0x4, 0x6, 0x0, 0x1, 0xfffffffb, 0x2, 0x8, 0xfce3, 0x6, 0x8, 0xfffffed6, 0x2, 0x3, 0x10, 0x4, 0xc6, 0x2, 0x40, 0x7f, 0x0, 0x2000000, 0xfffffff7, 0x3ff, 0x1000, 0xff, 0x96, 0x10001, 0x3, 0x5, 0x7f, 0x1, 0x9, 0xc0000000, 0x0, 0x1000000, 0x2c9e3564, 0x383, 0x1, 0x66, 0x7f, 0xa8, 0x1000, 0xd, 0x40, 0x3, 0x8, 0xffffffff, 0x2, 0x1, 0xb]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x8, 0x1, 0x6, 0x100, {0x3, 0x1, 0x5, 0x6, 0x75c4, 0x8}, {0x81, 0x2, 0x2, 0x5, 0x7, 0x5}, 0xcca, 0x101, 0xe}}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffffd}]]}, {0x8f, 0x6, "beb6588d99d07828a16dd3325c29c6025126fc3dbf277144ca14a77c304c89c7da65c5b9fe43e31478a34b99a6fb4f0df368f60cece26227337e000f73347615317b85f69f6b7ca3869fabbf3009e822bdb18638e5141175eefc87b53762c98348d0de6df9627e0022a90e696b199c1889e5d514e6d4c87fd2a359f096f7cf618584ea34b22570e2d06bdd"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x9b4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()

6.258813183s ago: executing program 2 (id=1979):
getpid()
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
lseek(r1, 0x1000000, 0x0)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)

5.741617865s ago: executing program 0 (id=1981):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r1=>0x0})
socket(0x10, 0x2, 0x0) (async)
r2 = socket(0x10, 0x2, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0xa0a0)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) (async)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)={<r4=>0x0})
ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, &(0x7f00000000c0)={r4, 0x2})
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0)

5.715690061s ago: executing program 3 (id=1982):
socket$key(0xf, 0x3, 0x2)
syz_open_dev$tty20(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="0000008ea09e5d37277f42d561ae30de9503f90000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800a0014000180c20000030000"], 0x40}}, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
shmget$private(0x0, 0x400000, 0x40, &(0x7f000000e000/0x400000)=nil)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
read$FUSE(r2, &(0x7f00000041c0)={0x2020}, 0x2020)
connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e)
sendmmsg(0xffffffffffffffff, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084)

5.6094587s ago: executing program 0 (id=1984):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0)
write$tcp_mem(r3, &(0x7f0000000280)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6b, 0x6b, 0x8, [@datasec={0xc, 0x2, 0x0, 0xf, 0x2, [{0x4, 0x0, 0x61}, {0x1, 0x3ff, 0x2}], "dc13"}, @int={0x10, 0x0, 0x0, 0x1, 0x0, 0x6c, 0x0, 0x3, 0x2}, @decl_tag={0x6, 0x0, 0x0, 0x11, 0x4, 0x5}, @datasec={0x1, 0x1, 0x0, 0xf, 0x1, [{0x2, 0x496, 0x9}], "d9"}, @restrict={0x9, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x30, 0x61, 0x2e, 0x0, 0x0, 0x30]}}, &(0x7f0000000400)=""/187, 0x8c, 0xbb, 0x1, 0x8}, 0x28)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
prlimit64(0x0, 0x7, 0x0, 0x0)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}, &(0x7f0000000180)=0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xe8}}, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r5, 0x0, 0xd}, 0x18)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r8=>0x0})
sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x1c, r7, 0x711, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreq(r9, 0x0, 0x20, &(0x7f0000000080)={@multicast1, @private=0xa010100}, 0x8)
r10 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@deltaction={0x14, 0x31, 0x400, 0x70bd2a, 0x25dfdbff}, 0x3e}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x84, 0x0, 0x1, 0x9e2215e2bc107248, 0x0, 0x0, {0x3}, [@CTA_SEQ_ADJ_REPLY={0x34, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x26f54139}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_LABELS_MASK={0x2c, 0x17, [0x16c6, 0x7, 0x4, 0x3, 0x8, 0x7f61c56d, 0x8, 0x8, 0x5, 0xa]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

5.090632328s ago: executing program 3 (id=1985):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
socket$inet_smc(0x2b, 0x1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x84)
close(r0)
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00')
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xb704, 0x0)
fcntl$notify(r4, 0x402, 0x22)

4.297503226s ago: executing program 1 (id=1986):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x28080, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0)
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
socket(0x2b, 0x80801, 0x1)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x106}}, 0x20)

4.282686526s ago: executing program 0 (id=1987):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x561280, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fchdir(0xffffffffffffffff)
mkdir(&(0x7f0000000000)='./control\x00', 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a010300000000000000000100000014000480080002400000000008000140000000050900030073797a30000000000900010073797a310000000008000b4000000003640008800c00"], 0x92fc}}, 0x0)
syz_emit_ethernet(0xc2, &(0x7f0000001440)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb4, 0x0, 0x0, 0xfe, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x9, @local, @rand_addr=0x640100fe, {[@timestamp_addr={0x44, 0x0, 0x39, 0x1, 0xc, [{@dev={0xac, 0x14, 0x14, 0x14}, 0xfffff49c}, {@empty, 0x7}]}, @cipso={0x86, 0x6, 0x20}]}}, "10000000"}}}}}, 0x0)

3.961668716s ago: executing program 3 (id=1988):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = fanotify_init(0x200, 0x0)
r2 = dup(r0)
fanotify_mark(r1, 0x1, 0x48001059, r2, 0x0)
r3 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0})
io_uring_enter(r3, 0x7a98, 0xfff5, 0x0, 0x0, 0x0)

3.092921739s ago: executing program 3 (id=1989):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x44, 0x1500000000000000, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

2.993347515s ago: executing program 0 (id=1990):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, 0x0, &(0x7f0000001f80), 0xfffffffb}, 0x38)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000ffffffff180800002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000400008500000010000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc)

2.713767214s ago: executing program 1 (id=1991):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
listen(0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
lseek(r1, 0x1000000, 0x0)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)

2.456876289s ago: executing program 3 (id=1992):
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
openat$vimc0(0xffffffffffffff9c, &(0x7f00000020c0), 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
read$FUSE(r3, &(0x7f0000000080)={0x2020}, 0x2020)
sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x348040, 0x0)
keyctl$revoke(0x3, 0x0)

2.280330303s ago: executing program 1 (id=1993):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x890d, 0x0)
r2 = dup(r0)
write$UHID_INPUT(r2, &(0x7f0000001040)={0xd, {"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", 0x1000}}, 0x1006)
ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000000)={0x2, 0x9, 0x0, 0xe336, 0xaf})

1.976685848s ago: executing program 1 (id=1994):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000001400), &(0x7f0000001440)=0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvtap0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@ipv6_deladdrlabel={0x70, 0x49, 0x710, 0x70bd25, 0x25dfdbff, {0xa, 0x0, 0x18, 0x0, r2, 0x3ff}, [@IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_ADDRESS={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IFAL_ADDRESS={0x14, 0x1, @local}, @IFAL_LABEL={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000001}, 0x48094)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000780)='/proc/keys\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f0000001f80)={0x2020}, 0x2020)
ioctl$KVM_CAP_PMU_CAPABILITY(r4, 0x4068aea3, &(0x7f0000000140)={0xd4, 0x0, 0x5})
connect$unix(r3, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e)

1.796329592s ago: executing program 2 (id=1995):
socket$key(0xf, 0x3, 0x2)
syz_open_dev$tty20(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="0000008ea09e5d37277f42d561ae30de9503f90000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800a0014000180c20000030000"], 0x40}}, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
shmget$private(0x0, 0x400000, 0x40, &(0x7f000000e000/0x400000)=nil)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
read$FUSE(r2, &(0x7f00000041c0)={0x2020}, 0x2020)
connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e)
sendmmsg(0xffffffffffffffff, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084)

1.745555727s ago: executing program 1 (id=1996):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r1)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000824000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000200)=0x40)
connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c)
shutdown(r1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', <r2=>0x0})
setsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000000100)={@loopback, r2}, 0x14)
r3 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000340)={<r5=>r4})
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000200)={r3})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09", 0x18}], 0x1}, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0xfffffffd}, 0x67)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e3, &(0x7f0000000180)={r5, r3})
mount(&(0x7f0000000040)=@filename='\x00', &(0x7f00000000c0)='.\x00', &(0x7f0000000040)='ubifs\x00', 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef50d"], 0xf8)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r8 = syz_open_procfs(0x0, &(0x7f0000000240)='net/unix\x00')
read$FUSE(r8, &(0x7f0000002240)={0x2020}, 0xfffffffffffffe59)

1.163314393s ago: executing program 4 (id=1997):
socket$key(0xf, 0x3, 0x2)
syz_open_dev$tty20(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
read$FUSE(0xffffffffffffffff, &(0x7f00000041c0)={0x2020}, 0x2020)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e)
sendmmsg(r1, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084)

1.161512178s ago: executing program 2 (id=1998):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508)
syz_emit_ethernet(0xf87, &(0x7f0000001180)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd606410a60f510040fc020000000000000000000000000001fe8000000000000000000000000000aa8400000000000000223427d5c9a46b9fa14172170a"], 0x0)

1.048138645s ago: executing program 0 (id=1999):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x800, 0x0, <r1=>0xffffffffffffffff})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000200)={0x6, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})

765.706725ms ago: executing program 0 (id=2000):
keyctl$instantiate(0xc, 0x0, 0x0, 0x2d, 0xfffffffffffffff9)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r4, 0x5, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc}, {0x3}}]}, 0x54}}, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x1)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r5}, 0x18)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100002e0001b7b70000000000000001"], 0x114}], 0x1}, 0x0)
recvmmsg(r6, &(0x7f0000006b40)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40000000, 0x0)
r7 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r7, 0x5412, 0x0)

694.334678ms ago: executing program 1 (id=2001):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000000800000008"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70200000000000084000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b7000000000000009500"/96], &(0x7f0000000600)='syzkaller\x00'}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, &(0x7f00000000c0), 0x10)
sendmsg$can_bcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="04"], 0x48}}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r4}, 0x10)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000080), 0x87000, &(0x7f00000005c0)={[{@verity_on}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r6 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r6, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x400000000001, 0x180, 0x20ff, 0x6, 0x89, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x1}}, {0x0, 0x13}}}, 0xa0)
sendfile(r6, r6, &(0x7f0000000080), 0x7f03)
connect$rose(r2, &(0x7f00000000c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @null]}, 0x40)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r1}, 0x10)
r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r7}, 0x8)
close(r8)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup/syz0\x00', 0x200002, 0x0)

641.313662ms ago: executing program 2 (id=2002):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000900, 0x0, &(0x7f00000000c0)={0xe, 0x0, 0x80000000, 0x3, 0x7fffffff, 0x6, 0x0, 0x6, 0x5})
symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00')
chmod(&(0x7f0000000340)='./file0\x00', 0x2)
lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0)
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x8, 0xe, &(0x7f0000000880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x541b, &(0x7f0000000040)={'veth1_to_team\x00', @link_local})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f0000003cc0)=[{{&(0x7f0000000440)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000000500)=[{&(0x7f00000004c0)}], 0x1, &(0x7f0000000540)=""/2, 0x2}, 0x8}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000580)}, {&(0x7f00000006c0)=""/223, 0xdf}], 0x2}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000007c0)=""/226, 0xe2}, {&(0x7f0000000600)=""/18, 0x12}, {&(0x7f00000008c0)=""/139, 0x8b}, {&(0x7f0000000980)=""/100, 0x64}, {&(0x7f0000000a00)=""/135, 0x87}], 0x5, &(0x7f0000000b40)=""/71, 0x47}, 0xfffffffe}, {{&(0x7f0000000bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000c40)=""/34, 0x22}, {&(0x7f0000000c80)=""/19, 0x13}, {&(0x7f0000000cc0)=""/182, 0xb6}], 0x3, &(0x7f0000000dc0)=""/2, 0x2}, 0x5}, {{&(0x7f0000000e00)=@ax25={{0x3, @default}, [@default, @bcast, @rose, @null, @netrom, @netrom, @default, @rose]}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000e80)=""/124, 0x7c}, {&(0x7f0000000f00)=""/254, 0xfe}, {&(0x7f0000001000)=""/129, 0x81}, {&(0x7f00000010c0)=""/33, 0x21}, {&(0x7f0000001100)=""/181, 0xb5}], 0x5, &(0x7f0000001240)=""/52, 0x34}, 0x7}, {{&(0x7f0000001280)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000001380)=[{&(0x7f0000001300)=""/91, 0x5b}], 0x1}, 0x4a3}, {{&(0x7f00000013c0)=@pppol2tp, 0x80, &(0x7f0000003a40)=[{&(0x7f0000001440)=""/159, 0x9f}, {&(0x7f0000001500)=""/39, 0x27}, {&(0x7f0000001540)=""/92, 0x5c}, {&(0x7f00000015c0)=""/140, 0x8c}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/237, 0xed}, {&(0x7f0000003780)=""/194, 0xc2}, {&(0x7f0000003880)=""/226, 0xe2}, {&(0x7f0000003980)=""/190, 0xbe}], 0xa}, 0x4}, {{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000003b00)=""/186, 0xba}], 0x1, &(0x7f0000003c00)=""/149, 0x95}, 0x6f46}], 0x8, 0x40000021, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x979, 0x200, 0x1}, &(0x7f00000003c0)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1})
listen(r4, 0x5)
io_uring_enter(r5, 0x3517, 0xc2de, 0x9, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='signal_generate\x00', r1}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006280)="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", 0x2000, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)

0s ago: executing program 4 (id=2003):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
close(0xffffffffffffffff)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4055}}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000000000000000000000001d3a850000001700000085"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000000906010200000000000000000500ffff0c00078008000940000000050900020073797a31000000000500010007"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)
syz_io_uring_setup(0x6b60, &(0x7f0000000040)={0x0, 0xf721, 0x20000, 0xffffffff, 0xa8}, &(0x7f0000000280), &(0x7f0000ffe000))
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r3, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x4, 0xfe, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe)
shutdown(r3, 0x1)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x10c}}, 0x0)
recvmmsg(r3, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0)
prctl$PR_GET_TSC(0x43, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newsa={0x170, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in=@broadcast, 0xffff, 0x4000, 0x0, 0x8001, 0x0, 0x20}, {@in=@dev, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {0x323}, {}, {}, 0x70bd2c, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'pcbc(fcrypt)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e1e, 0x0, @in6=@private2}}, @encap={0x1c, 0x4, {0x2, 0x4e21}}]}, 0x170}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan0\x00'})

kernel console output (not intermixed with test programs):

0: Device attached
[  555.306606][T11128] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(10)
[  555.313259][T11128] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  555.339615][T11128] vhci_hcd vhci_hcd.0: Device attached
[  555.362852][T11128] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(14)
[  555.369495][T11128] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  555.386660][T11128] vhci_hcd vhci_hcd.0: Device attached
[  555.394614][T11128] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  555.397319][ T5859] usb 39-1: new low-speed USB device number 3 using vhci_hcd
[  555.431091][T11145] vhci_hcd: connection closed
[  555.432277][T11139] vhci_hcd: connection closed
[  555.433829][ T4520] vhci_hcd: stop threads
[  555.437395][T11131] vhci_hcd: connection closed
[  555.446241][T11135] vhci_hcd: connection closed
[  555.452412][T11129] vhci_hcd: connection reset by peer
[  555.465297][ T4520] vhci_hcd: release socket
[  555.470726][ T4520] vhci_hcd: disconnect device
[  555.476198][ T4520] vhci_hcd: stop threads
[  555.480972][ T4520] vhci_hcd: release socket
[  555.485503][ T4520] vhci_hcd: disconnect device
[  555.493521][ T5927] usb 5-1: USB disconnect, device number 51
[  555.502966][ T4520] vhci_hcd: stop threads
[  555.514312][ T4520] vhci_hcd: release socket
[  555.528812][ T4520] vhci_hcd: disconnect device
[  555.534309][ T4520] vhci_hcd: stop threads
[  555.538698][ T4520] vhci_hcd: release socket
[  555.543241][ T4520] vhci_hcd: disconnect device
[  555.548215][ T4520] vhci_hcd: stop threads
[  555.553243][ T4520] vhci_hcd: release socket
[  555.558521][ T4520] vhci_hcd: disconnect device
[  555.747426][T11154] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1395'.
[  557.220277][T11175] siw: device registration error -23
[  557.730045][ T5927] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  557.810494][T11182] 9pnet_fd: Insufficient options for proto=fd
[  557.913652][ T5927] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  557.960061][ T5927] usb 3-1: New USB device found, idVendor=046d, idProduct=c51b, bcdDevice= 0.00
[  557.969318][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  557.981622][ T5927] usb 3-1: config 0 descriptor??
[  558.537232][ T5895] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  558.688476][ T5895] usb 5-1: Using ep0 maxpacket: 16
[  558.710696][ T5895] usb 5-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7
[  558.733858][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  558.758817][ T5895] usb 5-1: Product: syz
[  558.795332][ T5895] usb 5-1: Manufacturer: syz
[  558.871598][ T5895] usb 5-1: SerialNumber: syz
[  558.927906][ T5895] usb 5-1: config 0 descriptor??
[  558.967615][ T5895] hub 5-1:0.0: bad descriptor, ignoring hub
[  558.987290][ T5895] hub 5-1:0.0: probe with driver hub failed with error -5
[  559.290089][ T5895] usb 5-1: USB disconnect, device number 52
[  559.469306][T11204] FAULT_INJECTION: forcing a failure.
[  559.469306][T11204] name failslab, interval 1, probability 0, space 0, times 0
[  559.482161][T11204] CPU: 1 UID: 0 PID: 11204 Comm: syz.3.1411 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) 
[  559.482186][T11204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  559.482195][T11204] Call Trace:
[  559.482202][T11204]  <TASK>
[  559.482213][T11204]  dump_stack_lvl+0x16c/0x1f0
[  559.482241][T11204]  should_fail_ex+0x512/0x640
[  559.482263][T11204]  ? __kmalloc_noprof+0xbf/0x510
[  559.482287][T11204]  ? _ib_alloc_device+0x3a/0x800
[  559.482312][T11204]  should_failslab+0xc2/0x120
[  559.482336][T11204]  __kmalloc_noprof+0xd2/0x510
[  559.482357][T11204]  ? down_read+0x13d/0x480
[  559.482377][T11204]  _ib_alloc_device+0x3a/0x800
[  559.482403][T11204]  siw_newlink+0xeb/0xd70
[  559.482422][T11204]  nldev_newlink+0x3a6/0x680
[  559.482445][T11204]  ? __pfx_nldev_newlink+0x10/0x10
[  559.482541][T11204]  ? cred_has_capability.isra.0+0x193/0x2f0
[  559.482565][T11204]  ? __pfx_cred_has_capability.isra.0+0x10/0x10
[  559.482605][T11204]  ? security_capable+0x7e/0x260
[  559.482624][T11204]  ? ns_capable+0xd7/0x110
[  559.482642][T11204]  ? __pfx_nldev_newlink+0x10/0x10
[  559.482665][T11204]  rdma_nl_rcv_msg+0x38a/0x6e0
[  559.482689][T11204]  ? __pfx_rdma_nl_rcv_msg+0x10/0x10
[  559.482716][T11204]  ? __lock_acquire+0x622/0x1c90
[  559.482748][T11204]  rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430
[  559.482777][T11204]  ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10
[  559.482811][T11204]  ? netlink_deliver_tap+0x1ae/0xd30
[  559.482839][T11204]  ? is_vmalloc_addr+0x86/0xa0
[  559.482864][T11204]  netlink_unicast+0x53a/0x7f0
[  559.482884][T11204]  ? __pfx_netlink_unicast+0x10/0x10
[  559.482908][T11204]  netlink_sendmsg+0x8d1/0xdd0
[  559.482929][T11204]  ? __pfx_netlink_sendmsg+0x10/0x10
[  559.482957][T11204]  ____sys_sendmsg+0xa98/0xc70
[  559.482975][T11204]  ? copy_msghdr_from_user+0x10a/0x160
[  559.482999][T11204]  ? __pfx_____sys_sendmsg+0x10/0x10
[  559.483029][T11204]  ___sys_sendmsg+0x134/0x1d0
[  559.483054][T11204]  ? __pfx____sys_sendmsg+0x10/0x10
[  559.483101][T11204]  ? __pfx_vfs_write+0x10/0x10
[  559.483124][T11204]  ? do_sys_openat2+0x157/0x1d0
[  559.483143][T11204]  __sys_sendmsg+0x16d/0x220
[  559.483167][T11204]  ? __pfx___sys_sendmsg+0x10/0x10
[  559.483208][T11204]  do_syscall_64+0xcd/0x4c0
[  559.483234][T11204]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  559.483252][T11204] RIP: 0033:0x7f80e218e929
[  559.483266][T11204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  559.483283][T11204] RSP: 002b:00007f80e3061038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  559.483300][T11204] RAX: ffffffffffffffda RBX: 00007f80e23b5fa0 RCX: 00007f80e218e929
[  559.483312][T11204] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000007
[  559.483322][T11204] RBP: 00007f80e3061090 R08: 0000000000000000 R09: 0000000000000000
[  559.483332][T11204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  559.483342][T11204] R13: 0000000000000000 R14: 00007f80e23b5fa0 R15: 00007ffe8a3ebf08
[  559.483366][T11204]  </TASK>
[  559.781110][    C1] vkms_vblank_simulate: vblank timer overrun
[  560.178440][ T5927] usb 3-1: string descriptor 0 read error: -71
[  560.201721][ T5927] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  560.381501][ T5927] usb 3-1: USB disconnect, device number 48
[  560.517300][ T5859] vhci_hcd: vhci_device speed not set
[  562.330894][T11236] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1421'.
[  562.457670][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  562.465559][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  563.513361][   T30] audit: type=1800 audit(1751010387.378:595): pid=11234 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.1420" name="bus" dev="overlay" ino=1643 res=0 errno=0
[  563.747325][  T917] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  563.767300][ T5945] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  564.048601][ T5945] usb 4-1: Using ep0 maxpacket: 32
[  564.054284][  T917] usb 5-1: Using ep0 maxpacket: 8
[  564.079481][ T5945] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  564.095025][  T917] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  564.132713][  T917] usb 5-1: config 179 has no interface number 0
[  564.140913][ T5945] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  564.184635][  T917] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  564.196120][    T9] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  564.222400][ T5945] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  564.291653][  T917] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  564.309044][ T5945] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  564.329728][ T5945] usb 4-1: Product: syz
[  564.333961][ T5945] usb 4-1: Manufacturer: syz
[  564.347178][  T917] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  564.368458][  T917] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  564.383656][  T917] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  564.401889][  T917] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  564.411007][  T917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  564.425534][ T5945] hub 4-1:4.0: USB hub found
[  564.441742][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  564.475517][T11234] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  564.521058][    T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c51b, bcdDevice= 0.00
[  565.386019][ T5858] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input47
[  565.459238][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  565.661923][    T9] usb 1-1: config 0 descriptor??
[  565.788944][ T5858] usb 5-1: USB disconnect, device number 53
[  565.788976][    C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  565.803207][    C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  565.812467][ T5858] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  565.830878][ T5945] hub 4-1:4.0: config failed, can't read hub descriptor (err -22)
[  566.001568][ T5945] usb 4-1: USB disconnect, device number 33
[  566.710589][T11271] Invalid ELF header magic: != ELF
[  568.147627][    T9] usb 1-1: string descriptor 0 read error: -71
[  568.196927][    T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  568.215179][   T30] audit: type=1800 audit(1751010390.728:596): pid=11272 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1430" name="bus" dev="overlay" ino=1652 res=0 errno=0
[  568.226979][    T9] usb 1-1: USB disconnect, device number 42
[  568.618852][ T5859] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  568.808599][ T5859] usb 4-1: Using ep0 maxpacket: 8
[  569.023587][ T5859] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  569.037496][ T5859] usb 4-1: config 179 has no interface number 0
[  569.045085][ T5859] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  569.062373][ T5859] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  569.077156][ T5859] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  569.090803][ T5859] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  569.127503][ T5859] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  569.155354][   T30] audit: type=1400 audit(1751010393.035:597): avc:  denied  { remount } for  pid=11290 comm="syz.4.1437" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  569.222264][ T5859] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  569.232312][ T5859] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  569.253022][T11272] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  569.617243][ T5859] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  569.702443][ T5927] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input48
[  569.837384][ T5859] usb 1-1: Using ep0 maxpacket: 8
[  570.125796][ T5859] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  570.136044][ T5859] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89
[  570.153310][ T5859] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  570.165148][ T5859] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024
[  570.177203][ T5859] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  570.198145][ T5859] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  570.275198][ T5859] usb 1-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[  570.294686][ T5859] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  570.304814][ T5859] usb 1-1: Product: syz
[  570.315819][ T5927] usb 4-1: USB disconnect, device number 34
[  570.321766][    C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  570.321791][    C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  570.345794][ T5859] usb 1-1: Manufacturer: syz
[  570.356054][ T5859] usb 1-1: SerialNumber: syz
[  570.391090][ T5927] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  570.419521][ T5859] usb 1-1: config 0 descriptor??
[  570.435970][T11300] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  570.665033][T11310] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1443'.
[  571.263770][   T30] audit: type=1400 audit(1751010395.165:598): avc:  denied  { unmount } for  pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  571.437290][ T5858] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  571.762939][T11322] IPv6: NLM_F_CREATE should be specified when creating new route
[  572.366453][ T5858] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  572.417294][ T5858] usb 2-1: New USB device found, idVendor=046d, idProduct=c51b, bcdDevice= 0.00
[  572.517664][ T5858] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  572.742937][ T5858] usb 2-1: config 0 descriptor??
[  573.220827][T11335] gfs2: not a GFS2 filesystem
[  573.469359][ T5859] rc_core: IR keymap rc-snapstream-firefly not found
[  573.507704][ T5859] Registered IR keymap rc-empty
[  573.514822][ T5859] rc rc0: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  573.548604][ T5859] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input49
[  573.682994][ T5859] input: syz syz mouse as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input50
[  573.777218][    C1] ati_remote 1-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19
[  573.810597][ T5859] usb 1-1: USB disconnect, device number 43
[  573.967468][ T5927] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  574.127194][ T5927] usb 5-1: Using ep0 maxpacket: 8
[  574.134119][ T5927] usb 5-1: unable to get BOS descriptor or descriptor too short
[  574.148250][ T5927] usb 5-1: config 4 interface 0 has no altsetting 0
[  574.158520][ T5927] usb 5-1: string descriptor 0 read error: -22
[  574.166446][ T5927] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  574.193753][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  574.225535][ T5927] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  574.235732][ T5927] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  574.247376][ T5927] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  574.254518][ T5927] usb 5-1: media controller created
[  574.270408][ T5927] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  574.584759][ T5858] usb 2-1: string descriptor 0 read error: -71
[  574.593105][ T5858] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  574.778487][T11356] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  575.223531][ T5858] usb 2-1: USB disconnect, device number 48
[  575.307318][  T917] usb 5-1: USB disconnect, device number 54
[  575.426701][T11360] Invalid ELF header magic: != ELF
[  575.787160][ T5927] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  576.117253][ T5927] usb 3-1: Using ep0 maxpacket: 8
[  576.280624][ T5927] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  576.294160][ T5927] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89
[  576.305959][ T5927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  576.317394][ T5927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024
[  576.332137][ T5927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  576.357693][ T5927] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  576.379870][ T5927] usb 3-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[  576.392769][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  577.293762][ T5927] usb 3-1: Product: syz
[  577.321045][ T5927] usb 3-1: Manufacturer: syz
[  577.356540][ T5927] usb 3-1: SerialNumber: syz
[  577.786783][ T5927] usb 3-1: config 0 descriptor??
[  577.902413][T11366] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  578.017042][ T5927] ati_remote 3-1:0.0: ati_remote_probe: Unexpected endpoint_out
[  578.047265][T11395] option changes via remount are deprecated (pid=11393 comm=syz.0.1467)
[  578.580302][ T5927] usb 3-1: USB disconnect, device number 49
[  578.967230][   T43] usb 2-1: new full-speed USB device number 49 using dummy_hcd
[  579.120380][T11423] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  579.609804][T11422] openvswitch: : Dropping previously announced user features
[  579.906790][   T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  580.067718][   T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  580.077861][   T43] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  580.090689][   T43] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  580.091394][T11432] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1477'.
[  580.099744][   T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  580.101575][   T43] usb 2-1: config 0 descriptor??
[  580.531083][   T43] shield 0003:0955:7214.000A: unknown main item tag 0x0
[  580.543601][   T43] shield 0003:0955:7214.000A: unknown main item tag 0x0
[  580.607166][   T43] shield 0003:0955:7214.000A: unknown main item tag 0x0
[  580.620308][   T43] shield 0003:0955:7214.000A: unknown main item tag 0x0
[  580.629370][   T43] shield 0003:0955:7214.000A: unknown main item tag 0x0
[  580.645295][   T43] input: HID 0955:7214 Haptics as /devices/virtual/input/input51
[  580.671583][   T43] shield 0003:0955:7214.000A: Registered Thunderstrike controller
[  580.679665][   T43] shield 0003:0955:7214.000A: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0
[  580.847205][T11400] netlink: 'syz.1.1469': attribute type 2 has an invalid length.
[  580.864122][T11400] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1469'.
[  581.735829][T11453] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  581.782620][T11455] xt_CT: You must specify a L4 protocol and not use inversions on it
[  581.790048][ T5895] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN
[  581.906700][ T5895] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPIPE
[  581.939030][ T5859] usb 2-1: reset full-speed USB device number 49 using dummy_hcd
[  581.997158][ T5895] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPIPE
[  582.319960][ T5859] usb 2-1: device descriptor read/64, error -32
[  582.356327][ T5895] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPIPE
[  582.577783][ T5859] usb 2-1: reset full-speed USB device number 49 using dummy_hcd
[  582.764984][ T5859] usb 2-1: device descriptor read/64, error -32
[  583.086361][   T30] audit: type=1400 audit(1751010406.985:599): avc:  denied  { ioctl } for  pid=11441 comm="syz.4.1482" path="socket:[28445]" dev="sockfs" ino=28445 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  583.119132][ T5859] usb 2-1: reset full-speed USB device number 49 using dummy_hcd
[  583.244508][ T5859] usb 2-1: device descriptor read/8, error -32
[  583.527651][ T5859] usb 2-1: reset full-speed USB device number 49 using dummy_hcd
[  583.556407][T11448] raw-gadget.0 gadget.1: failed to queue suspend event
[  583.560712][T11476] bond0: entered promiscuous mode
[  583.571343][ T5859] usb 2-1: device descriptor read/8, error -71
[  583.579284][T11448] raw-gadget.0 gadget.1: failed to queue disconnect event
[  583.588618][T11476] bond_slave_0: entered promiscuous mode
[  583.597539][T11476] bond_slave_1: entered promiscuous mode
[  583.604377][T11476] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  583.616511][T11476] bond0: left promiscuous mode
[  583.625605][T11476] bond_slave_0: left promiscuous mode
[  583.631518][T11476] bond_slave_1: left promiscuous mode
[  583.702136][   T43] usb 2-1: USB disconnect, device number 49
[  584.619049][T11497] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1496'.
[  584.663919][T11497] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  584.672846][T11497] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  584.681589][T11497] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  584.690336][T11497] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  585.104264][   T30] audit: type=1326 audit(1751010409.005:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11491 comm="syz.0.1496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4818e929 code=0x7ffc0000
[  585.157151][T11497] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  585.166063][T11497] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  585.177652][T11497] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  585.187258][T11497] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  585.190439][   T30] audit: type=1326 audit(1751010409.005:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11491 comm="syz.0.1496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4818e929 code=0x7ffc0000
[  585.835751][T11509] openvswitch: : Dropping previously announced user features
[  588.589098][T11562] vxfs: WRONG superblock magic 00000000 at 1
[  588.595211][T11562] vxfs: WRONG superblock magic 00000000 at 8
[  588.621438][T11562] vxfs: can't find superblock.
[  588.727594][ T5859] libceph: connect (1)[c::]:6789 error -101
[  588.734124][ T5859] libceph: mon0 (1)[c::]:6789 connect error
[  589.042852][ T5859] libceph: connect (1)[c::]:6789 error -101
[  589.107785][ T5859] libceph: mon0 (1)[c::]:6789 connect error
[  589.383091][T11573] sctp: [Deprecated]: syz.3.1515 (pid 11573) Use of struct sctp_assoc_value in delayed_ack socket option.
[  589.383091][T11573] Use struct sctp_sack_info instead
[  590.009303][ T5859] libceph: connect (1)[c::]:6789 error -101
[  590.444728][T11537] ceph: No mds server is up or the cluster is laggy
[  590.452419][ T5859] libceph: mon0 (1)[c::]:6789 connect error
[  591.073209][   T30] audit: type=1800 audit(1751010414.945:602): pid=11585 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.1519" name="bus" dev="overlay" ino=1779 res=0 errno=0
[  591.277258][ T5858] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  591.429867][ T5858] usb 5-1: Using ep0 maxpacket: 8
[  591.445165][ T5858] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  591.454724][ T5858] usb 5-1: config 179 has no interface number 0
[  591.461177][ T5858] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  591.490249][ T5858] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  591.525991][ T5858] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  591.874968][ T5858] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  591.891659][ T5858] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  591.906858][ T5858] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  591.918185][ T5858] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  592.537725][T11585] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  592.587623][T11601] vxfs: WRONG superblock magic 00000000 at 1
[  592.594129][T11601] vxfs: WRONG superblock magic 00000000 at 8
[  592.690986][T11601] vxfs: can't find superblock.
[  592.817435][T11597] ceph: No mds server is up or the cluster is laggy
[  593.257519][ T5858] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input52
[  593.580173][   T30] audit: type=1800 audit(1751010417.485:603): pid=11610 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1524" name="bus" dev="overlay" ino=1757 res=0 errno=0
[  594.940947][   T24] usb 5-1: USB disconnect, device number 55
[  594.941024][    C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  594.955473][    C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  594.979186][   T24] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  595.127976][   T30] audit: type=1400 audit(1751010419.025:604): avc:  denied  { write } for  pid=11613 comm="syz.1.1526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  595.217304][   T43] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  595.407122][   T43] usb 1-1: Using ep0 maxpacket: 8
[  595.468496][T11621] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  595.987749][   T43] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  596.022592][   T43] usb 1-1: config 179 has no interface number 0
[  596.145338][   T43] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  596.221281][   T43] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  596.233506][   T43] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  596.264763][   T43] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  596.291073][   T43] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  596.291214][   T30] audit: type=1400 audit(1751010420.195:605): avc:  denied  { append } for  pid=11624 comm="syz.1.1529" name="001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  596.327112][   T43] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  596.336362][   T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  596.679339][T11625] SELinux: failed to load policy
[  596.701691][   T43] usb 1-1: can't set config #179, error -71
[  596.736909][   T43] usb 1-1: USB disconnect, device number 44
[  597.067149][ T5859] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  597.238181][ T5859] usb 2-1: Using ep0 maxpacket: 8
[  597.248527][ T5859] usb 2-1: config 2 has an invalid descriptor of length 64, skipping remainder of the config
[  597.267324][ T5859] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[  597.286339][ T5859] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  597.345074][ T5859] usb 2-1: Product: syz
[  597.355227][ T5859] usb 2-1: Manufacturer: syz
[  597.415053][ T5859] usb 2-1: SerialNumber: syz
[  597.444863][ T5859] ch9200 2-1:2.0: probe with driver ch9200 failed with error -22
[  597.716200][T11648] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1534'.
[  597.725250][T11648] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1534'.
[  597.776652][T11649] netlink: 'syz.0.1534': attribute type 32 has an invalid length.
[  598.937248][ T5859] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  599.097195][ T5859] usb 3-1: Using ep0 maxpacket: 8
[  599.106647][ T5859] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  599.120344][ T5859] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89
[  599.146683][ T5859] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  599.301351][ T5945] usb 2-1: USB disconnect, device number 50
[  599.338007][ T5859] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024
[  599.357930][ T5859] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  599.369005][ T5859] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  599.395684][ T5859] usb 3-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[  599.405331][ T5859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  599.415259][ T5859] usb 3-1: Product: syz
[  599.428820][ T5859] usb 3-1: Manufacturer: syz
[  599.456662][ T5859] usb 3-1: SerialNumber: syz
[  599.822345][ T5859] usb 3-1: config 0 descriptor??
[  599.828119][T11659] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  599.868801][   T30] audit: type=1326 audit(1751010423.775:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11673 comm="syz.1.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275198e929 code=0x7ffc0000
[  599.996360][   T30] audit: type=1326 audit(1751010423.775:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11673 comm="syz.1.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275198e929 code=0x7ffc0000
[  600.019780][    C1] vkms_vblank_simulate: vblank timer overrun
[  600.490700][   T30] audit: type=1326 audit(1751010423.775:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11673 comm="syz.1.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f275198e929 code=0x7ffc0000
[  600.566207][   T30] audit: type=1326 audit(1751010423.775:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11673 comm="syz.1.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275198e929 code=0x7ffc0000
[  600.621694][T11680] bridge0: port 3(batadv1) entered blocking state
[  600.628512][T11680] bridge0: port 3(batadv1) entered disabled state
[  600.635206][T11680] batadv1: entered allmulticast mode
[  600.640542][   T30] audit: type=1326 audit(1751010423.775:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11673 comm="syz.1.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275198e929 code=0x7ffc0000
[  600.641040][   T30] audit: type=1326 audit(1751010423.775:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11673 comm="syz.1.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f275198e929 code=0x7ffc0000
[  600.665757][T11680] batadv1: entered promiscuous mode
[  600.688253][    C1] vkms_vblank_simulate: vblank timer overrun
[  600.724928][   T30] audit: type=1326 audit(1751010423.775:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11673 comm="syz.1.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275198e929 code=0x7ffc0000
[  600.751308][   T30] audit: type=1326 audit(1751010423.775:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11673 comm="syz.1.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275198e929 code=0x7ffc0000
[  600.774671][    C1] vkms_vblank_simulate: vblank timer overrun
[  601.126335][   T30] audit: type=1326 audit(1751010423.775:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11673 comm="syz.1.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f275198e929 code=0x7ffc0000
[  601.149986][   T24] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  601.158852][ T4520] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  601.168563][ T4520] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  601.348634][   T30] audit: type=1326 audit(1751010423.775:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11673 comm="syz.1.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275198e929 code=0x7ffc0000
[  601.372020][    C1] vkms_vblank_simulate: vblank timer overrun
[  601.857600][   T30] audit: type=1326 audit(1751010423.775:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11673 comm="syz.1.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275198e929 code=0x7ffc0000
[  601.887999][    C1] vkms_vblank_simulate: vblank timer overrun
[  601.905155][   T30] audit: type=1326 audit(1751010423.775:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11673 comm="syz.1.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f275198e929 code=0x7ffc0000
[  601.907148][   T24] usb 4-1: device descriptor read/64, error -71
[  601.939983][   T30] audit: type=1326 audit(1751010423.775:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11673 comm="syz.1.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275198e929 code=0x7ffc0000
[  602.047466][   T30] audit: type=1326 audit(1751010423.775:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11673 comm="syz.1.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275198e929 code=0x7ffc0000
[  602.077026][   T30] audit: type=1326 audit(1751010423.805:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11673 comm="syz.1.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f275198e929 code=0x7ffc0000
[  602.177692][   T30] audit: type=1326 audit(1751010423.805:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11673 comm="syz.1.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275198e929 code=0x7ffc0000
[  602.327147][   T24] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  602.349858][   T30] audit: type=1326 audit(1751010423.805:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11673 comm="syz.1.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275198e929 code=0x7ffc0000
[  602.395390][   T30] audit: type=1326 audit(1751010423.805:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11673 comm="syz.1.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275198e929 code=0x7ffc0000
[  602.417106][ T5859] rc_core: IR keymap rc-snapstream-firefly not found
[  602.422767][   T30] audit: type=1326 audit(1751010423.805:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11673 comm="syz.1.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275198e929 code=0x7ffc0000
[  602.425498][ T5859] Registered IR keymap rc-empty
[  602.481213][ T5859] rc rc0: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  602.537175][   T24] usb 4-1: device descriptor read/64, error -71
[  602.772098][ T5859] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input53
[  602.912805][   T24] usb usb4-port1: attempt power cycle
[  602.921488][ T5859] input: syz syz mouse as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input54
[  602.974969][ T5859] usb 3-1: USB disconnect, device number 50
[  602.975020][    C1] ati_remote 3-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19
[  603.277297][   T24] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  603.511001][   T24] usb 4-1: device descriptor read/8, error -71
[  603.759972][T11682] delete_channel: no stack
[  603.787195][   T24] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  603.987651][ T5859] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  604.007159][   T24] usb 4-1: device not accepting address 38, error -71
[  604.024777][   T24] usb usb4-port1: unable to enumerate USB device
[  604.211315][ T5859] usb 3-1: device descriptor read/all, error -71
[  604.301303][T11732] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22
[  605.671384][T11751] siw: device registration error -23
[  607.786553][T11778] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1569'.
[  607.894339][T11781] [U] 
[  608.199556][   T24] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  608.330143][T11792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1575'.
[  608.357786][T11795] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1576'.
[  608.487188][   T24] usb 1-1: Using ep0 maxpacket: 16
[  608.530036][   T24] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79
[  608.623663][   T24] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0
[  608.722209][   T24] usb 1-1: Manufacturer: syz
[  608.740769][   T24] usb 1-1: config 0 descriptor??
[  609.886861][   T24] usb 1-1: Limiting number of CPorts to U8_MAX
[  609.968639][   T24] usb 1-1: Not enough endpoints found in device, aborting!
[  610.871714][   T24] usb 1-1: USB disconnect, device number 45
[  612.518595][T11843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1588'.
[  615.816718][   T30] kauditd_printk_skb: 16 callbacks suppressed
[  615.816731][   T30] audit: type=1800 audit(1751010439.715:641): pid=11877 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.1595" name="bus" dev="overlay" ino=1851 res=0 errno=0
[  615.937374][T11881] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  616.107238][ T5858] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  616.519176][ T5858] usb 5-1: Using ep0 maxpacket: 8
[  616.537887][ T5858] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  616.554179][ T5858] usb 5-1: config 179 has no interface number 0
[  616.561076][ T5858] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  616.572323][ T5858] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  616.585348][ T5858] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  616.618457][ T5858] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  616.711813][ T5858] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  617.037558][T11902] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  617.287926][ T5858] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  617.299547][ T5858] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  617.310540][T11877] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  617.576649][ T5858] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input55
[  617.706126][   T30] audit: type=1400 audit(1751010441.605:642): avc:  denied  { bind } for  pid=11903 comm="syz.0.1604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  617.794841][T11904] netlink: 292 bytes leftover after parsing attributes in process `syz.0.1604'.
[  617.967870][   T30] audit: type=1400 audit(1751010441.605:643): avc:  denied  { listen } for  pid=11903 comm="syz.0.1604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  618.414516][    C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  618.422831][    C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  618.431308][  T917] usb 5-1: USB disconnect, device number 56
[  618.438665][  T917] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  619.150612][   T30] audit: type=1400 audit(1751010442.725:644): avc:  denied  { ioctl } for  pid=11918 comm="syz.2.1609" path="socket:[30184]" dev="sockfs" ino=30184 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  619.179110][   T30] audit: type=1400 audit(1751010442.725:645): avc:  denied  { accept } for  pid=11918 comm="syz.2.1609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  620.395640][T11932] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  621.268178][   T30] audit: type=1800 audit(1751010444.675:646): pid=11942 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1615" name="bus" dev="overlay" ino=1847 res=0 errno=0
[  621.548994][ T5858] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  622.532352][T11951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1614'.
[  622.563728][ T5858] usb 3-1: Using ep0 maxpacket: 8
[  622.598130][ T5858] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  622.630955][ T5858] usb 3-1: config 179 has no interface number 0
[  622.651751][ T5858] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  622.707487][ T5858] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  622.718792][ T5858] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  622.791638][ T5858] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  622.803374][ T5858] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  622.824934][ T5858] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  622.835172][ T5858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  622.854737][T11942] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  623.374585][  T917] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input56
[  623.441180][T11957] rdma_rxe: rxe_newlink: failed to add vxcan1
[  623.907980][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  623.914477][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  624.322087][ T5859] usb 3-1: USB disconnect, device number 53
[  624.322104][    C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  624.336767][    C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  624.398893][ T5859] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  624.490579][T11972] team0: No ports can be present during mode change
[  624.558979][   T30] audit: type=1800 audit(1751010448.465:647): pid=11976 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1623" name="bus" dev="overlay" ino=1870 res=0 errno=0
[  624.673959][T11980] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  624.827339][ T5859] IPVS: starting estimator thread 0...
[  624.842021][  T917] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  624.851956][   T30] audit: type=1400 audit(1751010448.725:648): avc:  denied  { read } for  pid=11983 comm="syz.1.1627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  624.937363][T11985] IPVS: using max 42 ests per chain, 100800 per kthread
[  624.967259][ T5858] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  625.028324][  T917] usb 1-1: Using ep0 maxpacket: 8
[  625.041446][  T917] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  625.060065][  T917] usb 1-1: config 179 has no interface number 0
[  625.066377][  T917] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  625.090943][ T5859] libceph: connect (1)[c::]:6789 error -101
[  625.107273][ T5859] libceph: mon0 (1)[c::]:6789 connect error
[  625.113336][  T917] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  625.129479][ T5858] usb 4-1: Using ep0 maxpacket: 16
[  625.148967][T11995] vxfs: WRONG superblock magic 00000000 at 1
[  625.155249][T11995] vxfs: WRONG superblock magic 00000000 at 8
[  625.166284][ T5858] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79
[  625.181729][  T917] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  625.232207][T11995] vxfs: can't find superblock.
[  625.239759][  T917] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  625.251385][ T5858] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0
[  625.271653][ T5858] usb 4-1: Manufacturer: syz
[  625.282191][  T917] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  625.320127][ T5858] usb 4-1: config 0 descriptor??
[  625.327820][  T917] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  625.367985][ T5859] libceph: connect (1)[c::]:6789 error -101
[  625.375327][  T917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  625.395474][T11976] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  625.403084][ T5859] libceph: mon0 (1)[c::]:6789 connect error
[  625.544463][ T5858] usb 4-1: Limiting number of CPorts to U8_MAX
[  625.562559][ T5858] usb 4-1: Not enough endpoints found in device, aborting!
[  625.570821][T11992] ceph: No mds server is up or the cluster is laggy
[  625.622911][  T917] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input57
[  625.694810][T12003] siw: device registration error -23
[  626.298938][ T5858] usb 4-1: USB disconnect, device number 39
[  626.812781][ T5858] usb 1-1: USB disconnect, device number 46
[  626.818768][    C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  626.818796][    C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  626.913971][ T5858] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  626.965937][T12010] rdma_rxe: rxe_newlink: failed to add vxcan1
[  628.302233][T12015] siw: device registration error -23
[  629.027178][T12036] siw: device registration error -23
[  630.329747][T12053] siw: device registration error -23
[  631.767337][T12074] Invalid ELF header magic: != ELF
[  632.320061][   T30] audit: type=1800 audit(1751010456.225:649): pid=12077 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.1649" name="bus" dev="overlay" ino=1902 res=0 errno=0
[  632.634997][   T24] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  633.067102][   T24] usb 5-1: Using ep0 maxpacket: 8
[  633.108770][   T24] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  633.147411][   T24] usb 5-1: config 179 has no interface number 0
[  633.174072][   T24] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  633.186857][   T24] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  633.200860][   T24] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  633.212365][   T24] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  633.362530][   T24] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  633.377650][   T24] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  633.386763][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  633.486265][T12077] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  633.811429][   T24] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input58
[  635.307294][   T24] usb 5-1: USB disconnect, device number 57
[  635.313236][    C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  635.321510][    C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  635.351735][   T24] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  636.508539][T12126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  636.794084][T12142] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1666'.
[  638.313305][ T5945] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  638.725980][ T5945] usb 3-1: Using ep0 maxpacket: 32
[  638.767590][T12165] [U] 
[  638.768008][ T5945] usb 3-1: config 0 has an invalid interface descriptor of length 4, skipping
[  638.803782][ T5945] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  638.842460][ T5945] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  639.009841][ T5945] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  639.020251][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  639.034753][ T5945] usb 3-1: Product: syz
[  639.562211][T12176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1676'.
[  639.575382][ T5945] usb 3-1: Manufacturer: syz
[  639.621124][ T5945] usb 3-1: SerialNumber: syz
[  639.656473][ T5945] usb 3-1: config 0 descriptor??
[  640.785179][   T30] audit: type=1800 audit(1751010463.854:650): pid=12180 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1677" name="bus" dev="overlay" ino=1877 res=0 errno=0
[  640.810762][ T5859] usb 3-1: USB disconnect, device number 54
[  641.127383][   T24] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  641.155198][T12186] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  642.247209][   T24] usb 4-1: Using ep0 maxpacket: 8
[  642.291098][   T24] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  642.329628][   T24] usb 4-1: config 179 has no interface number 0
[  642.356175][   T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  642.412528][T12189] bridge0: port 2(bridge_slave_1) entered disabled state
[  642.420127][T12189] bridge0: port 1(bridge_slave_0) entered disabled state
[  642.474076][   T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  642.534500][T12189] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  642.555446][T12189] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  642.626058][   T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  642.647927][   T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  642.660275][   T24] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  642.675609][   T24] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  642.685559][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  642.736785][T12180] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  642.770702][T12189] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  642.779712][T12189] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  642.788580][T12189] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  642.798029][T12189] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  642.839006][T12189] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  642.848411][T12189] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  642.857295][T12189] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  642.866135][T12189] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  643.013459][   T24] usb 4-1: can't set config #179, error -71
[  643.059506][   T24] usb 4-1: USB disconnect, device number 40
[  644.667471][T12220] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  646.137281][ T5945] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  647.556281][ T5945] usb 2-1: Using ep0 maxpacket: 8
[  647.590274][ T5945] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  647.609911][ T5945] usb 2-1: config 179 has no interface number 0
[  647.633751][ T5945] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  647.669655][ T5945] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  647.685531][ T5945] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  647.701157][ T5945] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  647.713148][ T5945] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  647.727924][ T5945] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  647.738159][ T5945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  647.753788][ T5945] usb 2-1: can't set config #179, error -71
[  647.761438][ T5945] usb 2-1: USB disconnect, device number 51
[  648.162565][T12246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1693'.
[  650.414083][T12266] netlink: 'syz.2.1703': attribute type 10 has an invalid length.
[  650.450264][T12268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1702'.
[  650.486443][T12266] batman_adv: batadv0: Adding interface: team0
[  650.524417][T12266] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  650.661721][T12266] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  651.539622][T12291] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  652.435166][T12297] Invalid ELF header magic: != ELF
[  652.469340][T12278] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1706'.
[  653.186876][   T24] libceph: connect (1)[c::]:6789 error -101
[  653.204972][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  653.231761][T12317] vxfs: WRONG superblock magic 00000000 at 1
[  653.253876][T12317] vxfs: WRONG superblock magic 00000000 at 8
[  653.277064][T12317] vxfs: can't find superblock.
[  653.497603][ T5859] libceph: connect (1)[c::]:6789 error -101
[  653.516769][ T5859] libceph: mon0 (1)[c::]:6789 connect error
[  653.700994][T12309] ceph: No mds server is up or the cluster is laggy
[  655.395057][T12337] vxfs: WRONG superblock magic 00000000 at 1
[  655.413128][T12337] vxfs: WRONG superblock magic 00000000 at 8
[  655.449362][T12337] vxfs: can't find superblock.
[  655.844178][T12339] Invalid source name
[  656.145557][T12304] ceph: No mds server is up or the cluster is laggy
[  656.161872][T12339] UBIFS error (pid: 12339): cannot open "ubifs", error -22
[  657.500349][T12355] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  657.924718][T12359] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  658.254020][T12364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1727'.
[  659.083915][T12373] fuse: Bad value for 'fd'
[  659.103324][   T30] audit: type=1400 audit(1751010483.004:651): avc:  denied  { write } for  pid=12372 comm="syz.2.1731" name="file0" dev="tmpfs" ino=1961 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  659.177546][   T30] audit: type=1400 audit(1751010483.034:652): avc:  denied  { open } for  pid=12372 comm="syz.2.1731" path="/338/file0" dev="tmpfs" ino=1961 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  660.449855][   T30] audit: type=1400 audit(1751010483.084:653): avc:  denied  { setattr } for  pid=12369 comm="syz.4.1730" name="ptype" dev="proc" ino=4026532822 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  660.896475][T12371] Invalid ELF header magic: != ELF
[  661.323972][T12388] set match dimension is over the limit!
[  662.094318][T12401] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  662.100877][T12401] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  662.134744][T12401] vhci_hcd vhci_hcd.0: Device attached
[  662.207246][  T917] usb 5-1: new low-speed USB device number 58 using dummy_hcd
[  662.236225][T12411] FAULT_INJECTION: forcing a failure.
[  662.236225][T12411] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  662.252006][T12411] CPU: 1 UID: 0 PID: 12411 Comm: syz.0.1740 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) 
[  662.252033][T12411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  662.252043][T12411] Call Trace:
[  662.252047][T12411]  <TASK>
[  662.252051][T12411]  dump_stack_lvl+0x16c/0x1f0
[  662.252075][T12411]  should_fail_ex+0x512/0x640
[  662.252092][T12411]  _copy_from_user+0x2e/0xd0
[  662.252108][T12411]  copy_from_sockptr_offset.constprop.0+0x136/0x170
[  662.252125][T12411]  ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10
[  662.252142][T12411]  ? __local_bh_enable_ip+0xa4/0x120
[  662.252158][T12411]  sco_sock_setsockopt+0x23f/0xf20
[  662.252172][T12411]  ? __pfx_avc_has_perm+0x10/0x10
[  662.252191][T12411]  ? __pfx_sco_sock_setsockopt+0x10/0x10
[  662.252220][T12411]  ? selinux_socket_setsockopt+0x6a/0x80
[  662.252234][T12411]  ? __pfx_sco_sock_setsockopt+0x10/0x10
[  662.252250][T12411]  do_sock_setsockopt+0x224/0x470
[  662.252267][T12411]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  662.252292][T12411]  __sys_setsockopt+0x1a0/0x230
[  662.252310][T12411]  __x64_sys_setsockopt+0xbd/0x160
[  662.252324][T12411]  ? do_syscall_64+0x91/0x4c0
[  662.252341][T12411]  ? lockdep_hardirqs_on+0x7c/0x110
[  662.252357][T12411]  do_syscall_64+0xcd/0x4c0
[  662.252373][T12411]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  662.252385][T12411] RIP: 0033:0x7ffa4818e929
[  662.252395][T12411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  662.252406][T12411] RSP: 002b:00007ffa48fc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  662.252416][T12411] RAX: ffffffffffffffda RBX: 00007ffa483b5fa0 RCX: 00007ffa4818e929
[  662.252423][T12411] RDX: 000000000000000b RSI: 0000000000000112 RDI: 0000000000000004
[  662.252429][T12411] RBP: 00007ffa48fc7090 R08: 0000000000000002 R09: 0000000000000000
[  662.252435][T12411] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  662.252441][T12411] R13: 0000000000000000 R14: 00007ffa483b5fa0 R15: 00007ffd9528a098
[  662.252454][T12411]  </TASK>
[  662.467226][  T917] usb 5-1: device descriptor read/64, error -71
[  662.527157][ T5945] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  662.597211][ T5859] usb 37-1: new low-speed USB device number 2 using vhci_hcd
[  662.640601][T12415] fuse: Bad value for 'fd'
[  662.688808][ T5945] usb 3-1: config 0 has an invalid descriptor of length 50, skipping remainder of the config
[  662.699102][ T5945] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  662.708105][ T5945] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  662.717226][  T917] usb 5-1: new low-speed USB device number 59 using dummy_hcd
[  662.724822][ T5945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  662.735779][ T5945] usb 3-1: config 0 descriptor??
[  662.740839][ T5858] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  662.857093][  T917] usb 5-1: device descriptor read/64, error -71
[  662.897505][ T5858] usb 1-1: Using ep0 maxpacket: 16
[  662.908439][ T5858] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  662.937089][ T5858] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  662.946150][ T5858] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  662.963970][T12401] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1738'.
[  662.967283][  T917] usb usb5-port1: attempt power cycle
[  662.978065][T12402] usb 37-1: recv xbuf, 0
[  662.980659][ T5858] usb 1-1: config 0 descriptor??
[  662.983771][   T24] usb 3-1: USB disconnect, device number 55
[  662.994096][ T6036] vhci_hcd: stop threads
[  662.998637][ T6036] vhci_hcd: release socket
[  663.003205][ T6036] vhci_hcd: disconnect device
[  663.070143][ T5859] vhci_hcd: vhci_device speed not set
[  663.744032][  T917] usb 5-1: new low-speed USB device number 60 using dummy_hcd
[  663.767637][  T917] usb 5-1: device descriptor read/8, error -71
[  663.774937][ T5858] usbhid 1-1:0.0: can't add hid device: -71
[  663.781008][ T5858] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  663.800461][ T5858] usb 1-1: USB disconnect, device number 47
[  664.606507][  T917] usb 5-1: new low-speed USB device number 61 using dummy_hcd
[  664.677691][   T30] audit: type=1400 audit(1751010488.574:654): avc:  denied  { accept } for  pid=12434 comm="syz.1.1747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  664.957495][   T30] audit: type=1400 audit(1751010488.834:655): avc:  denied  { name_bind } for  pid=12436 comm="syz.3.1748" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  665.331616][  T917] usb 5-1: device descriptor read/8, error -71
[  665.572301][  T917] usb usb5-port1: unable to enumerate USB device
[  665.648227][   T30] audit: type=1400 audit(1751010489.544:656): avc:  denied  { setopt } for  pid=12441 comm="syz.0.1749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  666.099820][T12458] vim2m vim2m.0: vidioc_s_fmt queue busy
[  666.403896][   T30] audit: type=1400 audit(1751010490.304:657): avc:  denied  { write } for  pid=12463 comm="syz.4.1756" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  666.431980][   T30] audit: type=1400 audit(1751010490.304:658): avc:  denied  { open } for  pid=12463 comm="syz.4.1756" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  666.521864][   T30] audit: type=1400 audit(1751010490.394:659): avc:  denied  { read append } for  pid=12463 comm="syz.4.1756" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  666.647089][  T917] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  666.797521][T12464] binder: BINDER_SET_CONTEXT_MGR already set
[  666.855245][T12464] binder: 12463:12464 ioctl 4018620d 200000000040 returned -16
[  666.904035][  T917] usb 3-1: too many configurations: 9, using maximum allowed: 8
[  666.921814][  T917] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  666.939924][  T917] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  666.964626][  T917] usb 3-1: config 0 interface 0 has no altsetting 0
[  666.979826][  T917] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  666.999494][   T30] audit: type=1800 audit(1751010490.894:660): pid=12470 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1756" name="/" dev="9p" ino=2 res=0 errno=0
[  667.024805][  T917] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  667.057498][  T917] usb 3-1: config 0 interface 0 has no altsetting 0
[  667.065290][  T917] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  667.075567][  T917] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  667.089501][  T917] usb 3-1: config 0 interface 0 has no altsetting 0
[  667.098453][  T917] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  667.116908][  T917] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  667.146715][  T917] usb 3-1: config 0 interface 0 has no altsetting 0
[  667.448345][  T917] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  667.452123][T12470] syz.4.1756 (12470) used greatest stack depth: 21144 bytes left
[  667.465827][  T917] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  667.485682][  T917] usb 3-1: config 0 interface 0 has no altsetting 0
[  667.529043][  T917] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  667.540219][  T917] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  667.554328][  T917] usb 3-1: config 0 interface 0 has no altsetting 0
[  667.565080][  T917] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  667.584270][  T917] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  667.601703][  T917] usb 3-1: config 0 interface 0 has no altsetting 0
[  667.612765][  T917] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  667.763655][  T917] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  667.774627][  T917] usb 3-1: config 0 interface 0 has no altsetting 0
[  667.785745][  T917] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  667.805066][  T917] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  667.826356][  T917] usb 3-1: Product: syz
[  667.899441][  T917] usb 3-1: Manufacturer: syz
[  667.933353][  T917] usb 3-1: SerialNumber: syz
[  668.017232][  T917] usb 3-1: config 0 descriptor??
[  668.025686][  T917] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0
[  668.303465][ T5858] usb 3-1: USB disconnect, device number 56
[  668.311770][ T5858] yurex 3-1:0.0: USB YUREX #0 now disconnected
[  668.481639][  T917] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  668.561129][   T30] audit: type=1400 audit(1751010492.464:661): avc:  denied  { getopt } for  pid=12512 comm="syz.4.1761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  669.261286][  T917] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  669.345407][  T917] usb 4-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  669.499463][  T917] usb 4-1: config 1 interface 0 has no altsetting 0
[  670.619586][  T917] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  670.628890][  T917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  670.636953][  T917] usb 4-1: SerialNumber: syz
[  670.905654][T12529] FAULT_INJECTION: forcing a failure.
[  670.905654][T12529] name failslab, interval 1, probability 0, space 0, times 0
[  670.939691][T12529] CPU: 1 UID: 0 PID: 12529 Comm: syz.1.1764 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) 
[  670.939720][T12529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  670.939730][T12529] Call Trace:
[  670.939737][T12529]  <TASK>
[  670.939744][T12529]  dump_stack_lvl+0x16c/0x1f0
[  670.939774][T12529]  should_fail_ex+0x512/0x640
[  670.939797][T12529]  ? fs_reclaim_acquire+0xae/0x150
[  670.939817][T12529]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  670.939841][T12529]  should_failslab+0xc2/0x120
[  670.939866][T12529]  __kmalloc_noprof+0xd2/0x510
[  670.939894][T12529]  tomoyo_realpath_from_path+0xc2/0x6e0
[  670.939919][T12529]  ? tomoyo_profile+0x47/0x60
[  670.939947][T12529]  tomoyo_path_number_perm+0x245/0x580
[  670.939966][T12529]  ? tomoyo_path_number_perm+0x237/0x580
[  670.939988][T12529]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  670.940010][T12529]  ? find_held_lock+0x2b/0x80
[  670.940055][T12529]  ? find_held_lock+0x2b/0x80
[  670.940074][T12529]  ? hook_file_ioctl_common+0x145/0x410
[  670.940106][T12529]  ? __fget_files+0x20e/0x3c0
[  670.940133][T12529]  security_file_ioctl+0x9b/0x240
[  670.940163][T12529]  __x64_sys_ioctl+0xb7/0x210
[  670.940185][T12529]  do_syscall_64+0xcd/0x4c0
[  670.940211][T12529]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  670.940229][T12529] RIP: 0033:0x7f275198e929
[  670.940243][T12529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  670.940260][T12529] RSP: 002b:00007f275287d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  670.940277][T12529] RAX: ffffffffffffffda RBX: 00007f2751bb5fa0 RCX: 00007f275198e929
[  670.940289][T12529] RDX: 00002000000000c0 RSI: 00000000c0d05605 RDI: 0000000000000003
[  670.940299][T12529] RBP: 00007f275287d090 R08: 0000000000000000 R09: 0000000000000000
[  670.940310][T12529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  670.940320][T12529] R13: 0000000000000000 R14: 00007f2751bb5fa0 R15: 00007ffc09b58108
[  670.940344][T12529]  </TASK>
[  670.940351][T12529] ERROR: Out of memory at tomoyo_realpath_from_path.
[  671.976085][  T917] usb 4-1: can't set config #1, error -71
[  671.988148][  T917] usb 4-1: USB disconnect, device number 41
[  676.687665][T12593] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  677.672618][T12609] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22)
[  678.167214][ T5859] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  678.282671][T12612] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  678.291866][   T30] audit: type=1400 audit(1751010502.189:662): avc:  denied  { mounton } for  pid=12611 comm="syz.1.1787" path="/syzcgroup/unified/syz1" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1
[  678.291938][T12612] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  678.325917][T12612] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  678.337117][T12612] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  678.347251][ T5859] usb 4-1: Using ep0 maxpacket: 16
[  678.366543][ T5859] usb 4-1: config index 0 descriptor too short (expected 16456, got 72)
[  678.377608][ T5859] usb 4-1: config 0 has an invalid interface number: 125 but max is 1
[  678.406169][T12612] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1787'.
[  678.421873][ T5859] usb 4-1: config 0 has an invalid interface number: 125 but max is 1
[  678.441691][ T5859] usb 4-1: config 0 has an invalid interface number: 125 but max is 1
[  678.461007][ T5859] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  678.489580][ T5859] usb 4-1: config 0 has no interface number 0
[  678.516163][ T5859] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  678.542852][ T5859] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  678.589445][ T5859] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  678.637291][ T5859] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  678.658594][ T5859] usb 4-1: config 0 interface 125 has no altsetting 0
[  678.665411][ T5859] usb 4-1: config 0 interface 125 has no altsetting 2
[  678.689502][ T5859] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  678.705150][ T5859] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  678.722487][ T5859] usb 4-1: Product: syz
[  678.731054][ T5859] usb 4-1: Manufacturer: syz
[  678.740660][ T5859] usb 4-1: SerialNumber: syz
[  678.740959][T12625] smc: net device bond0 applied user defined pnetid SYZ2
[  678.758244][T12625] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2
[  678.758481][ T5859] usb 4-1: config 0 descriptor??
[  678.786525][ T5859] usb 4-1: selecting invalid altsetting 2
[  678.916505][  T917] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  678.927254][   T24] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  679.040657][T12607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  679.053839][T12607] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  679.067345][  T917] usb 1-1: Using ep0 maxpacket: 32
[  679.076810][  T917] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  679.077167][   T24] usb 3-1: Using ep0 maxpacket: 8
[  679.090245][  T917] usb 1-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=3f.5a
[  679.102968][  T917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  679.116188][  T917] usb 1-1: Product: syz
[  679.122631][  T917] usb 1-1: Manufacturer: syz
[  679.127662][  T917] usb 1-1: SerialNumber: syz
[  679.134992][  T917] usb 1-1: config 0 descriptor??
[  679.144312][  T917] net1080 1-1:0.0: probe with driver net1080 failed with error -22
[  679.175463][   T24] usb 3-1: unable to get BOS descriptor or descriptor too short
[  679.195630][   T24] usb 3-1: config 1 interface 0 altsetting 129 bulk endpoint 0x82 has invalid maxpacket 32
[  679.216213][   T30] audit: type=1400 audit(1751010503.119:663): avc:  denied  { remount } for  pid=12606 comm="syz.3.1786" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  679.236518][   T24] usb 3-1: config 1 interface 0 altsetting 129 bulk endpoint 0x3 has invalid maxpacket 1023
[  679.238285][T12629] overlayfs: workdir and upperdir must be separate subtrees
[  679.262186][   T24] usb 3-1: config 1 interface 0 has no altsetting 0
[  679.322927][   T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  679.360366][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  679.363788][  T917] usb 1-1: USB disconnect, device number 48
[  679.441224][   T24] usb 3-1: Product: syz
[  679.445539][   T24] usb 3-1: Manufacturer: syz
[  679.462652][   T24] usb 3-1: SerialNumber: syz
[  679.495335][T12623] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  679.522547][T12623] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  679.631723][   T30] audit: type=1400 audit(1751010503.539:664): avc:  denied  { lock } for  pid=12630 comm="syz.1.1793" path="socket:[32747]" dev="sockfs" ino=32747 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  679.867141][ T5859] get_1284_register timeout
[  679.871873][    C1] usb 4-1: async_complete: urb error -104
[  679.877924][ T5859] uss720 4-1:0.125: probe with driver uss720 failed with error -5
[  679.936382][T12623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  679.947084][T12623] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  679.998662][   T24] usb 3-1: bad CDC descriptors
[  680.035770][   T24] usb 3-1: USB disconnect, device number 57
[  681.335916][   T30] audit: type=1400 audit(1751010505.149:665): avc:  denied  { relabelfrom } for  pid=12643 comm="syz.1.1796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  681.431754][   T30] audit: type=1400 audit(1751010505.209:666): avc:  denied  { relabelto } for  pid=12643 comm="syz.1.1796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  682.488780][T12653] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1797'.
[  682.497870][T12653] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1797'.
[  682.574982][T12655] netlink: 'syz.2.1797': attribute type 32 has an invalid length.
[  682.933216][ T5858] usb 4-1: USB disconnect, device number 42
[  684.702596][T12677] Invalid ELF header magic: != ELF
[  684.740703][T12679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1805'.
[  685.280540][T12687] netlink: 'syz.4.1806': attribute type 11 has an invalid length.
[  685.288675][T12687] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1806'.
[  685.316744][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  685.324150][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  687.387735][T12718] siw: device registration error -23
[  688.964981][   T24] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  689.036016][T12734] tls_set_device_offload_rx: netdev not found
[  689.137404][   T24] usb 2-1: Using ep0 maxpacket: 8
[  689.145274][   T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  689.291845][   T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89
[  689.298880][T12742] syz.0.1820: attempt to access beyond end of device
[  689.298880][T12742] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0
[  689.319204][T12742] syz.0.1820: attempt to access beyond end of device
[  689.319204][T12742] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0
[  689.332559][T12742] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[  689.343468][T12742] syz.0.1820: attempt to access beyond end of device
[  689.343468][T12742] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0
[  689.368266][T12742] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[  689.387906][T12742] syz.0.1820: attempt to access beyond end of device
[  689.387906][T12742] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0
[  689.405506][T12742] syz.0.1820: attempt to access beyond end of device
[  689.405506][T12742] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0
[  689.418819][T12742] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[  689.430285][T12742] syz.0.1820: attempt to access beyond end of device
[  689.430285][T12742] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0
[  689.443677][T12742] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[  689.455980][T12742] syz.0.1820: attempt to access beyond end of device
[  689.455980][T12742] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0
[  689.470184][T12742] syz.0.1820: attempt to access beyond end of device
[  689.470184][T12742] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0
[  689.483515][T12742] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[  689.494898][T12742] syz.0.1820: attempt to access beyond end of device
[  689.494898][T12742] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0
[  689.508230][T12742] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[  689.519924][T12742] syz.0.1820: attempt to access beyond end of device
[  689.519924][T12742] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0
[  689.533376][T12742] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[  689.549227][T12742] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[  689.558910][T12742] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1)
[  689.757325][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  689.787119][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024
[  689.812242][T12748] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  689.822725][T12748] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  689.838318][T12748] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  689.849391][T12748] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  689.869955][T12748] geneve2: entered promiscuous mode
[  689.940741][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  690.040186][   T24] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  690.100482][   T24] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[  690.123536][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  690.244231][T12759] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  690.574762][   T24] usb 2-1: Product: syz
[  690.579261][   T24] usb 2-1: Manufacturer: syz
[  690.587571][   T24] usb 2-1: SerialNumber: syz
[  690.645297][   T24] usb 2-1: config 0 descriptor??
[  690.697387][T12723] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  690.769201][   T24] ati_remote 2-1:0.0: ati_remote_probe: Unexpected endpoint_out
[  690.857740][T12765] rdma_rxe: rxe_newlink: failed to add vxcan1
[  690.858096][   T24] usb 2-1: USB disconnect, device number 52
[  691.545300][   T30] audit: type=1800 audit(1751010515.451:667): pid=12775 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1830" name="bus" dev="overlay" ino=2234 res=0 errno=0
[  691.744620][T12777] siw: device registration error -23
[  691.897123][   T24] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  692.497120][   T24] usb 2-1: Using ep0 maxpacket: 8
[  692.504271][   T24] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  692.546356][   T24] usb 2-1: config 179 has no interface number 0
[  692.590773][   T24] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  693.429288][   T24] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  693.487233][   T24] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  693.514067][   T24] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  693.565256][   T24] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  693.592652][   T24] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  693.603028][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  693.623665][T12775] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  693.667614][   T30] audit: type=1400 audit(1751010517.581:668): avc:  denied  { create } for  pid=12784 comm="syz.0.1833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[  693.699286][   T30] audit: type=1326 audit(1751010517.601:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12784 comm="syz.0.1833" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffa4818e929 code=0x0
[  693.722084][    C1] vkms_vblank_simulate: vblank timer overrun
[  693.747181][ T5895] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[  694.329622][ T5895] usb 3-1: Using ep0 maxpacket: 32
[  695.363538][ T5895] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  695.432242][ T5895] usb 3-1: config 0 has no interface number 0
[  695.481422][   T24] usb 2-1: USB disconnect, device number 53
[  695.481472][    C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  695.495685][    C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  695.516107][ T5895] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  695.534766][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  695.553086][ T5895] usb 3-1: Product: syz
[  695.563205][ T5895] usb 3-1: Manufacturer: syz
[  695.570018][ T5895] usb 3-1: SerialNumber: syz
[  695.584508][ T5895] usb 3-1: config 0 descriptor??
[  695.597172][ T5858] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[  695.686244][ T5895] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  695.877067][ T5895] usb 3-1: selecting invalid altsetting 1
[  695.894810][ T5895] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  695.915920][ T5895] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  695.946432][T12805] Invalid source name
[  695.951014][ T5895] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  695.959450][T12805] UBIFS error (pid: 12805): cannot open "ubifs", error -22
[  695.971796][ T5895] usb 3-1: media controller created
[  696.034145][ T5895] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  696.038196][ T5858] usb 5-1: Using ep0 maxpacket: 8
[  696.068968][ T5858] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  696.081533][ T5858] usb 5-1: config 179 has no interface number 0
[  696.089024][ T5858] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  696.100599][ T5858] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  696.107415][ T5895] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  696.111957][ T5858] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  696.139302][ T5895] zl10353_read_register: readreg error (reg=127, ret==-71)
[  696.159735][ T5858] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  696.174702][ T5895] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  696.184778][ T5858] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  696.285595][ T5858] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  696.291422][ T5895] usb 3-1: USB disconnect, device number 58
[  696.567201][ T5858] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  696.600781][T12793] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  696.777164][  T917] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  696.861929][ T5858] usb 5-1: USB disconnect, device number 62
[  696.861979][    C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  696.876205][    C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  696.888727][T12821] Invalid source name
[  696.892727][T12821] UBIFS error (pid: 12821): cannot open "ubifs", error -22
[  696.971318][  T917] usb 4-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55
[  697.031489][  T917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  697.064044][  T917] usb 4-1: Product: syz
[  697.079316][  T917] usb 4-1: Manufacturer: syz
[  697.083959][  T917] usb 4-1: SerialNumber: syz
[  697.105528][  T917] usb 4-1: config 0 descriptor??
[  697.114359][  T917] gspca_main: sonixb-2.14.0 probing 0c45:608f
[  697.679856][ T5895] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[  697.820049][  T917] sonixb 4-1:0.0: Error reading register 00: -110
[  697.867263][ T5895] usb 5-1: Using ep0 maxpacket: 8
[  697.891842][ T5895] usb 5-1: unable to get BOS descriptor or descriptor too short
[  698.311564][ T5895] usb 5-1: config 1 interface 0 altsetting 129 bulk endpoint 0x82 has invalid maxpacket 32
[  698.375060][T12810] erofs (device nullb0): cannot find valid erofs superblock
[  698.385773][  T917] usb 4-1: USB disconnect, device number 43
[  698.394390][ T5895] usb 5-1: config 1 interface 0 altsetting 129 bulk endpoint 0x3 has invalid maxpacket 1023
[  698.410537][ T5895] usb 5-1: config 1 interface 0 has no altsetting 0
[  698.448893][ T5895] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  698.473148][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  698.491428][ T5895] usb 5-1: Product: syz
[  698.495626][ T5895] usb 5-1: Manufacturer: syz
[  698.510467][ T5895] usb 5-1: SerialNumber: syz
[  698.562421][T12826] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  698.571292][T12826] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  698.575053][   T30] audit: type=1400 audit(1751010522.471:670): avc:  denied  { map } for  pid=12834 comm="syz.1.1847" path="/dev/loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  698.883281][   T30] audit: type=1400 audit(1751010522.481:671): avc:  denied  { execute } for  pid=12834 comm="syz.1.1847" path="/dev/loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  698.994129][T12826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  699.267382][T12826] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  699.513024][ T5895] usb 5-1: bad CDC descriptors
[  699.524865][ T5895] usb 5-1: USB disconnect, device number 63
[  700.761757][   T30] audit: type=1400 audit(1751010524.671:672): avc:  denied  { append } for  pid=12870 comm="syz.4.1857" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  701.742557][T12882] fuse: Bad value for 'fd'
[  701.750966][T12883] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  701.930388][T12888] loop8: detected capacity change from 0 to 7
[  702.291686][    C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  702.300889][    C0] Buffer I/O error on dev loop8, logical block 0, async page read
[  702.307365][T12892] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9)
[  702.315208][T12892] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  702.324590][    C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  702.333793][    C0] Buffer I/O error on dev loop8, logical block 0, async page read
[  702.449225][T12892] vhci_hcd vhci_hcd.0: Device attached
[  702.458898][    C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  702.468218][    C1] Buffer I/O error on dev loop8, logical block 0, async page read
[  702.476745][    C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  702.485967][    C1] Buffer I/O error on dev loop8, logical block 0, async page read
[  702.687064][ T5895] usb 33-1: new high-speed USB device number 3 using vhci_hcd
[  702.689022][    C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  702.703686][    C0] Buffer I/O error on dev loop8, logical block 0, async page read
[  702.719201][    C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  702.728413][    C0] Buffer I/O error on dev loop8, logical block 0, async page read
[  702.790754][    C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  702.799927][    C0] Buffer I/O error on dev loop8, logical block 0, async page read
[  702.807761][T12888] ldm_validate_partition_table(): Disk read failed.
[  702.817837][    C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  702.826968][    C0] Buffer I/O error on dev loop8, logical block 0, async page read
[  702.835214][    C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  702.844327][    C0] Buffer I/O error on dev loop8, logical block 0, async page read
[  702.855121][    C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  702.864345][    C1] Buffer I/O error on dev loop8, logical block 0, async page read
[  702.871031][T12901] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  702.887112][T12888] Dev loop8: unable to read RDB block 0
[  702.902395][T12888]  loop8: unable to read partition table
[  702.910134][T12888] loop8: partition table beyond EOD, truncated
[  702.922471][T12888] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5)
[  703.295730][T12893] vhci_hcd: connection reset by peer
[  703.562255][   T13] vhci_hcd: stop threads
[  703.603379][   T13] vhci_hcd: release socket
[  703.608170][   T13] vhci_hcd: disconnect device
[  704.611026][T12914] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1868'.
[  704.799646][   T24] libceph: connect (1)[c::]:6789 error -101
[  704.805797][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  704.811068][ T5858] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  704.852571][T12925] vxfs: WRONG superblock magic 00000000 at 1
[  704.860730][T12925] vxfs: WRONG superblock magic 00000000 at 8
[  704.867351][T12925] vxfs: can't find superblock.
[  704.977087][ T5858] usb 4-1: Using ep0 maxpacket: 8
[  705.043133][   T30] audit: type=1400 audit(1751010528.951:673): avc:  denied  { listen } for  pid=12926 comm="syz.2.1871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  705.107290][   T24] libceph: connect (1)[c::]:6789 error -101
[  705.238413][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  705.360953][T12922] ceph: No mds server is up or the cluster is laggy
[  705.534927][ T5858] usb 4-1: unable to get BOS descriptor or descriptor too short
[  705.544059][ T5858] usb 4-1: config 1 interface 0 altsetting 129 bulk endpoint 0x82 has invalid maxpacket 32
[  705.554273][ T5858] usb 4-1: config 1 interface 0 altsetting 129 bulk endpoint 0x3 has invalid maxpacket 1023
[  705.564557][ T5858] usb 4-1: config 1 interface 0 has no altsetting 0
[  705.575040][ T5858] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  705.584219][ T5858] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  705.592610][ T5858] usb 4-1: Product: syz
[  705.597547][ T5858] usb 4-1: Manufacturer: syz
[  705.602247][ T5858] usb 4-1: SerialNumber: syz
[  705.609784][T12913] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  705.617594][T12913] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  705.859271][T12913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  705.879081][T12913] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  705.908297][ T5858] usb 4-1: bad CDC descriptors
[  706.013653][ T5858] usb 4-1: USB disconnect, device number 44
[  706.112543][T12949] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7)
[  706.119068][T12949] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  706.148507][T12949] vhci_hcd vhci_hcd.0: Device attached
[  706.999839][T12954] vhci_hcd: connection closed
[  707.026475][ T5976] vhci_hcd: stop threads
[  707.046784][ T5976] vhci_hcd: release socket
[  707.058317][ T5976] vhci_hcd: disconnect device
[  708.107451][ T5895] vhci_hcd: vhci_device speed not set
[  708.347138][   T24] usb 4-1: new full-speed USB device number 45 using dummy_hcd
[  708.588316][   T24] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  708.596555][   T24] usb 4-1: config 0 has no interface number 0
[  708.612014][   T24] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  708.692453][T12976] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  709.218721][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  709.265934][   T30] audit: type=1326 audit(1751010533.171:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12981 comm="syz.4.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77558e929 code=0x7ffc0000
[  709.289342][    C0] vkms_vblank_simulate: vblank timer overrun
[  709.432078][   T30] audit: type=1326 audit(1751010533.171:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12981 comm="syz.4.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77558e929 code=0x7ffc0000
[  709.455500][    C0] vkms_vblank_simulate: vblank timer overrun
[  709.660643][  T917] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[  709.700820][   T30] audit: type=1326 audit(1751010533.241:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12981 comm="syz.4.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc77558e929 code=0x7ffc0000
[  709.724141][    C0] vkms_vblank_simulate: vblank timer overrun
[  710.183566][   T30] audit: type=1326 audit(1751010533.241:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12981 comm="syz.4.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77558e929 code=0x7ffc0000
[  710.206971][    C0] vkms_vblank_simulate: vblank timer overrun
[  710.248587][   T30] audit: type=1326 audit(1751010533.241:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12981 comm="syz.4.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77558e929 code=0x7ffc0000
[  710.292001][   T30] audit: type=1326 audit(1751010533.251:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12981 comm="syz.4.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc77558e929 code=0x7ffc0000
[  710.294614][  T917] usb 5-1: config 0 has an invalid interface number: 44 but max is 0
[  710.336361][   T24] usb 4-1: config 0 descriptor??
[  710.349539][   T24] usb 4-1: selecting invalid altsetting 1
[  710.374394][   T24] dvb_ttusb_budget: ttusb_init_controller: error
[  710.389907][   T30] audit: type=1326 audit(1751010533.251:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12981 comm="syz.4.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77558e929 code=0x7ffc0000
[  710.414376][   T24] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  710.442329][  T917] usb 5-1: config 0 has no interface number 0
[  710.478604][   T30] audit: type=1326 audit(1751010533.251:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12981 comm="syz.4.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77558e929 code=0x7ffc0000
[  710.511637][   T24] DVB: Unable to find symbol cx22700_attach()
[  710.647567][   T30] audit: type=1326 audit(1751010533.271:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12981 comm="syz.4.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc77558e929 code=0x7ffc0000
[  710.709834][   T24] DVB: Unable to find symbol tda10046_attach()
[  710.786741][T12996] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  711.235548][T12989] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  711.242119][T12989] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  711.249995][   T24] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  711.338852][   T30] audit: type=1326 audit(1751010533.271:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12981 comm="syz.4.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77558e929 code=0x7ffc0000
[  711.385411][   T30] audit: type=1326 audit(1751010533.271:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12981 comm="syz.4.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77558e929 code=0x7ffc0000
[  711.405081][  T917] usb 5-1: New USB device found, idVendor=04cb, idProduct=012d, bcdDevice=aa.5d
[  711.410039][T12989] vhci_hcd vhci_hcd.0: Device attached
[  711.435847][   T30] audit: type=1326 audit(1751010533.281:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12981 comm="syz.4.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc77558d290 code=0x7ffc0000
[  711.459318][T12992] vhci_hcd: connection closed
[  711.459620][  T917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  711.477250][  T917] usb 5-1: Product: syz
[  711.481489][  T917] usb 5-1: Manufacturer: syz
[  711.486097][  T917] usb 5-1: SerialNumber: syz
[  711.491338][ T6038] vhci_hcd: stop threads
[  711.508611][ T6038] vhci_hcd: release socket
[  711.513068][ T6038] vhci_hcd: disconnect device
[  711.517310][T12999] FAULT_INJECTION: forcing a failure.
[  711.517310][T12999] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  711.519730][  T917] usb 5-1: config 0 descriptor??
[  711.545939][   T30] audit: type=1326 audit(1751010533.281:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12981 comm="syz.4.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc77558e52b code=0x7ffc0000
[  711.546092][T12999] CPU: 0 UID: 0 PID: 12999 Comm: syz.0.1888 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) 
[  711.546114][T12999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  711.546123][T12999] Call Trace:
[  711.546128][T12999]  <TASK>
[  711.546134][T12999]  dump_stack_lvl+0x16c/0x1f0
[  711.546165][T12999]  should_fail_ex+0x512/0x640
[  711.546189][T12999]  _copy_to_user+0x32/0xd0
[  711.546212][T12999]  simple_read_from_buffer+0xcb/0x170
[  711.546235][T12999]  proc_fail_nth_read+0x197/0x270
[  711.546255][T12999]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  711.546275][T12999]  ? rw_verify_area+0xcf/0x680
[  711.546293][T12999]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  711.546312][T12999]  vfs_read+0x1e1/0xc60
[  711.546333][T12999]  ? __pfx___mutex_lock+0x10/0x10
[  711.546356][T12999]  ? __pfx_vfs_read+0x10/0x10
[  711.546380][T12999]  ? __fget_files+0x20e/0x3c0
[  711.546406][T12999]  ksys_read+0x12a/0x250
[  711.546424][T12999]  ? __pfx_ksys_read+0x10/0x10
[  711.546449][T12999]  do_syscall_64+0xcd/0x4c0
[  711.546498][T12999]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  711.546513][T12999] RIP: 0033:0x7ffa4818d33c
[  711.546526][T12999] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  711.546541][T12999] RSP: 002b:00007ffa48fc7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  711.546556][T12999] RAX: ffffffffffffffda RBX: 00007ffa483b5fa0 RCX: 00007ffa4818d33c
[  711.546566][T12999] RDX: 000000000000000f RSI: 00007ffa48fc70a0 RDI: 0000000000000004
[  711.546575][T12999] RBP: 00007ffa48fc7090 R08: 0000000000000000 R09: 0000000000000000
[  711.546584][T12999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  711.546594][T12999] R13: 0000000000000000 R14: 00007ffa483b5fa0 R15: 00007ffd9528a098
[  711.546614][T12999]  </TASK>
[  711.666102][  T917] gspca_main: finepix-2.14.0 probing 04cb:012d
[  711.774661][T13001] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1889'.
[  711.982984][  T917] usb 5-1: USB disconnect, device number 64
[  712.343807][ T5859] usb 4-1: USB disconnect, device number 45
[  712.946758][T13022] rdma_rxe: rxe_newlink: failed to add vxcan1
[  713.009153][T13024] Invalid source name
[  713.013291][T13024] UBIFS error (pid: 13024): cannot open "ubifs", error -22
[  713.052348][T13023] overlayfs: missing 'lowerdir'
[  713.756240][T13041] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1902'.
[  713.769355][T13041] netlink: 'syz.0.1902': attribute type 5 has an invalid length.
[  713.839890][T13041] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  713.849596][T13041] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  713.859062][T13041] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  713.867892][T13041] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  713.889096][T13041] vxlan0: entered promiscuous mode
[  714.281205][T13048] vxcan1 speed is unknown, defaulting to 1000
[  714.318942][T13066] vxfs: WRONG superblock magic 00000000 at 1
[  714.328737][T13064] Invalid ELF header magic: != ELF
[  714.346690][T13066] vxfs: WRONG superblock magic 00000000 at 8
[  714.362715][T13066] vxfs: can't find superblock.
[  714.653135][T13072] netlink: 'syz.1.1911': attribute type 1 has an invalid length.
[  714.826005][T13060] ceph: No mds server is up or the cluster is laggy
[  714.847287][  T917] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[  715.067188][  T917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  715.123046][  T917] usb 5-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00
[  715.175978][  T917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  715.189332][T13080] bond0: entered promiscuous mode
[  715.205453][T13080] bond_slave_0: entered promiscuous mode
[  715.207600][  T917] usb 5-1: config 0 descriptor??
[  715.226813][T13080] bond_slave_1: entered promiscuous mode
[  715.252962][T13080] bond0: left promiscuous mode
[  715.263499][T13080] bond_slave_0: left promiscuous mode
[  715.275857][T13080] bond_slave_1: left promiscuous mode
[  715.299304][T13048] lo speed is unknown, defaulting to 1000
[  716.347859][  T917] usbhid 5-1:0.0: can't add hid device: -71
[  716.367127][  T917] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  716.406410][  T917] usb 5-1: USB disconnect, device number 65
[  717.968365][T13113] gfs2: not a GFS2 filesystem
[  719.247958][T13130] rdma_rxe: rxe_newlink: failed to add vxcan1
[  719.491371][ T5859] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  719.687167][   T24] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[  720.162401][ T5859] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  720.178375][ T5859] usb 2-1: New USB device found, idVendor=046d, idProduct=c51b, bcdDevice= 0.00
[  720.188785][ T5859] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  720.198257][ T5859] usb 2-1: config 0 descriptor??
[  720.305257][   T24] usb 3-1: Using ep0 maxpacket: 8
[  720.700585][T13147] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1926'.
[  721.227203][   T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  721.245088][   T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89
[  721.256661][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  721.267637][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024
[  721.278891][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  721.288655][   T24] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  721.405087][   T24] usb 3-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[  721.415702][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  721.423803][   T24] usb 3-1: Product: syz
[  721.433780][   T24] usb 3-1: Manufacturer: syz
[  721.444713][   T24] usb 3-1: SerialNumber: syz
[  721.459979][   T24] usb 3-1: config 0 descriptor??
[  721.472914][T13132] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  721.483307][   T24] ati_remote 3-1:0.0: ati_remote_probe: Unexpected endpoint_out
[  721.703747][  T917] usb 3-1: USB disconnect, device number 59
[  721.838954][T13156] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  722.136702][T13161] netlink: 'syz.0.1936': attribute type 1 has an invalid length.
[  722.362768][ T5859] usb 2-1: string descriptor 0 read error: -71
[  722.528347][T13170] trusted_key: encrypted_key: key trusted:‘8s‰X not found
[  722.673208][ T5859] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  722.699173][ T5859] usb 2-1: USB disconnect, device number 54
[  723.075191][T13180] rdma_rxe: rxe_newlink: failed to add vxcan1
[  723.170075][T13183] FAULT_INJECTION: forcing a failure.
[  723.170075][T13183] name failslab, interval 1, probability 0, space 0, times 0
[  723.183027][T13183] CPU: 0 UID: 0 PID: 13183 Comm: syz.0.1941 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) 
[  723.183052][T13183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  723.183062][T13183] Call Trace:
[  723.183069][T13183]  <TASK>
[  723.183076][T13183]  dump_stack_lvl+0x16c/0x1f0
[  723.183104][T13183]  should_fail_ex+0x512/0x640
[  723.183127][T13183]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  723.183152][T13183]  should_failslab+0xc2/0x120
[  723.183177][T13183]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  723.183197][T13183]  ? fput+0x70/0xf0
[  723.183221][T13183]  ? getname_flags.part.0+0x4c/0x550
[  723.183243][T13183]  getname_flags.part.0+0x4c/0x550
[  723.183264][T13183]  __x64_sys_unlink+0xb0/0x110
[  723.183288][T13183]  do_syscall_64+0xcd/0x4c0
[  723.183314][T13183]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  723.183332][T13183] RIP: 0033:0x7ffa4818e929
[  723.183345][T13183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  723.183362][T13183] RSP: 002b:00007ffa48f85038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057
[  723.183379][T13183] RAX: ffffffffffffffda RBX: 00007ffa483b6160 RCX: 00007ffa4818e929
[  723.183390][T13183] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000280
[  723.183400][T13183] RBP: 00007ffa48f85090 R08: 0000000000000000 R09: 0000000000000000
[  723.183410][T13183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  723.183420][T13183] R13: 0000000000000000 R14: 00007ffa483b6160 R15: 00007ffd9528a098
[  723.183443][T13183]  </TASK>
[  723.649855][   T30] kauditd_printk_skb: 117 callbacks suppressed
[  723.649873][   T30] audit: type=1800 audit(1751010547.561:804): pid=13188 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1944" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0
[  724.540286][T13192] siw: device registration error -23
[  725.632213][T13206] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  725.718911][   T24] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[  725.897091][   T24] usb 3-1: Using ep0 maxpacket: 32
[  725.903756][   T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  725.944732][   T24] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  725.975885][   T24] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  725.984590][   T24] usb 3-1: Product: syz
[  725.984643][T13213] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  725.988934][   T24] usb 3-1: Manufacturer: syz
[  726.001974][ T5859] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[  726.022256][   T24] usb 3-1: SerialNumber: syz
[  726.038764][   T24] usb 3-1: config 0 descriptor??
[  726.057102][T13204] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  726.065336][   T24] hub 3-1:0.0: bad descriptor, ignoring hub
[  726.107053][   T24] hub 3-1:0.0: probe with driver hub failed with error -5
[  726.157148][ T5859] usb 5-1: Using ep0 maxpacket: 8
[  726.261279][T13217] netlink: 'syz.0.1952': attribute type 1 has an invalid length.
[  726.467790][ T5859] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  726.469364][T13204] netlink: 'syz.2.1948': attribute type 83 has an invalid length.
[  726.532565][ T5859] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89
[  726.585167][ T5859] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  726.626656][ T5859] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024
[  726.647029][ T5859] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  726.669840][T13221] bpq0: left promiscuous mode
[  726.687088][ T5859] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  726.723040][ T5859] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[  726.757022][ T5859] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  726.800633][ T5859] usb 5-1: Product: syz
[  726.807152][ T5859] usb 5-1: Manufacturer: syz
[  726.811813][ T5859] usb 5-1: SerialNumber: syz
[  726.876912][ T5859] usb 5-1: config 0 descriptor??
[  726.894353][T13210] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  726.919905][ T5859] ati_remote 5-1:0.0: ati_remote_probe: Unexpected endpoint_out
[  727.161645][  T917] usb 5-1: USB disconnect, device number 66
[  728.015117][   T30] audit: type=1326 audit(1751010551.141:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13231 comm="syz.3.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80e218e929 code=0x7ffc0000
[  728.167299][   T30] audit: type=1326 audit(1751010551.141:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13231 comm="syz.3.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80e218e929 code=0x7ffc0000
[  728.344760][   T30] audit: type=1326 audit(1751010551.141:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13231 comm="syz.3.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f80e218e929 code=0x7ffc0000
[  728.383833][   T30] audit: type=1326 audit(1751010551.141:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13231 comm="syz.3.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80e218e929 code=0x7ffc0000
[  728.807386][T13245] FAULT_INJECTION: forcing a failure.
[  728.807386][T13245] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  728.818008][   T30] audit: type=1326 audit(1751010551.141:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13231 comm="syz.3.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f80e218e929 code=0x7ffc0000
[  728.848611][T13242] program syz.2.1957 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  728.941672][   T30] audit: type=1326 audit(1751010551.141:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13231 comm="syz.3.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80e218e929 code=0x7ffc0000
[  728.947024][T13245] CPU: 0 UID: 0 PID: 13245 Comm: syz.3.1959 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) 
[  728.947050][T13245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  728.947059][T13245] Call Trace:
[  728.947064][T13245]  <TASK>
[  728.947070][T13245]  dump_stack_lvl+0x16c/0x1f0
[  728.947097][T13245]  should_fail_ex+0x512/0x640
[  728.947120][T13245]  _copy_from_iter+0x29f/0x16f0
[  728.947148][T13245]  ? __pfx__copy_from_iter+0x10/0x10
[  728.947173][T13245]  ? __pfx___might_resched+0x10/0x10
[  728.947191][T13245]  ? iov_iter_revert+0x264/0x5a0
[  728.947214][T13245]  file_tty_write.constprop.0+0x488/0x9b0
[  728.947243][T13245]  vfs_write+0x6c4/0x1150
[  728.947263][T13245]  ? __pfx_tty_write+0x10/0x10
[  728.947290][T13245]  ? __pfx_vfs_write+0x10/0x10
[  728.947307][T13245]  ? find_held_lock+0x2b/0x80
[  728.947340][T13245]  ksys_write+0x12a/0x250
[  728.947359][T13245]  ? __pfx_ksys_write+0x10/0x10
[  728.947384][T13245]  do_syscall_64+0xcd/0x4c0
[  728.947408][T13245]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  728.947423][T13245] RIP: 0033:0x7f80e218e929
[  728.947436][T13245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  728.947452][T13245] RSP: 002b:00007f80e3061038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  728.947468][T13245] RAX: ffffffffffffffda RBX: 00007f80e23b5fa0 RCX: 00007f80e218e929
[  728.947477][T13245] RDX: 000000000000ff2e RSI: 0000200000000000 RDI: 0000000000000003
[  728.947486][T13245] RBP: 00007f80e3061090 R08: 0000000000000000 R09: 0000000000000000
[  728.947495][T13245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  728.947504][T13245] R13: 0000000000000000 R14: 00007f80e23b5fa0 R15: 00007ffe8a3ebf08
[  728.947525][T13245]  </TASK>
[  729.451515][T13255] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  729.531321][   T30] audit: type=1326 audit(1751010551.141:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13231 comm="syz.3.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80e218e929 code=0x7ffc0000
[  729.582715][   T30] audit: type=1326 audit(1751010551.141:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13231 comm="syz.3.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f80e218e929 code=0x7ffc0000
[  729.606373][   T30] audit: type=1326 audit(1751010551.141:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13231 comm="syz.3.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80e218e929 code=0x7ffc0000
[  729.669789][   T30] audit: type=1326 audit(1751010551.141:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13231 comm="syz.3.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f80e218e929 code=0x7ffc0000
[  729.699538][T13261] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  729.828268][   T30] audit: type=1326 audit(1751010551.141:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13231 comm="syz.3.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80e218e929 code=0x7ffc0000
[  729.923411][   T30] audit: type=1326 audit(1751010551.151:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13231 comm="syz.3.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f80e218e929 code=0x7ffc0000
[  731.295804][   T30] audit: type=1326 audit(1751010551.151:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13231 comm="syz.3.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80e218e929 code=0x7ffc0000
[  731.358042][   T30] audit: type=1326 audit(1751010551.151:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13231 comm="syz.3.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80e218e929 code=0x7ffc0000
[  733.937076][ T5859] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  734.343320][T12109] Bluetooth: hci5: Frame reassembly failed (-84)
[  734.363825][   T30] kauditd_printk_skb: 8 callbacks suppressed
[  734.363840][   T30] audit: type=1400 audit(1751010558.271:827): avc:  denied  { write } for  pid=13292 comm="syz.2.1972" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1
[  734.423894][T12109] Bluetooth: hci5: Frame reassembly failed (-84)
[  734.489128][ T5859] usb 4-1: Using ep0 maxpacket: 8
[  734.608324][   T30] audit: type=1400 audit(1751010558.381:828): avc:  denied  { bind } for  pid=13292 comm="syz.2.1972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  734.637664][ T5859] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  734.649871][ T5859] usb 4-1: config 179 has no interface number 0
[  734.660233][ T5859] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  735.223401][ T5859] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  735.242994][ T5859] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  735.324154][ T5859] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  735.338139][ T5859] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  735.366936][ T5859] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  735.477561][  T917] usb 3-1: USB disconnect, device number 60
[  735.567023][ T5859] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  735.597160][ T5859] usb 4-1: can't set config #179, error -71
[  735.845642][T13312] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1975'.
[  735.854927][T13312] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1975'.
[  736.012940][T13313] netlink: 'syz.3.1975': attribute type 32 has an invalid length.
[  736.103458][ T5859] usb 4-1: USB disconnect, device number 46
[  736.183286][T13311] input: syz1 as /devices/virtual/input/input59
[  736.446689][ T5135] Bluetooth: hci5: command 0x1003 tx timeout
[  736.453949][ T5815] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  736.663937][T13325] FAULT_INJECTION: forcing a failure.
[  736.663937][T13325] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  736.687231][   T24] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[  736.762881][T13325] CPU: 1 UID: 0 PID: 13325 Comm: syz.0.1980 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) 
[  736.762909][T13325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  736.762918][T13325] Call Trace:
[  736.762924][T13325]  <TASK>
[  736.762930][T13325]  dump_stack_lvl+0x16c/0x1f0
[  736.762959][T13325]  should_fail_ex+0x512/0x640
[  736.762983][T13325]  strncpy_from_user+0x3b/0x2e0
[  736.763007][T13325]  getname_flags.part.0+0x8f/0x550
[  736.763031][T13325]  getname_flags+0x93/0xf0
[  736.763051][T13325]  __x64_sys_acct+0x75/0x230
[  736.763067][T13325]  ? lockdep_hardirqs_on+0x7c/0x110
[  736.763089][T13325]  do_syscall_64+0xcd/0x4c0
[  736.763114][T13325]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  736.763131][T13325] RIP: 0033:0x7ffa4818e929
[  736.763145][T13325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  736.763167][T13325] RSP: 002b:00007ffa48fc7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3
[  736.763184][T13325] RAX: ffffffffffffffda RBX: 00007ffa483b5fa0 RCX: 00007ffa4818e929
[  736.763195][T13325] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000001c0
[  736.763205][T13325] RBP: 00007ffa48fc7090 R08: 0000000000000000 R09: 0000000000000000
[  736.763216][T13325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  736.763226][T13325] R13: 0000000000000000 R14: 00007ffa483b5fa0 R15: 00007ffd9528a098
[  736.763248][T13325]  </TASK>
[  736.957983][T13322] input input60: cannot allocate more than FF_MAX_EFFECTS effects
[  737.107530][   T24] usb 5-1: Using ep0 maxpacket: 16
[  737.114901][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  737.129617][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  737.142025][   T24] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  737.154842][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  737.178352][   T24] usb 5-1: config 0 descriptor??
[  737.752972][T13338] kernel profiling enabled (shift: 17)
[  737.790131][T13338] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=49 sclass=netlink_audit_socket pid=13338 comm=syz.0.1984
[  738.467815][   T24] hid-multitouch 0003:1FD2:6007.000B: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0
[  738.839365][T13341] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  738.840434][   T30] audit: type=1400 audit(1751010562.751:829): avc:  denied  { name_bind 0x1000000 } for  pid=13341 comm="syz.3.1988" path="socket:[37918]" dev="sockfs" ino=37918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  738.876878][T13318] netlink: 'syz.4.1977': attribute type 1 has an invalid length.
[  739.117014][T13349] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1987'.
[  739.794339][T13353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  739.817033][T13353] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  739.941113][   T24] usb 5-1: reset high-speed USB device number 67 using dummy_hcd
[  741.470657][T13377] Invalid source name
[  741.484883][T13377] UBIFS error (pid: 13377): cannot open "ubifs", error -22
[  742.266317][T13394] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2000'.
[  742.726803][ T5859] usb 5-1: USB disconnect, device number 67
[  742.949884][T13399] ==================================================================
[  742.957985][T13399] BUG: KASAN: slab-use-after-free in rose_get_neigh+0x549/0x640
[  742.965630][T13399] Read of size 1 at addr ffff888078700030 by task syz.1.2001/13399
[  742.973514][T13399] 
[  742.975839][T13399] CPU: 0 UID: 0 PID: 13399 Comm: syz.1.2001 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) 
[  742.975866][T13399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  742.975877][T13399] Call Trace:
[  742.975886][T13399]  <TASK>
[  742.975894][T13399]  dump_stack_lvl+0x116/0x1f0
[  742.975925][T13399]  print_report+0xcd/0x680
[  742.975951][T13399]  ? __virt_addr_valid+0x81/0x610
[  742.975974][T13399]  ? __phys_addr+0xe8/0x180
[  742.975996][T13399]  ? rose_get_neigh+0x549/0x640
[  742.976019][T13399]  kasan_report+0xe0/0x110
[  742.976045][T13399]  ? rose_get_neigh+0x549/0x640
[  742.976071][T13399]  rose_get_neigh+0x549/0x640
[  742.976095][T13399]  rose_connect+0x2d4/0x1540
[  742.976115][T13399]  ? __pfx_rose_connect+0x10/0x10
[  742.976133][T13399]  ? selinux_netlbl_socket_connect+0x30/0x40
[  742.976158][T13399]  ? rcu_is_watching+0x12/0xc0
[  742.976181][T13399]  ? __local_bh_enable_ip+0xa4/0x120
[  742.976203][T13399]  ? lockdep_hardirqs_on+0x7c/0x110
[  742.976228][T13399]  ? selinux_netlbl_socket_connect+0x30/0x40
[  742.976251][T13399]  ? __local_bh_enable_ip+0xa4/0x120
[  742.976273][T13399]  ? selinux_netlbl_socket_connect+0x30/0x40
[  742.976297][T13399]  ? selinux_socket_connect+0x6b/0x80
[  742.976320][T13399]  ? __pfx_rose_connect+0x10/0x10
[  742.976337][T13399]  __sys_connect_file+0x13e/0x1a0
[  742.976366][T13399]  __sys_connect+0x13b/0x160
[  742.976387][T13399]  ? __pfx___sys_connect+0x10/0x10
[  742.976412][T13399]  ? xfd_validate_state+0x61/0x180
[  742.976438][T13399]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[  742.976468][T13399]  __x64_sys_connect+0x72/0xb0
[  742.976489][T13399]  ? lockdep_hardirqs_on+0x7c/0x110
[  742.976513][T13399]  do_syscall_64+0xcd/0x4c0
[  742.976540][T13399]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  742.976560][T13399] RIP: 0033:0x7f275198e929
[  742.976574][T13399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  742.976592][T13399] RSP: 002b:00007f275285c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  742.976610][T13399] RAX: ffffffffffffffda RBX: 00007f2751bb6080 RCX: 00007f275198e929
[  742.976622][T13399] RDX: 0000000000000040 RSI: 00002000000000c0 RDI: 0000000000000006
[  742.976634][T13399] RBP: 00007f2751a10b39 R08: 0000000000000000 R09: 0000000000000000
[  742.976645][T13399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  742.976656][T13399] R13: 0000000000000000 R14: 00007f2751bb6080 R15: 00007ffc09b58108
[  742.976674][T13399]  </TASK>
[  742.976681][T13399] 
[  743.223540][T13399] Allocated by task 10648:
[  743.227953][T13399]  kasan_save_stack+0x33/0x60
[  743.232634][T13399]  kasan_save_track+0x14/0x30
[  743.237310][T13399]  __kasan_kmalloc+0xaa/0xb0
[  743.241899][T13399]  rose_rt_ioctl+0x87e/0x1d40
[  743.246577][T13399]  rose_ioctl+0x64d/0x7d0
[  743.250906][T13399]  sock_do_ioctl+0x118/0x280
[  743.255494][T13399]  sock_ioctl+0x227/0x6b0
[  743.259823][T13399]  __x64_sys_ioctl+0x18b/0x210
[  743.264584][T13399]  do_syscall_64+0xcd/0x4c0
[  743.269089][T13399]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  743.274979][T13399] 
[  743.277293][T13399] Freed by task 13221:
[  743.281352][T13399]  kasan_save_stack+0x33/0x60
[  743.286037][T13399]  kasan_save_track+0x14/0x30
[  743.290714][T13399]  kasan_save_free_info+0x3b/0x60
[  743.295732][T13399]  __kasan_slab_free+0x51/0x70
[  743.300495][T13399]  kfree+0x2b4/0x4d0
[  743.304399][T13399]  rose_remove_neigh+0x25e/0x370
[  743.309336][T13399]  rose_rt_device_down+0x2aa/0x390
[  743.314452][T13399]  rose_device_event+0xfc/0x120
[  743.319300][T13399]  notifier_call_chain+0xb9/0x410
[  743.324330][T13399]  call_netdevice_notifiers_info+0xbe/0x140
[  743.330218][T13399]  __dev_notify_flags+0x1f7/0x2e0
[  743.335244][T13399]  netif_change_flags+0x108/0x160
[  743.340269][T13399]  dev_change_flags+0xba/0x250
[  743.345018][T13399]  dev_ifsioc+0x1498/0x1f70
[  743.349497][T13399]  dev_ioctl+0x223/0x10e0
[  743.353809][T13399]  sock_do_ioctl+0x19d/0x280
[  743.358372][T13399]  sock_ioctl+0x227/0x6b0
[  743.362680][T13399]  __x64_sys_ioctl+0x18b/0x210
[  743.367419][T13399]  do_syscall_64+0xcd/0x4c0
[  743.371922][T13399]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  743.378321][T13399] 
[  743.380623][T13399] The buggy address belongs to the object at ffff888078700000
[  743.380623][T13399]  which belongs to the cache kmalloc-512 of size 512
[  743.394651][T13399] The buggy address is located 48 bytes inside of
[  743.394651][T13399]  freed 512-byte region [ffff888078700000, ffff888078700200)
[  743.408333][T13399] 
[  743.410631][T13399] The buggy address belongs to the physical page:
[  743.417011][T13399] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888078703400 pfn:0x78700
[  743.427043][T13399] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  743.435532][T13399] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff)
[  743.444017][T13399] page_type: f5(slab)
[  743.447974][T13399] raw: 00fff00000000240 ffff88801b841c80 ffffea0001613d10 ffffea000163be10
[  743.456534][T13399] raw: ffff888078703400 000000000010000e 00000000f5000000 0000000000000000
[  743.465094][T13399] head: 00fff00000000240 ffff88801b841c80 ffffea0001613d10 ffffea000163be10
[  743.473739][T13399] head: ffff888078703400 000000000010000e 00000000f5000000 0000000000000000
[  743.482398][T13399] head: 00fff00000000002 ffffea0001e1c001 00000000ffffffff 00000000ffffffff
[  743.491052][T13399] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  743.499693][T13399] page dumped because: kasan: bad access detected
[  743.506074][T13399] page_owner tracks the page as allocated
[  743.511762][T13399] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5198, tgid 5198 (udevadm), ts 23685125303, free_ts 22816283305
[  743.532659][T13399]  post_alloc_hook+0x1c0/0x230
[  743.537402][T13399]  get_page_from_freelist+0x1321/0x3890
[  743.542933][T13399]  __alloc_frozen_pages_noprof+0x261/0x23f0
[  743.548812][T13399]  alloc_pages_mpol+0x1fb/0x550
[  743.553643][T13399]  new_slab+0x23b/0x330
[  743.557775][T13399]  ___slab_alloc+0xd9c/0x1940
[  743.562442][T13399]  __slab_alloc.constprop.0+0x56/0xb0
[  743.567804][T13399]  __kmalloc_cache_noprof+0xfb/0x3e0
[  743.573064][T13399]  kernfs_fop_open+0x244/0xda0
[  743.577816][T13399]  do_dentry_open+0x744/0x1c10
[  743.582559][T13399]  vfs_open+0x82/0x3f0
[  743.586619][T13399]  path_openat+0x1de4/0x2cb0
[  743.591189][T13399]  do_filp_open+0x20b/0x470
[  743.595670][T13399]  do_sys_openat2+0x11b/0x1d0
[  743.600336][T13399]  __x64_sys_openat+0x174/0x210
[  743.605158][T13399]  do_syscall_64+0xcd/0x4c0
[  743.609644][T13399] page last free pid 5187 tgid 5187 stack trace:
[  743.615940][T13399]  __free_frozen_pages+0x7fe/0x1180
[  743.621114][T13399]  __put_partials+0x16d/0x1c0
[  743.625768][T13399]  qlist_free_all+0x4d/0x120
[  743.630334][T13399]  kasan_quarantine_reduce+0x195/0x1e0
[  743.635769][T13399]  __kasan_slab_alloc+0x69/0x90
[  743.640604][T13399]  __kmalloc_noprof+0x1d4/0x510
[  743.645436][T13399]  tomoyo_encode2+0x100/0x3e0
[  743.650111][T13399]  tomoyo_encode+0x29/0x50
[  743.654505][T13399]  tomoyo_path_perm+0x3a5/0x460
[  743.659330][T13399]  tomoyo_path_symlink+0x97/0xe0
[  743.664250][T13399]  security_path_symlink+0x152/0x2e0
[  743.669514][T13399]  do_symlinkat+0x10d/0x310
[  743.674000][T13399]  __x64_sys_symlink+0x75/0x90
[  743.678744][T13399]  do_syscall_64+0xcd/0x4c0
[  743.683228][T13399]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  743.689095][T13399] 
[  743.691393][T13399] Memory state around the buggy address:
[  743.696999][T13399]  ffff8880786fff00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  743.705032][T13399]  ffff8880786fff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  743.713064][T13399] >ffff888078700000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  743.721094][T13399]                                      ^
[  743.726710][T13399]  ffff888078700080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  743.734744][T13399]  ffff888078700100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  743.742775][T13399] ==================================================================
[  743.750836][    C0] vkms_vblank_simulate: vblank timer overrun
[  743.756834][T13399] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  743.764006][T13399] CPU: 0 UID: 0 PID: 13399 Comm: syz.1.2001 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) 
[  743.776041][T13399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  743.786076][T13399] Call Trace:
[  743.789343][T13399]  <TASK>
[  743.792271][T13399]  dump_stack_lvl+0x3d/0x1f0
[  743.796859][T13399]  panic+0x71c/0x800
[  743.800747][T13399]  ? __pfx_panic+0x10/0x10
[  743.805156][T13399]  ? irqentry_exit+0x3b/0x90
[  743.809757][T13399]  ? lockdep_hardirqs_on+0x7c/0x110
[  743.814945][T13399]  ? rose_get_neigh+0x549/0x640
[  743.819800][T13399]  ? rose_get_neigh+0x549/0x640
[  743.824636][T13399]  check_panic_on_warn+0xab/0xb0
[  743.829567][T13399]  end_report+0x107/0x170
[  743.833894][T13399]  kasan_report+0xee/0x110
[  743.838306][T13399]  ? rose_get_neigh+0x549/0x640
[  743.843144][T13399]  rose_get_neigh+0x549/0x640
[  743.847810][T13399]  rose_connect+0x2d4/0x1540
[  743.852387][T13399]  ? __pfx_rose_connect+0x10/0x10
[  743.857393][T13399]  ? selinux_netlbl_socket_connect+0x30/0x40
[  743.863360][T13399]  ? rcu_is_watching+0x12/0xc0
[  743.868114][T13399]  ? __local_bh_enable_ip+0xa4/0x120
[  743.873389][T13399]  ? lockdep_hardirqs_on+0x7c/0x110
[  743.878574][T13399]  ? selinux_netlbl_socket_connect+0x30/0x40
[  743.884543][T13399]  ? __local_bh_enable_ip+0xa4/0x120
[  743.889817][T13399]  ? selinux_netlbl_socket_connect+0x30/0x40
[  743.895787][T13399]  ? selinux_socket_connect+0x6b/0x80
[  743.901147][T13399]  ? __pfx_rose_connect+0x10/0x10
[  743.906152][T13399]  __sys_connect_file+0x13e/0x1a0
[  743.911167][T13399]  __sys_connect+0x13b/0x160
[  743.915742][T13399]  ? __pfx___sys_connect+0x10/0x10
[  743.920842][T13399]  ? xfd_validate_state+0x61/0x180
[  743.925944][T13399]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[  743.931656][T13399]  __x64_sys_connect+0x72/0xb0
[  743.936407][T13399]  ? lockdep_hardirqs_on+0x7c/0x110
[  743.941609][T13399]  do_syscall_64+0xcd/0x4c0
[  743.946106][T13399]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  743.951983][T13399] RIP: 0033:0x7f275198e929
[  743.956385][T13399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  743.975995][T13399] RSP: 002b:00007f275285c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  743.984393][T13399] RAX: ffffffffffffffda RBX: 00007f2751bb6080 RCX: 00007f275198e929
[  743.992347][T13399] RDX: 0000000000000040 RSI: 00002000000000c0 RDI: 0000000000000006
[  744.000304][T13399] RBP: 00007f2751a10b39 R08: 0000000000000000 R09: 0000000000000000
[  744.008260][T13399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  744.016212][T13399] R13: 0000000000000000 R14: 00007f2751bb6080 R15: 00007ffc09b58108
[  744.024173][T13399]  </TASK>
[  744.027373][T13399] Kernel Offset: disabled
[  744.031672][T13399] Rebooting in 86400 seconds..