last executing test programs:

22.187870788s ago: executing program 0 (id=4988):
r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598904004ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dac00000000000000000000002000", "90be8b1c5512406c7f00", [0x4, 0x40000000000002]}})
r2 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x8000)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000480)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x18, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea80000000000000000000000deff0000000000000000000000000000000800", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50)
openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x13, 0x0, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$SIOCRSGL2CALL(r3, 0x89e5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x89}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route(r5, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="04221001000000e9875fb624bedea1ff03c9"], 0x13)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r6, &(0x7f0000000080)='tasks\x00', 0x2, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
r7 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x0, 0x0)
ioctl$SOUND_MIXER_WRITE_VOLUME(r7, 0xc0044d08, &(0x7f0000000040)=0x45)

21.492545075s ago: executing program 0 (id=4990):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8040)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
syz_open_dev$dri(0x0, 0xd21, 0x4000)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_open_dev$usbmon(0x0, 0x0, 0x0)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
r3 = epoll_create(0x3)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0x40000002})
write$P9_RSTATu(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="1e0200000400000005a80000000000000000000000008000000000000000000081030000000000000000000000000003e8001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b92000000b0ff70673effeb09b5351f5b"], 0x21e)
syz_open_dev$vbi(0x0, 0x0, 0x2)
r4 = openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r4, 0x4004510d, &(0x7f0000000000))
ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
gettid()
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r5, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, 0x0}, 0x401}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000340)=""/113, 0x71}, {0x0}, {&(0x7f0000000100)=""/98, 0x62}, {&(0x7f00000003c0)=""/100, 0x64}, {&(0x7f00000006c0)=""/200, 0xc8}, {&(0x7f0000000440)=""/67, 0x43}], 0x9}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x0, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
timer_create(0x2, 0x0, 0x0)
sendfile(r7, r6, &(0x7f0000002080)=0x64, 0x21c)

18.834780211s ago: executing program 0 (id=4994):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8001, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
fspick(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x206, 0x2b4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
socket$nl_route(0x10, 0x3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0)
ioctl$EXT4_IOC_SETFSUUID(r1, 0x4008662c, &(0x7f0000000080)={0x10, 0x0, "338e3468c0ad2a4f4813347ed3e1c0bf"})
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000340)={0x10, 0x30, 0xfa00, {&(0x7f00000002c0), 0x3, {0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2b}}, 0x17ab}}}, 0x38)
close(r1)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)
r4 = creat(&(0x7f0000000300)='./file0\x00', 0xecf86c37d53049cc)
close(r4)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000002ac0)={'syztnl2\x00', &(0x7f0000002a40)={'ip6gre0\x00', 0x0, 0x4, 0x6, 0x8, 0x8, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x700, 0x40, 0x7, 0x10000000}})
sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, 0x0, 0x20004849)
modify_ldt$read(0x0, &(0x7f0000000240)=""/121, 0x79)
read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020)
execve(&(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000540)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y<yN\xfbXh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab7P\xd6\xcb\x02\xfe2~W\xd9\xad\x80\xd9!\x89%\xb80\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\xb9\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7\x87C\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000a40)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y<yN\xfbXh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab7P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb80\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\xb9\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7\x87C\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']})

17.423634206s ago: executing program 0 (id=4996):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="bc", 0x1}], 0x1}}], 0x1, 0x8011)
recvmmsg(r0, &(0x7f000000a400)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001c80)=""/4096, 0x1000}], 0x1}, 0x40}], 0x1, 0x10120, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0)
read$FUSE(r1, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, &(0x7f0000002d80))
socket$inet6_tcp(0xa, 0x1, 0x0)
kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x31)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r6, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00')
read$FUSE(r7, &(0x7f0000000000)={0x2020}, 0x96)
close(r6)
read$FUSE(r7, &(0x7f0000004340)={0x2020}, 0x2020)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000140)='fib_table_lookup\x00', r5, 0x0, 0x417}, 0x18)
r8 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r8, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000002d40)=[{&(0x7f0000000240)="15", 0x1}, {&(0x7f0000002c80)="c4f84058a7d57b4bda8859efdcefd5d65958ef17b3a51aca6c9c40720cbed4e89246ad85048bc835137deef231dbbd256ab8832a804d2ff0f5daf0c5192b32dcf3e355afe47acd709f6119642763b723f06a2535717182996ce19a8e33b3b34fe700492d2e24f0c8961e3d2befd0876452f5d64ebf7ddea6e9ba57eecfbcf0c2e153c055b650a9b5f1b8f9c56bfc636354", 0x91}], 0x2}, 0x4000080)

16.486787669s ago: executing program 0 (id=5001):
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x103182, 0x0)
socket(0x1, 0x1, 0x0)
ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89a0, &(0x7f0000000200)={@rand_addr=0x64010100, @empty})
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220)
setpgid(0x0, r0)
open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x901)
mount(0x0, 0x0, 0x0, 0x2000, 0x0)
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0)
epoll_create(0x2)
syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00')
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=<r2=>0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000a3348484bb8df93fe521fe1040f858fb0192fdb61165ae96e54e95f986e1991666a28ea84021377f854fb46b740fc923244159bca8f8f9df6582f8c01dc05733e2e55fc52557ead879afe7c49146aea5741c8105fe87b521f427bf000000000000000000000000000000000000000000000000000000000000004f701390124865885190ca06cb4f206ba657fc27bf050e5038735848f0cf75411468e4dfe3b6b09f3604b8e53e9e597e20f046c1cd9dcbced8b86658007017e0"], 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="0100000000000300"/28], 0x50)
pread64(r1, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009)

15.709765511s ago: executing program 0 (id=5003):
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil)
brk(0x200000ffc000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0)
r2 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x100, 0x1}, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000002a00)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffa, 0x0, 0x4)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3})
io_uring_enter(r2, 0xdb4, 0x0, 0x0, 0x0, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, 0x0)
syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011003000000202505a8a44000010203010902240001010140f1090400260207010210090501024000049e05766c55"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0})
r5 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="0000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200ac1e00010800074000"/100], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000240001012bbd7000fcffffff60e5bc800800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x404c957}, 0x48050)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x404c031}, 0x404a05c)

11.716455424s ago: executing program 4 (id=5012):
set_mempolicy(0x3, &(0x7f0000000040)=0xf, 0x6)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x2)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
socket$xdp(0x2c, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48})
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc})
add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d80000001b0001000000000000000000fc00000000000000", @ANYRES32=0x0, @ANYBLOB], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000480), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb78a405e0483020b990102030109022400010000000009040000025c291d0009050900000000000009050b01"], 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x6a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x58, 0x1, 0x1, 0x70, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xfd, 0x3, 0x2, 0x6, 0x0, 0x5, {{0xb, 0x24, 0x6, 0x0, 0x0, "d18b1893e78c"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x3, 0x8, 0x86}, [@ncm={0x6, 0x24, 0x1a, 0x4}, @country_functional={0x8, 0x24, 0x7, 0x5, 0x1, [0x8]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x7, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0x0, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x3, 0x0, 0x6}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x5, 0x6, 0x0, 0x20, 0x8}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x448}}, {0xc5, &(0x7f0000000180)=@string={0xc5, 0x3, "588546a199f06af82b48779416754070e57616d2832e9a2c158ae6a7d08a98d24ae5bb9276a4f1aa12eaf19baf7f115bcf6c71122ef5749b74f0061d1758244ab672d66070fcb29545f3bbc2a8b994f41ab16d91d5de68af6f8005b6571091c9aa7a13d566580548e2fee7c8f77e50e071d86c6936480c4860ea9af5f169af2be94a93e1efc87a42937c48822a9d9098e65133d93aeb42e2c1c62f62d7a111da423e1f25fda958d801f047aa589272aac5bda09451fda6e80594dbe6c9f41eca77d8bb"}}, {0xa7, &(0x7f0000000280)=ANY=[@ANYBLOB="a70340545d1bbd8cc45bfeef280980c0c2a87edca678298bbca8df31bff6eace966816c0c1e3a57e01e3e7c0bedc0c1cd1b21a2db91637fdd12dbfc4a2de6c29b2bb41e866ee774e88efeb13360f6198b0099bbfa98d97680c25ecf4c03444322f940f0bde6db2b7b62ae5b91a3d4e42321f4f10219d23aa2479286ef701471564ab691c3d322609d9d7905bd6064a7286050e0982e366886ff5e659f8e06fb2309b2452878375"]}, {0xdd, &(0x7f0000000340)=@string={0xdd, 0x3, "74c98b6b61a75c8838f1f658b36b371536b77e35045c6cb193f862ad37632a2515ceedc0ce0c0ab44020c1a56e279979afc1845cd393234372055a6f2164520799b01de2a5cd0636984c86a23d62807c30fd970b257cba91ac6fce55b934504c7a0c7703174425d263003a8442e7589c0974c9bd238b86d951623116388473f7d15980992e3da7ca2a413760d4ebc9c6b9e4689416dff22f3537bb9193b91b74bb503b84ff163ab2a68cae280546e30c2f56cb173865109fece15f7e6af33f7ec8beef1bc2e4770bb2e5e1f1df2831e410983726730dbd72665613"}}]})
userfaultfd(0x801)

10.21141208s ago: executing program 1 (id=5016):
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x20000045)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = dup(r1)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000080)={{0x3, 0x1}})
ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1)
r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
ioctl$SNDCTL_DSP_GETOSPACE(r5, 0x8010500c, &(0x7f0000000040))
sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x40}}, 0x40800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='br_fdb_external_learn_add\x00'}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada", 0x23}], 0x1, 0x0, 0x0, 0x5865}, 0x0)

9.6740357s ago: executing program 1 (id=5017):
gettid()
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
r2 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc)
setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xcb, &(0x7f0000000040), 0xc)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3)
syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04ff06"], 0x4)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r4])
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r0, 0x20, &(0x7f00000000c0)={&(0x7f00000002c0)=""/133, 0x85, <r6=>0x0, &(0x7f0000000680)=""/236, 0xec}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6}, 0x94)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
writev(r7, &(0x7f0000000440)=[{&(0x7f0000000280)}], 0x1)
epoll_create1(0x3da6a93ac6a54ffb)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000003c0)=[@timestamp, @timestamp, @timestamp, @mss={0x2, 0x4}, @timestamp], 0x5)
r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE(r8, &(0x7f0000000540)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000240)=""/5, 0x5, 0x6, 0x4, 0x9, 0x4, 0xc08}}, 0x120)
read$FUSE(r8, &(0x7f0000006b40)={0x2020}, 0x2020)

9.550454297s ago: executing program 2 (id=5018):
rseq(0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
close(0xffffffffffffffff)
socket$kcm(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x4e20, 0x6, @mcast2, 0xd}}}, 0x88)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x46, &(0x7f0000000380)={@link_local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "04c2ad", 0x10, 0x11, 0x0, @local, @mcast2, {[], {0x4e21, 0xe22, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
r5 = socket$inet6(0xa, 0x1, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x10000, 0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0x88c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0xa, 0x1000008, 0xfff, 0x8001, 0x0, 0x4, 0x3, 0x4a82, 0x5, 0x100, 0xd, 0x4, 0x9, 0x4, 0x5, 0x6, 0xf17a, 0x6, 0x800080, 0x9, 0x80000001, 0x6e1e28f3, 0x9, 0x101, 0x9, 0x80, 0xad, 0x1, 0x0, 0x80, 0x0, 0x8, 0xfffffffc, 0x171d, 0x40, 0x2, 0x464, 0x40, 0x0, 0x4, 0x2, 0xa0000, 0x5, 0x8, 0x3, 0xffffff96, 0x7, 0x5, 0x8, 0x6, 0x9c4, 0xfd, 0x3, 0x9, 0x7, 0x4ba, 0x8001, 0xd, 0x0, 0x8, 0x4, 0x16d, 0xbb, 0xfffffff5, 0x9, 0x1, 0xacf, 0xa, 0x3, 0x8001, 0x6, 0x2, 0xda9, 0x6, 0xf, 0x9e05, 0x2d1, 0x80000001, 0x5, 0xfff, 0x600, 0x3, 0x0, 0xc76, 0xe2, 0x9, 0xfffffff9, 0x0, 0x0, 0x6, 0x9, 0x5, 0xdbff, 0x5, 0x10, 0x7, 0xe7, 0xfffffffb, 0x8, 0x1, 0x9, 0x0, 0x5, 0x9, 0x3, 0x3, 0x4, 0x3, 0xfffffff9, 0x10000, 0x0, 0x2, 0x80000000, 0x8001, 0xa, 0x52, 0x7b03, 0x6, 0xec00, 0xfffffffb, 0x5, 0x0, 0xb91470fb, 0x3, 0x3, 0x4, 0xa, 0x6d, 0x2, 0x3, 0x8, 0x412e, 0x24, 0xfffffff7, 0x6, 0x9, 0x2, 0x6, 0x0, 0xeaf, 0x75a0, 0x479, 0x5, 0x268, 0x200, 0x1, 0x400, 0x167, 0x9, 0x7, 0x8, 0xf, 0xdf, 0x1, 0xb, 0xa4, 0x7, 0xc6, 0x5b0, 0x9, 0x8, 0x2, 0x4, 0x1ee, 0x8, 0x1, 0xf725, 0x6, 0x6c0, 0x5, 0x1, 0x0, 0x1baac88f, 0x5, 0x400, 0x5, 0xff, 0x3, 0x1ff, 0x4, 0xceb, 0x3, 0xff, 0x5, 0xdc, 0x9, 0xfffffff0, 0x0, 0x800, 0x6, 0x8eb, 0xfffffffc, 0x8, 0x36919bdd, 0x5, 0x2, 0x8, 0x5, 0x81, 0x892c, 0x3, 0x2, 0x7ff, 0xef83, 0x4, 0x80, 0xffff, 0xda, 0x0, 0x5, 0xa, 0x80000000, 0x93c, 0x0, 0xa, 0x0, 0x7, 0x7, 0x8, 0x100, 0x3, 0xfaa6, 0x1, 0x1, 0x5, 0x6, 0x1, 0x3, 0x0, 0x8, 0x7f, 0x9710, 0xa, 0x81, 0x2, 0x6, 0x401, 0x9, 0x7, 0x80000000, 0x5, 0x3, 0x6, 0x7ff00000, 0x401, 0xd3d, 0x3, 0x5, 0x200, 0xe, 0x7, 0x3, 0x9, 0x4009, 0x2]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x10001, 0x59e9, 0x5, 0x1ffe, 0x7f, 0x1, 0x1000, 0xffffffff, 0x7, 0x1c00, 0x4, 0x6, 0x16c800, 0xf, 0x1, 0x20081, 0xff, 0x9, 0xf760, 0x6, 0x2, 0x4, 0x0, 0x101, 0x5, 0x3f, 0x1, 0x655, 0x8c5f, 0x6, 0x7, 0x1, 0xb, 0x7077, 0x10, 0x0, 0x0, 0xffff, 0x200, 0x63a08ec6, 0x800, 0xa373762, 0x9, 0x6, 0x9, 0xffff2cbd, 0x6, 0x6, 0x4, 0xfffffffb, 0xa, 0x8, 0x1, 0xffff, 0x8, 0x7, 0x5, 0x5, 0x5a, 0x1, 0x0, 0x1, 0x3, 0x6, 0x3, 0x5, 0x597, 0x1, 0x1, 0x2, 0x8, 0x0, 0x8, 0x100, 0x6, 0xfffffff7, 0xa, 0x6, 0x401, 0x3, 0x0, 0x5, 0x5, 0x7ff, 0x1, 0x7, 0x2, 0x3ac, 0x3, 0x0, 0xe559, 0xb, 0x7fffffff, 0x39, 0x125e, 0x6, 0x1, 0xc5d5, 0x7, 0xffff051b, 0x1, 0x0, 0x200, 0x8, 0xb5, 0x8001, 0x7, 0x4, 0x3, 0x2, 0xc4a, 0x0, 0xe, 0x5, 0x800, 0x4c18575, 0xe, 0x2, 0x8, 0x1000, 0x2e, 0x3, 0x3, 0x0, 0x88, 0x401, 0x8, 0xa, 0x94f, 0x3, 0xcf0, 0x22, 0x3, 0x0, 0x9, 0x4, 0x10, 0xb, 0x6, 0x3, 0x9, 0x7, 0x1800000, 0x7fffffff, 0x8, 0x32, 0x10000, 0x5, 0x8, 0xc0000000, 0x8, 0x8, 0xa8, 0xf, 0x4040, 0xfffffffb, 0x3, 0xc14, 0x6, 0xfffffffb, 0x1, 0x0, 0x9, 0x2, 0x8, 0x3, 0x1, 0xb, 0x4, 0x6, 0x3, 0x9, 0x20000002, 0xfffffe01, 0xa22, 0x7, 0xfffc, 0x6, 0x5c5e, 0x7, 0x4, 0x8, 0x5, 0x5, 0x9, 0x6, 0x5, 0x6, 0x2, 0x5, 0x0, 0x64, 0xb, 0x2, 0x3, 0x5, 0x42a1d4b5, 0x6, 0x4, 0x4, 0x5, 0x6, 0x834f, 0xb, 0x80000000, 0x5, 0x2, 0x101, 0x0, 0xfffffffe, 0xb, 0x8001, 0x8000, 0xfffffffd, 0x6, 0x80000001, 0x7a39f194, 0xcf, 0x5e249f10, 0x6, 0x1, 0x2, 0x6, 0x80000000, 0x3, 0x8, 0x4, 0x6, 0x4cb, 0x3, 0xf0, 0xfffffffd, 0x0, 0x1, 0x8, 0x7, 0x6, 0x2, 0x4, 0xd56, 0xd, 0x275b, 0x0, 0x3ff, 0xfffff292, 0x3, 0x3, 0xffffff80, 0xf, 0xd9, 0x7a, 0x6, 0x7, 0x6, 0x1]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x10000000, 0xaf9, 0x60, 0x2, {0x6, 0x1, 0x4, 0xffff, 0xa, 0x9}, {0x7, 0x2, 0x3ff, 0x7ff, 0x80, 0x3}, 0x890a, 0xb8, 0x6}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x89b0, &(0x7f0000001440)={'team_slave_1\x00', &(0x7f0000000180)=@ethtool_cmd={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc0, 0x0, [0x0, 0x3]}})
bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)

8.672587508s ago: executing program 2 (id=5019):
socket$can_bcm(0x1d, 0x2, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000340)={0x2, 0x5, 0x0, 0x2, 0x2, 0x0, 0x0, 0x7}, 0x10}, 0x1, 0x400000000000000}, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0xe8e80)
r4 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x3}, &(0x7f0000002000)=<r5=>0x0, &(0x7f0000000000)=<r6=>0x0)
syz_io_uring_submit(r5, r6, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="9b4307000001", @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @echo_reply={0xe0, 0x0, 0x0, 0xfffd}}}}}, 0x0)
io_uring_enter(r4, 0x48e9, 0x0, 0x2, 0x0, 0x0)
connect$inet6(r2, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c)
syz_open_dev$vivid(&(0x7f0000000080), 0x0, 0x2)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
r7 = dup2(r2, r2)
socket(0x2b, 0x1, 0x1)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20)
sendmmsg$unix(r7, &(0x7f0000008380), 0x400000000000174, 0x4008890)
r9 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0)
write$rfkill(r9, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)

8.653233124s ago: executing program 1 (id=5020):
rseq(0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
close(0xffffffffffffffff)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24000000)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x4e20, 0x6, @mcast2, 0xd}}}, 0x88)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x46, &(0x7f0000000380)={@link_local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "04c2ad", 0x10, 0x11, 0x0, @local, @mcast2, {[], {0x4e21, 0xe22, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
r6 = socket$inet6(0xa, 0x1, 0x0)
r7 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x10000, 0x14)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0x88c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0xa, 0x1000008, 0xfff, 0x8001, 0x0, 0x4, 0x3, 0x4a82, 0x5, 0x100, 0xd, 0x4, 0x9, 0x4, 0x5, 0x6, 0xf17a, 0x6, 0x800080, 0x9, 0x80000001, 0x6e1e28f3, 0x9, 0x101, 0x9, 0x80, 0xad, 0x1, 0x0, 0x80, 0x0, 0x8, 0xfffffffc, 0x171d, 0x40, 0x2, 0x464, 0x40, 0x0, 0x4, 0x2, 0xa0000, 0x5, 0x8, 0x3, 0xffffff96, 0x7, 0x5, 0x8, 0x6, 0x9c4, 0xfd, 0x3, 0x9, 0x7, 0x4ba, 0x8001, 0xd, 0x0, 0x8, 0x4, 0x16d, 0xbb, 0xfffffff5, 0x9, 0x1, 0xacf, 0xa, 0x3, 0x8001, 0x6, 0x2, 0xda9, 0x6, 0xf, 0x9e05, 0x2d1, 0x80000001, 0x5, 0xfff, 0x600, 0x3, 0x0, 0xc76, 0xe2, 0x9, 0xfffffff9, 0x0, 0x0, 0x6, 0x9, 0x5, 0xdbff, 0x5, 0x10, 0x7, 0xe7, 0xfffffffb, 0x8, 0x1, 0x9, 0x0, 0x5, 0x9, 0x3, 0x3, 0x4, 0x3, 0xfffffff9, 0x10000, 0x0, 0x2, 0x80000000, 0x8001, 0xa, 0x52, 0x7b03, 0x6, 0xec00, 0xfffffffb, 0x5, 0x0, 0xb91470fb, 0x3, 0x3, 0x4, 0xa, 0x6d, 0x2, 0x3, 0x8, 0x412e, 0x24, 0xfffffff7, 0x6, 0x9, 0x2, 0x6, 0x0, 0xeaf, 0x75a0, 0x479, 0x5, 0x268, 0x200, 0x1, 0x400, 0x167, 0x9, 0x7, 0x8, 0xf, 0xdf, 0x1, 0xb, 0xa4, 0x7, 0xc6, 0x5b0, 0x9, 0x8, 0x2, 0x4, 0x1ee, 0x8, 0x1, 0xf725, 0x6, 0x6c0, 0x5, 0x1, 0x0, 0x1baac88f, 0x5, 0x400, 0x5, 0xff, 0x3, 0x1ff, 0x4, 0xceb, 0x3, 0xff, 0x5, 0xdc, 0x9, 0xfffffff0, 0x0, 0x800, 0x6, 0x8eb, 0xfffffffc, 0x8, 0x36919bdd, 0x5, 0x2, 0x8, 0x5, 0x81, 0x892c, 0x3, 0x2, 0x7ff, 0xef83, 0x4, 0x80, 0xffff, 0xda, 0x0, 0x5, 0xa, 0x80000000, 0x93c, 0x0, 0xa, 0x0, 0x7, 0x7, 0x8, 0x100, 0x3, 0xfaa6, 0x1, 0x1, 0x5, 0x6, 0x1, 0x3, 0x0, 0x8, 0x7f, 0x9710, 0xa, 0x81, 0x2, 0x6, 0x401, 0x9, 0x7, 0x80000000, 0x5, 0x3, 0x6, 0x7ff00000, 0x401, 0xd3d, 0x3, 0x5, 0x200, 0xe, 0x7, 0x3, 0x9, 0x4009, 0x2]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x10001, 0x59e9, 0x5, 0x1ffe, 0x7f, 0x1, 0x1000, 0xffffffff, 0x7, 0x1c00, 0x4, 0x6, 0x16c800, 0xf, 0x1, 0x20081, 0xff, 0x9, 0xf760, 0x6, 0x2, 0x4, 0x0, 0x101, 0x5, 0x3f, 0x1, 0x655, 0x8c5f, 0x6, 0x7, 0x1, 0xb, 0x7077, 0x10, 0x0, 0x0, 0xffff, 0x200, 0x63a08ec6, 0x800, 0xa373762, 0x9, 0x6, 0x9, 0xffff2cbd, 0x6, 0x6, 0x4, 0xfffffffb, 0xa, 0x8, 0x1, 0xffff, 0x8, 0x7, 0x5, 0x5, 0x5a, 0x1, 0x0, 0x1, 0x3, 0x6, 0x3, 0x5, 0x597, 0x1, 0x1, 0x2, 0x8, 0x0, 0x8, 0x100, 0x6, 0xfffffff7, 0xa, 0x6, 0x401, 0x3, 0x0, 0x5, 0x5, 0x7ff, 0x1, 0x7, 0x2, 0x3ac, 0x3, 0x0, 0xe559, 0xb, 0x7fffffff, 0x39, 0x125e, 0x6, 0x1, 0xc5d5, 0x7, 0xffff051b, 0x1, 0x0, 0x200, 0x8, 0xb5, 0x8001, 0x7, 0x4, 0x3, 0x2, 0xc4a, 0x0, 0xe, 0x5, 0x800, 0x4c18575, 0xe, 0x2, 0x8, 0x1000, 0x2e, 0x3, 0x3, 0x0, 0x88, 0x401, 0x8, 0xa, 0x94f, 0x3, 0xcf0, 0x22, 0x3, 0x0, 0x9, 0x4, 0x10, 0xb, 0x6, 0x3, 0x9, 0x7, 0x1800000, 0x7fffffff, 0x8, 0x32, 0x10000, 0x5, 0x8, 0xc0000000, 0x8, 0x8, 0xa8, 0xf, 0x4040, 0xfffffffb, 0x3, 0xc14, 0x6, 0xfffffffb, 0x1, 0x0, 0x9, 0x2, 0x8, 0x3, 0x1, 0xb, 0x4, 0x6, 0x3, 0x9, 0x20000002, 0xfffffe01, 0xa22, 0x7, 0xfffc, 0x6, 0x5c5e, 0x7, 0x4, 0x8, 0x5, 0x5, 0x9, 0x6, 0x5, 0x6, 0x2, 0x5, 0x0, 0x64, 0xb, 0x2, 0x3, 0x5, 0x42a1d4b5, 0x6, 0x4, 0x4, 0x5, 0x6, 0x834f, 0xb, 0x80000000, 0x5, 0x2, 0x101, 0x0, 0xfffffffe, 0xb, 0x8001, 0x8000, 0xfffffffd, 0x6, 0x80000001, 0x7a39f194, 0xcf, 0x5e249f10, 0x6, 0x1, 0x2, 0x6, 0x80000000, 0x3, 0x8, 0x4, 0x6, 0x4cb, 0x3, 0xf0, 0xfffffffd, 0x0, 0x1, 0x8, 0x7, 0x6, 0x2, 0x4, 0xd56, 0xd, 0x275b, 0x0, 0x3ff, 0xfffff292, 0x3, 0x3, 0xffffff80, 0xf, 0xd9, 0x7a, 0x6, 0x7, 0x6, 0x1]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x10000000, 0xaf9, 0x60, 0x2, {0x6, 0x1, 0x4, 0xffff, 0xa, 0x9}, {0x7, 0x2, 0x3ff, 0x7ff, 0x80, 0x3}, 0x890a, 0xb8, 0x6}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0)
fsmount(r7, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x89b0, &(0x7f0000001440)={'team_slave_1\x00', &(0x7f0000000180)=@ethtool_cmd={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc0, 0x0, [0x0, 0x3]}})
bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)

7.859144754s ago: executing program 3 (id=5021):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockname$netrom(r3, 0x0, 0x0)
getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, 0x0, &(0x7f00000003c0))
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4d, 0x1, 0xf7, 0x3, 0x80, 0x7, 0xc2, 0xc, 0x66, 0x4, [0x20040, 0x9, 0x10, 0x40, 0x6, 0x8, 0xfffffeff, 0x2176]}})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000086c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000044000000060a010400000000000000000500000008000b40000000001c000480180001800d00010073796e70726f787900000000040002800900010073797a3000000000140000001100010000000000000000000000000a53c99f2c5691a1e6b59af27c0ae4d3bad5807e6b73eb3cbf14546ea69b2ae930865d6a9fdf0431952b04c0ca6ad5"], 0xb8}}, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
recvmmsg(r3, &(0x7f0000008440), 0x0, 0x10100, &(0x7f0000008680)={0x77359400})
ioctl$TIOCVHANGUP(r6, 0x5437, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
lstat(&(0x7f0000008980)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000008a40)={{{@in6=@private0, @in6=@initdev}}, {{@in=@multicast2}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast1}}}, 0x0)
dup2(0xffffffffffffffff, r3)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r7=>0x0}, 0x0)
setresuid(0x0, r7, 0x0)

7.654993s ago: executing program 1 (id=5022):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8040)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
syz_open_dev$dri(0x0, 0xd21, 0x4000)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_open_dev$usbmon(0x0, 0x0, 0x0)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
r3 = epoll_create(0x3)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0x40000002})
write$P9_RSTATu(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="1e0200000400000005a80000000000000000000000008000000000000000000081030000000000000000000000000003e8001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b92000000b0ff70673effeb09b5351f5b"], 0x21e)
syz_open_dev$vbi(0x0, 0x0, 0x2)
r4 = openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r4, 0x4004510d, &(0x7f0000000000))
ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
gettid()
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r5, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, 0x0}, 0x401}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000340)=""/113, 0x71}, {0x0}, {&(0x7f0000000100)=""/98, 0x62}, {&(0x7f00000003c0)=""/100, 0x64}, {&(0x7f00000006c0)=""/200, 0xc8}, {&(0x7f0000000440)=""/67, 0x43}], 0x9}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x0, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
timer_create(0x2, 0x0, 0x0)
sendfile(r7, r6, &(0x7f0000002080)=0x64, 0x21c)

7.156458959s ago: executing program 4 (id=5023):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8040)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
syz_open_dev$dri(0x0, 0xd21, 0x4000)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_open_dev$usbmon(0x0, 0x0, 0x0)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
r3 = epoll_create(0x3)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0x40000002})
write$P9_RSTATu(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="1e0200000400000005a80000000000000000000000008000000000000000000081030000000000000000000000000003e8001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b92000000b0ff70673effeb09b5351f5b"], 0x21e)
syz_open_dev$vbi(0x0, 0x0, 0x2)
r4 = openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r4, 0x4004510d, &(0x7f0000000000))
ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
gettid()
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r5, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, 0x0}, 0x401}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000340)=""/113, 0x71}, {0x0}, {&(0x7f0000000100)=""/98, 0x62}, {&(0x7f00000003c0)=""/100, 0x64}, {&(0x7f00000006c0)=""/200, 0xc8}, {&(0x7f0000000440)=""/67, 0x43}], 0x9}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x0, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
timer_create(0x2, 0x0, 0x0)
sendfile(r7, r6, &(0x7f0000002080)=0x64, 0x21c)

6.936672152s ago: executing program 3 (id=5024):
socket$inet6(0xa, 0x5, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x4, r1, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x400080, 0x0)
ioctl$SNDCTL_TMR_SOURCE(r4, 0xc0045406)
r5 = socket$inet6(0xa, 0x3, 0x3c)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x5000, 0x1, @remote, 0x5}, 0x1c)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600))
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0)
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x1000, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00'})

5.98757636s ago: executing program 3 (id=5025):
semtimedop(0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000400)={0xf0f016, 0x5})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f00000002c0)={0x0, 0xa, 0x47})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r4 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
close(r4)
execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000)
fsopen(&(0x7f00000003c0)='omfs\x00', 0x0)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b0001000000000904000001012920"], 0x0)
syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201)
unshare(0x8000000)
r5 = semget$private(0x0, 0x4000, 0x400)
semctl$GETALL(r5, 0x0, 0xd, &(0x7f0000000080)=""/113)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x81)
r6 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r7, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x14, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000001}]}]}]}}]}, 0x44}}, 0x0)

5.714756184s ago: executing program 2 (id=5026):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00', r0}, 0x18)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000)
msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6)
unshare(0x22020600)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "345aa3593519c7e1", "e8a1056a7c356ba2b862ef93136b1587", "28bc90f4", "790f59276094db31"}, 0x28)
sendto$inet6(r4, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0)
write$binfmt_aout(r4, 0x0, 0xfdef)
sendto$inet6(r4, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a", 0xf, 0x8040, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f0000000300)=0x1)
write$binfmt_elf64(r4, 0x0, 0x78)
sendto$inet6(r4, &(0x7f0000000100)="cb965843c27e8d8771dcf31de97bd754cb5c740a6ed126", 0x17, 0x48c5, &(0x7f00000001c0)={0xa, 0x4e21, 0x4, @mcast2, 0x8}, 0x1c)

5.472027445s ago: executing program 1 (id=5027):
r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4080)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x800, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x2, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc)
r6 = socket$packet(0x11, 0x2, 0x300)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
recvmmsg(r6, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000004c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x1, 0xff, 0x4, 0x0, 0x1}, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xe1000, 0x280000b, 0x28011, r0, 0x0)

5.039393906s ago: executing program 4 (id=5028):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x88001)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = timerfd_create(0x0, 0x80800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r3, 0x0, 0xfff7fffffffffff5}, 0x18)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x6, 'dvmrp1\x00'})
readv(r2, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x1b, 0x0, &(0x7f0000000500)=[@increfs], 0xffffffffffffff61, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000002440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000002240)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0})
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r1, 0x20, &(0x7f0000000280)={&(0x7f0000000300)=""/254, 0xfe, <r7=>0x0, &(0x7f00000000c0)=""/119, 0x77}}, 0x10)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r1}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x5, &(0x7f0000000500)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x10, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000002c80)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0)
r8 = socket(0x2, 0x80805, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000180)={'vcan0\x00'})

4.740141576s ago: executing program 2 (id=5029):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r2}, 0x0, &(0x7f0000000180)='%pK    \x00'}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f00000005c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
eventfd2(0x3, 0x80000)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003080)={0x28, r7, 0xe6e964277ae08d57, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x40080)
close(r0)

3.475784576s ago: executing program 4 (id=5030):
gettid()
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
r2 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc)
setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xcb, &(0x7f0000000040), 0xc)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3)
syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04ff06"], 0x4)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r4])
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r0, 0x20, &(0x7f00000000c0)={&(0x7f00000002c0)=""/133, 0x85, <r6=>0x0, &(0x7f0000000680)=""/236, 0xec}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6}, 0x94)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
writev(r7, &(0x7f0000000440)=[{&(0x7f0000000280)="c0", 0x1}], 0x1)
epoll_create1(0x3da6a93ac6a54ffb)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000003c0)=[@timestamp, @timestamp, @timestamp, @mss={0x2, 0x4}, @timestamp], 0x5)
r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE(r8, &(0x7f0000000540)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000240)=""/5, 0x5, 0x6, 0x4, 0x9, 0x4, 0xc08}}, 0x120)
read$FUSE(r8, &(0x7f0000006b40)={0x2020}, 0x2020)

3.375994767s ago: executing program 2 (id=5031):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8040)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
syz_open_dev$dri(0x0, 0xd21, 0x4000)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_open_dev$usbmon(0x0, 0x0, 0x0)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
r3 = epoll_create(0x3)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0x40000002})
write$P9_RSTATu(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="1e0200000400000005a80000000000000000000000008000000000000000000081030000000000000000000000000003e8001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b92000000b0ff70673effeb09b5351f5b"], 0x21e)
syz_open_dev$vbi(0x0, 0x0, 0x2)
r4 = openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r4, 0x4004510d, &(0x7f0000000000))
ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
gettid()
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r5, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, 0x0}, 0x401}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000340)=""/113, 0x71}, {0x0}, {&(0x7f0000000100)=""/98, 0x62}, {&(0x7f00000003c0)=""/100, 0x64}, {&(0x7f00000006c0)=""/200, 0xc8}, {&(0x7f0000000440)=""/67, 0x43}], 0x9}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x0, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
timer_create(0x2, 0x0, 0x0)
sendfile(r7, r6, &(0x7f0000002080)=0x64, 0x21c)

2.678660421s ago: executing program 4 (id=5032):
syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e20, @rand_addr=0x3}, {0x2, 0x0, @broadcast}, {0x2, 0xfffd, @empty}, 0x2a0})
socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$snddsp(0xffffffffffffffff, &(0x7f00000002c0)="560197717198e701046f8592a5eeab7cda3416817904e92d51156a7eda1b0ae2567e78b9168932c0f0181adda8e5a5d79b7a77d7f90c38971c1cea753275e5c9171e5343c97d94e859ee2c4e93d0440a8e39b2709fab2693ac2b1e40285a223123c4c93cffc9aba4b452fe75ac2db24c1dc8774d5a855013537ceca68745507a77264187f043009b4d121ef0c60274e1cc3061600e08ae95f51805d2311bd2e3235ba2691d4a604e73ddcb56c75c09b5ee627f66b7532659ec0e397569b8824db56e1d82604c16a2abbc8aeb50aa5756711427f47e2605de53710728", 0xdc)
mknodat(0xffffffffffffffff, 0x0, 0x800, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1004000, 0x0, 0xb49, 0x9, 0x6, 0x0, 0x3}, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x1, 0x0, 0x1014, 0x4, 0xc, 0x0, 0x5, 0x4}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
fsopen(&(0x7f0000000040)='hpfs\x00', 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x48080)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x2, 0x0)
link(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0)='./file0\x00')
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x3, 0x8, 0x5, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4050}, 0x850)

2.224853747s ago: executing program 3 (id=5033):
inotify_init()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000040)=0x2cd, 0x4)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r5 = dup2(r4, r4)
ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_GET_WOWLAN(r6, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010300000000fedbdf", @ANYRES32=r7, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4044041}, 0x20000000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r6)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2699493cdc459a9bafd5f54c0f7e8fe01c00000018b3afda155c02b52a00245b385c43206aac4e82616d00001dc4fd9902000004000000061072dc6a"], 0x1c}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r10, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}, 0xd0})
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000080), 0x3, 0x200)

1.250081653s ago: executing program 32 (id=5003):
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil)
brk(0x200000ffc000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0)
r2 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x100, 0x1}, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000002a00)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffa, 0x0, 0x4)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3})
io_uring_enter(r2, 0xdb4, 0x0, 0x0, 0x0, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, 0x0)
syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011003000000202505a8a44000010203010902240001010140f1090400260207010210090501024000049e05766c55"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0})
r5 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="0000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200ac1e00010800074000"/100], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000240001012bbd7000fcffffff60e5bc800800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x404c957}, 0x48050)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x404c031}, 0x404a05c)

1.242936429s ago: executing program 3 (id=5035):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00', r0}, 0x18)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000)
msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6)
unshare(0x22020600)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "345aa3593519c7e1", "e8a1056a7c356ba2b862ef93136b1587", "28bc90f4", "790f59276094db31"}, 0x28)
sendto$inet6(r4, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0)
write$binfmt_aout(r4, 0x0, 0xfdef)
sendto$inet6(r4, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a", 0xf, 0x8040, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f0000000300)=0x1)
write$binfmt_elf64(r4, 0x0, 0x78)
sendto$inet6(r4, &(0x7f0000000100)="cb965843c27e8d8771dcf31de97bd754cb5c740a6ed126", 0x17, 0x48c5, &(0x7f00000001c0)={0xa, 0x4e21, 0x4, @mcast2, 0x8}, 0x1c)

1.182177204s ago: executing program 2 (id=5036):
socket$can_bcm(0x1d, 0x2, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000340)={0x2, 0x5, 0x0, 0x2, 0x2, 0x0, 0x0, 0x7}, 0x10}, 0x1, 0x400000000000000}, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0xe8e80)
r4 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x3}, &(0x7f0000002000)=<r5=>0x0, &(0x7f0000000000)=<r6=>0x0)
syz_io_uring_submit(r5, r6, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="9b4307000001", @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @echo_reply={0xe0, 0x0, 0x0, 0xfffd}}}}}, 0x0)
io_uring_enter(r4, 0x48e9, 0x0, 0x2, 0x0, 0x0)
connect$inet6(r2, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c)
syz_open_dev$vivid(&(0x7f0000000080), 0x0, 0x2)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
r7 = dup2(r2, r2)
socket(0x2b, 0x1, 0x1)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20)
sendmmsg$unix(r7, &(0x7f0000008380), 0x400000000000174, 0x4008890)
r9 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0)
write$rfkill(r9, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)

383.103559ms ago: executing program 1 (id=5037):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private0, @in=@empty, 0xfffe, 0x0, 0x0, 0x0, 0xa, 0x0, 0x100}, {0x0, 0x0, 0x0, 0x0, 0x800000000}, {}, 0x0, 0x6e6bb8, 0x0, 0x0, 0x0, 0x3}, {{@in=@rand_addr=0x64010101, 0x0, 0x2b}, 0x0, @in=@private=0xa010100, 0x40000000}}, 0xe8)
renameat2(r1, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x4)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x10}}, 0x0)
close(r5)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)=0xff)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x9)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x7f)
syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x2, 0x4, 0x3ce}, &(0x7f0000000040), 0x0)
dup(0xffffffffffffffff)
sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@updsa={0x180, 0x10, 0x1, 0x0, 0x25dfdbff, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x0, 0x1, 0x0, 0x0, 0xa, 0x20, 0x0, 0x5c}, {@in6=@loopback, 0x0, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd}, {0x0, 0x20000}, 0x0, 0x0, 0xa, 0x4, 0x80}, [@algo_auth_trunc={0x8d, 0x14, {{'sm3\x00'}, 0x208, 0x0, "ab84411f518dc9d5565b9e05de67830aeb529f334e285efe3786823a0a1e08b53bec30240d4d6f58f05cd36e941758cf60d4c5a818aca82c12697c43daf8000000"}}]}, 0x180}, 0x1, 0x0, 0x0, 0x20004001}, 0x0)

175.535951ms ago: executing program 3 (id=5038):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8040)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
syz_open_dev$dri(0x0, 0xd21, 0x4000)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_open_dev$usbmon(0x0, 0x0, 0x0)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
r3 = epoll_create(0x3)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0x40000002})
write$P9_RSTATu(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="1e0200000400000005a80000000000000000000000008000000000000000000081030000000000000000000000000003e8001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b92000000b0ff70673effeb09b5351f5b"], 0x21e)
syz_open_dev$vbi(0x0, 0x0, 0x2)
r4 = openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r4, 0x4004510d, &(0x7f0000000000))
ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
gettid()
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r5, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, 0x0}, 0x401}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000340)=""/113, 0x71}, {0x0}, {&(0x7f0000000100)=""/98, 0x62}, {&(0x7f00000003c0)=""/100, 0x64}, {&(0x7f00000006c0)=""/200, 0xc8}, {&(0x7f0000000440)=""/67, 0x43}], 0x9}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x0, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
timer_create(0x2, 0x0, 0x0)
sendfile(r7, r6, &(0x7f0000002080)=0x64, 0x21c)

0s ago: executing program 4 (id=5039):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8040)
syz_open_dev$dri(0x0, 0xd21, 0x4000)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_open_dev$usbmon(0x0, 0x0, 0x0)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
r3 = epoll_create(0x3)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0x40000002})
write$P9_RSTATu(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="1e0200000400000005a80000000000000000000000008000000000000000000081030000000000000000000000000003e8001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b92000000b0ff70673effeb09b5351f5b"], 0x21e)
syz_open_dev$vbi(0x0, 0x0, 0x2)
r4 = openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r4, 0x4004510d, &(0x7f0000000000))
ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
gettid()
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r5, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, 0x0}, 0x401}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000340)=""/113, 0x71}, {0x0}, {&(0x7f0000000100)=""/98, 0x62}, {&(0x7f00000003c0)=""/100, 0x64}, {&(0x7f00000006c0)=""/200, 0xc8}, {&(0x7f0000000440)=""/67, 0x43}], 0x9}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x0, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
timer_create(0x2, 0x0, 0x0)
sendfile(r7, r6, &(0x7f0000002080)=0x64, 0x21c)

kernel console output (not intermixed with test programs):

851][T27519] IPVS: Unknown mcast interface: vcan0
[ 2169.789839][   T30] audit: type=1400 audit(2000001433.343:5584): avc:  denied  { map } for  pid=27529 comm="syz.1.4384" path="socket:[100798]" dev="sockfs" ino=100798 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 2170.134234][   T30] audit: type=1400 audit(2000001433.343:5585): avc:  denied  { accept } for  pid=27529 comm="syz.1.4384" path="socket:[100798]" dev="sockfs" ino=100798 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 2170.403764][ T2150] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[ 2170.569287][ T2150] usb 1-1: config 0 has no interfaces?
[ 2170.576621][ T2150] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 2170.585979][ T2150] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2170.594047][ T2150] usb 1-1: Product: syz
[ 2170.604005][ T2150] usb 1-1: Manufacturer: syz
[ 2170.611532][ T2150] usb 1-1: SerialNumber: syz
[ 2170.643380][ T2150] usb 1-1: config 0 descriptor??
[ 2170.717297][T27545] syz.2.4381 (27545): drop_caches: 2
[ 2170.737775][T27545] syz.2.4381 (27545): drop_caches: 2
[ 2170.774490][T27547] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4386'.
[ 2170.840469][T27548] syz.3.4386 (27548): /proc/27538/oom_adj is deprecated, please use /proc/27538/oom_score_adj instead.
[ 2171.756025][   T30] audit: type=1400 audit(2000001434.477:5586): avc:  denied  { getopt } for  pid=27538 comm="syz.3.4386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[ 2172.415265][T27559] tmpfs: Unknown parameter 'mp'
[ 2173.114967][T27557] 9pnet_fd: Insufficient options for proto=fd
[ 2173.317250][T16556] usb 1-1: USB disconnect, device number 49
[ 2173.822912][T16556] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[ 2173.897738][T27578] program syz.1.4391 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2173.984566][T16556] usb 1-1: config 0 has no interfaces?
[ 2174.000123][T16556] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 2174.009307][T16556] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2174.030852][T27583] Invalid source name
[ 2174.035649][T16556] usb 1-1: Product: syz
[ 2174.121730][T16556] usb 1-1: Manufacturer: syz
[ 2174.129393][T16556] usb 1-1: SerialNumber: syz
[ 2174.169770][T16556] usb 1-1: config 0 descriptor??
[ 2174.310309][T21425] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[ 2174.769407][T21425] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2174.780360][T21425] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2174.804186][T21425] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 2174.896618][T21425] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2174.930217][T21425] usb 2-1: Product: syz
[ 2174.934616][T21425] usb 2-1: Manufacturer: syz
[ 2175.080917][T21425] usb 2-1: SerialNumber: syz
[ 2175.086860][T21425] usb 2-1: config 0 descriptor??
[ 2175.128096][   T30] audit: type=1400 audit(2000001438.949:5587): avc:  denied  { ioctl } for  pid=27588 comm="syz.2.4396" path="socket:[101570]" dev="sockfs" ino=101570 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 2175.606698][T21425] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22
[ 2175.673162][   T30] audit: type=1400 audit(2000001439.506:5588): avc:  denied  { mount } for  pid=27588 comm="syz.2.4396" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[ 2175.801482][T18265] udevd[18265]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2176.042445][   T30] audit: type=1400 audit(2000001439.821:5589): avc:  denied  { getopt } for  pid=27596 comm="syz.4.4399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[ 2176.267114][T27604] mkiss: ax0: crc mode is auto.
[ 2177.078710][T21425] usb 2-1: USB disconnect, device number 52
[ 2177.556953][T27611] netlink: 'syz.1.4401': attribute type 4 has an invalid length.
[ 2177.599834][T16556] usb 1-1: USB disconnect, device number 50
[ 2178.572392][T27631] syz.1.4405 (27631): drop_caches: 2
[ 2178.588128][T27631] syz.1.4405 (27631): drop_caches: 2
[ 2178.633391][T16565] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[ 2179.276560][T16565] usb 1-1: config 0 has no interfaces?
[ 2179.729265][T16565] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 2179.760391][T16565] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2179.775672][T16565] usb 1-1: Product: syz
[ 2179.780092][T16565] usb 1-1: Manufacturer: syz
[ 2179.784698][T16565] usb 1-1: SerialNumber: syz
[ 2179.852655][T27645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4404'.
[ 2179.883596][T16565] usb 1-1: config 0 descriptor??
[ 2180.602178][T27652] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4409'.
[ 2181.003361][T27656] syz.4.4411 (27656): drop_caches: 2
[ 2181.011784][T27656] syz.4.4411 (27656): drop_caches: 2
[ 2181.380939][T27660] netlink: 'syz.2.4410': attribute type 2 has an invalid length.
[ 2182.269521][T27675] 8021q: adding VLAN 0 to HW filter on device batadv5
[ 2182.282842][T27675] batadv5: entered promiscuous mode
[ 2182.289119][T27675] batadv5: entered allmulticast mode
[ 2182.298927][T27675] team0: Port device batadv5 added
[ 2182.881181][T16556] usb 1-1: USB disconnect, device number 51
[ 2182.885351][T21088] batman_adv: batadv5: No IGMP Querier present - multicast optimizations disabled
[ 2182.896729][T21088] batman_adv: batadv5: No MLD Querier present - multicast optimizations disabled
[ 2184.376706][   T30] audit: type=1400 audit(2000001448.587:5590): avc:  denied  { write } for  pid=27690 comm="syz.4.4417" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1
[ 2184.904831][   T30] audit: type=1400 audit(2000001449.228:5591): avc:  denied  { setopt } for  pid=27702 comm="syz.1.4418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[ 2185.204622][   T30] audit: type=1400 audit(2000001449.249:5592): avc:  denied  { mount } for  pid=27702 comm="syz.1.4418" name="/" dev="gadgetfs" ino=7629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[ 2186.453880][T27714] 9pnet_fd: Insufficient options for proto=fd
[ 2186.473288][T16565] hid-generic 0006:0004:0009.0018: unknown main item tag 0x0
[ 2186.483126][T16565] hid-generic 0006:0004:0009.0018: unknown main item tag 0x0
[ 2186.540888][T16565] hid-generic 0006:0004:0009.0018: unknown main item tag 0x0
[ 2186.557572][T16565] hid-generic 0006:0004:0009.0018: unknown main item tag 0x0
[ 2186.566192][T16565] hid-generic 0006:0004:0009.0018: unknown main item tag 0x0
[ 2186.584070][T16565] hid-generic 0006:0004:0009.0018: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0
[ 2186.803572][T27720] fido_id[27720]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 2186.937332][T27729] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4424'.
[ 2187.590366][T16556] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[ 2187.758880][T16556] usb 1-1: config 0 has no interfaces?
[ 2187.801675][T16556] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 2187.948146][T16556] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2188.200148][T27736] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[ 2188.354198][T16556] usb 1-1: Product: syz
[ 2188.358608][T16556] usb 1-1: Manufacturer: syz
[ 2188.363216][T16556] usb 1-1: SerialNumber: syz
[ 2188.432130][T16556] usb 1-1: config 0 descriptor??
[ 2189.129100][T16559] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[ 2189.424574][T16559] usb 2-1: Using ep0 maxpacket: 32
[ 2189.517286][T16559] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 2190.103485][   T30] audit: type=1400 audit(2000001454.194:5593): avc:  denied  { listen } for  pid=27753 comm="syz.3.4431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[ 2190.181821][   T30] audit: type=1400 audit(2000001454.194:5594): avc:  denied  { kexec_image_load } for  pid=27753 comm="syz.3.4431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[ 2190.418275][T16559] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2191.063408][T16559] usb 2-1: config 0 descriptor??
[ 2191.127042][T16565] usb 1-1: USB disconnect, device number 52
[ 2191.368101][T16559] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware
[ 2191.421673][   T30] audit: type=1400 audit(2000001456.063:5595): avc:  denied  { read write } for  pid=27761 comm="syz.0.4433" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[ 2191.474147][   T30] audit: type=1400 audit(2000001456.063:5596): avc:  denied  { open } for  pid=27761 comm="syz.0.4433" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[ 2191.611479][   T30] audit: type=1326 audit(2000001456.210:5597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27761 comm="syz.0.4433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28eb8eba9 code=0x7ffc0000
[ 2191.662238][T16559] usb 2-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2
[ 2191.708106][T16559] usb 2-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw
[ 2192.129954][   T30] audit: type=1326 audit(2000001456.210:5598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27761 comm="syz.0.4433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fc28eb8eba9 code=0x7ffc0000
[ 2192.456778][   T30] audit: type=1326 audit(2000001456.210:5599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27761 comm="syz.0.4433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28eb8eba9 code=0x7ffc0000
[ 2192.729976][   T30] audit: type=1326 audit(2000001456.210:5600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27761 comm="syz.0.4433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc28eb8eba9 code=0x7ffc0000
[ 2192.820100][   T30] audit: type=1326 audit(2000001456.210:5601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27761 comm="syz.0.4433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28eb8eba9 code=0x7ffc0000
[ 2192.907977][   T30] audit: type=1326 audit(2000001456.210:5602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27761 comm="syz.0.4433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fc28eb8eba9 code=0x7ffc0000
[ 2192.943048][T27774] 9pnet_fd: Insufficient options for proto=fd
[ 2192.999490][T16556] hid-generic 0006:0004:0009.0019: unknown main item tag 0x0
[ 2193.012320][T16556] hid-generic 0006:0004:0009.0019: unknown main item tag 0x0
[ 2193.055294][T16556] hid-generic 0006:0004:0009.0019: unknown main item tag 0x0
[ 2193.063403][T16556] hid-generic 0006:0004:0009.0019: unknown main item tag 0x0
[ 2193.072438][T16556] hid-generic 0006:0004:0009.0019: unknown main item tag 0x0
[ 2193.084584][T16556] hid-generic 0006:0004:0009.0019: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0
[ 2193.412865][T27779] fido_id[27779]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 2194.884336][T27796] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4441'.
[ 2195.615070][T16556] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[ 2195.769162][T27809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4440'.
[ 2195.817991][T16556] usb 1-1: Using ep0 maxpacket: 16
[ 2195.825790][T16556] usb 1-1: config 33 has 0 interfaces, different from the descriptor's value: 9
[ 2195.835638][T27811] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4443'.
[ 2195.847320][T16556] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6006, bcdDevice= 0.00
[ 2195.859128][T16556] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2197.195152][T16565] usb 1-1: USB disconnect, device number 53
[ 2198.177688][   T30] kauditd_printk_skb: 35 callbacks suppressed
[ 2198.177706][   T30] audit: type=1400 audit(2000001462.751:5638): avc:  denied  { append } for  pid=27827 comm="syz.3.4448" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[ 2198.285957][   T30] audit: type=1400 audit(2000001462.908:5639): avc:  denied  { mount } for  pid=27827 comm="syz.3.4448" name="/" dev="rpc_pipefs" ino=101266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[ 2198.508242][   T30] audit: type=1400 audit(2000001462.971:5640): avc:  denied  { unmount } for  pid=27827 comm="syz.3.4448" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[ 2198.649685][T27844] input: syz1 as /devices/virtual/input/input44
[ 2198.676659][   T30] audit: type=1400 audit(2000001463.328:5641): avc:  denied  { getopt } for  pid=27828 comm="syz.2.4447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[ 2198.966045][   T30] audit: type=1400 audit(2000001463.969:5642): avc:  denied  { getopt } for  pid=27845 comm="syz.3.4451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 2199.312982][T27844] netlink: 'syz.0.4450': attribute type 4 has an invalid length.
[ 2199.332709][T27844] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.4450'.
[ 2200.396923][   T30] audit: type=1400 audit(2000001465.481:5643): avc:  denied  { write } for  pid=27860 comm="syz.3.4453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 2201.166799][T27863] block nbd3: shutting down sockets
[ 2201.513668][T27883] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4456'.
[ 2201.524226][T27883] hsr_slave_0: left promiscuous mode
[ 2201.545385][T27883] hsr_slave_1: left promiscuous mode
[ 2201.671192][T27885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4457'.
[ 2201.748179][T27887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4458'.
[ 2202.080222][T27887] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2203.346174][   T30] audit: type=1400 audit(2000001468.588:5644): avc:  denied  { append } for  pid=27905 comm="syz.3.4462" name="sg0" dev="devtmpfs" ino=780 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[ 2203.615890][T27909] program syz.3.4462 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2204.220910][T27912] netlink: 356 bytes leftover after parsing attributes in process `syz.4.4463'.
[ 2204.293901][T27912] SELinux: failed to load policy
[ 2204.520378][T16556] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[ 2204.731916][T16556] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2204.749441][T16556] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2204.888767][T27935] program syz.2.4468 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2204.925343][T16556] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 2204.935018][T16556] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2204.952943][T16556] usb 4-1: Product: syz
[ 2204.964731][T16556] usb 4-1: Manufacturer: syz
[ 2204.990620][T16556] usb 4-1: SerialNumber: syz
[ 2205.020207][T16556] usb 4-1: config 0 descriptor??
[ 2205.078222][T16556] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22
[ 2205.237302][T16556] usb 4-1: USB disconnect, device number 49
[ 2205.241542][T18265] udevd[18265]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2205.954543][T27946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4471'.
[ 2205.967196][T27946] bridge0: port 3(team0) entered blocking state
[ 2205.973526][T27946] bridge0: port 3(team0) entered forwarding state
[ 2206.060560][T27946] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2206.077691][T16565] lo speed is unknown, defaulting to 1000
[ 2206.396697][T27954] team0: left allmulticast mode
[ 2206.401669][T27954] team0: left promiscuous mode
[ 2206.407523][T27954] bridge0: port 1(team0) entered disabled state
[ 2207.663990][   T30] audit: type=1400 audit(2000001471.770:5645): avc:  denied  { ioctl } for  pid=27951 comm="syz.4.4472" path="socket:[102687]" dev="sockfs" ino=102687 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[ 2209.016726][T16565] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[ 2209.966105][T16565] usb 1-1: config 0 has no interfaces?
[ 2210.255400][T27982] netlink: 356 bytes leftover after parsing attributes in process `syz.2.4477'.
[ 2210.297097][T27982] SELinux: failed to load policy
[ 2210.382580][T16565] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 2210.488032][T16565] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2210.543130][T16565] usb 1-1: Product: syz
[ 2210.552306][T16565] usb 1-1: Manufacturer: syz
[ 2210.687777][T16565] usb 1-1: SerialNumber: syz
[ 2211.027548][T16565] usb 1-1: config 0 descriptor??
[ 2211.943159][T16556] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[ 2212.125476][T16556] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2212.137351][T16556] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2212.247201][T16556] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 2212.296841][T16565] usb 1-1: can't set config #0, error -71
[ 2212.321848][T16565] usb 1-1: USB disconnect, device number 54
[ 2212.326096][T16556] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2213.080459][T28015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4484'.
[ 2213.246110][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[ 2213.266414][T16556] usb 4-1: Product: syz
[ 2213.270626][T16556] usb 4-1: Manufacturer: syz
[ 2213.616952][T16556] usb 4-1: SerialNumber: syz
[ 2213.623504][T16556] usb 4-1: config 0 descriptor??
[ 2213.641109][T16556] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22
[ 2213.727339][T18265] udevd[18265]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2213.886171][T28023] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4485'.
[ 2213.938828][T16556] usb 4-1: USB disconnect, device number 50
[ 2215.434791][   T30] audit: type=1400 audit(2000001480.904:5646): avc:  denied  { mount } for  pid=28030 comm="syz.3.4489" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1
[ 2218.038155][T28066] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4494'.
[ 2219.607486][   T30] audit: type=1400 audit(2000001485.650:5647): avc:  denied  { block_suspend } for  pid=28084 comm="syz.2.4498" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 2219.703862][T28083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4496'.
[ 2219.957929][T28043] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[ 2220.151056][T28043] usb 1-1: config 0 has no interfaces?
[ 2220.164736][T28043] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 2220.243637][   T30] audit: type=1400 audit(2000001486.290:5648): avc:  denied  { create } for  pid=28084 comm="syz.2.4498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[ 2220.514992][T28043] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2220.548139][T28043] usb 1-1: Product: syz
[ 2220.560048][T28043] usb 1-1: Manufacturer: syz
[ 2220.560616][   T30] audit: type=1400 audit(2000001486.290:5649): avc:  denied  { write } for  pid=28084 comm="syz.2.4498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[ 2220.569736][T28043] usb 1-1: SerialNumber: syz
[ 2221.327927][T28043] usb 1-1: config 0 descriptor??
[ 2221.479586][T28115] syz.2.4502 (28115): drop_caches: 2
[ 2221.495497][T28115] syz.2.4502 (28115): drop_caches: 2
[ 2222.983787][T28043] usb 1-1: can't set config #0, error -71
[ 2222.995231][T28043] usb 1-1: USB disconnect, device number 55
[ 2225.258556][T28137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4507'.
[ 2225.416106][T28137] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2225.441120][T16565] lo speed is unknown, defaulting to 1000
[ 2225.455864][T16565] 3yz0: Port: 1 Link ACTIVE
[ 2225.697575][T28159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4510'.
[ 2227.126795][T28180] syz.2.4514 (28180): drop_caches: 2
[ 2227.140051][T28180] syz.2.4514 (28180): drop_caches: 2
[ 2227.343070][T28182] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4513'.
[ 2227.482862][T28186] program syz.1.4516 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2228.134453][T28198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4517'.
[ 2228.767971][T28204] overlayfs: missing 'lowerdir'
[ 2229.630717][T16565] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[ 2229.808760][T16565] usb 3-1: Using ep0 maxpacket: 32
[ 2230.023718][T16565] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 2230.034197][T28215] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4519'.
[ 2230.045725][T28215] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4519'.
[ 2230.092422][T16565] usb 3-1: config 1 has an invalid descriptor of length 118, skipping remainder of the config
[ 2230.112373][T16565] usb 3-1: config 1 interface 0 altsetting 38 bulk endpoint 0x1 has invalid maxpacket 64
[ 2230.124485][T16565] usb 3-1: config 1 interface 0 altsetting 38 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2230.137989][T16565] usb 3-1: config 1 interface 0 has no altsetting 0
[ 2230.243055][T28222] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4522'.
[ 2230.269243][T16565] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 2230.299255][T16565] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2230.639775][T16565] usb 3-1: Product: syz
[ 2230.643991][T16565] usb 3-1: Manufacturer: syz
[ 2230.660875][T28235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4523'.
[ 2230.708707][T16565] usb 3-1: SerialNumber: syz
[ 2230.740155][T28212] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 2230.930085][T28222] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2230.985009][T28244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4525'.
[ 2231.173846][T16565] usb 3-1: USB disconnect, device number 43
[ 2232.086343][   T30] audit: type=1800 audit(2000001498.711:5650): pid=28267 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.4529" name="bus" dev="ramfs" ino=103237 res=0 errno=0
[ 2232.116972][T28271] Lens A: =================  START STATUS  =================
[ 2232.145060][T28271] Lens A: Focus, Absolute: 1023
[ 2232.158000][T28271] Lens A: ==================  END STATUS  ==================
[ 2232.517698][T28273] bridge5: entered promiscuous mode
[ 2233.717064][   T30] audit: type=1400 audit(2000001500.464:5651): avc:  denied  { ioctl } for  pid=28278 comm="syz.2.4532" path="/dev/usbmon3" dev="devtmpfs" ino=725 ioctlcmd=0x9201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[ 2234.840252][T16565] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[ 2235.689768][T16565] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2236.180774][T16565] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2236.256261][T16565] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 2236.257952][T28309] random: crng reseeded on system resumption
[ 2236.271723][T16565] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2236.286380][   T30] audit: type=1400 audit(2000001503.130:5652): avc:  denied  { write } for  pid=28308 comm="syz.2.4540" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[ 2236.291299][T16565] usb 4-1: Product: syz
[ 2236.309541][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2236.735729][T28321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4538'.
[ 2236.772533][T16565] usb 4-1: Manufacturer: syz
[ 2236.777185][T16565] usb 4-1: SerialNumber: syz
[ 2236.848309][T28322] sctp: [Deprecated]: syz.0.4539 (pid 28322) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 2236.848309][T28322] Use struct sctp_sack_info instead
[ 2236.883870][T16565] usb 4-1: config 0 descriptor??
[ 2236.926850][T16565] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22
[ 2236.987403][T28093] udevd[28093]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2237.165114][   T30] audit: type=1326 audit(2000001504.075:5653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28308 comm="syz.2.4540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f703138eba9 code=0x7ffc0000
[ 2237.188589][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2237.273155][   T30] audit: type=1326 audit(2000001504.086:5654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28308 comm="syz.2.4540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f703138eba9 code=0x7ffc0000
[ 2237.296642][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2237.310573][   T30] audit: type=1326 audit(2000001504.086:5655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28308 comm="syz.2.4540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f703138eba9 code=0x7ffc0000
[ 2237.352563][   T30] audit: type=1326 audit(2000001504.086:5656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28308 comm="syz.2.4540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f703138eba9 code=0x7ffc0000
[ 2237.660278][   T30] audit: type=1326 audit(2000001504.096:5657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28308 comm="syz.2.4540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f703138eba9 code=0x7ffc0000
[ 2237.828423][T28327] pim6reg: entered allmulticast mode
[ 2237.883139][   T30] audit: type=1326 audit(2000001504.096:5658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28308 comm="syz.2.4540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f703138eba9 code=0x7ffc0000
[ 2237.940525][   T30] audit: type=1326 audit(2000001504.096:5659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28308 comm="syz.2.4540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f703138eba9 code=0x7ffc0000
[ 2237.964021][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2238.113939][T28340] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4543'.
[ 2238.199031][   T30] audit: type=1326 audit(2000001504.096:5660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28308 comm="syz.2.4540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f703138eba9 code=0x7ffc0000
[ 2238.247292][   T30] audit: type=1326 audit(2000001504.096:5661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28308 comm="syz.2.4540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f703138eba9 code=0x7ffc0000
[ 2238.272106][T28340] hsr_slave_0: left promiscuous mode
[ 2238.296475][T28340] hsr_slave_1: left promiscuous mode
[ 2238.320623][T28043] usb 4-1: USB disconnect, device number 51
[ 2238.442684][   T30] audit: type=1326 audit(2000001504.096:5662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28308 comm="syz.2.4540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f703138eba9 code=0x7ffc0000
[ 2239.967573][T28360] netlink: 'syz.0.4546': attribute type 2 has an invalid length.
[ 2242.591089][T28405] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4553'.
[ 2242.726348][T16565] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[ 2242.812047][T28414] netlink: 356 bytes leftover after parsing attributes in process `syz.4.4555'.
[ 2242.843265][T28414] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[ 2242.886592][T28414] SELinux: failed to load policy
[ 2242.902272][T16565] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2242.986528][T16565] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2243.085697][T16565] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 2243.118731][T16565] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2243.155233][T16565] usb 4-1: Product: syz
[ 2243.167334][T16565] usb 4-1: Manufacturer: syz
[ 2243.188957][T16565] usb 4-1: SerialNumber: syz
[ 2243.290492][T16565] usb 4-1: config 0 descriptor??
[ 2243.310626][T16565] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22
[ 2243.655621][T28093] udevd[28093]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2243.739094][T28437] netlink: 'syz.2.4559': attribute type 2 has an invalid length.
[ 2244.299120][T28442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4558'.
[ 2245.495532][   T30] kauditd_printk_skb: 28 callbacks suppressed
[ 2245.495543][   T30] audit: type=1400 audit(2000001512.757:5691): avc:  denied  { write } for  pid=28448 comm="syz.2.4562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 2245.684007][T16565] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[ 2245.721802][T28466] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4560'.
[ 2245.898937][T28466] hsr_slave_0: left promiscuous mode
[ 2246.083717][T28466] hsr_slave_1: left promiscuous mode
[ 2246.097915][T16565] usb 1-1: config 0 has no interfaces?
[ 2246.275655][T16565] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 2246.367583][T28043] usb 4-1: USB disconnect, device number 52
[ 2246.983844][T16565] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2247.077748][T16565] usb 1-1: Product: syz
[ 2247.099205][T16565] usb 1-1: Manufacturer: syz
[ 2247.105337][T16565] usb 1-1: SerialNumber: syz
[ 2247.124180][T16565] usb 1-1: config 0 descriptor??
[ 2247.647044][T28478] IPVS: Unknown mcast interface: vcan0
[ 2249.226989][T28043] usb 1-1: USB disconnect, device number 56
[ 2250.400030][T28517] netlink: 356 bytes leftover after parsing attributes in process `syz.1.4576'.
[ 2250.461407][T28517] SELinux: failed to load policy
[ 2250.679235][T28043] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[ 2250.884926][T28043] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2250.904581][T28043] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2250.973324][T28043] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 2251.002392][T28043] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2251.032092][T28043] usb 1-1: Product: syz
[ 2251.036760][T28043] usb 1-1: Manufacturer: syz
[ 2251.050881][T28043] usb 1-1: SerialNumber: syz
[ 2251.130650][T28043] usb 1-1: config 0 descriptor??
[ 2252.274024][T16565] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[ 2252.282232][T16559] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[ 2252.282291][T16559] dvb_usb_az6027 2-1:0.0: probe with driver dvb_usb_az6027 failed with error -110
[ 2252.509387][T16559] usb 2-1: USB disconnect, device number 53
[ 2252.563283][T28043] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22
[ 2252.595624][T16565] usb 4-1: config 0 has no interfaces?
[ 2252.665127][T16565] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 2252.675038][T16565] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2252.683965][T16565] usb 4-1: Product: syz
[ 2252.702409][T16565] usb 4-1: Manufacturer: syz
[ 2252.710918][T16565] usb 4-1: SerialNumber: syz
[ 2252.799941][T16565] usb 4-1: config 0 descriptor??
[ 2252.852066][T28093] udevd[28093]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2253.794891][T16559] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[ 2253.950971][T28043] usb 1-1: USB disconnect, device number 57
[ 2253.977164][T16559] usb 2-1: Using ep0 maxpacket: 32
[ 2254.002243][T16559] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2254.022050][T16559] usb 2-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=d4.09
[ 2254.031301][T16559] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2254.045031][T16559] usb 2-1: Product: syz
[ 2254.052789][T16559] usb 2-1: Manufacturer: syz
[ 2254.614326][T16559] usb 2-1: SerialNumber: syz
[ 2254.716955][T28555] syz.0.4584 (28555): drop_caches: 2
[ 2254.723611][T28555] syz.0.4584 (28555): drop_caches: 2
[ 2254.745719][T16559] usb 2-1: config 0 descriptor??
[ 2254.808207][T16559] peak_usb 2-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -22
[ 2254.914162][T16559] peak_usb 2-1:0.0: unable to read PCAN-USB serial number (err -22)
[ 2255.395935][T16559] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -22
[ 2256.923325][T16559] usb 2-1: USB disconnect, device number 54
[ 2256.967159][   T30] audit: type=1326 audit(2000001524.861:5692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28569 comm="syz.4.4587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f018fd8eba9 code=0x7ffc0000
[ 2257.006955][T28572] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[ 2257.062940][T28572] CPU: 1 UID: 0 PID: 28572 Comm: syz.4.4587 Not tainted syzkaller #0 PREEMPT(full) 
[ 2257.062967][T28572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 2257.062979][T28572] Call Trace:
[ 2257.062985][T28572]  <TASK>
[ 2257.062992][T28572]  dump_stack_lvl+0x16c/0x1f0
[ 2257.063020][T28572]  sysfs_warn_dup+0x7f/0xa0
[ 2257.063044][T28572]  sysfs_do_create_link_sd+0x124/0x140
[ 2257.063069][T28572]  sysfs_create_link+0x61/0xc0
[ 2257.063091][T28572]  device_add+0x62c/0x1aa0
[ 2257.063121][T28572]  ? __pfx_device_add+0x10/0x10
[ 2257.063145][T28572]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 2257.063167][T28572]  ? ieee80211_set_bitrate_flags+0x243/0x6b0
[ 2257.063192][T28572]  wiphy_register+0x1df4/0x29f0
[ 2257.063212][T28572]  ? netdev_run_todo+0x864/0x1320
[ 2257.063236][T28572]  ? __dev_printk+0x1b0/0x270
[ 2257.063260][T28572]  ? __pfx_wiphy_register+0x10/0x10
[ 2257.063294][T28572]  ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0
[ 2257.063322][T28572]  ieee80211_register_hw+0x2546/0x4120
[ 2257.063355][T28572]  ? __pfx_ieee80211_register_hw+0x10/0x10
[ 2257.063382][T28572]  ? find_held_lock+0x2b/0x80
[ 2257.063403][T28572]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 2257.063425][T28572]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[ 2257.063447][T28572]  ? __hrtimer_setup+0x176/0x280
[ 2257.063470][T28572]  mac80211_hwsim_new_radio+0x3034/0x54d0
[ 2257.063513][T28572]  ? trace_kmalloc+0x2b/0xd0
[ 2257.063536][T28572]  ? __kmalloc_node_track_caller_noprof+0x23e/0x510
[ 2257.063557][T28572]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 2257.063584][T28572]  ? hwsim_new_radio_nl+0xa0e/0x12c0
[ 2257.063613][T28572]  ? __asan_memcpy+0x3c/0x60
[ 2257.063652][T28572]  hwsim_new_radio_nl+0xb51/0x12c0
[ 2257.063685][T28572]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 2257.063725][T28572]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290
[ 2257.063754][T28572]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290
[ 2257.063788][T28572]  genl_family_rcv_msg_doit+0x206/0x2f0
[ 2257.063818][T28572]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2257.063855][T28572]  ? bpf_lsm_capable+0x9/0x10
[ 2257.063881][T28572]  ? security_capable+0x7e/0x260
[ 2257.063904][T28572]  ? ns_capable+0xd7/0x110
[ 2257.063933][T28572]  genl_rcv_msg+0x55c/0x800
[ 2257.063965][T28572]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2257.063994][T28572]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 2257.064034][T28572]  netlink_rcv_skb+0x158/0x420
[ 2257.064059][T28572]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2257.064087][T28572]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2257.064124][T28572]  ? netlink_deliver_tap+0x1ae/0xd30
[ 2257.064152][T28572]  genl_rcv+0x28/0x40
[ 2257.064176][T28572]  netlink_unicast+0x5a7/0x870
[ 2257.064204][T28572]  ? __pfx_netlink_unicast+0x10/0x10
[ 2257.064228][T28572]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[ 2257.064261][T28572]  netlink_sendmsg+0x8d1/0xdd0
[ 2257.064290][T28572]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2257.064326][T28572]  ____sys_sendmsg+0xa95/0xc70
[ 2257.064355][T28572]  ? copy_msghdr_from_user+0x10a/0x160
[ 2257.064377][T28572]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2257.064416][T28572]  ___sys_sendmsg+0x134/0x1d0
[ 2257.064440][T28572]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2257.064499][T28572]  __sys_sendmsg+0x16d/0x220
[ 2257.064522][T28572]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2257.064557][T28572]  ? __secure_computing+0x28e/0x3b0
[ 2257.064589][T28572]  do_syscall_64+0xcd/0x4e0
[ 2257.064616][T28572]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2257.064640][T28572] RIP: 0033:0x7f018fd8eba9
[ 2257.064656][T28572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2257.064674][T28572] RSP: 002b:00007f0190bef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2257.064693][T28572] RAX: ffffffffffffffda RBX: 00007f018ffd6180 RCX: 00007f018fd8eba9
[ 2257.064705][T28572] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000006
[ 2257.064717][T28572] RBP: 00007f018fe11e19 R08: 0000000000000000 R09: 0000000000000000
[ 2257.064730][T28572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2257.064742][T28572] R13: 00007f018ffd6218 R14: 00007f018ffd6180 R15: 00007fffc3602e58
[ 2257.064770][T28572]  </TASK>
[ 2257.547038][   T30] audit: type=1326 audit(2000001524.861:5693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28569 comm="syz.4.4587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f018fd8eba9 code=0x7ffc0000
[ 2257.593539][T21425] usb 4-1: USB disconnect, device number 53
[ 2257.624569][   T30] audit: type=1326 audit(2000001524.861:5694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28569 comm="syz.4.4587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f018fd8eba9 code=0x7ffc0000
[ 2257.654485][   T30] audit: type=1326 audit(2000001524.861:5695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28569 comm="syz.4.4587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f018fd8eba9 code=0x7ffc0000
[ 2258.253823][   T30] audit: type=1326 audit(2000001524.861:5696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28569 comm="syz.4.4587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f018fd8eba9 code=0x7ffc0000
[ 2258.277424][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2258.657378][   T30] audit: type=1326 audit(2000001524.861:5697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28569 comm="syz.4.4587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f018fd8eba9 code=0x7ffc0000
[ 2258.739595][   T30] audit: type=1326 audit(2000001524.861:5698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28569 comm="syz.4.4587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f018fd8eba9 code=0x7ffc0000
[ 2258.823505][   T30] audit: type=1326 audit(2000001524.861:5699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28569 comm="syz.4.4587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f018fd8eba9 code=0x7ffc0000
[ 2258.963480][T28592] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4590'.
[ 2258.987574][T28592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4590'.
[ 2259.040469][   T30] audit: type=1326 audit(2000001525.470:5700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28569 comm="syz.4.4587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f018fd8eba9 code=0x7ffc0000
[ 2259.338675][   T30] audit: type=1326 audit(2000001525.481:5701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28569 comm="syz.4.4587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f018fd8eba9 code=0x7ffc0000
[ 2259.362152][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2259.406612][T28600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4592'.
[ 2259.761206][T28599] syz.2.4593 (28599): drop_caches: 2
[ 2259.771930][T28599] syz.2.4593 (28599): drop_caches: 2
[ 2260.197711][T28611] sctp: [Deprecated]: syz.1.4595 (pid 28611) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 2260.197711][T28611] Use struct sctp_sack_info instead
[ 2261.035134][T16559] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[ 2261.938695][T16559] usb 1-1: Using ep0 maxpacket: 32
[ 2262.083218][T16559] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 2262.489877][T16559] usb 1-1: config 1 has an invalid descriptor of length 118, skipping remainder of the config
[ 2262.528109][T16559] usb 1-1: config 1 interface 0 altsetting 38 bulk endpoint 0x1 has invalid maxpacket 64
[ 2262.740634][T16559] usb 1-1: config 1 interface 0 altsetting 38 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2262.841863][T16559] usb 1-1: config 1 interface 0 has no altsetting 0
[ 2262.851476][T16559] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 2262.881107][T28640] syz.2.4600 (28640): drop_caches: 2
[ 2262.895362][T16559] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2262.905796][T28640] syz.2.4600 (28640): drop_caches: 2
[ 2262.921201][T16559] usb 1-1: Product: syz
[ 2262.929196][T16559] usb 1-1: Manufacturer: syz
[ 2262.933821][T16559] usb 1-1: SerialNumber: syz
[ 2262.966280][T28618] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 2263.191357][T16559] usb 1-1: USB disconnect, device number 58
[ 2264.165373][T28654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4603'.
[ 2264.411769][T28656] netlink: 356 bytes leftover after parsing attributes in process `syz.0.4605'.
[ 2264.618387][T28661] netlink: 'syz.4.4606': attribute type 2 has an invalid length.
[ 2265.109683][T28656] SELinux: failed to load policy
[ 2265.187883][T28668] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4607'.
[ 2266.806857][T28686] syz.2.4612 (28686): drop_caches: 2
[ 2266.815707][T28686] syz.2.4612 (28686): drop_caches: 2
[ 2266.967116][T28689] ieee802154 phy0 wpan0: encryption failed: -22
[ 2268.411010][T28702] syz.4.4615 (28702): drop_caches: 2
[ 2268.417560][T28702] syz.4.4615 (28702): drop_caches: 2
[ 2268.633753][T28705] program syz.3.4616 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2268.823411][T28708] netlink: 356 bytes leftover after parsing attributes in process `syz.0.4617'.
[ 2268.892428][T16559] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[ 2269.114688][T28719] No control pipe specified
[ 2269.152368][T28720] program syz.2.4619 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2269.230124][T16559] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2269.272583][T16559] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2269.274668][T21425] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[ 2269.389224][T16565] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[ 2269.489523][T21425] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2269.510840][T21425] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2269.564644][T21425] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 2269.584552][T21425] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2269.595064][T16565] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2269.613148][T16565] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2269.661268][T21425] usb 1-1: Product: syz
[ 2269.679543][T21425] usb 1-1: Manufacturer: syz
[ 2269.763420][T16559] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 2269.770138][T21425] usb 1-1: SerialNumber: syz
[ 2269.778713][T16559] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2269.786743][T16559] usb 4-1: Product: syz
[ 2269.791004][T16559] usb 4-1: Manufacturer: syz
[ 2269.795592][T16559] usb 4-1: SerialNumber: syz
[ 2269.803711][T16565] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 2269.942308][T21425] usb 1-1: config 0 descriptor??
[ 2269.951874][T16559] usb 4-1: config 0 descriptor??
[ 2270.010028][T16559] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22
[ 2270.030292][T16565] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2270.180471][T16565] usb 3-1: Product: syz
[ 2270.186549][T28093] udevd[28093]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2270.213367][T16565] usb 3-1: Manufacturer: syz
[ 2270.224679][T16565] usb 3-1: SerialNumber: syz
[ 2270.232157][T21425] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22
[ 2270.328091][T16565] usb 3-1: config 0 descriptor??
[ 2270.471519][T16565] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22
[ 2270.494694][T28093] udevd[28093]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2270.751154][T28092] udevd[28092]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2270.864180][T28726] block nbd4: Attempted send on invalid socket
[ 2270.872509][T28726] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2270.886812][T28726] block nbd4: Attempted send on invalid socket
[ 2270.893679][T28726] I/O error, dev nbd4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2270.903732][T28726] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[ 2270.915049][T28726] block nbd4: Attempted send on invalid socket
[ 2270.922683][T28726] I/O error, dev nbd4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2270.932930][T28726] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[ 2270.949590][T28726] block nbd4: Attempted send on invalid socket
[ 2270.956037][T28726] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2270.967043][T28726] block nbd4: Attempted send on invalid socket
[ 2270.974128][T28726] I/O error, dev nbd4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2270.984370][T28726] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[ 2270.995234][T28726] block nbd4: Attempted send on invalid socket
[ 2271.001895][T28726] I/O error, dev nbd4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2271.012119][T28726] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[ 2271.025965][T28726] block nbd4: Attempted send on invalid socket
[ 2271.032397][T28726] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2271.043255][T28726] block nbd4: Attempted send on invalid socket
[ 2271.049801][T28726] I/O error, dev nbd4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2271.060038][T28726] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[ 2271.070482][T28726] block nbd4: Attempted send on invalid socket
[ 2271.076906][T28726] I/O error, dev nbd4, sector 4096 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2271.087063][T28726] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[ 2271.096960][T28726] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1)
[ 2271.463366][T28728] netlink: 356 bytes leftover after parsing attributes in process `syz.1.4622'.
[ 2271.504457][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[ 2271.606071][T28728] SELinux: failed to load policy
[ 2273.052278][T16565] usb 3-1: USB disconnect, device number 44
[ 2273.105789][T16559] usb 1-1: USB disconnect, device number 59
[ 2273.257145][T28043] usb 4-1: USB disconnect, device number 54
[ 2273.524178][T28756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4628'.
[ 2273.659840][T28758] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4625'.
[ 2273.728183][T28758] hsr_slave_0: left promiscuous mode
[ 2275.188084][T28774] block nbd0: shutting down sockets
[ 2276.747756][T28785] netlink: 356 bytes leftover after parsing attributes in process `syz.2.4634'.
[ 2277.141548][T28797] netlink: 'syz.3.4638': attribute type 29 has an invalid length.
[ 2277.149445][T28797] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4638'.
[ 2280.094693][T16559] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[ 2280.453611][T28816] netlink: 'syz.3.4641': attribute type 2 has an invalid length.
[ 2283.272397][T28847] netlink: 356 bytes leftover after parsing attributes in process `syz.1.4649'.
[ 2283.360020][T28853] SELinux: failed to load policy
[ 2283.526681][T28852] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2284.945967][T28866] program syz.3.4652 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2285.336042][T16565] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[ 2285.434784][T28874] netlink: 'syz.4.4654': attribute type 2 has an invalid length.
[ 2285.861372][T16565] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2285.929046][T16565] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2286.313206][T16565] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 2286.323329][T16565] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2286.332516][T16565] usb 4-1: Product: syz
[ 2286.337796][T16565] usb 4-1: Manufacturer: syz
[ 2286.390813][T28880] netlink: 'syz.0.4656': attribute type 2 has an invalid length.
[ 2286.851097][T16565] usb 4-1: SerialNumber: syz
[ 2286.869502][T16565] usb 4-1: config 0 descriptor??
[ 2286.914261][T16565] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22
[ 2286.932519][T28093] udevd[28093]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2287.250136][T28885] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4655'.
[ 2287.259307][T28885] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4655'.
[ 2288.911094][T28900] syz.2.4660 (28900): drop_caches: 2
[ 2289.049266][T28900] syz.2.4660 (28900): drop_caches: 2
[ 2289.166406][T16559] usb 4-1: USB disconnect, device number 55
[ 2289.465088][T28913] netlink: 'syz.3.4663': attribute type 2 has an invalid length.
[ 2290.009256][T28918] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2290.102290][   T30] kauditd_printk_skb: 31 callbacks suppressed
[ 2290.129908][   T30] audit: type=1400 audit(2000001559.662:5733): avc:  denied  { name_bind } for  pid=28915 comm="syz.0.4664" src=255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[ 2290.906070][T28930] netlink: 'syz.0.4666': attribute type 2 has an invalid length.
[ 2293.093313][T28953] syz.4.4671 (28953): drop_caches: 2
[ 2293.104309][T28953] syz.4.4671 (28953): drop_caches: 2
[ 2293.318580][T28955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4672'.
[ 2296.130635][T28990] Bluetooth: received HCILL_WAKE_UP_IND in state 2
[ 2296.147450][T28990] bond0: (slave ip6_vti0): Error: Device can not be enslaved while up
[ 2296.223966][T21088] Bluetooth: hci5: Frame reassembly failed (-84)
[ 2297.047882][T28999] netlink: 356 bytes leftover after parsing attributes in process `syz.4.4681'.
[ 2297.109294][T28999] SELinux: failed to load policy
[ 2298.138134][ T5853] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 2298.990379][T29026] 9pnet_fd: Insufficient options for proto=fd
[ 2299.004745][T16565] hid-generic 0006:0004:0009.001A: unknown main item tag 0x0
[ 2299.016764][T16565] hid-generic 0006:0004:0009.001A: unknown main item tag 0x0
[ 2299.027710][T16565] hid-generic 0006:0004:0009.001A: unknown main item tag 0x0
[ 2299.037627][T16565] hid-generic 0006:0004:0009.001A: unknown main item tag 0x0
[ 2299.055089][T16565] hid-generic 0006:0004:0009.001A: unknown main item tag 0x0
[ 2299.073309][T16565] hid-generic 0006:0004:0009.001A: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0
[ 2299.321984][T29029] fido_id[29029]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 2299.378659][T29035] netlink: 'syz.3.4688': attribute type 2 has an invalid length.
[ 2300.275908][T29039] netlink: 'syz.3.4689': attribute type 2 has an invalid length.
[ 2301.276192][T29046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4690'.
[ 2301.320704][   T30] audit: type=1400 audit(2000001571.420:5734): avc:  denied  { mounton } for  pid=29045 comm="syz.4.4691" path="/proc/4050/task" dev="proc" ino=106947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[ 2302.021058][   T30] audit: type=1400 audit(2000001572.123:5735): avc:  denied  { attach_queue } for  pid=29045 comm="syz.4.4691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[ 2302.172339][   T30] audit: type=1400 audit(2000001572.123:5736): avc:  denied  { associate } for  pid=29045 comm="syz.4.4691" name="file1" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[ 2302.537488][T29064] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 2302.545212][T29064] IPv6: NLM_F_CREATE should be set when creating new route
[ 2302.552634][T29064] IPv6: NLM_F_CREATE should be set when creating new route
[ 2302.559990][T29064] IPv6: NLM_F_CREATE should be set when creating new route
[ 2302.756905][   T30] audit: type=1400 audit(2000001572.722:5737): avc:  denied  { ioctl } for  pid=29062 comm="syz.3.4694" path="socket:[106979]" dev="sockfs" ino=106979 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[ 2303.748273][T29075] 9pnet_fd: Insufficient options for proto=fd
[ 2303.776448][T16565] hid-generic 0006:0004:0009.001B: unknown main item tag 0x0
[ 2303.783938][T16565] hid-generic 0006:0004:0009.001B: unknown main item tag 0x0
[ 2303.806972][T16565] hid-generic 0006:0004:0009.001B: unknown main item tag 0x0
[ 2303.822208][T16565] hid-generic 0006:0004:0009.001B: unknown main item tag 0x0
[ 2303.837378][T29077] pim6reg1: entered promiscuous mode
[ 2303.843827][T29077] pim6reg1: entered allmulticast mode
[ 2303.886459][T16565] hid-generic 0006:0004:0009.001B: unknown main item tag 0x0
[ 2304.090631][T16567] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[ 2304.243446][T16567] usb 3-1: Using ep0 maxpacket: 8
[ 2304.315925][T16565] hid-generic 0006:0004:0009.001B: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0
[ 2304.349823][T16567] usb 3-1: config 0 has an invalid interface number: 38 but max is 0
[ 2304.376918][T16567] usb 3-1: config 0 has no interface number 0
[ 2304.443038][T16567] usb 3-1: config 0 interface 38 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64
[ 2304.516769][T16567] usb 3-1: config 0 interface 38 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2304.575650][T21425] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[ 2304.595273][T16567] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=f8.63
[ 2304.707564][T16567] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2304.828003][T21425] usb 1-1: config 0 has no interfaces?
[ 2304.838096][T16567] usb 3-1: Product: syz
[ 2304.849966][T16567] usb 3-1: Manufacturer: syz
[ 2304.860002][T21425] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 2304.875163][T16567] usb 3-1: SerialNumber: syz
[ 2304.891249][T21425] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2305.098573][T16567] usb 3-1: config 0 descriptor??
[ 2305.122610][T16567] xbox_remote_probe: Unexpected endpoint_in
[ 2305.131082][T21425] usb 1-1: Product: syz
[ 2305.151456][T21425] usb 1-1: Manufacturer: syz
[ 2305.161690][T21425] usb 1-1: SerialNumber: syz
[ 2305.262856][T21425] usb 1-1: config 0 descriptor??
[ 2305.588198][T29098] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4702'.
[ 2307.446576][T29111] openvswitch: netlink: Flow actions attr not present in new flow.
[ 2308.089163][T16567] usb 1-1: USB disconnect, device number 61
[ 2308.110221][T16559] usb 3-1: USB disconnect, device number 45
[ 2309.250792][T29140] netlink: 356 bytes leftover after parsing attributes in process `syz.2.4712'.
[ 2309.629057][T16559] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[ 2309.693413][T29143] SELinux: failed to load policy
[ 2309.757580][T16559] usb 2-1: device descriptor read/64, error -71
[ 2310.193768][T16559] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[ 2310.262204][T29154] netlink: 'syz.3.4714': attribute type 2 has an invalid length.
[ 2310.809630][T16559] usb 2-1: device descriptor read/64, error -71
[ 2310.942672][T16559] usb usb2-port1: attempt power cycle
[ 2311.396459][T16559] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[ 2311.467451][T16559] usb 2-1: device descriptor read/8, error -71
[ 2312.404988][   T30] audit: type=1400 audit(2000001583.020:5738): avc:  denied  { create } for  pid=29171 comm="syz.1.4718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1
[ 2313.757562][T29183] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4719'.
[ 2314.652870][T29195] netlink: 'syz.0.4722': attribute type 2 has an invalid length.
[ 2315.422326][   T30] audit: type=1400 audit(2000001586.138:5739): avc:  denied  { ioctl } for  pid=29198 comm="syz.3.4725" path="socket:[108372]" dev="sockfs" ino=108372 ioctlcmd=0x8924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[ 2315.853855][   T30] audit: type=1400 audit(2000001586.243:5740): avc:  denied  { write } for  pid=29198 comm="syz.3.4725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[ 2316.304292][T29211] syz.1.4724 (29211): drop_caches: 2
[ 2316.315613][T29211] syz.1.4724 (29211): drop_caches: 2
[ 2316.364196][   T30] audit: type=1400 audit(2000001586.243:5741): avc:  denied  { ioctl } for  pid=29198 comm="syz.3.4725" path="socket:[108373]" dev="sockfs" ino=108373 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[ 2316.597693][T16559] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[ 2316.774968][T16559] usb 4-1: device descriptor read/64, error -71
[ 2317.072829][T16559] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[ 2317.196980][T16559] usb 4-1: device descriptor read/64, error -71
[ 2317.416379][T16559] usb usb4-port1: attempt power cycle
[ 2317.770853][T16559] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[ 2317.875096][T16559] usb 4-1: device descriptor read/8, error -71
[ 2318.178600][T16559] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[ 2318.217568][T16559] usb 4-1: device descriptor read/8, error -71
[ 2318.330639][T16559] usb usb4-port1: unable to enumerate USB device
[ 2319.825315][T29255] macsec0: entered promiscuous mode
[ 2319.862082][T29255] macsec0: left promiscuous mode
[ 2319.870620][T29255] macsec0: left allmulticast mode
[ 2320.195676][T29260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4736'.
[ 2321.512153][T29270] IPVS: Unknown mcast interface: vcan0
[ 2322.286012][T29275] netlink: 356 bytes leftover after parsing attributes in process `syz.3.4742'.
[ 2322.415717][T29283] SELinux: failed to load policy
[ 2322.455856][T29286] ptrace attach of "./syz-executor exec"[5848] was attempted by "./syz-executor exec"[29286]
[ 2323.365003][T29303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4745'.
[ 2323.392167][T29305] syz.2.4746 (29305): drop_caches: 2
[ 2323.409182][T29305] syz.2.4746 (29305): drop_caches: 2
[ 2323.741866][T16567] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[ 2323.887311][T16567] usb 4-1: device descriptor read/64, error -71
[ 2324.122334][T16567] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[ 2324.903730][T16567] usb 4-1: device descriptor read/64, error -71
[ 2325.399325][T16567] usb usb4-port1: attempt power cycle
[ 2325.611680][T29319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4750'.
[ 2325.723711][T16567] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[ 2325.752146][T16567] usb 4-1: device descriptor read/8, error -71
[ 2326.018183][T16567] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[ 2326.038580][T16567] usb 4-1: device descriptor read/8, error -71
[ 2326.132593][T16559] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[ 2326.142051][T16567] usb usb4-port1: unable to enumerate USB device
[ 2326.346351][T29329] netlink: 'syz.1.4752': attribute type 2 has an invalid length.
[ 2326.702785][T16559] usb 1-1: config 0 has no interfaces?
[ 2326.743556][T16559] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 2326.752896][T16559] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2326.778878][T16559] usb 1-1: Product: syz
[ 2326.817129][T16559] usb 1-1: Manufacturer: syz
[ 2326.838980][T16559] usb 1-1: SerialNumber: syz
[ 2326.871132][T16559] usb 1-1: config 0 descriptor??
[ 2327.117451][T29338] syz.3.4753 (29338): drop_caches: 2
[ 2327.144453][T29338] syz.3.4753 (29338): drop_caches: 2
[ 2327.559076][T29346] program syz.2.4756 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2327.852640][T16567] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[ 2328.073491][T16567] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2328.092814][T16567] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2328.178794][T16567] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 2328.188574][T16567] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2328.201213][T16567] usb 3-1: Product: syz
[ 2328.214597][T16567] usb 3-1: Manufacturer: syz
[ 2328.228633][T16567] usb 3-1: SerialNumber: syz
[ 2328.250194][T16567] usb 3-1: config 0 descriptor??
[ 2328.360107][T16567] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22
[ 2328.705694][T16559] hid-generic 0002:10008:0003.001C: unknown main item tag 0x0
[ 2328.713190][T16559] hid-generic 0002:10008:0003.001C: unknown main item tag 0x0
[ 2328.723760][   T30] audit: type=1400 audit(2000001599.964:5742): avc:  denied  { create } for  pid=29347 comm="syz.4.4757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[ 2328.799119][T16559] hid-generic 0002:10008:0003.001C: unknown main item tag 0x0
[ 2328.836370][T28093] udevd[28093]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2328.952145][T16559] hid-generic 0002:10008:0003.001C: unknown main item tag 0x0
[ 2328.990422][   T30] audit: type=1400 audit(2000001599.974:5743): avc:  denied  { setopt } for  pid=29347 comm="syz.4.4757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[ 2329.056030][T16559] hid-generic 0002:10008:0003.001C: unknown main item tag 0x0
[ 2329.264238][T16559] hid-generic 0002:10008:0003.001C: unknown main item tag 0x0
[ 2329.275398][T16556] usb 1-1: USB disconnect, device number 62
[ 2329.468531][T29354] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 2329.669260][T16559] hid-generic 0002:10008:0003.001C: unknown main item tag 0x0
[ 2329.676857][T16559] hid-generic 0002:10008:0003.001C: unknown main item tag 0x0
[ 2329.684337][T16559] hid-generic 0002:10008:0003.001C: unknown main item tag 0x0
[ 2329.691872][T16559] hid-generic 0002:10008:0003.001C: unknown main item tag 0x0
[ 2329.699839][   T30] audit: type=1400 audit(2000001601.066:5744): avc:  denied  { shutdown } for  pid=29351 comm="syz.3.4758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 2329.721120][T16559] hid-generic 0002:10008:0003.001C: hidraw0: <UNKNOWN> HID v200.05 Device [sy

] on syz0
[ 2329.824393][T29355] fido_id[29355]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 2330.040105][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[ 2330.107838][T29363] program syz.4.4760 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2330.226796][T29365] binder: BINDER_SET_CONTEXT_MGR already set
[ 2330.242210][T29365] binder: 29364:29365 ioctl 40046207 0 returned -16
[ 2330.640004][T16567] usb 3-1: USB disconnect, device number 46
[ 2331.114195][T29374] syz.2.4762 (29374): drop_caches: 2
[ 2331.120136][T29374] syz.2.4762 (29374): drop_caches: 2
[ 2331.304913][T16567] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[ 2331.459823][T16567] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 2331.468630][T16567] usb 2-1: can't read configurations, error -61
[ 2331.629091][T16567] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[ 2331.892307][T16567] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 2331.900922][T16567] usb 2-1: can't read configurations, error -61
[ 2331.943465][T16567] usb usb2-port1: attempt power cycle
[ 2332.286092][T16567] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[ 2332.453159][T16567] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 2332.469181][T16567] usb 2-1: can't read configurations, error -61
[ 2332.621234][T16567] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[ 2332.673323][T16567] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 2332.682164][T16567] usb 2-1: can't read configurations, error -61
[ 2332.695865][T16567] usb usb2-port1: unable to enumerate USB device
[ 2333.450207][T29392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4766'.
[ 2333.616217][T29398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4767'.
[ 2335.415846][T29409] vhci_hcd vhci_hcd.0: port 0 already used
[ 2336.573896][T29427] fuse: Unknown parameter 'ÿÿÿÿ0xffffffffffffffff0000000000000000000500000000000000000005¨'
[ 2336.622152][T29427] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2336.973050][T16559] libceph: connect (1)[c::]:6789 error -22
[ 2336.989055][T16559] libceph: mon0 (1)[c::]:6789 connect error
[ 2337.264415][T16559] libceph: connect (1)[c::]:6789 error -22
[ 2337.299632][T29429] ceph: No mds server is up or the cluster is laggy
[ 2337.343652][T16559] libceph: mon0 (1)[c::]:6789 connect error
[ 2337.450964][T29439] netlink: 356 bytes leftover after parsing attributes in process `syz.0.4774'.
[ 2337.536759][T29439] SELinux: failed to load policy
[ 2337.935203][T29451] netlink: 'syz.1.4775': attribute type 2 has an invalid length.
[ 2338.497036][T29459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4777'.
[ 2339.286037][T29470] program syz.4.4780 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2341.503484][T29461] veth0_macvtap: left allmulticast mode
[ 2341.676446][T29489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4782'.
[ 2341.921225][T29489] lo: entered promiscuous mode
[ 2342.070778][T29489] lo: entered allmulticast mode
[ 2342.236432][T29489] tunl0: entered promiscuous mode
[ 2342.275165][T29489] tunl0: entered allmulticast mode
[ 2342.312399][T29489] gre0: entered promiscuous mode
[ 2342.381642][T29489] gre0: entered allmulticast mode
[ 2342.462769][T29489] 0ªî{X¹¦: entered promiscuous mode
[ 2342.508616][T29503] syz.2.4783 (29503): drop_caches: 2
[ 2342.523413][T29503] syz.2.4783 (29503): drop_caches: 2
[ 2342.616972][T29489] 0ªî{X¹¦: entered allmulticast mode
[ 2342.626056][T29489] erspan0: entered promiscuous mode
[ 2342.646327][T29489] erspan0: entered allmulticast mode
[ 2342.670243][T29489] ip_vti0: entered promiscuous mode
[ 2342.684310][T29489] ip_vti0: entered allmulticast mode
[ 2342.713771][T29489] ip6_vti0: entered promiscuous mode
[ 2342.739302][T29489] ip6_vti0: entered allmulticast mode
[ 2342.840376][T29489] sit0: entered promiscuous mode
[ 2342.848636][T29489] sit0: entered allmulticast mode
[ 2342.864518][T29489] ip6tnl0: entered promiscuous mode
[ 2342.904720][T29489] ip6tnl0: entered allmulticast mode
[ 2342.931458][T29489] ip6gre0: entered promiscuous mode
[ 2342.949295][T29489] ip6gre0: entered allmulticast mode
[ 2342.968807][T29489] ip6gretap0: entered promiscuous mode
[ 2342.986727][T29489] ip6gretap0: entered allmulticast mode
[ 2343.009049][T29489] bridge0: entered promiscuous mode
[ 2343.037805][T29489] bridge0: entered allmulticast mode
[ 2343.095686][T29489] vcan0: entered promiscuous mode
[ 2343.218561][T29489] vcan0: entered allmulticast mode
[ 2343.394212][T29489] bond0: entered promiscuous mode
[ 2343.399258][T29489] bond_slave_0: entered promiscuous mode
[ 2343.431008][T29489] bond_slave_1: entered promiscuous mode
[ 2343.462070][T29489] bond0: entered allmulticast mode
[ 2343.481272][T29489] team0: entered promiscuous mode
[ 2343.495153][T29489] team_slave_0: entered promiscuous mode
[ 2343.514938][T29489] team_slave_1: entered promiscuous mode
[ 2343.536591][T29489] geneve0: entered promiscuous mode
[ 2343.678665][T29489] team0: entered allmulticast mode
[ 2343.707734][T29489] geneve0: entered allmulticast mode
[ 2343.720995][T29489] dummy0: entered promiscuous mode
[ 2343.730257][T29489] dummy0: entered allmulticast mode
[ 2343.747018][T29489] nlmon0: entered promiscuous mode
[ 2343.872948][T29489] nlmon0: entered allmulticast mode
[ 2343.884283][T29489] caif0: entered promiscuous mode
[ 2343.890454][T29489] caif0: entered allmulticast mode
[ 2343.895564][T29489] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2344.333509][T29521] netlink: 'syz.1.4788': attribute type 2 has an invalid length.
[ 2347.614857][T29529] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2349.482455][T29575] netlink: 'syz.4.4799': attribute type 2 has an invalid length.
[ 2350.391362][T29586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4800'.
[ 2351.427160][T29599] ceph: No mds server is up or the cluster is laggy
[ 2351.449004][T16556] libceph: connect (1)[b::]:6789 error -22
[ 2351.478749][T16556] libceph: mon0 (1)[b::]:6789 connect error
[ 2351.645811][T29608] block nbd4: Attempted send on invalid socket
[ 2351.653152][T29608] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2352.046545][T16567] hid-generic 0000:0003:0001.001D: item fetching failed at offset 0/2
[ 2352.070639][T29608] block nbd4: Attempted send on invalid socket
[ 2352.080410][T16567] hid-generic 0000:0003:0001.001D: probe with driver hid-generic failed with error -22
[ 2352.129124][T29608] I/O error, dev nbd4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2352.140594][T29608] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[ 2352.570099][T29608] block nbd4: Attempted send on invalid socket
[ 2352.576708][T29608] I/O error, dev nbd4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2352.586396][T29608] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[ 2352.597077][T29608] block nbd4: Attempted send on invalid socket
[ 2352.603337][T29608] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2352.612896][T29608] block nbd4: Attempted send on invalid socket
[ 2352.619128][T29608] I/O error, dev nbd4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2352.628782][T29608] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[ 2352.639034][T29608] block nbd4: Attempted send on invalid socket
[ 2352.645314][T29608] I/O error, dev nbd4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2352.654815][T29608] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[ 2352.665027][T29608] block nbd4: Attempted send on invalid socket
[ 2352.671321][T29608] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2352.680874][T29608] block nbd4: Attempted send on invalid socket
[ 2352.687095][T29608] I/O error, dev nbd4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2353.263467][T29608] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[ 2353.294220][T29608] block nbd4: Attempted send on invalid socket
[ 2353.301624][T29608] I/O error, dev nbd4, sector 4096 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2353.312651][T29608] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[ 2353.323875][T29608] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1)
[ 2353.404960][T16567] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[ 2353.521371][   T30] audit: type=1400 audit(2000001626.199:5745): avc:  denied  { unmount } for  pid=5845 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[ 2353.595498][T16567] usb 4-1: Using ep0 maxpacket: 16
[ 2353.609704][T16567] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2353.722249][T29623] 9pnet_fd: Insufficient options for proto=fd
[ 2353.731123][T16559] hid_parser_main: 18 callbacks suppressed
[ 2353.731135][T16559] hid-generic 0006:0004:0009.001E: unknown main item tag 0x0
[ 2353.755841][T16559] hid-generic 0006:0004:0009.001E: unknown main item tag 0x0
[ 2353.774921][T16559] hid-generic 0006:0004:0009.001E: unknown main item tag 0x0
[ 2353.793282][T16567] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2353.811267][T16559] hid-generic 0006:0004:0009.001E: unknown main item tag 0x0
[ 2353.834197][T16567] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[ 2353.838473][T16559] hid-generic 0006:0004:0009.001E: unknown main item tag 0x0
[ 2353.890135][T16559] hid-generic 0006:0004:0009.001E: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0
[ 2353.992367][T16567] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2354.035661][T16567] usb 4-1: config 0 descriptor??
[ 2354.227334][T29624] fido_id[29624]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 2354.672127][T16567] usbhid 4-1:0.0: can't add hid device: -71
[ 2354.678322][T16567] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 2354.707665][T16567] usb 4-1: USB disconnect, device number 64
[ 2354.812898][T16559] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[ 2355.152629][T16559] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2355.346185][T16559] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2355.373654][T16559] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 2355.388300][T16559] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2355.403965][T16559] usb 3-1: Product: syz
[ 2355.408450][T16559] usb 3-1: Manufacturer: syz
[ 2355.420270][T16559] usb 3-1: SerialNumber: syz
[ 2355.428198][T16559] usb 3-1: config 0 descriptor??
[ 2355.638965][T16567] usb 3-1: USB disconnect, device number 47
[ 2355.792570][T29646] Bluetooth: hci0: expected 2 bytes, got 7 bytes
[ 2357.561998][T29654] netlink: 'syz.4.4817': attribute type 2 has an invalid length.
[ 2358.047903][T29656] dvmrp8: entered allmulticast mode
[ 2358.500710][T29670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4818'.
[ 2358.674278][T29672] netlink: 'syz.4.4819': attribute type 10 has an invalid length.
[ 2358.935488][T29672] 8021q: adding VLAN 0 to HW filter on device team0
[ 2358.944218][T29672] bond0: (slave team0): Enslaving as an active interface with an up link
[ 2359.300201][T29679] 9pnet_fd: Insufficient options for proto=fd
[ 2359.317420][T16567] hid-generic 0006:0004:0009.001F: unknown main item tag 0x0
[ 2359.355462][T16567] hid-generic 0006:0004:0009.001F: unknown main item tag 0x0
[ 2359.389741][T16567] hid-generic 0006:0004:0009.001F: unknown main item tag 0x0
[ 2359.558620][T16567] hid-generic 0006:0004:0009.001F: unknown main item tag 0x0
[ 2359.663426][T16567] hid-generic 0006:0004:0009.001F: unknown main item tag 0x0
[ 2359.694095][T16567] hid-generic 0006:0004:0009.001F: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0
[ 2360.226692][T29685] fido_id[29685]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 2360.257046][T29701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4823'.
[ 2361.941401][T16567] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[ 2363.075232][T16567] usb 4-1: config 0 has no interfaces?
[ 2363.084249][T16567] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 2363.102203][T16567] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2363.112091][T16567] usb 4-1: Product: syz
[ 2363.116569][T16567] usb 4-1: Manufacturer: syz
[ 2363.123952][T16567] usb 4-1: SerialNumber: syz
[ 2363.188515][T16567] usb 4-1: config 0 descriptor??
[ 2363.493247][T29725] netlink: 'syz.2.4829': attribute type 2 has an invalid length.
[ 2365.124924][T29744] 9pnet_fd: Insufficient options for proto=fd
[ 2365.162841][T16559] hid-generic 0006:0004:0009.0020: unknown main item tag 0x0
[ 2365.197549][T16559] hid-generic 0006:0004:0009.0020: unknown main item tag 0x0
[ 2365.335866][T16559] hid-generic 0006:0004:0009.0020: unknown main item tag 0x0
[ 2365.384052][T16559] hid-generic 0006:0004:0009.0020: unknown main item tag 0x0
[ 2365.433811][T16559] hid-generic 0006:0004:0009.0020: unknown main item tag 0x0
[ 2365.462071][T29752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4835'.
[ 2365.517428][T16559] hid-generic 0006:0004:0009.0020: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0
[ 2365.671510][T16567] usb 4-1: USB disconnect, device number 65
[ 2366.095555][T29755] fido_id[29755]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 2368.803078][T29789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4841'.
[ 2368.845297][T29789] lo: left promiscuous mode
[ 2368.935021][T29789] lo: left allmulticast mode
[ 2369.256153][T16559] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[ 2369.282220][T29789] tunl0: left promiscuous mode
[ 2369.348030][T29789] tunl0: left allmulticast mode
[ 2369.428388][T16559] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2369.439336][T16559] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2369.463313][T16559] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 2369.474181][T16559] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2369.488382][T16559] usb 2-1: Product: syz
[ 2369.494087][T16559] usb 2-1: Manufacturer: syz
[ 2369.498843][T16559] usb 2-1: SerialNumber: syz
[ 2369.529027][T16559] usb 2-1: config 0 descriptor??
[ 2370.243037][T29789] gre0: left promiscuous mode
[ 2370.266744][T29789] gre0: left allmulticast mode
[ 2370.301415][T29789] 0ªî{X¹¦: left promiscuous mode
[ 2370.491716][T16559] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22
[ 2370.651382][T28093] udevd[28093]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2370.806429][T29789] 0ªî{X¹¦: left allmulticast mode
[ 2370.844248][T29789] erspan0: left promiscuous mode
[ 2370.870734][T29789] erspan0: left allmulticast mode
[ 2370.901256][T29811] No memory to map
[ 2370.962791][T29789] ip_vti0: left promiscuous mode
[ 2370.992218][T29789] ip_vti0: left allmulticast mode
[ 2371.078968][T29789] ip6_vti0: left promiscuous mode
[ 2371.187527][T29789] ip6_vti0: left allmulticast mode
[ 2371.589490][T29789] sit0: left promiscuous mode
[ 2371.594650][T29789] sit0: left allmulticast mode
[ 2371.603330][T29789] ip6tnl0: left promiscuous mode
[ 2371.610431][T29789] ip6tnl0: left allmulticast mode
[ 2371.618170][T29789] ip6gre0: left promiscuous mode
[ 2371.623247][T29789] ip6gre0: left allmulticast mode
[ 2371.631448][T29789] ip6gretap0: left promiscuous mode
[ 2371.638203][T29789] ip6gretap0: left allmulticast mode
[ 2371.647452][T29789] bridge0: left promiscuous mode
[ 2371.656696][T29789] bridge0: left allmulticast mode
[ 2371.662399][T29789] vcan0: left promiscuous mode
[ 2371.672431][T29789] vcan0: left allmulticast mode
[ 2371.682411][T29789] bond0: left promiscuous mode
[ 2371.688854][T29789] bond_slave_0: left promiscuous mode
[ 2371.696791][T29789] bond_slave_1: left promiscuous mode
[ 2371.705186][T29789] bond0: left allmulticast mode
[ 2371.714421][T29789] team0: left promiscuous mode
[ 2371.720386][T29789] team_slave_0: left promiscuous mode
[ 2371.728336][T29789] team_slave_1: left promiscuous mode
[ 2371.735764][T29789] geneve0: left promiscuous mode
[ 2371.743456][T29789] team0: left allmulticast mode
[ 2371.748589][T29789] geneve0: left allmulticast mode
[ 2371.757235][T29789] dummy0: left promiscuous mode
[ 2371.766358][T29789] dummy0: left allmulticast mode
[ 2371.774170][T29789] nlmon0: left promiscuous mode
[ 2371.782446][T29789] nlmon0: left allmulticast mode
[ 2371.794110][T29789] caif0: left promiscuous mode
[ 2371.800596][T29789] caif0: left allmulticast mode
[ 2371.813615][T29789] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2372.156068][T29823] program syz.2.4848 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2372.562318][   T30] audit: type=1400 audit(2000001645.935:5746): avc:  denied  { mount } for  pid=29819 comm="syz.3.4849" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[ 2372.596180][T28043] usb 2-1: USB disconnect, device number 63
[ 2372.679578][   T30] audit: type=1400 audit(2000001645.945:5747): avc:  denied  { mounton } for  pid=29819 comm="syz.3.4849" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[ 2372.778586][T16559] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[ 2372.926081][   T30] audit: type=1400 audit(2000001646.596:5748): avc:  denied  { unmount } for  pid=5859 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[ 2373.133431][T16559] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2373.161039][T16559] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2373.392290][T29843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4852'.
[ 2373.589638][T16559] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 2373.605549][T16559] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2373.626649][T16559] usb 3-1: Product: syz
[ 2373.661401][T16559] usb 3-1: Manufacturer: syz
[ 2373.699007][T16559] usb 3-1: SerialNumber: syz
[ 2373.755119][T16559] usb 3-1: config 0 descriptor??
[ 2374.075530][T16559] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22
[ 2374.146671][T28093] udevd[28093]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2374.631871][T29852] netlink: 'syz.1.4854': attribute type 2 has an invalid length.
[ 2375.330772][T29861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4856'.
[ 2375.404394][T16567] usb 3-1: USB disconnect, device number 48
[ 2375.571417][T16559] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[ 2375.961504][T16559] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2375.973926][T16559] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 2375.984574][T16559] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2375.996821][T16559] usb 2-1: Product: syz
[ 2376.014173][T16559] usb 2-1: Manufacturer: syz
[ 2376.027648][T16559] usb 2-1: SerialNumber: syz
[ 2376.309104][T16559] usb 2-1: config 0 descriptor??
[ 2376.624393][T16559] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22
[ 2376.647898][T16559] usb 2-1: USB disconnect, device number 64
[ 2376.673325][T28093] udevd[28093]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2377.352153][T29886] 8021q: adding VLAN 0 to HW filter on device bond3
[ 2378.202056][T29890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4862'.
[ 2378.974157][T29890] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2379.044622][T29890] 8021q: adding VLAN 0 to HW filter on device team0
[ 2379.149459][T29890] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2379.289083][T29901] syz.2.4865 (29901): drop_caches: 2
[ 2379.309429][T29901] syz.2.4865 (29901): drop_caches: 2
[ 2379.449820][T29899] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2380.122773][T29911] program syz.2.4867 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2380.618103][T16556] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[ 2380.865406][T16556] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2380.881226][T16556] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2381.099182][T16556] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 2381.257168][T16556] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2381.357306][T16556] usb 3-1: Product: syz
[ 2381.370868][T16556] usb 3-1: Manufacturer: syz
[ 2381.459859][T16556] usb 3-1: SerialNumber: syz
[ 2381.557181][T16556] usb 3-1: config 0 descriptor??
[ 2381.641694][T29931] syz.0.4871 (29931): drop_caches: 2
[ 2381.649506][T29931] syz.0.4871 (29931): drop_caches: 2
[ 2382.053936][T16556] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22
[ 2382.312384][T28093] udevd[28093]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2383.138243][T29941] netlink: 'syz.3.4873': attribute type 2 has an invalid length.
[ 2383.635771][T16567] usb 3-1: USB disconnect, device number 49
[ 2384.903741][T29962] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4878'.
[ 2384.938705][T29962] lo speed is unknown, defaulting to 1000
[ 2384.946690][T29962] lo speed is unknown, defaulting to 1000
[ 2384.953157][T29962] lo speed is unknown, defaulting to 1000
[ 2384.953182][T16567] usb 2-1: new full-speed USB device number 65 using dummy_hcd
[ 2384.959956][T29960] syz.4.4877 (29960): drop_caches: 2
[ 2384.980567][T29962] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[ 2384.982990][T29958] netlink: 356 bytes leftover after parsing attributes in process `syz.2.4879'.
[ 2385.036488][T29958] SELinux: failed to load policy
[ 2385.052481][T29960] syz.4.4877 (29960): drop_caches: 2
[ 2385.107391][T29962] lo speed is unknown, defaulting to 1000
[ 2385.128142][T29962] lo speed is unknown, defaulting to 1000
[ 2385.136399][T16567] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 2385.141948][T29962] lo speed is unknown, defaulting to 1000
[ 2385.151607][T29962] lo speed is unknown, defaulting to 1000
[ 2385.165274][T29962] lo speed is unknown, defaulting to 1000
[ 2385.191958][T16567] usb 2-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config
[ 2385.243140][T16567] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 2385.263303][T16567] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 64
[ 2385.315633][T16567] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 2385.326931][T16567] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 2385.353625][T16567] usb 2-1: Product: syz
[ 2385.376371][T16567] usb 2-1: Manufacturer: syz
[ 2385.403913][T16567] cdc_wdm 2-1:1.0: skipping garbage
[ 2385.409168][T16567] cdc_wdm 2-1:1.0: skipping garbage
[ 2385.418741][T16567] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[ 2385.426338][T16567] cdc_wdm 2-1:1.0: Unknown control protocol
[ 2385.657007][T16556] usb 2-1: USB disconnect, device number 65
[ 2385.717406][   T30] audit: type=1400 audit(2000001659.960:5749): avc:  denied  { read write } for  pid=29943 comm="syz.1.4874" name="cdc-wdm0" dev="devtmpfs" ino=4204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[ 2385.953738][   T30] audit: type=1400 audit(2000001659.960:5750): avc:  denied  { open } for  pid=29943 comm="syz.1.4874" path="/dev/cdc-wdm0" dev="devtmpfs" ino=4204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[ 2386.051283][T29975] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 2386.960324][T29978] netlink: 356 bytes leftover after parsing attributes in process `syz.1.4882'.
[ 2387.061652][T29995] program syz.4.4885 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2387.567519][T30002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4886'.
[ 2388.459691][T30002] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2388.536036][T30008] No memory to map
[ 2388.554821][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[ 2388.575710][T16567] lo speed is unknown, defaulting to 1000
[ 2388.951279][T30013] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2389.332228][T30023] geneve2: entered promiscuous mode
[ 2389.346768][T30023] geneve2: entered allmulticast mode
[ 2389.438819][   T30] audit: type=1400 audit(2000001663.760:5751): avc:  denied  { setopt } for  pid=30016 comm="syz.0.4890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[ 2389.941593][T30036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4891'.
[ 2391.316561][T16556] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[ 2391.481667][T30052] syz.1.4895 (30052): drop_caches: 2
[ 2391.487593][T16556] usb 4-1: Using ep0 maxpacket: 32
[ 2391.499415][T16556] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 2391.670978][T30052] syz.1.4895 (30052): drop_caches: 2
[ 2391.724308][T16556] usb 4-1: config 1 has an invalid descriptor of length 118, skipping remainder of the config
[ 2391.735307][T16556] usb 4-1: config 1 interface 0 altsetting 38 bulk endpoint 0x1 has invalid maxpacket 64
[ 2391.753556][T16556] usb 4-1: config 1 interface 0 altsetting 38 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2391.787476][T16556] usb 4-1: config 1 interface 0 has no altsetting 0
[ 2391.846265][T16556] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 2391.861141][T16556] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2391.928950][T30057] syz.2.4896 (30057): drop_caches: 2
[ 2391.936302][T30057] syz.2.4896 (30057): drop_caches: 2
[ 2391.964068][T16556] usb 4-1: Product: syz
[ 2391.976104][T16556] usb 4-1: Manufacturer: syz
[ 2392.161387][T16556] usb 4-1: SerialNumber: syz
[ 2392.178320][T30045] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 2392.415682][T16556] usb 4-1: USB disconnect, device number 66
[ 2393.747131][   T30] audit: type=1400 audit(2000001668.411:5752): avc:  denied  { accept } for  pid=30064 comm="syz.1.4899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[ 2394.716507][T30088] macsec0: entered promiscuous mode
[ 2394.721785][T30088] macsec0: entered allmulticast mode
[ 2394.736594][T30088] veth1_macvtap: entered allmulticast mode
[ 2394.745682][T30088] macsec0: left promiscuous mode
[ 2394.752350][T30088] macsec0: left allmulticast mode
[ 2394.757478][T30088] veth1_macvtap: left allmulticast mode
[ 2395.582325][T30095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4903'.
[ 2396.343222][T30118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4905'.
[ 2396.391238][T30119] block nbd0: Attempted send on invalid socket
[ 2396.410728][T30119] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[ 2396.421444][T16556] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[ 2396.557037][T30119] hfsplus: unable to find HFS+ superblock
[ 2396.687552][T16556] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 2396.702850][T30124] 9pnet_fd: Insufficient options for proto=fd
[ 2396.712383][T16567] hid-generic 0006:0004:0009.0021: unknown main item tag 0x0
[ 2396.721060][T16567] hid-generic 0006:0004:0009.0021: unknown main item tag 0x0
[ 2396.732126][T16567] hid-generic 0006:0004:0009.0021: unknown main item tag 0x0
[ 2396.758968][T16556] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 2396.787158][T16556] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2396.807068][T16556] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 2396.813140][T16567] hid-generic 0006:0004:0009.0021: unknown main item tag 0x0
[ 2396.847911][T16567] hid-generic 0006:0004:0009.0021: unknown main item tag 0x0
[ 2396.856511][T16556] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2396.863912][T16567] hid-generic 0006:0004:0009.0021: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0
[ 2397.064841][T30125] fido_id[30125]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 2397.081562][T16556] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[ 2397.129985][T16556] usb 2-1: invalid MIDI out EP 0
[ 2397.223773][T30106] delete_channel: no stack
[ 2397.386495][T30131] syz.3.4909 (30131): drop_caches: 2
[ 2397.399808][T30131] syz.3.4909 (30131): drop_caches: 2
[ 2397.572488][T30132] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[ 2397.583032][T30132] SELinux: failed to load policy
[ 2397.926280][T16556] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22
[ 2398.030903][T16556] usb 2-1: USB disconnect, device number 66
[ 2398.662548][T30145] syz.4.4911 (30145): drop_caches: 2
[ 2398.668223][T30145] syz.4.4911 (30145): drop_caches: 2
[ 2398.972730][T30147] syz.2.4913 (30147): drop_caches: 2
[ 2398.991284][T30147] syz.2.4913 (30147): drop_caches: 2
[ 2399.296498][T30155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4915'.
[ 2400.021485][T30173] netlink: 'syz.0.4917': attribute type 2 has an invalid length.
[ 2400.036258][T30173] netlink: 119 bytes leftover after parsing attributes in process `syz.0.4917'.
[ 2400.140356][T30166] 8021q: adding VLAN 0 to HW filter on device bond8
[ 2401.050835][T30164] block nbd3: Attempted send on invalid socket
[ 2401.057044][T30164] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2401.066774][T30164] block nbd3: Attempted send on invalid socket
[ 2401.072984][T30164] I/O error, dev nbd3, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2401.082653][T30164] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[ 2401.092609][T30164] block nbd3: Attempted send on invalid socket
[ 2401.098876][T30164] I/O error, dev nbd3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2401.108228][T30164] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[ 2401.118977][T30164] block nbd3: Attempted send on invalid socket
[ 2401.125260][T30164] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2401.137492][T30164] block nbd3: Attempted send on invalid socket
[ 2401.143674][T30164] I/O error, dev nbd3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2401.153165][T30164] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[ 2401.163255][T30164] block nbd3: Attempted send on invalid socket
[ 2401.169452][T30164] I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2401.179017][T30164] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[ 2401.189545][T30164] block nbd3: Attempted send on invalid socket
[ 2401.195738][T30164] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2401.205160][T30164] block nbd3: Attempted send on invalid socket
[ 2401.211317][T30164] I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2401.222689][T30164] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[ 2401.242286][T30164] block nbd3: Attempted send on invalid socket
[ 2401.248470][T30164] I/O error, dev nbd3, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2401.263957][T30164] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[ 2401.282338][T30164] block nbd3: Attempted send on invalid socket
[ 2401.288549][T30164] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2401.463990][T30164] block nbd3: Attempted send on invalid socket
[ 2401.880401][T30164] I/O error, dev nbd3, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2401.927928][T30164] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[ 2401.937852][T30164] block nbd3: Attempted send on invalid socket
[ 2401.944045][T30164] I/O error, dev nbd3, sector 4096 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2401.953659][T30164] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[ 2401.963174][T30164] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1)
[ 2403.623114][T30201] netlink: 'syz.0.4923': attribute type 2 has an invalid length.
[ 2404.859546][T30213] netlink: 'syz.3.4925': attribute type 2 has an invalid length.
[ 2405.243831][T30214] syz.0.4926 (30214): drop_caches: 2
[ 2405.255662][T30214] syz.0.4926 (30214): drop_caches: 2
[ 2405.376484][T30215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4927'.
[ 2405.689279][T30215] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2405.982003][T30227] syz.2.4929 (30227): drop_caches: 2
[ 2405.988781][T30227] syz.2.4929 (30227): drop_caches: 2
[ 2406.974789][T30232] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2407.955350][T30238] syz.4.4931 (30238): drop_caches: 2
[ 2408.387197][T30238] syz.4.4931 (30238): drop_caches: 2
[ 2408.450374][T30247] syz.2.4932 (30247): drop_caches: 2
[ 2408.462694][T30247] syz.2.4932 (30247): drop_caches: 2
[ 2408.686115][T30254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4934'.
[ 2409.509048][T30263] netlink: 'syz.3.4937': attribute type 2 has an invalid length.
[ 2409.984681][T30264] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4935'.
[ 2410.885634][T30264] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2411.995760][T16556] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[ 2412.190648][T16556] usb 1-1: config 0 has no interfaces?
[ 2412.861472][T16556] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 2413.013557][T16556] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2413.122228][T16556] usb 1-1: Product: syz
[ 2413.124579][T30302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4943'.
[ 2413.553628][T30311] syz.4.4945 (30311): drop_caches: 2
[ 2413.678762][T30311] syz.4.4945 (30311): drop_caches: 2
[ 2413.711302][T16556] usb 1-1: Manufacturer: syz
[ 2413.728134][T30302] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2413.735391][T16556] usb 1-1: SerialNumber: syz
[ 2413.901292][T16556] usb 1-1: config 0 descriptor??
[ 2414.441875][T16556] usb 1-1: can't set config #0, error -71
[ 2414.535329][T16556] usb 1-1: USB disconnect, device number 63
[ 2414.605493][   T30] audit: type=1400 audit(2000001690.331:5753): avc:  denied  { write } for  pid=30315 comm="syz.3.4946" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[ 2415.309222][T30327] netlink: 'syz.2.4948': attribute type 2 has an invalid length.
[ 2416.630456][T30335] random: crng reseeded on system resumption
[ 2417.110222][   T30] audit: type=1400 audit(2000001692.409:5754): avc:  denied  { bind } for  pid=30331 comm="syz.2.4950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[ 2417.157437][   T30] audit: type=1400 audit(2000001692.493:5755): avc:  denied  { ioctl } for  pid=30331 comm="syz.2.4950" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[ 2418.141848][T30351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4952'.
[ 2418.514379][T30353] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4953'.
[ 2418.588144][T30351] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2419.224186][T30369] syz.1.4957 (30369): drop_caches: 2
[ 2419.231128][T30369] syz.1.4957 (30369): drop_caches: 2
[ 2419.537888][T30376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4955'.
[ 2419.615889][T30377] netlink: 'syz.4.4958': attribute type 2 has an invalid length.
[ 2422.108455][T30394] syz.3.4961 (30394): drop_caches: 2
[ 2422.167678][T30394] syz.3.4961 (30394): drop_caches: 2
[ 2426.184454][T30450] block nbd3: Attempted send on invalid socket
[ 2426.192680][T30450] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2426.205896][T30450] isofs_fill_super: bread failed, dev=nbd3, iso_blknum=16, block=32
[ 2426.263171][T30451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4970'.
[ 2427.051718][T30460] netlink: 'syz.1.4972': attribute type 2 has an invalid length.
[ 2427.444464][T30450] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4971'.
[ 2428.087940][T30467] syz.1.4973 (30467): drop_caches: 2
[ 2428.104907][T30467] syz.1.4973 (30467): drop_caches: 2
[ 2430.054676][T30486] program syz.1.4977 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2430.198679][T30497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4978'.
[ 2430.349583][T16556] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[ 2430.688543][T16556] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2430.705577][T16556] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2430.712173][T30504] syz.2.4981 (30504): drop_caches: 2
[ 2430.749661][T16556] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 2430.759816][T16556] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2430.770349][T16556] usb 2-1: Product: syz
[ 2430.775902][T16556] usb 2-1: Manufacturer: syz
[ 2430.779241][T30504] syz.2.4981 (30504): drop_caches: 2
[ 2430.781070][T16556] usb 2-1: SerialNumber: syz
[ 2430.794756][T16556] usb 2-1: config 0 descriptor??
[ 2430.907387][T16556] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22
[ 2431.153354][T30510] netlink: 'syz.2.4983': attribute type 2 has an invalid length.
[ 2431.497177][T30418] udevd[30418]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2431.867908][T30514] CUSE: info not properly terminated
[ 2431.878758][   T30] audit: type=1400 audit(2000001708.461:5756): avc:  denied  { write } for  pid=30506 comm="syz.0.4982" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[ 2431.929282][   T30] audit: type=1400 audit(2000001708.461:5757): avc:  denied  { map } for  pid=30506 comm="syz.0.4982" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[ 2432.005040][   T30] audit: type=1400 audit(2000001708.461:5758): avc:  denied  { execute } for  pid=30506 comm="syz.0.4982" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[ 2432.224724][   T30] audit: type=1400 audit(2000001708.482:5759): avc:  denied  { create } for  pid=30506 comm="syz.0.4982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[ 2432.943122][T16567] usb 2-1: USB disconnect, device number 67
[ 2433.300669][T30533] netlink: 'syz.3.4987': attribute type 3 has an invalid length.
[ 2433.309910][T30533] netlink: 'syz.3.4987': attribute type 1 has an invalid length.
[ 2433.319663][T30533] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.4987'.
[ 2433.400974][T16567] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[ 2433.857787][T16567] usb 2-1: Using ep0 maxpacket: 32
[ 2433.944335][T16567] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 2433.970105][T21425] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[ 2434.022508][T30545] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4989'.
[ 2434.096277][T16567] usb 2-1: config 1 has an invalid descriptor of length 118, skipping remainder of the config
[ 2434.132119][T16567] usb 2-1: config 1 interface 0 altsetting 38 bulk endpoint 0x1 has invalid maxpacket 64
[ 2434.191305][T21425] usb 4-1: Using ep0 maxpacket: 32
[ 2434.273149][T30548] syz.0.4990 (30548): drop_caches: 2
[ 2434.317167][T30548] syz.0.4990 (30548): drop_caches: 2
[ 2434.322513][T16567] usb 2-1: config 1 interface 0 altsetting 38 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2434.357221][T21425] usb 4-1: config 0 has an invalid descriptor of length 117, skipping remainder of the config
[ 2434.416283][T21425] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2434.430424][T16567] usb 2-1: config 1 interface 0 has no altsetting 0
[ 2434.470091][T21425] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[ 2434.497598][T16567] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 2434.584463][T16567] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2434.593666][T21425] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2434.648468][T16567] usb 2-1: Product: syz
[ 2434.671589][T21425] usb 4-1: Product: syz
[ 2434.694214][T16567] usb 2-1: Manufacturer: syz
[ 2434.736116][T21425] usb 4-1: Manufacturer: syz
[ 2434.770367][T16567] usb 2-1: SerialNumber: syz
[ 2434.776673][T21425] usb 4-1: SerialNumber: syz
[ 2434.846155][T30526] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 2434.932768][T21425] usb 4-1: config 0 descriptor??
[ 2435.091387][T16567] usb 2-1: USB disconnect, device number 68
[ 2436.393190][T16567] usb 4-1: USB disconnect, device number 67
[ 2436.534881][T30566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4993'.
[ 2437.276035][T30576] fuse: Bad value for 'fd'
[ 2438.041291][T30583] 9pnet_fd: Insufficient options for proto=fd
[ 2438.197384][T28043] hid-generic 0006:0004:0009.0022: unknown main item tag 0x0
[ 2438.214369][T28043] hid-generic 0006:0004:0009.0022: unknown main item tag 0x0
[ 2438.222321][T28043] hid-generic 0006:0004:0009.0022: unknown main item tag 0x0
[ 2438.662815][T16556] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[ 2438.871135][T28043] hid-generic 0006:0004:0009.0022: unknown main item tag 0x0
[ 2438.878954][T28043] hid-generic 0006:0004:0009.0022: unknown main item tag 0x0
[ 2438.886514][T16556] usb 3-1: Using ep0 maxpacket: 32
[ 2438.894274][T16556] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 2438.906534][T16556] usb 3-1: config 1 has an invalid descriptor of length 118, skipping remainder of the config
[ 2439.515630][T28043] hid-generic 0006:0004:0009.0022: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0
[ 2439.525252][T16556] usb 3-1: config 1 interface 0 altsetting 38 bulk endpoint 0x1 has invalid maxpacket 64
[ 2439.536695][T16556] usb 3-1: config 1 interface 0 altsetting 38 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2439.553389][T16556] usb 3-1: config 1 interface 0 has no altsetting 0
[ 2439.563092][T16556] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 2439.572429][T16556] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2439.580475][T16556] usb 3-1: Product: syz
[ 2439.585203][T16556] usb 3-1: Manufacturer: syz
[ 2439.589814][T16556] usb 3-1: SerialNumber: syz
[ 2439.647893][T30585] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 2439.726096][T30601] fido_id[30601]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 2440.242680][T16556] usb 3-1: USB disconnect, device number 50
[ 2441.154742][T30613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5005'.
[ 2442.233900][T30627] syz.2.5006 (30627): drop_caches: 2
[ 2444.432573][T30656] syz.1.5013 (30656): drop_caches: 2
[ 2444.443748][T30656] syz.1.5013 (30656): drop_caches: 2
[ 2445.677794][T30667] syz.3.5015 (30667): drop_caches: 2
[ 2445.683897][T30667] syz.3.5015 (30667): drop_caches: 2
[ 2445.775581][T30669] 9pnet_fd: Insufficient options for proto=fd
[ 2445.788438][T16567] hid-generic 0006:0004:0009.0023: unknown main item tag 0x0
[ 2445.804361][T16567] hid-generic 0006:0004:0009.0023: unknown main item tag 0x0
[ 2445.825806][T16567] hid-generic 0006:0004:0009.0023: unknown main item tag 0x0
[ 2445.918758][T16567] hid-generic 0006:0004:0009.0023: unknown main item tag 0x0
[ 2446.530882][T16567] hid-generic 0006:0004:0009.0023: unknown main item tag 0x0
[ 2446.572181][T16567] hid-generic 0006:0004:0009.0023: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0
[ 2447.086750][T30682] netlink: 'syz.1.5020': attribute type 2 has an invalid length.
[ 2447.417845][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[ 2448.296576][T30691] syz.1.5022 (30691): drop_caches: 2
[ 2448.319565][T30691] syz.1.5022 (30691): drop_caches: 2
[ 2448.700479][T30696] syz.4.5023 (30696): drop_caches: 2
[ 2448.708854][T30696] syz.4.5023 (30696): drop_caches: 2
[ 2449.577934][T30703] program syz.3.5025 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2449.812494][T28043] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[ 2450.362692][T28043] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2450.373152][T28043] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2450.407099][T28043] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 2450.520718][T28043] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2450.531395][T28043] usb 4-1: Product: syz
[ 2450.537406][T28043] usb 4-1: Manufacturer: syz
[ 2450.542222][T28043] usb 4-1: SerialNumber: syz
[ 2450.555095][T28043] usb 4-1: config 0 descriptor??
[ 2450.775485][T30716] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 2450.782719][T30716] IPv6: NLM_F_CREATE should be set when creating new route
[ 2450.789994][T30716] IPv6: NLM_F_CREATE should be set when creating new route
[ 2450.797258][T30716] IPv6: NLM_F_CREATE should be set when creating new route
[ 2451.173197][T28043] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22
[ 2451.295989][T30524] udevd[30524]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2452.101070][T30724] 9pnet_fd: Insufficient options for proto=fd
[ 2452.110434][T16567] hid-generic 0006:0004:0009.0024: unknown main item tag 0x0
[ 2452.121874][T16567] hid-generic 0006:0004:0009.0024: unknown main item tag 0x0
[ 2452.195177][T16567] hid-generic 0006:0004:0009.0024: unknown main item tag 0x0
[ 2452.261352][T30726] syz.2.5031 (30726): drop_caches: 2
[ 2452.269231][T30726] syz.2.5031 (30726): drop_caches: 2
[ 2452.391550][T16567] hid-generic 0006:0004:0009.0024: unknown main item tag 0x0
[ 2452.411215][T30717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5027'.
[ 2452.424584][T16567] hid-generic 0006:0004:0009.0024: unknown main item tag 0x0
[ 2452.444410][T16567] hid-generic 0006:0004:0009.0024: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0
[ 2452.949618][T30717] batadv_slave_0: left promiscuous mode
[ 2452.962840][T30728] fido_id[30728]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 2453.056826][T30717] 0ªX¹¦D: left allmulticast mode
[ 2453.131847][T30717] bridge1: left allmulticast mode
[ 2453.158102][T30717] batadv1: left promiscuous mode
[ 2453.179603][T30717] ip6erspan0: left promiscuous mode
[ 2453.205006][T28043] usb 4-1: USB disconnect, device number 68
[ 2453.224319][T30717] geneve2: left allmulticast mode
[ 2453.480272][T30740] blktrace: Concurrent blktraces are not allowed on loop6
[ 2453.981466][T30717] bridge10: left promiscuous mode
[ 2455.048279][T21088] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2455.447994][T21088] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2455.565973][T28991] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2455.652453][T28991] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2455.677444][T28991] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2455.700146][T28991] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2455.723057][T28991] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2455.801929][T21088] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2455.815122][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2455.858564][T30764] syz.3.5038 (30764): drop_caches: 2
[ 2455.865484][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2455.877459][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2455.895242][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2455.903889][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2456.023977][   T30] audit: type=1400 audit(2000001733.740:5760): avc:  denied  { mounton } for  pid=30761 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[ 2456.125883][T30764] syz.3.5038 (30764): drop_caches: 2
[ 2456.227462][T30771] syz.4.5039 (30771): drop_caches: 2
[ 2456.258991][T30771] syz.4.5039 (30771): drop_caches: 2
[ 2456.425520][T21088] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2456.450641][T30761] lo speed is unknown, defaulting to 1000
[ 2456.580577][T30761] lo speed is unknown, defaulting to 1000
[ 2456.648033][T21088] bridge_slave_1: left promiscuous mode
[ 2456.664220][T21088] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2456.777680][T21088] bridge_slave_0: left promiscuous mode
[ 2456.783456][T21088] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2457.704119][T30790] netlink: 356 bytes leftover after parsing attributes in process `syz.3.5042'.
[ 2457.735786][T30793] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5041'.
[ 2457.770085][T30794] SELinux: failed to load policy
[ 2457.904214][T28991] Bluetooth: hci2: command tx timeout
[ 2459.007041][T21088] team0: Port device geneve0 removed
[ 2459.422910][T21088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2459.435100][T21088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2459.444415][T21088] bond0 (unregistering): Released all slaves
[ 2459.580744][T21088] bond1 (unregistering): (slave veth0_to_bond): Releasing backup interface
[ 2459.591610][T21088] bond1 (unregistering): Released all slaves
[ 2459.743745][T21088] bond2 (unregistering): Released all slaves
[ 2459.884700][T28991] Bluetooth: hci2: command tx timeout
[ 2459.904790][T21088] bond3 (unregistering): Released all slaves
[ 2460.112797][T21088] bond4 (unregistering): Released all slaves
[ 2460.130579][T21088] bond5 (unregistering): Released all slaves
[ 2460.152036][T30761] wlan0 speed is unknown, defaulting to 1000
[ 2460.181301][T21100] tipc: Resetting bearer <eth:team0>
[ 2460.208742][T30761] lo speed is unknown, defaulting to 1000
[ 2460.754511][T30814] netlink: 'syz.4.5044': attribute type 2 has an invalid length.
[ 2460.868171][   T30] audit: type=1400 audit(2000001738.926:5761): avc:  denied  { setopt } for  pid=30807 comm="syz.1.5046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 2461.865686][T28991] Bluetooth: hci2: command tx timeout
[ 2462.198649][T30761] chnl_net:caif_netlink_parms(): no params data found
[ 2462.358794][T21088] : left promiscuous mode
[ 2462.457059][T30808] syz.3.5045 (30808): drop_caches: 2
[ 2462.758711][T21088] tipc: Disabling bearer <eth:team0>
[ 2462.805461][T21088] tipc: Left network mode
[ 2462.899380][T21088] IPVS: stopping backup sync thread 26259 ...
[ 2462.944637][T30761] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2462.952069][T30761] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2462.959294][T30761] bridge_slave_0: entered allmulticast mode
[ 2462.966918][T30761] bridge_slave_0: entered promiscuous mode
[ 2462.984495][T30761] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2462.993634][T30761] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2463.025285][T30761] bridge_slave_1: entered allmulticast mode
[ 2463.032644][T30761] bridge_slave_1: entered promiscuous mode
[ 2463.085458][T30761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2463.098311][T30761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2463.195642][T30761] team0: Port device team_slave_0 added
[ 2463.217676][T30761] team0: Port device team_slave_1 added
[ 2463.296379][T30761] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2463.318661][T30761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2463.357452][T30761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2463.383802][T30761] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2463.403575][T30761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2463.443093][T30761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2463.575564][T30761] hsr_slave_0: entered promiscuous mode
[ 2463.588079][T30761] hsr_slave_1: entered promiscuous mode
[ 2463.844018][T28991] Bluetooth: hci2: command tx timeout
[ 2464.035356][T21088] pim6reg (unregistering): left allmulticast mode
[ 2464.442267][T21088] team0 (unregistering): Port device team_slave_1 removed
[ 2464.486419][T21088] team0 (unregistering): Port device team_slave_0 removed
[ 2464.949161][T28043] lo speed is unknown, defaulting to 1000
[ 2464.954912][T28043] infiniband syz2: ib_query_port failed (-19)
[ 2465.181715][T30761] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 2465.221507][T30761] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 2465.246039][T30761] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 2465.275865][T30761] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 2465.447124][T30761] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2465.478494][T30761] 8021q: adding VLAN 0 to HW filter on device team0
[ 2465.490548][T21088] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2465.497696][T21088] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2465.526629][T21088] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2465.533793][T21088] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2465.556890][T30761] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 2465.576729][T30761] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2465.832039][T30761] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2466.042571][T30761] veth0_vlan: entered promiscuous mode
[ 2466.056410][T30761] veth1_vlan: entered promiscuous mode
[ 2466.088697][T30761] veth0_macvtap: entered promiscuous mode
[ 2466.098650][T30761] veth1_macvtap: entered promiscuous mode
[ 2466.115687][T30761] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2466.127738][T30761] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2466.145361][T26255] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2466.155237][T26255] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2466.167405][T26255] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2466.178828][T26255] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2466.274409][T26255] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2466.282671][T26255] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2466.315161][T26255] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2466.326133][T26255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2466.338293][   T30] audit: type=1400 audit(2000001744.668:5762): avc:  denied  { mounton } for  pid=30761 comm="syz-executor" path="/root/syzkaller.zQQF2I/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[ 2466.365298][   T30] audit: type=1400 audit(2000001744.689:5763): avc:  denied  { mounton } for  pid=30761 comm="syz-executor" path="/root/syzkaller.zQQF2I/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[ 2466.395354][   T30] audit: type=1400 audit(2000001744.689:5764): avc:  denied  { mounton } for  pid=30761 comm="syz-executor" path="/root/syzkaller.zQQF2I/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=115836 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[ 2466.424095][   T30] audit: type=1400 audit(2000001744.710:5765): avc:  denied  { mounton } for  pid=30761 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[ 2505.605638][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[ 2564.130819][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[ 2575.873189][T28991] Bluetooth: hci2: command 0x0406 tx timeout
[ 2600.099218][   T31] INFO: task kworker/0:0:10611 blocked for more than 143 seconds.
[ 2600.107053][   T31]       Not tainted syzkaller #0
[ 2600.112283][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 2600.120999][   T31] task:kworker/0:0     state:D stack:23048 pid:10611 tgid:10611 ppid:2      task_flags:0x4208060 flags:0x00004000
[ 2600.133157][   T31] Workqueue: usb_hub_wq hub_event
[ 2600.138284][   T31] Call Trace:
[ 2600.141557][   T31]  <TASK>
[ 2600.144575][   T31]  __schedule+0x1190/0x5de0
[ 2600.149188][   T31]  ? __pfx___schedule+0x10/0x10
[ 2600.154040][   T31]  ? find_held_lock+0x2b/0x80
[ 2600.158788][   T31]  ? schedule+0x2d7/0x3a0
[ 2600.163124][   T31]  schedule+0xe7/0x3a0
[ 2600.167221][   T31]  usb_kill_urb+0x253/0x320
[ 2600.172167][   T31]  ? __pfx_usb_kill_urb+0x10/0x10
[ 2600.178940][   T31]  ? __pfx_autoremove_wake_function+0x10/0x10
[ 2600.186005][   T31]  ? lockdep_init_map_type+0xd0/0x280
[ 2600.191408][   T31]  usb_start_wait_urb+0x250/0x4b0
[ 2600.197508][   T31]  ? __pfx_usb_start_wait_urb+0x10/0x10
[ 2600.204275][   T31]  ? __asan_memset+0x23/0x50
[ 2600.208900][   T31]  usb_control_msg+0x326/0x4a0
[ 2600.214311][   T31]  ? __pfx_usb_control_msg+0x10/0x10
[ 2600.219596][   T31]  get_bMaxPacketSize0.constprop.0+0xd0/0x1f0
[ 2600.226251][   T31]  hub_port_init+0x690/0x3a70
[ 2600.230954][   T31]  hub_event+0x2ce1/0x4fe0
[ 2600.236101][   T31]  ? __pfx_hub_event+0x10/0x10
[ 2600.242020][   T31]  ? assoc_array_insert+0x3100/0x3970
[ 2600.247422][   T31]  ? rcu_is_watching+0x12/0xc0
[ 2600.253090][   T31]  process_one_work+0x9cc/0x1b70
[ 2600.258049][   T31]  ? __pfx_hcd_resume_work+0x10/0x10
[ 2600.264581][   T31]  ? __pfx_process_one_work+0x10/0x10
[ 2600.271028][   T31]  ? assign_work+0x1a0/0x250
[ 2600.275632][   T31]  worker_thread+0x6c8/0xf10
[ 2600.281116][   T31]  ? __pfx_worker_thread+0x10/0x10
[ 2600.286258][   T31]  kthread+0x3c2/0x780
[ 2600.291377][   T31]  ? __pfx_kthread+0x10/0x10
[ 2600.295993][   T31]  ? rcu_is_watching+0x12/0xc0
[ 2600.301640][   T31]  ? __pfx_kthread+0x10/0x10
[ 2600.306225][   T31]  ret_from_fork+0x56a/0x730
[ 2600.311915][   T31]  ? __pfx_kthread+0x10/0x10
[ 2600.316522][   T31]  ret_from_fork_asm+0x1a/0x30
[ 2600.321932][   T31]  </TASK>
[ 2600.325016][   T31] 
[ 2600.325016][   T31] Showing all locks held in the system:
[ 2600.333317][   T31] 1 lock held by khungtaskd/31:
[ 2600.339113][   T31]  #0: ffffffff8e5c15a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0
[ 2600.350212][   T31] 2 locks held by getty/5612:
[ 2600.355876][   T31]  #0: ffff88803657a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[ 2600.366414][   T31]  #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0
[ 2600.377712][   T31] 5 locks held by kworker/0:0/10611:
[ 2600.383002][   T31]  #0: ffff88814469b548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[ 2600.394610][   T31]  #1: ffffc9000cdb7d10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[ 2600.407223][   T31]  #2: ffff888145774198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fe0
[ 2600.416843][   T31]  #3: ffff888145777518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2981/0x4fe0
[ 2600.427515][   T31]  #4: ffff88802ae3d468 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x29aa/0x4fe0
[ 2600.438304][   T31] 5 locks held by kworker/u8:28/21088:
[ 2600.444962][   T31]  #0: ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130
[ 2600.455728][   T31]  #1: ffffffff8e5c15a0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x1d5/0x5b0
[ 2600.465743][   T31]  #2: ffff8880b8425b18 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x127/0x1d0
[ 2600.475492][   T31]  #3: ffffffff9b004238 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x14c/0x4c0
[ 2600.486502][   T31]  #4: ffff8880b8425b18 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x127/0x1d0
[ 2600.496634][   T31] 
[ 2600.499745][   T31] =============================================
[ 2600.499745][   T31] 
[ 2600.508963][   T31] NMI backtrace for cpu 1
[ 2600.508979][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[ 2600.509000][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 2600.509010][   T31] Call Trace:
[ 2600.509016][   T31]  <TASK>
[ 2600.509023][   T31]  dump_stack_lvl+0x116/0x1f0
[ 2600.509052][   T31]  nmi_cpu_backtrace+0x27b/0x390
[ 2600.509080][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 2600.509108][   T31]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[ 2600.509128][   T31]  watchdog+0xf0e/0x1260
[ 2600.509152][   T31]  ? __pfx_watchdog+0x10/0x10
[ 2600.509170][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[ 2600.509192][   T31]  ? __kthread_parkme+0x19e/0x250
[ 2600.509218][   T31]  ? __pfx_watchdog+0x10/0x10
[ 2600.509237][   T31]  kthread+0x3c2/0x780
[ 2600.509256][   T31]  ? __pfx_kthread+0x10/0x10
[ 2600.509275][   T31]  ? rcu_is_watching+0x12/0xc0
[ 2600.509297][   T31]  ? __pfx_kthread+0x10/0x10
[ 2600.509315][   T31]  ret_from_fork+0x56a/0x730
[ 2600.509330][   T31]  ? __pfx_kthread+0x10/0x10
[ 2600.509348][   T31]  ret_from_fork_asm+0x1a/0x30
[ 2600.509381][   T31]  </TASK>
[ 2600.509393][   T31] Sending NMI from CPU 1 to CPUs 0:
[ 2600.636373][    C0] NMI backtrace for cpu 0
[ 2600.636388][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[ 2600.636404][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 2600.636412][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[ 2600.636432][    C0] Code: 7d 61 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 66 15 00 fb f4 <e9> cc 09 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
[ 2600.636445][    C0] RSP: 0018:ffffffff8e207e08 EFLAGS: 000002c2
[ 2600.636456][    C0] RAX: 000000000a061a45 RBX: 0000000000000000 RCX: ffffffff8b94ab49
[ 2600.636465][    C0] RDX: 0000000000000000 RSI: ffffffff8de52958 RDI: ffffffff8c163200
[ 2600.636473][    C0] RBP: fffffbfff1c52ef8 R08: 0000000000000001 R09: ffffed1017086655
[ 2600.636481][    C0] R10: ffff8880b84332ab R11: 0000000000000000 R12: 0000000000000000
[ 2600.636489][    C0] R13: ffffffff8e2977c0 R14: ffffffff90ab7190 R15: 0000000000000000
[ 2600.636497][    C0] FS:  0000000000000000(0000) GS:ffff8881246b5000(0000) knlGS:0000000000000000
[ 2600.636510][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2600.636519][    C0] CR2: 0000558742ee1168 CR3: 000000000e380000 CR4: 00000000003526f0
[ 2600.636528][    C0] DR0: 0000000000000002 DR1: 0000000000000002 DR2: 0000000000000008
[ 2600.636536][    C0] DR3: 1000000100000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 2600.636544][    C0] Call Trace:
[ 2600.636549][    C0]  <TASK>
[ 2600.636553][    C0]  default_idle+0x13/0x20
[ 2600.636571][    C0]  default_idle_call+0x6d/0xb0
[ 2600.636588][    C0]  do_idle+0x391/0x510
[ 2600.636606][    C0]  ? __pfx_do_idle+0x10/0x10
[ 2600.636620][    C0]  ? trace_sched_exit_tp+0x2f/0x120
[ 2600.636650][    C0]  cpu_startup_entry+0x4f/0x60
[ 2600.636665][    C0]  rest_init+0x16b/0x2b0
[ 2600.636682][    C0]  ? acpi_subsystem_init+0x133/0x180
[ 2600.636697][    C0]  ? __pfx_x86_late_time_init+0x10/0x10
[ 2600.636713][    C0]  start_kernel+0x3ee/0x4d0
[ 2600.636729][    C0]  x86_64_start_reservations+0x18/0x30
[ 2600.636744][    C0]  x86_64_start_kernel+0x130/0x190
[ 2600.636758][    C0]  common_startup_64+0x13e/0x148
[ 2600.636777][    C0]  </TASK>
[ 2600.637409][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[ 2600.849068][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[ 2600.858168][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 2600.868216][   T31] Call Trace:
[ 2600.871479][   T31]  <TASK>
[ 2600.874393][   T31]  dump_stack_lvl+0x3d/0x1f0
[ 2600.878968][   T31]  vpanic+0x6e8/0x7a0
[ 2600.882936][   T31]  ? __pfx_vpanic+0x10/0x10
[ 2600.887426][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[ 2600.892608][   T31]  panic+0xca/0xd0
[ 2600.896307][   T31]  ? __pfx_panic+0x10/0x10
[ 2600.900708][   T31]  ? preempt_schedule_thunk+0x16/0x30
[ 2600.906081][   T31]  ? nmi_trigger_cpumask_backtrace+0x1b1/0x300
[ 2600.912231][   T31]  ? watchdog+0xd78/0x1260
[ 2600.916639][   T31]  ? watchdog+0xd6b/0x1260
[ 2600.921054][   T31]  watchdog+0xd89/0x1260
[ 2600.925314][   T31]  ? __pfx_watchdog+0x10/0x10
[ 2600.930022][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[ 2600.935228][   T31]  ? __kthread_parkme+0x19e/0x250
[ 2600.940247][   T31]  ? __pfx_watchdog+0x10/0x10
[ 2600.944915][   T31]  kthread+0x3c2/0x780
[ 2600.948968][   T31]  ? __pfx_kthread+0x10/0x10
[ 2600.953539][   T31]  ? rcu_is_watching+0x12/0xc0
[ 2600.958300][   T31]  ? __pfx_kthread+0x10/0x10
[ 2600.962871][   T31]  ret_from_fork+0x56a/0x730
[ 2600.967442][   T31]  ? __pfx_kthread+0x10/0x10
[ 2600.972011][   T31]  ret_from_fork_asm+0x1a/0x30
[ 2600.976779][   T31]  </TASK>
[ 2600.979975][   T31] Kernel Offset: disabled
[ 2600.984275][   T31] Rebooting in 86400 seconds..